@timqi/pier 0.0.17 → 0.0.19

package/dist/web/public/assets/terminal-zLyOvGto.js

@@ -0,0 +1,2 @@
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/ghostty-web-D8CLFi_l.js","assets/index-BFzmvpGX.js","assets/index-yNocr797.css"])))=>i.map(i=>d[i]);
+import{B as e,G as t,H as n,I as r,M as i,a,d as o,i as s,n as c,w as l}from"./index-BFzmvpGX.js";var u=`pier.terminalPrefs`,d={fontFamily:`monospace`,fontSize:14,cursorBlink:!0},f=()=>{try{let e=JSON.parse(localStorage.getItem(u)??`null`),t=typeof e?.fontSize==`number`?e.fontSize:d.fontSize;return{fontFamily:typeof e?.fontFamily==`string`&&e.fontFamily.trim()?e.fontFamily.slice(0,200):d.fontFamily,fontSize:Math.round(Math.max(10,Math.min(24,t))),cursorBlink:typeof e?.cursorBlink==`boolean`?e.cursorBlink:d.cursorBlink}}catch{return{...d}}},p=e=>localStorage.setItem(u,JSON.stringify(e)),m=null,h=()=>(m||=o(()=>import(`./ghostty-web-D8CLFi_l.js`).then(async e=>(await e.init(),e)),__vite__mapDeps([0,1,2])).catch(e=>{throw m=null,e}),m),g=()=>{let e=()=>void h().catch(e=>{console.warn(`terminal: emulator warm-up failed`,e)});`requestIdleCallback`in window?requestIdleCallback(e,{timeout:1e4}):setTimeout(e,3e3)},_={background:`#1a1b26`,foreground:`#a9b1d6`,cursor:`#c0caf5`};function v(e){let t=e.renderer,n=document.createElement(`canvas`).getContext(`2d`);if(!n||typeof t?.remeasureFont!=`function`){console.warn(`terminal: could not correct cell metrics — rows will render tight`);return}t.measureFont=()=>{let{fontSize:t,fontFamily:r}=e.options;n.font=`${t}px ${r}`;let i=n.measureText(`M`),a=i.fontBoundingBoxAscent||i.actualBoundingBoxAscent||t*.8,o=i.fontBoundingBoxDescent||i.actualBoundingBoxDescent||t*.25;return{width:Math.ceil(i.width),height:Math.ceil(a+o),baseline:Math.ceil(a)}},t.remeasureFont()}var y=`w-full rounded border border-neutral-300 px-2 py-1.5 font-mono text-[12px] outline-none focus:border-indigo-400`;function b(o,u,m,b,x,S){g();let C=``,w=null,T=null,E=null,D=!1,O=0,k=!1,A=f(),j=r(`div`,`ml-auto flex min-w-0 flex-none items-center gap-2`),M=r(`header`,`flex h-10 flex-none items-center gap-2 border-b border-neutral-200 bg-white px-3`),N=r(`div`,`min-h-0 flex-1 overflow-hidden p-1`);N.style.background=_.background,N.setAttribute(`data-owns-keyboard`,``),N.addEventListener(`keydown`,e=>{e.metaKey&&!e.defaultPrevented&&e.stopImmediatePropagation()},!0),N.addEventListener(`scroll`,()=>{N.scrollTop=0,N.scrollLeft=0}),N.addEventListener(`compositionend`,()=>{for(let e=N.childNodes.length-1;e>=0;e--){let t=N.childNodes[e];t&&t.nodeName!==`CANVAS`&&t.nodeName!==`TEXTAREA`&&t.remove()}}),o.append(M,N);let P=e=>{let t=r(`button`,`min-w-0 max-w-72 cursor-pointer truncate rounded-md bg-neutral-100 px-2 py-0.5 text-left font-mono text-[11.5px] text-neutral-600 hover:bg-neutral-200`,e);return t.type=`button`,t};function F(e,t){if(j.replaceChildren(),e&&j.append(r(`span`,`min-w-0 truncate text-[11.5px] text-neutral-400`,e)),t){let e=P(t.label);e.className=e.className.replace(`bg-neutral-100`,`bg-indigo-50 font-medium text-indigo-700 hover:bg-indigo-100`),e.onclick=t.run,j.append(e)}}function I(){w&&(w.options.fontFamily=A.fontFamily,w.options.fontSize=A.fontSize,w.options.cursorBlink=A.cursorBlink,requestAnimationFrame(H))}function L(){let i=document.createElement(`input`);i.type=`text`,i.placeholder=`tmux new -As "$(basename $PWD)"`,i.spellcheck=!1,i.autocomplete=`off`,i.autocapitalize=`off`,i.disabled=!0,i.className=`${y} disabled:bg-neutral-50`;let a=r(`span`,`block text-[11.5px] text-neutral-400`,`loading…`),o=(e,t)=>{a.isConnected?l(a,e,t):e===`failed`&&F(t)},s=``;(async()=>{try{s=(await n(`/api/settings`,`Could not load the startup command`)).terminalInitCommand??``,i.value=s,i.disabled=!1,o(`idle`,`Runs when a shell starts — Restart applies it here.`)}catch(e){o(`failed`,String(e))}})();let c=async()=>{let n=i.value.trim();if(!(i.disabled||n===s)){o(`saving`,`saving…`);try{let r=await t(`/api/settings`,{terminalInitCommand:n},`PUT`);if(!r.ok)return o(`failed`,await e(r,`Could not save the startup command`));s=(await r.json()).terminalInitCommand,i.value=s,o(`saved`,s?`Saved — the next shell runs it.`:`Cleared.`)}catch(e){o(`failed`,`Could not save the startup command: ${String(e)}`)}}};return i.onblur=()=>void c(),i.onkeydown=e=>{e.key===`Enter`&&c()},r(`div`,`space-y-1.5 border-t border-neutral-200 pt-2.5`,r(`div`,``,r(`span`,`text-[12px] font-semibold text-neutral-700`,`Startup command`),r(`span`,`block text-[11px] text-neutral-400`,`This Pier, every shell — not only this browser.`)),i,a)}function R(e){let t=document.createElement(`input`);t.type=`text`,t.value=A.fontFamily,t.setAttribute(`list`,`terminal-font-presets`),t.className=y;let n=document.createElement(`datalist`);n.id=`terminal-font-presets`;for(let e of[`monospace`,`ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace`,`JetBrains Mono, monospace`,`Cascadia Mono, monospace`,`Fira Code, monospace`]){let t=document.createElement(`option`);t.value=e,n.append(t)}let i=document.createElement(`input`);i.type=`number`,i.min=`10`,i.max=`24`,i.step=`1`,i.value=String(A.fontSize),i.className=`w-20 rounded border border-neutral-300 px-2 py-1.5 text-[12px] outline-none focus:border-indigo-400`;let o=document.createElement(`input`);o.type=`checkbox`,o.checked=A.cursorBlink,o.className=`h-4 w-4 accent-indigo-600`;let s=()=>{let e=t.value.trim(),n=Number(i.value);!e||!Number.isFinite(n)||(A={fontFamily:e.slice(0,200),fontSize:Math.round(Math.max(10,Math.min(24,n))),cursorBlink:o.checked},i.value=String(A.fontSize),p(A),I())};t.oninput=s,i.oninput=s,o.onchange=s;let c=r(`button`,`cursor-pointer text-[12px] text-neutral-500 hover:text-indigo-700`,`Reset`);c.type=`button`,c.onclick=()=>{A={...d},t.value=A.fontFamily,i.value=String(A.fontSize),o.checked=A.cursorBlink,p(A),I()},a(e,r(`div`,`w-72 space-y-3 px-3 py-2.5`,r(`div`,`flex items-center`,r(`span`,`text-[12px] font-semibold text-neutral-700`,`Terminal`),r(`span`,`ml-auto`,c)),r(`label`,`block space-y-1 text-[11.5px] text-neutral-500`,r(`span`,``,`Font family`),t,n),r(`label`,`flex items-center justify-between text-[11.5px] text-neutral-500`,r(`span`,``,`Font size`),i),r(`label`,`flex cursor-pointer items-center justify-between text-[11.5px] text-neutral-500`,r(`span`,``,`Blinking cursor`),o),L()))}function z(){let e=P(C||`Choose a folder…`);e.title=`Switch folder`,e.onclick=()=>c(e,u().map(e=>({path:e})),C||void 0,e=>e===C?void 0:b(e));let t=P(`Files`);t.title=`Browse this folder`,t.onclick=()=>x(C);let n=P(`Fit`);n.title=`Resize the shell to this window`,n.onclick=()=>{H(),w?.focus()};let i=P(`Restart`);i.title=`End this shell and start a new one`,i.onclick=()=>void V();let a=r(`button`,`icon-btn text-[15px]`,`⚙`);a.type=`button`,a.title=`Terminal settings`,a.setAttribute(`aria-label`,`Terminal settings`),a.onclick=()=>R(a);let o=r(`button`,`icon-btn`,`✕`);o.type=`button`,o.title=`Close Terminal`,o.setAttribute(`aria-label`,`Close Terminal`),o.onclick=S,M.replaceChildren(e,j,...C?[t]:[],n,i,a,o)}let B=()=>{w&&E?.readyState===WebSocket.OPEN&&E.send(JSON.stringify({t:`resize`,cols:w.cols,rows:w.rows}))};async function V(){if(E?.readyState!==WebSocket.OPEN){await W();return}window.confirm(`Restart the shell in ${C}? Anything running in it stops.`)&&(k=!0,F(`restarting…`),E.send(JSON.stringify({t:`restart`})))}function H(){!w||N.clientHeight===0||(T?.fit(),B())}window.addEventListener(`focus`,H),document.addEventListener(`visibilitychange`,()=>{document.hidden||H()});function U(){E?.close(),E=null,T=null,w?.dispose(),w=null,N.replaceChildren()}async function W(){let e=++O;U(),D=!1,k=!1,F(`connecting…`);let t;try{t=await h()}catch(e){F(`could not load the terminal: ${String(e)}`,{label:`Retry`,run:()=>void W()});return}if(e!==O)return;w=new t.Terminal({fontFamily:A.fontFamily,fontSize:A.fontSize,cursorBlink:A.cursorBlink,scrollback:2e3,theme:_}),w.open(N),v(w),T=new t.FitAddon,w.loadAddon(T),T.observeResize(),T.fit();let n=new WebSocket(`${location.protocol===`https:`?`wss`:`ws`}://${location.host}/api/terminal?cwd=${encodeURIComponent(C)}`);n.binaryType=`arraybuffer`,E=n,n.onopen=()=>{e===O&&(F(``),B(),w?.focus())},n.onmessage=t=>{if(e!==O)return;if(typeof t.data!=`string`){w?.write(new Uint8Array(t.data));return}let r;try{r=JSON.parse(t.data)}catch{D=!0,F(`invalid terminal response`,{label:`Reconnect`,run:()=>void W()}),n.close();return}if(r.t===`exit`){if(k){k=!1,W();return}D=!0,F(`shell exited (${r.code??`?`})`,{label:`Restart`,run:()=>void W()})}else r.t===`error`&&(D=!0,F(r.message??`terminal error`,{label:`Retry`,run:()=>void W()}))},n.onclose=()=>{e!==O||D||F(`disconnected`,{label:`Reconnect`,run:()=>void W()})},w.onData(e=>{n.readyState===WebSocket.OPEN&&n.send(JSON.stringify({t:`in`,d:e}))}),w.onResize(({cols:e,rows:t})=>{n.readyState===WebSocket.OPEN&&n.send(JSON.stringify({t:`resize`,cols:e,rows:t}))})}return i(o,e=>{let t=e?.startsWith(`/`)?e:C||m()||u()[0]||``;if(t===C&&w){z(),!D&&E&&E.readyState>WebSocket.OPEN?W():(H(),w.focus());return}if(C=t,z(),!C){F(`No project yet — pick a folder from the chip.`);return}W()},s)}export{b as createTerminalView};

package/dist/web/public/index.html

@@ -33,8 +33,8 @@
        which style.css pays for with the safe-area inset. -->
   <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
   <title>Pier</title>
-  <script type="module" crossorigin src="/assets/index-DAxKtidH.js"></script>
-  <link rel="stylesheet" crossorigin href="/assets/index-CtR-Ob4T.css">
+  <script type="module" crossorigin src="/assets/index-BFzmvpGX.js"></script>
+  <link rel="stylesheet" crossorigin href="/assets/index-yNocr797.css">
 </head>
 <!-- The document never scrolls: this is a fixed-viewport workbench, and every
      scrollable region is an inner pane. h-dvh, not h-screen, because 100vh can

package/dist/web/route.js

@@ -0,0 +1,17 @@
+// A route body that throws answers as JSON — the one shape every view's
+// fetch helper already knows how to read, with the status the route owns.
+// It lives alone because all three route families use it and none of them is
+// where the other two would look for it.
+/** Register a route whose body may throw: the error becomes the JSON shape
+ *  the UI expects, with the status the route owns. Takes the literal path so
+ *  `c.req.param()` keeps its typed keys. */
+export function guarded(app, method, path, status, fn) {
+    app.on(method, path, async (c) => {
+        try {
+            return await fn(c);
+        }
+        catch (err) {
+            return c.json({ error: String(err) }, status);
+        }
+    });
+}

package/dist/web/server.js

@@ -1,8 +1,8 @@
 // Web workbench backend: REST + SSE, a pure consumer of core.
 // See docs/design/03-web-workbench.md for the route contract.
 import { hostname } from "node:os";
-import { readFile } from "node:fs/promises";
-import { join, relative } from "node:path";
+import { readFile, stat } from "node:fs/promises";
+import { isAbsolute, join, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { Hono } from "hono";
@@ -11,11 +11,13 @@ import { streamSSE } from "hono/streaming";
 import { EventHub } from "../core/hub.js";
 import { logger } from "../log.js";
 import { Router } from "../core/router.js";
+import { registerConfigRoutes } from "./config.js";
 import { registerExplorerRoutes } from "./explorer.js";
-import { guarded, registerFileRoutes } from "./files.js";
+import { fileHeaders, MAX_FILE_BYTES, registerFsRoutes, scopedFile } from "./fs.js";
+import { guarded } from "./route.js";
 import { isThinkingLevel } from "../core/types.js";
 import { SESSION_TITLE_MAX } from "../limits.js";
-import { saveInbound } from "../core/inbox.js";
+import { INBOX_DIR, saveInbound } from "../core/inbox.js";
 import { MAX_INBOUND_BYTES } from "../core/inbound-file.js";
 import { RepoIndex } from "./repos.js";
 import {} from "./session-state.js";
@@ -38,9 +40,30 @@ export const withTabPrefix = (html, prefix) => prefix
     ? html.replace("<title>Pier</title>", `<title>${prefix.replace(/&/g, "&amp;").replace(/</g, "&lt;")} - Pier</title>`)
     : html;
 const HEARTBEAT_MS = 15_000;
+/** A reader that stopped reading must not queue frames without bound. Past
+ *  this much frame text in flight the stream is dropped with a line in the
+ *  log; EventSource reconnects and replays from its Last-Event-ID. */
+const SSE_HIGH_WATER = 4 * 1024 * 1024;
 // Canonical base64 only: Buffer.from(.., "base64") happily "decodes" garbage.
 const BASE64_RE = /^[A-Za-z0-9+/]+={0,2}$/;
-export function createServer({ factory, router, hub, sessions: state, config, providers, settings, catalog, names, onToolsChanged, validateCustomTools, secrets, onUnlocked, reload, updates, updater, backgroundRuns, channelOf, }) {
+/** The SSE frame for one event, built once and shared by every stream watching
+ *  that session — three open tabs used to stringify the same delta three
+ *  times. One slot is the whole cache: the hub fans an event out to its
+ *  subscribers in one synchronous loop, so the reuse is always of the event
+ *  just built, and the memo is keyed on identity so a miss only costs a
+ *  rebuild. The hub stays transport-blind; this is the transport's business.
+ *  Byte-identical to hono's `writeSSE`: JSON has no raw newline, so `data` is
+ *  one line. */
+let lastEvent = null;
+let lastFrame = "";
+const sseFrame = (e) => {
+    if (e !== lastEvent) {
+        lastEvent = e;
+        lastFrame = `data: ${JSON.stringify(e)}\nid: ${e.seq}\n\n`;
+    }
+    return lastFrame;
+};
+export function createServer({ factory, router, hub, sessions: state, config, providers, settings, catalog, names, onToolsChanged, validateCustomTools, secrets, onUnlocked, reload, updates, updater, backgroundRuns, activeBackgroundRunCounts, channelOf, }) {
     const app = new Hono();
     // A finished turn marks its session unread until some client reports it was
     // seen (session selected + tab visible → POST read below). Server-side so
@@ -62,8 +85,10 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
     });
     // Repository identity per project directory, refreshed off the request path.
     const repos = new RepoIndex(() => hub.emitWorkspace({ type: "sessions-changed" }));
-    /** Background runs this session launched that are still in flight. */
-    const activeRuns = (id) => backgroundRuns?.(id).filter((r) => r.state === "queued" || r.state === "running").length ?? 0;
+    /** Background runs still in flight, per launching session. One query for a
+     *  whole list: asking row by row loaded every run object of every session to
+     *  draw one dot each. */
+    const activeRuns = () => activeBackgroundRunCounts?.() ?? new Map();
     /** The web channel's session for `id` — every session route resolves here. */
     const ensure = (id) => router.ensure({ channelId: "web", conversationId: id });
     // Sessions created here that Pi doesn't list yet — it persists a session
@@ -118,7 +143,7 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
     // decided about it, and what is true of it right now.
     // The listing's `modified` is dropped rather than forwarded: it dates a
     // transcript, and no surface renders it.
-    const present = ({ modified: _drop, ...s }, own) => {
+    const present = ({ modified: _drop, ...s }, own, active) => {
         return {
             ...s,
             ...(own?.sort === undefined ? {} : { sort: own.sort }),
@@ -133,7 +158,7 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
             listed: own?.pinned ?? false,
             unread: own?.unread ?? false,
             channel: channelOf?.(s.id) ?? "web",
-            activeRuns: activeRuns(s.id),
+            activeRuns: active.get(s.id) ?? 0,
         };
     };
     // The rail: the same rows as the full list, minus everything Projects is not
@@ -141,8 +166,9 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
     // the summaries out of SQLite, which is what had to be kept in step.
     app.get("/api/projects", async (c) => {
         const flags = state.flags();
+        const active = activeRuns();
         return c.json((await allSessions())
-            .map((s) => present(s, flags.get(s.id)))
+            .map((s) => present(s, flags.get(s.id), active))
             .filter((row) => row.listed));
     });
     // One drag, one write of the list that changed: the projects, or one
@@ -167,7 +193,8 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
     });
     app.get("/api/sessions", async (c) => {
         const flags = state.flags();
-        return c.json((await allSessions()).map((s) => present(s, flags.get(s.id))));
+        const active = activeRuns();
+        return c.json((await allSessions()).map((s) => present(s, flags.get(s.id), active)));
     });
     app.post("/api/sessions", async (c) => {
         const body = await c.req.json().catch(() => ({}));
@@ -245,6 +272,29 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
         // hands back what a surface shows, not the untruncated tool result.
         return c.json({ steps: turn.steps ?? [] });
     });
+    // Attachments, both directions: the agent links a file it produced, the chat
+    // renders a file the user sent. Read-only, and only from the session's own
+    // cwd or the inbox inbound files land in (core/inbox.ts) — a session route
+    // rather than an /api/fs one, because the session *is* the scope here.
+    guarded(app, "GET", "/api/sessions/:id/files", 400, async (c) => {
+        const raw = c.req.query("path");
+        if (!raw)
+            return c.json({ error: "path required" }, 400);
+        const id = c.req.param("id");
+        const cwd = nascent.get(id)?.cwd ?? (await factory.find(id))?.cwd;
+        // Absolute only: a link into a session's files is written by the agent or
+        // by Pier, and neither of them writes a path relative to anything.
+        const file = cwd && isAbsolute(raw) ? await scopedFile([cwd, INBOX_DIR], raw) : null;
+        if (!file)
+            return c.json({ error: "no such file" }, 404);
+        if ((await stat(file)).size > MAX_FILE_BYTES)
+            return c.json({ error: "file too large" }, 413);
+        const bytes = await readFile(file);
+        return c.body(bytes, 200, {
+            ...fileHeaders(file, bytes, c.req.query("download") === "1"),
+            "cache-control": "private, max-age=60",
+        });
+    });
     // Composer attachments: bytes land in the inbox, the message carries the
     // path as a `[name](file:///…)` line the client builds itself — upload
     // first, so the text it sends (and optimistically renders) is final.
@@ -450,12 +500,32 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
             Number(c.req.query("after") ?? "") ||
             0;
         return streamSSE(c, async (stream) => {
-            const send = (e) => stream.writeSSE({ id: String(e.seq), data: JSON.stringify(e) });
-            for (const e of hub.replay(id, lastId))
-                await send(e);
-            // Same as above: the client may be gone by the time an event fires.
-            const unsubscribe = hub.subscribe(id, (e) => void send(e).catch(() => { }));
+            let queued = 0; // frame chars written but not yet drained by the reader
+            const send = (frame) => {
+                if (stream.aborted || stream.closed)
+                    return;
+                if (queued > SSE_HIGH_WATER) {
+                    log.warn(`dropping slow event client for ${id} — ${queued} chars queued`);
+                    stream.abort(); // unsubscribes; the client reconnects and replays
+                    return;
+                }
+                queued += frame.length;
+                void stream
+                    .write(frame)
+                    .catch((err) => log.warn(`event write for ${id} failed: ${String(err)}`))
+                    .finally(() => (queued -= frame.length));
+            };
+            // Subscribe before the replay write can wait on its reader: an event that
+            // arrives while that write is backpressured must queue behind it, not fall
+            // between replay() and subscribe(). Both snapshots happen synchronously,
+            // so live writes cannot overtake the replay write.
+            const unsubscribe = hub.subscribe(id, (e) => send(sseFrame(e)));
             stream.onAbort(unsubscribe);
+            // One write for the whole replay: a reconnect after a busy turn used to
+            // cost an await per event before the client saw any of them.
+            const missed = hub.replay(id, lastId);
+            if (missed.length)
+                await stream.write(missed.map(sseFrame).join(""));
             // Heartbeat keeps proxies from closing the stream; loop ends on abort.
             while (!stream.aborted) {
                 await stream.sleep(HEARTBEAT_MS);
@@ -509,12 +579,8 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
         onSettingsChanged: () => recycle("instance settings"),
     });
     registerProviderRoutes(app, providers, () => recycle("provider configuration"));
-    registerFileRoutes(app, {
-        factory,
-        config,
-        nascentCwd: (id) => nascent.get(id)?.cwd,
-        onConfigWritten: () => recycle("an agent file"),
-    });
+    registerConfigRoutes(app, { factory, config, onConfigWritten: () => recycle("an agent file") });
+    registerFsRoutes(app);
     registerExplorerRoutes(app);
     // serveStatic resolves `root` against the *working directory*, and an
     // installed Pier is started from wherever the operator happens to be. The
@@ -530,6 +596,11 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
     // at /login learns neither. Read once: neither can change under a process.
     const prefix = tabPrefix(process.env.PIER_TITLE, hostname().split(".")[0] ?? "");
     let shell = null;
+    // The one file the precompressed siblings below cannot cover: this route
+    // answers from the patched string, not from disk, and it is re-fetched on
+    // every navigation because it may not be cached. Exact path, like the two
+    // API routes above — never the SSE streams.
+    app.use("/", compress());
     app.get("/", async (c, next) => {
         // A release replaces hashed assets. Revalidate the shell on every
         // navigation so a cached index cannot name bundles that no longer exist.
@@ -563,6 +634,16 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
         c.header("cache-control", "private, max-age=31536000, immutable");
         await next();
     });
-    app.use("/*", serveStatic({ root: relative(process.cwd(), bundle) || "." }));
+    // `precompressed` looks for a `.br`/`.gz` sibling of the file it is about to
+    // serve and hands that over when the request accepts the encoding; the build
+    // writes them (vite.config.ts). Without it the 325 kB bundle, the 87 kB
+    // stylesheet and the 636 kB terminal emulator all go out verbatim.
+    // serveStatic only sets Vary when it selects a sibling. Identity must carry
+    // it too, or a cache can reuse that response for a later Brotli request.
+    app.use("/*", async (c, next) => {
+        await next();
+        c.header("Vary", "Accept-Encoding");
+    });
+    app.use("/*", serveStatic({ root: relative(process.cwd(), bundle) || ".", precompressed: true }));
     return app;
 }

package/dist/web/terminal.js

@@ -6,11 +6,10 @@
 // to survive that — durability is tmux's job, not ours). This is the one
 // WebSocket surface: a keystroke is a round trip, which SSE cannot carry
 // upstream. Everything else stays on the event stream.
-import { realpath, stat } from "node:fs/promises";
-import { isAbsolute } from "node:path";
 import { spawn } from "node-pty";
 import { WebSocketServer } from "ws";
 import { logger } from "../log.js";
+import { scoped } from "./fs.js";
 import { ALL, upgradeAuthorized } from "./auth.js";
 const log = logger("terminal");
 /** Live shells at once — a guard against forgotten spawns, not a quota. */
@@ -71,11 +70,7 @@ export class TerminalHub {
     async attach(cwd, sock) {
         let key;
         try {
-            if (!isAbsolute(cwd))
-                throw new Error("cwd must be an absolute directory");
-            key = await realpath(cwd);
-            if (!(await stat(key)).isDirectory())
-                throw new Error("cwd must be an absolute directory");
+            key = await scoped(cwd); // absolute, real, and a directory — or it throws
         }
         catch (err) {
             control(sock, { t: "error", message: String(err) });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timqi/pier",
-  "version": "0.0.17",
+  "version": "0.0.19",
   "description": "A self-hosted workspace for coding agents: web workbench and IM channels in front of Pi sessions",
   "license": "AGPL-3.0-only",
   "repository": "github:timqi/pier",

package/skills/pier-slack/SKILL.md

@@ -24,20 +24,13 @@ this: there is no current conversation and `channel` is required.
 
 `{"operation":"channels"}` lists what Pier can reach (`id`, `name`, `kind`,
 `respondsToMessages`); pass either an id or a `#name` anywhere a channel is
-wanted. `not_in_channel` means someone must run `/invite @Pier`.
+wanted.
 
 ## Never ask for an id
 
-You already have them:
-
-- **The person talking to you** — a message may start with `[name<id> time]`,
-  added by Pier, not typed by them. It appears only on a change — new speaker,
-  a time gap, a new day — so the last one you saw still applies (a gap alone
-  shows as time only, like `[14:23]`).
-- **Anyone in a transcript** — every line carries `name[id]`.
-- **This channel and thread** — from `context`.
-
-Asking a human to paste their own user ID is never acceptable.
+You already have them: the sender header on the message you are answering,
+`name[id]` on every line of a transcript, and `context` for this channel and
+thread. Asking a human to paste their own user ID is never acceptable.
 
 ## Reading
 
@@ -107,8 +100,6 @@ The response carries `ts` and `threadTs` for replying under what you posted.
 `text` replaces the message outright; there is no partial edit. Read the
 message first if you are changing part of it.
 
-- Slack only lets Pier edit what **its own bot** posted — anyone else's message
-  answers `cant_update_message`, and the answer is to reply, not to retry.
 - `ts` is always explicit, as with `delete`, and means nothing outside the
   channel it was read in.
 - The old text is gone — Slack keeps no version a reader can open, and may not
@@ -123,9 +114,6 @@ message first if you are changing part of it.
 {"operation":"delete","channel":"#ops","ts":"1717243800.000100"}
 ```
 
-Slack only lets Pier delete what **its own bot** posted — a person's message
-answers `cant_delete_message`, and the answer is to ask them, not to retry.
-
 - `ts` is always explicit. There is no "delete the last one" and no default
   from the thread you are in: the wrong `ts` cannot be undone.
 - A `ts` means nothing outside the conversation it came from — pass the

package/dist/web/files.js

@@ -1,183 +0,0 @@
-// Filesystem-facing routes: scoped Pi config editing, directory browsing for
-// the cwd pickers, and session attachments. Split from server.ts, which keeps
-// the session/queue/SSE routes; `guarded` lives here because both halves wrap
-// their route bodies with it.
-import { mkdir, readdir, readFile, realpath, stat } from "node:fs/promises";
-import { homedir } from "node:os";
-import { basename, dirname, extname, isAbsolute, resolve, sep } from "node:path";
-import { INBOX_DIR } from "../core/inbox.js";
-// Content types for the attachment route. Anything unlisted downloads as
-// bytes — guessing a type we can't vouch for is how a file starts executing.
-const FILE_TYPES = {
-    ".png": "image/png",
-    ".jpg": "image/jpeg",
-    ".jpeg": "image/jpeg",
-    ".gif": "image/gif",
-    ".webp": "image/webp",
-    ".avif": "image/avif",
-    ".bmp": "image/bmp",
-    ".pdf": "application/pdf",
-    ".txt": "text/plain; charset=utf-8",
-    ".md": "text/plain; charset=utf-8",
-    ".log": "text/plain; charset=utf-8",
-    ".json": "text/plain; charset=utf-8",
-    ".csv": "text/plain; charset=utf-8",
-    ".yaml": "text/plain; charset=utf-8",
-    ".yml": "text/plain; charset=utf-8",
-};
-const MAX_FILE_BYTES = 32 * 1024 * 1024;
-/** Register a route whose body may throw: the error becomes the JSON shape
- *  the UI expects, with the status the route owns. Takes the literal path so
- *  `c.req.param()` keeps its typed keys. */
-export function guarded(app, method, path, status, fn) {
-    app.on(method, path, async (c) => {
-        try {
-            return await fn(c);
-        }
-        catch (err) {
-            return c.json({ error: String(err) }, status);
-        }
-    });
-}
-export function registerFileRoutes(app, { factory, config, nascentCwd, onConfigWritten }) {
-    // Scope comes from the client as "global" or a project cwd; only cwds Pi
-    // already knows (the session list) are accepted — never an arbitrary path.
-    const parseScope = async (raw) => {
-        if (!raw || raw === "global")
-            return { kind: "global" };
-        const known = await factory.list();
-        return known.some((s) => s.cwd === raw) ? { kind: "project", cwd: raw } : null;
-    };
-    app.get("/api/config", async (c) => {
-        c.header("cache-control", "no-store");
-        const scope = await parseScope(c.req.query("scope"));
-        if (!scope)
-            return c.json({ error: "unknown scope" }, 400);
-        return c.json({
-            // Where this scope's files live on disk — the UI labels "Global" with it.
-            dir: scope.kind === "global" ? config.globalDir : scope.cwd,
-            files: await config.listFiles(scope),
-            resources: await config.listResources(scope),
-        });
-    });
-    guarded(app, "GET", "/api/config/files/:name", 400, async (c) => {
-        c.header("cache-control", "no-store");
-        const scope = await parseScope(c.req.query("scope"));
-        if (!scope)
-            return c.json({ error: "unknown scope" }, 400);
-        return c.json({ content: await config.readFile(scope, c.req.param("name")) });
-    });
-    guarded(app, "PUT", "/api/config/files/:name", 400, async (c) => {
-        const scope = await parseScope(c.req.query("scope"));
-        if (!scope)
-            return c.json({ error: "unknown scope" }, 400);
-        const body = await c.req.json().catch(() => null);
-        if (typeof body?.content !== "string" || typeof body?.expected !== "string") {
-            return c.json({ error: "content and expected content required" }, 400);
-        }
-        const name = c.req.param("name");
-        await config.writeFile(scope, name, body.content, body.expected);
-        onConfigWritten?.();
-        return c.json({ ok: true, content: await config.readFile(scope, name) });
-    });
-    // Resource names may contain slashes — query params, not path params.
-    guarded(app, "GET", "/api/config/resource", 400, async (c) => {
-        c.header("cache-control", "no-store");
-        const scope = await parseScope(c.req.query("scope"));
-        if (!scope)
-            return c.json({ error: "unknown scope" }, 400);
-        const kind = c.req.query("kind");
-        const name = c.req.query("name");
-        if ((kind !== "extensions" && kind !== "skills") || !name) {
-            return c.json({ error: "kind and name required" }, 400);
-        }
-        return c.json({ content: await config.readResource(scope, kind, name) });
-    });
-    /** Real path of a file a session may expose: inside its cwd or the inbox
-     *  (where inbound user attachments land — core/inbox.ts), nothing else. */
-    const resolveFile = async (id, raw) => {
-        const cwd = nascentCwd(id) ?? (await factory.find(id))?.cwd;
-        if (!cwd || !isAbsolute(raw))
-            return null;
-        try {
-            // realpath both ends, so neither `..` nor a symlink can step outside.
-            const roots = [await realpath(cwd)];
-            try {
-                roots.push(await realpath(INBOX_DIR));
-            }
-            catch {
-                /* no inbox yet — nothing was ever uploaded */
-            }
-            const target = await realpath(resolve(roots[0], raw));
-            if (!roots.some((root) => target === root || target.startsWith(root + sep)))
-                return null;
-            return (await stat(target)).isFile() ? target : null;
-        }
-        catch {
-            return null; // missing, unreadable, or not a file
-        }
-    };
-    // Attachments, both directions: the agent links a file it produced, the
-    // chat renders a file the user sent — the client fetches the bytes here,
-    // read-only, and only from the session's own cwd or the inbox.
-    app.get("/api/sessions/:id/files", async (c) => {
-        const raw = c.req.query("path");
-        if (!raw)
-            return c.json({ error: "path required" }, 400);
-        const file = await resolveFile(c.req.param("id"), raw);
-        if (!file)
-            return c.json({ error: "no such file" }, 404);
-        const { size } = await stat(file);
-        if (size > MAX_FILE_BYTES)
-            return c.json({ error: "file too large" }, 413);
-        const name = basename(file);
-        // Unknown extension → octet-stream: never let the browser guess a type we
-        // can't vouch for (that is how an attachment starts executing).
-        const type = FILE_TYPES[extname(file).toLowerCase()] ?? "application/octet-stream";
-        const disposition = c.req.query("download") === "1" ? "attachment" : "inline";
-        return c.body(await readFile(file), 200, {
-            "content-type": type,
-            "content-disposition": `${disposition}; filename*=UTF-8''${encodeURIComponent(name)}`,
-            "cache-control": "private, max-age=60",
-        });
-    });
-    // Directory browsing for the working-directory picker (new session, IM chat
-    // config). Names only, never contents — the file route above stays the only
-    // way to read bytes, and it is scoped to a session's own cwd.
-    app.get("/api/fs/dirs", async (c) => {
-        const raw = c.req.query("path");
-        const path = raw ? resolve(raw) : homedir();
-        if (!isAbsolute(path))
-            return c.json({ error: "absolute path required" }, 400);
-        let entries = [];
-        try {
-            const dir = await readdir(path, { withFileTypes: true });
-            entries = dir
-                // Dotfiles are noise in a project picker; a hidden cwd can still be
-                // typed by hand.
-                .filter((e) => e.isDirectory() && !e.name.startsWith("."))
-                .map((e) => e.name)
-                .sort((a, b) => a.localeCompare(b));
-        }
-        catch {
-            return c.json({ error: "cannot read directory" }, 404);
-        }
-        const parent = dirname(path);
-        return c.json({ path, parent: parent === path ? null : parent, entries });
-    });
-    // Create a folder while picking one — a new project usually needs a new
-    // directory. A name, never a path: traversal is rejected, not normalized.
-    guarded(app, "POST", "/api/fs/dirs", 400, async (c) => {
-        const body = await c.req.json().catch(() => null);
-        const parent = typeof body?.path === "string" ? body.path : "";
-        const name = typeof body?.name === "string" ? body.name.trim() : "";
-        if (!isAbsolute(parent))
-            return c.json({ error: "absolute path required" }, 400);
-        if (!name || name.length > 64 || /[/\\]|^\.\.?$/.test(name)) {
-            return c.json({ error: "invalid folder name" }, 400);
-        }
-        const path = resolve(parent, name);
-        await mkdir(path); // no recursive: the parent must already exist
-        return c.json({ path });
-    });
-}