parasor 0.1.0

package/server/bootstrap/project-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-runtime.js","sourceRoot":"","sources":["../../src/bootstrap/project-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAgC9D,SAAS,UAAU,CAAC,SAAiB,EAAE,YAAoB;IACzD,OAAO,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,EACnC,cAAc,EACd,QAAQ,EACR,aAAa,GACY;IACzB,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IACxD,0EAA0E;IAC1E,uEAAuE;IACvE,oEAAoE;IACpE,sDAAsD;IACtD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IAEpC,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,SAAS;IACT,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,SAAS,cAAc,CAAC,GAAW,EAAE,EAAuB;QAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACrB,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sEAAsE;IACtE,2EAA2E;IAC3E,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAyC,CAAC;IACxE,MAAM,oBAAoB,GAAG,GAAG,CAAC;IACjC,SAAS,eAAe,CAAC,SAAiB,EAAE,YAAoB;QAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QACrC,cAAc,CAAC,GAAG,CAChB,GAAG,EACH,UAAU,CAAC,GAAG,EAAE;YACd,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,iBAAiB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAClD,CAAC,EAAE,oBAAoB,CAAC,CACzB,CAAC;IACJ,CAAC;IAED,SAAS,oBAAoB,CAC3B,SAAiB,EACjB,YAAqB;QAErB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,sEAAsE;QACtE,oEAAoE;QACpE,mDAAmD;QACnD,IAAI,CAAC,YAAY,IAAI,YAAY,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpD,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,+DAA+D;QAC/D,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;YACpD,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACpD,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,UAAU,iBAAiB,CAC9B,SAAiB,EACjB,YAAoB;QAEpB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,YAAY,CACtD,SAAS,EACT,YAAY,CACb,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,oBAAoB,CAAC,SAAiB;QAC7C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACtD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,SAAS,YAAY,CACnB,SAAiB,EACjB,YAAoB;QAEpB,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAChD,OAAO,cAAc,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YACpC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO;YAElC,mEAAmE;YACnE,qEAAqE;YACrE,8DAA8D;YAC9D,MAAM,SAAS,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,WAAW,CAC7B,YAAY,EACZ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBACd,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpE,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAC3C,CAAC,EACD,GAAG,EAAE;gBACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1C,OAAO,EAAE,YAAY,EAAE,CAAC;gBACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/D,CAAC,EACD,KAAK,IAAI,EAAE;gBACT,MAAM,iBAAiB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACnD,CAAC,EACD,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,KAAK,CAClE,CAAC;YAEF,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC/B,MAAM,iBAAiB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,eAAe,CACtB,SAAiB,EACjB,YAAoB;QAEpB,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAChD,OAAO,cAAc,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YACpC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;YACD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YACD,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/B,UAAU,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,SAAiB;QAC/C,MAAM,MAAM,GAAG,GAAG,SAAS,GAAG,CAAC;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACtC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,YAAY,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACtC,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC1B,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;QAC5C,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,KAAK,MAAM,YAAY,IAAI,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3D,MAAM,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAC7B,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,oBAAoB;QACpB,YAAY,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE;QAC7C,yBAAyB,CAAC,UAAU;YAClC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,KAAK,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,eAAe,CAAC,OAAO;YACrB,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACvC,KAAK,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACxC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBACjD,KAAK,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACxC,mEAAmE;gBACnE,gEAAgE;gBAChE,gEAAgE;gBAChE,+DAA+D;gBAC/D,qEAAqE;gBACrE,KAAK,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,IACE,OAAO,CAAC,IAAI,KAAK,iBAAiB;gBAClC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EACpC,CAAC;gBACD,KAAK,gBAAgB,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClE,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACtC,KAAK,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACvC,KAAK,gBAAgB,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC1D,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC;gBACvC,KAAK,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC5C,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;wBAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QACD,kBAAkB,CAAC,SAAS;YAC1B,KAAK,gBAAgB,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,CAAC,cAAc;YAClB,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC5C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAAE,SAAS;gBACrD,KAAK,MAAM,YAAY,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC5D,MAAM,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY;YAC3C,MAAM,iBAAiB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,OAAO;YACX,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,MAAM,EAAE;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YACjE,cAAc,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,KAAK,GAAoB,EAAE,CAAC;YAClC,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC5C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,YAAY,CAAC,KAAK,EAAE,CAAC;YACrB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/server/bootstrap/pty-env.d.ts

@@ -0,0 +1,3 @@
+import type { ShimPaths } from "../cli/shim-installer.js";
+export declare function buildStaticPtyEnv(shims: ShimPaths, configDir: string): Record<string, string>;
+//# sourceMappingURL=pty-env.d.ts.map

package/server/bootstrap/pty-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-env.d.ts","sourceRoot":"","sources":["../../src/bootstrap/pty-env.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,SAAS,EAChB,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB"}

package/server/bootstrap/pty-env.js

@@ -0,0 +1,15 @@
+import { join } from "node:path";
+export function buildStaticPtyEnv(shims, configDir) {
+    return {
+        PARASOR_BASH_RC: shims.bashRcPath,
+        PARASOR_SOCKET: join(configDir, "parasor.sock"),
+        ...(shims.realOpen ? { PARASOR_REAL_OPEN: shims.realOpen } : {}),
+        ...(shims.realXdgOpen ? { PARASOR_REAL_XDG_OPEN: shims.realXdgOpen } : {}),
+        PATH: `${shims.binDir}:${process.env.PATH ?? ""}`,
+        ZDOTDIR: shims.zshDotdir,
+        TERM: "xterm-256color",
+        COLORTERM: "truecolor",
+        TERM_PROGRAM: "parasor",
+    };
+}
+//# sourceMappingURL=pty-env.js.map

package/server/bootstrap/pty-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-env.js","sourceRoot":"","sources":["../../src/bootstrap/pty-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,UAAU,iBAAiB,CAC/B,KAAgB,EAChB,SAAiB;IAEjB,OAAO;QACL,eAAe,EAAE,KAAK,CAAC,UAAU;QACjC,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC;QAC/C,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE;QACjD,OAAO,EAAE,KAAK,CAAC,SAAS;QACxB,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,WAAW;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC;AACJ,CAAC"}

package/server/bootstrap/reconcile-state.d.ts

@@ -0,0 +1,16 @@
+import type { PaneNode } from "@parasor/shared";
+import type { AppStateStore } from "../state/app-state.js";
+/**
+ * Reconcile persisted state at server boot. Only safe to call from the
+ * in-process branch (remote daemon mode pivots the session domain into
+ * read-only mirror BEFORE the server-side reconcile would run; the
+ * daemon owns its own boot-time reconciliation in that path).
+ *
+ * Split into per-domain mutator calls so the typed ownership boundary
+ * in `AppStateStore` stays honest. Persistence is debounced under the
+ * hood, so the writes coalesce into a single state.json flush via the
+ * awaited `flush()` at the end.
+ */
+export declare function reconcileStartupState(store: AppStateStore, now?: number): Promise<void>;
+export declare function pruneOrphanPanes(node: PaneNode, validIds: Set<string>): PaneNode | null;
+//# sourceMappingURL=reconcile-state.d.ts.map

package/server/bootstrap/reconcile-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-state.d.ts","sourceRoot":"","sources":["../../src/bootstrap/reconcile-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,aAAa,EACpB,GAAG,SAAa,GACf,OAAO,CAAC,IAAI,CAAC,CA2Cf;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,GACpB,QAAQ,GAAG,IAAI,CAgCjB"}

package/server/bootstrap/reconcile-state.js

@@ -0,0 +1,73 @@
+/**
+ * Reconcile persisted state at server boot. Only safe to call from the
+ * in-process branch (remote daemon mode pivots the session domain into
+ * read-only mirror BEFORE the server-side reconcile would run; the
+ * daemon owns its own boot-time reconciliation in that path).
+ *
+ * Split into per-domain mutator calls so the typed ownership boundary
+ * in `AppStateStore` stays honest. Persistence is debounced under the
+ * hood, so the writes coalesce into a single state.json flush via the
+ * awaited `flush()` at the end.
+ */
+export async function reconcileStartupState(store, now = Date.now()) {
+    // Sessions: mark any "running" survivors as ended (their PIDs are gone),
+    // and drop sessions whose project is gone (orphan filter).
+    store.mutateSessions((state) => {
+        const projectIds = new Set(state.projects.map((project) => project.id));
+        for (const session of state.sessions) {
+            if (session.state === "running") {
+                session.state = "ended";
+                session.pid = null;
+                session.endedAt = now;
+                session.generation += 1;
+            }
+        }
+        state.sessions = state.sessions.filter((session) => projectIds.has(session.projectId));
+    });
+    // ProjectStates: drop entries whose project is gone and prune orphan
+    // panes pointing at sessions that no longer exist.
+    store.mutateProjectStates((state) => {
+        const projectIds = new Set(state.projects.map((project) => project.id));
+        for (const key of Object.keys(state.projectStates)) {
+            if (!projectIds.has(key)) {
+                delete state.projectStates[key];
+            }
+        }
+        const validSessionIds = new Set(state.sessions.map((session) => session.id));
+        for (const projectState of Object.values(state.projectStates)) {
+            if (projectState.layout) {
+                projectState.layout = pruneOrphanPanes(projectState.layout, validSessionIds);
+            }
+        }
+    });
+    await store.flush();
+}
+export function pruneOrphanPanes(node, validIds) {
+    if (node.type === "terminal") {
+        return validIds.has(node.sessionId) ? node : null;
+    }
+    if (node.type === "browser" ||
+        node.type === "filetree" ||
+        node.type === "empty" ||
+        node.type === "diff") {
+        return node;
+    }
+    if (node.type === "split") {
+        const children = [];
+        const sizes = [];
+        for (let i = 0; i < node.children.length; i++) {
+            const child = pruneOrphanPanes(node.children[i], validIds);
+            if (child !== null) {
+                children.push(child);
+                sizes.push(node.sizes[i]);
+            }
+        }
+        if (children.length === 0)
+            return null;
+        if (children.length === 1)
+            return children[0];
+        return { ...node, children, sizes };
+    }
+    return null;
+}
+//# sourceMappingURL=reconcile-state.js.map

package/server/bootstrap/reconcile-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-state.js","sourceRoot":"","sources":["../../src/bootstrap/reconcile-state.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAoB,EACpB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,yEAAyE;IACzE,2DAA2D;IAC3D,KAAK,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;gBACxB,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;gBACnB,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC;gBACtB,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACjD,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAClC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,mDAAmD;IACnD,KAAK,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAC5C,CAAC;QAEF,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9D,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;gBACxB,YAAY,CAAC,MAAM,GAAG,gBAAgB,CACpC,YAAY,CAAC,MAAM,EACnB,eAAe,CAChB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAc,EACd,QAAqB;IAErB,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAED,IACE,IAAI,CAAC,IAAI,KAAK,SAAS;QACvB,IAAI,CAAC,IAAI,KAAK,UAAU;QACxB,IAAI,CAAC,IAAI,KAAK,OAAO;QACrB,IAAI,CAAC,IAAI,KAAK,MAAM,EACpB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAe,EAAE,CAAC;QAChC,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC3D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/server/bootstrap/runtime-loops.d.ts

@@ -0,0 +1,51 @@
+import type { Notification, PortInfo, ServiceConfig } from "@parasor/shared";
+import type { UploadStaging } from "../fs/upload-staging.js";
+import { PortForwarder } from "../port-forwarder/forwarder.js";
+import type { PortScanner } from "../port-scanner/scanner.js";
+import type { PtyHost } from "../pty/host.js";
+import type { AppStateStore } from "../state/app-state.js";
+import type { EventBus } from "../ws/events.js";
+import type { ProjectRuntime } from "./project-runtime.js";
+export interface StartRuntimeLoopsDeps {
+    appStateStore: AppStateStore;
+    eventBus: EventBus;
+    portScanner: PortScanner;
+    ptyManager: PtyHost;
+    projectRuntime: ProjectRuntime;
+    uploadStaging: UploadStaging;
+    reconcileWorktrees?: (projectId: string, prefetched?: import("@parasor/shared").Worktree[]) => Promise<void>;
+    /**
+     * The address parasor's own HTTP server is bound to (`hostname` from
+     * `selectBindAddress` in `index.ts`). Used to derive the per-port TCP
+     * forwarder's bind address via `resolveForwarderBindHost` -- loopback ⇒
+     * no forwarder. Defaults to `0.0.0.0` for callers that don't pass it.
+     * Ignored when `portForwarder` is supplied.
+     */
+    bindHost?: string;
+    /** Injectable for tests; defaults to one built from `bindHost`. */
+    portForwarder?: PortForwarder;
+    titlePollIntervalMs?: number;
+    gitPollIntervalMs?: number;
+    uploadSweepIntervalMs?: number;
+}
+export declare function createPortDetectedNotification(projectId: string, projectName: string, port: PortInfo, now?: number): Notification;
+/**
+ * Annotate each port with `reachable` (does the viewer device need nothing
+ * extra: dev server binds all interfaces, parasor is loopback-bound, or a TCP
+ * forwarder is up) and `reachablePort` (the forwarder's OS-assigned listen
+ * port when one fronts this dev port).
+ */
+export declare function enrichPorts(ports: PortInfo[], projectId: string, forwarder: PortForwarder): PortInfo[];
+export declare function broadcastForegroundTitles(ptyManager: PtyHost, eventBus: EventBus): void;
+export declare function startRuntimeLoops({ appStateStore, eventBus, portScanner, ptyManager, projectRuntime, uploadStaging, reconcileWorktrees, bindHost, portForwarder, titlePollIntervalMs, gitPollIntervalMs, uploadSweepIntervalMs, }: StartRuntimeLoopsDeps): {
+    stop(): void;
+    /**
+     * React to a `serviceConfig` change. On a `portDetection` transition,
+     * re-sync the forwarder for every known project (`off` ⇒ tear all
+     * forwarders down; back to `all-interfaces` ⇒ recreate them for the
+     * currently-known ports) and re-emit so clients see the updated
+     * `reachable`/`reachablePort`. Other fields are no-ops here.
+     */
+    onServiceConfigChanged(config: ServiceConfig): void;
+};
+//# sourceMappingURL=runtime-loops.d.ts.map

package/server/bootstrap/runtime-loops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-loops.d.ts","sourceRoot":"","sources":["../../src/bootstrap/runtime-loops.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAiB3D,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B,kBAAkB,CAAC,EAAE,CACnB,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,OAAO,iBAAiB,EAAE,QAAQ,EAAE,KAC9C,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,QAAQ,EACd,GAAG,SAAa,GACf,YAAY,CAgBd;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,QAAQ,EAAE,EACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,aAAa,GACvB,QAAQ,EAAE,CAWZ;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,OAAO,EACnB,QAAQ,EAAE,QAAQ,GACjB,IAAI,CAcN;AAED,wBAAgB,iBAAiB,CAAC,EAChC,aAAa,EACb,QAAQ,EACR,WAAW,EACX,UAAU,EACV,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,QAAoB,EACpB,aAAa,EACb,mBAAoD,EACpD,iBAAgD,EAChD,qBAAwD,GACzD,EAAE,qBAAqB;;IAkHpB;;;;;;OAMG;mCAC4B,aAAa;EAU/C"}

package/server/bootstrap/runtime-loops.js

@@ -0,0 +1,189 @@
+import { randomUUID } from "node:crypto";
+import { resolveForwarderBindHost } from "../net/reachable-host.js";
+import { PortForwarder } from "../port-forwarder/forwarder.js";
+const DEFAULT_TITLE_POLL_INTERVAL_MS = 1000;
+/**
+ * git-state poll cadence. Runs across every worktree of every active
+ * project so it scales linearly with worktree count. FileWatcher events
+ * remain the primary diff signal -- this loop is the safety net for cases
+ * the watcher misses (network filesystems, timer-coalesced events).
+ */
+const DEFAULT_GIT_POLL_INTERVAL_MS = 10_000;
+/**
+ * L3 upload-staging sweep cadence (upload staging isolation). 60 minutes is enough to
+ * keep the cleanup obligation off the critical path while still bounding
+ * worst-case dir age to ttl + 1h on a long-running server.
+ */
+const DEFAULT_UPLOAD_SWEEP_INTERVAL_MS = 60 * 60 * 1000;
+export function createPortDetectedNotification(projectId, projectName, port, now = Date.now()) {
+    return {
+        id: randomUUID(),
+        projectId,
+        type: "port-detected",
+        title: "Port detected",
+        message: `Port ${port.port} is listening in ${projectName}`,
+        timestamp: now,
+        read: false,
+        port: port.port,
+        bindsAll: port.bindsAll,
+        reachable: port.reachable ?? port.bindsAll,
+        ...(port.reachablePort !== undefined
+            ? { reachablePort: port.reachablePort }
+            : {}),
+    };
+}
+/**
+ * Annotate each port with `reachable` (does the viewer device need nothing
+ * extra: dev server binds all interfaces, parasor is loopback-bound, or a TCP
+ * forwarder is up) and `reachablePort` (the forwarder's OS-assigned listen
+ * port when one fronts this dev port).
+ */
+export function enrichPorts(ports, projectId, forwarder) {
+    return ports.map((info) => {
+        const reachablePort = forwarder.getReachablePort(projectId, info.port);
+        const reachable = info.bindsAll || forwarder.isInert() || reachablePort !== null;
+        return {
+            ...info,
+            reachable,
+            ...(reachablePort !== null ? { reachablePort } : {}),
+        };
+    });
+}
+export function broadcastForegroundTitles(ptyManager, eventBus) {
+    for (const session of ptyManager.list()) {
+        if (session.state !== "running")
+            continue;
+        if (session.titleManual === true)
+            continue;
+        const name = ptyManager.getForegroundProcess(session.id);
+        if (!name || name === session.title)
+            continue;
+        if (!ptyManager.setTitle(session.id, name))
+            continue;
+        eventBus.broadcast({
+            type: "session-title-changed",
+            sessionId: session.id,
+            title: name,
+            titleManual: false,
+        });
+    }
+}
+export function startRuntimeLoops({ appStateStore, eventBus, portScanner, ptyManager, projectRuntime, uploadStaging, reconcileWorktrees, bindHost = "0.0.0.0", portForwarder, titlePollIntervalMs = DEFAULT_TITLE_POLL_INTERVAL_MS, gitPollIntervalMs = DEFAULT_GIT_POLL_INTERVAL_MS, uploadSweepIntervalMs = DEFAULT_UPLOAD_SWEEP_INTERVAL_MS, }) {
+    // Tracks the last-seen `reachable` value for each port per project so we can
+    // re-notify when a port becomes reachable from the viewer device -- either it
+    // flips from loopback-only to public, or the TCP forwarder finishes binding
+    // (the forwarder's `listen` is async, so a freshly-detected loopback port is
+    // not yet reachable on the tick it first appears) -- without spamming on
+    // every tick.
+    const knownPorts = new Map();
+    // Last raw `PortInfo[]` per project (no `reachable`/`reachablePort`) so we
+    // can re-derive the enriched view when the forwarder changes out-of-band
+    // (async bind completes/errors) or the `portDetection` setting flips.
+    const lastPorts = new Map();
+    const forwarder = portForwarder ?? new PortForwarder(resolveForwarderBindHost(bindHost));
+    // Derive the enriched ports for `projectId` from `ports`, broadcast
+    // `ports-updated`, update the seen-reachability bookkeeping, and emit a
+    // `port-detected` notification for any port that just became reachable.
+    function reemitPorts(projectId, ports) {
+        const mode = appStateStore.get().serviceConfig.portDetection;
+        const enriched = enrichPorts(ports, projectId, forwarder);
+        eventBus.broadcast({ type: "ports-updated", projectId, ports: enriched });
+        const previous = knownPorts.get(projectId) ?? new Map();
+        const next = new Map(enriched.map((p) => [p.port, p.reachable === true]));
+        if (next.size === 0)
+            knownPorts.delete(projectId);
+        else
+            knownPorts.set(projectId, next);
+        if (mode === "off")
+            return;
+        const project = appStateStore
+            .get()
+            .projects.find((p) => p.id === projectId);
+        if (!project)
+            return;
+        for (const info of enriched) {
+            // mode === "all-interfaces" is the only notify-mode left (see local notify-mode cleanup).
+            // Notify only for ports the viewer can actually open.
+            if (!info.reachable)
+                continue;
+            const wasReachable = previous.get(info.port) === true;
+            if (wasReachable)
+                continue;
+            const notification = createPortDetectedNotification(projectId, project.name, info);
+            eventBus.addNotification(notification);
+            eventBus.broadcast({ type: "notification", notification });
+        }
+    }
+    // The forwarder's listen is async -- re-emit when it finishes binding (or its
+    // bind errored) so the now-reachable port reaches clients (and fires the
+    // toast). Registered unconditionally so it works for an injected test
+    // forwarder too.
+    forwarder.setOnChange((projectId) => {
+        const ports = lastPorts.get(projectId);
+        if (ports)
+            reemitPorts(projectId, ports);
+    });
+    portScanner.onPortsChanged((projectId, ports) => {
+        const mode = appStateStore.get().serviceConfig.portDetection;
+        // `portDetection === "off"` ⇒ no forwarder ever started (the user opted
+        // out of port detection entirely). The next non-"off" tick will sync.
+        forwarder.sync(projectId, mode === "off" ? [] : ports);
+        if (ports.length === 0)
+            lastPorts.delete(projectId);
+        else
+            lastPorts.set(projectId, ports);
+        reemitPorts(projectId, ports);
+    });
+    portScanner.start(() => ptyManager.list());
+    const titlePollTimer = setInterval(() => {
+        broadcastForegroundTitles(ptyManager, eventBus);
+    }, titlePollIntervalMs);
+    const gitPollTimer = setInterval(() => {
+        void projectRuntime.pollGitChanges();
+        if (reconcileWorktrees) {
+            for (const project of appStateStore.get().projects) {
+                void reconcileWorktrees(project.id);
+            }
+        }
+    }, gitPollIntervalMs);
+    const uploadSweepTimer = setInterval(() => {
+        uploadStaging.sweepStale().then(({ swept }) => {
+            if (swept.length > 0) {
+                console.log(`[upload-staging] L3 periodic sweep: removed ${swept.length} stale entries`);
+            }
+        }, (err) => {
+            console.error("[upload-staging] L3 periodic sweep failed:", err);
+        });
+    }, uploadSweepIntervalMs);
+    // Same idiom as startupCheckTimer in other loops -- `unref()` so a
+    // pending tick never holds the event loop open during graceful exit.
+    uploadSweepTimer.unref();
+    let lastPortDetection = appStateStore.get().serviceConfig.portDetection;
+    return {
+        stop() {
+            clearInterval(titlePollTimer);
+            clearInterval(gitPollTimer);
+            clearInterval(uploadSweepTimer);
+            portScanner.stop();
+            forwarder.stop();
+        },
+        /**
+         * React to a `serviceConfig` change. On a `portDetection` transition,
+         * re-sync the forwarder for every known project (`off` ⇒ tear all
+         * forwarders down; back to `all-interfaces` ⇒ recreate them for the
+         * currently-known ports) and re-emit so clients see the updated
+         * `reachable`/`reachablePort`. Other fields are no-ops here.
+         */
+        onServiceConfigChanged(config) {
+            if (config.portDetection === lastPortDetection)
+                return;
+            lastPortDetection = config.portDetection;
+            for (const projectId of new Set(lastPorts.keys())) {
+                const ports = lastPorts.get(projectId) ?? [];
+                forwarder.sync(projectId, config.portDetection === "off" ? [] : ports);
+                reemitPorts(projectId, ports);
+            }
+        },
+    };
+}
+//# sourceMappingURL=runtime-loops.js.map

package/server/bootstrap/runtime-loops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-loops.js","sourceRoot":"","sources":["../../src/bootstrap/runtime-loops.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAO/D,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAC5C;;;;;GAKG;AACH,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAC5C;;;;GAIG;AACH,MAAM,gCAAgC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AA4BxD,MAAM,UAAU,8BAA8B,CAC5C,SAAiB,EACjB,WAAmB,EACnB,IAAc,EACd,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,OAAO;QACL,EAAE,EAAE,UAAU,EAAE;QAChB,SAAS;QACT,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,oBAAoB,WAAW,EAAE;QAC3D,SAAS,EAAE,GAAG;QACd,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ;QAC1C,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE;YACvC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,KAAiB,EACjB,SAAiB,EACjB,SAAwB;IAExB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,aAAa,GAAG,SAAS,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,SAAS,GACb,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,aAAa,KAAK,IAAI,CAAC;QACjE,OAAO;YACL,GAAG,IAAI;YACP,SAAS;YACT,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,UAAmB,EACnB,QAAkB;IAElB,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QAC1C,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI;YAAE,SAAS;QAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,OAAO,CAAC,KAAK;YAAE,SAAS;QAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC;YAAE,SAAS;QACrD,QAAQ,CAAC,SAAS,CAAC;YACjB,IAAI,EAAE,uBAAuB;YAC7B,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAChC,aAAa,EACb,QAAQ,EACR,WAAW,EACX,UAAU,EACV,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,QAAQ,GAAG,SAAS,EACpB,aAAa,EACb,mBAAmB,GAAG,8BAA8B,EACpD,iBAAiB,GAAG,4BAA4B,EAChD,qBAAqB,GAAG,gCAAgC,GAClC;IACtB,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,cAAc;IACd,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC3D,2EAA2E;IAC3E,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAChD,MAAM,SAAS,GACb,aAAa,IAAI,IAAI,aAAa,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEzE,oEAAoE;IACpE,wEAAwE;IACxE,wEAAwE;IACxE,SAAS,WAAW,CAAC,SAAiB,EAAE,KAAiB;QACvD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC;QAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAmB,CAAC;QACzE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;;YAC7C,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAErC,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO;QAC3B,MAAM,OAAO,GAAG,aAAa;aAC1B,GAAG,EAAE;aACL,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,0FAA0F;YAC1F,sDAAsD;YACtD,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,SAAS;YAC9B,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;YACtD,IAAI,YAAY;gBAAE,SAAS;YAC3B,MAAM,YAAY,GAAG,8BAA8B,CACjD,SAAS,EACT,OAAO,CAAC,IAAI,EACZ,IAAI,CACL,CAAC;YACF,QAAQ,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,yEAAyE;IACzE,sEAAsE;IACtE,iBAAiB;IACjB,SAAS,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,KAAK;YAAE,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,WAAW,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC;QAC7D,wEAAwE;QACxE,sEAAsE;QACtE,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;;YAC/C,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAErC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;QACtC,yBAAyB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAExB,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;QACpC,KAAK,cAAc,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,kBAAkB,EAAE,CAAC;YACvB,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;gBACnD,KAAK,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAEtB,MAAM,gBAAgB,GAAG,WAAW,CAAC,GAAG,EAAE;QACxC,aAAa,CAAC,UAAU,EAAE,CAAC,IAAI,CAC7B,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YACZ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CACT,+CAA+C,KAAK,CAAC,MAAM,gBAAgB,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACN,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC,CACF,CAAC;IACJ,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC1B,mEAAmE;IACnE,qEAAqE;IACrE,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAEzB,IAAI,iBAAiB,GACnB,aAAa,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC;IAElD,OAAO;QACL,IAAI;YACF,aAAa,CAAC,cAAc,CAAC,CAAC;YAC9B,aAAa,CAAC,YAAY,CAAC,CAAC;YAC5B,aAAa,CAAC,gBAAgB,CAAC,CAAC;YAChC,WAAW,CAAC,IAAI,EAAE,CAAC;YACnB,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC;QACD;;;;;;WAMG;QACH,sBAAsB,CAAC,MAAqB;YAC1C,IAAI,MAAM,CAAC,aAAa,KAAK,iBAAiB;gBAAE,OAAO;YACvD,iBAAiB,GAAG,MAAM,CAAC,aAAa,CAAC;YACzC,KAAK,MAAM,SAAS,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAClD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC7C,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACvE,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/server/bootstrap/runtime-port.d.ts

@@ -0,0 +1,4 @@
+export declare function probePort(from: number, attempts: number, hostname: string): Promise<number>;
+export declare function writeRuntimeFile(runtimeFile: string, hostname: string, actualPort: number): void;
+export declare function removeRuntimeFile(runtimeFile: string): void;
+//# sourceMappingURL=runtime-port.d.ts.map

package/server/bootstrap/runtime-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-port.d.ts","sourceRoot":"","sources":["../../src/bootstrap/runtime-port.ts"],"names":[],"mappings":"AAIA,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAqBjB;AAED,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,IAAI,CA0BN;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAM3D"}

package/server/bootstrap/runtime-port.js

@@ -0,0 +1,52 @@
+import { unlinkSync } from "node:fs";
+import { createServer } from "node:net";
+import writeFileAtomic from "write-file-atomic";
+export async function probePort(from, attempts, hostname) {
+    for (let offset = 0; offset < attempts; offset++) {
+        const candidate = from + offset;
+        const available = await new Promise((resolve) => {
+            const tester = createServer();
+            tester.once("error", (err) => {
+                tester.close();
+                resolve(err.code !== "EADDRINUSE");
+            });
+            tester.once("listening", () => {
+                tester.close(() => resolve(true));
+            });
+            tester.listen(candidate, hostname);
+        });
+        if (available)
+            return candidate;
+    }
+    throw new Error(`No free port found in range ${from}..${from + attempts - 1} on ${hostname}`);
+}
+export function writeRuntimeFile(runtimeFile, hostname, actualPort) {
+    /*
+     * Atomic tmp-file-then-rename: previous implementation used a plain
+     * writeFileSync which could produce a partially-written file that
+     * readers (`parasor qr`, service wrappers) would parse as invalid JSON
+     * if they raced the server's startup. write-file-atomic's sync path
+     * writes to <file>.<randomsuffix>, fsyncs, then renames -- either
+     * readers see the old bytes or the new bytes, never a torn write.
+     */
+    try {
+        writeFileAtomic.sync(runtimeFile, JSON.stringify({
+            port: actualPort,
+            bindHost: hostname,
+            pid: process.pid,
+            startedAt: Date.now(),
+        }, null, 2));
+    }
+    catch (error) {
+        console.warn(`Failed to write runtime.json: ${error.message}`);
+    }
+}
+export function removeRuntimeFile(runtimeFile) {
+    try {
+        unlinkSync(runtimeFile);
+    }
+    catch {
+        // Already gone or never written -- nothing to clean up.
+    }
+}
+//# sourceMappingURL=runtime-port.js.map

package/server/bootstrap/runtime-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-port.js","sourceRoot":"","sources":["../../src/bootstrap/runtime-port.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAY,EACZ,QAAgB,EAChB,QAAgB;IAEhB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,GAAG,MAAM,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACvD,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;gBAClD,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;gBAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IAClC,CAAC;IAED,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,KAAK,IAAI,GAAG,QAAQ,GAAG,CAAC,OAAO,QAAQ,EAAE,CAC7E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,QAAgB,EAChB,UAAkB;IAElB;;;;;;;OAOG;IACH,IAAI,CAAC;QACH,eAAe,CAAC,IAAI,CAClB,WAAW,EACX,IAAI,CAAC,SAAS,CACZ;YACE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,QAAQ;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,iCAAkC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,IAAI,CAAC;QACH,UAAU,CAAC,WAAW,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;AACH,CAAC"}

package/server/bootstrap/safety-gate.d.ts

@@ -0,0 +1,22 @@
+import type { AuthMode } from "./create-app-server.js";
+export interface SelectBindAddressOptions {
+    explicit: string | undefined;
+}
+/**
+ * Default bind = `0.0.0.0` (all IPv4 interfaces). Matches the dominant
+ * pattern across self-hosted dev/web-terminal tools (ttyd / gotty / wetty /
+ * Next.js dev / Vite + `--host`). Auth (token + Origin) is the primary
+ * defense; restricting the bind is opt-in via `--host 127.0.0.1` for
+ * loopback-only or `--host <specific-ip>` for a single interface.
+ */
+export declare function selectBindAddress({ explicit, }: SelectBindAddressOptions): string;
+export declare function isLoopback(host: string): boolean;
+export interface EnforceSafetyGateOptions {
+    authMode: AuthMode;
+    bindHost: string;
+    allowUnsafe: boolean;
+    exit?: (code?: number) => never;
+    error?: (line: string) => void;
+}
+export declare function enforceSafetyGate({ authMode, bindHost, allowUnsafe, exit, error, }: EnforceSafetyGateOptions): void;
+//# sourceMappingURL=safety-gate.d.ts.map

package/server/bootstrap/safety-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-gate.d.ts","sourceRoot":"","sources":["../../src/bootstrap/safety-gate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAEvD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,QAAQ,GACT,EAAE,wBAAwB,GAAG,MAAM,CAGnC;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAYhD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,KAAK,CAAC;IAChC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAUD,wBAAgB,iBAAiB,CAAC,EAChC,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,IAAmB,EACnB,KAAqB,GACtB,EAAE,wBAAwB,GAAG,IAAI,CAMjC"}

package/server/bootstrap/safety-gate.js

@@ -0,0 +1,43 @@
+/**
+ * Default bind = `0.0.0.0` (all IPv4 interfaces). Matches the dominant
+ * pattern across self-hosted dev/web-terminal tools (ttyd / gotty / wetty /
+ * Next.js dev / Vite + `--host`). Auth (token + Origin) is the primary
+ * defense; restricting the bind is opt-in via `--host 127.0.0.1` for
+ * loopback-only or `--host <specific-ip>` for a single interface.
+ */
+export function selectBindAddress({ explicit, }) {
+    if (explicit && explicit.length > 0)
+        return explicit;
+    return "0.0.0.0";
+}
+export function isLoopback(host) {
+    if (host === "localhost")
+        return true;
+    if (host === "::1")
+        return true;
+    const parts = host.split(".").map(Number);
+    if (parts.length === 4 &&
+        parts.every((n) => Number.isInteger(n) && n >= 0 && n <= 255) &&
+        parts[0] === 127) {
+        return true;
+    }
+    return false;
+}
+const UNSAFE_MESSAGE = [
+    "Refusing to start: PARASOR_AUTH=none with non-loopback bind is unsafe.",
+    "Either:",
+    "  - Keep auth enabled (remove PARASOR_AUTH=none), or",
+    "  - Bind to loopback: HOST=127.0.0.1 (or --host 127.0.0.1)",
+    "Override for integration tests only: PARASOR_ALLOW_UNSAFE=1",
+].join("\n");
+export function enforceSafetyGate({ authMode, bindHost, allowUnsafe, exit = process.exit, error = console.error, }) {
+    if (authMode !== "none")
+        return;
+    if (isLoopback(bindHost))
+        return;
+    if (allowUnsafe)
+        return;
+    error(UNSAFE_MESSAGE);
+    exit(1);
+}
+//# sourceMappingURL=safety-gate.js.map

package/server/bootstrap/safety-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-gate.js","sourceRoot":"","sources":["../../src/bootstrap/safety-gate.ts"],"names":[],"mappings":"AAMA;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,QAAQ,GACiB;IACzB,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QAC7D,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAChB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAUD,MAAM,cAAc,GAAG;IACrB,wEAAwE;IACxE,SAAS;IACT,sDAAsD;IACtD,4DAA4D;IAC5D,6DAA6D;CAC9D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,UAAU,iBAAiB,CAAC,EAChC,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,IAAI,GAAG,OAAO,CAAC,IAAI,EACnB,KAAK,GAAG,OAAO,CAAC,KAAK,GACI;IACzB,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO;IAChC,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IACjC,IAAI,WAAW;QAAE,OAAO;IACxB,KAAK,CAAC,cAAc,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC"}

package/server/bootstrap/shutdown-marker.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Write a marker file at the end of a graceful shutdown. On next startup
+ * the absence of this file means the previous run crashed, which in turn
+ * means child PTY processes may be orphaned and unsafe to respawn with
+ * the same command (potential double-run).
+ *
+ * The default filename `shutdown.marker` belongs to the in-process
+ * server. Daemon-mode passes `daemon-shutdown.marker` so the two writers
+ * never collide on the same `state.json` directory -- a graceful
+ * server-side shutdown does not imply the daemon (which owns the PTY
+ * children in remote mode) also exited gracefully.
+ *
+ * The write is open->write->fsync(file)->close->fsync(dir) so a kernel
+ * panic between the graceful-exit code path and the next boot does not
+ * let the marker "exist" only in dirty page-cache while the post-panic
+ * boot reads its absence as graceful. The directory fsync is essential
+ * because the marker's *existence* (not its content) is what subsequent
+ * boots check -- without it, the directory entry created by `openSync`
+ * may live in dirty inode cache only (). Both fsyncs
+ * are best-effort: if either fails we still close the fd; worst case the
+ * marker is read as absent on the next boot, which is the conservative
+ * "treat as crash" side.
+ */
+export declare function writeShutdownMarker(configDir: string, filename?: string): void;
+/**
+ * Read the marker on startup. Returns true if the previous shutdown was
+ * graceful. The marker is always cleared so that a subsequent crash is
+ * correctly detected.
+ */
+export declare function readAndClearShutdownMarker(configDir: string, filename?: string): boolean;
+/** Convenience wrappers -- daemon-side callers should prefer these to keep
+ *  the marker filename centralised here. */
+export declare function writeDaemonShutdownMarker(stateDir: string): void;
+export declare function readAndClearDaemonShutdownMarker(stateDir: string): boolean;
+//# sourceMappingURL=shutdown-marker.d.ts.map

package/server/bootstrap/shutdown-marker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown-marker.d.ts","sourceRoot":"","sources":["../../src/bootstrap/shutdown-marker.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,MAA+B,GACxC,IAAI,CAwCN;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,MAA+B,GACxC,OAAO,CAWT;AAED;4CAC4C;AAC5C,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEhE;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1E"}