@xopcai/xopc 0.0.84 → 0.0.86

package/dist/src/share/site-static-serve.js

@@ -0,0 +1,145 @@
+import { isPathUnderWorkspace } from "../gateway/workspace-editor-path.js";
+import { resolveMimeType, shareResponseContentType } from "./share-store.js";
+import { join, relative, resolve } from "node:path";
+import { createReadStream } from "node:fs";
+import { readFile, stat } from "node:fs/promises";
+import { Readable } from "node:stream";
+//#region src/share/site-static-serve.ts
+const HASHED_ASSET_RE = /\.[a-f0-9]{8,}\.(?:js|mjs|css|woff2?|ttf|otf|svg|png|jpg|jpeg|gif|webp|avif|ico)$/i;
+const REWRITABLE_TYPES = new Set(["text/html", "text/css"]);
+/**
+* Serve a request for a static site share.
+*
+* `urlPath` is the in-site path (already stripped of any subdomain/subpath base).
+* `basePrefix` is the path prefix that the share is mounted under, used by the
+* HTML rewriter to make root-relative URLs (`/assets/x`) point back into the
+* share. Pass '' when serving on a subdomain (root mode).
+*/
+async function serveStaticSiteRequest(record, urlPath, basePrefix) {
+	if (record.source.kind !== "static") return new Response("not_static", { status: 400 });
+	const source = record.source;
+	const sanitized = sanitizePath(urlPath);
+	if (sanitized.startsWith("..")) return new Response("forbidden", { status: 403 });
+	const absInitial = resolve(source.rootDir, sanitized);
+	const inside = await pathInsideRoot(source.rootDir, source.workspaceRoot, absInitial);
+	if (!inside.ok) {
+		if (source.spaFallback) return serveIndexFallback(source, basePrefix);
+		return new Response("not_found", { status: 404 });
+	}
+	let abs = inside.abs;
+	let stats;
+	try {
+		stats = await stat(abs);
+	} catch {
+		if (source.spaFallback) return serveIndexFallback(source, basePrefix);
+		return new Response("not_found", { status: 404 });
+	}
+	if (stats.isDirectory()) {
+		const indexPath = join(abs, "index.html");
+		try {
+			const indexStat = await stat(indexPath);
+			if (indexStat.isFile()) {
+				abs = indexPath;
+				stats = indexStat;
+			} else if (source.spaFallback) return serveIndexFallback(source, basePrefix);
+			else return new Response("not_found", { status: 404 });
+		} catch {
+			if (source.spaFallback) return serveIndexFallback(source, basePrefix);
+			return new Response("not_found", { status: 404 });
+		}
+	}
+	const fileName = abs.split(/[\\/]/).pop() ?? "file";
+	const mime = resolveMimeType(fileName);
+	const cacheHeader = decideCacheHeader(sanitized, mime);
+	if (source.rewriteMode !== "none" && REWRITABLE_TYPES.has(mime)) {
+		const rewritten = rewriteAbsolutePaths(await readFile(abs, "utf8"), mime, basePrefix, source.rewriteMode);
+		const bytes = Buffer.from(rewritten, "utf8");
+		return new Response(bytes, {
+			status: 200,
+			headers: buildHeaders(mime, bytes.length, cacheHeader, fileName)
+		});
+	}
+	const stream = createReadStream(abs);
+	const webStream = Readable.toWeb(stream);
+	return new Response(webStream, {
+		status: 200,
+		headers: buildHeaders(mime, stats.size, cacheHeader, fileName)
+	});
+}
+async function serveIndexFallback(source, basePrefix) {
+	const indexPath = join(source.rootDir, "index.html");
+	try {
+		const raw = await readFile(indexPath, "utf8");
+		const rewritten = source.rewriteMode !== "none" ? rewriteAbsolutePaths(raw, "text/html", basePrefix, source.rewriteMode) : raw;
+		const bytes = Buffer.from(rewritten, "utf8");
+		return new Response(bytes, {
+			status: 200,
+			headers: buildHeaders("text/html", bytes.length, "no-cache", "index.html")
+		});
+	} catch {
+		return new Response("not_found", { status: 404 });
+	}
+}
+function buildHeaders(mime, contentLength, cacheControl, fileName) {
+	return {
+		"Content-Type": shareResponseContentType(mime),
+		"Content-Length": String(contentLength),
+		"Cache-Control": cacheControl,
+		"X-Content-Type-Options": "nosniff",
+		"Referrer-Policy": "no-referrer",
+		"Content-Disposition": `inline; filename="${fileName.replace(/[^\x20-\x7e]/g, "_").replace(/"/g, "")}"`
+	};
+}
+function decideCacheHeader(urlPath, mime) {
+	if (HASHED_ASSET_RE.test(urlPath)) return "public, max-age=31536000, immutable";
+	if (mime === "text/html") return "no-cache";
+	return "public, max-age=600";
+}
+function sanitizePath(input) {
+	let p = input.replace(/\\/g, "/");
+	p = p.replace(/^\/+/, "");
+	if (p.includes("\0")) return "..";
+	if (p.split("/").includes("..")) return "..";
+	return p;
+}
+async function pathInsideRoot(rootDir, workspaceRoot, abs) {
+	const relToRoot = relative(rootDir, abs);
+	if (relToRoot.startsWith("..") || relToRoot.split(/[/\\]/).includes("..")) return { ok: false };
+	if (!isPathUnderWorkspace(workspaceRoot, abs)) return { ok: false };
+	return {
+		ok: true,
+		abs
+	};
+}
+function rewriteAbsolutePaths(body, mime, basePrefix, mode) {
+	if (mode === "none" || !basePrefix) return body;
+	if (mime === "text/html") return rewriteHtml(body, basePrefix);
+	if (mime === "text/css" && mode === "html-css") return rewriteCss(body, basePrefix);
+	return body;
+}
+function rewriteHtml(html, basePrefix) {
+	let out = html.replace(/\s(href|src|action|poster|formaction|data)\s*=\s*("|')\/([^"']*?)\2/gi, (_match, attr, quote, rest) => {
+		if (rest.startsWith("/")) return _match;
+		return ` ${attr}=${quote}${basePrefix}/${rest}${quote}`;
+	});
+	out = out.replace(/\s(srcset|imagesrcset)\s*=\s*("|')([^"']*)\2/gi, (_match, attr, quote, value) => {
+		return ` ${attr}=${quote}${value.split(",").map((part) => {
+			const trimmed = part.trim();
+			const [url, descriptor] = trimmed.split(/\s+/, 2);
+			if (!url || !url.startsWith("/") || url.startsWith("//")) return trimmed;
+			return descriptor ? `${basePrefix}${url} ${descriptor}` : `${basePrefix}${url}`;
+		}).join(", ")}${quote}`;
+	});
+	out = out.replace(/<head([^>]*)>/i, `<head$1><base href="${basePrefix}/">`);
+	return out;
+}
+function rewriteCss(css, basePrefix) {
+	return css.replace(/url\(\s*("|'|)\/([^)"']*?)\1\s*\)/g, (_m, quote, rest) => {
+		if (rest.startsWith("/")) return _m;
+		return `url(${quote}${basePrefix}/${rest}${quote})`;
+	});
+}
+//#endregion
+export { serveStaticSiteRequest };
+
+//# sourceMappingURL=site-static-serve.js.map

package/dist/src/share/site-static-serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-static-serve.js","names":["resolvePath","relPathPosix"],"sources":["../../../src/share/site-static-serve.ts"],"sourcesContent":["import { createReadStream } from 'node:fs';\nimport { stat, readFile } from 'node:fs/promises';\nimport { resolve as resolvePath, relative as relPathPosix, join } from 'node:path';\nimport { Readable } from 'node:stream';\n\nimport { isPathUnderWorkspace } from '../gateway/workspace-editor-path.js';\nimport { resolveMimeType, shareResponseContentType } from './share-store.js';\nimport type { SiteShareRecord, SiteStaticSource } from './site-share-types.js';\n\nconst HASHED_ASSET_RE = /\\.[a-f0-9]{8,}\\.(?:js|mjs|css|woff2?|ttf|otf|svg|png|jpg|jpeg|gif|webp|avif|ico)$/i;\nconst REWRITABLE_TYPES = new Set(['text/html', 'text/css']);\n\n/**\n * Serve a request for a static site share.\n *\n * `urlPath` is the in-site path (already stripped of any subdomain/subpath base).\n * `basePrefix` is the path prefix that the share is mounted under, used by the\n * HTML rewriter to make root-relative URLs (`/assets/x`) point back into the\n * share. Pass '' when serving on a subdomain (root mode).\n */\nexport async function serveStaticSiteRequest(\n  record: SiteShareRecord,\n  urlPath: string,\n  basePrefix: string,\n): Promise<Response> {\n  if (record.source.kind !== 'static') {\n    return new Response('not_static', { status: 400 });\n  }\n  const source = record.source;\n\n  const sanitized = sanitizePath(urlPath);\n  if (sanitized.startsWith('..')) return new Response('forbidden', { status: 403 });\n\n  const absInitial = resolvePath(source.rootDir, sanitized);\n  const inside = await pathInsideRoot(source.rootDir, source.workspaceRoot, absInitial);\n  if (!inside.ok) {\n    if (source.spaFallback) {\n      return serveIndexFallback(source, basePrefix);\n    }\n    return new Response('not_found', { status: 404 });\n  }\n\n  let abs = inside.abs;\n  let stats;\n  try {\n    stats = await stat(abs);\n  } catch {\n    if (source.spaFallback) return serveIndexFallback(source, basePrefix);\n    return new Response('not_found', { status: 404 });\n  }\n\n  if (stats.isDirectory()) {\n    const indexPath = join(abs, 'index.html');\n    try {\n      const indexStat = await stat(indexPath);\n      if (indexStat.isFile()) {\n        abs = indexPath;\n        stats = indexStat;\n      } else if (source.spaFallback) {\n        return serveIndexFallback(source, basePrefix);\n      } else {\n        return new Response('not_found', { status: 404 });\n      }\n    } catch {\n      if (source.spaFallback) return serveIndexFallback(source, basePrefix);\n      return new Response('not_found', { status: 404 });\n    }\n  }\n\n  const fileName = abs.split(/[\\\\/]/).pop() ?? 'file';\n  const mime = resolveMimeType(fileName);\n\n  const cacheHeader = decideCacheHeader(sanitized, mime);\n\n  if (source.rewriteMode !== 'none' && REWRITABLE_TYPES.has(mime)) {\n    const raw = await readFile(abs, 'utf8');\n    const rewritten = rewriteAbsolutePaths(raw, mime, basePrefix, source.rewriteMode);\n    const bytes = Buffer.from(rewritten, 'utf8');\n    return new Response(bytes, {\n      status: 200,\n      headers: buildHeaders(mime, bytes.length, cacheHeader, fileName),\n    });\n  }\n\n  const stream = createReadStream(abs);\n  const webStream = Readable.toWeb(stream) as ReadableStream;\n  return new Response(webStream, {\n    status: 200,\n    headers: buildHeaders(mime, stats.size, cacheHeader, fileName),\n  });\n}\n\nasync function serveIndexFallback(source: SiteStaticSource, basePrefix: string): Promise<Response> {\n  const indexPath = join(source.rootDir, 'index.html');\n  try {\n    const raw = await readFile(indexPath, 'utf8');\n    const rewritten =\n      source.rewriteMode !== 'none' ? rewriteAbsolutePaths(raw, 'text/html', basePrefix, source.rewriteMode) : raw;\n    const bytes = Buffer.from(rewritten, 'utf8');\n    return new Response(bytes, {\n      status: 200,\n      headers: buildHeaders('text/html', bytes.length, 'no-cache', 'index.html'),\n    });\n  } catch {\n    return new Response('not_found', { status: 404 });\n  }\n}\n\nfunction buildHeaders(\n  mime: string,\n  contentLength: number,\n  cacheControl: string,\n  fileName: string,\n): Record<string, string> {\n  return {\n    'Content-Type': shareResponseContentType(mime),\n    'Content-Length': String(contentLength),\n    'Cache-Control': cacheControl,\n    'X-Content-Type-Options': 'nosniff',\n    'Referrer-Policy': 'no-referrer',\n    // Don't force attachment — site-share is meant to be browsed.\n    'Content-Disposition': `inline; filename=\"${fileName.replace(/[^\\x20-\\x7e]/g, '_').replace(/\"/g, '')}\"`,\n  };\n}\n\nfunction decideCacheHeader(urlPath: string, mime: string): string {\n  if (HASHED_ASSET_RE.test(urlPath)) {\n    return 'public, max-age=31536000, immutable';\n  }\n  if (mime === 'text/html') return 'no-cache';\n  return 'public, max-age=600';\n}\n\nfunction sanitizePath(input: string): string {\n  let p = input.replace(/\\\\/g, '/');\n  p = p.replace(/^\\/+/, '');\n  if (p.includes('\\0')) return '..';\n  if (p.split('/').includes('..')) return '..';\n  return p;\n}\n\nasync function pathInsideRoot(\n  rootDir: string,\n  workspaceRoot: string,\n  abs: string,\n): Promise<{ ok: true; abs: string } | { ok: false }> {\n  const relToRoot = relPathPosix(rootDir, abs);\n  if (relToRoot.startsWith('..') || relToRoot.split(/[/\\\\]/).includes('..')) {\n    return { ok: false };\n  }\n  if (!isPathUnderWorkspace(workspaceRoot, abs)) {\n    return { ok: false };\n  }\n  return { ok: true, abs };\n}\n\n// ── HTML/CSS rewriting ────────────────────────────────────────────────────────\n//\n// Best-effort root-relative path prefixing. For SPAs built with `base: '/'`,\n// the produced HTML/CSS contains `/assets/...` references that need to be\n// prefixed with the share's `basePrefix`. JS-generated URLs at runtime are NOT\n// handled here — recommend the user set `base` at build time when possible.\n\nfunction rewriteAbsolutePaths(\n  body: string,\n  mime: string,\n  basePrefix: string,\n  mode: 'none' | 'html-only' | 'html-css',\n): string {\n  if (mode === 'none' || !basePrefix) return body;\n  if (mime === 'text/html') {\n    return rewriteHtml(body, basePrefix);\n  }\n  if (mime === 'text/css' && mode === 'html-css') {\n    return rewriteCss(body, basePrefix);\n  }\n  return body;\n}\n\nfunction rewriteHtml(html: string, basePrefix: string): string {\n  // Match attribute values like src=\"/x\", href='/y', srcset=\"/a, /b 2x\"\n  const attrRe = /\\s(href|src|action|poster|formaction|data)\\s*=\\s*(\"|')\\/([^\"']*?)\\2/gi;\n  let out = html.replace(attrRe, (_match, attr, quote, rest) => {\n    if (rest.startsWith('/')) return _match; // protocol-relative '//'\n    return ` ${attr}=${quote}${basePrefix}/${rest}${quote}`;\n  });\n\n  const srcsetRe = /\\s(srcset|imagesrcset)\\s*=\\s*(\"|')([^\"']*)\\2/gi;\n  out = out.replace(srcsetRe, (_match, attr, quote, value) => {\n    const fixed = value\n      .split(',')\n      .map((part: string) => {\n        const trimmed = part.trim();\n        const [url, descriptor] = trimmed.split(/\\s+/, 2);\n        if (!url || !url.startsWith('/') || url.startsWith('//')) return trimmed;\n        return descriptor ? `${basePrefix}${url} ${descriptor}` : `${basePrefix}${url}`;\n      })\n      .join(', ');\n    return ` ${attr}=${quote}${fixed}${quote}`;\n  });\n\n  // Inject <base> tag for clarity (helps relative URLs inside the page)\n  out = out.replace(/<head([^>]*)>/i, `<head$1><base href=\"${basePrefix}/\">`);\n\n  return out;\n}\n\nfunction rewriteCss(css: string, basePrefix: string): string {\n  // url(/x) — only absolute-root references\n  return css.replace(/url\\(\\s*(\"|'|)\\/([^)\"']*?)\\1\\s*\\)/g, (_m, quote, rest) => {\n    if (rest.startsWith('/')) return _m;\n    return `url(${quote}${basePrefix}/${rest}${quote})`;\n  });\n}\n"],"mappings":";;;;;;;AASA,MAAM,kBAAkB;AACxB,MAAM,mBAAmB,IAAI,IAAI,CAAC,aAAa,WAAW,CAAC;;;;;;;;;AAU3D,eAAsB,uBACpB,QACA,SACA,YACmB;AACnB,KAAI,OAAO,OAAO,SAAS,SACzB,QAAO,IAAI,SAAS,cAAc,EAAE,QAAQ,KAAK,CAAC;CAEpD,MAAM,SAAS,OAAO;CAEtB,MAAM,YAAY,aAAa,QAAQ;AACvC,KAAI,UAAU,WAAW,KAAK,CAAE,QAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,KAAK,CAAC;CAEjF,MAAM,aAAaA,QAAY,OAAO,SAAS,UAAU;CACzD,MAAM,SAAS,MAAM,eAAe,OAAO,SAAS,OAAO,eAAe,WAAW;AACrF,KAAI,CAAC,OAAO,IAAI;AACd,MAAI,OAAO,YACT,QAAO,mBAAmB,QAAQ,WAAW;AAE/C,SAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,KAAK,CAAC;;CAGnD,IAAI,MAAM,OAAO;CACjB,IAAI;AACJ,KAAI;AACF,UAAQ,MAAM,KAAK,IAAI;SACjB;AACN,MAAI,OAAO,YAAa,QAAO,mBAAmB,QAAQ,WAAW;AACrE,SAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,KAAK,CAAC;;AAGnD,KAAI,MAAM,aAAa,EAAE;EACvB,MAAM,YAAY,KAAK,KAAK,aAAa;AACzC,MAAI;GACF,MAAM,YAAY,MAAM,KAAK,UAAU;AACvC,OAAI,UAAU,QAAQ,EAAE;AACtB,UAAM;AACN,YAAQ;cACC,OAAO,YAChB,QAAO,mBAAmB,QAAQ,WAAW;OAE7C,QAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,KAAK,CAAC;UAE7C;AACN,OAAI,OAAO,YAAa,QAAO,mBAAmB,QAAQ,WAAW;AACrE,UAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,KAAK,CAAC;;;CAIrD,MAAM,WAAW,IAAI,MAAM,QAAQ,CAAC,KAAK,IAAI;CAC7C,MAAM,OAAO,gBAAgB,SAAS;CAEtC,MAAM,cAAc,kBAAkB,WAAW,KAAK;AAEtD,KAAI,OAAO,gBAAgB,UAAU,iBAAiB,IAAI,KAAK,EAAE;EAE/D,MAAM,YAAY,qBAAqB,MADrB,SAAS,KAAK,OAAO,EACK,MAAM,YAAY,OAAO,YAAY;EACjF,MAAM,QAAQ,OAAO,KAAK,WAAW,OAAO;AAC5C,SAAO,IAAI,SAAS,OAAO;GACzB,QAAQ;GACR,SAAS,aAAa,MAAM,MAAM,QAAQ,aAAa,SAAS;GACjE,CAAC;;CAGJ,MAAM,SAAS,iBAAiB,IAAI;CACpC,MAAM,YAAY,SAAS,MAAM,OAAO;AACxC,QAAO,IAAI,SAAS,WAAW;EAC7B,QAAQ;EACR,SAAS,aAAa,MAAM,MAAM,MAAM,aAAa,SAAS;EAC/D,CAAC;;AAGJ,eAAe,mBAAmB,QAA0B,YAAuC;CACjG,MAAM,YAAY,KAAK,OAAO,SAAS,aAAa;AACpD,KAAI;EACF,MAAM,MAAM,MAAM,SAAS,WAAW,OAAO;EAC7C,MAAM,YACJ,OAAO,gBAAgB,SAAS,qBAAqB,KAAK,aAAa,YAAY,OAAO,YAAY,GAAG;EAC3G,MAAM,QAAQ,OAAO,KAAK,WAAW,OAAO;AAC5C,SAAO,IAAI,SAAS,OAAO;GACzB,QAAQ;GACR,SAAS,aAAa,aAAa,MAAM,QAAQ,YAAY,aAAa;GAC3E,CAAC;SACI;AACN,SAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,KAAK,CAAC;;;AAIrD,SAAS,aACP,MACA,eACA,cACA,UACwB;AACxB,QAAO;EACL,gBAAgB,yBAAyB,KAAK;EAC9C,kBAAkB,OAAO,cAAc;EACvC,iBAAiB;EACjB,0BAA0B;EAC1B,mBAAmB;EAEnB,uBAAuB,qBAAqB,SAAS,QAAQ,iBAAiB,IAAI,CAAC,QAAQ,MAAM,GAAG,CAAC;EACtG;;AAGH,SAAS,kBAAkB,SAAiB,MAAsB;AAChE,KAAI,gBAAgB,KAAK,QAAQ,CAC/B,QAAO;AAET,KAAI,SAAS,YAAa,QAAO;AACjC,QAAO;;AAGT,SAAS,aAAa,OAAuB;CAC3C,IAAI,IAAI,MAAM,QAAQ,OAAO,IAAI;AACjC,KAAI,EAAE,QAAQ,QAAQ,GAAG;AACzB,KAAI,EAAE,SAAS,KAAK,CAAE,QAAO;AAC7B,KAAI,EAAE,MAAM,IAAI,CAAC,SAAS,KAAK,CAAE,QAAO;AACxC,QAAO;;AAGT,eAAe,eACb,SACA,eACA,KACoD;CACpD,MAAM,YAAYC,SAAa,SAAS,IAAI;AAC5C,KAAI,UAAU,WAAW,KAAK,IAAI,UAAU,MAAM,QAAQ,CAAC,SAAS,KAAK,CACvE,QAAO,EAAE,IAAI,OAAO;AAEtB,KAAI,CAAC,qBAAqB,eAAe,IAAI,CAC3C,QAAO,EAAE,IAAI,OAAO;AAEtB,QAAO;EAAE,IAAI;EAAM;EAAK;;AAU1B,SAAS,qBACP,MACA,MACA,YACA,MACQ;AACR,KAAI,SAAS,UAAU,CAAC,WAAY,QAAO;AAC3C,KAAI,SAAS,YACX,QAAO,YAAY,MAAM,WAAW;AAEtC,KAAI,SAAS,cAAc,SAAS,WAClC,QAAO,WAAW,MAAM,WAAW;AAErC,QAAO;;AAGT,SAAS,YAAY,MAAc,YAA4B;CAG7D,IAAI,MAAM,KAAK,QAAQ,0EAAS,QAAQ,MAAM,OAAO,SAAS;AAC5D,MAAI,KAAK,WAAW,IAAI,CAAE,QAAO;AACjC,SAAO,IAAI,KAAK,GAAG,QAAQ,WAAW,GAAG,OAAO;GAChD;AAGF,OAAM,IAAI,QAAQ,mDAAW,QAAQ,MAAM,OAAO,UAAU;AAU1D,SAAO,IAAI,KAAK,GAAG,QATL,MACX,MAAM,IAAI,CACV,KAAK,SAAiB;GACrB,MAAM,UAAU,KAAK,MAAM;GAC3B,MAAM,CAAC,KAAK,cAAc,QAAQ,MAAM,OAAO,EAAE;AACjD,OAAI,CAAC,OAAO,CAAC,IAAI,WAAW,IAAI,IAAI,IAAI,WAAW,KAAK,CAAE,QAAO;AACjE,UAAO,aAAa,GAAG,aAAa,IAAI,GAAG,eAAe,GAAG,aAAa;IAC1E,CACD,KAAK,KACwB,GAAG;GACnC;AAGF,OAAM,IAAI,QAAQ,kBAAkB,uBAAuB,WAAW,KAAK;AAE3E,QAAO;;AAGT,SAAS,WAAW,KAAa,YAA4B;AAE3D,QAAO,IAAI,QAAQ,uCAAuC,IAAI,OAAO,SAAS;AAC5E,MAAI,KAAK,WAAW,IAAI,CAAE,QAAO;AACjC,SAAO,OAAO,QAAQ,WAAW,GAAG,OAAO,MAAM;GACjD"}

package/dist/src/tui/clipboard-image.js

@@ -1,7 +1,7 @@
-import { randomUUID } from "node:crypto";
-import { readFileSync, unlinkSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
 import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { randomUUID } from "node:crypto";
 import { spawnSync } from "node:child_process";
 //#region src/tui/clipboard-image.ts
 const SUPPORTED_IMAGE_MIME_TYPES = [

package/dist/src/tui/theme-manager.js

@@ -2,8 +2,8 @@ import { resolveStateDir } from "../config/paths-state.js";
 import { init_paths } from "../config/paths.js";
 import { palette } from "./theme/dark.js";
 import { palette as palette$1 } from "./theme/light.js";
-import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { join } from "node:path";
+import { existsSync, readFileSync, readdirSync } from "node:fs";
 import chalk from "chalk";
 //#region src/tui/theme-manager.ts
 init_paths();

package/dist/src/tui/tui-commands.js

@@ -1,5 +1,6 @@
 import { getTuiKeybindingsPath } from "./tui-keybindings-file.js";
 import { formatXopcTuiHotkeys } from "./format-tui-hotkeys.js";
+import { rewriteUnknownSlashAsWorkflow } from "./tui-workflow-slash.js";
 //#region src/tui/tui-commands.ts
 function getSlashCommands(_isLocal) {
 	return [
@@ -106,6 +107,14 @@ function getSlashCommands(_isLocal) {
 		{
 			name: "hotkeys",
 			description: "Show resolved keyboard shortcuts (pi-style)"
+		},
+		{
+			name: "workflows",
+			description: "List saved workflows (built-in + ~/.xopc/workflows/)"
+		},
+		{
+			name: "workflow",
+			description: "Workflow subcommands: list, view <name>, save <name>"
 		}
 	];
 }
@@ -220,6 +229,15 @@ function createTuiCommandHandler(deps) {
 				return;
 			default: break;
 		}
+		if (input.trimStart().startsWith("/")) {
+			const rewritten = rewriteUnknownSlashAsWorkflow(normalizedCommand, commandArgs);
+			if (rewritten) {
+				chatLog.addSystem(`▶ Running workflow: ${normalizedCommand}`);
+				tui.requestRender();
+				sendMessage(rewritten);
+				return;
+			}
+		}
 		sendMessage(input);
 	};
 }

package/dist/src/tui/tui-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"tui-commands.js","names":[],"sources":["../../../src/tui/tui-commands.ts"],"sourcesContent":["import type { KeybindingsManager, TUI } from '@earendil-works/pi-tui';\n\nimport type { ChatLog } from './components/chat-log.js';\nimport { formatXopcTuiHotkeys } from './format-tui-hotkeys.js';\nimport { getTuiKeybindingsPath } from './tui-keybindings-file.js';\nimport type { StreamAssembler } from './stream-assembler.js';\nimport type { TuiState } from './tui-types.js';\n\ninterface SlashCommandDef {\n  name: string;\n  description: string;\n}\n\nexport type TuiExtensionSlashCommandEntry = SlashCommandDef & {\n  handler: (args: string) => void | Promise<void>;\n};\n\nexport function getSlashCommands(_isLocal: boolean): SlashCommandDef[] {\n  return [\n    { name: 'help', description: 'Show available commands' },\n    { name: 'abort', description: 'Abort active run (or press Escape)' },\n    { name: 'tools', description: 'Toggle tool output expanded/collapsed (or Ctrl+O)' },\n    { name: 'thinking', description: 'Toggle thinking display (or Ctrl+T)' },\n    { name: 'exit', description: 'Exit the TUI' },\n    { name: 'models', description: 'List available models' },\n    { name: 'switch', description: 'Switch model — copy `provider/model` from /models' },\n    { name: 'usage', description: 'Show token usage statistics' },\n    { name: 'new', description: 'Start a new session' },\n    { name: 'clear', description: 'Clear current session' },\n    { name: 'list', description: 'List sessions' },\n    { name: 'resume', description: 'Open session picker (or Ctrl+Shift+P)' },\n    { name: 'scoped-models', description: 'Choose models for Ctrl+P cycling' },\n    { name: 'compact', description: 'Compact session history (local API)' },\n    { name: 'think', description: 'Set thinking level (e.g. /think high)' },\n    { name: 'reasoning', description: 'Set reasoning visibility (e.g. /reasoning stream)' },\n    { name: 'verbose', description: 'Toggle verbose mode' },\n    { name: 'status', description: 'Show agent status' },\n    { name: 'config', description: 'Show or update configuration' },\n    { name: 'context', description: 'Show context budget' },\n    { name: 'btw', description: 'Side question without saving to session' },\n    { name: 'export', description: 'Export session (markdown/html/json)' },\n    { name: 'settings', description: 'Open TUI settings overlay' },\n    { name: 'reload-keybindings', description: 'Reload ~/.xopc/keybindings.json' },\n    { name: 'start', description: 'Show welcome message' },\n    { name: 'hotkeys', description: 'Show resolved keyboard shortcuts (pi-style)' },\n  ];\n}\n\nexport function formatTuiHelpText(isLocal: boolean): string {\n  const commands = getSlashCommands(isLocal);\n  const lines = ['Available commands:'];\n  for (const c of commands) {\n    lines.push(`  /${c.name} — ${c.description}`);\n  }\n  lines.push('', 'Keyboard shortcuts (defaults align with pi coding-agent where noted):');\n  lines.push('  Escape — Abort active run');\n  lines.push('  Shift+Tab — Cycle /think level');\n  lines.push('  Ctrl+P / Shift+Ctrl+P — Next / previous model (/switch)');\n  lines.push('  Ctrl+L — Model picker');\n  lines.push('  Ctrl+Shift+P — Session picker (rename/delete)');\n  lines.push('  /scoped-models — Limit Ctrl+P model cycle set');\n  lines.push('  Ctrl+O — Toggle tool output');\n  lines.push('  Ctrl+T — Toggle thinking block display');\n  lines.push('  Ctrl+G — Edit draft in $EDITOR');\n  lines.push('  Ctrl+Z — Suspend to shell (Unix)');\n  lines.push('  Alt+Enter — Queue follow-up while busy (sends when this reply finishes)');\n  lines.push('  Alt+Up — Restore queued follow-up messages to editor');\n  lines.push('  Enter (while busy) — Steer: inject at next tool boundary');\n  lines.push('  Ctrl+V (mac/Linux) / Alt+V (Win) — Paste image from clipboard');\n  lines.push('  /settings — Theme, thinking display, terminal progress, …');\n  lines.push('  ~/.xopc/keybindings.json — Custom shortcuts (use /reload-keybindings)');\n  lines.push('  Ctrl+C — Clear input; repeat within ~0.5s to exit when empty');\n  lines.push('  Ctrl+D — Exit when input empty');\n  lines.push('  !cmd — Local shell (gated; runs on this machine)');\n  lines.push('', 'Use /hotkeys for the resolved binding list from the active keymap.');\n  return lines.join('\\n');\n}\n\nexport type CommandHandlerDeps = {\n  state: TuiState;\n  chatLog: ChatLog;\n  tui: TUI;\n  assembler: StreamAssembler;\n  isLocalMode: boolean;\n  abortActive: () => Promise<void>;\n  sendMessage: (text: string) => void;\n  requestExit: () => void;\n  updateFooter: () => void;\n  keybindings: KeybindingsManager;\n  uiOverlays?: {\n    openSessionPicker: () => void;\n    openScopedModels: () => void;\n    openSettings: () => void;\n    reloadKeybindings: () => void;\n  };\n  runCompaction?: () => void | Promise<void>;\n  extensionSlashCommands?: TuiExtensionSlashCommandEntry[];\n};\n\nexport function createTuiCommandHandler(deps: CommandHandlerDeps): (input: string) => void {\n  const {\n    state,\n    chatLog,\n    tui,\n    assembler,\n    isLocalMode,\n    abortActive,\n    sendMessage,\n    requestExit,\n    updateFooter,\n    keybindings,\n    uiOverlays,\n    extensionSlashCommands = [],\n  } = deps;\n\n  return (input: string) => {\n    const trimmed = input.replace(/^\\//, '').trim();\n    const [commandName, ...restParts] = trimmed.split(/\\s+/);\n    const normalizedCommand = (commandName ?? '').toLowerCase();\n    const commandArgs = restParts.join(' ');\n\n    const extensionCmd = extensionSlashCommands.find((c) => c.name === normalizedCommand);\n    if (extensionCmd) {\n      void Promise.resolve(extensionCmd.handler(commandArgs)).then(() => {\n        tui.requestRender();\n      });\n      return;\n    }\n\n    switch (normalizedCommand) {\n      case 'help':\n        chatLog.addSystem(formatTuiHelpText(isLocalMode));\n        tui.requestRender();\n        return;\n      case 'hotkeys':\n      case 'keys':\n        chatLog.addSystem(formatXopcTuiHotkeys(keybindings));\n        tui.requestRender();\n        return;\n      case 'exit':\n      case 'quit':\n        requestExit();\n        return;\n      case 'abort':\n      case 'stop':\n      case 'cancel':\n        void abortActive().then(() => {\n          chatLog.addSystem('Aborted.');\n          tui.requestRender();\n        });\n        return;\n      case 'tools':\n        state.toolsExpanded = !state.toolsExpanded;\n        chatLog.setToolsExpanded(state.toolsExpanded);\n        chatLog.addSystem(`Tools: ${state.toolsExpanded ? 'expanded' : 'collapsed'}`);\n        tui.requestRender();\n        return;\n      case 'thinking':\n        state.showThinking = !state.showThinking;\n        chatLog.addSystem(`Thinking display: ${state.showThinking ? 'on' : 'off'}`);\n        updateFooter();\n        tui.requestRender();\n        return;\n      case 'resume':\n      case 'sessions':\n        uiOverlays?.openSessionPicker();\n        return;\n      case 'scoped-models':\n      case 'scopedmodels':\n        uiOverlays?.openScopedModels();\n        return;\n      case 'settings':\n        uiOverlays?.openSettings();\n        return;\n      case 'reload-keybindings':\n      case 'reload-keybind':\n        uiOverlays?.reloadKeybindings();\n        chatLog.addSystem(`Keybindings reloaded from ${getTuiKeybindingsPath()}`);\n        tui.requestRender();\n        return;\n      case 'compact':\n        void deps.runCompaction?.();\n        return;\n      default:\n        break;\n    }\n\n    switch (normalizedCommand) {\n      case 'new':\n      case 'reset':\n      case 'restart':\n      case 'clear': {\n        void abortActive().then(() => {\n          assembler.clear();\n          chatLog.clearAll();\n          state.messageFollowUpQueue.length = 0;\n          tui.requestRender();\n          sendMessage(input);\n        });\n        return;\n      }\n      default:\n        break;\n    }\n\n    sendMessage(input);\n  };\n}\n"],"mappings":";;;AAiBA,SAAgB,iBAAiB,UAAsC;AACrE,QAAO;EACL;GAAE,MAAM;GAAQ,aAAa;GAA2B;EACxD;GAAE,MAAM;GAAS,aAAa;GAAsC;EACpE;GAAE,MAAM;GAAS,aAAa;GAAqD;EACnF;GAAE,MAAM;GAAY,aAAa;GAAuC;EACxE;GAAE,MAAM;GAAQ,aAAa;GAAgB;EAC7C;GAAE,MAAM;GAAU,aAAa;GAAyB;EACxD;GAAE,MAAM;GAAU,aAAa;GAAqD;EACpF;GAAE,MAAM;GAAS,aAAa;GAA+B;EAC7D;GAAE,MAAM;GAAO,aAAa;GAAuB;EACnD;GAAE,MAAM;GAAS,aAAa;GAAyB;EACvD;GAAE,MAAM;GAAQ,aAAa;GAAiB;EAC9C;GAAE,MAAM;GAAU,aAAa;GAAyC;EACxE;GAAE,MAAM;GAAiB,aAAa;GAAoC;EAC1E;GAAE,MAAM;GAAW,aAAa;GAAuC;EACvE;GAAE,MAAM;GAAS,aAAa;GAAyC;EACvE;GAAE,MAAM;GAAa,aAAa;GAAqD;EACvF;GAAE,MAAM;GAAW,aAAa;GAAuB;EACvD;GAAE,MAAM;GAAU,aAAa;GAAqB;EACpD;GAAE,MAAM;GAAU,aAAa;GAAgC;EAC/D;GAAE,MAAM;GAAW,aAAa;GAAuB;EACvD;GAAE,MAAM;GAAO,aAAa;GAA2C;EACvE;GAAE,MAAM;GAAU,aAAa;GAAuC;EACtE;GAAE,MAAM;GAAY,aAAa;GAA6B;EAC9D;GAAE,MAAM;GAAsB,aAAa;GAAmC;EAC9E;GAAE,MAAM;GAAS,aAAa;GAAwB;EACtD;GAAE,MAAM;GAAW,aAAa;GAA+C;EAChF;;AAGH,SAAgB,kBAAkB,SAA0B;CAC1D,MAAM,WAAW,iBAAiB,QAAQ;CAC1C,MAAM,QAAQ,CAAC,sBAAsB;AACrC,MAAK,MAAM,KAAK,SACd,OAAM,KAAK,MAAM,EAAE,KAAK,KAAK,EAAE,cAAc;AAE/C,OAAM,KAAK,IAAI,wEAAwE;AACvF,OAAM,KAAK,8BAA8B;AACzC,OAAM,KAAK,mCAAmC;AAC9C,OAAM,KAAK,4DAA4D;AACvE,OAAM,KAAK,0BAA0B;AACrC,OAAM,KAAK,kDAAkD;AAC7D,OAAM,KAAK,kDAAkD;AAC7D,OAAM,KAAK,gCAAgC;AAC3C,OAAM,KAAK,2CAA2C;AACtD,OAAM,KAAK,mCAAmC;AAC9C,OAAM,KAAK,qCAAqC;AAChD,OAAM,KAAK,4EAA4E;AACvF,OAAM,KAAK,yDAAyD;AACpE,OAAM,KAAK,6DAA6D;AACxE,OAAM,KAAK,kEAAkE;AAC7E,OAAM,KAAK,8DAA8D;AACzE,OAAM,KAAK,0EAA0E;AACrF,OAAM,KAAK,iEAAiE;AAC5E,OAAM,KAAK,mCAAmC;AAC9C,OAAM,KAAK,qDAAqD;AAChE,OAAM,KAAK,IAAI,qEAAqE;AACpF,QAAO,MAAM,KAAK,KAAK;;AAwBzB,SAAgB,wBAAwB,MAAmD;CACzF,MAAM,EACJ,OACA,SACA,KACA,WACA,aACA,aACA,aACA,aACA,cACA,aACA,YACA,yBAAyB,EAAE,KACzB;AAEJ,SAAQ,UAAkB;EAExB,MAAM,CAAC,aAAa,GAAG,aADP,MAAM,QAAQ,OAAO,GAAG,CAAC,MACE,CAAC,MAAM,MAAM;EACxD,MAAM,qBAAqB,eAAe,IAAI,aAAa;EAC3D,MAAM,cAAc,UAAU,KAAK,IAAI;EAEvC,MAAM,eAAe,uBAAuB,MAAM,MAAM,EAAE,SAAS,kBAAkB;AACrF,MAAI,cAAc;AACX,WAAQ,QAAQ,aAAa,QAAQ,YAAY,CAAC,CAAC,WAAW;AACjE,QAAI,eAAe;KACnB;AACF;;AAGF,UAAQ,mBAAR;GACE,KAAK;AACH,YAAQ,UAAU,kBAAkB,YAAY,CAAC;AACjD,QAAI,eAAe;AACnB;GACF,KAAK;GACL,KAAK;AACH,YAAQ,UAAU,qBAAqB,YAAY,CAAC;AACpD,QAAI,eAAe;AACnB;GACF,KAAK;GACL,KAAK;AACH,iBAAa;AACb;GACF,KAAK;GACL,KAAK;GACL,KAAK;AACE,iBAAa,CAAC,WAAW;AAC5B,aAAQ,UAAU,WAAW;AAC7B,SAAI,eAAe;MACnB;AACF;GACF,KAAK;AACH,UAAM,gBAAgB,CAAC,MAAM;AAC7B,YAAQ,iBAAiB,MAAM,cAAc;AAC7C,YAAQ,UAAU,UAAU,MAAM,gBAAgB,aAAa,cAAc;AAC7E,QAAI,eAAe;AACnB;GACF,KAAK;AACH,UAAM,eAAe,CAAC,MAAM;AAC5B,YAAQ,UAAU,qBAAqB,MAAM,eAAe,OAAO,QAAQ;AAC3E,kBAAc;AACd,QAAI,eAAe;AACnB;GACF,KAAK;GACL,KAAK;AACH,gBAAY,mBAAmB;AAC/B;GACF,KAAK;GACL,KAAK;AACH,gBAAY,kBAAkB;AAC9B;GACF,KAAK;AACH,gBAAY,cAAc;AAC1B;GACF,KAAK;GACL,KAAK;AACH,gBAAY,mBAAmB;AAC/B,YAAQ,UAAU,6BAA6B,uBAAuB,GAAG;AACzE,QAAI,eAAe;AACnB;GACF,KAAK;AACE,SAAK,iBAAiB;AAC3B;GACF,QACE;;AAGJ,UAAQ,mBAAR;GACE,KAAK;GACL,KAAK;GACL,KAAK;GACL,KAAK;AACE,iBAAa,CAAC,WAAW;AAC5B,eAAU,OAAO;AACjB,aAAQ,UAAU;AAClB,WAAM,qBAAqB,SAAS;AACpC,SAAI,eAAe;AACnB,iBAAY,MAAM;MAClB;AACF;GAEF,QACE;;AAGJ,cAAY,MAAM"}
+{"version":3,"file":"tui-commands.js","names":[],"sources":["../../../src/tui/tui-commands.ts"],"sourcesContent":["import type { KeybindingsManager, TUI } from '@earendil-works/pi-tui';\n\nimport type { ChatLog } from './components/chat-log.js';\nimport { formatXopcTuiHotkeys } from './format-tui-hotkeys.js';\nimport { getTuiKeybindingsPath } from './tui-keybindings-file.js';\nimport type { StreamAssembler } from './stream-assembler.js';\nimport type { TuiState } from './tui-types.js';\n\nimport { rewriteUnknownSlashAsWorkflow } from './tui-workflow-slash.js';\n\ninterface SlashCommandDef {\n  name: string;\n  description: string;\n}\n\nexport type TuiExtensionSlashCommandEntry = SlashCommandDef & {\n  handler: (args: string) => void | Promise<void>;\n};\n\nexport function getSlashCommands(_isLocal: boolean): SlashCommandDef[] {\n  return [\n    { name: 'help', description: 'Show available commands' },\n    { name: 'abort', description: 'Abort active run (or press Escape)' },\n    { name: 'tools', description: 'Toggle tool output expanded/collapsed (or Ctrl+O)' },\n    { name: 'thinking', description: 'Toggle thinking display (or Ctrl+T)' },\n    { name: 'exit', description: 'Exit the TUI' },\n    { name: 'models', description: 'List available models' },\n    { name: 'switch', description: 'Switch model — copy `provider/model` from /models' },\n    { name: 'usage', description: 'Show token usage statistics' },\n    { name: 'new', description: 'Start a new session' },\n    { name: 'clear', description: 'Clear current session' },\n    { name: 'list', description: 'List sessions' },\n    { name: 'resume', description: 'Open session picker (or Ctrl+Shift+P)' },\n    { name: 'scoped-models', description: 'Choose models for Ctrl+P cycling' },\n    { name: 'compact', description: 'Compact session history (local API)' },\n    { name: 'think', description: 'Set thinking level (e.g. /think high)' },\n    { name: 'reasoning', description: 'Set reasoning visibility (e.g. /reasoning stream)' },\n    { name: 'verbose', description: 'Toggle verbose mode' },\n    { name: 'status', description: 'Show agent status' },\n    { name: 'config', description: 'Show or update configuration' },\n    { name: 'context', description: 'Show context budget' },\n    { name: 'btw', description: 'Side question without saving to session' },\n    { name: 'export', description: 'Export session (markdown/html/json)' },\n    { name: 'settings', description: 'Open TUI settings overlay' },\n    { name: 'reload-keybindings', description: 'Reload ~/.xopc/keybindings.json' },\n    { name: 'start', description: 'Show welcome message' },\n    { name: 'hotkeys', description: 'Show resolved keyboard shortcuts (pi-style)' },\n    { name: 'workflows', description: 'List saved workflows (built-in + ~/.xopc/workflows/)' },\n    { name: 'workflow', description: 'Workflow subcommands: list, view <name>, save <name>' },\n  ];\n}\n\nexport function formatTuiHelpText(isLocal: boolean): string {\n  const commands = getSlashCommands(isLocal);\n  const lines = ['Available commands:'];\n  for (const c of commands) {\n    lines.push(`  /${c.name} — ${c.description}`);\n  }\n  lines.push('', 'Keyboard shortcuts (defaults align with pi coding-agent where noted):');\n  lines.push('  Escape — Abort active run');\n  lines.push('  Shift+Tab — Cycle /think level');\n  lines.push('  Ctrl+P / Shift+Ctrl+P — Next / previous model (/switch)');\n  lines.push('  Ctrl+L — Model picker');\n  lines.push('  Ctrl+Shift+P — Session picker (rename/delete)');\n  lines.push('  /scoped-models — Limit Ctrl+P model cycle set');\n  lines.push('  Ctrl+O — Toggle tool output');\n  lines.push('  Ctrl+T — Toggle thinking block display');\n  lines.push('  Ctrl+G — Edit draft in $EDITOR');\n  lines.push('  Ctrl+Z — Suspend to shell (Unix)');\n  lines.push('  Alt+Enter — Queue follow-up while busy (sends when this reply finishes)');\n  lines.push('  Alt+Up — Restore queued follow-up messages to editor');\n  lines.push('  Enter (while busy) — Steer: inject at next tool boundary');\n  lines.push('  Ctrl+V (mac/Linux) / Alt+V (Win) — Paste image from clipboard');\n  lines.push('  /settings — Theme, thinking display, terminal progress, …');\n  lines.push('  ~/.xopc/keybindings.json — Custom shortcuts (use /reload-keybindings)');\n  lines.push('  Ctrl+C — Clear input; repeat within ~0.5s to exit when empty');\n  lines.push('  Ctrl+D — Exit when input empty');\n  lines.push('  !cmd — Local shell (gated; runs on this machine)');\n  lines.push('', 'Use /hotkeys for the resolved binding list from the active keymap.');\n  return lines.join('\\n');\n}\n\nexport type CommandHandlerDeps = {\n  state: TuiState;\n  chatLog: ChatLog;\n  tui: TUI;\n  assembler: StreamAssembler;\n  isLocalMode: boolean;\n  abortActive: () => Promise<void>;\n  sendMessage: (text: string) => void;\n  requestExit: () => void;\n  updateFooter: () => void;\n  keybindings: KeybindingsManager;\n  uiOverlays?: {\n    openSessionPicker: () => void;\n    openScopedModels: () => void;\n    openSettings: () => void;\n    reloadKeybindings: () => void;\n  };\n  runCompaction?: () => void | Promise<void>;\n  extensionSlashCommands?: TuiExtensionSlashCommandEntry[];\n};\n\nexport function createTuiCommandHandler(deps: CommandHandlerDeps): (input: string) => void {\n  const {\n    state,\n    chatLog,\n    tui,\n    assembler,\n    isLocalMode,\n    abortActive,\n    sendMessage,\n    requestExit,\n    updateFooter,\n    keybindings,\n    uiOverlays,\n    extensionSlashCommands = [],\n  } = deps;\n\n  return (input: string) => {\n    const trimmed = input.replace(/^\\//, '').trim();\n    const [commandName, ...restParts] = trimmed.split(/\\s+/);\n    const normalizedCommand = (commandName ?? '').toLowerCase();\n    const commandArgs = restParts.join(' ');\n\n    const extensionCmd = extensionSlashCommands.find((c) => c.name === normalizedCommand);\n    if (extensionCmd) {\n      void Promise.resolve(extensionCmd.handler(commandArgs)).then(() => {\n        tui.requestRender();\n      });\n      return;\n    }\n\n    switch (normalizedCommand) {\n      case 'help':\n        chatLog.addSystem(formatTuiHelpText(isLocalMode));\n        tui.requestRender();\n        return;\n      case 'hotkeys':\n      case 'keys':\n        chatLog.addSystem(formatXopcTuiHotkeys(keybindings));\n        tui.requestRender();\n        return;\n      case 'exit':\n      case 'quit':\n        requestExit();\n        return;\n      case 'abort':\n      case 'stop':\n      case 'cancel':\n        void abortActive().then(() => {\n          chatLog.addSystem('Aborted.');\n          tui.requestRender();\n        });\n        return;\n      case 'tools':\n        state.toolsExpanded = !state.toolsExpanded;\n        chatLog.setToolsExpanded(state.toolsExpanded);\n        chatLog.addSystem(`Tools: ${state.toolsExpanded ? 'expanded' : 'collapsed'}`);\n        tui.requestRender();\n        return;\n      case 'thinking':\n        state.showThinking = !state.showThinking;\n        chatLog.addSystem(`Thinking display: ${state.showThinking ? 'on' : 'off'}`);\n        updateFooter();\n        tui.requestRender();\n        return;\n      case 'resume':\n      case 'sessions':\n        uiOverlays?.openSessionPicker();\n        return;\n      case 'scoped-models':\n      case 'scopedmodels':\n        uiOverlays?.openScopedModels();\n        return;\n      case 'settings':\n        uiOverlays?.openSettings();\n        return;\n      case 'reload-keybindings':\n      case 'reload-keybind':\n        uiOverlays?.reloadKeybindings();\n        chatLog.addSystem(`Keybindings reloaded from ${getTuiKeybindingsPath()}`);\n        tui.requestRender();\n        return;\n      case 'compact':\n        void deps.runCompaction?.();\n        return;\n      default:\n        break;\n    }\n\n    switch (normalizedCommand) {\n      case 'new':\n      case 'reset':\n      case 'restart':\n      case 'clear': {\n        void abortActive().then(() => {\n          assembler.clear();\n          chatLog.clearAll();\n          state.messageFollowUpQueue.length = 0;\n          tui.requestRender();\n          sendMessage(input);\n        });\n        return;\n      }\n      default:\n        break;\n    }\n\n    // Unknown slash that names a known workflow → rewrite into a natural prompt\n    // so the assistant deterministically calls workflow({name}) instead of\n    // depending on the model to puzzle out \"/audit_repo\".\n    if (input.trimStart().startsWith('/')) {\n      const rewritten = rewriteUnknownSlashAsWorkflow(normalizedCommand, commandArgs);\n      if (rewritten) {\n        chatLog.addSystem(`▶ Running workflow: ${normalizedCommand}`);\n        tui.requestRender();\n        sendMessage(rewritten);\n        return;\n      }\n    }\n\n    sendMessage(input);\n  };\n}\n"],"mappings":";;;;AAmBA,SAAgB,iBAAiB,UAAsC;AACrE,QAAO;EACL;GAAE,MAAM;GAAQ,aAAa;GAA2B;EACxD;GAAE,MAAM;GAAS,aAAa;GAAsC;EACpE;GAAE,MAAM;GAAS,aAAa;GAAqD;EACnF;GAAE,MAAM;GAAY,aAAa;GAAuC;EACxE;GAAE,MAAM;GAAQ,aAAa;GAAgB;EAC7C;GAAE,MAAM;GAAU,aAAa;GAAyB;EACxD;GAAE,MAAM;GAAU,aAAa;GAAqD;EACpF;GAAE,MAAM;GAAS,aAAa;GAA+B;EAC7D;GAAE,MAAM;GAAO,aAAa;GAAuB;EACnD;GAAE,MAAM;GAAS,aAAa;GAAyB;EACvD;GAAE,MAAM;GAAQ,aAAa;GAAiB;EAC9C;GAAE,MAAM;GAAU,aAAa;GAAyC;EACxE;GAAE,MAAM;GAAiB,aAAa;GAAoC;EAC1E;GAAE,MAAM;GAAW,aAAa;GAAuC;EACvE;GAAE,MAAM;GAAS,aAAa;GAAyC;EACvE;GAAE,MAAM;GAAa,aAAa;GAAqD;EACvF;GAAE,MAAM;GAAW,aAAa;GAAuB;EACvD;GAAE,MAAM;GAAU,aAAa;GAAqB;EACpD;GAAE,MAAM;GAAU,aAAa;GAAgC;EAC/D;GAAE,MAAM;GAAW,aAAa;GAAuB;EACvD;GAAE,MAAM;GAAO,aAAa;GAA2C;EACvE;GAAE,MAAM;GAAU,aAAa;GAAuC;EACtE;GAAE,MAAM;GAAY,aAAa;GAA6B;EAC9D;GAAE,MAAM;GAAsB,aAAa;GAAmC;EAC9E;GAAE,MAAM;GAAS,aAAa;GAAwB;EACtD;GAAE,MAAM;GAAW,aAAa;GAA+C;EAC/E;GAAE,MAAM;GAAa,aAAa;GAAwD;EAC1F;GAAE,MAAM;GAAY,aAAa;GAAwD;EAC1F;;AAGH,SAAgB,kBAAkB,SAA0B;CAC1D,MAAM,WAAW,iBAAiB,QAAQ;CAC1C,MAAM,QAAQ,CAAC,sBAAsB;AACrC,MAAK,MAAM,KAAK,SACd,OAAM,KAAK,MAAM,EAAE,KAAK,KAAK,EAAE,cAAc;AAE/C,OAAM,KAAK,IAAI,wEAAwE;AACvF,OAAM,KAAK,8BAA8B;AACzC,OAAM,KAAK,mCAAmC;AAC9C,OAAM,KAAK,4DAA4D;AACvE,OAAM,KAAK,0BAA0B;AACrC,OAAM,KAAK,kDAAkD;AAC7D,OAAM,KAAK,kDAAkD;AAC7D,OAAM,KAAK,gCAAgC;AAC3C,OAAM,KAAK,2CAA2C;AACtD,OAAM,KAAK,mCAAmC;AAC9C,OAAM,KAAK,qCAAqC;AAChD,OAAM,KAAK,4EAA4E;AACvF,OAAM,KAAK,yDAAyD;AACpE,OAAM,KAAK,6DAA6D;AACxE,OAAM,KAAK,kEAAkE;AAC7E,OAAM,KAAK,8DAA8D;AACzE,OAAM,KAAK,0EAA0E;AACrF,OAAM,KAAK,iEAAiE;AAC5E,OAAM,KAAK,mCAAmC;AAC9C,OAAM,KAAK,qDAAqD;AAChE,OAAM,KAAK,IAAI,qEAAqE;AACpF,QAAO,MAAM,KAAK,KAAK;;AAwBzB,SAAgB,wBAAwB,MAAmD;CACzF,MAAM,EACJ,OACA,SACA,KACA,WACA,aACA,aACA,aACA,aACA,cACA,aACA,YACA,yBAAyB,EAAE,KACzB;AAEJ,SAAQ,UAAkB;EAExB,MAAM,CAAC,aAAa,GAAG,aADP,MAAM,QAAQ,OAAO,GAAG,CAAC,MACE,CAAC,MAAM,MAAM;EACxD,MAAM,qBAAqB,eAAe,IAAI,aAAa;EAC3D,MAAM,cAAc,UAAU,KAAK,IAAI;EAEvC,MAAM,eAAe,uBAAuB,MAAM,MAAM,EAAE,SAAS,kBAAkB;AACrF,MAAI,cAAc;AACX,WAAQ,QAAQ,aAAa,QAAQ,YAAY,CAAC,CAAC,WAAW;AACjE,QAAI,eAAe;KACnB;AACF;;AAGF,UAAQ,mBAAR;GACE,KAAK;AACH,YAAQ,UAAU,kBAAkB,YAAY,CAAC;AACjD,QAAI,eAAe;AACnB;GACF,KAAK;GACL,KAAK;AACH,YAAQ,UAAU,qBAAqB,YAAY,CAAC;AACpD,QAAI,eAAe;AACnB;GACF,KAAK;GACL,KAAK;AACH,iBAAa;AACb;GACF,KAAK;GACL,KAAK;GACL,KAAK;AACE,iBAAa,CAAC,WAAW;AAC5B,aAAQ,UAAU,WAAW;AAC7B,SAAI,eAAe;MACnB;AACF;GACF,KAAK;AACH,UAAM,gBAAgB,CAAC,MAAM;AAC7B,YAAQ,iBAAiB,MAAM,cAAc;AAC7C,YAAQ,UAAU,UAAU,MAAM,gBAAgB,aAAa,cAAc;AAC7E,QAAI,eAAe;AACnB;GACF,KAAK;AACH,UAAM,eAAe,CAAC,MAAM;AAC5B,YAAQ,UAAU,qBAAqB,MAAM,eAAe,OAAO,QAAQ;AAC3E,kBAAc;AACd,QAAI,eAAe;AACnB;GACF,KAAK;GACL,KAAK;AACH,gBAAY,mBAAmB;AAC/B;GACF,KAAK;GACL,KAAK;AACH,gBAAY,kBAAkB;AAC9B;GACF,KAAK;AACH,gBAAY,cAAc;AAC1B;GACF,KAAK;GACL,KAAK;AACH,gBAAY,mBAAmB;AAC/B,YAAQ,UAAU,6BAA6B,uBAAuB,GAAG;AACzE,QAAI,eAAe;AACnB;GACF,KAAK;AACE,SAAK,iBAAiB;AAC3B;GACF,QACE;;AAGJ,UAAQ,mBAAR;GACE,KAAK;GACL,KAAK;GACL,KAAK;GACL,KAAK;AACE,iBAAa,CAAC,WAAW;AAC5B,eAAU,OAAO;AACjB,aAAQ,UAAU;AAClB,WAAM,qBAAqB,SAAS;AACpC,SAAI,eAAe;AACnB,iBAAY,MAAM;MAClB;AACF;GAEF,QACE;;AAMJ,MAAI,MAAM,WAAW,CAAC,WAAW,IAAI,EAAE;GACrC,MAAM,YAAY,8BAA8B,mBAAmB,YAAY;AAC/E,OAAI,WAAW;AACb,YAAQ,UAAU,uBAAuB,oBAAoB;AAC7D,QAAI,eAAe;AACnB,gBAAY,UAAU;AACtB;;;AAIJ,cAAY,MAAM"}

package/dist/src/tui/tui-keybindings-file.js

@@ -1,8 +1,8 @@
 import { resolveStateDir } from "../config/paths-state.js";
 import { init_paths } from "../config/paths.js";
 import { XOPC_TUI_KEYBINDINGS } from "./xopc-tui-keybindings.js";
-import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
+import { existsSync, readFileSync } from "node:fs";
 import { KeybindingsManager } from "@earendil-works/pi-tui";
 //#region src/tui/tui-keybindings-file.ts
 init_paths();

package/dist/src/tui/tui-scoped-models.js

@@ -1,6 +1,6 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
 import { homedir } from "node:os";
+import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 //#region src/tui/tui-scoped-models.ts
 const STORE_PATH = join(homedir(), ".xopc", "tui-scoped-models.json");
 function normalizeWorkspaceKey(cwd) {

package/dist/src/tui/tui-settings.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../config/paths-state.js";
 import { init_paths } from "../config/paths.js";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 //#region src/tui/tui-settings.ts
 init_paths();
 const DEFAULT_TUI_SETTINGS = {

package/dist/src/tui/tui-workflow-slash.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Helper for {@link createTuiCommandHandler}: when the user types an unknown
+ * slash command in the TUI, check whether the name matches a saved workflow
+ * and, if so, rewrite the input into a natural-language prompt that
+ * deterministically triggers the `workflow` tool.
+ *
+ * Why a rewrite and not a direct execution?
+ *   Slash commands in xopc are handled by the chat-commands framework whose
+ *   handlers return text shown back to the user — there is no hook to "inject
+ *   the result as the next user message and start an agent turn". So the
+ *   shortest reliable path is to turn `/audit_repo` into the same plain-text
+ *   request the model already knows how to handle.
+ *
+ * Why catalog the workflow list at the TUI layer?
+ *   The catalog reads `~/.xopc/workflows/` synchronously (single `readdir`),
+ *   so the slash dispatch stays sync and the user sees no latency. The lookup
+ *   only runs for inputs that started with `/` and didn't match any built-in
+ *   or extension command, so the cost is negligible.
+ *
+ * Built-in TUI command names that overlap with a workflow file name keep their
+ * existing TUI behaviour — the slash dispatcher matches the built-in switch
+ * cases before this helper is consulted.
+ */
+/** Reset the cache (for tests, or after a `/workflow save`). */
+export declare function resetWorkflowSlashCache(): void;
+/**
+ * Returns a rewritten user message when `name` matches a known workflow,
+ * otherwise `null`. Args after the slash are passed along as a hint to the
+ * model — most workflows expect free-form context, not strict JSON, and the
+ * model can shape the call.
+ */
+export declare function rewriteUnknownSlashAsWorkflow(name: string, args: string, resolver?: () => Set<string>): string | null;

package/dist/src/tui/tui-workflow-slash.js

@@ -0,0 +1,63 @@
+import { createWorkflowCatalog } from "../agent/workflow/catalog.js";
+//#region src/tui/tui-workflow-slash.ts
+/**
+* Helper for {@link createTuiCommandHandler}: when the user types an unknown
+* slash command in the TUI, check whether the name matches a saved workflow
+* and, if so, rewrite the input into a natural-language prompt that
+* deterministically triggers the `workflow` tool.
+*
+* Why a rewrite and not a direct execution?
+*   Slash commands in xopc are handled by the chat-commands framework whose
+*   handlers return text shown back to the user — there is no hook to "inject
+*   the result as the next user message and start an agent turn". So the
+*   shortest reliable path is to turn `/audit_repo` into the same plain-text
+*   request the model already knows how to handle.
+*
+* Why catalog the workflow list at the TUI layer?
+*   The catalog reads `~/.xopc/workflows/` synchronously (single `readdir`),
+*   so the slash dispatch stays sync and the user sees no latency. The lookup
+*   only runs for inputs that started with `/` and didn't match any built-in
+*   or extension command, so the cost is negligible.
+*
+* Built-in TUI command names that overlap with a workflow file name keep their
+* existing TUI behaviour — the slash dispatcher matches the built-in switch
+* cases before this helper is consulted.
+*/
+let cachedNames = null;
+let cachedAt = 0;
+const CACHE_TTL_MS = 5e3;
+/** Reset the cache (for tests, or after a `/workflow save`). */
+function resetWorkflowSlashCache() {
+	cachedNames = null;
+	cachedAt = 0;
+}
+function knownWorkflowNames() {
+	const now = Date.now();
+	if (cachedNames && now - cachedAt < CACHE_TTL_MS) return cachedNames;
+	try {
+		const catalog = createWorkflowCatalog();
+		cachedNames = new Set(catalog.list().map((e) => e.name));
+	} catch {
+		cachedNames = /* @__PURE__ */ new Set();
+	}
+	cachedAt = now;
+	return cachedNames;
+}
+/**
+* Returns a rewritten user message when `name` matches a known workflow,
+* otherwise `null`. Args after the slash are passed along as a hint to the
+* model — most workflows expect free-form context, not strict JSON, and the
+* model can shape the call.
+*/
+function rewriteUnknownSlashAsWorkflow(name, args, resolver = knownWorkflowNames) {
+	const normalized = name.trim();
+	if (!normalized) return null;
+	if (!resolver().has(normalized)) return null;
+	const tail = args.trim();
+	if (!tail) return `Run the ${normalized} workflow (call workflow tool with name="${normalized}").`;
+	return `Run the ${normalized} workflow (call workflow tool with name="${normalized}").\nUse this argument: ${tail}`;
+}
+//#endregion
+export { resetWorkflowSlashCache, rewriteUnknownSlashAsWorkflow };
+
+//# sourceMappingURL=tui-workflow-slash.js.map

package/dist/src/tui/tui-workflow-slash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui-workflow-slash.js","names":[],"sources":["../../../src/tui/tui-workflow-slash.ts"],"sourcesContent":["/**\n * Helper for {@link createTuiCommandHandler}: when the user types an unknown\n * slash command in the TUI, check whether the name matches a saved workflow\n * and, if so, rewrite the input into a natural-language prompt that\n * deterministically triggers the `workflow` tool.\n *\n * Why a rewrite and not a direct execution?\n *   Slash commands in xopc are handled by the chat-commands framework whose\n *   handlers return text shown back to the user — there is no hook to \"inject\n *   the result as the next user message and start an agent turn\". So the\n *   shortest reliable path is to turn `/audit_repo` into the same plain-text\n *   request the model already knows how to handle.\n *\n * Why catalog the workflow list at the TUI layer?\n *   The catalog reads `~/.xopc/workflows/` synchronously (single `readdir`),\n *   so the slash dispatch stays sync and the user sees no latency. The lookup\n *   only runs for inputs that started with `/` and didn't match any built-in\n *   or extension command, so the cost is negligible.\n *\n * Built-in TUI command names that overlap with a workflow file name keep their\n * existing TUI behaviour — the slash dispatcher matches the built-in switch\n * cases before this helper is consulted.\n */\n\nimport { createWorkflowCatalog } from '../agent/workflow/catalog.js';\n\nlet cachedNames: Set<string> | null = null;\nlet cachedAt = 0;\nconst CACHE_TTL_MS = 5_000;\n\n/** Reset the cache (for tests, or after a `/workflow save`). */\nexport function resetWorkflowSlashCache(): void {\n  cachedNames = null;\n  cachedAt = 0;\n}\n\nfunction knownWorkflowNames(): Set<string> {\n  const now = Date.now();\n  if (cachedNames && now - cachedAt < CACHE_TTL_MS) return cachedNames;\n  try {\n    const catalog = createWorkflowCatalog();\n    cachedNames = new Set(catalog.list().map((e) => e.name));\n  } catch {\n    cachedNames = new Set();\n  }\n  cachedAt = now;\n  return cachedNames;\n}\n\n/**\n * Returns a rewritten user message when `name` matches a known workflow,\n * otherwise `null`. Args after the slash are passed along as a hint to the\n * model — most workflows expect free-form context, not strict JSON, and the\n * model can shape the call.\n */\nexport function rewriteUnknownSlashAsWorkflow(\n  name: string,\n  args: string,\n  resolver: () => Set<string> = knownWorkflowNames,\n): string | null {\n  const normalized = name.trim();\n  if (!normalized) return null;\n  if (!resolver().has(normalized)) return null;\n\n  const tail = args.trim();\n  if (!tail) {\n    return `Run the ${normalized} workflow (call workflow tool with name=\"${normalized}\").`;\n  }\n  return (\n    `Run the ${normalized} workflow (call workflow tool with name=\"${normalized}\").\\n` +\n    `Use this argument: ${tail}`\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,IAAI,cAAkC;AACtC,IAAI,WAAW;AACf,MAAM,eAAe;;AAGrB,SAAgB,0BAAgC;AAC9C,eAAc;AACd,YAAW;;AAGb,SAAS,qBAAkC;CACzC,MAAM,MAAM,KAAK,KAAK;AACtB,KAAI,eAAe,MAAM,WAAW,aAAc,QAAO;AACzD,KAAI;EACF,MAAM,UAAU,uBAAuB;AACvC,gBAAc,IAAI,IAAI,QAAQ,MAAM,CAAC,KAAK,MAAM,EAAE,KAAK,CAAC;SAClD;AACN,gCAAc,IAAI,KAAK;;AAEzB,YAAW;AACX,QAAO;;;;;;;;AAST,SAAgB,8BACd,MACA,MACA,WAA8B,oBACf;CACf,MAAM,aAAa,KAAK,MAAM;AAC9B,KAAI,CAAC,WAAY,QAAO;AACxB,KAAI,CAAC,UAAU,CAAC,IAAI,WAAW,CAAE,QAAO;CAExC,MAAM,OAAO,KAAK,MAAM;AACxB,KAAI,CAAC,KACH,QAAO,WAAW,WAAW,2CAA2C,WAAW;AAErF,QACE,WAAW,WAAW,2CAA2C,WAAW,0BACtD"}

package/dist/src/tui/tui.js

@@ -26,9 +26,9 @@ import { TuiBottomBar } from "./components/tui-bottom-bar.js";
 import { TuiHeader } from "./components/tui-header.js";
 import { loadExtensionsForTuiLocalMode } from "./extension-host/load-extensions.js";
 import { createTuiExtensionRuntime } from "./extension-host/runtime.js";
-import { mkdtempSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
 import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { mkdtempSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import { spawnSync } from "node:child_process";
 import { Container, Loader, ProcessTerminal, TUI, setKeybindings } from "@earendil-works/pi-tui";
 //#region src/tui/tui.ts

package/dist/src/tunnel/enable-lan-pairing.js

@@ -1,7 +1,7 @@
 import { buildDefaultCorsOrigins } from "../gateway/host.js";
 import { isNetworkAccessibleBindHost, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
-import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../gateway/auth.js";
 import { enumerateLanGatewayCandidates } from "./tunnel-qr.js";
+import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../gateway/auth.js";
 import { assertGatewayRuntimeConfig } from "../gateway/runtime-config.js";
 //#region src/tunnel/enable-lan-pairing.ts
 function mergeCorsOriginsForLan(config, port, bindHost) {

package/dist/src/tunnel/frpc-binary.js

@@ -2,10 +2,10 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveBinDir } from "../config/paths.js";
 import { extractFrpcFromReleaseArchive, frpcReleaseArchiveExtension, nodePlatformForFrpTarget } from "./frpc-extract.js";
-import { randomBytes } from "node:crypto";
-import { chmodSync, createWriteStream, existsSync, mkdirSync, rmSync } from "node:fs";
-import { join } from "node:path";
 import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { chmodSync, createWriteStream, existsSync, mkdirSync, rmSync } from "node:fs";
+import { randomBytes } from "node:crypto";
 import { Readable } from "node:stream";
 import { pipeline } from "node:stream/promises";
 //#region src/tunnel/frpc-binary.ts

package/dist/src/tunnel/frpc-config.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../config/paths-state.js";
 import { init_paths } from "../config/paths.js";
-import { mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/tunnel/frpc-config.ts
 init_paths();
 function resolveFrpcConfigPath(tunnelId) {

package/dist/src/tunnel/frpc-extract.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { spawn } from "node:child_process";
 import AdmZip from "adm-zip";
 import { gunzipSync } from "node:zlib";

package/dist/src/tunnel/index.js

@@ -1,10 +1,10 @@
+import { loadTunnelState, resolveTunnelStatePath, saveTunnelState } from "./tunnel-state.js";
+import { buildMobileConnectQrPayload, resolveLanGatewayUrl } from "./tunnel-qr.js";
 import { CURRENT_TUNNEL_CONSENT_VERSION, TUNNEL_CONSENT_REQUIRED_CODE, TUNNEL_RISK_SUMMARY_LINES, TunnelConsentError, assertTunnelMayStart, getTunnelConsentState, hasValidTunnelConsent } from "./consent.js";
 import { getTunnelRegistrationSecretMeta, isMaskedTunnelSecretPatchValue, isProductionTunnelBroker, resolveTunnelBrokerUrl, resolveTunnelRegistrationSecret } from "./env.js";
 import { TunnelBrokerClient, resolveBrokerApiBase } from "./broker-client.js";
 import { FRPC_VERSION, clearFrpcPathForProcess, ensureFrpcBinary, publishFrpcPathForProcess } from "./frpc-binary.js";
-import { buildMobileConnectQrPayload, resolveLanGatewayUrl } from "./tunnel-qr.js";
 import { consumePairingSecret, createPairingSecret, resetPairingSessionsForTests } from "./pairing.js";
-import { loadTunnelState, resolveTunnelStatePath, saveTunnelState } from "./tunnel-state.js";
 import { logTunnelAudit } from "./tunnel-audit.js";
 import { TunnelService, getTunnelService, hashGatewayToken } from "./tunnel-service.js";
 import { resolveFrpSubdomainHost } from "./frp-subdomain-host.js";

package/dist/src/tunnel/pair-context.d.ts

@@ -1,6 +1,6 @@
 import type { Config } from '../config/schema.js';
 import type { GatewayBindMode } from '../config/schema.js';
-export type MobilePairCandidateKind = 'lan' | 'tunnel';
+export type MobilePairCandidateKind = 'lan' | 'tunnel' | 'reverse-proxy';
 export type MobilePairBlockReason = 'GATEWAY_LOOPBACK_ONLY' | 'NO_REACHABLE_URL';
 export type MobilePairCandidate = {
     kind: MobilePairCandidateKind;
@@ -27,4 +27,10 @@ export declare function buildMobilePairContext(params: {
     config: Config;
     tunnelPublicUrl?: string | null;
     tunnelConnected?: boolean;
+    /**
+     * Optional override for `gateway.publicUrl`. Falls back to the configured
+     * value when omitted; useful for transient candidates (e.g. UI auto-detect
+     * from `window.location.origin` before the user persists the value).
+     */
+    reverseProxyPublicUrl?: string | null;
 }): MobilePairContext;

package/dist/src/tunnel/pair-context.js

@@ -1,7 +1,9 @@
+import { init_public_url, normalizePublicUrlOrNull } from "../config/public-url.js";
 import { isNetworkAccessibleBindHost, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
 import { enumerateLanGatewayCandidates } from "./tunnel-qr.js";
 import { buildMobileConnectUrlOrder } from "./pair-url.js";
 //#region src/tunnel/pair-context.ts
+init_public_url();
 function buildMobilePairContext(params) {
 	const port = params.config.gateway?.port ?? 18790;
 	const bindMode = resolveGatewayBindMode(params.config);
@@ -15,20 +17,31 @@ function buildMobilePairContext(params) {
 		reachable: lanListenReady,
 		...lanListenReady ? {} : { note: "requires_lan_bind" }
 	}));
-	const publicUrl = params.tunnelPublicUrl?.trim() || null;
-	const tunnelConnected = params.tunnelConnected === true && Boolean(publicUrl);
-	if (tunnelConnected && publicUrl) candidates.unshift({
+	const tunnelUrl = params.tunnelPublicUrl?.trim() || null;
+	const tunnelConnected = params.tunnelConnected === true && Boolean(tunnelUrl);
+	if (tunnelConnected && tunnelUrl) candidates.unshift({
 		kind: "tunnel",
-		url: publicUrl,
+		url: tunnelUrl,
+		reachable: true
+	});
+	const configuredReverseProxy = normalizePublicUrlOrNull(params.config.gateway?.publicUrl);
+	const reverseProxyUrl = params.reverseProxyPublicUrl !== void 0 ? normalizePublicUrlOrNull(params.reverseProxyPublicUrl) : configuredReverseProxy;
+	if (reverseProxyUrl) candidates.unshift({
+		kind: "reverse-proxy",
+		url: reverseProxyUrl,
 		reachable: true
 	});
 	let recommended = {
 		mode: null,
 		url: null
 	};
-	if (tunnelConnected && publicUrl) recommended = {
+	if (reverseProxyUrl) recommended = {
+		mode: "reverse-proxy",
+		url: reverseProxyUrl
+	};
+	else if (tunnelConnected && tunnelUrl) recommended = {
 		mode: "tunnel",
-		url: publicUrl
+		url: tunnelUrl
 	};
 	else if (lanListenReady && lanEnumerated[0]) recommended = {
 		mode: "lan",
@@ -38,13 +51,16 @@ function buildMobilePairContext(params) {
 		mode: "lan",
 		url: lanEnumerated[0].url
 	};
-	const pairingReady = Boolean(tunnelConnected || lanListenReady && lanEnumerated.length > 0);
+	const pairingReady = Boolean(reverseProxyUrl || tunnelConnected || lanListenReady && lanEnumerated.length > 0);
 	let blockReason;
 	if (!pairingReady) blockReason = !lanListenReady && !tunnelConnected ? "GATEWAY_LOOPBACK_ONLY" : "NO_REACHABLE_URL";
 	const lanUrlForConnect = lanListenReady && lanEnumerated[0] ? lanEnumerated[0].url : null;
+	const hasUpstream = Boolean(reverseProxyUrl) || tunnelConnected;
 	const connectUrls = buildMobileConnectUrlOrder({
-		baseUrl: tunnelConnected && publicUrl ? publicUrl : lanListenReady && recommended.url ? recommended.url : null,
-		lanUrl: tunnelConnected ? lanUrlForConnect : null
+		reverseProxyUrl,
+		baseUrl: reverseProxyUrl ? reverseProxyUrl : tunnelConnected && tunnelUrl ? tunnelUrl : lanListenReady && recommended.url ? recommended.url : null,
+		lanUrl: hasUpstream ? lanUrlForConnect : null,
+		tunnelUrl: tunnelConnected ? tunnelUrl : null
 	});
 	return {
 		port,

package/dist/src/tunnel/pair-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"pair-context.js","names":[],"sources":["../../../src/tunnel/pair-context.ts"],"sourcesContent":["import type { Config } from '../config/schema.js';\nimport type { GatewayBindMode } from '../config/schema.js';\nimport {\n  isNetworkAccessibleBindHost,\n  resolveGatewayBindMode,\n  resolveGatewayEffectiveHost,\n} from '../config/gateway-bind.js';\nimport { enumerateLanGatewayCandidates } from './tunnel-qr.js';\nimport { buildMobileConnectUrlOrder } from './pair-url.js';\n\nexport type MobilePairCandidateKind = 'lan' | 'tunnel';\n\nexport type MobilePairBlockReason = 'GATEWAY_LOOPBACK_ONLY' | 'NO_REACHABLE_URL';\n\nexport type MobilePairCandidate = {\n  kind: MobilePairCandidateKind;\n  url: string;\n  label?: string;\n  reachable: boolean;\n  note?: string;\n};\n\nexport type MobilePairContext = {\n  port: number;\n  bindMode: GatewayBindMode;\n  listenHost: string;\n  pairingReady: boolean;\n  blockReason?: MobilePairBlockReason;\n  candidates: MobilePairCandidate[];\n  recommended: {\n    mode: MobilePairCandidateKind | null;\n    url: string | null;\n  };\n  /** Ordered URLs for mobile clients (LAN first when available, then tunnel). */\n  connectUrls: string[];\n};\n\nexport function buildMobilePairContext(params: {\n  config: Config;\n  tunnelPublicUrl?: string | null;\n  tunnelConnected?: boolean;\n}): MobilePairContext {\n  const port = params.config.gateway?.port ?? 18790;\n  const bindMode = resolveGatewayBindMode(params.config);\n  const listenHost = resolveGatewayEffectiveHost(params.config);\n  const lanListenReady = isNetworkAccessibleBindHost(listenHost);\n\n  const lanEnumerated = enumerateLanGatewayCandidates(port);\n  const candidates: MobilePairCandidate[] = lanEnumerated.map((entry) => ({\n    kind: 'lan',\n    url: entry.url,\n    label: entry.interfaceName,\n    reachable: lanListenReady,\n    ...(lanListenReady ? {} : { note: 'requires_lan_bind' }),\n  }));\n\n  const publicUrl = params.tunnelPublicUrl?.trim() || null;\n  const tunnelConnected = params.tunnelConnected === true && Boolean(publicUrl);\n  if (tunnelConnected && publicUrl) {\n    candidates.unshift({\n      kind: 'tunnel',\n      url: publicUrl,\n      reachable: true,\n    });\n  }\n\n  let recommended: MobilePairContext['recommended'] = { mode: null, url: null };\n  if (tunnelConnected && publicUrl) {\n    recommended = { mode: 'tunnel', url: publicUrl };\n  } else if (lanListenReady && lanEnumerated[0]) {\n    recommended = { mode: 'lan', url: lanEnumerated[0].url };\n  } else if (lanEnumerated[0]) {\n    recommended = { mode: 'lan', url: lanEnumerated[0].url };\n  }\n\n  const pairingReady = Boolean(\n    tunnelConnected || (lanListenReady && lanEnumerated.length > 0),\n  );\n\n  let blockReason: MobilePairBlockReason | undefined;\n  if (!pairingReady) {\n    blockReason =\n      !lanListenReady && !tunnelConnected ? 'GATEWAY_LOOPBACK_ONLY' : 'NO_REACHABLE_URL';\n  }\n\n  const lanUrlForConnect =\n    lanListenReady && lanEnumerated[0] ? lanEnumerated[0].url : null;\n  const baseUrlForConnect = tunnelConnected && publicUrl\n    ? publicUrl\n    : lanListenReady && recommended.url\n      ? recommended.url\n      : null;\n  const connectUrls = buildMobileConnectUrlOrder({\n    baseUrl: baseUrlForConnect,\n    lanUrl: tunnelConnected ? lanUrlForConnect : null,\n  });\n\n  return {\n    port,\n    bindMode,\n    listenHost,\n    pairingReady,\n    ...(blockReason ? { blockReason } : {}),\n    candidates,\n    recommended,\n    connectUrls,\n  };\n}\n"],"mappings":";;;;AAqCA,SAAgB,uBAAuB,QAIjB;CACpB,MAAM,OAAO,OAAO,OAAO,SAAS,QAAQ;CAC5C,MAAM,WAAW,uBAAuB,OAAO,OAAO;CACtD,MAAM,aAAa,4BAA4B,OAAO,OAAO;CAC7D,MAAM,iBAAiB,4BAA4B,WAAW;CAE9D,MAAM,gBAAgB,8BAA8B,KAAK;CACzD,MAAM,aAAoC,cAAc,KAAK,WAAW;EACtE,MAAM;EACN,KAAK,MAAM;EACX,OAAO,MAAM;EACb,WAAW;EACX,GAAI,iBAAiB,EAAE,GAAG,EAAE,MAAM,qBAAqB;EACxD,EAAE;CAEH,MAAM,YAAY,OAAO,iBAAiB,MAAM,IAAI;CACpD,MAAM,kBAAkB,OAAO,oBAAoB,QAAQ,QAAQ,UAAU;AAC7E,KAAI,mBAAmB,UACrB,YAAW,QAAQ;EACjB,MAAM;EACN,KAAK;EACL,WAAW;EACZ,CAAC;CAGJ,IAAI,cAAgD;EAAE,MAAM;EAAM,KAAK;EAAM;AAC7E,KAAI,mBAAmB,UACrB,eAAc;EAAE,MAAM;EAAU,KAAK;EAAW;UACvC,kBAAkB,cAAc,GACzC,eAAc;EAAE,MAAM;EAAO,KAAK,cAAc,GAAG;EAAK;UAC/C,cAAc,GACvB,eAAc;EAAE,MAAM;EAAO,KAAK,cAAc,GAAG;EAAK;CAG1D,MAAM,eAAe,QACnB,mBAAoB,kBAAkB,cAAc,SAAS,EAC9D;CAED,IAAI;AACJ,KAAI,CAAC,aACH,eACE,CAAC,kBAAkB,CAAC,kBAAkB,0BAA0B;CAGpE,MAAM,mBACJ,kBAAkB,cAAc,KAAK,cAAc,GAAG,MAAM;CAM9D,MAAM,cAAc,2BAA2B;EAC7C,SANwB,mBAAmB,YACzC,YACA,kBAAkB,YAAY,MAC5B,YAAY,MACZ;EAGJ,QAAQ,kBAAkB,mBAAmB;EAC9C,CAAC;AAEF,QAAO;EACL;EACA;EACA;EACA;EACA,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;EACtC;EACA;EACA;EACD"}
+{"version":3,"file":"pair-context.js","names":[],"sources":["../../../src/tunnel/pair-context.ts"],"sourcesContent":["import type { Config } from '../config/schema.js';\nimport type { GatewayBindMode } from '../config/schema.js';\nimport {\n  isNetworkAccessibleBindHost,\n  resolveGatewayBindMode,\n  resolveGatewayEffectiveHost,\n} from '../config/gateway-bind.js';\nimport { normalizePublicUrlOrNull } from '../config/public-url.js';\nimport { enumerateLanGatewayCandidates } from './tunnel-qr.js';\nimport { buildMobileConnectUrlOrder } from './pair-url.js';\n\nexport type MobilePairCandidateKind = 'lan' | 'tunnel' | 'reverse-proxy';\n\nexport type MobilePairBlockReason = 'GATEWAY_LOOPBACK_ONLY' | 'NO_REACHABLE_URL';\n\nexport type MobilePairCandidate = {\n  kind: MobilePairCandidateKind;\n  url: string;\n  label?: string;\n  reachable: boolean;\n  note?: string;\n};\n\nexport type MobilePairContext = {\n  port: number;\n  bindMode: GatewayBindMode;\n  listenHost: string;\n  pairingReady: boolean;\n  blockReason?: MobilePairBlockReason;\n  candidates: MobilePairCandidate[];\n  recommended: {\n    mode: MobilePairCandidateKind | null;\n    url: string | null;\n  };\n  /** Ordered URLs for mobile clients (LAN first when available, then tunnel). */\n  connectUrls: string[];\n};\n\nexport function buildMobilePairContext(params: {\n  config: Config;\n  tunnelPublicUrl?: string | null;\n  tunnelConnected?: boolean;\n  /**\n   * Optional override for `gateway.publicUrl`. Falls back to the configured\n   * value when omitted; useful for transient candidates (e.g. UI auto-detect\n   * from `window.location.origin` before the user persists the value).\n   */\n  reverseProxyPublicUrl?: string | null;\n}): MobilePairContext {\n  const port = params.config.gateway?.port ?? 18790;\n  const bindMode = resolveGatewayBindMode(params.config);\n  const listenHost = resolveGatewayEffectiveHost(params.config);\n  const lanListenReady = isNetworkAccessibleBindHost(listenHost);\n\n  const lanEnumerated = enumerateLanGatewayCandidates(port);\n  const candidates: MobilePairCandidate[] = lanEnumerated.map((entry) => ({\n    kind: 'lan',\n    url: entry.url,\n    label: entry.interfaceName,\n    reachable: lanListenReady,\n    ...(lanListenReady ? {} : { note: 'requires_lan_bind' }),\n  }));\n\n  const tunnelUrl = params.tunnelPublicUrl?.trim() || null;\n  const tunnelConnected = params.tunnelConnected === true && Boolean(tunnelUrl);\n  if (tunnelConnected && tunnelUrl) {\n    candidates.unshift({\n      kind: 'tunnel',\n      url: tunnelUrl,\n      reachable: true,\n    });\n  }\n\n  const configuredReverseProxy = normalizePublicUrlOrNull(params.config.gateway?.publicUrl);\n  const reverseProxyUrl =\n    params.reverseProxyPublicUrl !== undefined\n      ? normalizePublicUrlOrNull(params.reverseProxyPublicUrl)\n      : configuredReverseProxy;\n  if (reverseProxyUrl) {\n    candidates.unshift({\n      kind: 'reverse-proxy',\n      url: reverseProxyUrl,\n      reachable: true,\n    });\n  }\n\n  let recommended: MobilePairContext['recommended'] = { mode: null, url: null };\n  if (reverseProxyUrl) {\n    recommended = { mode: 'reverse-proxy', url: reverseProxyUrl };\n  } else if (tunnelConnected && tunnelUrl) {\n    recommended = { mode: 'tunnel', url: tunnelUrl };\n  } else if (lanListenReady && lanEnumerated[0]) {\n    recommended = { mode: 'lan', url: lanEnumerated[0].url };\n  } else if (lanEnumerated[0]) {\n    recommended = { mode: 'lan', url: lanEnumerated[0].url };\n  }\n\n  const pairingReady = Boolean(\n    reverseProxyUrl || tunnelConnected || (lanListenReady && lanEnumerated.length > 0),\n  );\n\n  let blockReason: MobilePairBlockReason | undefined;\n  if (!pairingReady) {\n    blockReason =\n      !lanListenReady && !tunnelConnected ? 'GATEWAY_LOOPBACK_ONLY' : 'NO_REACHABLE_URL';\n  }\n\n  const lanUrlForConnect =\n    lanListenReady && lanEnumerated[0] ? lanEnumerated[0].url : null;\n  // When reverse-proxy or tunnel is active, LAN is the secondary candidate.\n  // When only LAN is available, lanUrl IS the baseUrl (don't duplicate it).\n  const hasUpstream = Boolean(reverseProxyUrl) || tunnelConnected;\n  const baseUrlForConnect = reverseProxyUrl\n    ? reverseProxyUrl\n    : tunnelConnected && tunnelUrl\n      ? tunnelUrl\n      : lanListenReady && recommended.url\n        ? recommended.url\n        : null;\n  const connectUrls = buildMobileConnectUrlOrder({\n    reverseProxyUrl,\n    baseUrl: baseUrlForConnect,\n    lanUrl: hasUpstream ? lanUrlForConnect : null,\n    tunnelUrl: tunnelConnected ? tunnelUrl : null,\n  });\n\n  return {\n    port,\n    bindMode,\n    listenHost,\n    pairingReady,\n    ...(blockReason ? { blockReason } : {}),\n    candidates,\n    recommended,\n    connectUrls,\n  };\n}\n"],"mappings":";;;;;iBAOmE;AA+BnE,SAAgB,uBAAuB,QAUjB;CACpB,MAAM,OAAO,OAAO,OAAO,SAAS,QAAQ;CAC5C,MAAM,WAAW,uBAAuB,OAAO,OAAO;CACtD,MAAM,aAAa,4BAA4B,OAAO,OAAO;CAC7D,MAAM,iBAAiB,4BAA4B,WAAW;CAE9D,MAAM,gBAAgB,8BAA8B,KAAK;CACzD,MAAM,aAAoC,cAAc,KAAK,WAAW;EACtE,MAAM;EACN,KAAK,MAAM;EACX,OAAO,MAAM;EACb,WAAW;EACX,GAAI,iBAAiB,EAAE,GAAG,EAAE,MAAM,qBAAqB;EACxD,EAAE;CAEH,MAAM,YAAY,OAAO,iBAAiB,MAAM,IAAI;CACpD,MAAM,kBAAkB,OAAO,oBAAoB,QAAQ,QAAQ,UAAU;AAC7E,KAAI,mBAAmB,UACrB,YAAW,QAAQ;EACjB,MAAM;EACN,KAAK;EACL,WAAW;EACZ,CAAC;CAGJ,MAAM,yBAAyB,yBAAyB,OAAO,OAAO,SAAS,UAAU;CACzF,MAAM,kBACJ,OAAO,0BAA0B,KAAA,IAC7B,yBAAyB,OAAO,sBAAsB,GACtD;AACN,KAAI,gBACF,YAAW,QAAQ;EACjB,MAAM;EACN,KAAK;EACL,WAAW;EACZ,CAAC;CAGJ,IAAI,cAAgD;EAAE,MAAM;EAAM,KAAK;EAAM;AAC7E,KAAI,gBACF,eAAc;EAAE,MAAM;EAAiB,KAAK;EAAiB;UACpD,mBAAmB,UAC5B,eAAc;EAAE,MAAM;EAAU,KAAK;EAAW;UACvC,kBAAkB,cAAc,GACzC,eAAc;EAAE,MAAM;EAAO,KAAK,cAAc,GAAG;EAAK;UAC/C,cAAc,GACvB,eAAc;EAAE,MAAM;EAAO,KAAK,cAAc,GAAG;EAAK;CAG1D,MAAM,eAAe,QACnB,mBAAmB,mBAAoB,kBAAkB,cAAc,SAAS,EACjF;CAED,IAAI;AACJ,KAAI,CAAC,aACH,eACE,CAAC,kBAAkB,CAAC,kBAAkB,0BAA0B;CAGpE,MAAM,mBACJ,kBAAkB,cAAc,KAAK,cAAc,GAAG,MAAM;CAG9D,MAAM,cAAc,QAAQ,gBAAgB,IAAI;CAQhD,MAAM,cAAc,2BAA2B;EAC7C;EACA,SATwB,kBACtB,kBACA,mBAAmB,YACjB,YACA,kBAAkB,YAAY,MAC5B,YAAY,MACZ;EAIN,QAAQ,cAAc,mBAAmB;EACzC,WAAW,kBAAkB,YAAY;EAC1C,CAAC;AAEF,QAAO;EACL;EACA;EACA;EACA;EACA,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;EACtC;EACA;EACA;EACD"}