offsite 0.0.45 → 0.0.47

package/apps/server/dist/main.mjs

@@ -1,5 +1,5 @@
 import { createHash, randomBytes, randomUUID } from "node:crypto";
-import { chmodSync, closeSync, createReadStream, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, watch, writeFileSync } from "node:fs";
+import { appendFileSync, chmodSync, closeSync, createReadStream, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, watch, writeFileSync } from "node:fs";
 import http, { createServer } from "node:http";
 import path from "node:path";
 import { consola } from "consola";
@@ -21,6 +21,7 @@ import { DatabaseSync } from "node:sqlite";
 import { drizzle } from "drizzle-orm/node-sqlite";
 import { migrate } from "drizzle-orm/node-sqlite/migrator";
 import { integer, snakeCase, text } from "drizzle-orm/sqlite-core";
+import sharp from "sharp";
 import { promisify } from "node:util";
 import webPush from "web-push";
 import { spawn as spawn$1 } from "@lydell/node-pty";
@@ -47,6 +48,24 @@ const mediaTypes = /* @__PURE__ */ new Map([
 	[".flac", "audio/flac"]
 ]);
 //#endregion
+//#region ../core/src/terminal.ts
+const GLOBAL_TERMINALS = "global";
+function encodeFrame(kind, id, data) {
+	const frame = new Uint8Array(5 + data.length);
+	frame[0] = kind;
+	new DataView(frame.buffer).setUint32(1, id);
+	frame.set(data, 5);
+	return frame;
+}
+function decodeFrame(frame) {
+	if (frame.length < 5) throw new Error("terminal frame is too short");
+	return {
+		kind: frame[0],
+		id: new DataView(frame.buffer, frame.byteOffset, frame.byteLength).getUint32(1),
+		data: frame.subarray(5)
+	};
+}
+//#endregion
 //#region src/constants.ts
 const deprecatedModels = {
 	claude: [
@@ -171,6 +190,43 @@ function readJson(name) {
 		throw error;
 	}
 }
+function readSettings(name, schema, defaults) {
+	const file = path.join(home, name);
+	let value;
+	try {
+		value = readJson(name);
+	} catch (error) {
+		console.warn(`invalid ${file}, using the defaults: ${error}`);
+		return structuredClone(defaults);
+	}
+	if (value === null) return structuredClone(defaults);
+	let result = schema.safeParse(value);
+	if (result.success) return result.data;
+	while (!result.success) {
+		const issue = result.error.issues[0];
+		const targets = issue.code === "unrecognized_keys" ? issue.keys.map((key) => [...issue.path, key]) : [issue.path];
+		for (const target of targets) {
+			const discarded = discard(value, target);
+			if (discarded === null) {
+				console.warn(`invalid ${file}, using the defaults:\n${z.prettifyError(result.error)}`);
+				return structuredClone(defaults);
+			}
+			console.warn(`${file}: discarded ${discarded.map(String).join(".")} (${issue.message} at ${target.map(String).join(".")})`);
+		}
+		result = schema.safeParse(value);
+	}
+	writeJson(name, result.data);
+	return result.data;
+}
+function discard(value, target) {
+	const key = target.at(0);
+	if (key === void 0 || typeof value !== "object" || value === null || !Object.hasOwn(value, key)) return null;
+	const inner = target.length > 1 ? discard(Reflect.get(value, key), target.slice(1)) : null;
+	if (inner !== null) return [key, ...inner];
+	if (Array.isArray(value)) value.splice(Number(key), 1);
+	else Reflect.deleteProperty(value, key);
+	return [key];
+}
 function writeJson(name, value) {
 	let file = path.join(home, name);
 	mkdirSync(home, { recursive: true });
@@ -880,7 +936,6 @@ function record$1(value) {
 }
 //#endregion
 //#region src/storage/config.ts
-const configFile = path.join(home, "config.json");
 const modelSetting = z.strictObject({
 	hidden: z.boolean(),
 	effort: z.string().nullable()
@@ -901,8 +956,7 @@ function accountSchema(provider) {
 		name: z.string(),
 		color: z.string().regex(/^#[0-9a-f]{6}$/i, "must be a hex color like #3b82f6").nullable().default(null),
 		configDir: platformDirs,
-		enabled: z.boolean().default(true),
-		hiddenModels: z.record(z.string(), z.boolean()).default({})
+		enabled: z.boolean().default(true)
 	});
 }
 const configSchema = z.strictObject({
@@ -919,6 +973,19 @@ const configSchema = z.strictObject({
 		codex: z.boolean().default(true),
 		opencode: z.boolean().default(true)
 	}).prefault({}),
+	newThreads: z.strictObject({
+		provider: z.enum([
+			"claude",
+			"codex",
+			"opencode"
+		]).default("claude"),
+		accountId: z.string().nullable().default(null),
+		models: z.strictObject({
+			claude: z.string().nullable().default(null),
+			codex: z.string().nullable().default(null),
+			opencode: z.string().nullable().default(null)
+		}).prefault({})
+	}).prefault({}),
 	commitMessage: z.strictObject({
 		provider: z.enum([
 			"claude",
@@ -981,20 +1048,7 @@ function configInfo() {
 	};
 }
 function readConfig() {
-	let user;
-	try {
-		user = readJson("config.json");
-	} catch (error) {
-		console.warn(`invalid ${configFile}, using the default config: ${error}`);
-		return structuredClone(defaults$1);
-	}
-	if (user === null) return structuredClone(defaults$1);
-	const result = configSchema.safeParse(user);
-	if (!result.success) {
-		console.warn(`invalid ${configFile}, using the default config:\n${z.prettifyError(result.error)}`);
-		return structuredClone(defaults$1);
-	}
-	return result.data;
+	return readSettings("config.json", configSchema, defaults$1);
 }
 function saveConfig(value) {
 	const result = configSchema.safeParse(value);
@@ -2564,6 +2618,7 @@ const sessions$1 = snakeCase.table("sessions", {
 	status: text({ enum: [
 		"active",
 		"pinned",
+		"snoozed",
 		"minimized"
 	] }).notNull()
 });
@@ -2589,13 +2644,201 @@ const pushSubscriptions = snakeCase.table("push_subscriptions", {
 	server: text().notNull()
 });
 //#endregion
+//#region src/services/files.ts
+const FILE_LIMIT = 2e4;
+const OUTPUT_LIMIT$1 = 262144;
+const READ_LIMIT = 1048576;
+const MEDIA_LINK_LIFETIME = 36e5;
+const browseToken = randomBytes(32).toString("base64url");
+const mediaLinks = /* @__PURE__ */ new Map();
+const skipped = /* @__PURE__ */ new Set([
+	"node_modules",
+	".git",
+	".DS_Store",
+	"dist",
+	"target",
+	".next",
+	"__pycache__",
+	".venv"
+]);
+async function listFiles(cwd) {
+	return (await listEntries(cwd)).files;
+}
+async function listEntries(cwd) {
+	const files = [];
+	const folders = [];
+	const pending = [""];
+	while (pending.length > 0 && files.length < FILE_LIMIT) {
+		const dir = pending.pop() ?? "";
+		let entries;
+		try {
+			entries = await readdir(path.join(cwd, dir), { withFileTypes: true });
+		} catch {
+			continue;
+		}
+		for (const entry of entries) {
+			if (skipped.has(entry.name)) continue;
+			const relative = dir === "" ? entry.name : `${dir}/${entry.name}`;
+			if (entry.isDirectory()) {
+				pending.push(relative);
+				folders.push(relative);
+			}
+			if (entry.isFile()) files.push(relative);
+			if (entry.isSymbolicLink()) {
+				if ((await stat(path.join(cwd, relative)).catch(() => null))?.isFile() === true) files.push(relative);
+			}
+		}
+	}
+	return {
+		files: files.slice(0, FILE_LIMIT).sort(),
+		folders: folders.sort()
+	};
+}
+function readProjectFile(cwd, file) {
+	const full = resolveProjectFile(cwd, file);
+	const stats = statSync(full);
+	if (!stats.isFile()) throw new Error(`${file} is not a file`);
+	if (stats.size > READ_LIMIT) return {
+		kind: "large",
+		size: stats.size,
+		limit: READ_LIMIT
+	};
+	const data = readFileSync(full);
+	const mediaType = mediaTypes.get(path.extname(full).toLowerCase());
+	if (mediaType?.startsWith("image/") === true) return {
+		kind: "image",
+		size: stats.size,
+		mediaType,
+		data: data.toString("base64")
+	};
+	if (data.includes(0)) return {
+		kind: "binary",
+		size: stats.size
+	};
+	return {
+		kind: "text",
+		size: stats.size,
+		content: data.toString("utf8")
+	};
+}
+function writeProjectFile(cwd, file, content) {
+	const full = resolveProjectFile(cwd, file);
+	if (!statSync(full).isFile()) throw new Error(`${file} is not a file`);
+	writeFileSync(full, content);
+}
+function createProjectEntry(cwd, file, folder) {
+	const full = resolveNewProjectPath(cwd, file);
+	if (folder) {
+		mkdirSync(full, { recursive: true });
+		return;
+	}
+	mkdirSync(path.dirname(full), { recursive: true });
+	writeFileSync(full, "", { flag: "wx" });
+}
+function renameProjectEntry(cwd, file, to) {
+	const source = resolveProjectEntry(cwd, file);
+	const target = resolveNewProjectPath(cwd, to);
+	mkdirSync(path.dirname(target), { recursive: true });
+	renameSync(source, target);
+}
+function deleteProjectEntry(cwd, file) {
+	rmSync(resolveProjectEntry(cwd, file), { recursive: true });
+}
+function linkProjectMedia(cwd, file) {
+	const resolved = path.resolve(realpathSync(cwd), file);
+	if (!existsSync(resolved)) throw new Error(`${file} does not exist`);
+	const full = realpathSync(resolved);
+	const mediaType = mediaTypes.get(path.extname(full).toLowerCase());
+	if (mediaType === void 0) throw new Error(`${file} is not an image, video or audio file`);
+	return addLink(full, mediaType);
+}
+function addLink(file, mediaType) {
+	for (const [token, link] of mediaLinks) if (link.expiresAt <= Date.now()) mediaLinks.delete(token);
+	const token = randomBytes(32).toString("base64url");
+	mediaLinks.set(token, {
+		file,
+		mediaType,
+		expiresAt: Date.now() + MEDIA_LINK_LIFETIME
+	});
+	return token;
+}
+function findMediaLink(token) {
+	if (token === null) return null;
+	const link = mediaLinks.get(token);
+	if (link === void 0 || link.expiresAt <= Date.now()) return null;
+	return link;
+}
+function saveUpload(name, data) {
+	const dir = path.join(home, "uploads", randomUUID());
+	mkdirSync(dir, { recursive: true });
+	const file = path.join(dir, path.basename(name));
+	writeFileSync(file, data);
+	return file;
+}
+async function taskOutput(sessionId, file) {
+	const tasks = path.dirname(file);
+	if (!/^[\w-]+$/.test(sessionId) || !path.isAbsolute(file) || path.normalize(file) !== file || !/^\w+\.output$/.test(path.basename(file)) || path.basename(tasks) !== "tasks" || path.basename(path.dirname(tasks)) !== sessionId) throw new Error("Not a background task output file of this thread");
+	let stats;
+	try {
+		stats = await lstat(file);
+	} catch (error) {
+		if (hasCode(error, "ENOENT")) return null;
+		throw error;
+	}
+	if (!stats.isFile()) throw new Error("Background task output is not a regular file");
+	const start = Math.max(0, stats.size - OUTPUT_LIMIT$1);
+	const handle = await open(file, "r");
+	try {
+		const buffer = Buffer.alloc(stats.size - start);
+		const read = await handle.read(buffer, 0, buffer.length, start);
+		return {
+			text: buffer.subarray(0, read.bytesRead).toString("utf8"),
+			truncated: start > 0
+		};
+	} finally {
+		await handle.close();
+	}
+}
+function resolveProjectFile(cwd, file) {
+	const root = realpathSync(cwd);
+	const resolved = path.resolve(root, file);
+	if (!existsSync(resolved)) throw new Error(`${file} does not exist`);
+	const full = realpathSync(resolved);
+	checkInProject(root, full, file);
+	return full;
+}
+function resolveProjectEntry(cwd, file) {
+	const root = realpathSync(cwd);
+	const resolved = path.resolve(root, file);
+	if (!existsSync(path.dirname(resolved))) throw new Error(`${file} does not exist`);
+	const full = path.join(realpathSync(path.dirname(resolved)), path.basename(resolved));
+	if (full === root) throw new Error("The project folder itself cannot be changed");
+	checkInProject(root, full, file);
+	lstatSync(full);
+	return full;
+}
+function resolveNewProjectPath(cwd, file) {
+	const root = realpathSync(cwd);
+	const resolved = path.resolve(root, file);
+	if (existsSync(resolved)) throw new Error(`${file} already exists`);
+	let existing = path.dirname(resolved);
+	while (!existsSync(existing)) existing = path.dirname(existing);
+	const full = path.join(realpathSync(existing), path.relative(existing, resolved));
+	checkInProject(root, full, file);
+	return full;
+}
+function checkInProject(root, full, file) {
+	const relative = path.relative(root, full);
+	if (relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) throw new Error(`${file} is outside the project`);
+}
+//#endregion
 //#region src/services/git.ts
 const DIFF_LIMIT = 8e4;
 const UNTRACKED_LIMIT = 100;
 const NEW_FILE_LIMIT = 262144;
 const REPO_DEPTH = 3;
 const FETCH_TIMEOUT = 6e4;
-const run$1 = promisify(execFile);
+const run$2 = promisify(execFile);
 const PULL_REQUEST_INSTRUCTIONS = `You write GitHub pull requests as Markdown.
 
 ## TITLE RULES
@@ -2631,7 +2874,7 @@ async function gitRepos(cwd) {
 	})));
 }
 async function commit(cwd, message, andPush) {
-	const text = message.trim() === "" ? await commitMessage(cwd) : message;
+	const text = message.trim() === "" ? await commitMessage(cwd, false) : message;
 	await git(cwd, ["add", "--all"]);
 	await git(cwd, [
 		"commit",
@@ -2682,7 +2925,7 @@ async function sync(cwd) {
 async function fetchProject(cwd) {
 	await Promise.all((await projectRepos(cwd)).map(async (repo) => {
 		try {
-			await run$1("git", ["fetch"], {
+			await run$2("git", ["fetch"], {
 				cwd: path.join(cwd, repo),
 				env: {
 					...process.env,
@@ -2713,7 +2956,7 @@ async function switchBranch(cwd, branch, create) {
 async function pullRequestBranches(cwd) {
 	const head = (await gitStatus(cwd)).branch;
 	if (head === null) throw new Error("Not on a branch");
-	const base = (await run$1("gh", [
+	const base = (await run$2("gh", [
 		"repo",
 		"view",
 		"--json",
@@ -2738,7 +2981,7 @@ async function preparePullRequest(cwd, base, commitChanges) {
 	if (commitChanges) await commit(cwd, "", true);
 	const status = await gitStatus(cwd);
 	if (status.upstream === null || status.ahead > 0) await push$1(cwd);
-	const open = (await run$1("gh", [
+	const open = (await run$2("gh", [
 		"pr",
 		"list",
 		"--head",
@@ -2785,7 +3028,7 @@ async function preparePullRequest(cwd, base, commitChanges) {
 	};
 }
 async function createPullRequest(cwd, request) {
-	const url = (await run$1("gh", [
+	const url = (await run$2("gh", [
 		"pr",
 		"create",
 		"--title",
@@ -2802,8 +3045,13 @@ async function createPullRequest(cwd, request) {
 	if (url === void 0) throw new Error("gh did not return a pull request URL");
 	return { url };
 }
-async function commitMessage(cwd) {
-	const diff = (await repoDiff(cwd, "")).slice(0, DIFF_LIMIT);
+async function commitMessage(cwd, staged) {
+	const diff = (staged ? (await git(cwd, [
+		"diff",
+		"--cached",
+		"--no-color",
+		"--no-ext-diff"
+	])).stdout : await repoDiff(cwd, "")).slice(0, DIFF_LIMIT);
 	if (diff === "") throw new Error("There is nothing to commit");
 	return generateText(cwd, "You write concise git commit messages.", `Write a git commit message for this diff. Reply with only the message: a short summary line, optionally followed by a blank line and a brief body.\n\n${diff}`);
 }
@@ -2841,7 +3089,7 @@ async function projectDiff(cwd) {
 	return (await Promise.all(repos.map((repo) => repoDiff(path.join(cwd, repo), repo === "" ? "" : `${repo}/`)))).join("");
 }
 function git(cwd, args) {
-	return run$1("git", args, {
+	return run$2("git", args, {
 		cwd,
 		maxBuffer: 67108864
 	});
@@ -2966,13 +3214,27 @@ function newFilePatch(cwd, file, prefix) {
 	if (lines.at(-1) === "") lines.pop();
 	return `${header}@@ -0,0 +1,${lines.length} @@\n${lines.map((line) => `+${line}\n`).join("")}`;
 }
+//#endregion
+//#region src/services/logos.ts
+const LOGO_LIMIT = 524288;
+const LOGO_SIZE = 256;
+const RESIZED_TYPES = [
+	"image/png",
+	"image/jpeg",
+	"image/webp"
+];
+const KEPT_TYPES = [
+	"image/svg+xml",
+	"image/x-icon",
+	"image/vnd.microsoft.icon"
+];
+const PICKABLE_FILE = /\.(png|jpe?g|webp|svg)$/i;
 const LOGO_FILES = /* @__PURE__ */ new Map([
 	[".svg", "image/svg+xml"],
 	[".png", "image/png"],
 	[".webp", "image/webp"],
 	[".jpg", "image/jpeg"],
 	[".jpeg", "image/jpeg"],
-	[".gif", "image/gif"],
 	[".ico", "image/x-icon"]
 ]);
 const PREFERRED = [
@@ -2995,11 +3257,42 @@ async function findLogo(folder) {
 	for (const { file } of candidates) {
 		const full = path.join(folder, file);
 		if (!existsSync(full)) continue;
-		const logo = `data:${LOGO_FILES.get(path.extname(file).toLowerCase())};base64,${(await readFile(full)).toString("base64")}`;
-		if (logo.length <= 524288) return logo;
+		const type = LOGO_FILES.get(path.extname(file).toLowerCase());
+		const data = await readFile(full);
+		try {
+			return await prepareLogo(`data:${type};base64,${data.toString("base64")}`);
+		} catch {
+			continue;
+		}
 	}
 	return null;
 }
+async function logoFiles(folder) {
+	const repos = await projectRepos(folder);
+	if (repos.length === 0) return (await listFiles(folder)).filter((file) => PICKABLE_FILE.test(file));
+	const listed = await Promise.all(repos.map(async (repo) => {
+		return (await git(path.join(folder, repo), [
+			"ls-files",
+			"-z",
+			"--cached",
+			"--others",
+			"--exclude-standard"
+		])).stdout.split("\0").map((file) => repo === "" ? file : `${repo}/${file}`);
+	}));
+	return [...new Set(listed.flat())].filter((file) => PICKABLE_FILE.test(file) && existsSync(path.join(folder, file)));
+}
+async function prepareLogo(logo) {
+	const header = /^data:([^;,]+);base64,/.exec(logo);
+	if (header !== null && RESIZED_TYPES.includes(header[1])) return `data:image/webp;base64,${(await sharp(Buffer.from(logo.slice(header[0].length), "base64")).resize(LOGO_SIZE, LOGO_SIZE, {
+		fit: "inside",
+		withoutEnlargement: true
+	}).webp({ quality: 90 }).toBuffer()).toString("base64")}`;
+	if (header !== null && KEPT_TYPES.includes(header[1])) {
+		if (logo.length > LOGO_LIMIT) throw new Error("Use an SVG or ICO image smaller than 384 KB");
+		return logo;
+	}
+	throw new Error("Use a PNG, JPEG, WebP, SVG or ICO image");
+}
 function logoRank(file) {
 	const preferred = PREFERRED.indexOf(path.basename(file).toLowerCase());
 	if (preferred !== -1) return preferred;
@@ -3011,15 +3304,6 @@ function logoRank(file) {
 }
 //#endregion
 //#region src/services/projects.ts
-const LOGO_TYPES = [
-	"image/png",
-	"image/jpeg",
-	"image/gif",
-	"image/webp",
-	"image/svg+xml",
-	"image/x-icon",
-	"image/vnd.microsoft.icon"
-];
 function projects$1() {
 	return db.select({
 		id: projects$2.id,
@@ -3049,16 +3333,13 @@ async function addProject(input) {
 	if (project === void 0) throw new Error(`Could not add ${folder}`);
 	return project;
 }
-function updateProject(id, patch) {
+async function updateProject(id, patch) {
 	if (patch.name !== void 0) {
 		const name = patch.name.trim();
 		if (name === "") throw new Error("Project name cannot be empty");
 		db.update(projects$2).set({ name }).where(eq(projects$2.id, id)).run();
 	}
-	if (patch.logo !== void 0) {
-		if (patch.logo !== null) checkLogo(patch.logo);
-		db.update(projects$2).set({ logo: patch.logo }).where(eq(projects$2.id, id)).run();
-	}
+	if (patch.logo !== void 0) db.update(projects$2).set({ logo: patch.logo === null ? null : await prepareLogo(patch.logo) }).where(eq(projects$2.id, id)).run();
 	publish$1();
 	return null;
 }
@@ -3096,11 +3377,6 @@ function publish$1() {
 		projects: projects$1()
 	});
 }
-function checkLogo(logo) {
-	const type = /^data:([^;,]+);base64,/.exec(logo)?.[1];
-	if (type === void 0 || !LOGO_TYPES.includes(type)) throw new Error("Use a PNG, JPEG, GIF, WebP, SVG or ICO image");
-	if (logo.length > 524288) throw new Error("Use an image smaller than 384 KB");
-}
 function expandHome(input) {
 	if (input === "~") return os.homedir();
 	if (input.startsWith("~/")) return path.join(os.homedir(), input.slice(2));
@@ -3189,21 +3465,6 @@ async function find(provider, paths) {
 			});
 	}
 }
-function encodeFrame(kind, id, data) {
-	const frame = new Uint8Array(5 + data.length);
-	frame[0] = kind;
-	new DataView(frame.buffer).setUint32(1, id);
-	frame.set(data, 5);
-	return frame;
-}
-function decodeFrame(frame) {
-	if (frame.length < 5) throw new Error("terminal frame is too short");
-	return {
-		kind: frame[0],
-		id: new DataView(frame.buffer, frame.byteOffset, frame.byteLength).getUint32(1),
-		data: frame.subarray(5)
-	};
-}
 //#endregion
 //#region src/services/push.ts
 const TITLE_LIMIT = 100;
@@ -3669,7 +3930,7 @@ function writeScript(target, source) {
 }
 //#endregion
 //#region src/services/terminal/process.ts
-const run = promisify(execFile);
+const run$1 = promisify(execFile);
 const iterm2Version = "3.6.8";
 const ghosttyVersion = "1.3.1";
 const shellNames = process.platform === "win32" ? [
@@ -3730,7 +3991,7 @@ function startShell(cwd) {
 async function currentDirectory(pid, reported) {
 	if (process.platform === "linux") return readlink(`/proc/${pid}/cwd`);
 	if (process.platform === "darwin") {
-		const { stdout } = await run("lsof", [
+		const { stdout } = await run$1("lsof", [
 			"-a",
 			"-d",
 			"cwd",
@@ -3750,7 +4011,7 @@ async function currentDirectory(pid, reported) {
 }
 async function busyProgram(pid) {
 	if (process.platform === "win32") {
-		const { stdout } = await run("powershell.exe", [
+		const { stdout } = await run$1("powershell.exe", [
 			"-NoProfile",
 			"-Command",
 			`Get-CimInstance Win32_Process -Filter "ParentProcessId=${pid}" | Select-Object -ExpandProperty Name`
@@ -3773,7 +4034,7 @@ async function foregroundGroup(pid) {
 		const text = await readFile(`/proc/${pid}/stat`, "utf8");
 		return Number(text.slice(text.lastIndexOf(")") + 2).split(" ")[5]);
 	}
-	const { stdout } = await run("ps", [
+	const { stdout } = await run$1("ps", [
 		"-o",
 		"tpgid=",
 		"-p",
@@ -3783,7 +4044,7 @@ async function foregroundGroup(pid) {
 }
 async function programName(pid) {
 	if (process.platform === "linux") return (await readFile(`/proc/${pid}/comm`, "utf8")).trimEnd();
-	const { stdout } = await run("ps", [
+	const { stdout } = await run$1("ps", [
 		"-o",
 		"comm=",
 		"-p",
@@ -3852,7 +4113,7 @@ function executable$1(name) {
 //#endregion
 //#region src/services/terminal/terminal.ts
 const HISTORY_LIMIT = 2097152;
-const OUTPUT_LIMIT$1 = 1048576;
+const OUTPUT_LIMIT = 1048576;
 const STALL_LIMIT = 1e4;
 const SILENCE_LIMIT$1 = 9e4;
 const KILL_DELAY = 3e3;
@@ -4081,7 +4342,7 @@ function output(id, terminal, data) {
 	}
 	for (const connection of connections.values()) forward(connection, id, false, data);
 	scan(id, terminal, data);
-	if ([...connections.values()].some((connection) => connection.client.socket.bufferedAmount > OUTPUT_LIMIT$1)) {
+	if ([...connections.values()].some((connection) => connection.client.socket.bufferedAmount > OUTPUT_LIMIT)) {
 		terminal.pty.pause();
 		paused.add(terminal.pty);
 		draining ??= drain();
@@ -4093,7 +4354,7 @@ function drain() {
 		let full = false;
 		for (const connection of connections.values()) {
 			const queued = connection.client.socket.bufferedAmount;
-			if (queued <= OUTPUT_LIMIT$1) continue;
+			if (queued <= OUTPUT_LIMIT) continue;
 			const now = Date.now();
 			const last = progress.get(connection) ?? {
 				queued: Infinity,
@@ -4169,6 +4430,10 @@ function publish() {
 		layout: layout()
 	};
 	for (const connection of connections.values()) send$1(connection, event);
+	broadcast({
+		type: "terminals",
+		count: terminalCount(GLOBAL_TERMINALS)
+	});
 }
 function forward(connection, id, replay, data) {
 	connection.client.socket.send(encodeFrame(replay ? 3 : 2, id, data));
@@ -4260,7 +4525,7 @@ function withStatus(items) {
 		return {
 			...item,
 			updatedAt,
-			status: record === void 0 || record.status === "active" && Date.now() - updatedAt > day ? "inactive" : record.status
+			status: record === void 0 || (record.status === "active" || record.status === "snoozed") && Date.now() - updatedAt > day ? "inactive" : record.status
 		};
 	});
 }
@@ -4290,7 +4555,7 @@ function recordInteraction(id) {
 		target: sessions$1.sessionId,
 		set: {
 			interactedAt: Date.now(),
-			status: sql`CASE ${sessions$1.status} WHEN 'pinned' THEN 'pinned' WHEN 'minimized' THEN 'minimized' ELSE 'active' END`
+			status: sql`CASE ${sessions$1.status} WHEN 'pinned' THEN 'pinned' WHEN 'snoozed' THEN 'snoozed' WHEN 'minimized' THEN 'minimized' ELSE 'active' END`
 		}
 	}).run();
 }
@@ -4419,7 +4684,7 @@ async function updateSession(id, patch) {
 		const session = all.find((item) => item.id === id);
 		if (session !== void 0 && all.every((item) => item.projectId !== session.projectId || item.status === "inactive") && [...runs.values()].every((other) => other.sessionId === id || other.cwd !== projectPath(session.projectId) || all.some((item) => item.id === other.sessionId))) closeProjectTabs(session.projectId);
 	} else if (patch.status !== void 0) {
-		const set = patch.status === "active" ? {
+		const set = patch.status === "active" || patch.status === "snoozed" ? {
 			status: patch.status,
 			interactedAt: Date.now()
 		} : { status: patch.status };
@@ -4675,7 +4940,6 @@ async function capabilities(provider, accountId, cwd) {
 	assertEnabled(provider, accountId);
 	const result = await providerCapabilities(provider, accountId, cwd);
 	const settings = readConfig().models[provider];
-	const overrides = provider === "opencode" ? {} : storedAccount(provider, accountId).hiddenModels;
 	return {
 		...result,
 		defaultModel: defaultModels[provider],
@@ -4690,7 +4954,7 @@ async function capabilities(provider, accountId, cwd) {
 			return {
 				...model,
 				deprecated,
-				hidden: overrides[model.value] ?? setting.hidden,
+				hidden: setting.hidden,
 				effort: setting.effort ?? effort
 			};
 		})
@@ -4717,8 +4981,7 @@ function addAccount(provider, name, configDir) {
 			name: account.name,
 			color: null,
 			configDir: { [platform()]: account.configDir },
-			enabled: true,
-			hiddenModels: {}
+			enabled: true
 		}]
 	});
 }
@@ -4738,8 +5001,7 @@ async function updateAccount(update) {
 				...item.configDir,
 				[platform()]: account.configDir
 			},
-			enabled: update.enabled,
-			hiddenModels: update.hiddenModels
+			enabled: update.enabled
 		} : item)
 	});
 	forgetClaude(update.id);
@@ -5551,7 +5813,7 @@ async function image(sessionId, uuid, index) {
 		data: block.data
 	};
 }
-async function history(sessionId, cwd) {
+async function history$1(sessionId, cwd) {
 	const found = runs.get(sessionId);
 	const run = found?.provider === "claude" ? found : void 0;
 	const [disk, session] = await Promise.all([getSessionMessages(sessionId, { dir: cwd }), loadSession(sessionId)]);
@@ -5982,142 +6244,6 @@ var Run = class {
 	}
 };
 //#endregion
-//#region src/services/files.ts
-const FILE_LIMIT = 2e4;
-const OUTPUT_LIMIT = 262144;
-const READ_LIMIT = 1048576;
-const MEDIA_LINK_LIFETIME = 36e5;
-const browseToken = randomBytes(32).toString("base64url");
-const mediaLinks = /* @__PURE__ */ new Map();
-const skipped = /* @__PURE__ */ new Set([
-	"node_modules",
-	".git",
-	".DS_Store",
-	"dist",
-	"target",
-	".next",
-	"__pycache__",
-	".venv"
-]);
-async function listFiles(cwd) {
-	const files = [];
-	const pending = [""];
-	while (pending.length > 0 && files.length < FILE_LIMIT) {
-		const dir = pending.pop() ?? "";
-		let entries;
-		try {
-			entries = await readdir(path.join(cwd, dir), { withFileTypes: true });
-		} catch {
-			continue;
-		}
-		for (const entry of entries) {
-			if (skipped.has(entry.name)) continue;
-			const relative = dir === "" ? entry.name : `${dir}/${entry.name}`;
-			if (entry.isDirectory()) pending.push(relative);
-			if (entry.isFile()) files.push(relative);
-			if (entry.isSymbolicLink()) {
-				if ((await stat(path.join(cwd, relative)).catch(() => null))?.isFile() === true) files.push(relative);
-			}
-		}
-	}
-	return files.slice(0, FILE_LIMIT).sort();
-}
-function readProjectFile(cwd, file) {
-	const full = resolveProjectFile(cwd, file);
-	const stats = statSync(full);
-	if (!stats.isFile()) throw new Error(`${file} is not a file`);
-	if (stats.size > READ_LIMIT) return {
-		kind: "large",
-		size: stats.size,
-		limit: READ_LIMIT
-	};
-	const data = readFileSync(full);
-	const mediaType = mediaTypes.get(path.extname(full).toLowerCase());
-	if (mediaType?.startsWith("image/") === true) return {
-		kind: "image",
-		size: stats.size,
-		mediaType,
-		data: data.toString("base64")
-	};
-	if (data.includes(0)) return {
-		kind: "binary",
-		size: stats.size
-	};
-	return {
-		kind: "text",
-		size: stats.size,
-		content: data.toString("utf8")
-	};
-}
-function linkProjectMedia(cwd, file) {
-	const resolved = path.resolve(realpathSync(cwd), file);
-	if (!existsSync(resolved)) throw new Error(`${file} does not exist`);
-	const full = realpathSync(resolved);
-	const mediaType = mediaTypes.get(path.extname(full).toLowerCase());
-	if (mediaType === void 0) throw new Error(`${file} is not an image, video or audio file`);
-	return addLink(full, mediaType, null);
-}
-function linkProjectDownload(cwd, file) {
-	return addLink(resolveProjectFile(cwd, file), "application/octet-stream", path.basename(file));
-}
-function addLink(file, mediaType, download) {
-	for (const [token, link] of mediaLinks) if (link.expiresAt <= Date.now()) mediaLinks.delete(token);
-	const token = randomBytes(32).toString("base64url");
-	mediaLinks.set(token, {
-		file,
-		mediaType,
-		download,
-		expiresAt: Date.now() + MEDIA_LINK_LIFETIME
-	});
-	return token;
-}
-function findMediaLink(token) {
-	if (token === null) return null;
-	const link = mediaLinks.get(token);
-	if (link === void 0 || link.expiresAt <= Date.now()) return null;
-	return link;
-}
-function saveUpload(name, data) {
-	const dir = path.join(home, "uploads", randomUUID());
-	mkdirSync(dir, { recursive: true });
-	const file = path.join(dir, path.basename(name));
-	writeFileSync(file, data);
-	return file;
-}
-async function taskOutput(sessionId, file) {
-	const tasks = path.dirname(file);
-	if (!/^[\w-]+$/.test(sessionId) || !path.isAbsolute(file) || path.normalize(file) !== file || !/^\w+\.output$/.test(path.basename(file)) || path.basename(tasks) !== "tasks" || path.basename(path.dirname(tasks)) !== sessionId) throw new Error("Not a background task output file of this thread");
-	let stats;
-	try {
-		stats = await lstat(file);
-	} catch (error) {
-		if (hasCode(error, "ENOENT")) return null;
-		throw error;
-	}
-	if (!stats.isFile()) throw new Error("Background task output is not a regular file");
-	const start = Math.max(0, stats.size - OUTPUT_LIMIT);
-	const handle = await open(file, "r");
-	try {
-		const buffer = Buffer.alloc(stats.size - start);
-		const read = await handle.read(buffer, 0, buffer.length, start);
-		return {
-			text: buffer.subarray(0, read.bytesRead).toString("utf8"),
-			truncated: start > 0
-		};
-	} finally {
-		await handle.close();
-	}
-}
-function resolveProjectFile(cwd, file) {
-	const root = realpathSync(cwd);
-	const resolved = path.resolve(root, file);
-	if (!existsSync(resolved)) throw new Error(`${file} does not exist`);
-	const full = realpathSync(resolved);
-	const relative = path.relative(root, full);
-	if (relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) throw new Error(`${file} is outside the project`);
-	return full;
-}
-//#endregion
 //#region src/services/proxy.ts
 const proxies = /* @__PURE__ */ new Map();
 const pageScriptPath = "/__offsite/browser.js";
@@ -6261,7 +6387,7 @@ function stopAll() {
 }
 function sessionHistory(sessionId, cwd) {
 	switch (providerOf(sessionId)) {
-		case "claude": return history(sessionId, cwd);
+		case "claude": return history$1(sessionId, cwd);
 		case "codex": return codexHistory(sessionId);
 		case "opencode": return openCodeHistory(sessionId, cwd);
 	}
@@ -6313,7 +6439,7 @@ async function rewindNow(request) {
 		resumeAt: disk[index - 1].uuid,
 		settings: request.settings
 	});
-	publish$2(sessionId, await history(sessionId, cwd));
+	publish$2(sessionId, await history$1(sessionId, cwd));
 	return result;
 }
 async function open$1(client, sessionId, projectId) {
@@ -6406,6 +6532,294 @@ async function changedElsewhere(run, cwd) {
 	return last !== void 0 && !run.messages.some((item) => item.uuid === last);
 }
 //#endregion
+//#region src/services/source-control.ts
+const SHOW_LIMIT = 1048576;
+const NETWORK_TIMEOUT = 12e4;
+const run = promisify(execFile);
+async function sourceControl(cwd) {
+	return Promise.all((await projectRepos(cwd)).map(async (repo) => ({
+		...await repoChanges(path.join(cwd, repo)),
+		path: repo
+	})));
+}
+async function showFile(cwd, ref, file) {
+	const output = await git(cwd, [
+		"cat-file",
+		"blob",
+		`${ref}:${file}`
+	]);
+	if (output.stdout.length > SHOW_LIMIT || output.stdout.includes("\0")) return null;
+	return output.stdout;
+}
+async function history(cwd, limit) {
+	const upstream = (await git(cwd, ["branch", "--format=%(if)%(HEAD)%(then)%(if:notequals=[gone])%(upstream:track)%(then)%(upstream)%(end)%(end)"])).stdout.trim();
+	return (await git(cwd, [
+		"log",
+		"--topo-order",
+		`--max-count=${limit}`,
+		"--format=%H%x1f%P%x1f%an%x1f%at%x1f%D%x1f%s%x1e",
+		"HEAD",
+		...upstream === "" ? [] : [upstream],
+		"--"
+	])).stdout.split("").map((record) => record.trim()).filter(Boolean).map((record) => {
+		const fields = record.split("");
+		return {
+			hash: fields[0],
+			parents: fields[1].split(" ").filter(Boolean),
+			author: fields[2],
+			date: Number(fields[3]) * 1e3,
+			refs: fields[4].split(", ").filter(Boolean),
+			subject: fields[5]
+		};
+	});
+}
+async function commitFiles(cwd, hash, parent) {
+	const tokens = (await git(cwd, [
+		"diff",
+		"--name-status",
+		"-M",
+		"-z",
+		parent ?? (await git(cwd, [
+			"hash-object",
+			"-t",
+			"tree",
+			"/dev/null"
+		])).stdout.trim(),
+		hash
+	])).stdout.split("\0");
+	const files = [];
+	for (let index = 0; index < tokens.length - 1; index++) {
+		const status = letter(tokens[index][0]);
+		if (status === "R" || status === "C") {
+			files.push({
+				path: tokens[index + 2],
+				from: tokens[index + 1],
+				status
+			});
+			index += 2;
+			continue;
+		}
+		files.push({
+			path: tokens[index + 1],
+			from: null,
+			status
+		});
+		index += 1;
+	}
+	return files;
+}
+async function undoCommit(cwd) {
+	const message = (await git(cwd, [
+		"log",
+		"-1",
+		"--format=%B"
+	])).stdout.trim();
+	if ((await git(cwd, [
+		"rev-list",
+		"--parents",
+		"--max-count=1",
+		"HEAD"
+	])).stdout.trim().split(" ").length === 1) await git(cwd, [
+		"update-ref",
+		"-d",
+		"HEAD"
+	]);
+	else await git(cwd, [
+		"reset",
+		"--soft",
+		"HEAD~1"
+	]);
+	return message;
+}
+async function runAction(cwd, action) {
+	if (action.kind === "stage") {
+		await git(cwd, [
+			"--literal-pathspecs",
+			"add",
+			"-A",
+			"--",
+			...action.paths
+		]);
+		return;
+	}
+	if (action.kind === "stageContent") {
+		const entry = await git(cwd, [
+			"--literal-pathspecs",
+			"ls-files",
+			"--stage",
+			"--",
+			action.path
+		]);
+		if (entry.stdout === "") throw new Error(`${action.path} is not in the index`);
+		const hashing = run("git", [
+			"hash-object",
+			"-w",
+			"--stdin",
+			`--path=${action.path}`
+		], { cwd });
+		hashing.child.stdin?.end(action.content);
+		const hash = (await hashing).stdout.trim();
+		await git(cwd, [
+			"update-index",
+			"--cacheinfo",
+			`${entry.stdout.split(" ")[0]},${hash},${action.path}`
+		]);
+		return;
+	}
+	if (action.kind === "unstage") {
+		await git(cwd, [
+			"--literal-pathspecs",
+			"reset",
+			"-q",
+			await diffBase(cwd),
+			"--",
+			...action.paths
+		]);
+		return;
+	}
+	if (action.kind === "discard") {
+		if (action.tracked.length > 0) await git(cwd, [
+			"--literal-pathspecs",
+			"checkout",
+			"-q",
+			"--",
+			...action.tracked
+		]);
+		if (action.untracked.length > 0) await git(cwd, [
+			"--literal-pathspecs",
+			"clean",
+			"-f",
+			"-q",
+			"--",
+			...action.untracked
+		]);
+		return;
+	}
+	if (action.kind === "ignore") {
+		const file = path.join(cwd, ".gitignore");
+		const current = existsSync(file) ? readFileSync(file, "utf8") : "";
+		appendFileSync(file, `${current === "" || current.endsWith("\n") ? "" : "\n"}${action.paths.join("\n")}\n`);
+		return;
+	}
+	if (action.kind === "commit") {
+		if (action.all) await git(cwd, ["add", "--all"]);
+		await git(cwd, [
+			"commit",
+			...action.amend ? ["--amend"] : [],
+			...action.message === "" ? ["--no-edit"] : ["--message", action.message]
+		]);
+		return;
+	}
+	if (action.kind === "pull") {
+		await network(cwd, action.rebase ? ["pull", "--rebase"] : ["pull"]);
+		return;
+	}
+	if (action.kind === "fetch") {
+		await network(cwd, [
+			"fetch",
+			...action.prune ? ["--prune"] : [],
+			...action.all ? ["--all"] : []
+		]);
+		return;
+	}
+	if (action.kind === "stash") {
+		if (action.mode === "tracked") await git(cwd, ["stash", "push"]);
+		if (action.mode === "untracked") await git(cwd, [
+			"stash",
+			"push",
+			"--include-untracked"
+		]);
+		if (action.mode === "staged") await git(cwd, [
+			"stash",
+			"push",
+			"--staged"
+		]);
+		return;
+	}
+	if (action.kind === "unstash") {
+		await git(cwd, ["stash", action.pop ? "pop" : "apply"]);
+		return;
+	}
+	throw new Error("Unknown git action");
+}
+async function network(cwd, args) {
+	try {
+		await run("git", args, {
+			cwd,
+			env: {
+				...process.env,
+				GIT_TERMINAL_PROMPT: "0"
+			},
+			timeout: NETWORK_TIMEOUT
+		});
+	} catch (error) {
+		throw gitError(error);
+	}
+}
+async function repoChanges(cwd) {
+	const output = await git(cwd, [
+		"--no-optional-locks",
+		"status",
+		"--porcelain=v2",
+		"--branch",
+		"--untracked-files=all",
+		"-z"
+	]);
+	const repo = {
+		head: null,
+		branch: null,
+		upstream: null,
+		remote: (await git(cwd, ["remote"])).stdout.trim() !== "",
+		ahead: 0,
+		behind: 0,
+		merge: [],
+		staged: [],
+		changes: []
+	};
+	const tokens = output.stdout.split("\0");
+	for (let index = 0; index < tokens.length; index++) {
+		const fields = tokens[index].split(" ");
+		if (fields[0] === "#" && fields[1] === "branch.oid") repo.head = fields[2] === "(initial)" ? null : fields[2];
+		if (fields[0] === "#" && fields[1] === "branch.head") repo.branch = fields[2] === "(detached)" ? null : fields[2];
+		if (fields[0] === "#" && fields[1] === "branch.upstream") repo.upstream = fields[2];
+		if (fields[0] === "#" && fields[1] === "branch.ab") {
+			repo.ahead = Number(fields[2]);
+			repo.behind = -Number(fields[3]);
+		}
+		if (fields[0] === "?") repo.changes.push({
+			path: tokens[index].slice(2),
+			from: null,
+			status: "U"
+		});
+		if (fields[0] === "u") repo.merge.push({
+			path: fields.slice(10).join(" "),
+			from: null,
+			status: "!"
+		});
+		if (fields[0] === "1" || fields[0] === "2") {
+			const renamed = fields[0] === "2";
+			const file = fields.slice(renamed ? 9 : 8).join(" ");
+			const from = renamed ? tokens[index + 1] : null;
+			if (fields[1][0] !== ".") repo.staged.push({
+				path: file,
+				from,
+				status: letter(fields[1][0])
+			});
+			if (fields[1][1] !== ".") repo.changes.push({
+				path: file,
+				from: null,
+				status: letter(fields[1][1])
+			});
+			if (renamed) index++;
+		}
+	}
+	return repo;
+}
+function letter(code) {
+	if (code === "M" || code === "T" || code === "A" || code === "D" || code === "R" || code === "C") return code;
+	throw new Error(`Unknown git status ${code}`);
+}
+//#endregion
 //#region src/services/terminal/paste.ts
 const pasteTypes = {
 	"image/png": "png",
@@ -6424,7 +6838,6 @@ function savePastedImage(type, data) {
 }
 //#endregion
 //#region src/storage/state.ts
-const stateFile = path.join(home, "state.json");
 const stateSchema = z.strictObject({ composer: z.strictObject({
 	provider: z.enum([
 		"claude",
@@ -6472,20 +6885,7 @@ const stateSchema = z.strictObject({ composer: z.strictObject({
 }).prefault({}) });
 const defaults = stateSchema.parse({});
 function readComposer() {
-	let user;
-	try {
-		user = readJson("state.json");
-	} catch (error) {
-		console.warn(`invalid ${stateFile}, using the default state: ${error}`);
-		return structuredClone(defaults.composer);
-	}
-	if (user === null) return structuredClone(defaults.composer);
-	const result = stateSchema.safeParse(user);
-	if (!result.success) {
-		console.warn(`invalid ${stateFile}, using the default state:\n${z.prettifyError(result.error)}`);
-		return structuredClone(defaults.composer);
-	}
-	return result.data.composer;
+	return readSettings("state.json", stateSchema, defaults).composer;
 }
 function saveComposer(value) {
 	const result = stateSchema.safeParse({ composer: value });
@@ -6510,7 +6910,8 @@ const handlers = {
 			projects: projects$1(),
 			sessions: sessions(),
 			providers: providerStatuses(),
-			activity: activity()
+			activity: activity(),
+			terminals: terminalCount(GLOBAL_TERMINALS)
 		};
 	},
 	"config.get": () => configInfo(),
@@ -6542,6 +6943,7 @@ const handlers = {
 		return null;
 	},
 	"projects.reorder": (params) => reorderProjects(params.ids),
+	"projects.logoFiles": (params) => logoFiles(projectPath(params.id)),
 	"directories.list": (params) => directories(params.path),
 	"sessions.update": async (params) => {
 		try {
@@ -6630,9 +7032,25 @@ const handlers = {
 	},
 	capabilities: (params) => capabilities(params.provider, params.accountId, params.projectId === null ? os.homedir() : projectPath(params.projectId)),
 	"files.list": (params) => listFiles(projectPath(params.projectId)),
+	"files.entries": (params) => listEntries(projectPath(params.projectId)),
 	"files.read": (params) => readProjectFile(projectPath(params.projectId), params.path),
+	"files.write": (params) => {
+		writeProjectFile(projectPath(params.projectId), params.path, params.content);
+		return null;
+	},
+	"files.create": (params) => {
+		createProjectEntry(projectPath(params.projectId), params.path, params.folder);
+		return null;
+	},
+	"files.rename": (params) => {
+		renameProjectEntry(projectPath(params.projectId), params.path, params.to);
+		return null;
+	},
+	"files.delete": (params) => {
+		deleteProjectEntry(projectPath(params.projectId), params.path);
+		return null;
+	},
 	"files.media": (params) => linkProjectMedia(projectPath(params.projectId), params.path),
-	"files.download": (params) => linkProjectDownload(projectPath(params.projectId), params.path),
 	"files.upload": (params) => saveUpload(params.name, Buffer.from(params.data, "base64")),
 	"files.browse": () => browseToken,
 	"browser.proxy": (params) => proxyPort(params.origin),
@@ -6640,6 +7058,16 @@ const handlers = {
 	"git.status": (params) => gitRepos(projectPath(params.projectId)),
 	"git.diff": (params) => projectDiff(projectPath(params.projectId)),
 	"git.commit": (params) => commit(path.join(projectPath(params.projectId), params.repo), params.message, params.push),
+	"git.changes": (params) => sourceControl(projectPath(params.projectId)),
+	"git.show": (params) => showFile(path.join(projectPath(params.projectId), params.repo), params.ref, params.path),
+	"git.history": (params) => history(path.join(projectPath(params.projectId), params.repo), params.limit),
+	"git.commitFiles": (params) => commitFiles(path.join(projectPath(params.projectId), params.repo), params.hash, params.parent),
+	"git.message": (params) => commitMessage(path.join(projectPath(params.projectId), params.repo), params.staged),
+	"git.undoCommit": (params) => undoCommit(path.join(projectPath(params.projectId), params.repo)),
+	"git.run": async (params) => {
+		await runAction(path.join(projectPath(params.projectId), params.repo), params.action);
+		return null;
+	},
 	"git.push": async (params) => {
 		await push$1(path.join(projectPath(params.projectId), params.repo));
 		return null;
@@ -6967,7 +7395,6 @@ function serveMedia(token, request, response) {
 	}
 	response.setHeader("access-control-allow-origin", "*");
 	response.setHeader("content-type", link.mediaType);
-	if (link.download !== null) response.setHeader("content-disposition", `attachment; filename*=UTF-8''${encodeURIComponent(link.download)}`);
 	response.setHeader("cache-control", "private, max-age=3600");
 	response.setHeader("content-security-policy", "sandbox");
 	response.setHeader("x-content-type-options", "nosniff");