glimmervoid 0.34.0 → 0.34.1

package/dist/client/index.html

@@ -7,7 +7,7 @@
   <link rel="icon" type="image/svg+xml" href="/assets/favicon-CKygeLwW.svg">
   <title>Glimmervoid</title>
   <style>html,body{background:var(--bg,#0a0810);height:100%;color:var(--text,#c8c0e0);font-family:var(--font-mono,"CommitMono", "Cascadia Code", "Fira Code", "Consolas", "Menlo", monospace);margin:0;padding:0}.app-shell{display:none}html:not([data-layout=phone]) .app-ready .app-shell{display:contents}.loading-screen{z-index:9999;background:#0a0810;flex-direction:column;justify-content:center;align-items:center;gap:20px;transition:opacity .3s;display:flex;position:fixed;inset:0}.loading-screen.fade-out{opacity:0;pointer-events:none}.loading-title{letter-spacing:.1em;color:#e8e0ff;text-transform:uppercase;font-family:CommitMono,Cascadia Code,Fira Code,Consolas,Menlo,monospace;font-size:20px;font-weight:700}.loading-title:before{content:"▸";color:#c084fc}.loading-status{color:#8276b0;letter-spacing:.04em;font-family:CommitMono,Cascadia Code,Fira Code,Consolas,Menlo,monospace;font-size:12px}.loading-spinner{border:2px solid #2a2440;border-top-color:#c084fc;border-radius:50%;width:28px;height:28px;animation:.8s linear infinite spin}@keyframes spin{to{transform:rotate(360deg)}}.shutdown-screen{z-index:9999;-webkit-backdrop-filter:blur();backdrop-filter:blur();pointer-events:none;opacity:0;background:#0a081000;flex-direction:column;justify-content:center;align-items:center;gap:20px;transition:background .4s,-webkit-backdrop-filter .4s,backdrop-filter .4s,opacity .3s;display:flex;position:fixed;inset:0}.shutdown-screen.active{-webkit-backdrop-filter:blur(8px);backdrop-filter:blur(8px);pointer-events:auto;opacity:1;background:#0a0810eb}.shutdown-status{color:#8276b0;letter-spacing:.04em;font-family:CommitMono,Cascadia Code,Fira Code,Consolas,Menlo,monospace;font-size:12px;transition:color .3s}.shutdown-screen.done .loading-spinner{opacity:.3;border-color:#2a2440;animation:none}.shutdown-screen.done .shutdown-status{color:#4a4268}</style>
-  <script type="module" crossorigin src="/assets/index-BiTwrj1H.js"></script>
+  <script type="module" crossorigin src="/assets/index-b9goyXSa.js"></script>
   <link rel="stylesheet" crossorigin href="/assets/index-BxU3Ww0L.css">
 </head>
 <body>

package/dist/server/index.js

@@ -87,6 +87,6 @@ if (!nodePty.ok) {
 	}));
 	process.exit(1);
 }
-await import("../chunks/main-Dh4udE7P.js");
+await import("../chunks/main-VMWdsGC6.js");
 //#endregion
 export {};

package/dist/session/sandbox-open-launcher.js

@@ -31,7 +31,7 @@ var FORWARDED_SIGNALS = [
 	"SIGTERM",
 	"SIGHUP"
 ];
-var OPEN_NETWORK = { allowAllUnixSockets: false };
+var ANY_TERMINAL_SCOPE = "any";
 var DEVICE_FOLDER = "/dev";
 var PSEUDO_TERMINAL_PREFIX = "ttys";
 function fieldOf(record, field) {
@@ -41,14 +41,28 @@ function fieldOf(record, field) {
 function shellQuote(word) {
 	return `'${word.replace(/'/g, `'\\''`)}'`;
 }
+function openNetworkOf(policy) {
+	const network = fieldOf(policy, "network");
+	const machServices = fieldOf(network, "allowMachLookup");
+	const allowMachLookup = Array.isArray(machServices) ? machServices.filter((service) => typeof service === "string") : [];
+	return {
+		allowAllUnixSockets: fieldOf(network, "allowAllUnixSockets") === true,
+		...allowMachLookup.length === 0 ? {} : { allowMachLookup }
+	};
+}
 function readOpenPolicy(policyPath) {
 	const policy = JSON.parse(fs.readFileSync(policyPath, "utf8"));
 	if (fieldOf(fieldOf(policy, "network"), "allowedDomains") !== void 0) throw new Error("a policy with a domain list must run through the sandbox runtime CLI");
+	const filesystem = FilesystemConfigSchema.parse(fieldOf(policy, "filesystem"));
 	return {
-		network: OPEN_NETWORK,
-		filesystem: FilesystemConfigSchema.parse(fieldOf(policy, "filesystem")),
-		allowPty: fieldOf(policy, "allowPty") === true,
-		enableWeakerNetworkIsolation: true
+		runtimeConfig: {
+			network: openNetworkOf(policy),
+			filesystem,
+			allowPty: fieldOf(policy, "allowPty") === true,
+			enableWeakerNetworkIsolation: true,
+			allowAppleEvents: fieldOf(policy, "allowAppleEvents") === true
+		},
+		isAnyTerminalAllowed: fieldOf(policy, "terminalScope") === ANY_TERMINAL_SCOPE
 	};
 }
 function ownTerminalPath() {
@@ -58,8 +72,8 @@ function ownTerminalPath() {
 	if (ownName === void 0) throw new Error("the launcher terminal is not a pseudo-terminal under /dev");
 	return path.join(DEVICE_FOLDER, ownName);
 }
-function sandboxArgv(argv, policy) {
-	if (policy.allowPty !== true || process.platform !== "darwin") return argv;
+function sandboxArgv(argv, { runtimeConfig, isAnyTerminalAllowed }) {
+	if (runtimeConfig.allowPty !== true || isAnyTerminalAllowed || process.platform !== "darwin") return argv;
 	const confinement = confineToOwnTerminal(argv, ownTerminalPath());
 	if (!confinement.ok) throw new Error(confinement.reason);
 	return confinement.argv;
@@ -89,7 +103,7 @@ async function launchInOpenNetworkSandbox() {
 	const exitWhenInterrupted = () => {
 		if (beforeSpawn.interruptedBy !== null) process.exit(exitCodeFor(null, beforeSpawn.interruptedBy));
 	};
-	await SandboxManager.initialize(openPolicy);
+	await SandboxManager.initialize(openPolicy.runtimeConfig);
 	const commandLine = command.map(shellQuote).join(" ");
 	const wrapped = await SandboxManager.wrapWithSandboxArgv(commandLine, void 0, void 0, interrupted.signal).catch((wrapFailure) => {
 		exitWhenInterrupted();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "glimmervoid",
-  "version": "0.34.0",
+  "version": "0.34.1",
   "description": "Mission control for coding agents: run and supervise Claude Code, Codex and Grok sessions in parallel git worktrees from one local browser dashboard",
   "main": "dist/server/index.js",
   "type": "module",

package/dist/chunks/config-store-BmdXeUz1.js

@@ -1,2 +0,0 @@
-import { c as loadConfigFile } from "./config-store-CggAQLUB.js";
-export { loadConfigFile };