@vincenthanxiaodu/pi-web 1.202608.1

package/dist/server/projects/directorySuggestions.js

@@ -0,0 +1,207 @@
+import { homedir } from "node:os";
+import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
+import { readdir, stat } from "node:fs/promises";
+/**
+ * Project folder suggestions.
+ *
+ * The picker is the only place a project path is typed, usually on a phone
+ * keyboard, so a strict same-directory prefix match is a poor fit: it forces
+ * the exact spelling of every intermediate segment. Instead this behaves like
+ * a zoxide-style jump list — type a fragment, search downward from the typed
+ * parent, rank the best folders first — while keeping plain browsing (a query
+ * ending in a separator) as an unfiltered listing of that directory.
+ */
+const MAX_SUGGESTIONS = 80;
+const MAX_SCANNED_DIRECTORIES = 4_000;
+const MAX_SEARCH_DEPTH = 3;
+const MAX_MISSING_ANCESTORS = 8;
+/**
+ * Directories that are almost never a project root but are extremely common
+ * and very large. Descending into them would spend the scan budget before
+ * reaching the folders the user is actually looking for.
+ */
+const SKIPPED_DIRECTORY_NAMES = new Set([
+    ".bzr",
+    ".cache",
+    ".git",
+    ".hg",
+    ".gradle",
+    ".idea",
+    ".mypy_cache",
+    ".next",
+    ".nuxt",
+    ".pnpm-store",
+    ".pytest_cache",
+    ".ruff_cache",
+    ".svn",
+    ".terraform",
+    ".tox",
+    ".venv",
+    ".vscode",
+    "__pycache__",
+    "bower_components",
+    "node_modules",
+    "site-packages",
+    "vendor",
+    "venv",
+]);
+export function expandUserPath(path) {
+    if (path === "" || path === "~")
+        return homedir();
+    if (path.startsWith(`~${sep}`) || path.startsWith("~/"))
+        return resolve(homedir(), path.slice(2));
+    return isAbsolute(path) ? resolve(path) : resolve(process.cwd(), path);
+}
+export async function listDirectorySuggestions(query = "") {
+    const raw = query.trim();
+    const expanded = expandUserPath(raw);
+    const target = isDirectoryListingQuery(raw)
+        ? { base: expanded, search: "" }
+        : await resolveSearchBase(expanded);
+    if (target === undefined)
+        return [];
+    // Browsing shows one level, exactly like a file manager. A search term is
+    // what unlocks the downward scan.
+    const candidates = await collectDirectories(target.base, target.search === "" ? 0 : MAX_SEARCH_DEPTH);
+    const ranked = target.search === "" ? sortByPath(candidates) : rankDirectories(candidates, target.search);
+    return ranked.slice(0, MAX_SUGGESTIONS).map((candidate) => ({ path: `${candidate.path}/`, kind: "other" }));
+}
+function isDirectoryListingQuery(raw) {
+    return raw === "" || raw === "~" || raw.endsWith("/") || raw.endsWith("\\");
+}
+/**
+ * Anchor the search at the deepest directory that actually exists and treat
+ * everything the user typed below it as the search term. Typing
+ * `~/work/playria` when `~/work` does not exist is a search for
+ * `work/playria` under `~`, not an error — which is what makes partially
+ * remembered paths usable.
+ */
+async function resolveSearchBase(expanded) {
+    const segments = [basename(expanded)];
+    let base = dirname(expanded);
+    for (let attempt = 0; attempt <= MAX_MISSING_ANCESTORS; attempt += 1) {
+        if (await isDirectory(base))
+            return { base, search: segments.join("/") };
+        const parent = dirname(base);
+        if (parent === base)
+            return undefined;
+        segments.unshift(basename(base));
+        base = parent;
+    }
+    return undefined;
+}
+async function isDirectory(path) {
+    try {
+        return (await stat(path)).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Breadth-first so shallow directories are always gathered before the scan
+ * budget can be exhausted by one deep branch.
+ */
+async function collectDirectories(parent, maxDepth) {
+    const collected = [];
+    let frontier = [{ path: parent, relativePath: "", depth: -1 }];
+    let scanned = 0;
+    while (frontier.length > 0 && scanned < MAX_SCANNED_DIRECTORIES) {
+        const next = [];
+        for (const directory of frontier) {
+            if (scanned >= MAX_SCANNED_DIRECTORIES)
+                break;
+            scanned += 1;
+            for (const child of await readChildDirectories(directory.path)) {
+                const depth = directory.depth + 1;
+                const relativePath = directory.relativePath === "" ? child : `${directory.relativePath}/${child}`;
+                const candidate = { path: join(directory.path, child), relativePath, depth };
+                collected.push(candidate);
+                if (depth < maxDepth && !SKIPPED_DIRECTORY_NAMES.has(child)) {
+                    next.push({ path: candidate.path, relativePath, depth });
+                }
+            }
+        }
+        frontier = next;
+    }
+    return collected;
+}
+async function readChildDirectories(directory) {
+    let entries;
+    try {
+        entries = await readdir(directory, { withFileTypes: true });
+    }
+    catch {
+        // A missing or unreadable directory is a normal state while typing a path
+        // that does not exist yet; it must not fail the whole suggestion request.
+        return [];
+    }
+    const names = [];
+    for (const entry of entries) {
+        if (entry.isDirectory()) {
+            names.push(entry.name);
+            continue;
+        }
+        if (!entry.isSymbolicLink())
+            continue;
+        try {
+            if ((await stat(join(directory, entry.name))).isDirectory())
+                names.push(entry.name);
+        }
+        catch {
+            // Broken symlink: not a usable project folder.
+        }
+    }
+    return names.sort((a, b) => a.localeCompare(b));
+}
+function sortByPath(candidates) {
+    return [...candidates].sort((a, b) => a.depth - b.depth || a.path.localeCompare(b.path));
+}
+function rankDirectories(candidates, search) {
+    const query = search.toLowerCase();
+    return candidates
+        .map((candidate) => ({ candidate, score: directoryScore(candidate, query) }))
+        .filter(({ score }) => score > 0)
+        .sort((a, b) => b.score - a.score
+        || a.candidate.depth - b.candidate.depth
+        || a.candidate.path.length - b.candidate.path.length
+        || a.candidate.path.localeCompare(b.candidate.path))
+        .map(({ candidate }) => candidate);
+}
+/**
+ * Depth is a penalty rather than a filter: a nested exact name still beats a
+ * shallow fuzzy match, but two equally good matches prefer the shallower one.
+ */
+function directoryScore(candidate, query) {
+    const name = basename(candidate.path).toLowerCase();
+    const relativePath = candidate.relativePath.toLowerCase();
+    const depthPenalty = candidate.depth * 40;
+    if (name === query)
+        return 1000 - depthPenalty;
+    if (name.startsWith(query))
+        return 900 - depthPenalty;
+    if (relativePath === query)
+        return 880 - depthPenalty;
+    if (relativePath.startsWith(query))
+        return 850 - depthPenalty;
+    if (name.includes(query))
+        return 750 - depthPenalty;
+    if (relativePath.includes(query))
+        return 650 - depthPenalty;
+    const tokens = query.split(/[\s/\\-_.]+/u).filter(Boolean);
+    if (tokens.length > 1 && tokens.every((token) => relativePath.includes(token))) {
+        return 550 + tokens.filter((token) => name.includes(token)).length * 25 - depthPenalty;
+    }
+    return isSubsequence(query, relativePath) ? Math.max(1, 200 - depthPenalty) : 0;
+}
+function isSubsequence(needle, haystack) {
+    let index = 0;
+    for (const character of needle) {
+        index = haystack.indexOf(character, index);
+        if (index === -1)
+            return false;
+        index += character.length;
+    }
+    return true;
+}
+//# sourceMappingURL=directorySuggestions.js.map

package/dist/server/projects/directorySuggestions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directorySuggestions.js","sourceRoot":"","sources":["../../../src/server/projects/directorySuggestions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAGjD;;;;;;;;;GASG;AAEH,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,MAAM;IACN,QAAQ;IACR,MAAM;IACN,KAAK;IACL,SAAS;IACT,OAAO;IACP,aAAa;IACb,OAAO;IACP,OAAO;IACP,aAAa;IACb,eAAe;IACf,aAAa;IACb,MAAM;IACN,YAAY;IACZ,MAAM;IACN,OAAO;IACP,SAAS;IACT,aAAa;IACb,kBAAkB;IAClB,cAAc;IACd,eAAe;IACf,QAAQ;IACR,MAAM;CACP,CAAC,CAAC;AAWH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IAClD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAK,GAAG,EAAE;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC;QACzC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;QAChC,CAAC,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEpC,0EAA0E;IAC1E,kCAAkC;IAClC,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW;IAC1C,OAAO,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IAC/C,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,IAAI,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,qBAAqB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACrE,IAAI,MAAM,WAAW,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACtC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,QAAgB;IAChE,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,IAAI,QAAQ,GAA4D,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACxH,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,GAAG,uBAAuB,EAAE,CAAC;QAChE,MAAM,IAAI,GAAoB,EAAE,CAAC;QACjC,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,IAAI,OAAO,IAAI,uBAAuB;gBAAE,MAAM;YAC9C,OAAO,IAAI,CAAC,CAAC;YACb,KAAK,MAAM,KAAK,IAAI,MAAM,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC;gBAClC,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,YAAY,IAAI,KAAK,EAAE,CAAC;gBAClG,MAAM,SAAS,GAAuB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;gBACjG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1B,IAAI,KAAK,GAAG,QAAQ,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IACnD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,0EAA0E;QAC1E,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;YAAE,SAAS;QACtC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,UAAU,CAAC,UAAgC;IAClD,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,UAAgC,EAAE,MAAc;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SAC5E,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC;SAChC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACb,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK;WACd,CAAC,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK;WACrC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM;WACjD,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;SACrD,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,SAA6B,EAAE,KAAa;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;IAE1C,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,GAAG,YAAY,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,YAAY,CAAC;IACtD,IAAI,YAAY,KAAK,KAAK;QAAE,OAAO,GAAG,GAAG,YAAY,CAAC;IACtD,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,YAAY,CAAC;IAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,YAAY,CAAC;IACpD,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,YAAY,CAAC;IAE5D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,GAAG,YAAY,CAAC;IACzF,CAAC;IAED,OAAO,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,QAAgB;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAC/B,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/B,KAAK,IAAI,SAAS,CAAC,MAAM,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/projects/projectService.js

@@ -0,0 +1,33 @@
+import { mkdir, realpath, stat } from "node:fs/promises";
+import { expandUserPath } from "./directorySuggestions.js";
+export class ProjectService {
+    constructor(store) {
+        this.store = store;
+    }
+    list() {
+        return this.store.list();
+    }
+    async add(input) {
+        // Trim so stray whitespace cannot diverge the stored path from the
+        // trimmed key the trust lookup (projectTrustRoutes) previews decisions for.
+        const requestedPath = expandUserPath(input.path.trim());
+        if (input.create === true)
+            await mkdir(requestedPath, { recursive: true });
+        const resolved = await realpath(requestedPath);
+        const s = await stat(resolved);
+        if (!s.isDirectory())
+            throw new Error("Project path must be a directory");
+        return this.store.add(input.name === undefined ? { path: resolved } : { name: input.name, path: resolved });
+    }
+    async close(id) {
+        if (!(await this.store.remove(id)))
+            throw new Error("Project not found");
+    }
+    async requireProject(id) {
+        const project = await this.store.get(id);
+        if (!project)
+            throw new Error("Project not found");
+        return project;
+    }
+}
+//# sourceMappingURL=projectService.js.map

package/dist/server/projects/projectService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectService.js","sourceRoot":"","sources":["../../../src/server/projects/projectService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAGzD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,OAAO,cAAc;IACzB,YAA6B,KAAmB;QAAnB,UAAK,GAAL,KAAK,CAAc;IAAG,CAAC;IAEpD,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAwD;QAChE,mEAAmE;QACnE,4EAA4E;QAC5E,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;YAAE,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAU;QACpB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/server/realtime/sessionEventHub.js

@@ -0,0 +1,93 @@
+import { projectBrowserSessionEvent } from "../browserMessageProjection.js";
+export class SessionEventHub {
+    constructor() {
+        this.socketsBySession = new Map();
+        this.globalSockets = new Set();
+        this.seqBySession = new Map();
+    }
+    add(sessionId, socket) {
+        let sockets = this.socketsBySession.get(sessionId);
+        if (!sockets) {
+            sockets = new Set();
+            this.socketsBySession.set(sessionId, sockets);
+        }
+        sockets.add(socket);
+        socket.on("close", () => {
+            sockets.delete(socket);
+        });
+    }
+    /**
+     * Frame sent to each global subscriber the moment it joins, before any live
+     * event. It closes the join race for state the browser would otherwise only
+     * fetch over HTTP: with two proxy hops in federation, that fetch can resolve
+     * before the upstream subscription exists and then be clobbered by a stale
+     * value.
+     */
+    setGlobalJoinFrame(frame) {
+        this.globalJoinFrame = frame;
+    }
+    addGlobal(socket) {
+        this.globalSockets.add(socket);
+        socket.on("close", () => this.globalSockets.delete(socket));
+        const joinFrame = this.globalJoinFrame?.();
+        if (joinFrame !== undefined)
+            this.sendToSocket(this.globalSockets, socket, JSON.stringify(joinFrame));
+    }
+    publish(sessionId, event) {
+        const seq = (this.seqBySession.get(sessionId) ?? 0) + 1;
+        this.seqBySession.set(sessionId, seq);
+        // Keep seq monotonic (join-time watermark) but skip serialization when no
+        // browser is subscribed: stringifying every delta/tool event on the
+        // agent's event loop with zero listeners was measurable overhead.
+        const sockets = this.socketsBySession.get(sessionId);
+        if (sockets === undefined || sockets.size === 0)
+            return;
+        const payload = JSON.stringify({ ...projectBrowserSessionEvent(event), seq });
+        this.sendToSockets(sockets, payload);
+    }
+    /**
+     * Last per-session sequence number stamped by {@link publish} (0 before any
+     * event). Callers building a join-time stream snapshot read this as the
+     * watermark: buffered live events with `seq <= currentSeq` are already
+     * reflected in the snapshot's partial and must be dropped by the client.
+     */
+    currentSeq(sessionId) {
+        return this.seqBySession.get(sessionId) ?? 0;
+    }
+    publishGlobal(event) {
+        this.publishRealtime(event);
+    }
+    publishNotificationSummary(event) {
+        const payload = JSON.stringify(event);
+        this.sendToSockets(this.globalSockets, payload);
+    }
+    publishRealtime(event) {
+        if (this.globalSockets.size === 0)
+            return;
+        const payload = JSON.stringify(event);
+        this.sendToSockets(this.globalSockets, payload);
+    }
+    sendToSockets(sockets, payload) {
+        if (sockets === undefined)
+            return;
+        for (const socket of sockets)
+            this.sendToSocket(sockets, socket, payload);
+    }
+    sendToSocket(sockets, socket, payload) {
+        if (socket.readyState !== socket.OPEN)
+            return;
+        try {
+            socket.send(payload);
+        }
+        catch {
+            sockets.delete(socket);
+            try {
+                socket.terminate();
+            }
+            catch {
+                // Removal is authoritative; cleanup failure must not block healthy sockets.
+            }
+        }
+    }
+}
+//# sourceMappingURL=sessionEventHub.js.map

package/dist/server/realtime/sessionEventHub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionEventHub.js","sourceRoot":"","sources":["../../../src/server/realtime/sessionEventHub.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAU5E,MAAM,OAAO,eAAe;IAA5B;QACmB,qBAAgB,GAAG,IAAI,GAAG,EAA+B,CAAC;QAC1D,kBAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,iBAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAwF5D,CAAC;IArFC,GAAG,CAAC,SAAiB,EAAE,MAAsB;QAC3C,IAAI,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,KAA0B;QAC3C,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;IAC/B,CAAC;IAED,SAAS,CAAC,MAAsB;QAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,KAAqB;QAC9C,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACtC,0EAA0E;QAC1E,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,0BAA0B,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,aAAa,CAAC,KAAyB;QACrC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,0BAA0B,CAAC,KAAsC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,eAAe,CAAC,KAAoB;QAClC,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAEO,aAAa,CAAC,OAAwC,EAAE,OAAe;QAC7E,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAEO,YAAY,CAAC,OAA4B,EAAE,MAAsB,EAAE,OAAe;QACxF,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI;YAAE,OAAO;QAC9C,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/server/requestCancellation.js

@@ -0,0 +1,32 @@
+/**
+ * Turns an inbound HTTP disconnect into cooperative cancellation for a bounded
+ * downstream operation. A normal completed response never aborts the signal.
+ */
+export function requestCancellation(request, reply) {
+    const controller = new AbortController();
+    const abort = () => {
+        if (!controller.signal.aborted) {
+            controller.abort(new DOMException("HTTP request cancelled", "AbortError"));
+        }
+    };
+    const abortOnPrematureResponseClose = () => {
+        if (!reply.raw.writableEnded)
+            abort();
+    };
+    request.raw.once("aborted", abort);
+    reply.raw.once("close", abortOnPrematureResponseClose);
+    // Node auto-destroys the request stream once its body has been fully read, so
+    // `request.raw.destroyed` alone does not mean the client went away. Only an
+    // incomplete request stream, or a response closed before it was written, is a
+    // real disconnect that happened before this cancellation was installed.
+    if ((request.raw.destroyed && !request.raw.complete) || (reply.raw.destroyed && !reply.raw.writableEnded))
+        abort();
+    return {
+        signal: controller.signal,
+        dispose() {
+            request.raw.removeListener("aborted", abort);
+            reply.raw.removeListener("close", abortOnPrematureResponseClose);
+        },
+    };
+}
+//# sourceMappingURL=requestCancellation.js.map

package/dist/server/requestCancellation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestCancellation.js","sourceRoot":"","sources":["../../src/server/requestCancellation.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAuB,EAAE,KAAmB;IAC9E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC;IACF,MAAM,6BAA6B,GAAG,GAAS,EAAE;QAC/C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa;YAAE,KAAK,EAAE,CAAC;IACxC,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACnC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IACvD,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,wEAAwE;IACxE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,KAAK,EAAE,CAAC;IAEnH,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO;YACL,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC7C,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QACnE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/sessiond/agentHttpDispatcher.js

@@ -0,0 +1,108 @@
+import { EventEmitter } from "node:events";
+import { SettingsManager } from "@earendil-works/pi-coding-agent";
+import { Client, EnvHttpProxyAgent, Pool, setGlobalDispatcher } from "undici";
+/**
+ * HTTP idle timeout for the session daemon's embedded Pi runtime.
+ *
+ * undici's global dispatcher caps `bodyTimeout` and `headersTimeout` at
+ * 300_000 ms by default, so any model response that stays idle for 5 minutes
+ * (slow local backends such as vLLM producing a single chunk) dies with
+ * `TypeError: terminated` — surfaced as "(SYSTEM) Model response failed:
+ * terminated" (issue #113).
+ *
+ * The pi CLI avoids this by calling
+ * `configureHttpDispatcher(settingsManager.getHttpIdleTimeoutMs())` at
+ * bootstrap; the Pi SDK setting `httpIdleTimeoutMs` (agent profile
+ * `settings.json`, default 300_000, `0` disables the idle timers) was simply
+ * never applied by PI WEB's embedded session runtime. This module is that
+ * missing step for the session daemon.
+ *
+ * The SDK's own `configureHttpDispatcher` lives in
+ * `@earendil-works/pi-coding-agent/dist/core/http-dispatcher.js`, but the
+ * package `exports` map blocks deep imports (`ERR_PACKAGE_PATH_NOT_EXPORTED`)
+ * and nothing equivalent is re-exported, so the semantics are mirrored here.
+ * The one deliberate deviation is skipping the SDK's `undici.install()` step,
+ * which replaces `globalThis.fetch` with npm undici's fetch to work around
+ * Node 26.0's bundled fetch failing to decompress responses read through an
+ * npm dispatcher. A long-lived shared daemon should change the dispatcher,
+ * not the fetch implementation every in-process consumer sees; built-in
+ * fetch on Node 22/24 honors the global dispatcher without it. If a future
+ * Node reintroduces the mismatch (symptom: `response.json()` failing on
+ * compressed bodies), revisit. If the SDK ever exports
+ * `configureHttpDispatcher`, prefer delegating to it.
+ *
+ * The value is applied once, at daemon start; changing `httpIdleTimeoutMs`
+ * requires restarting the session daemon.
+ */
+const DEFAULT_HTTP_IDLE_TIMEOUT_MS = 300_000;
+/**
+ * Read the active agent profile's `httpIdleTimeoutMs` through the SDK
+ * `SettingsManager`, reusing its parsing, validation, and defaults
+ * (`"disabled"` → 0, absent → 300_000, invalid → throws).
+ */
+export function resolveAgentHttpIdleTimeoutMs({ agentDir, cwd }) {
+    return SettingsManager.create(cwd, agentDir).getHttpIdleTimeoutMs();
+}
+// Undici can emit an internal Client "error" while terminating a mid-stream
+// fetch body. The body stream still rejects through the response reader; this
+// listener only prevents EventEmitter's unhandled "error" special case from
+// crashing the daemon. `Dispatcher`'s typed event overloads hide the generic
+// `EventEmitter.on`, so the listener is attached through the prototype.
+const ignoreUndiciDispatcherError = () => { };
+function withUndiciErrorListener(dispatcher) {
+    EventEmitter.prototype.on.call(dispatcher, "error", ignoreUndiciDispatcherError);
+    return dispatcher;
+}
+function createUndiciClient(origin, options) {
+    return withUndiciErrorListener(new Client(origin, options));
+}
+function createUndiciOriginDispatcher(origin, options) {
+    if (options.connections === 1) {
+        return createUndiciClient(origin, options);
+    }
+    return withUndiciErrorListener(new Pool(origin, {
+        ...options,
+        factory: createUndiciClient,
+    }));
+}
+/**
+ * Install a global undici dispatcher that applies `timeoutMs` to both
+ * `bodyTimeout` and `headersTimeout`, mirroring the SDK's
+ * `configureHttpDispatcher`. `0` disables the idle timers (undici semantics).
+ */
+export function configureAgentHttpDispatcher(timeoutMs) {
+    if (!Number.isFinite(timeoutMs) || timeoutMs < 0) {
+        throw new Error(`Invalid HTTP idle timeout: ${String(timeoutMs)}`);
+    }
+    const normalizedTimeoutMs = Math.floor(timeoutMs);
+    const dispatcher = withUndiciErrorListener(new EnvHttpProxyAgent({
+        allowH2: false,
+        bodyTimeout: normalizedTimeoutMs,
+        headersTimeout: normalizedTimeoutMs,
+        clientFactory: createUndiciClient,
+        factory: createUndiciOriginDispatcher,
+    }));
+    setGlobalDispatcher(dispatcher);
+}
+/**
+ * Resolve the agent profile's `httpIdleTimeoutMs` and install it on the
+ * global dispatcher. Never throws: an unreadable or invalid setting falls
+ * back to the 300_000 ms default and reports a warning for logging, so a bad
+ * settings file cannot keep the daemon from starting.
+ */
+export function applyAgentHttpIdleTimeout({ agentDir, cwd }) {
+    let timeoutMs = DEFAULT_HTTP_IDLE_TIMEOUT_MS;
+    let warning;
+    try {
+        timeoutMs = resolveAgentHttpIdleTimeoutMs({ agentDir, cwd });
+    }
+    catch (error) {
+        warning = `Falling back to the ${String(DEFAULT_HTTP_IDLE_TIMEOUT_MS)} ms HTTP idle default because the agent profile httpIdleTimeoutMs could not be applied: ${describeError(error)}`;
+    }
+    configureAgentHttpDispatcher(timeoutMs);
+    return warning === undefined ? { timeoutMs } : { timeoutMs, warning };
+}
+function describeError(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=agentHttpDispatcher.js.map

package/dist/server/sessiond/agentHttpDispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentHttpDispatcher.js","sourceRoot":"","sources":["../../../src/server/sessiond/agentHttpDispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,mBAAmB,EAAmB,MAAM,QAAQ,CAAC;AAE/F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,MAAM,4BAA4B,GAAG,OAAO,CAAC;AAc7C;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,EAAE,QAAQ,EAAE,GAAG,EAA4B;IACvF,OAAO,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,oBAAoB,EAAE,CAAC;AACtE,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,2BAA2B,GAAG,GAAS,EAAE,GAAkD,CAAC,CAAC;AAEnG,SAAS,uBAAuB,CAAuB,UAAa;IAClE,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,2BAA2B,CAAC,CAAC;IACjF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAW,EAAE,OAAuB;IAC9D,OAAO,uBAAuB,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAW,EAAE,OAAqB;IACtE,IAAI,OAAO,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,uBAAuB,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE;QAC9C,GAAG,OAAO;QACV,OAAO,EAAE,kBAAkB;KAC5B,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,SAAiB;IAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,iBAAiB,CAAC;QAC/D,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,mBAAmB;QAChC,cAAc,EAAE,mBAAmB;QACnC,aAAa,EAAE,kBAAkB;QACjC,OAAO,EAAE,4BAA4B;KACtC,CAAC,CAAC,CAAC;IACJ,mBAAmB,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,EAAE,QAAQ,EAAE,GAAG,EAA4B;IACnF,IAAI,SAAS,GAAG,4BAA4B,CAAC;IAC7C,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,SAAS,GAAG,6BAA6B,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,uBAAuB,MAAM,CAAC,4BAA4B,CAAC,2FAA2F,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IACzL,CAAC;IACD,4BAA4B,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/server/sessiond/agentProcessEnvironment.js

@@ -0,0 +1,61 @@
+/**
+ * Environment hygiene for agent-executed processes.
+ *
+ * Sessions run inside the session daemon process, so everything agents can
+ * spawn — the bash tool, terminals, subsessions — inherits the daemon's
+ * environment by default. That inheritance is deliberate: the daemon's
+ * `PI_WEB_*` wiring stays visible so agent-facing tooling keeps working, and
+ * a second PI WEB instance started from inside a session resolves the same
+ * state and fails loudly at startup (see `sessiondStateOwnership`) instead of
+ * silently corrupting the live daemon's data. `PI_WEB_SESSION=1` and the
+ * session environment facts tell agents they are nested and which precautions
+ * apply.
+ *
+ * The daemon captures its environment once at startup for its own use and
+ * then removes the handful of keys that silently distort the tools agents
+ * run, so all later spawns inherit a clean environment without per-call-site
+ * filtering. Visibility rules:
+ *
+ * - Ordinary variables (`PATH`, `HOME`, `XDG_CONFIG_HOME`, proxy keys, …)
+ *   stay.
+ * - `PI_WEB_*` keys stay — including `PI_WEB_DOCKER_*` deployment descriptors
+ *   the agent-facing `pi-web-docker` CLI reads, and the deprecated
+ *   `PI_WEB_AGENT_*` aliases: the canonical `PI_CODING_AGENT_*` vars are
+ *   exported with the fully resolved values, so both names resolve
+ *   identically for anything started from here.
+ * - `HOSTEXEC_*` stays: agents use `hostexec`.
+ * - `PI_CODING_AGENT_DIR` stays so agent-spawned `pi` CLIs find the profile's
+ *   auth and models; `PI_CODING_AGENT_SESSION_DIR` stays for the same reason:
+ *   it is documented `pi` configuration, not daemon wiring, so a deployment
+ *   that sets it wants every `pi` process — whether daemon-spawned or started
+ *   by an agent — using the same session storage.
+ * - `NODE_ENV` and `PORT` are app-runtime configuration and the only removals:
+ *   `NODE_ENV=production` makes npm skip devDependencies and flips Node
+ *   package-export conditions, and `PORT` leaks into the listener
+ *   configuration of tools agents run.
+ */
+/**
+ * Keys that configure the daemon or app runtime in ways that silently break
+ * the tools agents run. Daemon configuration belongs in `PI_WEB_`-prefixed
+ * keys, which stay visible; a key only belongs here when it cannot carry the
+ * prefix (deployment conventions like `NODE_ENV`).
+ */
+const DAEMON_ONLY_ENV_KEYS = new Set(["NODE_ENV", "PORT"]);
+export function isAgentVisibleEnvKey(key) {
+    return !DAEMON_ONLY_ENV_KEYS.has(key);
+}
+/**
+ * Delete every non-agent-visible key from `env` — the daemon's `process.env`
+ * at startup — and return the removed key names, sorted, for logging.
+ */
+export function scrubNonAgentVisibleEnvKeys(env) {
+    const scrubbed = Object.keys(env).filter((key) => !isAgentVisibleEnvKey(key));
+    for (const key of scrubbed) {
+        // process.env is a dynamic key/value bag; deleting the daemon-only keys is
+        // the whole point of the scrub, and the keys cannot be known statically.
+        // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+        delete env[key];
+    }
+    return scrubbed.sort();
+}
+//# sourceMappingURL=agentProcessEnvironment.js.map

package/dist/server/sessiond/agentProcessEnvironment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentProcessEnvironment.js","sourceRoot":"","sources":["../../../src/server/sessiond/agentProcessEnvironment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3D,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAsB;IAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,yEAAyE;QACzE,gEAAgE;QAChE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/server/sessiond/pluginBackendRoutes.js

@@ -0,0 +1,64 @@
+import { isPiWebPluginId } from "../../shared/pluginIds.js";
+import { parsePluginBackendRequestEnvelope, PLUGIN_BACKEND_REQUEST_BODY_MAX_BYTES, PLUGIN_BACKEND_RESPONSE_JSON_MAX_BYTES, requirePluginBackendOperation, serializeBoundedPluginBackendJson, } from "../../shared/pluginBackendProtocol.js";
+import { WorkspaceProviderRequestError, } from "../workspaces/workspaceProviderRegistry.js";
+/** JSON-only sessiond boundary for the active owner of one current workspace. */
+export function registerPluginBackendRoutes(app, dependencies, prefix = "/plugin-backends") {
+    app.post(`${prefix}/:pluginId/projects/:projectId/workspaces/:workspaceId/:operation`, { bodyLimit: PLUGIN_BACKEND_REQUEST_BODY_MAX_BYTES }, async (request, reply) => {
+        const { pluginId, projectId, workspaceId } = request.params;
+        let operation = request.params.operation;
+        let envelope;
+        try {
+            if (!isPiWebPluginId(pluginId))
+                throw new Error(`Invalid PI WEB plugin id: ${pluginId}`);
+            operation = requirePluginBackendOperation(operation);
+            if (projectId === "")
+                throw new Error("Project id is required");
+            if (workspaceId === "")
+                throw new Error("Workspace id is required");
+            envelope = parsePluginBackendRequestEnvelope(request.body);
+        }
+        catch (error) {
+            return attributedError(reply, 400, boundedErrorMessage(error), "invalid-request", pluginId, operation);
+        }
+        let project;
+        try {
+            project = await dependencies.projects.requireProject(projectId);
+        }
+        catch (error) {
+            const message = boundedErrorMessage(error);
+            return attributedError(reply, message === "Project not found" ? 404 : 500, message, message === "Project not found" ? "project-not-found" : "project-resolution-failed", pluginId, operation);
+        }
+        try {
+            const result = await dependencies.backends.request({
+                pluginId,
+                moduleRevision: envelope.revision,
+                project,
+                workspaceId,
+                operation,
+                input: envelope.input,
+            });
+            const serialized = serializeBoundedPluginBackendJson(result, `Server plugin ${pluginId} operation ${operation} result`, PLUGIN_BACKEND_RESPONSE_JSON_MAX_BYTES);
+            return await reply.type("application/json; charset=utf-8").send(serialized);
+        }
+        catch (error) {
+            return await pluginBackendRequestFailed(reply, error, pluginId, operation);
+        }
+        finally {
+            dependencies.onWorkspacesMutated();
+        }
+    });
+}
+function pluginBackendRequestFailed(reply, error, pluginId, operation) {
+    if (error instanceof WorkspaceProviderRequestError) {
+        return attributedError(reply, error.statusCode, error.message, error.code, pluginId, operation);
+    }
+    return attributedError(reply, 502, `Plugin backend request failed: ${boundedErrorMessage(error)}`, "request-failed", pluginId, operation);
+}
+function attributedError(reply, statusCode, message, code, pluginId, operation) {
+    return reply.code(statusCode).send({ error: message, code, pluginId, operation });
+}
+function boundedErrorMessage(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.length <= 2_048 ? message : `${message.slice(0, 2_045)}...`;
+}
+//# sourceMappingURL=pluginBackendRoutes.js.map

package/dist/server/sessiond/pluginBackendRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginBackendRoutes.js","sourceRoot":"","sources":["../../../src/server/sessiond/pluginBackendRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EACL,iCAAiC,EACjC,qCAAqC,EACrC,sCAAsC,EACtC,6BAA6B,EAC7B,iCAAiC,GAElC,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,6BAA6B,GAE9B,MAAM,4CAA4C,CAAC;AA4BpD,iFAAiF;AACjF,MAAM,UAAU,2BAA2B,CACzC,GAAoB,EACpB,YAA4C,EAC5C,MAAM,GAAG,kBAAkB;IAE3B,GAAG,CAAC,IAAI,CACN,GAAG,MAAM,mEAAmE,EAC5E,EAAE,SAAS,EAAE,qCAAqC,EAAE,EACpD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAC5D,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QACzC,IAAI,QAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;YACzF,SAAS,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,SAAS,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAChE,IAAI,WAAW,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACpE,QAAQ,GAAG,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO,eAAe,CACpB,KAAK,EACL,OAAO,KAAK,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAC3C,OAAO,EACP,OAAO,KAAK,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,2BAA2B,EACnF,QAAQ,EACR,SAAS,CACV,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACjD,QAAQ;gBACR,cAAc,EAAE,QAAQ,CAAC,QAAQ;gBACjC,OAAO;gBACP,WAAW;gBACX,SAAS;gBACT,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,iCAAiC,CAClD,MAAM,EACN,iBAAiB,QAAQ,cAAc,SAAS,SAAS,EACzD,sCAAsC,CACvC,CAAC;YACF,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,0BAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,mBAAmB,EAAE,CAAC;QACrC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAmB,EACnB,KAAc,EACd,QAAgB,EAChB,SAAiB;IAEjB,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;QACnD,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,eAAe,CACpB,KAAK,EACL,GAAG,EACH,kCAAkC,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAC9D,gBAAgB,EAChB,QAAQ,EACR,SAAS,CACV,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,KAAmB,EACnB,UAAkB,EAClB,OAAe,EACf,IAAY,EACZ,QAAgB,EAChB,SAAiB;IAEjB,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC;AAC7E,CAAC"}