tmuxes 0.1.9 → 0.1.10

package/dist/targets.js

@@ -0,0 +1,131 @@
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { isValidHostAlias, parseHostSpec } from './validate.js';
+import { isWindows } from './platform.js';
+import { listWslDistros } from './wsl.js';
+import { winShell } from './winshell/manager.js';
+import { log } from './logger.js';
+/** Native Windows shells (PowerShell/cmd via ConPTY). Enabled on Windows, or
+ *  anywhere via TMUXES_FAKE_WINSHELL for testing the path on Linux/macOS. */
+const WINSHELL_ENABLED = isWindows || !!process.env.TMUXES_FAKE_WINSHELL;
+function winlocalTarget() {
+    return {
+        id: 'winlocal',
+        kind: 'winlocal',
+        label: isWindows ? 'Windows (local)' : 'Local shell (fake)',
+        shells: winShell.listShells(),
+    };
+}
+const ID_RE = /^[A-Za-z0-9._-]{1,128}$/;
+export function isValidTargetId(id) {
+    return typeof id === 'string' && ID_RE.test(id);
+}
+function slug(s) {
+    return s.replace(/[^A-Za-z0-9._-]/g, '-');
+}
+const LOCAL = { id: 'local', kind: 'local', label: 'Local' };
+/** Best-effort, read-only parse of ~/.ssh/config Host aliases (no wildcards). */
+function parseSshConfig() {
+    const path = join(homedir(), '.ssh', 'config');
+    let text;
+    try {
+        text = readFileSync(path, 'utf8');
+    }
+    catch {
+        return []; // no config file is normal
+    }
+    const targets = [];
+    const seen = new Set();
+    for (const rawLine of text.split('\n')) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith('#'))
+            continue;
+        const m = /^Host\s+(.+)$/i.exec(line);
+        if (!m)
+            continue;
+        for (const token of m[1].split(/\s+/)) {
+            // Skip wildcard / negated patterns — they aren't concrete hosts.
+            if (token.includes('*') || token.includes('?') || token.startsWith('!'))
+                continue;
+            if (!isValidHostAlias(token) || seen.has(token))
+                continue;
+            seen.add(token);
+            targets.push({ id: `cfg-${slug(token)}`, kind: 'ssh', label: token, host: token });
+        }
+    }
+    return targets;
+}
+/** Parse the TMUXES_HOSTS="alice@web1,bob@db2:2222" override. */
+function parseEnvHosts() {
+    const env = process.env.TMUXES_HOSTS;
+    if (!env)
+        return [];
+    const targets = [];
+    for (const part of env.split(',')) {
+        const spec = parseHostSpec(part);
+        if (!spec) {
+            log.warn(`ignoring invalid TMUXES_HOSTS entry: ${part.trim()}`);
+            continue;
+        }
+        const label = `${spec.user ? `${spec.user}@` : ''}${spec.host}${spec.port ? `:${spec.port}` : ''}`;
+        targets.push({
+            id: `env-${slug(label)}`,
+            kind: 'ssh',
+            label,
+            host: spec.host,
+            user: spec.user,
+            port: spec.port,
+        });
+    }
+    return targets;
+}
+function sshTargets() {
+    const all = [...parseEnvHosts(), ...parseSshConfig()];
+    const byId = new Map();
+    for (const t of all)
+        if (!byId.has(t.id))
+            byId.set(t.id, t);
+    return [...byId.values()];
+}
+/** The synchronous part of the target list (everything except WSL discovery). */
+function baseTargets() {
+    const base = [];
+    if (WINSHELL_ENABLED)
+        base.push(winlocalTarget());
+    // Windows has no native tmux; its "local" machine is reached through WSL.
+    if (!isWindows)
+        base.push(LOCAL);
+    return [...base, ...sshTargets()];
+}
+// Cache so the (async, Windows-only) WSL discovery doesn't run on the WS
+// upgrade path. The client always GETs /api/targets first, which refreshes it.
+let cachedTargets = baseTargets();
+/** Recompute the full target list, including WSL distros on Windows. */
+export async function refreshTargets() {
+    if (isWindows) {
+        const distros = await listWslDistros();
+        const wsl = distros.map((name) => ({
+            id: `wsl-${slug(name)}`,
+            kind: 'wsl',
+            label: name,
+            distro: name,
+        }));
+        cachedTargets = [winlocalTarget(), ...wsl, ...sshTargets()];
+    }
+    else {
+        cachedTargets = baseTargets();
+    }
+    return cachedTargets;
+}
+export function listTargets() {
+    return cachedTargets;
+}
+export function getTarget(id) {
+    return cachedTargets.find((t) => t.id === id);
+}
+/** ssh destination string: "user@host" or just the config alias / host. */
+export function sshDestination(t) {
+    return t.user ? `${t.user}@${t.host}` : `${t.host}`;
+}
+//# sourceMappingURL=targets.js.map

package/dist/targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.js","sourceRoot":"","sources":["../src/targets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAmBlC;6EAC6E;AAC7E,MAAM,gBAAgB,GAAG,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAEzE,SAAS,cAAc;IACrB,OAAO;QACL,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB;QAC3D,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,KAAK,GAAG,yBAAyB,CAAC;AAExC,MAAM,UAAU,eAAe,CAAC,EAAW;IACzC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,KAAK,GAAW,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAErE,iFAAiF;AACjF,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,2BAA2B;IACxC,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,iEAAiE;YACjE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClF,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC1D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iEAAiE;AACjE,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,wCAAwC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACnG,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE;YACxB,IAAI,EAAE,KAAK;YACX,KAAK;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,CAAC,GAAG,aAAa,EAAE,EAAE,GAAG,cAAc,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,iFAAiF;AACjF,SAAS,WAAW;IAClB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,gBAAgB;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IAClD,0EAA0E;IAC1E,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,yEAAyE;AACzE,+EAA+E;AAC/E,IAAI,aAAa,GAAa,WAAW,EAAE,CAAC;AAE5C,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;QACvC,MAAM,GAAG,GAAa,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,EAAE,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE;YACvB,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;SACb,CAAC,CAAC,CAAC;QACJ,aAAa,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,aAAa,GAAG,WAAW,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACtD,CAAC"}

package/dist/tmux/builder.js

@@ -0,0 +1,174 @@
+import { createHash } from 'node:crypto';
+import { mkdirSync } from 'node:fs';
+import { homedir, tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { config } from '../config.js';
+import { sshDestination } from '../targets.js';
+import { isWindows } from '../platform.js';
+/**
+ * Single-quote a string for a POSIX shell. Needed ONLY for the remote ssh path:
+ * ssh concatenates the remote command words with spaces and re-parses them
+ * through the remote login shell, so each tmux arg must survive that re-parse.
+ * Local commands use pure argv (no shell) and need no quoting.
+ */
+export function sshQuote(arg) {
+    return `'${arg.replace(/'/g, `'\\''`)}'`;
+}
+/** Local tmux management/attach argv — passed straight to spawn (shell:false). */
+export function localTmux(sub) {
+    return ['tmux', ...sub];
+}
+function sshControlDir() {
+    // OpenSSH connection sharing avoids repeated TCP/auth handshakes for sidebar
+    // polling and file operations. Windows OpenSSH accepts the config but fails
+    // at runtime on mux sockets, so Windows management uses an app-owned SSH
+    // session instead of ControlMaster.
+    if (isWindows)
+        return null;
+    const uid = process.getuid?.() ?? 'user';
+    const dir = join(tmpdir(), `tmuxes-ssh-${uid}`);
+    try {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    catch {
+        return null;
+    }
+    return dir;
+}
+export function sshControlPath(t) {
+    const dir = sshControlDir();
+    if (!dir)
+        return null;
+    const key = `${sshDestination(t)}:${t.port ?? 22}:${t.id}`;
+    return join(dir, createHash('sha1').update(key).digest('hex'));
+}
+function sshMultiplexArgs(t) {
+    const path = sshControlPath(t);
+    if (!path)
+        return [];
+    return [
+        '-o',
+        'ControlMaster=auto',
+        '-o',
+        `ControlPath=${path}`,
+        '-o',
+        `ControlPersist=${config.ssh.controlPersist}`,
+    ];
+}
+export function sshClientArgs(t, opts) {
+    const portArgs = t.port ? ['-p', String(t.port)] : [];
+    return [
+        'ssh',
+        ...(opts.tty ? ['-tt'] : []),
+        ...(opts.batchMode ? ['-o', 'BatchMode=yes'] : []),
+        '-o',
+        `ConnectTimeout=${opts.connectTimeout}`,
+        ...(opts.multiplex === false ? ['-o', 'ControlMaster=no'] : sshMultiplexArgs(t)),
+        ...portArgs,
+        sshDestination(t),
+    ];
+}
+/**
+ * Remote tmux argv via the system ssh binary.
+ * - tty:false (management) → BatchMode + short ConnectTimeout so it fails fast
+ *   and never hangs on a prompt. Remote args are sshQuote'd.
+ * - tty:true (interactive attach) → -tt forces a remote PTY (and SIGWINCH
+ *   propagation). BatchMode is left default so host-key/agent prompts surface
+ *   in the terminal. tmuxes does not force ServerAliveInterval; users can set
+ *   keepalives in ~/.ssh/config if their site allows them. Remote args are NOT
+ *   quoted here: this argv is handed to a PTY where the remote command words go
+ *   to ssh as separate argv elements and our inputs are already allowlist-
+ *   validated.
+ */
+export function remoteTmux(t, sub, opts) {
+    if (opts.tty) {
+        return [
+            ...sshClientArgs(t, {
+                tty: true,
+                connectTimeout: config.ssh.connectTimeoutTty,
+                multiplex: opts.multiplex,
+            }),
+            'tmux',
+            ...sub,
+        ];
+    }
+    return [
+        ...sshClientArgs(t, {
+            batchMode: true,
+            connectTimeout: config.ssh.connectTimeoutMgmt,
+            multiplex: opts.multiplex,
+        }),
+        'tmux',
+        ...sub.map(sshQuote),
+    ];
+}
+/**
+ * tmux inside a WSL distro (Windows host). We use `--exec` (NOT `--`): `--`
+ * runs the command through the distro's login shell, which would re-parse tmux
+ * format strings (`#{...}` is a comment, `|` a pipe) and mangle them; `--exec`
+ * execs the binary directly with no shell, so argv maps straight through with
+ * no quoting — like the local path. The interactive case sets TERM via `env`
+ * because WSL does not inherit the Windows TERM.
+ */
+export function wslTmux(distro, sub, opts) {
+    const prefix = opts.tty ? ['env', 'TERM=xterm-256color', 'tmux'] : ['tmux'];
+    return ['wsl.exe', '-d', distro, '--exec', ...prefix, ...sub];
+}
+/**
+ * Build a non-PTY argv to run an ARBITRARY command on a target (tmux, ls, cat,
+ * display-message, …). Same transport rules as management tmux: local runs the
+ * argv directly, wsl uses `--exec` (no shell), ssh uses BatchMode + sshQuote.
+ */
+export function commandArgv(t, argv, opts = {}) {
+    let full;
+    if (t.kind === 'local') {
+        full = argv;
+    }
+    else if (t.kind === 'wsl') {
+        full = ['wsl.exe', '-d', t.distro ?? '', '--exec', ...argv];
+    }
+    else {
+        full = [
+            ...sshClientArgs(t, {
+                batchMode: true,
+                connectTimeout: config.ssh.connectTimeoutMgmt,
+                multiplex: opts.multiplex,
+            }),
+            ...argv.map(sshQuote),
+        ];
+    }
+    return { file: full[0], args: full.slice(1) };
+}
+/** Build a management argv (no PTY) for a local / ssh / wsl target. */
+export function managementArgv(t, sub, opts = {}) {
+    return commandArgv(t, ['tmux', ...sub], opts);
+}
+/**
+ * Build the create-a-new-session argv, always starting in the user's HOME:
+ * - local → tmux `-c <homedir>` (explicit, regardless of the server's cwd),
+ * - wsl   → `wsl --cd ~` runs the command from the distro's home; tmux inherits,
+ * - ssh   → the remote command already runs from the remote `$HOME`; tmux inherits.
+ * `sub` is the new-session subcommand (named or auto-named `-P` form).
+ */
+export function newSessionArgv(t, sub, opts = {}) {
+    if (t.kind === 'local') {
+        return { file: 'tmux', args: [...sub, '-c', homedir()] };
+    }
+    if (t.kind === 'wsl') {
+        return { file: 'wsl.exe', args: ['-d', t.distro ?? '', '--cd', '~', '--exec', 'tmux', ...sub] };
+    }
+    return commandArgv(t, ['tmux', ...sub], opts);
+}
+/** Build an interactive attach argv (run inside a PTY) for a local / ssh / wsl target. */
+export function attachArgv(t, session) {
+    const sub = ['new-session', '-A', '-s', session]; // NO -d: the PTY supplies the terminal
+    let argv;
+    if (t.kind === 'local')
+        argv = localTmux(sub);
+    else if (t.kind === 'wsl')
+        argv = wslTmux(t.distro ?? '', sub, { tty: true });
+    else
+        argv = remoteTmux(t, sub, { tty: true });
+    return { file: argv[0], args: argv.slice(1) };
+}
+//# sourceMappingURL=builder.js.map

package/dist/tmux/builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/tmux/builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,cAAc,EAAe,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,GAAa;IACrC,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa;IACpB,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,oCAAoC;IACpC,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,MAAM,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,GAAG,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,GAAG,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;IAC3D,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,OAAO;QACL,IAAI;QACJ,oBAAoB;QACpB,IAAI;QACJ,eAAe,IAAI,EAAE;QACrB,IAAI;QACJ,kBAAkB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,CAAS,EACT,IAAyF;IAEzF,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,OAAO;QACL,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI;QACJ,kBAAkB,IAAI,CAAC,cAAc,EAAE;QACvC,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAChF,GAAG,QAAQ;QACX,cAAc,CAAC,CAAC,CAAC;KAClB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CACxB,CAAS,EACT,GAAa,EACb,IAA2C;IAE3C,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,OAAO;YACL,GAAG,aAAa,CAAC,CAAC,EAAE;gBAClB,GAAG,EAAE,IAAI;gBACT,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB;gBAC5C,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YACF,MAAM;YACN,GAAG,GAAG;SACP,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,aAAa,CAAC,CAAC,EAAE;YAClB,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB;YAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;QACF,MAAM;QACN,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;KACrB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,GAAa,EAAE,IAAsB;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5E,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,CAAS,EACT,IAAc,EACd,OAAgC,EAAE;IAElC,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;SAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,IAAI,GAAG;YACL,GAAG,aAAa,CAAC,CAAC,EAAE;gBAClB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB;gBAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YACF,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;SACtB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,cAAc,CAC5B,CAAS,EACT,GAAa,EACb,OAAgC,EAAE;IAElC,OAAO,WAAW,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,CAAS,EACT,GAAa,EACb,OAAgC,EAAE;IAElC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;IAClG,CAAC;IACD,OAAO,WAAW,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,UAAU,CAAC,CAAS,EAAE,OAAe;IACnD,MAAM,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,uCAAuC;IACzF,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;SACzC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;;QACzE,IAAI,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC"}

package/dist/tmux/formats.js

@@ -0,0 +1,61 @@
+/** tmux -F format strings + parsers.
+ *
+ *  tmux ESCAPES control characters in -F output (e.g. 0x1f comes back as the
+ *  literal text "\037"), so we cannot use a control byte as a separator. We use
+ *  a printable "|" and place the only free-form field (the name) LAST, then
+ *  rejoin the remainder — robust even if a name itself contains "|", because
+ *  the leading numeric fields never do. */
+import { AGENT_OPTION, parseAgentValue } from '../agentState.js';
+const SEP = '|';
+export const SESSION_FORMAT = [
+    '#{session_windows}',
+    '#{session_attached}',
+    '#{session_created}',
+    '#{session_activity}', // epoch from tmux; kept for display/debug
+    `#{${AGENT_OPTION}}`, // agent hook state: "<kind>:<state>:<reason>:<event>:<nonce>"
+    '#{session_name}', // free-form → must be last
+].join(SEP);
+export const WINDOW_FORMAT = [
+    '#{window_index}',
+    '#{window_panes}',
+    '#{window_active}',
+    '#{window_name}', // free-form → must be last
+].join(SEP);
+export function parseSessions(stdout) {
+    return stdout
+        .split('\n')
+        .filter((l) => l.length > 0)
+        .map((line) => {
+        const parts = line.split(SEP);
+        const agent = parseAgentValue(parts[4] || '');
+        return {
+            windows: Number(parts[0]) || 0,
+            attached: Number(parts[1]) > 0,
+            created: Number(parts[2]) || 0,
+            lastActivity: Number(parts[3]) || 0,
+            ...agent,
+            name: parts.slice(5).join(SEP), // name may legitimately contain "|"
+        };
+    })
+        .filter((s) => s.name);
+}
+export function parseWindows(stdout) {
+    return stdout
+        .split('\n')
+        .filter((l) => l.length > 0)
+        .map((line) => {
+        const parts = line.split(SEP);
+        return {
+            index: Number(parts[0]) || 0,
+            panes: Number(parts[1]) || 0,
+            active: Number(parts[2]) > 0,
+            name: parts.slice(3).join(SEP),
+        };
+    });
+}
+/** stderr patterns that mean "no sessions" rather than a real error. */
+const EMPTY_RE = /no server running|no sessions|error connecting to/i;
+export function isEmptySessionsError(stderr) {
+    return EMPTY_RE.test(stderr);
+}
+//# sourceMappingURL=formats.js.map

package/dist/tmux/formats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formats.js","sourceRoot":"","sources":["../../src/tmux/formats.ts"],"names":[],"mappings":"AAAA;;;;;;2CAM2C;AAE3C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAyD,MAAM,kBAAkB,CAAC;AAExH,MAAM,GAAG,GAAG,GAAG,CAAC;AAEhB,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB,EAAE,0CAA0C;IACjE,KAAK,YAAY,GAAG,EAAE,8DAA8D;IACpF,iBAAiB,EAAE,2BAA2B;CAC/C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB,EAAE,2BAA2B;CAC9C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AA6BZ,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnC,GAAG,KAAK;YACR,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,oCAAoC;SACrE,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5B,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED,wEAAwE;AACxE,MAAM,QAAQ,GAAG,oDAAoD,CAAC;AAEtE,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}

package/dist/tmux/sessions.js

@@ -0,0 +1,157 @@
+import { managementArgv, newSessionArgv } from './builder.js';
+import { runTargetCommand } from '../targetCommand.js';
+import { AGENT_OPTION, agentValue, agentInitialValue, parseAgentValue, } from '../agentState.js';
+import { augmentAgentCommand } from '../agentHooks.js';
+import { classifyAgentTerminalError } from '../agentOutput.js';
+import { SESSION_FORMAT, WINDOW_FORMAT, parseSessions, parseWindows, isEmptySessionsError, } from './formats.js';
+import { isValidSessionName } from '../validate.js';
+/** A management error carrying the HTTP status the router should return. */
+export class TmuxError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'TmuxError';
+    }
+}
+// Hard ceiling so a wedged ssh can never hang a request (ssh also has ConnectTimeout).
+const REMOTE_TIMEOUT_MS = 15_000;
+function timeoutFor(target) {
+    // Bound ssh (network) and wsl (possible cold start) so a request can't hang.
+    return target.kind === 'local' ? undefined : REMOTE_TIMEOUT_MS;
+}
+async function run(target, sub) {
+    return runTargetCommand(target, (opts) => managementArgv(target, sub, opts), {
+        timeoutMs: timeoutFor(target),
+    });
+}
+function firstStderrLine(stderr) {
+    return stderr.trim().split('\n')[0] || 'command failed';
+}
+export async function listSessions(target) {
+    const r = await run(target, ['list-sessions', '-F', SESSION_FORMAT]);
+    if (r.code === 0)
+        return reconcileAgentTerminalErrors(target, parseSessions(r.stdout));
+    // "no server running" / "no sessions" is the normal empty case.
+    if (isEmptySessionsError(r.stderr))
+        return [];
+    throw new TmuxError(502, firstStderrLine(r.stderr));
+}
+async function reconcileAgentTerminalErrors(target, sessions) {
+    return Promise.all(sessions.map((session) => reconcileAgentTerminalError(target, session)));
+}
+async function reconcileAgentTerminalError(target, session) {
+    if (!session.agentKind || session.agentState !== 'running')
+        return session;
+    const pane = await run(target, ['capture-pane', '-t', session.name, '-p', '-S', '-20']);
+    if (pane.code !== 0)
+        return session;
+    const event = classifyAgentTerminalError(pane.stdout, session.agentKind);
+    if (!event)
+        return session;
+    const value = agentValue(session.agentKind, 'idle', 'error', event, String(Date.now()));
+    const set = await run(target, ['set-option', '-t', session.name, '-q', AGENT_OPTION, value]);
+    if (set.code !== 0)
+        return session;
+    const snapshot = parseAgentValue(value);
+    return snapshot ? { ...session, ...snapshot } : session;
+}
+export async function createSession(target, opts) {
+    let name = opts.name;
+    // New sessions always start in the user's home directory (newSessionArgv).
+    if (name) {
+        if (!isValidSessionName(name))
+            throw new TmuxError(400, 'invalid session name');
+        const sessionName = name;
+        const r = await runTargetCommand(target, (opts) => newSessionArgv(target, ['new-session', '-d', '-s', sessionName], opts), { timeoutMs: timeoutFor(target) });
+        if (r.code !== 0) {
+            if (/duplicate session/i.test(r.stderr)) {
+                throw new TmuxError(409, `session "${name}" already exists`);
+            }
+            throw new TmuxError(502, firstStderrLine(r.stderr));
+        }
+    }
+    else {
+        // Let tmux assign a numeric name and report it back.
+        const r = await runTargetCommand(target, (opts) => newSessionArgv(target, ['new-session', '-d', '-P', '-F', '#{session_name}'], opts), { timeoutMs: timeoutFor(target) });
+        if (r.code !== 0)
+            throw new TmuxError(502, firstStderrLine(r.stderr));
+        name = r.stdout.trim();
+    }
+    if (opts.command && opts.command.length > 0) {
+        const augmented = augmentAgentCommand(opts.command);
+        if (augmented.kind) {
+            await run(target, [
+                'set-option',
+                '-t',
+                name,
+                '-q',
+                AGENT_OPTION,
+                agentInitialValue(augmented.kind),
+            ]);
+        }
+        // Type the command literally, then press Enter. Two send-keys calls so the
+        // command text can never be misparsed as a key name.
+        await run(target, ['send-keys', '-t', name, '-l', augmented.command]);
+        await run(target, ['send-keys', '-t', name, 'Enter']);
+    }
+    return { name };
+}
+export async function launchAgentInSession(target, name, agent) {
+    const augmented = augmentAgentCommand(agent);
+    if (!augmented.kind)
+        throw new TmuxError(400, 'unsupported agent');
+    const set = await run(target, [
+        'set-option',
+        '-t',
+        name,
+        '-q',
+        AGENT_OPTION,
+        agentInitialValue(augmented.kind),
+    ]);
+    if (set.code !== 0) {
+        if (/can't find session|session not found|no server running/i.test(set.stderr)) {
+            throw new TmuxError(404, `session "${name}" not found`);
+        }
+        throw new TmuxError(502, firstStderrLine(set.stderr));
+    }
+    const send = await run(target, ['send-keys', '-t', name, '-l', augmented.command]);
+    if (send.code !== 0)
+        throw new TmuxError(502, firstStderrLine(send.stderr));
+    const enter = await run(target, ['send-keys', '-t', name, 'Enter']);
+    if (enter.code !== 0)
+        throw new TmuxError(502, firstStderrLine(enter.stderr));
+}
+export async function renameSession(target, name, newName) {
+    if (!isValidSessionName(newName))
+        throw new TmuxError(400, 'invalid new session name');
+    const r = await run(target, ['rename-session', '-t', name, newName]);
+    if (r.code === 0)
+        return;
+    if (/can't find session|session not found/i.test(r.stderr)) {
+        throw new TmuxError(404, `session "${name}" not found`);
+    }
+    if (/duplicate session/i.test(r.stderr)) {
+        throw new TmuxError(409, `session "${newName}" already exists`);
+    }
+    throw new TmuxError(502, firstStderrLine(r.stderr));
+}
+export async function killSession(target, name) {
+    const r = await run(target, ['kill-session', '-t', name]);
+    if (r.code === 0)
+        return;
+    if (/can't find session|session not found|no server running/i.test(r.stderr)) {
+        throw new TmuxError(404, `session "${name}" not found`);
+    }
+    throw new TmuxError(502, firstStderrLine(r.stderr));
+}
+export async function listWindows(target, name) {
+    const r = await run(target, ['list-windows', '-t', name, '-F', WINDOW_FORMAT]);
+    if (r.code === 0)
+        return parseWindows(r.stdout);
+    if (/can't find session|session not found|no server running/i.test(r.stderr)) {
+        throw new TmuxError(404, `session "${name}" not found`);
+    }
+    throw new TmuxError(502, firstStderrLine(r.stderr));
+}
+//# sourceMappingURL=sessions.js.map

package/dist/tmux/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/tmux/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,YAAY,EACZ,UAAU,EACV,iBAAiB,EACjB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,YAAY,EACZ,oBAAoB,GAGrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAIpD,4EAA4E;AAC5E,MAAM,OAAO,SAAU,SAAQ,KAAK;IAEzB;IADT,YACS,MAAc,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,WAAM,GAAN,MAAM,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,uFAAuF;AACvF,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,SAAS,UAAU,CAAC,MAAc;IAChC,6EAA6E;IAC7E,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,MAAc,EAAE,GAAa;IAC9C,OAAO,gBAAgB,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE;QAC3E,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc;IAC/C,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,4BAA4B,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,gEAAgE;IAChE,IAAI,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,MAAc,EACd,QAAuB;IAEvB,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,MAAc,EACd,OAAoB;IAEpB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAE3E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACxF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAEpC,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC;IAE3B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7F,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAEnC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,IAAyC;IAEzC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAErB,2EAA2E;IAC3E,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAC9B,MAAM,EACN,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,EAChF,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAClC,CAAC;QACF,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjB,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,qDAAqD;QACrD,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAC9B,MAAM,EACN,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,EAC5F,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAClC,CAAC;QACF,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,GAAG,CAAC,MAAM,EAAE;gBAChB,YAAY;gBACZ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,YAAY;gBACZ,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QACD,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,IAAY,EACZ,KAAkB;IAElB,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAEnE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE;QAC5B,YAAY;QACZ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,YAAY;QACZ,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;KAClC,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACnB,IAAI,yDAAyD,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,IAAI,aAAa,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,IAAY,EACZ,OAAe;IAEf,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IACzB,IAAI,uCAAuC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,IAAI,aAAa,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,OAAO,kBAAkB,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,IAAY;IAC5D,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IACzB,IAAI,yDAAyD,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,IAAI,aAAa,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,IAAY;IAC5D,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,yDAAyD,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,IAAI,aAAa,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/validate.js

@@ -0,0 +1,65 @@
+/**
+ * Allowlist validation. Every value that reaches a spawned tmux/ssh argv is
+ * checked here first. We never spawn a shell (argv arrays + shell:false), so
+ * this is defense-in-depth, but it also keeps tmux target syntax sane.
+ */
+// '.' and ':' are tmux target delimiters (session:window.pane) — forbidden in names.
+const SESSION_NAME_RE = /^[A-Za-z0-9_-]{1,64}$/;
+const HOST_RE = /^[A-Za-z0-9._-]{1,255}$/;
+const USER_RE = /^[A-Za-z0-9._-]{1,64}$/;
+// ssh_config Host aliases: word chars, dots, hyphens (no wildcards/spaces).
+const HOST_ALIAS_RE = /^[A-Za-z0-9._-]{1,255}$/;
+export function isValidSessionName(name) {
+    return typeof name === 'string' && SESSION_NAME_RE.test(name);
+}
+export function isValidHost(host) {
+    return typeof host === 'string' && HOST_RE.test(host);
+}
+export function isValidUser(user) {
+    return typeof user === 'string' && USER_RE.test(user);
+}
+export function isValidHostAlias(alias) {
+    return typeof alias === 'string' && HOST_ALIAS_RE.test(alias);
+}
+export function isValidPort(port) {
+    return (typeof port === 'number' &&
+        Number.isInteger(port) &&
+        port >= 1 &&
+        port <= 65535);
+}
+/** Terminal geometry sent by clients. */
+export function isValidDimension(n) {
+    return typeof n === 'number' && Number.isInteger(n) && n >= 1 && n <= 1000;
+}
+/**
+ * Parse a "user@host:port" spec (used by the TMUXES_HOSTS env override).
+ * Returns null if any component is invalid.
+ */
+export function parseHostSpec(spec) {
+    const trimmed = spec.trim();
+    if (!trimmed)
+        return null;
+    let user;
+    let rest = trimmed;
+    const at = rest.indexOf('@');
+    if (at !== -1) {
+        user = rest.slice(0, at);
+        rest = rest.slice(at + 1);
+        if (!isValidUser(user))
+            return null;
+    }
+    let port;
+    const colon = rest.indexOf(':');
+    if (colon !== -1) {
+        const portStr = rest.slice(colon + 1);
+        rest = rest.slice(0, colon);
+        const parsed = Number(portStr);
+        if (!isValidPort(parsed))
+            return null;
+        port = parsed;
+    }
+    if (!isValidHost(rest))
+        return null;
+    return { user, host: rest, port };
+}
+//# sourceMappingURL=validate.js.map

package/dist/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,qFAAqF;AACrF,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAChD,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAC1C,MAAM,OAAO,GAAG,wBAAwB,CAAC;AACzC,4EAA4E;AAC5E,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAEhD,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;QACtB,IAAI,IAAI,CAAC;QACT,IAAI,IAAI,KAAK,CACd,CAAC;AACJ,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC7E,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,IAAwB,CAAC;IAC7B,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACd,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IAED,IAAI,IAAwB,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC"}