mulmoterminal 4.5.0 → 4.6.0

package/README.md

@@ -227,6 +227,7 @@ Needs **Node ≥ 22.9**, plus these CLIs on your `PATH`:
 | Optional | `codex` | [Codex sessions](#agents-claude--codex) in a cell, alongside Claude | `npm i -g @openai/codex` |
 | Optional | `ffmpeg` | video rendering from the [mulmo-script panel](#wiki-collections--the-gui-panel) (its plugin ships enabled) | `brew install ffmpeg` · `sudo apt install ffmpeg` · `sudo dnf install ffmpeg` |
 | Optional | `ollama` | [`claude-ollama`](https://receptron.github.io/mulmoterminal/guide/en/claude-ollama.html) — Claude Code against a fully local model | [ollama.com/download](https://ollama.com/download) |
+| Linux only | a file dialog | the **Choose a folder / Insert a file path** buttons, which open an OS dialog on the machine the server runs on. macOS and Windows have one built in; **WSL** uses the Windows one over interop and needs nothing installed. A Linux desktop needs one of these — without any, the buttons say so and you type the path instead (#1447) | `sudo apt install zenity` · `sudo dnf install zenity` · `kdialog`, `qarma` and `yad` also work |
 
 The server starts without any of the non-required rows; you just lose that row's feature,
 and the header/panel for it says so. `git` and `gh` are marked required because losing them
@@ -1142,6 +1143,33 @@ Each grid cell's header shows two badges for its session, refreshed when a turn
 - **Token badge** — `⇡<in> ⇣<out>`: cumulative input (fresh + cache-read + cache-creation)
   and output tokens for the session, k/M-formatted, with a full breakdown in the tooltip.
 
+**Both badges are read from the agent's own log**, so what each agent can show differs by
+what it writes down (`?agent=` on the route picks the reader):
+
+| Agent | Context badge | Token badge |
+|---|---|---|
+| **Claude** | `Opus · ctx 35%` — window from the table above | full |
+| **Codex** | `gpt-5.5 · ctx 21%` — window from codex's own `model_context_window`, so no table to be out of date | full |
+| **Grok** | `grok-4.5 · ctx 33%` — window from grok's own `contextWindowTokens`, so no table either | full |
+| **Antigravity** | `Gemini 3.6 Flash · ctx 78%` — the model from the first step of the conversation's transcript, the reading from agy's own per-generation accounting (a real 256k window, not a table) | full |
+
+The token badge hides itself when nothing has been counted, and the context badge shows
+the model alone unless it has **both** a *current-context* token count from the agent and a
+context window — agent-reported (codex, Grok, Antigravity) or resolved from the built-in table
+above (Claude, provider models). Either one missing means a name and no percentage. The two
+badges are independent: an Antigravity session whose accounting cannot be read still shows
+its model, and one whose cumulative totals are zero still shows a percentage. The context badge is absent
+entirely until an agent has named a model: codex and Antigravity file their logs under an id
+the agent mints *after* the session starts, so a brand-new cell shows no model badge until it
+has been prompted once — a few seconds, not the rest of the session.
+
+Antigravity's numbers are the one case read from a store with **no published format**: agy keeps
+its per-generation accounting as protobuf in `~/.gemini/antigravity-cli/conversations/<id>.db`,
+with no schema on disk, so the fields are identified by measurement (see
+`server/agents/antigravity-usage.ts`). Every layer of that reader is built to answer *nothing*
+rather than a number it is unsure of, so if a future agy release moves those fields, an
+Antigravity cell falls back to showing its model alone — it will not show a wrong percentage.
+
 The **Settings** modal (⚙) shows an **estimated $ cost** — Session / Today / Month — from
 `GET /api/cost`, using a built-in public per-model price table (cache reads billed at
 0.1×, cache writes at 1.25× input). It's an estimate: real billing differs, **flat-plan
@@ -1369,7 +1397,7 @@ quietly answering about the **default workspace** (#1151):
 | --- | --- |
 | `/ws`, `/ws/codex`, `/ws/antigravity`, `/ws/grok`, `/ws/launch`, `/ws/run` | The socket is closed with `{ type: "error", message }`, which the terminal shows as a red banner and does not retry. |
 | A session that is still running (`?session=` names a live PTY or a surviving tmux session) | **Attaches anyway**, with a warning in the server log. Moving or renaming a directory must not shut you out of an agent that is still working in it — and the cwd reported back comes from the running PTY, not from the request. |
-| `GET /api/scripts`, `/api/skills`, `/api/dir-config`, `/api/dir-sound`, `/api/git-status`, `/api/pr-phase`, `/api/header`, `/api/sessions`, `/api/codex/sessions`, `/api/antigravity/sessions`, `/api/session/:id`, `/api/transcript/*`, `/api/cost` | `404 { error, cwd }` — a directory that is not there. |
+| `GET /api/scripts`, `/api/skills`, `/api/dir-config`, `/api/dir-sound`, `/api/git-status`, `/api/pr-phase`, `/api/header`, `/api/sessions`, `/api/codex/sessions`, `/api/antigravity/sessions`, `/api/grok/sessions`, `/api/session/:id`, `/api/transcript/*`, `/api/cost` | `404 { error, cwd }` — a directory that is not there. |
 | A `?cwd=` that cannot name a directory at all (relative, or repeated as `?cwd=a&cwd=b`) | `400 { error, cwd }`. |
 
 A request that names **no** directory is unaffected: `CLAUDE_CWD` is then the answer it
@@ -1491,6 +1519,7 @@ same-origin-guarded.
 | `GET /api/session/:id?cwd=` | One session's summary — cumulative `usage` and `context` (model + last-turn context tokens). Backs the cell token & ctx% badges. |
 | `GET /api/codex/sessions?cwd=` | Codex sessions for the project (from `~/.codex` rollouts), newest first. |
 | `GET /api/antigravity/sessions?cwd=` | Antigravity conversations for the project, newest first. agy does record a workspace, but never as a complete conversation-to-workspace map (`cache/last_conversations.json` keeps one conversation per directory and is written at exit; `history.jsonl` carries no conversation id), so the project comes from MulmoTerminal's own `~/.mulmoterminal/antigravity-conversations.jsonl`; agy's transcript supplies the title. |
+| `GET /api/grok/sessions?cwd=` | Grok conversations for the project, newest first. `~/.grok/sessions` is partitioned by working directory (percent-encoded), so this is a directory listing; each conversation's `summary.json` supplies the title and the last-active time, falling back to the directory's `prompt_history.jsonl`. |
 | `GET /api/cost?cwd=&session=` | Estimated $ cost — session / today / month. |
 | `GET /api/transcript/timeline?session=&cwd=` | Per-session activity timeline (tools run). |
 | `GET /api/transcript/last-turn?session=&cwd=&agent=` | A session's last completed exchange (`prompt`, `reply`) plus the `text` to paste into another terminal. `agent=codex` reads the codex rollout instead of the Claude transcript. |
@@ -1541,7 +1570,7 @@ same-origin-guarded.
 | `POST /api/transcribe`(`/model`…) | Voice-input transcription (Whisper, macOS). |
 | `POST /api/translation` | Runtime UI-string translation. |
 | `GET /api/remote-host/status` · `POST /api/remote-host/{connect,disconnect}` | Companion phone-client link. Each response carries the command channel's `health` (`online` / `reconnecting` / `offline`, plus the last listener error), so the toolbar shows a dropped channel instead of the last state it happened to fetch. |
-| `POST /api/open-dir` · `POST /api/pick-file` | Reveal a dir in Finder/Explorer; OS file-picker → path (`{ directory: true }` opens the folder picker — used by the launcher's Working-directory 📁 button). |
+| `POST /api/open-dir` · `POST /api/pick-file` | Reveal a dir in Finder/Explorer; OS file-picker → path (`{ directory: true }` opens the folder picker — used by the launcher's Working-directory 📁 button). Both run on the SERVER's machine, and both answer **500 with a reason** when it has nothing to open a dialog with, rather than a silent nothing (#1447). The picker tries every dialog the host might have: macOS `osascript`, Windows PowerShell, **WSL** the Windows dialog over interop (`powershell.exe` + `wslpath`), Linux `zenity` → `kdialog` → `qarma` → `yad`. A user cancel is a 200 with `paths: []`. |
 | `POST /api/session/:id/drop` | A dropped file whose path the browser withheld. **Raw bytes**, not JSON, under the file's own content type (base64 in JSON would cap real files near 18 MB, and a dropped `.json` would be parsed as a document); the original name rides percent-encoded in `x-drop-filename` and is used for its **suffix only**. Answers `{ path }` — absolute, inside the private per-session directory the session was granted at launch. 110 MiB cap; 404 for a session this server isn't running. |
 
 The phone itself uses **none** of these routes — it reaches the host over Firestore command
@@ -1857,7 +1886,8 @@ server/
   git/            git, GitHub (gh) and GitLab (glab) + worktrees: git-status.ts, gitRemote.ts,
                   gh.ts, prs.ts, issues.ts, pr-for-branch.ts, worktrees.ts, worktree-*.ts
   files/          files-browse.ts (contained tree read/write), pick-file.ts,
-                  open-dir.ts, scripts.ts (Run-menu script.json loader)
+                  open-dir.ts, wsl.ts (interop detection + wslpath),
+                  scripts.ts (Run-menu script.json loader)
   infra/          process/transport/misc: tmux.ts, tmux-routes.ts,
                   pubsub.ts (socket.io /ws/pubsub), spa-fallback.ts, host-tools.ts,
                   plugins-registry.ts, web-push.ts, install-bundled-skills.ts, accounting-tool.ts

package/bin/mulmoterminal.js

@@ -9,6 +9,7 @@ import { execSync, spawn } from "node:child_process";
 import { existsSync, statSync } from "node:fs";
 import { createRequire } from "node:module";
 import { createServer } from "node:net";
+import { release } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { createInterface } from "node:readline";
 import { fileURLToPath } from "node:url";
@@ -106,6 +107,40 @@ const PATH_TOOLS = [
   { cmd: "ollama", versionArg: "--version", required: false, why: "a fully local model via claude-ollama", hint: "https://ollama.com/download" },
 ];
 
+// The variables WSL exports into a login shell, then the kernel that names itself
+// (`…-microsoft-standard-WSL2`, `…-Microsoft` on WSL1) for the processes those variables never
+// reach. Mirrors `isWsl()` in server/files/wsl.ts, which this file cannot import: bin runs as
+// plain JS, the server runs through tsx. Keep the two in step.
+function isWslHost() {
+  if (process.platform !== "linux") return false;
+  return Boolean(process.env.WSL_DISTRO_NAME || process.env.WSL_INTEROP) || /microsoft/i.test(release());
+}
+
+// The file dialog is the one requirement that differs per host, so it is checked per host rather
+// than listed above: macOS and Windows have one built in and can't be missing it. WSL reaches the
+// Windows dialog over interop, and a Linux desktop has whichever toolkit it was installed with —
+// zenity's absence there is what makes the picker look broken (#1447).
+function fileDialogTool() {
+  if (process.platform === "darwin" || process.platform === "win32") return null;
+  const why = "the file / folder picker";
+  if (isWslHost()) {
+    return {
+      cmd: "powershell.exe",
+      versionArg: "-NoProfile -Command exit",
+      required: false,
+      why: `${why}, using the Windows dialog`,
+      hint: "enable WSL interop (wsl.conf), or: sudo apt install zenity",
+    };
+  }
+  return {
+    cmd: "zenity",
+    versionArg: "--version",
+    required: false,
+    why: `${why} (kdialog / qarma / yad also work)`,
+    hint: "sudo apt install zenity  ·  sudo dnf install zenity",
+  };
+}
+
 function toolCheckLine({ cmd, versionArg, required, why, hint }) {
   if (hasCommand(cmd, versionArg)) return `  ✓ ${cmd} — ${why}`;
   const head = required ? `  ✗ ${cmd} — not found, needed for ${why}` : `  ○ ${cmd} — optional (${why})`;
@@ -139,7 +174,7 @@ async function runInit(initArgs) {
     console.log("      → npm install -g @anthropic-ai/claude-code   (then run `claude` and log in)");
   }
 
-  PATH_TOOLS.forEach((tool) => console.log(toolCheckLine(tool)));
+  [...PATH_TOOLS, fileDialogTool()].filter(Boolean).forEach((tool) => console.log(toolCheckLine(tool)));
 
   // Config half: derive working-dir presets from Claude history + write config.json.
   console.log("");
@@ -188,9 +223,13 @@ function runGoogle(googleArgs) {
   });
 }
 
+// WSL has no Linux browser to open (and often no `xdg-open` either), so the URL goes to the
+// Windows shell — `start` through cmd.exe, which is what opens the user's real browser. It exits
+// 0, unlike `explorer.exe`, so a failure here still means a failure.
 function pickOpenCommand() {
   if (process.platform === "darwin") return "open";
   if (process.platform === "win32") return "start";
+  if (isWslHost()) return 'cmd.exe /c start ""';
   return "xdg-open";
 }
 

package/common/agentSessionList.ts

@@ -0,0 +1,24 @@
+// Where each agent's own past conversations are listed — one route per agent, keyed by the agent.
+//
+// The launcher's "or resume here" list shows the conversations of whatever the Agent Picker has
+// selected, and each agent keeps its history in its own place: Claude in `~/.claude/projects`,
+// codex in `~/.codex/sessions`, agy in its brain directory (found through our own log), grok in a
+// per-cwd directory under `~/.grok/sessions`. Four stores, four listers, four routes — so the
+// route is chosen, not built.
+//
+// In `common/` because both sides decide from it: the server mounts these paths
+// (server/routes/session-routes.ts) and the UI fetches them (src/composables/useDirLists.ts). A
+// `Record<TerminalAgent, …>` rather than a lookup with a fallback, so a fifth agent is a TYPE
+// ERROR here instead of a picker option that silently lists Claude's history under another name —
+// which is the bug this whole map exists to fix (#1417).
+import type { TerminalAgent } from "./sessionAgent.js";
+
+export const AGENT_SESSION_LIST_PATHS: Record<TerminalAgent, string> = {
+  claude: "/api/sessions",
+  codex: "/api/codex/sessions",
+  antigravity: "/api/antigravity/sessions",
+  grok: "/api/grok/sessions",
+};
+
+/** The listing URL for one agent's conversations in one directory. */
+export const agentSessionListUrl = (agent: TerminalAgent, cwd: string): string => `${AGENT_SESSION_LIST_PATHS[agent]}?cwd=${encodeURIComponent(cwd)}`;

package/common/sessionContext.ts

@@ -0,0 +1,24 @@
+// Which model a session is running and how full its context is: the `context` object
+// GET /api/session/:id answers with, and the thing the header's model badge renders.
+//
+// In `common/` because BOTH sides decide from it. The server fills it from whichever log the
+// session's agent keeps, and the client decides from `contextWindow` whether to trust the agent's
+// own window or fall back to its per-model table (`src/components/modelBadge.ts`). It was mirrored
+// as `LatestTurnContext` on the server and `CellContext` in the UI; both are now this.
+export interface SessionContextInfo {
+  /** null until a turn has told us — a session that has not answered yet wears no badge. */
+  model: string | null;
+  /** Tokens re-sent as context for the NEXT turn, off the most recent completed turn. */
+  contextTokens: number;
+  /**
+   * The model's context window, when the AGENT ITSELF reports one. codex writes
+   * `model_context_window` into every `token_count` event, grok `contextWindowTokens` into its
+   * `signals.json` and agy the window into its accounting store, which is better than any table we
+   * can keep: the substring list in
+   * modelBadge.ts has already claimed a model whose window it had wrong (#985), and nothing on
+   * this side can notice when a provider changes one.
+   *
+   * Absent (or null) means nobody told us, NOT "no window" — the client falls back to its table.
+   */
+  contextWindow?: number | null;
+}

package/common/sessionRunning.ts

@@ -0,0 +1,31 @@
+// Whether a listed conversation still has a session RUNNING for it, and under which key.
+//
+// Deliberately not part of `SessionOccupancy` next door, which answers a different question for a
+// different caller: "is a terminal holding this right now", the fact a second cell must know before
+// offering to open it. That one is computed from `tmux list-clients` — which reports only sessions
+// that HAVE a client, so it is structurally blind to the case here: a session running with nobody
+// attached. Those are what a server restart leaves behind, and they piled up unseen because nothing
+// in the app could see them either (#1467).
+//
+// In `common/` because both sides decide from it: the server fills it from its pty table plus
+// `tmux list-sessions` (routes/session-routes.ts), and the launcher draws the marker and the stop
+// button from it (components/CellLaunchForm.vue).
+
+export interface SessionRunning {
+  /**
+   * The key of the session running for this row, or null when nothing is.
+   *
+   * A KEY, not the row's id. A codex/agy conversation started from a grid cell runs under a key
+   * MulmoTerminal minted, and only that agent's conversation log connects the two — the same reason
+   * `attached` consults it. Terminating the row's id there would kill nothing and report success.
+   */
+  runningKey: string | null;
+}
+
+/**
+ * The same field as the CLIENT may receive it — optional, like `PartialSessionOccupancy`: a page
+ * left open across an upgrade parses rows from a server that never said. Absent must read as
+ * "nothing running", so an older server's rows keep their old behaviour (no marker, no button)
+ * rather than offering to stop something that was never asked about.
+ */
+export type PartialSessionRunning = Partial<SessionRunning>;

package/dist/assets/{abnfDiagram-VRR7QNED-WSmThe6b-DPaEh_gN.js → abnfDiagram-VRR7QNED-WSmThe6b-944Gbk5i.js}

@@ -1 +1 @@
-import{n as e}from"./chunk-Y2CYZVJY-Bdt8pFDJ-DsF7k-Jl.js";import{f as t}from"./src-CvsWqFln-Tc7ZSrRz.js";import{_ as n,g as r}from"./mermaid-parser.core-C1baW7NG-Bt8E3kO2.js";import"./chunk-WYO6CB5R-nS6zX9ct-DWK9p9qg.js";import"./chunk-VAUOI2AC-BKx35BBi-B60QprFR.js";import{n as i,r as a,t as o}from"./chunk-MOJQB5TN-CorQ_Pl1-BFdYgLZH.js";import{t as s}from"./chunk-JWPE2WC7-BQ3zXr2k-DSd3Ct95.js";var c=r().RailroadAbnf.parser.LangiumParser,l=e(e=>{let t=e.alternatives.map(u);return t.length===1?t[0]:{type:`choice`,alternatives:t}},`transformAlternation`),u=e(e=>{let t=e.elements.map(f);return t.length===1?t[0]:{type:`sequence`,elements:t}},`transformConcatenation`),d=e(e=>{if(e.includes(`*`)){let[t,n]=e.split(`*`);return{min:t?parseInt(t,10):0,max:n?parseInt(n,10):1/0}}let t=parseInt(e,10);return{min:t,max:t}},`parseRepeat`),f=e(e=>{let t=p(e.primary);if(!e.repeat)return t;let{min:n,max:r}=d(e.repeat);return n===0&&r===1?{type:`optional`,element:t}:{type:`repetition`,element:t,min:n,max:r}},`transformElement`),p=e(e=>{switch(e.$type){case`AbnfStringLiteral`:return{type:`terminal`,value:e.value};case`AbnfNumVal`:return{type:`terminal`,value:e.value};case`AbnfRuleName`:return{type:`nonterminal`,name:e.name};case`AbnfGroup`:return l(e.element);case`AbnfOptionalGroup`:return{type:`optional`,element:l(e.element)};default:throw Error(`Unsupported ABNF primary node: ${e.$type}`)}},`transformPrimary`),m=e(e=>({name:e.name,definition:l(e.definition)}),`transformRule`),h=e(e=>{s(e,a),e.title&&a.setTitle(e.title),e.rules.map(e=>a.addRule(m(e)))},`populateDb`),g={parser:{parse:e(e=>{a.clear(),t.debug(`[ABNF Parser] Starting Langium parse`);let r=c.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new n(r);let i=r.value;t.debug(`[ABNF Parser] Parsed rules:`,i.rules.length),h(i),t.debug(`[ABNF Parser] Parse complete`)},`parse`),parser:{yy:a}},db:a,renderer:o,styles:i};export{g as diagram};
+import{n as e}from"./chunk-Y2CYZVJY-Bdt8pFDJ-DsF7k-Jl.js";import{f as t}from"./src-CvsWqFln-Tc7ZSrRz.js";import{_ as n,g as r}from"./mermaid-parser.core-C1baW7NG-DSG0yv6A.js";import"./chunk-WYO6CB5R-nS6zX9ct-HZI6iW4p.js";import"./chunk-VAUOI2AC-BKx35BBi-C-5oHwZ4.js";import{n as i,r as a,t as o}from"./chunk-MOJQB5TN-CorQ_Pl1-Bd3mtm2K.js";import{t as s}from"./chunk-JWPE2WC7-BQ3zXr2k-DSd3Ct95.js";var c=r().RailroadAbnf.parser.LangiumParser,l=e(e=>{let t=e.alternatives.map(u);return t.length===1?t[0]:{type:`choice`,alternatives:t}},`transformAlternation`),u=e(e=>{let t=e.elements.map(f);return t.length===1?t[0]:{type:`sequence`,elements:t}},`transformConcatenation`),d=e(e=>{if(e.includes(`*`)){let[t,n]=e.split(`*`);return{min:t?parseInt(t,10):0,max:n?parseInt(n,10):1/0}}let t=parseInt(e,10);return{min:t,max:t}},`parseRepeat`),f=e(e=>{let t=p(e.primary);if(!e.repeat)return t;let{min:n,max:r}=d(e.repeat);return n===0&&r===1?{type:`optional`,element:t}:{type:`repetition`,element:t,min:n,max:r}},`transformElement`),p=e(e=>{switch(e.$type){case`AbnfStringLiteral`:return{type:`terminal`,value:e.value};case`AbnfNumVal`:return{type:`terminal`,value:e.value};case`AbnfRuleName`:return{type:`nonterminal`,name:e.name};case`AbnfGroup`:return l(e.element);case`AbnfOptionalGroup`:return{type:`optional`,element:l(e.element)};default:throw Error(`Unsupported ABNF primary node: ${e.$type}`)}},`transformPrimary`),m=e(e=>({name:e.name,definition:l(e.definition)}),`transformRule`),h=e(e=>{s(e,a),e.title&&a.setTitle(e.title),e.rules.map(e=>a.addRule(m(e)))},`populateDb`),g={parser:{parse:e(e=>{a.clear(),t.debug(`[ABNF Parser] Starting Langium parse`);let r=c.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new n(r);let i=r.value;t.debug(`[ABNF Parser] Parsed rules:`,i.rules.length),h(i),t.debug(`[ABNF Parser] Parse complete`)},`parse`),parser:{yy:a}},db:a,renderer:o,styles:i};export{g as diagram};

package/dist/assets/architecture-TIHT7OUA-Cqhmai3f-ByieX7iG.js

@@ -0,0 +1 @@
+import{f as e}from"./mermaid-parser.core-C1baW7NG-DSG0yv6A.js";export{e as createArchitectureServices};