tmuxes 0.1.9 → 0.1.11

package/{server/bin → bin}/tmuxes.js

@@ -1,37 +1,37 @@
 #!/usr/bin/env node
-// tmuxes — web UI to manage tmux sessions (local / SSH / WSL).
-// Parses a couple of flags, sets the env the server reads, then launches it.
-
-const args = process.argv.slice(2);
-
-if (args.includes('--help') || args.includes('-h')) {
-  console.log(`tmuxes — one browser tab to run and supervise tmux sessions (local · SSH · WSL)
-
-Usage:
-  tmuxes [options]
-
-Options:
-  --port <n>     Port to listen on   (default 7420, env TMUXES_PORT)
-  --no-open      Do not open the browser
-  -h, --help     Show this help
-
-Binds to 127.0.0.1 only (no-auth local UI). Then open http://127.0.0.1:7420
-(opens automatically unless --no-open). Requires tmux on the host you connect to.`);
-  process.exit(0);
-}
-
-function flag(name) {
-  const i = args.indexOf(name);
-  return i >= 0 ? args[i + 1] : undefined;
-}
-
-const port = flag('--port');
-if (port) process.env.TMUXES_PORT = port;
-
-// Open the browser by default (the "one-click run" experience), unless the
-// user opted out or already set TMUXES_OPEN.
-if (!args.includes('--no-open') && process.env.TMUXES_OPEN === undefined) {
-  process.env.TMUXES_OPEN = '1';
-}
-
-await import('../dist/index.js');
+// tmuxes — web UI to manage tmux sessions (local / SSH / WSL).
+// Parses a couple of flags, sets the env the server reads, then launches it.
+
+const args = process.argv.slice(2);
+
+if (args.includes('--help') || args.includes('-h')) {
+  console.log(`tmuxes — one browser tab to run and supervise tmux sessions (local · SSH · WSL)
+
+Usage:
+  tmuxes [options]
+
+Options:
+  --port <n>     Port to listen on   (default 7420, env TMUXES_PORT)
+  --no-open      Do not open the browser
+  -h, --help     Show this help
+
+Binds to 127.0.0.1 only (no-auth local UI). Then open http://127.0.0.1:7420
+(opens automatically unless --no-open). Requires tmux on the host you connect to.`);
+  process.exit(0);
+}
+
+function flag(name) {
+  const i = args.indexOf(name);
+  return i >= 0 ? args[i + 1] : undefined;
+}
+
+const port = flag('--port');
+if (port) process.env.TMUXES_PORT = port;
+
+// Open the browser by default (the "one-click run" experience), unless the
+// user opted out or already set TMUXES_OPEN.
+if (!args.includes('--no-open') && process.env.TMUXES_OPEN === undefined) {
+  process.env.TMUXES_OPEN = '1';
+}
+
+await import('../dist/index.js');

package/dist/agentHooks.js

@@ -0,0 +1,91 @@
+import { agentHookCommand, } from './agentState.js';
+function isDisabled() {
+    const v = process.env.TMUXES_NO_AUTOHOOK;
+    return v === '1' || v === 'true';
+}
+function baseName(token) {
+    return (token.split(/[\\/]/).pop() || '').toLowerCase().replace(/\.(exe|cmd|bat)$/, '');
+}
+export function detectAgentKind(command) {
+    if (isDisabled())
+        return undefined;
+    const trimmed = command.trim();
+    if (!trimmed)
+        return undefined;
+    const m = /^(\S+)(\s+[\s\S]*)?$/.exec(trimmed);
+    if (!m)
+        return undefined;
+    switch (baseName(m[1])) {
+        case 'claude':
+            return 'claude';
+        case 'codex':
+            return 'codex';
+        default:
+            return undefined;
+    }
+}
+function hook(kind, state, reason, event) {
+    return { type: 'command', command: agentHookCommand(kind, state, reason, event) };
+}
+function claudeSettings() {
+    return JSON.stringify({
+        hooks: {
+            UserPromptSubmit: [{ hooks: [hook('claude', 'running', '', 'UserPromptSubmit')] }],
+            PreToolUse: [{ matcher: '', hooks: [hook('claude', 'running', '', 'PreToolUse')] }],
+            PostToolUse: [{ matcher: '', hooks: [hook('claude', 'running', '', 'PostToolUse')] }],
+            PermissionRequest: [
+                { matcher: '', hooks: [hook('claude', 'waiting', 'decision', 'PermissionRequest')] },
+            ],
+            Notification: [
+                {
+                    matcher: 'permission_prompt',
+                    hooks: [hook('claude', 'waiting', 'decision', 'Notification.permission_prompt')],
+                },
+                {
+                    matcher: 'elicitation_dialog',
+                    hooks: [hook('claude', 'waiting', 'decision', 'Notification.elicitation_dialog')],
+                },
+            ],
+            Stop: [{ hooks: [hook('claude', 'idle', 'done', 'Stop')] }],
+            StopFailure: [{ hooks: [hook('claude', 'idle', 'error', 'StopFailure')] }],
+            SessionEnd: [{ hooks: [hook('claude', 'idle', 'done', 'SessionEnd')] }],
+        },
+    });
+}
+function tomlString(v) {
+    return `"${v.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+}
+function codexHookConfig(event, cmd, opts = {}) {
+    const matcher = opts.matcher === undefined ? '' : `matcher=${tomlString(opts.matcher)},`;
+    return `hooks.${event}=[{${matcher}hooks=[{type="command",command=${tomlString(cmd)}}]}]`;
+}
+function codexConfigArgs() {
+    const configs = [
+        codexHookConfig('UserPromptSubmit', agentHookCommand('codex', 'running', '', 'UserPromptSubmit')),
+        codexHookConfig('PreToolUse', agentHookCommand('codex', 'running', '', 'PreToolUse'), {
+            matcher: '',
+        }),
+        codexHookConfig('PostToolUse', agentHookCommand('codex', 'running', '', 'PostToolUse'), {
+            matcher: '',
+        }),
+        codexHookConfig('PermissionRequest', agentHookCommand('codex', 'waiting', 'decision', 'PermissionRequest'), { matcher: '' }),
+        codexHookConfig('Stop', agentHookCommand('codex', 'idle', 'done', 'Stop')),
+    ];
+    return configs.map((c) => `-c '${c}'`).join(' ');
+}
+export function augmentAgentCommand(command) {
+    const kind = detectAgentKind(command);
+    if (!kind)
+        return { command };
+    const trimmed = command.trim();
+    const m = /^(\S+)(\s+[\s\S]*)?$/.exec(trimmed);
+    if (!m)
+        return { command };
+    const prog = m[1];
+    const rest = m[2] ?? '';
+    if (kind === 'claude') {
+        return { kind, command: `${prog} --settings '${claudeSettings()}'${rest}` };
+    }
+    return { kind, command: `${prog} ${codexConfigArgs()}${rest}` };
+}
+//# sourceMappingURL=agentHooks.js.map

package/dist/agentHooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentHooks.js","sourceRoot":"","sources":["../src/agentHooks.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,GAIjB,MAAM,iBAAiB,CAAC;AAOzB,SAAS,UAAU;IACjB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACzC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,UAAU,EAAE;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,QAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CACX,IAAe,EACf,KAAiB,EACjB,MAA4B,EAC5B,KAAa;IAEb,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE;YACL,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAAC;YAClF,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YACnF,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YACrF,iBAAiB,EAAE;gBACjB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC,EAAE;aACrF;YACD,YAAY,EAAE;gBACZ;oBACE,OAAO,EAAE,mBAAmB;oBAC5B,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,gCAAgC,CAAC,CAAC;iBACjF;gBACD;oBACE,OAAO,EAAE,oBAAoB;oBAC7B,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,iCAAiC,CAAC,CAAC;iBAClF;aACF;YACD,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3D,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YAC1E,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;SACxE;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CACtB,KAAa,EACb,GAAW,EACX,OAA6B,EAAE;IAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IACzF,OAAO,SAAS,KAAK,MAAM,OAAO,kCAAkC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;AAC5F,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG;QACd,eAAe,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACjG,eAAe,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE;YACpF,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,eAAe,CAAC,aAAa,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,CAAC,EAAE;YACtF,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,eAAe,CACb,mBAAmB,EACnB,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,CAAC,EACrE,EAAE,OAAO,EAAE,EAAE,EAAE,CAChB;QACD,eAAe,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;KAC3E,CAAC;IACF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAE9B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAExB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,gBAAgB,cAAc,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,eAAe,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;AAClE,CAAC"}

package/dist/agentOutput.js

@@ -0,0 +1,30 @@
+const ERROR_PATTERNS = [
+    {
+        event: 'CodexStreamDisconnected',
+        kinds: ['codex'],
+        re: /stream disconnected before completion.*error sending request for url.*\/codex\/responses/i,
+    },
+    {
+        event: 'StreamDisconnected',
+        re: /stream disconnected before completion/i,
+    },
+];
+function normalizeTerminalText(text) {
+    return text
+        .replace(/\x1b\[[0-9;?]*[ -/]*[@-~]/g, '')
+        .replace(/\s+/g, ' ')
+        .trim();
+}
+export function classifyAgentTerminalError(text, kind) {
+    const normalized = normalizeTerminalText(text);
+    if (!normalized)
+        return undefined;
+    for (const pattern of ERROR_PATTERNS) {
+        if (pattern.kinds && !pattern.kinds.includes(kind))
+            continue;
+        if (pattern.re.test(normalized))
+            return pattern.event;
+    }
+    return undefined;
+}
+//# sourceMappingURL=agentOutput.js.map

package/dist/agentOutput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentOutput.js","sourceRoot":"","sources":["../src/agentOutput.ts"],"names":[],"mappings":"AAQA,MAAM,cAAc,GAA2B;IAC7C;QACE,KAAK,EAAE,yBAAyB;QAChC,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,EAAE,EAAE,2FAA2F;KAChG;IACD;QACE,KAAK,EAAE,oBAAoB;QAC3B,EAAE,EAAE,wCAAwC;KAC7C;CACF,CAAC;AAEF,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,IAAI;SACR,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC;SACzC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,IAAe;IACtE,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7D,IAAI,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/agentState.js

@@ -0,0 +1,45 @@
+export const AGENT_OPTION = '@tmuxes_agent';
+function isAgentKind(v) {
+    return v === 'claude' || v === 'codex';
+}
+function isAgentState(v) {
+    return v === 'running' || v === 'waiting' || v === 'idle';
+}
+function isAttentionReason(v) {
+    return v === 'decision' || v === 'done' || v === 'error';
+}
+function cleanToken(v) {
+    return v.replace(/[^A-Za-z0-9_.-]/g, '_');
+}
+export function agentValue(kind, state, reason, event, nonce) {
+    return [
+        kind,
+        state,
+        reason,
+        cleanToken(event),
+        nonce.replace(/:/g, '_'),
+    ].join(':');
+}
+export function agentInitialValue(kind) {
+    return agentValue(kind, 'idle', '', 'launch', String(Date.now()));
+}
+export function agentHookCommand(kind, state, reason, event) {
+    return `tmux set-option -q ${AGENT_OPTION} ${agentValue(kind, state, reason, event, '$(date +%s).$$')}`;
+}
+export function parseAgentValue(raw) {
+    if (!raw)
+        return undefined;
+    const [kind, state, reason, event, ...nonceParts] = raw.split(':');
+    if (!isAgentKind(kind) || !isAgentState(state))
+        return undefined;
+    const snap = { agentKind: kind, agentState: state };
+    if (isAttentionReason(reason))
+        snap.attentionReason = reason;
+    if (event)
+        snap.agentEvent = event;
+    const nonce = nonceParts.join(':');
+    if (nonce)
+        snap.agentNonce = nonce;
+    return snap;
+}
+//# sourceMappingURL=agentState.js.map

package/dist/agentState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentState.js","sourceRoot":"","sources":["../src/agentState.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;AAE5C,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,MAAM,CAAC;AAC5D,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAAe,EACf,KAAiB,EACjB,MAA4B,EAC5B,KAAa,EACb,KAAa;IAEb,OAAO;QACL,IAAI;QACJ,KAAK;QACL,MAAM;QACN,UAAU,CAAC,KAAK,CAAC;QACjB,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;KACzB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAe;IAC/C,OAAO,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAe,EACf,KAAiB,EACjB,MAA4B,EAC5B,KAAa;IAEb,OAAO,sBAAsB,YAAY,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAuB;IACrD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,IAAI,GAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACnE,IAAI,iBAAiB,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC;IAC7D,IAAI,KAAK;QAAE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK;QAAE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/config.js

@@ -0,0 +1,32 @@
+/** Central configuration. Localhost-only by design — see README/SECURITY. */
+export const config = {
+    /** Bind address. Intentionally not configurable: this is a no-auth local shell UI. */
+    host: '127.0.0.1',
+    port: Number(process.env.TMUXES_PORT ?? 7420),
+    /** ssh timeouts (seconds). */
+    ssh: {
+        /** Management calls fail fast so the UI never hangs. */
+        connectTimeoutMgmt: 8,
+        /** Interactive attach is allowed a little longer. */
+        connectTimeoutTty: 10,
+        /** Keep the OpenSSH control master alive for long-lived SSH reuse. */
+        controlPersist: 'yes',
+    },
+    /**
+     * Allowed WebSocket Origins. The WS upgrade bypasses Express middleware, so
+     * we enforce this in the upgrade handler to block DNS-rebind / cross-site WS
+     * hijack. Empty/absent Origin (non-browser clients) is allowed.
+     */
+    isAllowedOrigin(origin) {
+        if (!origin)
+            return true;
+        try {
+            const { hostname } = new URL(origin);
+            return hostname === '127.0.0.1' || hostname === 'localhost' || hostname === '[::1]';
+        }
+        catch {
+            return false;
+        }
+    },
+};
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,sFAAsF;IACtF,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC;IAE7C,8BAA8B;IAC9B,GAAG,EAAE;QACH,wDAAwD;QACxD,kBAAkB,EAAE,CAAC;QACrB,qDAAqD;QACrD,iBAAiB,EAAE,EAAE;QACrB,sEAAsE;QACtE,cAAc,EAAE,KAAK;KACtB;IAED;;;;OAIG;IACH,eAAe,CAAC,MAA0B;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YACrC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,OAAO,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACO,CAAC"}

package/dist/exe.js

@@ -0,0 +1,37 @@
+import { existsSync } from 'node:fs';
+import { isAbsolute, join, delimiter } from 'node:path';
+import { isWindows } from './platform.js';
+/**
+ * Resolve a command name to a full path for node-pty on Windows.
+ *
+ * Unlike child_process.spawn, node-pty's ConPTY path does NOT search PATH or
+ * append a PATHEXT extension, so `pty.spawn('ssh', …)` fails with
+ * "File not found". We resolve the executable ourselves (PATH + common system
+ * locations). On POSIX, execvp already searches PATH, so the name is returned
+ * unchanged.
+ */
+export function resolveExecutable(file) {
+    if (!isWindows)
+        return file;
+    if (isAbsolute(file) && existsSync(file))
+        return file;
+    const hasExt = /\.[A-Za-z0-9]+$/.test(file);
+    const exts = hasExt ? [''] : (process.env.PATHEXT || '.EXE;.CMD;.BAT;.COM').split(';');
+    const sysRoot = process.env.SystemRoot || process.env.windir || 'C:\\Windows';
+    const dirs = [
+        ...(process.env.PATH || '').split(delimiter),
+        join(sysRoot, 'System32'),
+        join(sysRoot, 'System32', 'OpenSSH'), // ssh.exe ships here, not always on PATH
+    ];
+    for (const dir of dirs) {
+        if (!dir)
+            continue;
+        for (const ext of exts) {
+            const candidate = join(dir, file + ext);
+            if (existsSync(candidate))
+                return candidate;
+        }
+    }
+    return file; // fall back; node-pty surfaces a clear error if truly missing
+}
+//# sourceMappingURL=exe.js.map

package/dist/exe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exe.js","sourceRoot":"","sources":["../src/exe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,aAAa,CAAC;IAC9E,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,yCAAyC;KAChF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;YACxC,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,8DAA8D;AAC7E,CAAC"}

package/dist/exec.js

@@ -0,0 +1,43 @@
+import { spawn } from 'node:child_process';
+/**
+ * Run a command as an argv array with NO shell. Never rejects — a nonzero exit
+ * or spawn error resolves with the captured output so callers can interpret it
+ * (e.g. tmux "no server running" is a normal empty case, not a throw).
+ */
+export function runCommand(file, args, opts = {}) {
+    const encoding = opts.encoding ?? 'utf8';
+    return new Promise((resolve) => {
+        const child = spawn(file, args, { shell: false });
+        const outChunks = [];
+        const errChunks = [];
+        let settled = false;
+        const timer = opts.timeoutMs
+            ? setTimeout(() => {
+                child.kill('SIGKILL');
+            }, opts.timeoutMs)
+            : null;
+        child.stdout.on('data', (d) => outChunks.push(d));
+        child.stderr.on('data', (d) => errChunks.push(d));
+        if (opts.input !== undefined) {
+            child.stdin.on('error', () => {
+                /* ignore EPIPE if the child exits early */
+            });
+            child.stdin.end(opts.input);
+        }
+        const done = (code, signal, extraErr) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timer)
+                clearTimeout(timer);
+            const stderr = Buffer.concat(errChunks).toString(encoding) + (extraErr ?? '');
+            resolve({ code, signal, stdout: Buffer.concat(outChunks).toString(encoding), stderr });
+        };
+        child.on('error', (err) => {
+            // e.g. ENOENT when ssh/tmux/wsl.exe is missing — surface as a failed result.
+            done(null, null, err.message);
+        });
+        child.on('close', (code, signal) => done(code, signal));
+    });
+}
+//# sourceMappingURL=exec.js.map

package/dist/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../src/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAiB3C;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAc,EAAE,OAAmB,EAAE;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS;YAC1B,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,CAAC,CAAC,IAAI,CAAC;QAET,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC3B,2CAA2C;YAC7C,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,IAAmB,EAAE,MAA6B,EAAE,QAAiB,EAAE,EAAE;YACrF,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YAC9E,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,6EAA6E;YAC7E,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC"}