sliccy 6.103.1 → 6.104.0

package/README.md

@@ -34,6 +34,7 @@ Once you're in, you can:
 - Connect other browser windows or Electron apps into one shared session
 - Run leader-shell commands from the native iOS follower's Terminal tab, or ask the leader to open another iOS app after an on-device approval
 - Approve the agent's sudo requests from your iPhone with Face ID — including when the leader is running headless in the cloud — and get a push when a turn finishes or an approval is waiting
+- Keep an eye on the session from a **Cones & Scoops** home-screen widget on iPhone, iPad and the Mac desktop: what the cone is doing, the scoops under it, how full each context is, and whether anything needs you ([details](docs/widgets.md))
 - Install skills that teach the agent how to perform challenging tasks
 - Give it practical tools models already know how to use (`bash`, `git`, `node`, `python`, `playwright`)
 - Delegate parallel work to sub-agents so tasks get done faster
@@ -70,6 +71,7 @@ SLICC is for you if:
 - **Serve driveable previews.** `serve --bridge <dir>` mints a URL whose every visitor tab becomes a live, leader-driveable synthetic-CDP target — the agent can navigate/click/evaluate/screenshot and weave in webhook licks. **Security: opt-in only; cross-subdomain cookie risk accepted and documented (host-only cookies isolated per preview; `Domain=.sliccy.now` cookies readable across all previews).**
 - **Publish persistent previews.** `serve --ttl 30d <dir>` uploads an immutable snapshot that remains available without the tray leader for up to 30 days; `serve --stop <token>` revokes it early.
 - **Click a file the agent mentions.** When the agent writes a file name in chat — `bb.jsh`, `check.sh`, `packages/webapp/src/main.ts:42` — SLICC checks it against the workspace in the background and turns the ones that really exist into links. Clicking opens a preview; a mention that does not resolve stays plain text, so there are no dead links. A file with uncommitted changes opens on its diff. Names are read in the context of what the agent has already DONE: after `echo "test" > /home/lars/foo.md`, a later "see foo.md" links to that exact file — even when it lives outside the workspace, and even when three other `foo.md` files exist.
+- **Preview a pasted base64 payload instead of scrolling past it.** A blob pasted into chat — a screenshot as a `data:` URL, the output of `base64 < report.pdf` — collapses to a chip naming what it is and how big it is (`png · 12 KB`). Clicking opens it in the same previewer a file name does: images render, PDFs and audio play, text and JSON are syntax-highlighted. Only payloads SLICC can actually decode and recognize are collapsed; anything else stays exactly as you typed it, and long strings of every kind now wrap instead of dragging the chat column sideways.
 - **Read markdown and HTML, or read their source.** A `.md` or `.html` preview opens as the document — formatted prose, a laid-out page — with a **Source** toggle for the syntax-highlighted markup (and **Diff** when the file has uncommitted changes). HTML renders in a sandboxed frame that cannot run scripts or reach the app.
 - **Preview any file, not just the well-known types.** The previewer identifies files from their CONTENT rather than a list of extensions, so an unrecognized extension (`.jsh`, a `Justfile`) previews as source instead of refusing. Text is syntax-highlighted, PDFs render inline, and images, audio, and video play as before.
 - **Add visual and file context directly in chat.** Drop images or files onto the workspace, or use the paperclip button. Dropped `.skill` archives still install into `/workspace/skills`.

package/dist/node-server/_shared/base64.d.ts

@@ -1,3 +1,17 @@
+/**
+ * Strip the whitespace out of `b64` and confirm the rest is decodable
+ * base64, returning the compacted string — or `null` if it is not base64.
+ *
+ * The single place that answers "is this string a base64 payload?". The
+ * `<img:data:…>` marker classifier and the transcript's base64 preview both
+ * gate on it, so a payload one of them decodes is a payload the other
+ * recognizes. The result is safe to hand to {@link base64ToUint8} in any
+ * runtime; padding is left exactly as the caller wrote it, since restoring
+ * it would rewrite payloads that are round-tripped back into `data:` URLs.
+ *
+ * URL-safe base64 (`-` / `_`) is not accepted, matching `atob`.
+ */
+export declare function normalizeBase64(b64: string): string | null;
 /**
  * Decode a base64 string to `Uint8Array`.
  *
@@ -14,10 +28,12 @@
  *     (not Node's slab pool, which `Buffer.from` draws from for small
  *     inputs) — callers that read `.buffer` downstream and tests that
  *     deep-equal the bytes both need this;
- *   - the Node path validates against {@link STRICT_BASE64_RE} first and
- *     throws on invalid input. `atob` already throws; `Buffer.from`
- *     silently strips invalid characters, which would let bad payloads
- *     through callers that rely on the decoder rejecting them.
+ *   - the Node path validates against the same grammar `atob` implements
+ *     ({@link normalizeBase64}) and throws on invalid input, then restores
+ *     the padding `atob` would have inferred. `atob` already throws;
+ *     `Buffer.from` silently strips invalid characters and silently refuses
+ *     an unpadded tail, either of which would make the same payload behave
+ *     differently depending on the runtime it landed in.
  */
 export declare function base64ToUint8(b64: string): Uint8Array<ArrayBuffer>;
 /**

package/dist/node-server/_shared/base64.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../src/base64.ts"],"names":[],"mappings":"AAiDA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAclE;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAWvD"}
+{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../src/base64.ts"],"names":[],"mappings":"AA4DA;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG1D;AAQD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAgBlE;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAWvD"}

package/dist/node-server/_shared/base64.js

@@ -19,18 +19,51 @@ const CHUNK_SIZE = 0x8000;
 function nodeBuffer() {
     return globalThis.Buffer;
 }
-// Strict base64 grammar (no URL-safe variants — matches `atob`). Used to
-// gate Node's lenient `Buffer.from('base64')` so a malformed input throws
-// here instead of being silently stripped: the signed-fetch transport
-// surfaces a malformed reply as a clean "decode failed" EIO and relies
-// on the decoder being strict.
+// `atob`-compatible base64 grammar: padding OPTIONAL, a trailing group of
+// 2 or 3 alphabet characters accepted unpadded, a remainder of 1 rejected.
+// No URL-safe variants — `atob` does not accept them either.
+//
+// Used to gate Node's lenient `Buffer.from('base64')` so a malformed input
+// throws here instead of being silently stripped: the signed-fetch transport
+// surfaces a malformed reply as a clean "decode failed" EIO and relies on the
+// decoder rejecting it.
 //
 // Alphabet alone is not enough — `Buffer.from('abcde', 'base64')` and
 // `Buffer.from('abcd=', 'base64')` both decode successfully (and silently
-// drop or pad the trailing junk), while `atob` throws. Enforce the full
-// shape: a run of 4-char groups, optionally followed by one final group
-// of 2+`==`, 3+`=`, or 4 alphabet chars. Empty string is valid.
-const STRICT_BASE64_RE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})?$/;
+// drop or pad the trailing junk), while `atob` throws. So the full shape is
+// enforced: a run of 4-char groups, optionally followed by a final group of
+// 2 (+`==`), 3 (+`=`), or 4 alphabet characters. Empty string is valid.
+//
+// The grammar describes what `atob` ACCEPTS rather than the padded form,
+// because the two paths must agree: `atob` infers missing padding, so a
+// stricter Node path would make the same string decode in the browser and
+// throw under Node.
+const ATOB_BASE64_RE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}(?:==)?|[A-Za-z0-9+/]{3}=?)?$/;
+// The whitespace `atob` ignores, and that base64 producers insert to wrap
+// long payloads at a column limit (`base64`(1) wraps at 76 by default).
+const BASE64_WHITESPACE_RE = /[\t\n\f\r ]/g;
+/**
+ * Strip the whitespace out of `b64` and confirm the rest is decodable
+ * base64, returning the compacted string — or `null` if it is not base64.
+ *
+ * The single place that answers "is this string a base64 payload?". The
+ * `<img:data:…>` marker classifier and the transcript's base64 preview both
+ * gate on it, so a payload one of them decodes is a payload the other
+ * recognizes. The result is safe to hand to {@link base64ToUint8} in any
+ * runtime; padding is left exactly as the caller wrote it, since restoring
+ * it would rewrite payloads that are round-tripped back into `data:` URLs.
+ *
+ * URL-safe base64 (`-` / `_`) is not accepted, matching `atob`.
+ */
+export function normalizeBase64(b64) {
+    const compact = b64.replace(BASE64_WHITESPACE_RE, '');
+    return ATOB_BASE64_RE.test(compact) ? compact : null;
+}
+/** Restore the padding `atob` would have inferred, for decoders that will not. */
+function padded(b64) {
+    const remainder = b64.length % 4;
+    return remainder === 0 ? b64 : b64 + '='.repeat(4 - remainder);
+}
 /**
  * Decode a base64 string to `Uint8Array`.
  *
@@ -47,18 +80,23 @@ const STRICT_BASE64_RE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9
  *     (not Node's slab pool, which `Buffer.from` draws from for small
  *     inputs) — callers that read `.buffer` downstream and tests that
  *     deep-equal the bytes both need this;
- *   - the Node path validates against {@link STRICT_BASE64_RE} first and
- *     throws on invalid input. `atob` already throws; `Buffer.from`
- *     silently strips invalid characters, which would let bad payloads
- *     through callers that rely on the decoder rejecting them.
+ *   - the Node path validates against the same grammar `atob` implements
+ *     ({@link normalizeBase64}) and throws on invalid input, then restores
+ *     the padding `atob` would have inferred. `atob` already throws;
+ *     `Buffer.from` silently strips invalid characters and silently refuses
+ *     an unpadded tail, either of which would make the same payload behave
+ *     differently depending on the runtime it landed in.
  */
 export function base64ToUint8(b64) {
     const B = nodeBuffer();
     if (B) {
-        if (!STRICT_BASE64_RE.test(b64)) {
+        const normalized = normalizeBase64(b64);
+        if (normalized === null)
             throw new Error('Invalid base64 string');
-        }
-        return new Uint8Array(B.from(b64, 'base64'));
+        // `Buffer.from` will not infer the padding `atob` infers, so it is
+        // restored here rather than being demanded of the caller — otherwise the
+        // same unpadded payload decodes in the browser and throws under Node.
+        return new Uint8Array(B.from(padded(normalized), 'base64'));
     }
     const binary = atob(b64);
     const bytes = new Uint8Array(binary.length);

package/dist/node-server/_shared/base64.js.map

@@ -1 +1 @@
-{"version":3,"file":"base64.js","sourceRoot":"","sources":["../src/base64.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,gCAAgC;AAChC,EAAE;AACF,uEAAuE;AACvE,kEAAkE;AAClE,kEAAkE;AAClE,qEAAqE;AACrE,uEAAuE;AAEvE,8CAA8C;AAC9C,sEAAsE;AACtE,wEAAwE;AACxE,qEAAqE;AACrE,MAAM,UAAU,GAAG,MAAM,CAAC;AAa1B,SAAS,UAAU;IACjB,OAAQ,UAA0C,CAAC,MAAM,CAAC;AAC5D,CAAC;AAED,yEAAyE;AACzE,0EAA0E;AAC1E,sEAAsE;AACtE,uEAAuE;AACvE,+BAA+B;AAC/B,EAAE;AACF,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,wEAAwE;AACxE,gEAAgE;AAChE,MAAM,gBAAgB,GACpB,mFAAmF,CAAC;AAEtF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,CAAC;QACN,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,CAAC;QACN,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAA4B,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC"}
+{"version":3,"file":"base64.js","sourceRoot":"","sources":["../src/base64.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,gCAAgC;AAChC,EAAE;AACF,uEAAuE;AACvE,kEAAkE;AAClE,kEAAkE;AAClE,qEAAqE;AACrE,uEAAuE;AAEvE,8CAA8C;AAC9C,sEAAsE;AACtE,wEAAwE;AACxE,qEAAqE;AACrE,MAAM,UAAU,GAAG,MAAM,CAAC;AAa1B,SAAS,UAAU;IACjB,OAAQ,UAA0C,CAAC,MAAM,CAAC;AAC5D,CAAC;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,6DAA6D;AAC7D,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,wBAAwB;AACxB,EAAE;AACF,sEAAsE;AACtE,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,wEAAwE;AACxE,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,oBAAoB;AACpB,MAAM,cAAc,GAAG,wEAAwE,CAAC;AAEhG,0EAA0E;AAC1E,wEAAwE;AACxE,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,kFAAkF;AAClF,SAAS,MAAM,CAAC,GAAW;IACzB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,UAAU,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAClE,mEAAmE;QACnE,yEAAyE;QACzE,sEAAsE;QACtE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,CAAC;QACN,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAA4B,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC"}