aisnitch 0.2.23 → 0.2.25

package/dist/cli/index.cjs

@@ -771,7 +771,7 @@ var import_commander = require("commander");
 
 // src/package-info.ts
 var AISNITCH_PACKAGE_NAME = "aisnitch";
-var AISNITCH_VERSION = "0.2.23";
+var AISNITCH_VERSION = "0.2.25";
 var AISNITCH_DESCRIPTION = "Universal bridge for AI coding tool activity \u2014 capture, normalize, stream.";
 
 // src/core/events/schema.ts
@@ -1955,6 +1955,9 @@ var OpenClawSetup = class {
   hookHandlerPath;
   hookUrl;
   openclawHomeDirectory;
+  pluginDirectory;
+  pluginFilePath;
+  pluginDocumentPath;
   toolName = "openclaw";
   constructor(httpPort, dependencies = {}) {
     this.binaryExists = dependencies.binaryExists ?? isBinaryAvailable;
@@ -1968,6 +1971,13 @@ var OpenClawSetup = class {
     this.hookDocumentPath = (0, import_node_path2.join)(this.hookDirectory, "HOOK.md");
     this.hookHandlerPath = (0, import_node_path2.join)(this.hookDirectory, "handler.ts");
     this.hookUrl = `http://localhost:${httpPort}/hooks/openclaw`;
+    this.pluginDirectory = (0, import_node_path2.join)(
+      this.openclawHomeDirectory,
+      "plugins",
+      "aisnitch-monitor"
+    );
+    this.pluginFilePath = (0, import_node_path2.join)(this.pluginDirectory, "index.ts");
+    this.pluginDocumentPath = (0, import_node_path2.join)(this.pluginDirectory, "README.md");
   }
   async detect() {
     return await this.binaryExists("openclaw") || await fileExists(this.openclawHomeDirectory) || await fileExists("/Applications/OpenClaw.app");
@@ -1979,9 +1989,13 @@ var OpenClawSetup = class {
     const currentConfigContent = await readOptionalFile(this.configPath);
     const currentHookDocument = await readOptionalFile(this.hookDocumentPath);
     const currentHookHandler = await readOptionalFile(this.hookHandlerPath);
+    const currentPluginDocument = await readOptionalFile(this.pluginDocumentPath);
+    const currentPluginFile = await readOptionalFile(this.pluginFilePath);
     const nextConfigContent = this.buildNextConfigContent(currentConfigContent);
     const nextHookDocument = buildOpenClawHookDocumentSource();
     const nextHookHandler = buildOpenClawHookHandlerSource(this.hookUrl);
+    const nextPluginDocument = buildOpenClawPluginDocumentSource();
+    const nextPluginFile = buildOpenClawPluginSource(this.hookUrl);
     return [
       renderColoredDiff(
         this.configPath,
@@ -1999,6 +2013,18 @@ var OpenClawSetup = class {
         this.hookHandlerPath,
         currentHookHandler,
         nextHookHandler
+      ),
+      "",
+      renderColoredDiff(
+        this.pluginDocumentPath,
+        currentPluginDocument,
+        nextPluginDocument
+      ),
+      "",
+      renderColoredDiff(
+        this.pluginFilePath,
+        currentPluginFile,
+        nextPluginFile
       )
     ].join("\n");
   }
@@ -2006,11 +2032,16 @@ var OpenClawSetup = class {
     const currentConfigContent = await readOptionalFile(this.configPath);
     const currentHookDocument = await readOptionalFile(this.hookDocumentPath);
     const currentHookHandler = await readOptionalFile(this.hookHandlerPath);
+    const currentPluginDocument = await readOptionalFile(this.pluginDocumentPath);
+    const currentPluginFile = await readOptionalFile(this.pluginFilePath);
     const nextConfigContent = this.buildNextConfigContent(currentConfigContent);
     const nextHookDocument = buildOpenClawHookDocumentSource();
     const nextHookHandler = buildOpenClawHookHandlerSource(this.hookUrl);
+    const nextPluginDocument = buildOpenClawPluginDocumentSource();
+    const nextPluginFile = buildOpenClawPluginSource(this.hookUrl);
     await (0, import_promises2.mkdir)((0, import_node_path2.dirname)(this.configPath), { recursive: true });
     await (0, import_promises2.mkdir)(this.hookDirectory, { recursive: true });
+    await (0, import_promises2.mkdir)(this.pluginDirectory, { recursive: true });
     if (currentConfigContent !== null) {
       await (0, import_promises2.copyFile)(this.configPath, this.getBackupPath(this.configPath));
     }
@@ -2026,14 +2057,30 @@ var OpenClawSetup = class {
         this.getBackupPath(this.hookHandlerPath)
       );
     }
+    if (currentPluginDocument !== null) {
+      await (0, import_promises2.copyFile)(
+        this.pluginDocumentPath,
+        this.getBackupPath(this.pluginDocumentPath)
+      );
+    }
+    if (currentPluginFile !== null) {
+      await (0, import_promises2.copyFile)(
+        this.pluginFilePath,
+        this.getBackupPath(this.pluginFilePath)
+      );
+    }
     await (0, import_promises2.writeFile)(this.configPath, nextConfigContent, "utf8");
     await (0, import_promises2.writeFile)(this.hookDocumentPath, nextHookDocument, "utf8");
     await (0, import_promises2.writeFile)(this.hookHandlerPath, nextHookHandler, "utf8");
+    await (0, import_promises2.writeFile)(this.pluginDocumentPath, nextPluginDocument, "utf8");
+    await (0, import_promises2.writeFile)(this.pluginFilePath, nextPluginFile, "utf8");
   }
   async revert() {
     await restoreBackupOrRemove(this.configPath);
     await restoreBackupOrRemove(this.hookDocumentPath);
     await restoreBackupOrRemove(this.hookHandlerPath);
+    await restoreBackupOrRemove(this.pluginDocumentPath);
+    await restoreBackupOrRemove(this.pluginFilePath);
   }
   buildNextConfigContent(currentContent) {
     const parsedConfig = parseOpenClawSettings(currentContent);
@@ -2055,6 +2102,15 @@ var OpenClawSetup = class {
         enabled: true
       }
     };
+    const currentPlugins = parsedConfig.plugins ?? {};
+    const currentPluginEntries = currentPlugins.entries ?? {};
+    const nextPluginEntries = {
+      ...currentPluginEntries,
+      "aisnitch-monitor": {
+        ...currentPluginEntries["aisnitch-monitor"] ?? {},
+        enabled: true
+      }
+    };
     const nextConfig = {
       ...parsedConfig,
       hooks: {
@@ -2064,6 +2120,10 @@ var OpenClawSetup = class {
           enabled: true,
           entries: nextEntries
         }
+      },
+      plugins: {
+        ...currentPlugins,
+        entries: nextPluginEntries
       }
     };
     return `${JSON.stringify(nextConfig, null, 2)}
@@ -2898,6 +2958,231 @@ export default async function aisnitchForward(event) {
 }
 `;
 }
+function buildOpenClawPluginDocumentSource() {
+  return `# AISnitch Monitor Plugin
+
+\u{1F4D6} This managed plugin uses OpenClaw's Plugin SDK to forward rich real-time
+events to the local AISnitch HTTP receiver. Unlike the internal hook handler,
+the plugin has access to tool-level hooks (before_tool_call, after_tool_call),
+model-level hooks (model_call_started, model_call_ended), and agent turn hooks
+(agent_end, before_agent_run) \u2014 providing maximum observability fidelity.
+
+## Hooked Events
+
+| Hook | AISnitch Event |
+|:---|:---|
+| gateway_start | session.start |
+| gateway_stop | session.end |
+| before_agent_run | task.start |
+| agent_end | task.complete |
+| before_tool_call | agent.coding / agent.tool_call |
+| after_tool_call | agent.coding / agent.tool_call + results |
+| model_call_started | agent.thinking |
+| model_call_ended | agent.streaming |
+| before_compaction | agent.compact |
+| after_compaction | agent.compact |
+| message_received | context info |
+
+## Managed by AISnitch
+
+This file is managed by \`aisnitch setup openclaw\`. Re-running setup will
+overwrite it. Use \`aisnitch setup openclaw --revert\` to remove it.
+`;
+}
+function buildOpenClawPluginSource(hookUrl) {
+  return `/**
+ * AISnitch OpenClaw Plugin
+ *
+ * \u{1F4D6} Uses OpenClaw's Plugin SDK to forward rich real-time events to AISnitch.
+ * Provides maximum visibility into tool calls, model usage, agent turns,
+ * and lifecycle events \u2014 far beyond what passive file-watching can achieve.
+ *
+ * Managed by \`aisnitch setup openclaw\`. Re-running setup overwrites this file.
+ */
+
+import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
+
+const AISNITCH_ENDPOINT = ${JSON.stringify(hookUrl)};
+
+async function postToAISnitch(payload: Record<string, unknown>): Promise<void> {
+  try {
+    await fetch(AISNITCH_ENDPOINT, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(payload),
+    });
+  } catch {
+    // Silently ignore transport errors so OpenClaw keeps running.
+  }
+}
+
+function getSessionKey(ctx: Record<string, unknown> | undefined): string | undefined {
+  if (!ctx) return undefined;
+  return (
+    (typeof ctx.sessionKey === "string" && ctx.sessionKey.length > 0 ? ctx.sessionKey : undefined) ??
+    (typeof ctx.sessionId === "string" && ctx.sessionId.length > 0 ? ctx.sessionId : undefined)
+  );
+}
+
+function getWorkspaceDir(ctx: Record<string, unknown> | undefined): string | undefined {
+  if (!ctx) return undefined;
+  return (
+    (typeof ctx.workspaceDir === "string" && ctx.workspaceDir.length > 0 ? ctx.workspaceDir : undefined) ??
+    (typeof ctx.cwd === "string" && ctx.cwd.length > 0 ? ctx.cwd : undefined)
+  );
+}
+
+export default definePluginEntry({
+  id: "aisnitch-monitor",
+  name: "AISnitch Monitor",
+  register(api) {
+    // \u2500\u2500 Gateway lifecycle \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+    api.on("gateway_start", (event) => {
+      const ctx = event.ctx as Record<string, unknown> | undefined;
+      void postToAISnitch({
+        event: "gateway:startup",
+        sessionKey: getSessionKey(ctx),
+        context: ctx ?? {},
+        timestamp: new Date().toISOString(),
+      });
+    });
+
+    api.on("gateway_stop", () => {
+      void postToAISnitch({
+        event: "gateway:shutdown",
+        timestamp: new Date().toISOString(),
+      });
+    });
+
+    // \u2500\u2500 Agent turn lifecycle \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+    api.on("before_agent_run", (event) => {
+      const ctx = event.ctx as Record<string, unknown> | undefined;
+      void postToAISnitch({
+        event: "command:new",
+        sessionKey: getSessionKey(ctx),
+        context: {
+          ...ctx,
+          message: event.prompt ?? event.message ?? (ctx as any)?.bodyForAgent,
+        },
+        timestamp: new Date().toISOString(),
+      });
+    });
+
+    api.on("agent_end", (event) => {
+      const ctx = event.ctx as Record<string, unknown> | undefined;
+      void postToAISnitch({
+        event: "command:stop",
+        sessionKey: getSessionKey(ctx),
+        context: ctx ?? {},
+        success: event.success,
+        durationMs: event.durationMs,
+        timestamp: new Date().toISOString(),
+      });
+    });
+
+    // \u2500\u2500 Model calls \u2192 thinking / streaming \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+    api.on("model_call_started", (event) => {
+      const ctx = event.ctx as Record<string, unknown> | undefined;
+      void postToAISnitch({
+        event: "model_call_started",
+        sessionKey: getSessionKey(ctx),
+        cwd: getWorkspaceDir(ctx),
+        context: ctx ?? {},
+        model: event.model,
+        provider: event.provider,
+        timestamp: new Date().toISOString(),
+      });
+    });
+
+    api.on("model_call_ended", (event) => {
+      const ctx = event.ctx as Record<string, unknown> | undefined;
+      void postToAISnitch({
+        event: "model_call_ended",
+        sessionKey: getSessionKey(ctx),
+        cwd: getWorkspaceDir(ctx),
+        context: ctx ?? {},
+        model: event.model,
+        durationMs: event.durationMs,
+        outcome: event.outcome,
+        timestamp: new Date().toISOString(),
+      });
+    });
+
+    // \u2500\u2500 Tool calls \u2014 richest signal for AISnitch \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+    api.on("before_tool_call", (event) => {
+      const ctx = event.ctx as Record<string, unknown> | undefined;
+      void postToAISnitch({
+        event: "before_tool_call",
+        sessionKey: getSessionKey(ctx),
+        cwd: getWorkspaceDir(ctx),
+        context: ctx ?? {},
+        toolName: event.toolName,
+        toolInput: event.params,
+        timestamp: new Date().toISOString(),
+      });
+    });
+
+    api.on("after_tool_call", (event) => {
+      const ctx = event.ctx as Record<string, unknown> | undefined;
+      void postToAISnitch({
+        event: "tool_result_persist",
+        sessionKey: getSessionKey(ctx),
+        cwd: getWorkspaceDir(ctx),
+        context: ctx ?? {},
+        toolName: event.toolName,
+        toolInput: event.params,
+        error: event.error,
+        duration: event.duration,
+        result: event.result,
+        timestamp: new Date().toISOString(),
+      });
+    });
+
+    // \u2500\u2500 Compaction \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+    api.on("before_compaction", (event) => {
+      const ctx = event.ctx as Record<string, unknown> | undefined;
+      void postToAISnitch({
+        event: "before_compaction",
+        sessionKey: getSessionKey(ctx),
+        cwd: getWorkspaceDir(ctx),
+        context: ctx ?? {},
+        timestamp: new Date().toISOString(),
+      });
+    });
+
+    api.on("after_compaction", (event) => {
+      const ctx = event.ctx as Record<string, unknown> | undefined;
+      void postToAISnitch({
+        event: "session:compact:after",
+        sessionKey: getSessionKey(ctx),
+        cwd: getWorkspaceDir(ctx),
+        context: ctx ?? {},
+        timestamp: new Date().toISOString(),
+      });
+    });
+
+    // \u2500\u2500 Messages \u2014 user input context \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+    api.on("message_received", (event) => {
+      const ctx = event.ctx as Record<string, unknown> | undefined;
+      void postToAISnitch({
+        event: "message:received",
+        sessionKey: getSessionKey(ctx),
+        cwd: getWorkspaceDir(ctx),
+        context: ctx ?? {},
+        message: event.message,
+        timestamp: new Date().toISOString(),
+      });
+    });
+  },
+});
+`;
+}
 function parseOpenClawSettings(currentContent) {
   if (currentContent === null || currentContent.trim().length === 0) {
     return {};
@@ -10751,6 +11036,7 @@ var OpenClawAdapter = class extends BaseAdapter {
   displayName = "OpenClaw";
   name = "openclaw";
   strategies = [
+    "plugin",
     "hooks",
     "log-watch",
     "jsonl-watch",
@@ -10970,11 +11256,32 @@ var OpenClawAdapter = class extends BaseAdapter {
         await this.emitOpenClawSessionEnd(sharedData, context);
         return;
       }
-      case "session:compact:before":
-      case "before_compaction": {
+      case "model_call_started": {
         await this.ensureSessionStarted(sharedData, context);
         this.clearThinking(sessionId);
-        await this.emitStateChange("agent.compact", sharedData, context);
+        await this.emitStateChange("agent.thinking", sharedData, context);
+        return;
+      }
+      case "model_call_ended": {
+        await this.ensureSessionStarted(sharedData, context);
+        await this.emitStateChange("agent.streaming", {
+          ...sharedData,
+          raw: {
+            ...sharedData.raw ?? {},
+            durationMs: getNumber7(payload, "durationMs"),
+            outcome: getString9(payload, "outcome"),
+            source: "plugin"
+          }
+        }, context);
+        return;
+      }
+      case "before_tool_call": {
+        await this.ensureSessionStarted(sharedData, context);
+        await this.emitStateChange(
+          isOpenClawCodingTool(sharedData.toolName, sharedData.toolInput) ? "agent.coding" : "agent.tool_call",
+          sharedData,
+          context
+        );
         return;
       }
       case "tool_result_persist": {
@@ -10987,6 +11294,13 @@ var OpenClawAdapter = class extends BaseAdapter {
         this.scheduleThinking(sessionId, sharedData, context, POST_TOOL_THINKING_DELAY_MS);
         return;
       }
+      case "session:compact:before":
+      case "before_compaction": {
+        await this.ensureSessionStarted(sharedData, context);
+        this.clearThinking(sessionId);
+        await this.emitStateChange("agent.compact", sharedData, context);
+        return;
+      }
       case "message:received":
       case "message:preprocessed":
       case "session:compact:after":
@@ -11446,6 +11760,7 @@ function buildOpenClawEventData(payload) {
   return {
     activeFile: extractOpenClawActiveFile(payload) ?? toolInput?.filePath,
     cwd,
+    duration: getNumber7(payload, "duration") ?? getNumber7(payload, "durationMs"),
     errorMessage: extractOpenClawErrorMessage(payload),
     errorType: inferOpenClawErrorType(payload),
     model: extractOpenClawModel(payload),
@@ -11510,7 +11825,7 @@ function extractOpenClawToolInput(payload) {
   };
 }
 function extractOpenClawErrorMessage(payload) {
-  return getString9(payload, "error") ?? getString9(payload, "message") ?? getString9(getRecord8(payload.error), "message") ?? getString9(getRecord8(payload.result), "error");
+  return getString9(payload, "error") ?? getString9(payload, "errorMessage") ?? getString9(payload, "message") ?? getString9(getRecord8(payload.error), "message") ?? getString9(getRecord8(payload.result), "error") ?? getString9(getRecord8(payload.result), "message");
 }
 function inferOpenClawErrorType(payload) {
   const errorMessage = extractOpenClawErrorMessage(payload);
@@ -15631,6 +15946,54 @@ var DAEMON_READY_POLL_INTERVAL_MS = 100;
 var DAEMON_STOP_TIMEOUT_MS = 4e3;
 var DAEMON_LOG_MAX_BYTES = 5 * 1024 * 1024;
 var LAUNCH_AGENT_LABEL = "com.aisnitch.daemon";
+async function resolveNodeExecutable() {
+  try {
+    await (0, import_promises22.access)(process.execPath, import_node_fs7.constants.X_OK);
+    return process.execPath;
+  } catch {
+    return "node";
+  }
+}
+function formatSpawnError(error) {
+  if (error instanceof Error) {
+    return error.message;
+  }
+  return String(error);
+}
+async function pathExists(path2) {
+  try {
+    await (0, import_promises22.access)(path2, import_node_fs7.constants.R_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function resolveDashboardDistPath() {
+  if (process.env.AISNITCH_DASHBOARD_DIST) {
+    const overridePath = process.env.AISNITCH_DASHBOARD_DIST;
+    if (await pathExists((0, import_node_path22.join)(overridePath, "index.html"))) {
+      return overridePath;
+    }
+    throw new Error(
+      `Fullscreen dashboard assets are missing at ${overridePath}. Reinstall AISnitch or run \`pnpm --filter aisnitch-fullscreen-dashboard build\` from the repository checkout.`
+    );
+  }
+  const cliEntryPath = process.argv[1] ? await (0, import_promises22.realpath)(process.argv[1]).catch(() => process.argv[1] ?? "") : "";
+  const moduleDirectory = (0, import_node_path22.dirname)(cliEntryPath);
+  const packageRoot = (0, import_node_path22.dirname)((0, import_node_path22.dirname)(moduleDirectory));
+  const candidates = [
+    (0, import_node_path22.join)(packageRoot, "examples", "fullscreen-dashboard", "dist"),
+    (0, import_node_path22.join)(process.cwd(), "examples", "fullscreen-dashboard", "dist")
+  ];
+  for (const candidate of candidates) {
+    if (await pathExists((0, import_node_path22.join)(candidate, "index.html"))) {
+      return candidate;
+    }
+  }
+  throw new Error(
+    "Fullscreen dashboard assets are missing. Reinstall AISnitch or run `pnpm --filter aisnitch-fullscreen-dashboard build` from the repository checkout."
+  );
+}
 function createCliRuntime(dependencies = {}) {
   const output = dependencies.output ?? createProcessOutput();
   const fetchImplementation = dependencies.fetch ?? globalThis.fetch;
@@ -16130,11 +16493,11 @@ function createCliRuntime(dependencies = {}) {
   }
   async function fullscreen(options) {
     const snapshot = await getStatusSnapshot(options);
-    if (!snapshot.running && options.daemonMode) {
+    if (!snapshot.running && options.daemon) {
       output.stdout("Starting daemon...\n");
       await startDetachedDaemon(options);
     }
-    if (!snapshot.running && !options.daemonMode) {
+    if (!snapshot.running && !options.daemon) {
       throw new Error(
         "AISnitch daemon is not running. Start one with `aisnitch start --daemon` or use `aisnitch fs --daemon` to start and open the dashboard."
       );
@@ -16146,33 +16509,77 @@ function createCliRuntime(dependencies = {}) {
     }
     const dashboardPort = options.dashboardPort ?? 5174;
     const dashboardUrl = `http://127.0.0.1:${dashboardPort}`;
-    const distPath = (0, import_node_path22.join)(process.cwd(), "examples", "fullscreen-dashboard", "dist");
+    const distPath = await resolveDashboardDistPath();
     output.stdout(`Starting dashboard server on port ${dashboardPort}...
 `);
-    const viteProcess = spawnImplementation(process.execPath, [
+    const nodeExecutable = await resolveNodeExecutable();
+    const viteProcess = spawnImplementation(nodeExecutable, [
       "-e",
       `
-import { createServer } from 'vite';
-import path from 'path';
+import { createReadStream } from 'node:fs';
+import { stat } from 'node:fs/promises';
+import { createServer } from 'node:http';
+import { extname, join, normalize, resolve } from 'node:path';
 
-const distPath = '${distPath}';
+const distPath = ${JSON.stringify(distPath)};
 const port = ${dashboardPort};
+const root = resolve(distPath);
+const contentTypes = new Map([
+  ['.css', 'text/css; charset=utf-8'],
+  ['.html', 'text/html; charset=utf-8'],
+  ['.js', 'text/javascript; charset=utf-8'],
+  ['.json', 'application/json; charset=utf-8'],
+  ['.map', 'application/json; charset=utf-8'],
+  ['.svg', 'image/svg+xml'],
+]);
 
-const server = await createServer({
-  root: distPath,
-  server: {
-    port,
-    strictPort: true,
-    allowedHosts: true,
-  },
-  preview: {
-    port,
-    strictPort: true,
-  },
+function safePath(url) {
+  const parsed = new URL(url ?? '/', 'http://127.0.0.1');
+  const pathname = parsed.pathname === '/' ? '/index.html' : parsed.pathname;
+  const decoded = decodeURIComponent(pathname);
+  const normalized = normalize(decoded).replace(/^[/\\]+/, '');
+  const absolute = resolve(join(root, normalized));
+
+  if (absolute !== root && !absolute.startsWith(root + '/')) {
+    return null;
+  }
+
+  return absolute;
+}
+
+await stat(join(root, 'index.html'));
+
+const server = createServer(async (request, response) => {
+  const requestedPath = safePath(request.url);
+
+  if (requestedPath === null) {
+    response.writeHead(403, { 'content-type': 'text/plain; charset=utf-8' });
+    response.end('Forbidden');
+    return;
+  }
+
+  try {
+    const fileStat = await stat(requestedPath);
+    const filePath = fileStat.isFile() ? requestedPath : join(root, 'index.html');
+    const contentType = contentTypes.get(extname(filePath)) ?? 'application/octet-stream';
+
+    response.writeHead(200, { 'content-type': contentType });
+    createReadStream(filePath).pipe(response);
+  } catch {
+    response.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
+    createReadStream(join(root, 'index.html')).pipe(response);
+  }
 });
 
-await server.listen();
-console.log('READY');
+server.on('error', (error) => {
+  console.error(error instanceof Error ? error.message : String(error));
+  process.exitCode = 1;
+});
+
+await new Promise((resolveListen, rejectListen) => {
+  server.once('error', rejectListen);
+  server.listen(port, '127.0.0.1', resolveListen);
+});
 
 process.stdin.resume();
 `
@@ -16181,6 +16588,12 @@ process.stdin.resume();
       stdio: ["pipe", "pipe", "pipe"]
     });
     let serverOutput = "";
+    let serverSpawnError;
+    viteProcess.on("error", (error) => {
+      serverSpawnError = error;
+      serverOutput += `Dashboard server process failed: ${formatSpawnError(error)}
+`;
+    });
     viteProcess.stdout?.on("data", (data) => {
       serverOutput += data.toString();
     });
@@ -16198,11 +16611,19 @@ process.stdin.resume();
         }
       } catch {
       }
+      if (serverSpawnError !== void 0) {
+        break;
+      }
       if (!viteProcess.pid) break;
     }
     if (!serverReady) {
       output.stdout(`Server output: ${serverOutput}
 `);
+      if (serverSpawnError !== void 0) {
+        throw new Error(
+          `Failed to start dashboard server process with ${nodeExecutable}: ${formatSpawnError(serverSpawnError)}`
+        );
+      }
       throw new Error("Failed to start dashboard server");
     }
     output.stdout(`Dashboard ready at ${dashboardUrl}