ledge-server 0.1.0 → 0.1.1

package/lib/serve.js

@@ -659,7 +659,7 @@ function tagRefsOf(text) {
 }
 
 // src/bun/notes.ts
-import { basename as basename2, dirname as dirname3, join as join5, relative as relative2, resolve as resolve3, sep as sep3 } from "path";
+import { basename as basename3, dirname as dirname3, join as join5, relative as relative2, resolve as resolve3, sep as sep3 } from "path";
 import { mkdir as mkdir3, open, readdir as readdir3, readFile as readFile5, rename as rename4, rmdir as rmdir2, stat as stat2, unlink as unlink4, writeFile as writeFile4 } from "fs/promises";
 
 // src/shared/rpc-schema.ts
@@ -1515,7 +1515,7 @@ function stripLockedLine(text) {
 }
 
 // src/bun/assets.ts
-import { dirname as dirname2, join as join4, relative, resolve as resolve2, extname, sep as sep2 } from "path";
+import { basename as basename2, dirname as dirname2, join as join4, relative, resolve as resolve2, extname, sep as sep2 } from "path";
 import { mkdir as mkdir2, readdir as readdir2, readFile as readFile4, rename as rename3, unlink as unlink3, writeFile as writeFile3 } from "fs/promises";
 function assetsDirOf(root) {
   return join4(resolve2(root), ASSETS_DIRNAME);
@@ -1603,6 +1603,19 @@ async function savePastedImage(root, bytes, ext = ".png", seal = false, from) {
   await writeAsset(assetsDir, join4(assetsDir, name), seal ? sealAssetBytes(bytes) : bytes);
   return assetRefFor(root, join4(assetsDir, name), from);
 }
+async function copyAssetInto(root, src) {
+  const bytes = await readFile4(src).catch(() => null);
+  if (bytes === null)
+    return null;
+  const assetsDir = assetsDirOf(assertWritableRoot(assertRegisteredRoot(root)));
+  await mkdir2(assetsDir, { recursive: true });
+  const taken = new Set(await readdir2(assetsDir));
+  const ext = extname(src);
+  const name = uniqueName(basename2(src, ext), taken, ext);
+  const path = join4(assetsDir, name);
+  await writeAsset(assetsDir, path, bytes);
+  return path;
+}
 async function replaceAssetBytes(path, bytes) {
   await writeAsset(dirname2(path), path, bytes);
 }
@@ -1897,7 +1910,7 @@ async function writeNote(path, text, baseMtimeMs = null) {
     }
   }
   tmpCounter4 += 1;
-  const tmp = join5(dir, `.${basename2(path)}.tmp-${process.pid}-${tmpCounter4}`);
+  const tmp = join5(dir, `.${basename3(path)}.tmp-${process.pid}-${tmpCounter4}`);
   try {
     await writeFile4(tmp, outgoing, "utf8");
     const mtimeMs = (await stat2(tmp)).mtimeMs;
@@ -2180,7 +2193,7 @@ async function writeSealed(path, outgoing, baseMtimeMs) {
       console.warn("[vault] concurrent edit preserved in trash during a lock state change:", moved);
   }
   tmpCounter4 += 1;
-  const tmp = join5(dir, `.${basename2(path)}.tmp-${process.pid}-${tmpCounter4}`);
+  const tmp = join5(dir, `.${basename3(path)}.tmp-${process.pid}-${tmpCounter4}`);
   try {
     await writeFile4(tmp, outgoing, "utf8");
     await rename4(tmp, path);
@@ -2215,13 +2228,14 @@ async function createNote(root, text, folder) {
   }
   return metaFor(path, text);
 }
-async function moveNote(path, folder) {
+async function moveNote(path, folder, toRoot) {
   const root = assertWritableRoot(assertNote(path));
+  const dest = toRoot == null ? root : assertWritableRoot(assertRegisteredRoot(toRoot));
   const from = resolve3(path);
   if (isInside(trashDirOf(root), from)) {
     throw new Error("that note is in the trash \u2014 restore it first, then move it");
   }
-  const dir = await ensureFolder(root, folder);
+  const dir = await ensureFolder(dest, folder);
   if (dirname3(from) === dir)
     return metaAt(from);
   const file = await readNote(from);
@@ -2239,15 +2253,58 @@ async function moveNote(path, folder) {
   const target = join5(dir, name);
   try {
     assertNote(target);
-    await rename4(from, target);
-    const rebased = rebaseAssetRefs(file.text, root, from, target);
+    const rebased = dest === root ? rebaseAssetRefs(file.text, root, from, target) : await carryAssetRefs(file.text, root, from, dest, target);
+    let baseMtimeMs = file.mtimeMs;
+    try {
+      await rename4(from, target);
+    } catch (err) {
+      if (err.code !== "EXDEV")
+        throw err;
+      await carryAcrossVolumes(from, target);
+      baseMtimeMs = null;
+    }
     if (rebased !== file.text)
-      await writeNote(target, rebased, file.mtimeMs);
+      await writeNote(target, rebased, baseMtimeMs);
   } finally {
     reserved.delete(name);
   }
   return metaAt(target);
 }
+async function carryAcrossVolumes(from, target) {
+  const bytes = await readFile5(from);
+  tmpCounter4 += 1;
+  const tmp = join5(dirname3(target), `.${basename3(target)}.tmp-${process.pid}-${tmpCounter4}`);
+  try {
+    await writeFile4(tmp, bytes);
+    await rename4(tmp, target);
+  } catch (err) {
+    await unlink4(tmp).catch(() => {});
+    throw err;
+  }
+  try {
+    await deleteNote(from);
+  } catch (err) {
+    throw new Error(`copied the note to ${target} but could not move the original to the trash: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+async function carryAssetRefs(text, root, from, dest, to) {
+  const copies = new Map;
+  for (const { path } of assetRefsOf(text, root, from)) {
+    const copied = await copyAssetInto(dest, path);
+    if (copied !== null)
+      copies.set(path, copied);
+  }
+  return text.replace(IMAGE_REF, (whole, open, ref, close) => {
+    let asset;
+    try {
+      asset = assetPathOf(root, ref, from);
+    } catch {
+      return whole;
+    }
+    const copied = copies.get(asset);
+    return copied === undefined ? whole : `${open}${assetRefFor(dest, copied, to)}${close}`;
+  });
+}
 async function sameEntry(a, b) {
   const [x, y] = await Promise.all([stat2(a).catch(() => null), stat2(b).catch(() => null)]);
   return x !== null && y !== null && x.dev === y.dev && x.ino === y.ino;
@@ -2296,7 +2353,7 @@ async function renameFolder(root, folder, name) {
 async function retitleNote(path, text) {
   assertWritableRoot(assertNote(path));
   const dir = dirname3(path);
-  const current = basename2(path);
+  const current = basename3(path);
   const reserved = reservedIn(dir);
   const taken = new Set(await readdir3(dir));
   taken.delete(current);
@@ -3042,7 +3099,7 @@ function endOfString(text, start) {
 // src/bun/spawnParams.ts
 import { accessSync, constants } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename3, isAbsolute as isAbsolute2, join as join6, resolve as resolve4 } from "path";
+import { basename as basename4, isAbsolute as isAbsolute2, join as join6, resolve as resolve4 } from "path";
 
 // src/shared/dotenv.ts
 function parseDotenv(text) {
@@ -3115,7 +3172,7 @@ var SHELL_FALLBACKS = [
   "/usr/local/bin/bash"
 ];
 function isSupportedShell(path) {
-  return SUPPORTED_SHELLS.includes(basename3(path));
+  return SUPPORTED_SHELLS.includes(basename4(path));
 }
 function resolveShellPath(loginShell, isExecutable) {
   if (loginShell && isAbsolute2(loginShell) && isSupportedShell(loginShell) && isExecutable(loginShell)) {
@@ -3149,7 +3206,7 @@ function defaultShellPath() {
   return resolveShellPath(process.env["SHELL"], isExecutableFile);
 }
 function resolveShellArgs(path, args) {
-  if (basename3(path) !== "zsh")
+  if (basename4(path) !== "zsh")
     return args;
   if (args.some((a) => a.toLowerCase().replace(/_/g, "") === "interactivecomments"))
     return args;
@@ -3191,6 +3248,12 @@ function mergeDotenv(env, path, label, deps) {
     deps.warn(`${label}: ${p}`);
   Object.assign(env, vars);
 }
+function spawnKeyOf(params, host = LOCAL_HOST) {
+  const env = Object.keys(params?.env ?? {}).sort().map((key) => [key, params.env[key]]);
+  if (host !== LOCAL_HOST)
+    return JSON.stringify([env, params?.cwd ?? null]);
+  return JSON.stringify([env, params?.cwd ?? null, params?.profile ?? null, params?.envFile ?? null]);
+}
 
 // src/bun/settings.ts
 var SETTINGS_PATH = join7(APP_HOME, "settings.jsonc");
@@ -4232,8 +4295,8 @@ import { join as join16 } from "path";
 
 // src/bun/server.ts
 import { watch as watch2 } from "fs";
-import { homedir as homedir6 } from "os";
-import { basename as basename7, resolve as resolve10 } from "path";
+import { homedir as homedir7 } from "os";
+import { basename as basename8, resolve as resolve10 } from "path";
 
 // src/bun/pty.ts
 import { dlopen, ptr, CString, cc } from "bun:ffi";
@@ -4823,11 +4886,11 @@ class InlinePool {
     }
     let slot = session.primaries.get(host);
     if (!slot) {
-      slot = this.newSlot(sessionId, host);
+      slot = this.newSlot(sessionId, host, true);
       session.primaries.set(host, slot);
     }
     if (slot.activeRun !== null) {
-      slot = this.newSlot(sessionId, host);
+      slot = this.newSlot(sessionId, host, false);
       session.overflow.set(id, slot);
     }
     slot.activeRun = id;
@@ -4957,6 +5020,16 @@ class InlinePool {
         this.pendingResize.delete(id);
     }
   }
+  primaryHosts(sessionId) {
+    const session = this.sessions.get(sessionId);
+    if (!session)
+      return [];
+    const out = [];
+    for (const [host, slot] of session.primaries)
+      if (!slot.shell.exited)
+        out.push(host);
+    return out;
+  }
   closeSession(sessionId) {
     const session = this.sessions.get(sessionId);
     if (session) {
@@ -5015,8 +5088,8 @@ class InlinePool {
     if (out.length > 0)
       emit({ type: "output", blockId: slot.activeRun, data: out }, slot.client);
   }
-  newSlot(sessionId, host) {
-    const shell = this.spawn(sessionId, host);
+  newSlot(sessionId, host, persistent) {
+    const shell = this.spawn(sessionId, host, persistent);
     return {
       shell,
       parser: new MarkerParser(this.nonce),
@@ -5188,7 +5261,7 @@ var WELCOME_DOC = [
 `);
 
 // src/bun/docs.ts
-import { basename as basename5, join as join13, resolve as resolve9 } from "path";
+import { basename as basename6, join as join13, resolve as resolve9 } from "path";
 import { mkdir as mkdir5, readdir as readdir4, readFile as readFile9, rename as rename8, unlink as unlink7, writeFile as writeFile8 } from "fs/promises";
 
 // docs/user/01-getting-started.md
@@ -5404,7 +5477,7 @@ The terminal drawer is a separate shell from the inline one. Both belong to this
 
 Comments mean the same thing on both chords. A \`#\` line inside a shell block is a comment whether you run the block inline or send it to the drawer, so you can annotate a block without breaking it.
 
-Frontmatter applies to newly spawned shells, so after editing it run "Restart Note Shell" from the palette. It kills the note's shells and lets them respawn. Use the same command when an experiment leaves a shell in a strange state.
+Frontmatter applies to newly spawned shells, so editing \`cwd:\` leaves a running shell where it was. The block grows a **Restart Note Shell** button when that happens, and pressing it lets the shells respawn with what the note now says. The same command is in the palette and the Note menu, for when an experiment leaves a shell in a strange state. [[Frontmatter and Environments]] has the detail.
 
 ## Change the shell
 
@@ -5419,6 +5492,8 @@ Ledge spawns your own login shell with \`-i\` for every inline shell and every t
 
 Relaunch to apply. Keep an interactive flag in \`args\`, usually \`-i\`, so your rc files run and blocks get the aliases and PATH you expect.
 
+Ledge also reads your login profile (\`~/.zprofile\`, \`~/.bash_profile\` or \`~/.profile\`) once at launch, so a PATH set there, such as Homebrew's, reaches every block even when you open Ledge from the Dock. Relaunch Ledge after editing your profile.
+
 zsh and bash are the two shells Ledge can read block output from. It marks where a block's output starts and stops with a hook that only those two provide. Any other shell runs the terminal drawer normally, and its inline runs show no output and no exit code. Ledge warns about that in the launch log rather than overriding what you set.
 
 A shell that is not installed refuses the run and names the path it could not find. Nothing quietly falls back to a different shell, because a different shell is not the one you asked for.
@@ -5581,6 +5656,16 @@ A locked note has to be unlocked before it can move, because those image referen
 
 Two notes in different folders may share a title. Ledge shows the folder beside the title wherever the list is flat: quick-open, full text search, backlinks, and tag results.
 
+## Moving a note to another workspace
+
+Choose "Move to Workspace\u2026" from the note's right-click menu or the command palette, or drag its row onto a workspace in the strip above the list.
+The note lands at the top level of that workspace, under the name it had, and any tab you have open on it goes along.
+Its images go with it: Ledge copies them into the other workspace's own image folder and rewrites the note's references, so the pictures still show. The copies in the workspace you left stay there, in case another note there shows the same picture.
+Wikilinks are the one thing that does not travel. \`[[Title]]\` finds a note in its own workspace, so notes here that linked to the moved note will stop finding it, and the strip at the bottom of the sidebar says how many that is. "Undo" there moves the note straight back.
+A locked note moves with its vault open and is refused with it shut, as with moving between folders ([[Note Locking]]).
+Folders do not move between workspaces; move their notes one at a time.
+The two workspaces are on the same machine, since a window shows one machine's notes at a time ([[Keep Notes on a Remote Server]]). If they are on different disks, the original is put in the old workspace's Trash rather than deleted, and the copy in the new workspace is the note from then on.
+
 ## Favorites
 
 A favorite note sits in a Favorites section at the top of the sidebar, above the tree, however deep in a folder it actually lives.
@@ -5942,7 +6027,13 @@ Three keys feed the environment, layered in this order, with later layers overri
 
 Frontmatter is read when a shell spawns, and a note's running shells keep the settings they started with.
 
-After editing the block, run "Restart Note Shell" from the command palette (\u21E7\u2318P). It kills the note's shells, and the next run or drawer visit respawns them with the current frontmatter. Use the same command when an experiment leaves a shell in a strange state.
+So editing \`cwd:\` does not move a shell that is already running. A block that printed one directory keeps printing it until the note's shells are replaced.
+
+The block says when that has happened. Edit a key that feeds a shell while the note has one running, and a **Restart Note Shell** button appears at the end of the block. Pressing it kills the note's shells; the next run or drawer visit spawns them with the frontmatter as it now reads.
+
+The same command is in the palette (\u21E7\u2318P) and the Note menu. Use it when an experiment leaves a shell in a strange state, too.
+
+The button is about the four keys a shell is spawned with: \`cwd\`, \`profile\`, \`envFile\`, and \`env\`. The rest of the block applies as you type it, so tagging or favoriting a note never raises it. Typing the old value back takes it down again, and so does the shell exiting on its own.
 
 ## Every key
 
@@ -5961,7 +6052,7 @@ After editing the block, run "Restart Note Shell" from the command palette (\u21
 `;
 
 // docs/user/07-profiles-and-secrets.md
-var _07_profiles_and_secrets_default = "# Profiles and Secrets\n\nA profile is a named file of environment variables that lives outside your notes folder and is injected into the shells of any note that names it.\n\nUse one for secrets. Notes get synced, backed up, shared, and read by agents, so an API key written in an `env:` line travels everywhere the note does. With a profile, the note carries only a name.\n\n## Declare a profile\n\nAdd one line of frontmatter (see [[Frontmatter and Environments]] for the block itself):\n\n```\n---\nprofile: deploy\n---\n```\n\nProfile names may contain letters, digits, `-`, and `_`. The name resolves to a file under `~/.config/ledge/profiles/` on the machine holding the notes, here `deploy.env`, created for you the first time you open it for editing.\n\nA note names at most one profile, and any number of notes can share one. Every deploy-related note can say `profile: deploy` and pick up the same credentials.\n\nOne name is taken. `backup` is the profile `ledge backup setup` writes, holding the backup repository and its credentials ([[Keep Notes on a Remote Server]]). A note that says `profile: backup` runs with those variables, which is how a note runs restic by hand.\n\n## Edit a profile\n\nClick the profile name in the frontmatter block, or run \"Edit Note Profile\u2026\" from the command palette. The command appears whenever the current note names a profile.\n\nOn a touch device the palette command is the whole of it. The small key button beside the name is a pointer control and is not drawn there, and the command asks for nothing to be pointed at: it follows the note you are in.\n\nEither way you get Ledge's profile editor: KEY=value rows with the values masked.\n\nOn disk the profile is a plain dotenv file: `KEY=value` per line, `#` comments, and an optional `export ` prefix. Ledge creates it readable only by you. Hand edits and editor edits coexist, and saves from the editor preserve your comments.\n\n```\n# deploy.env\nAPI_TOKEN=abc123\nDEPLOY_REGION=eu-west-1\n```\n\n## How profiles layer\n\nProfile variables merge into the shell environment at spawn, above the note's `envFile` and below its inline `env:` lines. An `env:` line can therefore override a profile value for one note without editing the shared file.\n\nA `profile:` line naming a file that does not exist is skipped, and the shell spawns without it.\n\nA profile edit applies to newly spawned shells, like every frontmatter change. Run \"Restart Note Shell\" after changing one.\n\n## Profiles stay with the notes\n\nA profile lives on the machine that holds the notes and runs their blocks. With your notes on this Mac, that is this Mac. With your notes on a server, the file is on the server, \"Edit Note Profile\u2026\" edits it there, and the values never come to this app. [[Keep Notes on a Remote Server]] has the table of what lives where.\n\nWhen a note runs its blocks on a remote host over ssh, Ledge does not send the profile ([[Run Code on Remote Hosts]]). A secret passed on a remote command line would be visible in that machine's process table to anyone who can list processes. If a remote run needs credentials, put them on the remote machine.\n";
+var _07_profiles_and_secrets_default = "# Profiles and Secrets\n\nA profile is a named file of environment variables that lives outside your notes folder and is injected into the shells of any note that names it.\n\nUse one for secrets. Notes get synced, backed up, shared, and read by agents, so an API key written in an `env:` line travels everywhere the note does. With a profile, the note carries only a name.\n\n## Declare a profile\n\nAdd one line of frontmatter (see [[Frontmatter and Environments]] for the block itself):\n\n```\n---\nprofile: deploy\n---\n```\n\nProfile names may contain letters, digits, `-`, and `_`. The name resolves to a file under `~/.config/ledge/profiles/` on the machine holding the notes, here `deploy.env`, created for you the first time you open it for editing.\n\nA note names at most one profile, and any number of notes can share one. Every deploy-related note can say `profile: deploy` and pick up the same credentials.\n\nOne name is taken. `backup` is the profile `ledge backup setup` writes, holding the backup repository and its credentials ([[Keep Notes on a Remote Server]]). A note that says `profile: backup` runs with those variables, which is how a note runs restic by hand.\n\n## Edit a profile\n\nClick the profile name in the frontmatter block, or run \"Edit Note Profile\u2026\" from the command palette. The command appears whenever the current note names a profile.\n\nOn a touch device the palette command is the whole of it. The small key button beside the name is a pointer control and is not drawn there, and the command asks for nothing to be pointed at: it follows the note you are in.\n\nEither way you get Ledge's profile editor: KEY=value rows with the values masked.\n\nOn disk the profile is a plain dotenv file: `KEY=value` per line, `#` comments, and an optional `export ` prefix. Ledge creates it readable only by you. Hand edits and editor edits coexist, and saves from the editor preserve your comments.\n\n```\n# deploy.env\nAPI_TOKEN=abc123\nDEPLOY_REGION=eu-west-1\n```\n\n## How profiles layer\n\nProfile variables merge into the shell environment at spawn, above the note's `envFile` and below its inline `env:` lines. An `env:` line can therefore override a profile value for one note without editing the shared file.\n\nA `profile:` line naming a file that does not exist is skipped, and the shell spawns without it.\n\nA profile edit applies to newly spawned shells, like every frontmatter change. Changing which profile a note names raises the block's **Restart Note Shell** button; editing the values inside a profile file does not, so run the command yourself after that.\n\n## Profiles stay with the notes\n\nA profile lives on the machine that holds the notes and runs their blocks. With your notes on this Mac, that is this Mac. With your notes on a server, the file is on the server, \"Edit Note Profile\u2026\" edits it there, and the values never come to this app. [[Keep Notes on a Remote Server]] has the table of what lives where.\n\nWhen a note runs its blocks on a remote host over ssh, Ledge does not send the profile ([[Run Code on Remote Hosts]]). A secret passed on a remote command line would be visible in that machine's process table to anyone who can list processes. If a remote run needs credentials, put them on the remote machine.\n";
 
 // docs/user/08-run-code-on-remote-hosts.md
 var _08_run_code_on_remote_hosts_default = `# Run Code on Remote Hosts
@@ -9636,7 +9727,7 @@ var RETIRED_DIRNAME = ".retired";
 var tmpCounter5 = 0;
 async function writePage(path, text) {
   tmpCounter5 += 1;
-  const tmp = join13(resolve9(DOCS_ROOT), `.${basename5(path)}.tmp-${process.pid}-${tmpCounter5}`);
+  const tmp = join13(resolve9(DOCS_ROOT), `.${basename6(path)}.tmp-${process.pid}-${tmpCounter5}`);
   try {
     await writeFile8(tmp, text, "utf8");
     await rename8(tmp, path);
@@ -9687,7 +9778,7 @@ async function syncDocs(pages = DOC_PAGES) {
 }
 
 // src/bun/layout.ts
-import { basename as basename6, join as join14 } from "path";
+import { basename as basename7, join as join14 } from "path";
 import { readFile as readFile10, rename as rename9, unlink as unlink8, writeFile as writeFile9 } from "fs/promises";
 var LAYOUT_PATH = join14(APP_HOME, ".layout.json");
 var ANONYMOUS = "_";
@@ -9717,7 +9808,7 @@ async function writeLayout(client, text) {
   const next = { ...base, [key(client)]: value };
   await ensureAppHome();
   tmpCounter6 += 1;
-  const tmp = join14(APP_HOME, `.${basename6(LAYOUT_PATH)}.tmp-${process.pid}-${tmpCounter6}`);
+  const tmp = join14(APP_HOME, `.${basename7(LAYOUT_PATH)}.tmp-${process.pid}-${tmpCounter6}`);
   try {
     await writeFile9(tmp, JSON.stringify(next), "utf8");
     await rename9(tmp, LAYOUT_PATH);
@@ -9986,6 +10077,97 @@ function remoteCd(cwd) {
   return `cd -- ${target} 2>/dev/null || printf 'ledge: cwd %s not found here; starting in %s\\n' ${shellQuote(cwd)} "$PWD"`;
 }
 
+// src/bun/loginEnv.ts
+import { homedir as homedir6 } from "os";
+var LOGIN_ENV_TIMEOUT_MS = 5000;
+var RESOLVING_VAR = "LEDGE_RESOLVING_ENVIRONMENT";
+var DROPPED = new Set(["PWD", "OLDPWD", "SHLVL", "_", RESOLVING_VAR]);
+function envCommand(nonce) {
+  return `printf '%s' '${nonce}<'; /usr/bin/env -0; printf '%s' '>${nonce}'`;
+}
+function parseEnvOutput(output, nonce) {
+  const start = output.indexOf(`${nonce}<`);
+  if (start < 0)
+    return null;
+  const from = start + nonce.length + 1;
+  const end = output.lastIndexOf(`>${nonce}`);
+  if (end < from)
+    return null;
+  const env = {};
+  for (const entry of output.slice(from, end).split("\x00")) {
+    const eq = entry.indexOf("=");
+    if (eq > 0)
+      env[entry.slice(0, eq)] = entry.slice(eq + 1);
+  }
+  return env;
+}
+function cleanLoginEnv(env) {
+  const out = {};
+  for (const [key, value] of Object.entries(env)) {
+    if (!DROPPED.has(key))
+      out[key] = value;
+  }
+  if (out["PATH"] !== undefined)
+    out["PATH"] = dedupePath(out["PATH"]);
+  return out;
+}
+function dedupePath(path) {
+  const seen = new Set;
+  return path.split(":").filter((dir) => {
+    if (dir === "" || seen.has(dir))
+      return false;
+    seen.add(dir);
+    return true;
+  }).join(":");
+}
+async function resolveLoginEnv(shellPath, base, opts = {}) {
+  const fallback = definedOnly(base);
+  if (opts.skip ?? Boolean(process.env["LEDGE_SKIP_LOGIN_ENV"]))
+    return fallback;
+  const warn = opts.warn ?? ((msg) => console.warn("[loginEnv]", msg));
+  const timeoutMs = opts.timeoutMs ?? LOGIN_ENV_TIMEOUT_MS;
+  const nonce = `ledge-env-${crypto.randomUUID()}`;
+  let proc;
+  try {
+    proc = Bun.spawn({
+      cmd: [shellPath, "-l", "-c", envCommand(nonce)],
+      env: { ...fallback, [RESOLVING_VAR]: "1" },
+      cwd: opts.cwd ?? homedir6(),
+      stdin: "ignore",
+      stdout: "pipe",
+      stderr: "ignore"
+    });
+  } catch (err) {
+    warn(`could not start ${shellPath} to read the login environment (${err}); using the app's own`);
+    return fallback;
+  }
+  let timer;
+  const timedOut = new Promise((resolve) => {
+    timer = setTimeout(() => resolve(null), timeoutMs);
+  });
+  const output = await Promise.race([new Response(proc.stdout).text(), timedOut]);
+  clearTimeout(timer);
+  if (output === null) {
+    proc.kill("SIGKILL");
+    warn(`${shellPath} -l took over ${timeoutMs} ms to start; using the app's own environment`);
+    return fallback;
+  }
+  const env = parseEnvOutput(output, nonce);
+  if (!env) {
+    warn(`${shellPath} -l printed no environment; using the app's own`);
+    return fallback;
+  }
+  return cleanLoginEnv(env);
+}
+function definedOnly(env) {
+  const out = {};
+  for (const [key, value] of Object.entries(env)) {
+    if (value !== undefined)
+      out[key] = value;
+  }
+  return out;
+}
+
 // src/bun/server.ts
 import { readFileSync, statSync as statSync2 } from "fs";
 function holdRunEvent(held, ev, cap) {
@@ -10059,6 +10241,7 @@ var fromB64 = (b64) => new Uint8Array(Buffer.from(b64, "base64"));
 async function createServer(deps) {
   const { push } = deps;
   const settings = await loadSettings();
+  const loginEnv = resolveLoginEnv(settings.shell.path, process.env);
   await loadWorkspaces();
   const first = await ensureDefault();
   if (first) {
@@ -10066,8 +10249,10 @@ async function createServer(deps) {
   }
   await syncDocs();
   await loadVault();
-  const shellEnv = { ...process.env, TERM: "xterm-256color" };
+  const shellEnv = { ...await loginEnv, TERM: "xterm-256color" };
   const sessionParams = new Map;
+  const spawnKeys = new Map;
+  const sentStale = new Map;
   const sessionFacts = new Map;
   const spawnDeps = {
     readFile: (path) => {
@@ -10098,14 +10283,23 @@ async function createServer(deps) {
     }
     return requested;
   }
-  function spawnShell(sessionId, host, kind) {
+  function spawnShell(sessionId, host, kind, persistent = true) {
+    if (persistent) {
+      const born = spawnKeys.get(sessionId) ?? new Map;
+      born.set(kind === "terminal" ? "terminal" : `inline:${host}`, {
+        host,
+        key: spawnKeyOf(sessionParams.get(sessionId), host)
+      });
+      spawnKeys.set(sessionId, born);
+      queueMicrotask(() => refreshStale(sessionId));
+    }
     if (host !== LOCAL_HOST) {
       const remote = buildRemoteSpawn(host, kind, sessionParams.get(sessionId), (msg) => console.warn("[session]", msg));
       return new PtyProcess({
         executable: remote.executable,
         args: remote.args,
         env: shellEnv,
-        cwd: homedir6(),
+        cwd: homedir7(),
         interruptViaChar: true
       });
     }
@@ -10121,7 +10315,7 @@ async function createServer(deps) {
       cwd
     });
   }
-  const inlinePool = new InlinePool((sessionId, host) => spawnShell(sessionId, host, "inline"), NONCE);
+  const inlinePool = new InlinePool((sessionId, host, persistent) => spawnShell(sessionId, host, "inline", persistent), NONCE);
   const terms = new Map;
   let nextTermRunId = 1;
   function termFor(sessionId, requestedHost) {
@@ -10146,6 +10340,28 @@ async function createServer(deps) {
     }
     return t;
   }
+  function staleFor(sessionId) {
+    const born = spawnKeys.get(sessionId);
+    if (!born)
+      return false;
+    const params = sessionParams.get(sessionId);
+    const live = inlinePool.primaryHosts(sessionId).map((host) => `inline:${host}`);
+    if (terms.get(sessionId)?.term.exited === false)
+      live.push("terminal");
+    for (const at of live) {
+      const was = born.get(at);
+      if (was && was.key !== spawnKeyOf(params, was.host))
+        return true;
+    }
+    return false;
+  }
+  function refreshStale(sessionId) {
+    const stale = staleFor(sessionId);
+    if (stale === (sentStale.get(sessionId) ?? false))
+      return;
+    sentStale.set(sessionId, stale);
+    push.all.sessionStale({ sessionId, stale });
+  }
   function flushPaste(t, now = Date.now()) {
     const out = takePaste(t, now);
     if (out !== null)
@@ -10182,6 +10398,8 @@ async function createServer(deps) {
     terms.delete(sessionId);
     sessionParams.delete(sessionId);
     sessionFacts.delete(sessionId);
+    spawnKeys.delete(sessionId);
+    sentStale.delete(sessionId);
   }
   function refreshWatchers() {
     syncWatchers(availableRoots(), (root) => push.all.notesChanged({ root }));
@@ -10192,7 +10410,7 @@ async function createServer(deps) {
       return;
     openRequestWatcherStarted = true;
     try {
-      const requestName = basename7(OPEN_REQUEST_PATH);
+      const requestName = basename8(OPEN_REQUEST_PATH);
       watch2(APP_HOME, (_event, filename) => {
         if (filename !== requestName)
           return;
@@ -10256,6 +10474,7 @@ async function createServer(deps) {
     "noteFromTemplate",
     "noteLock",
     "noteMove",
+    "noteMoveToWorkspace",
     "noteRemoveLock",
     "noteRetitle",
     "noteStash",
@@ -10337,6 +10556,12 @@ async function createServer(deps) {
       await refuseLockedFrom(device, path);
       return { note: await moveNote(path, folder) };
     },
+    noteMoveToWorkspace: async ({ path, root }) => {
+      await refuseLockedFrom(device, path);
+      const crossing = root !== rootContaining(path);
+      const backlinks = crossing ? new Set((await backlinksTo(path)).backlinks.map((b) => b.path)).size : 0;
+      return { note: await moveNote(path, null, root), backlinks };
+    },
     folderRename: ({ root, folder, name }) => renameFolder(root, folder, name),
     folderDelete: ({ root, folder }) => deleteFolder(root, folder),
     noteRetitle: async ({ path, text }) => ({ note: await retitleNote(path, text) }),
@@ -10514,10 +10739,13 @@ async function createServer(deps) {
         sessionFacts.set(sessionId, { note: resolve10(notePath), workspace: root });
       else
         sessionFacts.delete(sessionId);
+      refreshStale(sessionId);
       return { ok: true };
     },
     sessionRestart: ({ sessionId }) => {
       inlinePool.restartSession(sessionId, sendRunEvent);
+      spawnKeys.delete(sessionId);
+      refreshStale(sessionId);
       wake();
       const t = terms.get(sessionId);
       if (t) {
@@ -10627,6 +10855,9 @@ async function createServer(deps) {
         terms.delete(sessionId);
       }
     }
+    for (const [sessionId, stale] of sentStale)
+      if (stale)
+        refreshStale(sessionId);
     if (awake)
       lastBusyAt = now;
     pace(now - lastBusyAt < DRAIN_SETTLE_MS ? DRAIN_FAST_MS : DRAIN_IDLE_MS);
@@ -10685,6 +10916,7 @@ var REQUEST_METHODS = [
   "noteWrite",
   "noteCreate",
   "noteMove",
+  "noteMoveToWorkspace",
   "folderRename",
   "folderDelete",
   "noteRetitle",
@@ -10766,6 +10998,7 @@ var PUSH_MESSAGES = [
   "terminalBusy",
   "terminalExit",
   "terminalDetached",
+  "sessionStale",
   "presence",
   "notesChanged",
   "openExternal",
@@ -11531,7 +11764,7 @@ function createOpLog(opts) {
 }
 
 // src/shared/version.ts
-var BUILD_VERSION = "0.1.0";
+var BUILD_VERSION = "0.1.1";
 
 // src/bun/daemon.ts
 var SOCKET_PATH = join16(APP_HOME, ".server.sock");
@@ -11794,7 +12027,7 @@ function daemonPid(pidPath = PID_PATH) {
 
 // src/bun/backupCli.ts
 import { randomBytes as randomBytes2 } from "crypto";
-import { homedir as homedir7 } from "os";
+import { homedir as homedir8 } from "os";
 import { join as join19 } from "path";
 
 // src/bun/ask.ts
@@ -12699,7 +12932,7 @@ async function restore(args) {
   const to = valueOf(args, "--to");
   if (inPlace && to)
     return usage("--in-place restores to the original paths; --to names another folder. One or the other.");
-  const target = inPlace ? "/" : to ?? join19(homedir7(), `ledge-restore-${stamp(new Date)}`);
+  const target = inPlace ? "/" : to ?? join19(homedir8(), `ledge-restore-${stamp(new Date)}`);
   const include = args.filter((a, i) => !a.startsWith("--") && args[i - 1] !== "--snapshot" && args[i - 1] !== "--to");
   if (inPlace && daemonRunning()) {
     say(`This machine's Ledge server is running, and an in-place restore writes under it. Quit Ledge, or stop the daemon (kill $(cat ${PID_PATH})), and run this again.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ledge-server",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "The Ledge server: your notes and shells on another machine, reached over ssh.",
   "license": "Apache-2.0",
   "type": "module",