codebase-onboarder 0.6.0 → 0.7.0

package/server/index.js

@@ -11,12 +11,10 @@
 // is 127.0.0.1 and nothing else, self-hosted mode binds what it was given and
 // turns on the access-key gate in the router. A bare `createServer()` — what
 // the tests drive — never touches that file.
-
 import http from 'node:http';
 import path from 'node:path';
 import { spawn } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
-
 import { createRouter } from './router.js';
 import { installExitCleanup } from './sessions.js';
 import { createLogger } from './logger.js';
@@ -26,43 +24,37 @@ import { tunnelStatus } from './tunnel.js';
 import { pidIsAlive, readPidFile, removePidFile, writePidFile, writeRunInfo, runInfoPath } from './pidfile.js';
 import { logPath } from './daemon.js';
 import { panel, row } from './layout.js';
-
 const logger = createLogger();
-
 const HERE = path.dirname(fileURLToPath(import.meta.url));
 const PROJECT_ROOT = path.resolve(HERE, '..');
-
 // The MCP runner is created here, not inside the router, and is put on the config
 // object the router already passes to every handler. Two reasons: exactly one
 // server can be supervised per process (a second button press must be a toggle,
 // not a second child), and a test can supply its own runner in place of this one
 // without the router knowing the difference.
 const mcp = createMcpRunner({
-  onLog: (entry) => logger.info('mcp', entry.line),
+    onLog: (entry) => logger.info('mcp', entry.line),
 });
-
 export const CONFIG = {
-  projectRoot: PROJECT_ROOT,
-  publicDir: path.join(PROJECT_ROOT, 'public'),
-  // Served at `/shared/`, which is what lets the browser and the server import
-  // the same analyzer. See `static.js` for why that mapping constrains the code.
-  sharedDir: path.join(PROJECT_ROOT, 'shared'),
-  mcp,
+    projectRoot: PROJECT_ROOT,
+    publicDir: path.join(PROJECT_ROOT, 'public'),
+    // Served at `/shared/`, which is what lets the browser and the server import
+    // the same analyzer. See `static.js` for why that mapping constrains the code.
+    sharedDir: path.join(PROJECT_ROOT, 'shared'),
+    mcp,
 };
-
 // The tests want a server they can put on an ephemeral port; `npm start` wants
 // one from the settings file. Same router either way.
 export function createServer(config = CONFIG) {
     const router = createRouter(config);
-  return http.createServer((req, res) => {
-    const start = Date.now();
-    res.on('finish', () => {
-      logger.http({ method: req.method, path: req.url, status: res.statusCode, ms: Date.now() - start });
+    return http.createServer((req, res) => {
+        const start = Date.now();
+        res.on('finish', () => {
+            logger.http({ method: req.method, path: req.url, status: res.statusCode, ms: Date.now() - start });
+        });
+        router(req, res);
     });
-    router(req, res);
-  });
 }
-
 // What the terminal shows once the socket is listening. A pure string builder
 // so the CLI prints exactly this too, and so a test can read it.
 //
@@ -72,147 +64,147 @@ export function createServer(config = CONFIG) {
 // access key" — wrapped unpredictably at any terminal width and buried the URL
 // people actually need. Now the detail lives on its own row.
 export function startupBanner(settings, { configFile, columns } = {}) {
-  const urls = serverUrls(settings);
-  const rows = [];
-  const add = (label, value) => rows.push([label, value]);
-
-  add('URL', urls.local);
-  if (urls.network) add('Network', urls.network);
-  if (urls.domain) add('Public', urls.domain);
-  add('Bind', `${settings.host}:${settings.port}`);
-  add('Mode', settings.mode === 'self-hosted'
-    ? (isLoopbackHost(settings.host) ? 'self-hosted (loopback — use a tunnel)' : 'self-hosted (network reachable)')
-    : 'local (this machine only)');
-
-  if (settings.mode === 'self-hosted') {
-    add('Auth', settings.accessKey
-      ? 'access key required for remote browsers'
-      : 'NO ACCESS KEY — every API call is refused');
-  }
-  if (settings.domain) {
-    add('HTTPS', settings.https ? 'Caddy terminates TLS for this domain' : 'off — `onboarder https setup` enables it');
-  }
-  const tunnels = tunnelStatus(settings);
-  for (const name of ['cloudflare', 'tailscale']) {
-    const t = tunnels[name];
-    if (!t.enabled) continue;
-    add('Tunnel', t.installed ? `${name}: ${t.command}` : `${name} enabled, CLI missing — ${t.install}`);
-  }
-  if (configFile) add('Config', configFile);
-
-  // Rendered through the same panel helper the CLI uses, so `node server/index.js`
-  // and `onboarder start` cannot drift apart — and so both adapt to the terminal
-  // width instead of assuming 80 columns.
-  return '\n' + panel('Onboarder is up', rows.map(([label, value]) => row(label, value)), { columns }) + '\n';
+    const urls = serverUrls(settings);
+    const rows = [];
+    const add = (label, value) => rows.push([label, value]);
+    add('URL', urls.local);
+    if (urls.network)
+        add('Network', urls.network);
+    if (urls.domain)
+        add('Public', urls.domain);
+    add('Bind', `${settings.host}:${settings.port}`);
+    add('Mode', settings.mode === 'self-hosted'
+        ? (isLoopbackHost(settings.host) ? 'self-hosted (loopback — use a tunnel)' : 'self-hosted (network reachable)')
+        : 'local (this machine only)');
+    if (settings.mode === 'self-hosted') {
+        add('Auth', settings.accessKey
+            ? 'access key required for remote browsers'
+            : 'NO ACCESS KEY — every API call is refused');
+    }
+    if (settings.domain) {
+        add('HTTPS', settings.https ? 'Caddy terminates TLS for this domain' : 'off — `onboarder https setup` enables it');
+    }
+    const tunnels = tunnelStatus(settings);
+    for (const name of ['cloudflare', 'tailscale']) {
+        const t = tunnels[name];
+        if (!t.enabled)
+            continue;
+        add('Tunnel', t.installed ? `${name}: ${t.command}` : `${name} enabled, CLI missing — ${t.install}`);
+    }
+    if (configFile)
+        add('Config', configFile);
+    // Rendered through the same panel helper the CLI uses, so `node server/index.js`
+    // and `onboarder start` cannot drift apart — and so both adapt to the terminal
+    // width instead of assuming 80 columns.
+    return '\n' + panel('Onboarder is up', rows.map(([label, value]) => row(label, value)), { columns }) + '\n';
 }
-
 // Ask the OS to open the app. Best-effort and detached: a missing opener on a
 // headless box is not a reason the server failed to start.
 export function openInBrowser(url) {
-  const cmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'cmd' : 'xdg-open';
-  const args = process.platform === 'win32' ? ['/c', 'start', '', url] : [url];
-  try {
-    const child = spawn(cmd, args, { detached: true, stdio: 'ignore' });
-    child.on('error', () => {});
-    child.unref();
-  } catch {
-    /* no opener — the URL is on the screen already */
-  }
+    const cmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'cmd' : 'xdg-open';
+    const args = process.platform === 'win32' ? ['/c', 'start', '', url] : [url];
+    try {
+        const child = spawn(cmd, args, { detached: true, stdio: 'ignore' });
+        child.on('error', (..._args) => { });
+        child.unref();
+    }
+    catch {
+        /* no opener — the URL is on the screen already */
+    }
 }
-
 export function listenError(error, { host, port, pid = null } = {}) {
-  if (error?.code === 'EADDRINUSE') {
-    const owner = pid ? ` Another Onboarder process is running as PID ${pid}.` : '';
-    return new Error(`${host}:${port} is already in use.${owner} Try \`onboarder status\`, \`onboarder stop\`, or choose another port with \`onboarder config set port <number>\`.`, { cause: error });
-  }
-  if (error?.code === 'EACCES') {
-    return new Error(`Cannot bind ${host}:${port}: permission denied. Ports below 1024 normally require elevated privileges; choose a port above 1024.`, { cause: error });
-  }
-  return error;
+    if (error?.code === 'EADDRINUSE') {
+        const owner = pid ? ` Another Onboarder process is running as PID ${pid}.` : '';
+        return new Error(`${host}:${port} is already in use.${owner} Try \`onboarder status\`, \`onboarder stop\`, or choose another port with \`onboarder config set port <number>\`.`, { cause: error });
+    }
+    if (error?.code === 'EACCES') {
+        return new Error(`Cannot bind ${host}:${port}: permission denied. Ports below 1024 normally require elevated privileges; choose a port above 1024.`, { cause: error });
+    }
+    return error;
 }
-
 // The real boot: read the settings, bind what they say, print the banner.
 // Both `node server/index.js` and `onboarder start` land here.
 export async function startServer({ configFile = configPath(), openBrowser, log = console.log } = {}) {
-  const settings = await readSettings(configFile);
-  // Environment wins over the file: PORT=8080 npm start has worked since
-  // before settings existed, and a flag you can see beats a file you cannot.
-  const host = process.env.HOST || settings.host;
-  const port = Number(process.env.PORT) || settings.port;
-  const live = { ...settings, host, port };
-
-  const server = createServer({
-    ...CONFIG,
-    configPath: configFile,
-    getSettings: () => readSettings(configFile),
-    boot: { host, port, domain: settings.domain, https: settings.https },
-  });
-
-  installExitCleanup();
-  // The MCP child has to go with the web server. `installExitCleanup` already
-  // handles cloned scan directories on SIGINT/SIGTERM; the child is registered
-  // on the same process events so a Ctrl-C in the terminal does not leave an
-  // orphan holding the port-less stdio pipe open.
-  for (const signal of ['SIGINT', 'SIGTERM']) {
-    process.on(signal, () => {
-      if (mcp.running) mcp.stop().catch(() => {});
+    const settings = await readSettings(configFile);
+    // Environment wins over the file: PORT=8080 npm start has worked since
+    // before settings existed, and a flag you can see beats a file you cannot.
+    const host = process.env.HOST || settings.host;
+    const port = Number(process.env.PORT) || settings.port;
+    const live = { ...settings, host, port };
+    const server = createServer({
+        ...CONFIG,
+        configPath: configFile,
+        getSettings: () => readSettings(configFile),
+        boot: { host, port, domain: settings.domain, https: settings.https },
     });
-  }
-
-  try {
-    await new Promise((resolve, reject) => {
-      server.once('error', reject);
-      server.listen(port, host, resolve);
-    });
-  } catch (error) {
-    const recorded = readPidFile(configFile);
-    throw listenError(error, { host, port, pid: recorded && pidIsAlive(recorded) ? recorded : null });
-  }
-
-  // The process record is optional by design, so each write is guarded on its
-  // own: a read-only config directory must not stop a server that has already
-  // bound its port, but a *programming* error here would otherwise be swallowed
-  // and look like "it started, but nothing recorded it".
-  try { writePidFile(configFile); } catch { /* read-only config dir */ }
-  // How this process was launched. `background` is a detached child with a log
-  // file; `startup` is one the OS supervisor started at login (also with a log
-  // file); anything else is a person typing `onboarder start` in a terminal.
-  const mode = process.env.ONBOARDER_LAUNCH || (process.env.ONBOARDER_BACKGROUND ? 'background' : 'foreground');
-  const logFile = mode === 'foreground' ? null : logPath(configFile);
-  try {
-    // Beside the pid: how this instance was launched and where its log goes, so
-    // `onboarder status` answers "how long has it been up, and how do I see its
-    // output" from a record instead of guessing.
-    writeRunInfo(configFile, {
-      mode,
-      host,
-      port,
-      url: serverUrls(live).local,
-      log: logFile,
-      node: process.version,
-    });
-  } catch (error) {
-    logger.warn('could not write the run record', { file: runInfoPath(configFile), error: error.message });
-  }
-  server.once('close', () => removePidFile(configFile));
-  process.once('exit', () => removePidFile(configFile));
-
-  log(startupBanner(live, { configFile }));
-
-  const shouldOpen = openBrowser ?? (live.autoOpen && process.stdout.isTTY && !process.env.NO_OPEN);
-  // Local requests never need a credential. Remote browsers are sent to the
-  // themed login page and exchange the key for an HttpOnly session cookie.
-  if (shouldOpen) openInBrowser(browserUrl(live));
-  return { server, settings: live, host, port };
+    installExitCleanup();
+    // The MCP child has to go with the web server. `installExitCleanup` already
+    // handles cloned scan directories on SIGINT/SIGTERM; the child is registered
+    // on the same process events so a Ctrl-C in the terminal does not leave an
+    // orphan holding the port-less stdio pipe open.
+    for (const signal of ['SIGINT', 'SIGTERM']) {
+        process.on(signal, () => {
+            if (mcp.running)
+                mcp.stop().catch((..._args) => { });
+        });
+    }
+    try {
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            server.listen(port, host, () => resolve());
+        });
+    }
+    catch (error) {
+        const recorded = readPidFile(configFile);
+        throw listenError(error, { host, port, pid: recorded && pidIsAlive(recorded) ? recorded : null });
+    }
+    // The process record is optional by design, so each write is guarded on its
+    // own: a read-only config directory must not stop a server that has already
+    // bound its port, but a *programming* error here would otherwise be swallowed
+    // and look like "it started, but nothing recorded it".
+    try {
+        writePidFile(configFile);
+    }
+    catch { /* read-only config dir */ }
+    // How this process was launched. `background` is a detached child with a log
+    // file; `startup` is one the OS supervisor started at login (also with a log
+    // file); anything else is a person typing `onboarder start` in a terminal.
+    const mode = process.env.ONBOARDER_LAUNCH || (process.env.ONBOARDER_BACKGROUND ? 'background' : 'foreground');
+    const logFile = mode === 'foreground' ? null : logPath(configFile);
+    try {
+        // Beside the pid: how this instance was launched and where its log goes, so
+        // `onboarder status` answers "how long has it been up, and how do I see its
+        // output" from a record instead of guessing.
+        writeRunInfo(configFile, {
+            mode,
+            host,
+            port,
+            url: serverUrls(live).local,
+            log: logFile,
+            node: process.version,
+        });
+    }
+    catch (error) {
+        logger.warn('could not write the run record', { file: runInfoPath(configFile), error: error.message });
+    }
+    server.once('close', () => removePidFile(configFile));
+    process.once('exit', () => removePidFile(configFile));
+    log(startupBanner(live, { configFile }));
+    const shouldOpen = openBrowser ?? (live.autoOpen && process.stdout.isTTY && !process.env.NO_OPEN);
+    // Local requests never need a credential. Remote browsers are sent to the
+    // themed login page and exchange the key for an HttpOnly session cookie.
+    if (shouldOpen)
+        openInBrowser(browserUrl(live));
+    return { server, settings: live, host, port };
 }
-
 // `node server/index.js` listens. Importing this module — which the tests do, to
 // drive the real router — does not, and does not install signal handlers either:
 // a test runner should keep its own Ctrl-C.
 const THIS_FILE = fileURLToPath(import.meta.url);
 if (process.argv[1] && path.resolve(process.argv[1]) === THIS_FILE) {
-  startServer().catch((err) => {
-    console.error('  Onboarder did not start: ' + (err.message || err));
-    process.exitCode = 1;
-  });
+    startServer().catch((err) => {
+        console.error('  Onboarder did not start: ' + (err.message || err));
+        process.exitCode = 1;
+    });
 }
+//# sourceMappingURL=index.js.map

package/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/server/index.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,6CAA6C;AAE7C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;AAE9B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAE9C,kFAAkF;AAClF,8EAA8E;AAC9E,gFAAgF;AAChF,iFAAiF;AACjF,6CAA6C;AAC7C,MAAM,GAAG,GAAG,eAAe,CAAC;IAC1B,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;CACjD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,WAAW,EAAE,YAAY;IACzB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC;IAC5C,6EAA6E;IAC7E,+EAA+E;IAC/E,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC;IAC5C,GAAG;CACJ,CAAC;AAEF,+EAA+E;AAC/E,sDAAsD;AACtD,MAAM,UAAU,YAAY,CAAC,MAAM,GAA2L,MAAM;IAChO,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,iEAAiE;AACjE,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,6DAA6D;AAC7D,MAAM,UAAU,aAAa,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,GAAwB,EAAE;IACvF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAExD,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,IAAI,CAAC,OAAO;QAAE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,GAAG,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,KAAK,aAAa;QACzC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,iCAAiC,CAAC;QAC/G,CAAC,CAAC,2BAA2B,CAAC,CAAC;IAEjC,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACpC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS;YAC5B,CAAC,CAAC,yCAAyC;YAC3C,CAAC,CAAC,2CAA2C,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC;IACrH,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,SAAS;QACzB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,UAAU;QAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE1C,iFAAiF;IACjF,+EAA+E;IAC/E,wCAAwC;IACxC,OAAO,IAAI,GAAG,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;AAC9G,CAAC;AAED,8EAA8E;AAC9E,2DAA2D;AAC3D,MAAM,UAAU,aAAa,CAAC,GAAG;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IACvG,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,KAAgB,EAAE,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/C,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,GAAwB,EAAE;IACrF,IAAI,KAAK,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,gDAAgD,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,sBAAsB,KAAK,oHAAoH,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrM,CAAC;IACD,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,IAAI,uGAAuG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACzK,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAE,UAAU,GAAG,UAAU,EAAE,EAAE,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,GAAwB,EAAE;IACvH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;IAChD,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,GAAG,MAAM;QACT,UAAU,EAAE,UAAU;QACtB,WAAW,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC;QAC3C,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;KACrE,CAAC,CAAC;IAEH,kBAAkB,EAAE,CAAC;IACrB,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,gDAAgD;IAChD,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,IAAI,GAAG,CAAC,OAAO;gBAAE,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,KAAgB,EAAE,EAAE,GAAE,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,8EAA8E;IAC9E,uDAAuD;IACvD,IAAI,CAAC;QAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACtE,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,4EAA4E;QAC5E,4EAA4E;QAC5E,6CAA6C;QAC7C,YAAY,CAAC,UAAU,EAAE;YACvB,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK;YAC3B,GAAG,EAAE,OAAO;YACZ,IAAI,EAAE,OAAO,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;IAEtD,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClG,0EAA0E;IAC1E,yEAAyE;IACzE,IAAI,UAAU;QAAE,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,iFAAiF;AACjF,iFAAiF;AACjF,4CAA4C;AAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACjD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;IACnE,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,OAAO,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// Onboarder's server: where it lives on disk, and how it starts.\n//\n// The work is elsewhere. `router.js` holds the route table and the request\n// gates; each endpoint has its own module beside it (`apiScan`, `apiFile`,\n// `apiDocs`, `llmProxy`, `apiSettings`); `static.js` serves the page and the\n// shared engine; `sessions.js` remembers which directory a scan came from.\n// What is left here is the part that has to know about the filesystem it was\n// installed into, and the difference between being imported and being run.\n//\n// Where it binds comes from the settings file (`server/config.js`): local mode\n// is 127.0.0.1 and nothing else, self-hosted mode binds what it was given and\n// turns on the access-key gate in the router. A bare `createServer()` — what\n// the tests drive — never touches that file.\n\nimport http from 'node:http';\nimport path from 'node:path';\nimport { spawn } from 'node:child_process';\nimport { fileURLToPath } from 'node:url';\n\nimport { createRouter } from './router.js';\nimport { installExitCleanup } from './sessions.js';\nimport { createLogger } from './logger.js';\nimport { createMcpRunner } from './mcp/runner.js';\nimport { browserUrl, configPath, isLoopbackHost, readSettings, serverUrls } from './config.js';\nimport { tunnelStatus } from './tunnel.js';\nimport { pidIsAlive, readPidFile, removePidFile, writePidFile, writeRunInfo, runInfoPath } from './pidfile.js';\nimport { logPath } from './daemon.js';\nimport { panel, row } from './layout.js';\n\nconst logger = createLogger();\n\nconst HERE = path.dirname(fileURLToPath(import.meta.url));\nconst PROJECT_ROOT = path.resolve(HERE, '..');\n\n// The MCP runner is created here, not inside the router, and is put on the config\n// object the router already passes to every handler. Two reasons: exactly one\n// server can be supervised per process (a second button press must be a toggle,\n// not a second child), and a test can supply its own runner in place of this one\n// without the router knowing the difference.\nconst mcp = createMcpRunner({\n  onLog: (entry) => logger.info('mcp', entry.line),\n});\n\nexport const CONFIG = {\n  projectRoot: PROJECT_ROOT,\n  publicDir: path.join(PROJECT_ROOT, 'public'),\n  // Served at `/shared/`, which is what lets the browser and the server import\n  // the same analyzer. See `static.js` for why that mapping constrains the code.\n  sharedDir: path.join(PROJECT_ROOT, 'shared'),\n  mcp,\n};\n\n// The tests want a server they can put on an ephemeral port; `npm start` wants\n// one from the settings file. Same router either way.\nexport function createServer(config: typeof CONFIG & { configPath?: string; getSettings?: () => Promise<import('../shared/contracts.js').Settings>; boot?: { host: string; port: number; domain: string; https: boolean } } = CONFIG) {\n    const router = createRouter(config);\n  return http.createServer((req, res) => {\n    const start = Date.now();\n    res.on('finish', () => {\n      logger.http({ method: req.method, path: req.url, status: res.statusCode, ms: Date.now() - start });\n    });\n    router(req, res);\n  });\n}\n\n// What the terminal shows once the socket is listening. A pure string builder\n// so the CLI prints exactly this too, and so a test can read it.\n//\n// The shape is label/value rows, not prose, because every fact here has to be\n// readable at a glance and copy-pasteable. The one long sentence it used to\n// print — \"self-hosted — the network can reach this; every API call needs the\n// access key\" — wrapped unpredictably at any terminal width and buried the URL\n// people actually need. Now the detail lives on its own row.\nexport function startupBanner(settings, { configFile, columns }: Record<string, any> = {}) {\n  const urls = serverUrls(settings);\n  const rows = [];\n  const add = (label, value) => rows.push([label, value]);\n\n  add('URL', urls.local);\n  if (urls.network) add('Network', urls.network);\n  if (urls.domain) add('Public', urls.domain);\n  add('Bind', `${settings.host}:${settings.port}`);\n  add('Mode', settings.mode === 'self-hosted'\n    ? (isLoopbackHost(settings.host) ? 'self-hosted (loopback — use a tunnel)' : 'self-hosted (network reachable)')\n    : 'local (this machine only)');\n\n  if (settings.mode === 'self-hosted') {\n    add('Auth', settings.accessKey\n      ? 'access key required for remote browsers'\n      : 'NO ACCESS KEY — every API call is refused');\n  }\n  if (settings.domain) {\n    add('HTTPS', settings.https ? 'Caddy terminates TLS for this domain' : 'off — `onboarder https setup` enables it');\n  }\n  const tunnels = tunnelStatus(settings);\n  for (const name of ['cloudflare', 'tailscale']) {\n    const t = tunnels[name];\n    if (!t.enabled) continue;\n    add('Tunnel', t.installed ? `${name}: ${t.command}` : `${name} enabled, CLI missing — ${t.install}`);\n  }\n  if (configFile) add('Config', configFile);\n\n  // Rendered through the same panel helper the CLI uses, so `node server/index.js`\n  // and `onboarder start` cannot drift apart — and so both adapt to the terminal\n  // width instead of assuming 80 columns.\n  return '\\n' + panel('Onboarder is up', rows.map(([label, value]) => row(label, value)), { columns }) + '\\n';\n}\n\n// Ask the OS to open the app. Best-effort and detached: a missing opener on a\n// headless box is not a reason the server failed to start.\nexport function openInBrowser(url) {\n  const cmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'cmd' : 'xdg-open';\n  const args = process.platform === 'win32' ? ['/c', 'start', '', url] : [url];\n  try {\n    const child = spawn(cmd, args, { detached: true, stdio: 'ignore' });\n    child.on('error', (..._args: unknown[]) => {});\n    child.unref();\n  } catch {\n    /* no opener — the URL is on the screen already */\n  }\n}\n\nexport function listenError(error, { host, port, pid = null }: Record<string, any> = {}) {\n  if (error?.code === 'EADDRINUSE') {\n    const owner = pid ? ` Another Onboarder process is running as PID ${pid}.` : '';\n    return new Error(`${host}:${port} is already in use.${owner} Try \\`onboarder status\\`, \\`onboarder stop\\`, or choose another port with \\`onboarder config set port <number>\\`.`, { cause: error });\n  }\n  if (error?.code === 'EACCES') {\n    return new Error(`Cannot bind ${host}:${port}: permission denied. Ports below 1024 normally require elevated privileges; choose a port above 1024.`, { cause: error });\n  }\n  return error;\n}\n\n// The real boot: read the settings, bind what they say, print the banner.\n// Both `node server/index.js` and `onboarder start` land here.\nexport async function startServer({ configFile = configPath(), openBrowser, log = console.log }: Record<string, any> = {}) {\n  const settings = await readSettings(configFile);\n  // Environment wins over the file: PORT=8080 npm start has worked since\n  // before settings existed, and a flag you can see beats a file you cannot.\n  const host = process.env.HOST || settings.host;\n  const port = Number(process.env.PORT) || settings.port;\n  const live = { ...settings, host, port };\n\n  const server = createServer({\n    ...CONFIG,\n    configPath: configFile,\n    getSettings: () => readSettings(configFile),\n    boot: { host, port, domain: settings.domain, https: settings.https },\n  });\n\n  installExitCleanup();\n  // The MCP child has to go with the web server. `installExitCleanup` already\n  // handles cloned scan directories on SIGINT/SIGTERM; the child is registered\n  // on the same process events so a Ctrl-C in the terminal does not leave an\n  // orphan holding the port-less stdio pipe open.\n  for (const signal of ['SIGINT', 'SIGTERM']) {\n    process.on(signal, () => {\n      if (mcp.running) mcp.stop().catch((..._args: unknown[]) => {});\n    });\n  }\n\n  try {\n    await new Promise<void>((resolve, reject) => {\n      server.once('error', reject);\n      server.listen(port, host, () => resolve());\n    });\n  } catch (error) {\n    const recorded = readPidFile(configFile);\n    throw listenError(error, { host, port, pid: recorded && pidIsAlive(recorded) ? recorded : null });\n  }\n\n  // The process record is optional by design, so each write is guarded on its\n  // own: a read-only config directory must not stop a server that has already\n  // bound its port, but a *programming* error here would otherwise be swallowed\n  // and look like \"it started, but nothing recorded it\".\n  try { writePidFile(configFile); } catch { /* read-only config dir */ }\n  // How this process was launched. `background` is a detached child with a log\n  // file; `startup` is one the OS supervisor started at login (also with a log\n  // file); anything else is a person typing `onboarder start` in a terminal.\n  const mode = process.env.ONBOARDER_LAUNCH || (process.env.ONBOARDER_BACKGROUND ? 'background' : 'foreground');\n  const logFile = mode === 'foreground' ? null : logPath(configFile);\n  try {\n    // Beside the pid: how this instance was launched and where its log goes, so\n    // `onboarder status` answers \"how long has it been up, and how do I see its\n    // output\" from a record instead of guessing.\n    writeRunInfo(configFile, {\n      mode,\n      host,\n      port,\n      url: serverUrls(live).local,\n      log: logFile,\n      node: process.version,\n    });\n  } catch (error) {\n    logger.warn('could not write the run record', { file: runInfoPath(configFile), error: error.message });\n  }\n  server.once('close', () => removePidFile(configFile));\n  process.once('exit', () => removePidFile(configFile));\n\n  log(startupBanner(live, { configFile }));\n\n  const shouldOpen = openBrowser ?? (live.autoOpen && process.stdout.isTTY && !process.env.NO_OPEN);\n  // Local requests never need a credential. Remote browsers are sent to the\n  // themed login page and exchange the key for an HttpOnly session cookie.\n  if (shouldOpen) openInBrowser(browserUrl(live));\n  return { server, settings: live, host, port };\n}\n\n// `node server/index.js` listens. Importing this module — which the tests do, to\n// drive the real router — does not, and does not install signal handlers either:\n// a test runner should keep its own Ctrl-C.\nconst THIS_FILE = fileURLToPath(import.meta.url);\nif (process.argv[1] && path.resolve(process.argv[1]) === THIS_FILE) {\n  startServer().catch((err) => {\n    console.error('  Onboarder did not start: ' + (err.message || err));\n    process.exitCode = 1;\n  });\n}\n"]}

package/server/layout.d.ts

@@ -0,0 +1,26 @@
+export type PanelStyle = 'label' | 'frame' | 'hint' | 'title';
+export interface PanelRow {
+    label?: string;
+    value?: unknown;
+    hint?: string;
+}
+export interface PanelOptions {
+    indent?: string;
+    columns?: number;
+    paint?: (text: string, style: PanelStyle) => string;
+}
+export declare function width(text: unknown): number;
+export declare function termWidth(stream?: NodeJS.WriteStream & {
+    fd: 1;
+}): number;
+export declare function fit(text: unknown, max: number, { tail }?: {
+    tail?: boolean;
+}): string;
+export declare function panel(title: string, rows: PanelRow[], { indent, columns, paint }?: PanelOptions): string;
+export declare const hint: (text: string) => {
+    hint: string;
+};
+export declare const row: (label: string, value: unknown) => {
+    label: string;
+    value: string;
+};

package/server/layout.js

@@ -9,32 +9,32 @@
 // Everything is pure string math on purpose: a layout decision is a thing you
 // want to unit-test without spawning a terminal, and the whole reason panels
 // used to look broken is that this math was scattered through the callers.
-
 export function width(text) {
-  return String(text).replace(/\x1b\[[0-9;]*m/g, '').length;
+    return String(text).replace(/\x1b\[[0-9;]*m/g, '').length;
 }
-
 // The terminal we are drawing into, asked at call time rather than cached at
 // import: a panel printed after the user resized their window should use the
 // new size. Falls back to COLUMNS, then 80, so a pipe or a log file still gets
 // sane output instead of `undefined`.
 export function termWidth(stream = process.stdout) {
-  return stream.columns || Number(process.env.COLUMNS) || 80;
+    return stream.columns || Number(process.env.COLUMNS) || 80;
 }
-
 // Shorten to fit, with a real ellipsis. The middle is elided rather than the
 // tail, because in a path or URL the end is the part that identifies it.
 export function fit(text, max, { tail = true } = {}) {
-  const value = String(text);
-  if (max <= 0) return '';
-  if (value.length <= max) return value;
-  if (max === 1) return '…';
-  if (!tail) return value.slice(0, max - 1) + '…';
-  const head = Math.ceil((max - 1) * 0.4);
-  const rest = max - 1 - head;
-  return (head ? value.slice(0, head) + '…' : '…') + value.slice(value.length - rest);
+    const value = String(text);
+    if (max <= 0)
+        return '';
+    if (value.length <= max)
+        return value;
+    if (max === 1)
+        return '…';
+    if (!tail)
+        return value.slice(0, max - 1) + '…';
+    const head = Math.ceil((max - 1) * 0.4);
+    const rest = max - 1 - head;
+    return (head ? value.slice(0, head) + '…' : '…') + value.slice(value.length - rest);
 }
-
 // A titled block of rows that fits the terminal it is printed into. The frame is
 // sized from its contents, then clamped to the available width, and every value
 // is elided to fit rather than allowed to spill past the border — a panel whose
@@ -44,57 +44,52 @@ export function fit(text, max, { tail = true } = {}) {
 // 'frame'. The default is identity, which is what the server banner and the
 // `--no-color` path want.
 export function panel(title, rows, { indent = '  ', columns, paint = (t) => String(t) } = {}) {
-  // The hard ceiling is the terminal, and it is the *only* ceiling. This used to
-  // clamp to a 24-column floor "to guard against a nonsensical zero", but a
-  // floor above the available width is precisely the overflow this function
-  // exists to prevent: in a 10-column terminal it produced 26-column lines and
-  // wrapped the border. A terminal can be narrower than a box; below the point
-  // where a bordered box is readable at all, the frame degrades to a plain
-  // aligned list, which is still honest output instead of a lie about width.
-  const total = Math.max(1, Math.floor(columns || termWidth()) - indent.length);
-
-  // A border costs 2 cells on each side; the label column costs `labelWidth`,
-  // then a 2-cell gap, then a content indent. Below what is left there is no
-  // room for a readable value, so the border is dropped entirely rather than
-  // drawn wider than the terminal. The content indent goes too: at a 3-column
-  // terminal, indent(2) + content(2) + one character is already 5, and the
-  // indent is decoration, not information.
-  const borderWorthIt = total >= 16;
-  const bodyIndent = total >= 8 ? 2 : 0;
-  const labelWidth = borderWorthIt ? Math.min(12, Math.max(...rows.map((r) => width(r.label ?? '')), 0)) : 0;
-  const gap = labelWidth ? 2 : 0;
-  const valueRoom = Math.max(1, total - (borderWorthIt ? 2 : 0) - labelWidth - gap - bodyIndent);
-
-  const body = rows.map((r) => (r.hint
-    ? ' '.repeat(labelWidth + gap) + paint(fit(r.hint, valueRoom), 'hint')
-    : (labelWidth ? paint(fit(r.label ?? '', labelWidth).padEnd(labelWidth), 'label') + ' '.repeat(gap) : '')
-      + fit(r.value ?? '', valueRoom)));
-
-  if (!borderWorthIt) {
-    // No room for a frame. Still fitted, still labeled, just not boxed. The
-    // indent goes first — it is decoration, and at a 1–2 column terminal the
-    // 2-space indent plus a single content character is already 3, which wraps.
-    const lead = ' '.repeat(Math.max(0, Math.min(indent.length, total - 1)));
-    return [
-      paint(fit(title, total), 'title'),
-      ...body.map((line) => lead + ' '.repeat(bodyIndent) + fit(line, Math.max(1, total - lead.length - bodyIndent))),
-    ].join('\n');
-  }
-
-  // Frame width = whatever the body needs, capped to what the terminal has.
-  // The 2-cell content indent belongs to the body, so it counts toward the
-  // width the border has to enclose.
-  const wanted = Math.max(...body.map((line) => width('  ' + line)), 1);
-  const inner = Math.min(total - 2, Math.max(1, wanted));
-  const shownTitle = fit(title, Math.max(0, inner - 4));
-  const top = paint('┌─ ', 'frame') + paint(shownTitle, 'title')
-    + ' ' + paint('─'.repeat(Math.max(0, inner - shownTitle.length - 3)) + '┐', 'frame');
-  const bottom = paint('└' + '─'.repeat(inner) + '┘', 'frame');
-  return [indent + top, ...body.map((line) => indent + '  ' + line), indent + bottom].join('\n');
+    // The hard ceiling is the terminal, and it is the *only* ceiling. This used to
+    // clamp to a 24-column floor "to guard against a nonsensical zero", but a
+    // floor above the available width is precisely the overflow this function
+    // exists to prevent: in a 10-column terminal it produced 26-column lines and
+    // wrapped the border. A terminal can be narrower than a box; below the point
+    // where a bordered box is readable at all, the frame degrades to a plain
+    // aligned list, which is still honest output instead of a lie about width.
+    const total = Math.max(1, Math.floor(columns || termWidth()) - indent.length);
+    // A border costs 2 cells on each side; the label column costs `labelWidth`,
+    // then a 2-cell gap, then a content indent. Below what is left there is no
+    // room for a readable value, so the border is dropped entirely rather than
+    // drawn wider than the terminal. The content indent goes too: at a 3-column
+    // terminal, indent(2) + content(2) + one character is already 5, and the
+    // indent is decoration, not information.
+    const borderWorthIt = total >= 16;
+    const bodyIndent = total >= 8 ? 2 : 0;
+    const labelWidth = borderWorthIt ? Math.min(12, Math.max(...rows.map((r) => width(r.label ?? '')), 0)) : 0;
+    const gap = labelWidth ? 2 : 0;
+    const valueRoom = Math.max(1, total - (borderWorthIt ? 2 : 0) - labelWidth - gap - bodyIndent);
+    const body = rows.map((r) => (r.hint
+        ? ' '.repeat(labelWidth + gap) + paint(fit(r.hint, valueRoom), 'hint')
+        : (labelWidth ? paint(fit(r.label ?? '', labelWidth).padEnd(labelWidth), 'label') + ' '.repeat(gap) : '')
+            + fit(r.value ?? '', valueRoom)));
+    if (!borderWorthIt) {
+        // No room for a frame. Still fitted, still labeled, just not boxed. The
+        // indent goes first — it is decoration, and at a 1–2 column terminal the
+        // 2-space indent plus a single content character is already 3, which wraps.
+        const lead = ' '.repeat(Math.max(0, Math.min(indent.length, total - 1)));
+        return [
+            paint(fit(title, total), 'title'),
+            ...body.map((line) => lead + ' '.repeat(bodyIndent) + fit(line, Math.max(1, total - lead.length - bodyIndent))),
+        ].join('\n');
+    }
+    // Frame width = whatever the body needs, capped to what the terminal has.
+    // The 2-cell content indent belongs to the body, so it counts toward the
+    // width the border has to enclose.
+    const wanted = Math.max(...body.map((line) => width('  ' + line)), 1);
+    const inner = Math.min(total - 2, Math.max(1, wanted));
+    const shownTitle = fit(title, Math.max(0, inner - 4));
+    const top = paint('┌─ ', 'frame') + paint(shownTitle, 'title')
+        + ' ' + paint('─'.repeat(Math.max(0, inner - shownTitle.length - 3)) + '┐', 'frame');
+    const bottom = paint('└' + '─'.repeat(inner) + '┘', 'frame');
+    return [indent + top, ...body.map((line) => indent + '  ' + line), indent + bottom].join('\n');
 }
-
 // A one-line note rendered in the panel's muted voice.
 export const hint = (text) => ({ hint: text });
-
 // A label/value row. Values are stringified here so a caller can pass a number.
-export const row = (label, value) => ({ label, value: String(value) });
+export const row = (label, value) => ({ label, value: String(value) });
+//# sourceMappingURL=layout.js.map

package/server/layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.js","sourceRoot":"","sources":["../src/server/layout.ts"],"names":[],"mappings":"AAGA,wDAAwD;AACxD,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,6DAA6D;AAC7D,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAE3E,MAAM,UAAU,KAAK,CAAC,IAAa;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AAC5D,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,sCAAsC;AACtC,MAAM,UAAU,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;IAC/C,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED,6EAA6E;AAC7E,yEAAyE;AACzE,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,GAAW,EAAE,EAAE,IAAI,GAAG,IAAI,EAAE,GAAuB,EAAE;IACtF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,GAAG,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AACtF,CAAC;AAED,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,0BAA0B;AAC1B,MAAM,UAAU,KAAK,CAAC,KAAa,EAAE,IAAgB,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAiB,EAAE;IAC5H,+EAA+E;IAC/E,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAE9E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,yCAAyC;IACzC,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3G,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,GAAG,GAAG,UAAU,CAAC,CAAC;IAE/F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QAClC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QACtE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;cACrG,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAEtC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,wEAAwE;QACxE,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO;YACL,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC;YACjC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC;SAChH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,mCAAmC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC;UAC1D,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjG,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAEvD,gFAAgF;AAChF,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC","sourcesContent":["export type PanelStyle = 'label' | 'frame' | 'hint' | 'title';\nexport interface PanelRow { label?: string; value?: unknown; hint?: string }\nexport interface PanelOptions { indent?: string; columns?: number; paint?: (text: string, style: PanelStyle) => string }\n// Terminal geometry, with no color and no dependencies.\n//\n// This lives here, under `server/`, because two very different callers need\n// identical layout: the CLI (which paints) and the server's own startup banner\n// (which must not import `cli/ui.js` — that would invert the dependency, since\n// the CLI sits on top of the server). So the *shape* is here and the *color* is\n// injected by the caller as a `paint(text, style)` function.\n//\n// Everything is pure string math on purpose: a layout decision is a thing you\n// want to unit-test without spawning a terminal, and the whole reason panels\n// used to look broken is that this math was scattered through the callers.\n\nexport function width(text: unknown) {\n  return String(text).replace(/\\x1b\\[[0-9;]*m/g, '').length;\n}\n\n// The terminal we are drawing into, asked at call time rather than cached at\n// import: a panel printed after the user resized their window should use the\n// new size. Falls back to COLUMNS, then 80, so a pipe or a log file still gets\n// sane output instead of `undefined`.\nexport function termWidth(stream = process.stdout) {\n  return stream.columns || Number(process.env.COLUMNS) || 80;\n}\n\n// Shorten to fit, with a real ellipsis. The middle is elided rather than the\n// tail, because in a path or URL the end is the part that identifies it.\nexport function fit(text: unknown, max: number, { tail = true }: { tail?: boolean } = {}) {\n  const value = String(text);\n  if (max <= 0) return '';\n  if (value.length <= max) return value;\n  if (max === 1) return '…';\n  if (!tail) return value.slice(0, max - 1) + '…';\n  const head = Math.ceil((max - 1) * 0.4);\n  const rest = max - 1 - head;\n  return (head ? value.slice(0, head) + '…' : '…') + value.slice(value.length - rest);\n}\n\n// A titled block of rows that fits the terminal it is printed into. The frame is\n// sized from its contents, then clamped to the available width, and every value\n// is elided to fit rather than allowed to spill past the border — a panel whose\n// right edge is off-screen is what makes output \"mess the terminal\".\n//\n// `paint` is injected: `(text, style) => string`, where style is 'label' or\n// 'frame'. The default is identity, which is what the server banner and the\n// `--no-color` path want.\nexport function panel(title: string, rows: PanelRow[], { indent = '  ', columns, paint = (t) => String(t) }: PanelOptions = {}) {\n  // The hard ceiling is the terminal, and it is the *only* ceiling. This used to\n  // clamp to a 24-column floor \"to guard against a nonsensical zero\", but a\n  // floor above the available width is precisely the overflow this function\n  // exists to prevent: in a 10-column terminal it produced 26-column lines and\n  // wrapped the border. A terminal can be narrower than a box; below the point\n  // where a bordered box is readable at all, the frame degrades to a plain\n  // aligned list, which is still honest output instead of a lie about width.\n  const total = Math.max(1, Math.floor(columns || termWidth()) - indent.length);\n\n  // A border costs 2 cells on each side; the label column costs `labelWidth`,\n  // then a 2-cell gap, then a content indent. Below what is left there is no\n  // room for a readable value, so the border is dropped entirely rather than\n  // drawn wider than the terminal. The content indent goes too: at a 3-column\n  // terminal, indent(2) + content(2) + one character is already 5, and the\n  // indent is decoration, not information.\n  const borderWorthIt = total >= 16;\n  const bodyIndent = total >= 8 ? 2 : 0;\n  const labelWidth = borderWorthIt ? Math.min(12, Math.max(...rows.map((r) => width(r.label ?? '')), 0)) : 0;\n  const gap = labelWidth ? 2 : 0;\n  const valueRoom = Math.max(1, total - (borderWorthIt ? 2 : 0) - labelWidth - gap - bodyIndent);\n\n  const body = rows.map((r) => (r.hint\n    ? ' '.repeat(labelWidth + gap) + paint(fit(r.hint, valueRoom), 'hint')\n    : (labelWidth ? paint(fit(r.label ?? '', labelWidth).padEnd(labelWidth), 'label') + ' '.repeat(gap) : '')\n      + fit(r.value ?? '', valueRoom)));\n\n  if (!borderWorthIt) {\n    // No room for a frame. Still fitted, still labeled, just not boxed. The\n    // indent goes first — it is decoration, and at a 1–2 column terminal the\n    // 2-space indent plus a single content character is already 3, which wraps.\n    const lead = ' '.repeat(Math.max(0, Math.min(indent.length, total - 1)));\n    return [\n      paint(fit(title, total), 'title'),\n      ...body.map((line) => lead + ' '.repeat(bodyIndent) + fit(line, Math.max(1, total - lead.length - bodyIndent))),\n    ].join('\\n');\n  }\n\n  // Frame width = whatever the body needs, capped to what the terminal has.\n  // The 2-cell content indent belongs to the body, so it counts toward the\n  // width the border has to enclose.\n  const wanted = Math.max(...body.map((line) => width('  ' + line)), 1);\n  const inner = Math.min(total - 2, Math.max(1, wanted));\n  const shownTitle = fit(title, Math.max(0, inner - 4));\n  const top = paint('┌─ ', 'frame') + paint(shownTitle, 'title')\n    + ' ' + paint('─'.repeat(Math.max(0, inner - shownTitle.length - 3)) + '┐', 'frame');\n  const bottom = paint('└' + '─'.repeat(inner) + '┘', 'frame');\n  return [indent + top, ...body.map((line) => indent + '  ' + line), indent + bottom].join('\\n');\n}\n\n// A one-line note rendered in the panel's muted voice.\nexport const hint = (text: string) => ({ hint: text });\n\n// A label/value row. Values are stringified here so a caller can pass a number.\nexport const row = (label: string, value: unknown) => ({ label, value: String(value) });"]}

package/server/llmProxy.d.ts

@@ -0,0 +1,3 @@
+export declare function detectProvider(apiKey: any, baseUrl: any): "anthropic" | "gemini" | "openai";
+export declare function extractRequestId(headers: any): any;
+export declare function proxyChat(res: any, body: any): Promise<void>;