@wjarka/cezarion 0.10.0-pr30.54

package/dist/server/git.js

@@ -0,0 +1,112 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const exec = promisify(execFile);
+async function git(root, args) {
+    const { stdout } = await exec('git', args, { cwd: root, maxBuffer: 10 * 1024 * 1024 });
+    return stdout;
+}
+/** Null when `dir` isn't inside a git repository. */
+export async function getRepoInfo(dir) {
+    try {
+        const root = (await git(dir, ['rev-parse', '--show-toplevel'])).trim();
+        const branch = (await git(root, ['rev-parse', '--abbrev-ref', 'HEAD'])).trim();
+        let remote;
+        try {
+            remote = (await git(root, ['remote', 'get-url', 'origin'])).trim() || undefined;
+        }
+        catch {
+            // No remote named `origin` — fall back to the first configured remote,
+            // so repos whose only remote is named e.g. `github` or `upstream` still
+            // get forge detection. Truly remote-less repos land in the inner catch.
+            try {
+                const names = (await git(root, ['remote'])).split('\n').map((n) => n.trim()).filter(Boolean);
+                if (names[0]) {
+                    remote = (await git(root, ['remote', 'get-url', names[0]])).trim() || undefined;
+                }
+            }
+            catch {
+                // no remotes at all — local-only repo
+            }
+        }
+        return { root, branch, remote };
+    }
+    catch {
+        return null;
+    }
+}
+/** The current commit, pinned as a full SHA. Null outside a repository or before its first commit. */
+export async function getHeadCommit(root) {
+    try {
+        return (await git(root, ['rev-parse', '--verify', 'HEAD^{commit}'])).trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function getStatus(root) {
+    const out = await git(root, ['status', '--porcelain']);
+    return out
+        .split('\n')
+        .filter(Boolean)
+        .map((line) => ({ status: line.slice(0, 2).trim() || '??', path: line.slice(3) }));
+}
+/** Working-tree diff vs HEAD (staged + unstaged), capped for the GUI. */
+export async function getDiff(root, cap = 400_000) {
+    const diff = await git(root, ['diff', 'HEAD']);
+    if (diff.length > cap)
+        return `${diff.slice(0, cap)}\n… (diff truncated)`;
+    return diff;
+}
+/** Local + origin branch names, deduped (origin/x counts as x), sorted.
+ *  Feeds the Repo tab's base-branch picker. */
+export async function getBranches(root) {
+    const names = new Set();
+    try {
+        const local = await git(root, ['branch', '--list', '--format=%(refname:short)']);
+        for (const line of local.split('\n')) {
+            const name = line.trim();
+            if (name)
+                names.add(name);
+        }
+    }
+    catch {
+        // no branches — empty list
+    }
+    try {
+        const remote = await git(root, ['branch', '-r', '--list', '--format=%(refname:short)']);
+        for (const line of remote.split('\n')) {
+            const name = line.trim();
+            if (!name || name.includes('HEAD'))
+                continue;
+            names.add(name.replace(/^origin\//, ''));
+        }
+    }
+    catch {
+        // no remotes — local only
+    }
+    return [...names].filter((n) => !n.startsWith('cez/')).sort((a, b) => a.localeCompare(b));
+}
+/** One commit — message + stat + patch — for the Repo view's expandable rows. */
+export async function getCommit(root, sha, cap = 200_000) {
+    if (!/^[0-9a-f]{4,40}$/i.test(sha))
+        return '(not a commit hash)';
+    const out = await git(root, ['show', '--stat', '--patch', '--no-color', sha]);
+    if (out.length > cap)
+        return `${out.slice(0, cap)}\n… (diff truncated)`;
+    return out;
+}
+export async function getLog(root, count = 20) {
+    const out = await git(root, [
+        'log',
+        `-${count}`,
+        '--pretty=format:%h%x1f%s%x1f%an%x1f%cr',
+    ]);
+    return out
+        .split('\n')
+        .filter(Boolean)
+        .map((line) => {
+        const [hash = '', subject = '', author = '', when = ''] = line.split('\x1f');
+        return { hash, subject, author, when };
+    });
+}
+//# sourceMappingURL=git.js.map

package/dist/server/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/server/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAoBjC,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAAc;IAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/E,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7F,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;oBACb,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;gBAClF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IACvD,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,GAAG,GAAG,OAAO;IACvD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,sBAAsB,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;+CAC+C;AAC/C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACjF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,IAAI;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACxF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC7C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW,EAAE,GAAG,GAAG,OAAO;IACtE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,sBAAsB,CAAC;IACxE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,KAAK,GAAG,EAAE;IACnD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAC1B,KAAK;QACL,IAAI,KAAK,EAAE;QACX,wCAAwC;KACzC,CAAC,CAAC;IACH,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/server/github.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Thin delegate — the gh-CLI listing logic moved behind the forge-driver seam
+ * (`src/server/forge/github.ts`, cockpit-ui redesign spec §"Forge-driver
+ * seam"). Kept so existing imports and the protected `/api/github` response
+ * shape (BACKWARD_COMPATIBILITY.md §2) stay exactly as they were.
+ */
+export { fetchGithub, fetchGithubChecks, fetchGithubComments, fetchGithubPrDiff, fetchGithubRefStatus, forgetRefStatus, readCachedRefStatuses, refNumberFromUrl, GithubPrNotFoundError, GH_MAX_LIMIT, GH_CHECKS_MAX, GH_REF_STATUS_MAX, } from './forge/github.ts';
+export type { GithubData, GithubItem, GithubChecksData, GithubRefStatusData, ReferenceStatus, } from './forge/github.ts';
+export type { ForgeComment, ForgeCommentsData, ForgeTimelineEvent, ForgeTimelineEventKind, ForgePrDiffResult, ForgePrChange, } from './forge/types.ts';

package/dist/server/github.js

@@ -0,0 +1,8 @@
+/**
+ * Thin delegate — the gh-CLI listing logic moved behind the forge-driver seam
+ * (`src/server/forge/github.ts`, cockpit-ui redesign spec §"Forge-driver
+ * seam"). Kept so existing imports and the protected `/api/github` response
+ * shape (BACKWARD_COMPATIBILITY.md §2) stay exactly as they were.
+ */
+export { fetchGithub, fetchGithubChecks, fetchGithubComments, fetchGithubPrDiff, fetchGithubRefStatus, forgetRefStatus, readCachedRefStatuses, refNumberFromUrl, GithubPrNotFoundError, GH_MAX_LIMIT, GH_CHECKS_MAX, GH_REF_STATUS_MAX, } from './forge/github.js';
+//# sourceMappingURL=github.js.map

package/dist/server/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/server/github.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,iBAAiB,GAClB,MAAM,mBAAmB,CAAC"}

package/dist/server/launch-key.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Launch-key (spec 011): a random secret baked into the bookmarklets so only
+ * pages that got it from THIS cockpit can auto-start a run via `/new?auto=1`.
+ * A rogue web page can navigate the browser to localhost, but it cannot read
+ * `.ai/cezar/launch-key` — without the key `/new` only prefills the form.
+ */
+export declare function ensureLaunchKey(dataDir: string): string;

package/dist/server/launch-key.js

@@ -0,0 +1,33 @@
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { join } from 'node:path';
+/**
+ * Launch-key (spec 011): a random secret baked into the bookmarklets so only
+ * pages that got it from THIS cockpit can auto-start a run via `/new?auto=1`.
+ * A rogue web page can navigate the browser to localhost, but it cannot read
+ * `.ai/cezar/launch-key` — without the key `/new` only prefills the form.
+ */
+export function ensureLaunchKey(dataDir) {
+    const path = join(dataDir, 'launch-key');
+    try {
+        if (existsSync(path)) {
+            const existing = readFileSync(path, 'utf8').trim();
+            if (existing)
+                return existing;
+        }
+    }
+    catch {
+        // unreadable — fall through and regenerate
+    }
+    const key = randomUUID();
+    try {
+        mkdirSync(dataDir, { recursive: true });
+        writeFileSync(path, `${key}\n`, { encoding: 'utf8', mode: 0o600 });
+        chmodSync(path, 0o600); // best-effort — mode is ignored on pre-existing files
+    }
+    catch {
+        // non-fatal: the key still protects auto-start for this process lifetime
+    }
+    return key;
+}
+//# sourceMappingURL=launch-key.js.map

package/dist/server/launch-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-key.js","sourceRoot":"","sources":["../../src/server/launch-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,aAAa,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,sDAAsD;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/open-in-app.d.ts

@@ -0,0 +1,66 @@
+import type { RunnerId } from '../core/agent-runner.ts';
+/**
+ * "Open in…" session takeover (#open-in): detect the editors / file managers / terminals on THIS
+ * machine, and open a run's worktree in the one the user picks — the desktop-app equivalent of
+ * the "cd <path>" hint. Local-only; the server gates these behind `localHandoff` (CEZ_REMOTE).
+ *
+ * Detection is best-effort and cross-platform: an editor counts as present if its CLI is on PATH
+ * or (macOS) its .app bundle is installed. Finder/file-manager and Terminal are always offered.
+ *
+ * WSL (#361): when this process itself runs inside WSL, `process.platform` reads `linux` but the
+ * user's GUI apps mostly live on the Windows side, reachable through interop. `resolveOnPath`
+ * additionally probes directly-spawnable `.com`/`.exe` suffixes there (Node's own PATH lookup
+ * only does that under real win32), and `openInApp`/`openFileManager` translate the worktree path
+ * to its `\\wsl$\…` (or `C:\…`) form before handing it to a resolved Windows-side binary — a WSL-native
+ * launcher (e.g. VS Code's Remote-WSL `code` shim) keeps the POSIX path unchanged.
+ */
+export interface OpenTarget {
+    id: string;
+    label: string;
+    /** A stable icon key the UI maps to a concrete icon component (#361). Optional so an older
+     *  server talking to a newer client (or vice versa) just falls back to a generic icon —
+     *  never a protocol break. */
+    icon?: string;
+}
+/** Is `bin` (with a directly-spawnable Windows suffix under win32/WSL interop) on PATH?
+ *  Returns the exact resolved name (which may carry the suffix) — pure filesystem probe, no
+ *  child process — or null. `.cmd`/`.bat` are intentionally excluded: modern Node refuses to
+ *  spawn them directly, while launching them through a shell would reintroduce the BatBadBut
+ *  command-injection surface fixed in #459. An unavailable target is safer than one the menu
+ *  offers and then silently fails to open (#469 review).
+ *
+ *  The optional environment arguments keep Windows/WSL suffix behavior testable on any host. */
+export declare function resolveOnPath(bin: string, platform?: NodeJS.Platform, wsl?: boolean, searchPath?: string): string | null;
+/** The runner behind a `cli:<runner>` open target, or null when the id isn't a CLI handoff. */
+export declare function agentCliRunner(targetId: string): RunnerId | null;
+/** The open targets available on this machine: the file manager, a terminal, every detected
+ *  editor, and every installed coding-agent CLI. Order is stable so the menu never reshuffles. */
+export declare function detectOpenTargets(): OpenTarget[];
+/** The (bin, args) a file-manager launch resolves to — pure so the per-platform routing
+ *  (including the WSL→Explorer interop branch) is unit-testable without spawning anything.
+ *  `platform`/`wsl` default to the real environment; tests pass them explicitly. */
+export declare function fileManagerLaunch(dir: string, platform?: NodeJS.Platform, wsl?: boolean): {
+    bin: string;
+    args: string[];
+};
+/** Open a single worktree FILE with whatever application the OS has registered as its
+ *  default handler — the diff pane's "open in default app" action for images (#365). Distinct
+ *  from `openFileManager` above: that opens a *directory* in the file manager; this launches
+ *  the file itself (e.g. the OS's default image viewer), never a directory listing. Local-only
+ *  by construction — the caller gates this behind `localHandoff`.
+ *
+ *  `path` is worktree CONTENT — a filename some cloned repo or coding agent chose — so it is
+ *  hostile input, and it must never reach a process that re-parses its command line. That rules
+ *  `cmd.exe` out on Windows: an argument array does NOT protect you there, because libuv quotes
+ *  a spawn arg only when it contains a space/tab/quote and passes everything else verbatim, so
+ *  `cmd /c start "" C:\dev\proj\a&calc&.png` would let cmd's `&` run `calc` (BatBadBut,
+ *  CVE-2024-27980). `explorer <file>` hands the file to its registered handler with no such
+ *  re-parsing — the same launcher `openFileManager` already uses for directories. */
+export declare function openFileInDefaultApp(path: string): Promise<boolean>;
+/** Open `dir` in the given target. Unknown/unavailable target → false (the caller 409s). */
+export declare function openInApp(targetId: string, dir: string): Promise<boolean>;
+/** The path argument to hand a resolved binary: a Windows-suffixed name found through WSL
+ *  interop needs the Windows-side path; a bare-name binary (native Linux, or a WSL-aware shim
+ *  like VS Code's Remote-WSL `code`) takes the POSIX path unchanged. `wsl` defaults to the real
+ *  environment; tests pass it explicitly so this needs no global platform stubbing. */
+export declare function launchPathFor(resolvedBin: string, dir: string, wsl?: boolean): string;

package/dist/server/open-in-app.js

@@ -0,0 +1,211 @@
+import { spawn } from 'node:child_process';
+import { accessSync, constants, existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { openInTerminal, refuseSpawnUnderTest } from './open-in-terminal.js';
+import { isWsl, translateToWindowsPath } from './wsl.js';
+const EDITORS = [
+    { id: 'vscode', label: 'VS Code', icon: 'vscode', cli: 'code', mac: 'Visual Studio Code' },
+    { id: 'cursor', label: 'Cursor', icon: 'cursor', cli: 'cursor', mac: 'Cursor' },
+    { id: 'zed', label: 'Zed', icon: 'zed', cli: 'zed', mac: 'Zed' },
+    { id: 'windsurf', label: 'Windsurf', icon: 'windsurf', cli: 'windsurf', mac: 'Windsurf' },
+    { id: 'sublime', label: 'Sublime Text', icon: 'sublime', cli: 'subl', mac: 'Sublime Text' },
+    // JetBrains (#361 gap 3): Toolbox's "generate shell scripts" produces one bare-name launcher
+    // per product on every OS (idea, pycharm, …); the .app names below cover the Community /
+    // Ultimate / Professional edition splits Toolbox and the standalone installers both produce.
+    { id: 'idea', label: 'IntelliJ IDEA', icon: 'idea', cli: 'idea', mac: ['IntelliJ IDEA', 'IntelliJ IDEA CE', 'IntelliJ IDEA Ultimate'] },
+    { id: 'pycharm', label: 'PyCharm', icon: 'pycharm', cli: 'pycharm', mac: ['PyCharm', 'PyCharm CE', 'PyCharm Professional'] },
+    { id: 'webstorm', label: 'WebStorm', icon: 'webstorm', cli: 'webstorm', mac: 'WebStorm' },
+    { id: 'goland', label: 'GoLand', icon: 'goland', cli: 'goland', mac: 'GoLand' },
+    { id: 'rubymine', label: 'RubyMine', icon: 'rubymine', cli: 'rubymine', mac: 'RubyMine' },
+    { id: 'phpstorm', label: 'PhpStorm', icon: 'phpstorm', cli: 'phpstorm', mac: 'PhpStorm' },
+    { id: 'clion', label: 'CLion', icon: 'clion', cli: 'clion', mac: 'CLion' },
+    { id: 'rider', label: 'Rider', icon: 'rider', cli: 'rider', mac: 'Rider' },
+    { id: 'android-studio', label: 'Android Studio', icon: 'android-studio', cli: 'studio', mac: 'Android Studio' },
+    { id: 'xcode', label: 'Xcode', icon: 'xcode', mac: 'Xcode' },
+    { id: 'warp', label: 'Warp', icon: 'warp', cli: 'warp', mac: 'Warp' },
+];
+const FILE_MANAGER_LABEL = process.platform === 'darwin' ? 'Finder' : process.platform === 'win32' || isWsl() ? 'Explorer' : 'Files';
+/** Is `bin` (with a directly-spawnable Windows suffix under win32/WSL interop) on PATH?
+ *  Returns the exact resolved name (which may carry the suffix) — pure filesystem probe, no
+ *  child process — or null. `.cmd`/`.bat` are intentionally excluded: modern Node refuses to
+ *  spawn them directly, while launching them through a shell would reintroduce the BatBadBut
+ *  command-injection surface fixed in #459. An unavailable target is safer than one the menu
+ *  offers and then silently fails to open (#469 review).
+ *
+ *  The optional environment arguments keep Windows/WSL suffix behavior testable on any host. */
+export function resolveOnPath(bin, platform = process.platform, wsl = isWsl(), searchPath = process.env.PATH ?? '') {
+    const dirs = searchPath.split(platform === 'win32' ? ';' : ':');
+    const suffixed = platform === 'win32' || wsl;
+    const names = suffixed ? [bin, `${bin}.com`, `${bin}.exe`] : [bin];
+    for (const dir of dirs) {
+        if (!dir)
+            continue;
+        for (const name of names) {
+            try {
+                accessSync(join(dir, name), constants.X_OK);
+                return name;
+            }
+            catch {
+                // keep looking
+            }
+        }
+    }
+    return null;
+}
+function onPath(bin) {
+    return resolveOnPath(bin) !== null;
+}
+/** macOS: is any of `names` (`<name>.app`) installed in a standard Applications dir? */
+function macAppExists(names) {
+    if (process.platform !== 'darwin')
+        return false;
+    const candidates = Array.isArray(names) ? names : [names];
+    return candidates.some((name) => [
+        `/Applications/${name}.app`,
+        join(homedir(), 'Applications', `${name}.app`),
+        `/System/Applications/${name}.app`,
+    ].some((p) => existsSync(p)));
+}
+function editorAvailable(editor) {
+    if (editor.cli && onPath(editor.cli))
+        return true;
+    if (editor.mac && macAppExists(editor.mac))
+        return true;
+    return false;
+}
+/** Coding-agent CLIs a session can be handed off to (#cli-handoff). Selecting one opens a
+ *  terminal that resumes THIS run's session when the runner matches, or launches a fresh CLI in
+ *  the worktree otherwise. The actual command is built server-side (needs the run's session). */
+const AGENT_CLIS = [
+    { runner: 'claude', label: 'Claude CLI', icon: 'claude', bin: 'claude', envBin: process.env.CEZ_CLAUDE_BIN },
+    { runner: 'codex', label: 'Codex CLI', icon: 'codex', bin: 'codex', envBin: process.env.CEZ_CODEX_BIN },
+    { runner: 'opencode', label: 'OpenCode', icon: 'opencode', bin: 'opencode', envBin: process.env.CEZ_OPENCODE_BIN },
+    { runner: 'pi', label: 'pi CLI', icon: 'pi', bin: 'pi', envBin: process.env.CEZ_PI_BIN },
+];
+/** The runner behind a `cli:<runner>` open target, or null when the id isn't a CLI handoff. */
+export function agentCliRunner(targetId) {
+    const match = AGENT_CLIS.find((c) => `cli:${c.runner}` === targetId);
+    return match ? match.runner : null;
+}
+/** The open targets available on this machine: the file manager, a terminal, every detected
+ *  editor, and every installed coding-agent CLI. Order is stable so the menu never reshuffles. */
+export function detectOpenTargets() {
+    const targets = [
+        { id: 'finder', label: FILE_MANAGER_LABEL, icon: 'folder' },
+        { id: 'terminal', label: 'Terminal', icon: 'terminal' },
+    ];
+    for (const editor of EDITORS) {
+        if (editorAvailable(editor))
+            targets.push({ id: editor.id, label: editor.label, icon: editor.icon });
+    }
+    for (const cli of AGENT_CLIS) {
+        if ((cli.envBin && existsSync(cli.envBin)) || onPath(cli.bin)) {
+            targets.push({ id: `cli:${cli.runner}`, label: cli.label, icon: cli.icon });
+        }
+    }
+    return targets;
+}
+/** The (bin, args) a file-manager launch resolves to — pure so the per-platform routing
+ *  (including the WSL→Explorer interop branch) is unit-testable without spawning anything.
+ *  `platform`/`wsl` default to the real environment; tests pass them explicitly. */
+export function fileManagerLaunch(dir, platform = process.platform, wsl = isWsl()) {
+    if (platform === 'darwin')
+        return { bin: 'open', args: [dir] };
+    if (platform === 'win32')
+        return { bin: 'explorer', args: [dir] };
+    if (wsl)
+        return { bin: 'explorer.exe', args: [translateToWindowsPath(dir)] };
+    return { bin: 'xdg-open', args: [dir] };
+}
+/** Open `dir` in the file manager, natively per platform. Under WSL there is no Linux desktop to
+ *  hand `xdg-open` to — go through interop to Windows Explorer instead, translating the path. */
+async function openFileManager(dir) {
+    const { bin, args } = fileManagerLaunch(dir);
+    return runDetached(bin, args);
+}
+/** Open a single worktree FILE with whatever application the OS has registered as its
+ *  default handler — the diff pane's "open in default app" action for images (#365). Distinct
+ *  from `openFileManager` above: that opens a *directory* in the file manager; this launches
+ *  the file itself (e.g. the OS's default image viewer), never a directory listing. Local-only
+ *  by construction — the caller gates this behind `localHandoff`.
+ *
+ *  `path` is worktree CONTENT — a filename some cloned repo or coding agent chose — so it is
+ *  hostile input, and it must never reach a process that re-parses its command line. That rules
+ *  `cmd.exe` out on Windows: an argument array does NOT protect you there, because libuv quotes
+ *  a spawn arg only when it contains a space/tab/quote and passes everything else verbatim, so
+ *  `cmd /c start "" C:\dev\proj\a&calc&.png` would let cmd's `&` run `calc` (BatBadBut,
+ *  CVE-2024-27980). `explorer <file>` hands the file to its registered handler with no such
+ *  re-parsing — the same launcher `openFileManager` already uses for directories. */
+export async function openFileInDefaultApp(path) {
+    if (process.platform === 'darwin')
+        return runDetached('open', [path]);
+    if (process.platform === 'win32')
+        return runDetached('explorer', [path]);
+    return runDetached('xdg-open', [path]);
+}
+/** Open `dir` in the given target. Unknown/unavailable target → false (the caller 409s). */
+export async function openInApp(targetId, dir) {
+    if (targetId === 'finder')
+        return openFileManager(dir);
+    // A bare interactive shell at the worktree — `:` is a no-op so no command actually runs.
+    if (targetId === 'terminal')
+        return openInTerminal(dir, ':');
+    const editor = EDITORS.find((e) => e.id === targetId);
+    if (!editor)
+        return false;
+    if (editor.cli) {
+        const resolved = resolveOnPath(editor.cli);
+        if (resolved)
+            return runDetached(resolved, [launchPathFor(resolved, dir)]);
+    }
+    if (editor.mac && macAppExists(editor.mac))
+        return runDetached('open', ['-a', pickInstalledMacApp(editor.mac), dir]);
+    return false;
+}
+/** The path argument to hand a resolved binary: a Windows-suffixed name found through WSL
+ *  interop needs the Windows-side path; a bare-name binary (native Linux, or a WSL-aware shim
+ *  like VS Code's Remote-WSL `code`) takes the POSIX path unchanged. `wsl` defaults to the real
+ *  environment; tests pass it explicitly so this needs no global platform stubbing. */
+export function launchPathFor(resolvedBin, dir, wsl = isWsl()) {
+    if (wsl && /\.(com|exe)$/i.test(resolvedBin))
+        return translateToWindowsPath(dir);
+    return dir;
+}
+/** Which of an editor's candidate .app names is actually installed — `macAppExists` already
+ *  confirmed at least one is, this just picks it for the `open -a` argument. */
+function pickInstalledMacApp(names) {
+    const candidates = Array.isArray(names) ? names : [names];
+    return (candidates.find((name) => [
+        `/Applications/${name}.app`,
+        join(homedir(), 'Applications', `${name}.app`),
+        `/System/Applications/${name}.app`,
+    ].some((p) => existsSync(p))) ?? candidates[0]);
+}
+/** Spawn detached; success = no error within a short settle window (mirrors open-in-terminal). */
+function runDetached(bin, args) {
+    return new Promise((resolve) => {
+        refuseSpawnUnderTest(bin, args);
+        let child;
+        try {
+            child = spawn(bin, args, { stdio: 'ignore', detached: true });
+        }
+        catch {
+            resolve(false);
+            return;
+        }
+        let settled = false;
+        const settle = (ok) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(ok);
+        };
+        child.once('error', () => settle(false));
+        setTimeout(() => {
+            child.unref();
+            settle(true);
+        }, 250);
+    });
+}
+//# sourceMappingURL=open-in-app.js.map

package/dist/server/open-in-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-in-app.js","sourceRoot":"","sources":["../../src/server/open-in-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAuCzD,MAAM,OAAO,GAAgB;IAC3B,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,EAAE;IAC1F,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE;IAC/E,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE;IAChE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE;IACzF,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE;IAC3F,6FAA6F;IAC7F,yFAAyF;IACzF,6FAA6F;IAC7F,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,wBAAwB,CAAC,EAAE;IACvI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,sBAAsB,CAAC,EAAE;IAC5H,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE;IACzF,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE;IAC/E,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE;IACzF,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE;IACzF,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE;IAC1E,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE;IAC1E,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE;IAC/G,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE;IAC5D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE;CACtE,CAAC;AAEF,MAAM,kBAAkB,GACtB,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;AAE5G;;;;;;;gGAOgG;AAChG,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAC5C,GAAG,GAAY,KAAK,EAAE,EACtB,UAAU,GAAW,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;IAE3C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;AACrC,CAAC;AAED,wFAAwF;AACxF,SAAS,YAAY,CAAC,KAAwB;IAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC9B;QACE,iBAAiB,IAAI,MAAM;QAC3B,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,IAAI,MAAM,CAAC;QAC9C,wBAAwB,IAAI,MAAM;KACnC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAiB;IACxC,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;iGAEiG;AACjG,MAAM,UAAU,GAA2F;IACzG,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE;IAC5G,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE;IACvG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE;IAClH,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE;CACzF,CAAC;AAEF,+FAA+F;AAC/F,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,QAAQ,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED;kGACkG;AAClG,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAiB;QAC5B,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3D,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE;KACxD,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,eAAe,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;oFAEoF;AACpF,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAC5C,GAAG,GAAY,KAAK,EAAE;IAEtB,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/D,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAClE,IAAI,GAAG;QAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IAC7E,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED;iGACiG;AACjG,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;qFAYqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,OAAO,WAAW,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,GAAW;IAC3D,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IACvD,yFAAyF;IACzF,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,QAAQ;YAAE,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACrH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;uFAGuF;AACvF,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,GAAW,EAAE,GAAG,GAAY,KAAK,EAAE;IACpF,IAAI,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;gFACgF;AAChF,SAAS,mBAAmB,CAAC,KAAwB;IACnD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB;QACE,iBAAiB,IAAI,MAAM;QAC3B,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,IAAI,MAAM,CAAC;QAC9C,wBAAwB,IAAI,MAAM;KACnC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAC7B,IAAI,UAAU,CAAC,CAAC,CAAE,CACpB,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,SAAS,WAAW,CAAC,GAAW,EAAE,IAAc;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,UAAU,CAAC,GAAG,EAAE;YACd,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/open-in-terminal.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Open a real terminal window at `cwd` running `command` — the "take over the
+ * agent session locally" handoff. Cross-platform strategy ported from
+ * github-janitor's `openInTerminal.ts`: macOS via osascript, Windows via
+ * cmd/start, Linux by probing common emulators with a temp launch script
+ * (which sidesteps per-emulator quoting rules). WSL (#361) reuses the Linux
+ * script but hands it to a Windows-side terminal through interop, re-entering
+ * the distro with `wsl.exe` — there is no Linux desktop of its own to open
+ * `x-terminal-emulator` etc. on.
+ *
+ * Returns true when a launcher was started without an immediate error; the
+ * caller shows a copy-the-command fallback otherwise.
+ */
+export declare function openInTerminal(cwd: string, command: string, 
+/** Environment the opened shell must carry — today, the agent account's config dir (spec
+ *  2026-07-29-agent-profiles). Rendered per platform and made to PERSIST, because the window
+ *  stays open and the user types the next `claude` in it themselves. An empty/absent env
+ *  changes nothing about the command. Returns false without launching anything when the
+ *  values cannot be embedded safely: a terminal silently aimed at the wrong account is worse
+ *  than no terminal, since nothing in the window would say so. */
+env?: Record<string, string>): Promise<boolean>;
+/** The Windows-side (bin, args) candidates for launching `scriptPath` inside `distro` through
+ *  WSL interop, in try-order — Windows Terminal first, a classic console window as fallback. Pure
+ *  (no spawning) so the exact command line is unit-testable without a real WSL host.
+ *
+ *  Every launcher here is shell-free by construction, and must stay that way: routing through
+ *  `cmd.exe` (`/c start …`) would reintroduce BatBadBut (CVE-2024-27980, see #459). Passing an
+ *  argument array is NOT protection when the binary is a shell — libuv only quotes arguments
+ *  containing space, tab or quote, so a space-free `distro` like `a&calc&` would reach `cmd`
+ *  live and be interpreted. `wt.exe` and `conhost.exe` parse no metacharacters, so the same
+ *  input is inert. `distro` is additionally validated at the source (`wslDistroName`). */
+export declare function wslTerminalLaunchers(scriptPath: string, distro: string): Array<[string, string[]]>;
+/** Grace period before a launch script's directory is removed. Generous next to the
+ *  ~250 ms each emulator candidate is given, because the cost of being early is a
+ *  window that never opens, and the cost of being late is a few hundred bytes. */
+export declare const LAUNCH_SCRIPT_TTL_MS = 60000;
+/**
+ * Writes the temp launch script shared by the plain-Linux and WSL branches — `cd` into
+ * the worktree, run `command`, then drop into an interactive shell so the window stays
+ * open — and schedules its own removal (#785).
+ *
+ * Every "open in terminal" used to leave its `cez-term-*` directory behind forever. On a
+ * host whose `/tmp` is a tmpfs that never reboots, cezar's own litter is part of what
+ * exhausts the directory the agents' output capture depends on, so the opener cleans up
+ * after itself. Deleting the script mid-run is safe: the emulator has already `exec`'d
+ * bash on it, and POSIX keeps an unlinked file's inode alive for every open descriptor.
+ * The timer is `unref`'d — a pending cleanup must never be the reason `cezar serve`
+ * refuses to exit.
+ *
+ * Exported for the regression test, which must prove the directory does not survive
+ * without spawning a real terminal emulator.
+ */
+export declare function createLaunchScript(cwd: string, command: string, ttlMs?: number): string;
+/**
+ * A test that reaches a real launcher opens a window on the developer's machine — a Terminal on
+ * macOS, a `cmd` window on Windows, an emulator on Linux — and #820 is what that looks like: a
+ * suite run left a Terminal sitting in a `cez-profiles-home-*` fixture directory the same run had
+ * already deleted. Throwing beats returning `false`: a silent refusal would let the omission
+ * survive as a passing test, and the fix is always the same one line — inject the launcher seam
+ * (`openTerminal` / `openFile` / `openApp` on `ServerDeps`) instead of reaching the real one.
+ *
+ * `CEZ_ALLOW_TEST_SPAWN=1` is the deliberate exception, for a file that has replaced
+ * `node:child_process` with a mock: nothing reaches a real process there, and asserting the argv a
+ * launcher WOULD pass is exactly how the Windows launcher-safety cases (#469, BatBadBut) are
+ * pinned. Set it around those tests, never process-wide.
+ *
+ * Exported so `open-in-app.ts` shares this one definition rather than keeping a second copy that
+ * could drift.
+ */
+export declare function refuseSpawnUnderTest(bin: string, args: readonly string[]): void;