@xrkseek/harness 0.2.2 → 0.2.4

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-browser.js

@@ -0,0 +1,82 @@
+/**
+ * better-sidebar embedded browser probe — HEAD/GET remote URL headers.
+ */
+import { request as httpRequest } from "node:http";
+import { request as httpsRequest } from "node:https";
+const PROBE_TIMEOUT_MS = 8_000;
+function parseFrameAncestors(csp) {
+    if (!csp)
+        return undefined;
+    const match = /frame-ancestors\s+([^;]+)/i.exec(csp);
+    if (!match?.[1])
+        return undefined;
+    return match[1]
+        .trim()
+        .split(/\s+/)
+        .map((s) => s.replace(/['"]/g, ""))
+        .filter(Boolean);
+}
+function probeOnce(url) {
+    const transport = url.protocol === "https:" ? httpsRequest : httpRequest;
+    return new Promise((resolve) => {
+        const req = transport(url, { method: "HEAD", timeout: PROBE_TIMEOUT_MS }, (res) => {
+            res.resume();
+            const out = { reachable: true };
+            const xfo = res.headers["x-frame-options"];
+            if (typeof xfo === "string")
+                out.xFrameOptions = xfo;
+            const fa = parseFrameAncestors(res.headers["content-security-policy"]);
+            if (fa)
+                out.frameAncestors = fa;
+            resolve(out);
+        });
+        req.on("timeout", () => {
+            req.destroy();
+            resolve({ reachable: false });
+        });
+        req.on("error", () => resolve({ reachable: false }));
+        req.end();
+    });
+}
+/** Probe embeddability headers for better-sidebar browser tabs. */
+export async function probeBrowserUrl(rawUrl) {
+    const trimmed = rawUrl.trim();
+    if (!trimmed) {
+        return { reachable: false, supported: false, reason: "empty-url" };
+    }
+    let url;
+    try {
+        url = new URL(trimmed);
+    }
+    catch {
+        return { reachable: false, supported: false, reason: "invalid-url" };
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        return { reachable: false, supported: false, reason: "unsupported-scheme" };
+    }
+    const head = await probeOnce(url);
+    if (!head.reachable && url.protocol === "https:") {
+        const get = await new Promise((resolve) => {
+            const req = httpsRequest(url, { method: "GET", timeout: PROBE_TIMEOUT_MS }, (res) => {
+                res.resume();
+                const out = { reachable: true };
+                const xfo = res.headers["x-frame-options"];
+                if (typeof xfo === "string")
+                    out.xFrameOptions = xfo;
+                const fa = parseFrameAncestors(res.headers["content-security-policy"]);
+                if (fa)
+                    out.frameAncestors = fa;
+                resolve(out);
+            });
+            req.on("timeout", () => {
+                req.destroy();
+                resolve({ reachable: false });
+            });
+            req.on("error", () => resolve({ reachable: false }));
+            req.end();
+        });
+        return { ...get, supported: true, url: url.toString() };
+    }
+    return { ...head, supported: true, url: url.toString() };
+}
+//# sourceMappingURL=sidebar-browser.js.map

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-browser.js","sourceRoot":"","sources":["../../src/sidebar/sidebar-browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,SAAS,mBAAmB,CAC1B,GAAuB;IAEvB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,KAAK,CAAC,CAAC,CAAC;SACZ,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;SAClC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,GAAQ;IAKzB,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,SAAS,CACnB,GAAG,EACH,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAC7C,CAAC,GAAG,EAAE,EAAE;YACN,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,GAAG,GAIL,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC;YACrD,MAAM,EAAE,GAAG,mBAAmB,CAC5B,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAuB,CAC7D,CAAC;YACF,IAAI,EAAE;gBAAE,GAAG,CAAC,cAAc,GAAG,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;YACrD,MAAM,GAAG,GAAG,YAAY,CACtB,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAC5C,CAAC,GAAG,EAAE,EAAE;gBACN,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,GAAG,GAIL,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC;gBACrD,MAAM,EAAE,GAAG,mBAAmB,CAC5B,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAuB,CAC7D,CAAC;gBACF,IAAI,EAAE;oBAAE,GAAG,CAAC,cAAc,GAAG,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC,CACF,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACrB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC3D,CAAC"}

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-face-bridge.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Native Host Face bridge contract for `/sidebar/*`.
+ * Implementation: `@xrkseek/server-host` (`createSidebarFaceBridgeFromFace`).
+ * Client: `xrkh-better-sidebar` (kind: client only).
+ */
+export type SidebarSubagentLiveActivity = {
+    readonly text?: string;
+    readonly tool?: {
+        readonly name: string;
+        readonly args: string;
+    };
+};
+export interface SidebarFaceBridge {
+    readonly openExternal: (payload: {
+        action: "reveal" | "url";
+        path?: string;
+        url?: string;
+    }) => Promise<{
+        ok: true;
+    }>;
+    readonly readJobOutput?: (jobId: string) => {
+        text: string;
+        truncated?: boolean;
+    };
+    readonly killJob?: (jobId: string, reason?: string) => Promise<{
+        ok: boolean;
+        killed: boolean;
+        reason?: string;
+    }>;
+    readonly forkSessionAt?: (sessionId: string, beforeSeq: number) => Promise<{
+        sessionId: string;
+    }>;
+    /**
+     * Running-child live lines for `POST /sidebar/api/subagents.live`.
+     * Wire: nested `tool` (`LastActivity` / {@link SidebarSubagentLiveActivity}).
+     */
+    readonly listSubagentsLive?: (rootSessionId: string) => Promise<{
+        readonly live: Readonly<Record<string, SidebarSubagentLiveActivity>>;
+    }>;
+}
+//# sourceMappingURL=sidebar-face-bridge.d.ts.map

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-face-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-face-bridge.d.ts","sourceRoot":"","sources":["../../src/sidebar/sidebar-face-bridge.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAClE,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE;QAC/B,MAAM,EAAE,QAAQ,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,CACvB,KAAK,EAAE,MAAM,KACV;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,CACjB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,KACZ,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,QAAQ,CAAC,aAAa,CAAC,EAAE,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,KACd,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAC3B,aAAa,EAAE,MAAM,KAClB,OAAO,CAAC;QACX,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC,CAAC;KACtE,CAAC,CAAC;CACJ"}

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-face-bridge.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sidebar-face-bridge.js.map

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-face-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-face-bridge.js","sourceRoot":"","sources":["../../src/sidebar/sidebar-face-bridge.ts"],"names":[],"mappings":""}

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-git.d.ts

@@ -0,0 +1,59 @@
+export interface GitStatusEntry {
+    /** Porcelain XY pair — client reads `entry.xy[0]` / `entry.xy[1]`. */
+    readonly xy: string;
+    /** First porcelain char (index); kept for internal rewind helpers. */
+    readonly index: string;
+    /** Second porcelain char (worktree). */
+    readonly worktree: string;
+    readonly path: string;
+}
+export declare function gitStatus(cwd: string): {
+    available: boolean;
+    branch: string | null;
+    entries: GitStatusEntry[];
+};
+/** Client expects `{ current, names }` (not `branches`). */
+export declare function gitBranches(cwd: string): {
+    available: boolean;
+    current: string;
+    names: string[];
+};
+export interface GitLogEntry {
+    readonly hash: string;
+    readonly hashFull: string;
+    readonly subject: string;
+    readonly author: string;
+    readonly date: string;
+    readonly refs: string;
+}
+/** Client expects a bare array (not `{ entries }`). */
+export declare function gitLog(cwd: string, limit?: number, skip?: number): GitLogEntry[];
+export declare function gitDiff(cwd: string, filePath: string | undefined, staged: boolean): {
+    diff: string;
+};
+export declare function gitCommitDiff(cwd: string, hash: string): {
+    diff: string;
+};
+export declare function gitStage(cwd: string, filePath?: string): {
+    ok: true;
+};
+export declare function gitUnstage(cwd: string, filePath?: string): {
+    ok: true;
+};
+export declare function gitCommit(cwd: string, message: string): {
+    ok: true;
+    hash?: string;
+};
+export declare function gitCheckout(cwd: string, branch: string): {
+    ok: true;
+};
+export declare function gitDiscard(cwd: string, filePath: string): {
+    ok: true;
+};
+export declare function gitRevert(cwd: string, hash: string): {
+    ok: true;
+};
+export declare function gitCherryPick(cwd: string, hash: string): {
+    ok: true;
+};
+//# sourceMappingURL=sidebar-git.d.ts.map

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-git.d.ts","sourceRoot":"","sources":["../../src/sidebar/sidebar-git.ts"],"names":[],"mappings":"AA2CA,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B,CA2BA;AAED,4DAA4D;AAC5D,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG;IACxC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAUA;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,uDAAuD;AACvD,wBAAgB,MAAM,CACpB,GAAG,EAAE,MAAM,EACX,KAAK,SAAK,EACV,IAAI,SAAI,GACP,WAAW,EAAE,CA0Bf;AAED,wBAAgB,OAAO,CACrB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,EAAE,OAAO,GACd;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAOlB;AAED,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAQlB;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAQrE;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAQvE;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAOnF;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAMrE;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAYtE;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAIjE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAIrE"}

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-git.js

@@ -0,0 +1,197 @@
+/**
+ * Git helpers for dsh-better-sidebar (workspace-scoped, best-effort).
+ * Wire shapes match the community client (`xy`, `names`, log array, `{ diff }`).
+ */
+import { execFileSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import path from "node:path";
+function isGitRepo(cwd) {
+    return existsSync(path.join(cwd, ".git"));
+}
+function runGit(cwd, args, options = {}) {
+    try {
+        return execFileSync("git", args, {
+            cwd,
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "pipe"],
+            maxBuffer: 8 * 1024 * 1024,
+        }).trimEnd();
+    }
+    catch (err) {
+        if (options.allowFail) {
+            const e = err;
+            const out = typeof e.stdout === "string" ? e.stdout.trimEnd() : "";
+            return out.length > 0 ? out : null;
+        }
+        return null;
+    }
+}
+function runGitOrThrow(cwd, args) {
+    return execFileSync("git", args, {
+        cwd,
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "pipe"],
+        maxBuffer: 8 * 1024 * 1024,
+    }).trimEnd();
+}
+export function gitStatus(cwd) {
+    if (!isGitRepo(cwd)) {
+        return { available: false, branch: null, entries: [] };
+    }
+    const branch = runGit(cwd, ["branch", "--show-current"]);
+    const porcelain = runGit(cwd, ["status", "--porcelain", "-uall"]);
+    if (porcelain === null) {
+        return { available: false, branch, entries: [] };
+    }
+    const entries = [];
+    for (const line of porcelain.split(/\r?\n/)) {
+        if (line.length < 3)
+            continue;
+        const xy = line.slice(0, 2);
+        let filePath = line.slice(3);
+        // rename: "R  old -> new"
+        const arrow = filePath.indexOf(" -> ");
+        if (arrow >= 0)
+            filePath = filePath.slice(arrow + 4);
+        filePath = filePath.replace(/^"|"$/g, "").trim();
+        if (!filePath)
+            continue;
+        entries.push({
+            xy,
+            index: xy[0] ?? " ",
+            worktree: xy[1] ?? " ",
+            path: filePath,
+        });
+    }
+    return { available: true, branch, entries };
+}
+/** Client expects `{ current, names }` (not `branches`). */
+export function gitBranches(cwd) {
+    if (!isGitRepo(cwd)) {
+        return { available: false, current: "", names: [] };
+    }
+    const current = runGit(cwd, ["branch", "--show-current"]) ?? "";
+    const listed = runGit(cwd, ["branch", "--format=%(refname:short)"]);
+    const names = listed
+        ? listed.split(/\r?\n/).map((b) => b.trim()).filter(Boolean)
+        : [];
+    return { available: true, current, names };
+}
+/** Client expects a bare array (not `{ entries }`). */
+export function gitLog(cwd, limit = 20, skip = 0) {
+    if (!isGitRepo(cwd))
+        return [];
+    const max = Math.min(Math.max(limit, 1), 100);
+    const offset = Math.max(0, Math.floor(skip));
+    const out = runGit(cwd, [
+        "log",
+        `-n`,
+        String(max),
+        `--skip=${String(offset)}`,
+        "--pretty=format:%h%x00%H%x00%s%x00%an%x00%ar%x00%D",
+    ]);
+    if (!out)
+        return [];
+    return out.split(/\r?\n/).flatMap((line) => {
+        const [hash, hashFull, subject, author, date, refs] = line.split("\0");
+        if (!hash || !hashFull)
+            return [];
+        return [
+            {
+                hash,
+                hashFull,
+                subject: subject ?? "",
+                author: author ?? "",
+                date: date ?? "",
+                refs: refs ?? "",
+            },
+        ];
+    });
+}
+export function gitDiff(cwd, filePath, staged) {
+    if (!isGitRepo(cwd))
+        return { diff: "" };
+    const args = ["diff", "--no-color"];
+    if (staged)
+        args.push("--cached");
+    if (filePath?.trim())
+        args.push("--", filePath.trim());
+    const out = runGit(cwd, args, { allowFail: true });
+    return { diff: out ?? "" };
+}
+export function gitCommitDiff(cwd, hash) {
+    if (!isGitRepo(cwd) || !hash.trim())
+        return { diff: "" };
+    const out = runGit(cwd, ["show", "--no-color", "--format=", hash.trim()], { allowFail: true });
+    return { diff: out ?? "" };
+}
+export function gitStage(cwd, filePath) {
+    if (!isGitRepo(cwd))
+        throw new Error("not a git repository");
+    if (filePath?.trim()) {
+        runGitOrThrow(cwd, ["add", "--", filePath.trim()]);
+    }
+    else {
+        runGitOrThrow(cwd, ["add", "-A"]);
+    }
+    return { ok: true };
+}
+export function gitUnstage(cwd, filePath) {
+    if (!isGitRepo(cwd))
+        throw new Error("not a git repository");
+    if (filePath?.trim()) {
+        runGitOrThrow(cwd, ["restore", "--staged", "--", filePath.trim()]);
+    }
+    else {
+        runGitOrThrow(cwd, ["restore", "--staged", "."]);
+    }
+    return { ok: true };
+}
+export function gitCommit(cwd, message) {
+    if (!isGitRepo(cwd))
+        throw new Error("not a git repository");
+    const msg = message.trim();
+    if (!msg)
+        throw new Error("empty commit message");
+    runGitOrThrow(cwd, ["commit", "-m", msg]);
+    const hash = runGit(cwd, ["rev-parse", "--short", "HEAD"]) ?? undefined;
+    return { ok: true, ...(hash ? { hash } : {}) };
+}
+export function gitCheckout(cwd, branch) {
+    if (!isGitRepo(cwd))
+        throw new Error("not a git repository");
+    const name = branch.trim();
+    if (!name)
+        throw new Error("empty branch");
+    runGitOrThrow(cwd, ["checkout", name]);
+    return { ok: true };
+}
+export function gitDiscard(cwd, filePath) {
+    if (!isGitRepo(cwd))
+        throw new Error("not a git repository");
+    const p = filePath.trim();
+    if (!p)
+        throw new Error("empty path");
+    // Untracked: remove; tracked: restore worktree.
+    const staged = runGit(cwd, ["ls-files", "--", p]);
+    if (!staged) {
+        runGitOrThrow(cwd, ["clean", "-f", "--", p]);
+    }
+    else {
+        runGitOrThrow(cwd, ["restore", "--", p]);
+    }
+    return { ok: true };
+}
+export function gitRevert(cwd, hash) {
+    if (!isGitRepo(cwd))
+        throw new Error("not a git repository");
+    runGitOrThrow(cwd, ["revert", "--no-edit", hash.trim()]);
+    return { ok: true };
+}
+export function gitCherryPick(cwd, hash) {
+    if (!isGitRepo(cwd))
+        throw new Error("not a git repository");
+    runGitOrThrow(cwd, ["cherry-pick", hash.trim()]);
+    return { ok: true };
+}
+//# sourceMappingURL=sidebar-git.js.map

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-git.js","sourceRoot":"","sources":["../../src/sidebar/sidebar-git.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,MAAM,CACb,GAAW,EACX,IAAc,EACd,UAAmC,EAAE;IAErC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/B,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;SAC3B,CAAC,CAAC,OAAO,EAAE,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA2C,CAAC;YACtD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,IAAc;IAChD,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;QAC/B,GAAG;QACH,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;KAC3B,CAAC,CAAC,OAAO,EAAE,CAAC;AACf,CAAC;AAYD,MAAM,UAAU,SAAS,CAAC,GAAW;IAKnC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,0BAA0B;QAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,KAAK,IAAI,CAAC;YAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACrD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,OAAO,CAAC,IAAI,CAAC;YACX,EAAE;YACF,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG;YACnB,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG;YACtB,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,GAAW;IAKrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM;QAClB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC5D,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC7C,CAAC;AAWD,uDAAuD;AACvD,MAAM,UAAU,MAAM,CACpB,GAAW,EACX,KAAK,GAAG,EAAE,EACV,IAAI,GAAG,CAAC;IAER,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE;QACtB,KAAK;QACL,IAAI;QACJ,MAAM,CAAC,GAAG,CAAC;QACX,UAAU,MAAM,CAAC,MAAM,CAAC,EAAE;QAC1B,oDAAoD;KACrD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACzC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO;YACL;gBACE,IAAI;gBACJ,QAAQ;gBACR,OAAO,EAAE,OAAO,IAAI,EAAE;gBACtB,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,IAAI,EAAE,IAAI,IAAI,EAAE;gBAChB,IAAI,EAAE,IAAI,IAAI,EAAE;aACjB;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,GAAW,EACX,QAA4B,EAC5B,MAAe;IAEf,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACpC,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,QAAQ,EAAE,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,IAAY;IAEZ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,CAChB,GAAG,EACH,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAChD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,QAAiB;IACrD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7D,IAAI,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QACrB,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,QAAiB;IACvD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7D,IAAI,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QACrB,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,OAAe;IACpD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAClD,aAAa,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,SAAS,CAAC;IACxE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,MAAc;IACrD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3C,aAAa,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IACvC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,QAAgB;IACtD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IACtC,gDAAgD;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,aAAa,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,IAAY;IACjD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7D,aAAa,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,IAAY;IACrD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7D,aAAa,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-html.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Host sidebar HTML preview: GET /sidebar/html/<sessionId>/<abs-path-segments…>
+ * Serves workspace files with real MIME so the iframe does not fall through to the SPA.
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+/** Decode `/sidebar/html/<session>/<segments…>` into an absolute filesystem path. */
+export declare function decodeSidebarHtmlPath(pathname: string): {
+    sessionId: string;
+    absPath: string;
+} | undefined;
+export interface SidebarHtmlOptions {
+    readonly resolveSessionCwd?: (sessionId: string) => string | undefined;
+    readonly defaultCwd?: string;
+}
+/**
+ * Serve one file for the HTML preview iframe (and its relative assets).
+ * @returns true when the request was handled.
+ */
+export declare function handleSidebarHtml(_req: IncomingMessage, res: ServerResponse, pathname: string, options: SidebarHtmlOptions): Promise<boolean>;
+//# sourceMappingURL=sidebar-html.d.ts.map

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-html.d.ts","sourceRoot":"","sources":["../../src/sidebar/sidebar-html.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA+BjE,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,SAAS,CA2CZ;AAeD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,eAAe,EACrB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAsClB"}

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-html.js

@@ -0,0 +1,135 @@
+/**
+ * Host sidebar HTML preview: GET /sidebar/html/<sessionId>/<abs-path-segments…>
+ * Serves workspace files with real MIME so the iframe does not fall through to the SPA.
+ */
+import { createReadStream, existsSync, statSync } from "node:fs";
+import path from "node:path";
+import { sendJson } from "../http-json.js";
+const HTML_PREFIX = "/sidebar/html/";
+const MIME_BY_EXT = {
+    ".html": "text/html; charset=utf-8",
+    ".htm": "text/html; charset=utf-8",
+    ".css": "text/css; charset=utf-8",
+    ".js": "text/javascript; charset=utf-8",
+    ".mjs": "text/javascript; charset=utf-8",
+    ".json": "application/json; charset=utf-8",
+    ".svg": "image/svg+xml",
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".gif": "image/gif",
+    ".webp": "image/webp",
+    ".ico": "image/x-icon",
+    ".woff": "font/woff",
+    ".woff2": "font/woff2",
+    ".ttf": "font/ttf",
+    ".map": "application/json",
+    ".txt": "text/plain; charset=utf-8",
+    ".wasm": "application/wasm",
+};
+function fail(code, message) {
+    return { ok: false, error: { code, message } };
+}
+/** Decode `/sidebar/html/<session>/<segments…>` into an absolute filesystem path. */
+export function decodeSidebarHtmlPath(pathname) {
+    if (!pathname.startsWith(HTML_PREFIX))
+        return undefined;
+    const rest = pathname.slice(HTML_PREFIX.length);
+    if (!rest)
+        return undefined;
+    const parts = rest.split("/").filter((p) => p.length > 0);
+    if (parts.length < 2)
+        return undefined;
+    // UNC: /sidebar/html/<session>//server/share/... → empty segment after session
+    const rawSplit = rest.split("/");
+    const sessionAt = rawSplit.findIndex((p) => p.length > 0);
+    if (sessionAt < 0)
+        return undefined;
+    const sessionEnc = rawSplit[sessionAt];
+    const afterSession = rawSplit.slice(sessionAt + 1);
+    const unc = afterSession[0] === "" && afterSession.length > 1;
+    const pathParts = (unc ? afterSession.slice(1) : afterSession).filter((p) => p.length > 0);
+    if (pathParts.length === 0)
+        return undefined;
+    let sessionId;
+    try {
+        sessionId = decodeURIComponent(sessionEnc);
+    }
+    catch {
+        return undefined;
+    }
+    const decoded = pathParts.map((p) => {
+        try {
+            return decodeURIComponent(p);
+        }
+        catch {
+            return p;
+        }
+    });
+    // Windows drive: first segment "C:" + rest → C:\...
+    if (/^[A-Za-z]:$/.test(decoded[0])) {
+        const absPath = path.win32.join(`${decoded[0]}\\`, ...decoded.slice(1));
+        return { sessionId, absPath };
+    }
+    if (unc) {
+        return {
+            sessionId,
+            absPath: path.win32.join("\\\\" + decoded[0], ...decoded.slice(1)),
+        };
+    }
+    // POSIX absolute
+    return { sessionId, absPath: path.posix.join("/", ...decoded) };
+}
+function mimeFor(filePath) {
+    const ext = path.extname(filePath).toLowerCase();
+    return MIME_BY_EXT[ext] ?? "application/octet-stream";
+}
+function underRoot(root, target) {
+    const rootResolved = path.resolve(root);
+    const abs = path.resolve(target);
+    return (abs === rootResolved || abs.startsWith(rootResolved + path.sep));
+}
+/**
+ * Serve one file for the HTML preview iframe (and its relative assets).
+ * @returns true when the request was handled.
+ */
+export async function handleSidebarHtml(_req, res, pathname, options) {
+    if (!pathname.startsWith(HTML_PREFIX))
+        return false;
+    if ((_req.method ?? "GET").toUpperCase() !== "GET") {
+        sendJson(res, 405, fail("method", "GET required"));
+        return true;
+    }
+    const decoded = decodeSidebarHtmlPath(pathname);
+    if (!decoded) {
+        sendJson(res, 400, fail("bad-request", "invalid html preview path"));
+        return true;
+    }
+    const cwd = (decoded.sessionId && options.resolveSessionCwd
+        ? options.resolveSessionCwd(decoded.sessionId)
+        : undefined) ?? options.defaultCwd ?? process.cwd();
+    const abs = path.resolve(decoded.absPath);
+    if (!underRoot(cwd, abs) && !underRoot(path.resolve(cwd), abs)) {
+        // Allow absolute paths that resolve inside cwd only (same fence as relative).
+        sendJson(res, 403, fail("path", "html preview path escapes workspace"));
+        return true;
+    }
+    if (!existsSync(abs)) {
+        sendJson(res, 404, fail("not-found", "file missing"));
+        return true;
+    }
+    const st = statSync(abs);
+    if (!st.isFile()) {
+        sendJson(res, 400, fail("not-file", "not a file"));
+        return true;
+    }
+    res.writeHead(200, {
+        "content-type": mimeFor(abs),
+        "content-length": st.size,
+        // Preview iframes must not be framed as the product SPA; no CSP that blocks scripts in games.
+        "x-content-type-options": "nosniff",
+    });
+    createReadStream(abs).pipe(res);
+    return true;
+}
+//# sourceMappingURL=sidebar-html.js.map

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-html.js","sourceRoot":"","sources":["../../src/sidebar/sidebar-html.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAErC,MAAM,WAAW,GAA2B;IAC1C,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,0BAA0B;IAClC,MAAM,EAAE,yBAAyB;IACjC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,2BAA2B;IACnC,OAAO,EAAE,kBAAkB;CAC5B,CAAC;AAEF,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe;IACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AACjD,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IAIpD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1D,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAE,CAAC;IACxC,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CACnE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CACpB,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC,CAAC;IACH,oDAAoD;IACpD,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,GAAG,EAAE,CAAC;QACR,OAAO;YACL,SAAS;YACT,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACpE,CAAC;IACJ,CAAC;IACD,iBAAiB;IACjB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,MAAc;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,CACL,GAAG,KAAK,YAAY,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAChE,CAAC;AACJ,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAqB,EACrB,GAAmB,EACnB,QAAgB,EAChB,OAA2B;IAE3B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QACnD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GACP,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,iBAAiB;QAC7C,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/D,8EAA8E;QAC9E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QACjB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC;QAC5B,gBAAgB,EAAE,EAAE,CAAC,IAAI;QACzB,8FAA8F;QAC9F,wBAAwB,EAAE,SAAS;KACpC,CAAC,CAAC;IACH,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-prefs-store.d.ts

@@ -0,0 +1,9 @@
+export declare const SIDEBAR_PREFS_DEFAULT: Record<string, unknown>;
+export interface PrefsFile {
+    revision: number;
+    value: Record<string, unknown>;
+}
+export declare function loadSidebarPrefs(xrkHome?: string): PrefsFile;
+export declare function saveSidebarPrefs(xrkHome: string | undefined, value: Record<string, unknown>, _revision?: number): number;
+export declare function patchSidebarPrefs(xrkHome: string | undefined, patch: Record<string, unknown>): PrefsFile;
+//# sourceMappingURL=sidebar-prefs-store.d.ts.map

package/node_modules/@xrkseek/server-http/dist/sidebar/sidebar-prefs-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-prefs-store.d.ts","sourceRoot":"","sources":["../../src/sidebar/sidebar-prefs-store.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CA2BzD,CAAC;AAOF,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAM5D;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAGR;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,SAAS,CAUX"}