very-happy-cli 0.2.141 → 0.2.142

package/dist/{index-Dz6FgNFg.mjs → index-CY0zmhIp.mjs}

@@ -1,14 +1,16 @@
-import { D as DefaultTransport, A as AcpBackend } from './AcpBackend-CWmjboOm.mjs';
-export { a as DEFAULT_IDLE_TIMEOUT_MS, b as DEFAULT_TOOL_CALL_TIMEOUT_MS, e as extractErrorDetail, f as formatDuration, c as formatDurationMinutes, h as handleAgentMessageChunk, d as handleAgentThoughtChunk, g as handleLegacyMessageChunk, i as handlePlanUpdate, j as handleThinkingUpdate, k as handleToolCall, l as handleToolCallUpdate, p as parseArgsFromContent } from './AcpBackend-CWmjboOm.mjs';
-import { c as configuration, g as readSettings, i as encodeBase64, l as logger } from './limits-DT5Yk_UH.mjs';
-import { A as AcpSessionManager } from './AcpSessionManager-CtXoi6PN.mjs';
-import { k as connectionState, A as ApiClient, n as notifyDaemonSessionStarted, p as projectPath, l as BUILTIN_TODO_DISCOVERY } from './types-CLosaeZT.mjs';
-import { P as PI_TEAMS_EXTENSION, j as initialMachineMetadata, k as createSessionMetadata, m as setupOfflineReconnection, p as StreamRelay, n as MessageQueue2, u as hashObject, v as startHappyServer, x as registerAgentAttachmentDownloads, y as TitleGenerator, o as registerKillSessionHandler, C as CLAUDE_ATTACHMENT_KINDS, z as stageClaudeAttachments, B as appendStagedAttachmentsToPrompt, E as BasePermissionHandler, F as writeSessionModeFile, H as normalizeAcpPermissionMode, I as removeSessionModeFile } from './index-C55sW8E9.mjs';
-import { mkdir, chmod, writeFile, rename } from 'node:fs/promises';
+import { D as DefaultTransport, A as AcpBackend } from './AcpBackend-D2LqY2to.mjs';
+export { a as DEFAULT_IDLE_TIMEOUT_MS, b as DEFAULT_TOOL_CALL_TIMEOUT_MS, e as extractErrorDetail, f as formatDuration, c as formatDurationMinutes, h as handleAgentMessageChunk, d as handleAgentThoughtChunk, g as handleLegacyMessageChunk, i as handlePlanUpdate, j as handleThinkingUpdate, k as handleToolCall, l as handleToolCallUpdate, p as parseArgsFromContent } from './AcpBackend-D2LqY2to.mjs';
+import { f as readSettings, g as encodeBase64, l as logger, c as configuration } from './limits-CHsz3Ba-.mjs';
+import { A as AcpSessionManager } from './AcpSessionManager-CdeM5KD9.mjs';
+import { h as connectionState, A as ApiClient, n as notifyDaemonSessionStarted, j as BUILTIN_TODO_DISCOVERY } from './types-Dnoxgb7G.mjs';
+import { k as initialMachineMetadata, m as createSessionMetadata, n as setupOfflineReconnection, o as StreamRelay, p as MessageQueue2, u as hashObject, v as startHappyServer, x as registerAgentAttachmentDownloads, T as TitleGenerator, y as registerKillSessionHandler, C as CLAUDE_ATTACHMENT_KINDS, z as stageClaudeAttachments, B as appendStagedAttachmentsToPrompt, E as BasePermissionHandler, F as writeSessionModeFile, H as normalizeAcpPermissionMode, I as removeSessionModeFile } from './index-CYFendNf.mjs';
+import { p as preparePiTeamsRuntime } from './piRuntime-DBLUyXFr.mjs';
 import { randomUUID } from 'node:crypto';
 import { join } from 'node:path';
+import { p as projectPath } from './projectPath-CSpqWdxp.mjs';
 import 'node:child_process';
 import '@agentclientprotocol/sdk';
+import 'node:fs/promises';
 import 'node:fs';
 import 'node:os';
 import 'zod';
@@ -25,14 +27,13 @@ import 'fs/promises';
 import 'crypto';
 import 'path';
 import 'cross-spawn';
-import 'url';
 import 'os';
 import 'node-pty';
 import 'fs';
 import 'node:readline';
 import '@anthropic-ai/sandbox-runtime';
 import 'expo-server-sdk';
-import './agentGuidance-Do7cQka3.mjs';
+import './agentGuidance-Cz8QVcX3.mjs';
 import 'ink';
 import 'react';
 import '@anthropic-ai/claude-agent-sdk';
@@ -49,6 +50,7 @@ import 'http';
 import 'inquirer';
 import 'node:url';
 import 'node:readline/promises';
+import 'url';
 
 function createAcpBackend(options) {
   const backendOptions = {
@@ -64,36 +66,6 @@ function createAcpBackend(options) {
   return new AcpBackend(backendOptions);
 }
 
-async function publish(path, content, mode) {
-  const temporary = `${path}.${randomUUID()}.new`;
-  await writeFile(temporary, content, { mode, flag: "wx" });
-  await rename(temporary, path);
-}
-async function preparePiTeamsRuntime() {
-  const directory = join(configuration.happyHomeDir, "teams", "pi-runtime");
-  await mkdir(directory, { recursive: true, mode: 448 });
-  const extension = join(directory, "very-happy-teams.mjs");
-  await publish(extension, PI_TEAMS_EXTENSION, 384);
-  const launcher = join(directory, "pi-teams.mjs");
-  const script = `#!${process.execPath}
-import { spawn } from 'node:child_process';
-const child = spawn(process.env.VH_TEAM_PI_COMMAND || 'pi', ['--extension', ${JSON.stringify(extension)}, ...process.argv.slice(2)], {stdio:'inherit',env:process.env,shell:process.platform==='win32'});
-child.on('error',()=>{process.stderr.write('Very Happy could not launch pi\\n');process.exitCode=1});
-child.on('exit',(code)=>{process.exitCode=code ?? 1});
-for(const signal of ['SIGINT','SIGTERM'])process.on(signal,()=>child.kill(signal));
-`;
-  await publish(launcher, script, 448);
-  await chmod(launcher, 448);
-  let command = launcher;
-  if (process.platform === "win32") {
-    command = join(directory, "pi-teams.cmd");
-    await publish(command, `@echo off\r
-"${process.execPath}" "${launcher}" %*\r
-`, 448);
-  }
-  return { PI_ACP_PI_COMMAND: command, VH_TEAM_PI_COMMAND: (process.env.PI_ACP_PI_COMMAND === command ? process.env.VH_TEAM_PI_COMMAND : process.env.PI_ACP_PI_COMMAND) || "pi" };
-}
-
 const SUPPORTED_CATEGORIES = /* @__PURE__ */ new Set(["mode", "model", "thought_level"]);
 function isRecord$1(value) {
   return !!value && typeof value === "object";

package/dist/{index-C55sW8E9.mjs → index-CYFendNf.mjs}

@@ -1,13 +1,14 @@
 import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import chalk from 'chalk';
 import os, { homedir, userInfo, tmpdir } from 'node:os';
 import { randomUUID, randomInt, randomBytes, createHash as createHash$1, timingSafeEqual } from 'node:crypto';
-import { o as notifyDaemonSessionEvent, q as getProjectPath, l as BUILTIN_TODO_DISCOVERY, p as projectPath, r as initializeSandbox, w as wrapCommand, j as contentLogMetadata, I as InvalidateSync, R as RawJSONLinesSchema, m as delay, t as AsyncLock, S as STREAM_DELTA_MAX_CHARS, M as MAX_CHAT_ATTACHMENT_SOURCE_BYTES, u as notifyDaemonClaudeAuthFailed, v as commandOnPath, c as checkIfDaemonRunningAndCleanupStaleState, x as deriveLocalCliUpdateSummary, y as AGENT_VERSION_SOURCES, z as isClaudeSessionId, C as getLocalHappyAgentCredentialPath, D as readLocalHappyAgentCredentials, E as parseExactVersion, F as compareExactVersions, G as extractCompleteLines, H as decideBackfill, J as parseTerminalHookPayload, K as tmuxArgs, L as scrubTmuxClientEnv, N as decideMirrorBinding, O as MIRROR_BACKFILL_LINES_DEFAULT, P as mirrorLineKey, Q as mirrorLocalId, T as listDaemonSessions, U as stopDaemonSession, V as detectCLIAvailability, W as detectResumeSupport, X as isDaemonRunningCurrentlyInstalledHappyVersion, Y as stopDaemon, Z as TurnActivityTracker, _ as summarizeSpawnSessionForLog, $ as shellescape, A as ApiClient, a0 as fetchCliUpdateState, a1 as resolveCliUpdateCheckInterval, a2 as DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS, a3 as cleanupDaemonState, i as isValidSessionId, s as spawnDaemonSession, a4 as listVhTerminals, a5 as isValidTerminalId, a6 as readVhTerminal, a7 as sendToVhTerminal, a8 as ContextUsageSchema, a9 as TITLE_PROMPT_PREFIX, aa as BOARD_ANALYZER_PROMPT_PREFIX, k as connectionState, ab as startOfflineReconnection, n as notifyDaemonSessionStarted, d as createEnvelope, ac as CodexAppServerClient } from './types-CLosaeZT.mjs';
-import { l as logger, D as ensurePrivateDirectory, E as hardenPrivateFile, c as configuration, p as packageJson, g as readSettings, F as readCredentials, u as credentialRelayProblem, o as readDaemonState, i as encodeBase64, G as readSettingsOutcome, H as updateSettings, I as encodeBase64Url, m as decodeBase64, J as writeCredentialsLegacy, K as writeCredentialsDataKey, d as readCredentialsForConfiguredRelay, j as encrypt, r as readPersistedSessions, w as writePrivateFileSync, L as decryptWithDataKey, M as decryptLegacy, N as persistSession, k as decrypt, f as ensurePrivateDirectorySync, O as acquireDaemonLock, P as deletePersistedSessions, Q as writeDaemonState, R as writeSettings, S as releaseDaemonLock, C as CLIPBOARD_TOOL_NAME, a as CLIPBOARD_TOOL_TITLE, b as CLIPBOARD_TOOL_DESCRIPTION, e as CLIPBOARD_MAX_BYTES, T as clearCredentials, U as clearMachineId, V as SandboxConfigSchema, W as getLatestDaemonLog } from './limits-DT5Yk_UH.mjs';
+import { o as notifyDaemonSessionEvent, q as getProjectPath, j as BUILTIN_TODO_DISCOVERY, r as initializeSandbox, w as wrapCommand, l as contentLogMetadata, I as InvalidateSync, R as RawJSONLinesSchema, m as delay, t as AsyncLock, S as STREAM_DELTA_MAX_CHARS, M as MAX_CHAT_ATTACHMENT_SOURCE_BYTES, u as notifyDaemonClaudeAuthFailed, v as commandOnPath, c as checkIfDaemonRunningAndCleanupStaleState, x as deriveLocalCliUpdateSummary, y as AGENT_VERSION_SOURCES, z as isClaudeSessionId, C as getLocalHappyAgentCredentialPath, D as readLocalHappyAgentCredentials, E as parseExactVersion, F as compareExactVersions, G as extractCompleteLines, H as decideBackfill, J as parseTerminalHookPayload, K as tmuxArgs, L as scrubTmuxClientEnv, N as decideMirrorBinding, O as MIRROR_BACKFILL_LINES_DEFAULT, P as mirrorLineKey, Q as mirrorLocalId, T as listDaemonSessions, U as stopDaemonSession, V as detectCLIAvailability, W as detectResumeSupport, X as isDaemonRunningCurrentlyInstalledHappyVersion, Y as stopDaemon, Z as TurnActivityTracker, _ as summarizeSpawnSessionForLog, $ as shellescape, A as ApiClient, a0 as fetchCliUpdateState, a1 as resolveCliUpdateCheckInterval, a2 as DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS, a3 as cleanupDaemonState, i as isValidSessionId, s as spawnDaemonSession, a4 as listVhTerminals, a5 as isValidTerminalId, a6 as readVhTerminal, a7 as sendToVhTerminal, a8 as ContextUsageSchema, a9 as TITLE_PROMPT_PREFIX, aa as BOARD_ANALYZER_PROMPT_PREFIX, h as connectionState, ab as startOfflineReconnection, n as notifyDaemonSessionStarted, d as createEnvelope, ac as CodexAppServerClient } from './types-Dnoxgb7G.mjs';
+import { l as logger, E as ensurePrivateDirectory, F as hardenPrivateFile, c as configuration, p as packageJson, f as readSettings, G as readCredentials, v as credentialRelayProblem, o as readDaemonState, g as encodeBase64, H as readSettingsOutcome, I as updateSettings, J as encodeBase64Url, m as decodeBase64, K as writeCredentialsLegacy, L as writeCredentialsDataKey, d as readCredentialsForConfiguredRelay, j as encrypt, r as readPersistedSessions, w as writePrivateFileSync, M as decryptWithDataKey, N as decryptLegacy, O as persistSession, k as decrypt, h as ensurePrivateDirectorySync, P as acquireDaemonLock, Q as deletePersistedSessions, R as writeDaemonState, S as writeSettings, T as releaseDaemonLock, C as CLIPBOARD_TOOL_NAME, a as CLIPBOARD_TOOL_TITLE, b as CLIPBOARD_TOOL_DESCRIPTION, e as CLIPBOARD_MAX_BYTES, U as clearCredentials, V as clearMachineId, W as SandboxConfigSchema, X as getLatestDaemonLog } from './limits-CHsz3Ba-.mjs';
 import spawn$1, { spawn } from 'cross-spawn';
-import path, { join, resolve, basename, isAbsolute, dirname, sep, delimiter, normalize } from 'node:path';
+import path, { join, resolve, basename, isAbsolute, sep, dirname, delimiter, normalize } from 'node:path';
 import { createInterface } from 'node:readline';
 import { existsSync, readFileSync, readdirSync, statSync, mkdirSync, unlinkSync, renameSync, writeFileSync, accessSync, constants, openSync, fsyncSync, closeSync, rmSync as rmSync$1, chmodSync as chmodSync$1 } from 'node:fs';
-import { f as trimIdent, A as AGENT_GUIDANCE, t as teamScopePath, T as TeamConnectionPreflightError, e as createTeamsClient, P as PREVIEW_TOOL_NAME, R as REPORT_PROGRESS_TOOL_NAME, g as TEAM_TOOL_NAMES, r as registerTeamsTools, a as PREVIEW_TOOL_TITLE, b as PREVIEW_TOOL_DESCRIPTION, h as REPORT_PROGRESS_TOOL_TITLE, i as REPORT_PROGRESS_TOOL_DESCRIPTION } from './agentGuidance-Do7cQka3.mjs';
+import { p as projectPath } from './projectPath-CSpqWdxp.mjs';
+import { f as trimIdent, A as AGENT_GUIDANCE, t as teamScopePath, T as TeamConnectionPreflightError, e as createTeamsClient, P as PREVIEW_TOOL_NAME, R as REPORT_PROGRESS_TOOL_NAME, g as TEAM_TOOL_NAMES, r as registerTeamsTools, a as PREVIEW_TOOL_TITLE, b as PREVIEW_TOOL_DESCRIPTION, h as REPORT_PROGRESS_TOOL_TITLE, i as REPORT_PROGRESS_TOOL_DESCRIPTION } from './agentGuidance-Cz8QVcX3.mjs';
 import { readFile, writeFile, rename, unlink, mkdir, symlink, rm, readlink, lstat, stat, open as open$1, appendFile } from 'node:fs/promises';
 import fs, { watch, access } from 'fs/promises';
 import { useStdout, useInput, Box, Text, render } from 'ink';
@@ -6082,6 +6083,83 @@ function isAuthorizedDaemonControlRequest(authorization, controlToken) {
   return configuredTokenIsUsable && timingSafeEqual(expectedDigest, candidateDigest);
 }
 
+const DENIED_HOME_DIRS = [
+  ".secrets",
+  ".ssh",
+  ".gnupg",
+  ".aws",
+  ".kube",
+  ".config/rbw"
+];
+const DENIED_HOME_FILES = [
+  ".claude.json",
+  ".claude/.credentials.json",
+  ".netrc",
+  ".pgpass"
+];
+const DENIED_BASENAME_PATTERNS = [
+  /^\.env$/i,
+  /^\.env\./i,
+  /\.env$/i,
+  /\.pem$/i,
+  /\.key$/i,
+  /\.p12$/i,
+  /\.pfx$/i,
+  /^id_(rsa|dsa|ecdsa|ed25519)$/i,
+  /^\.htpasswd$/i
+];
+const DENIED_PATH_SUFFIXES = [
+  `${sep}.git${sep}config`
+];
+function expandHome(input, home) {
+  if (input === "~") return home;
+  if (input.startsWith(`~${sep}`) || input.startsWith("~/")) {
+    return resolve(home, input.slice(2));
+  }
+  return input;
+}
+function basenameOf(p) {
+  const parts = p.split(sep);
+  return parts[parts.length - 1] ?? "";
+}
+function isUnder(child, parent) {
+  return child === parent || child.startsWith(parent.endsWith(sep) ? parent : parent + sep);
+}
+function checkPreviewPath(input, opts) {
+  const home = homedir();
+  const cwd = process.cwd();
+  if (typeof input !== "string" || !input.trim()) {
+    return { resolved: "", deniedReason: "path must be a non-empty string" };
+  }
+  if (input.includes("\0")) {
+    return { resolved: "", deniedReason: "path contains a NUL byte" };
+  }
+  const expanded = expandHome(input.trim(), home);
+  const resolved = isAbsolute(expanded) ? resolve(expanded) : resolve(cwd, expanded);
+  for (const dir of DENIED_HOME_DIRS) {
+    if (isUnder(resolved, resolve(home, dir))) {
+      return { resolved, deniedReason: `refusing to preview anything under ~/${dir} (credential material)` };
+    }
+  }
+  for (const file of DENIED_HOME_FILES) {
+    if (resolved === resolve(home, file)) {
+      return { resolved, deniedReason: `refusing to preview ~/${file} (credential material)` };
+    }
+  }
+  const base = basenameOf(resolved);
+  for (const pattern of DENIED_BASENAME_PATTERNS) {
+    if (pattern.test(base)) {
+      return { resolved, deniedReason: `refusing to preview "${base}" (looks like credential material)` };
+    }
+  }
+  for (const suffix of DENIED_PATH_SUFFIXES) {
+    if (resolved.endsWith(suffix)) {
+      return { resolved, deniedReason: `refusing to preview ${suffix} (may contain credentials)` };
+    }
+  }
+  return { resolved, deniedReason: null };
+}
+
 function startDaemonControlServer({
   controlToken,
   getChildren,
@@ -6093,6 +6171,7 @@ function startDaemonControlServer({
   onClaudeAuthFailed,
   onSessionTurnEvent,
   pushClipboard,
+  pushFilePreview,
   onTerminalHook,
   setTerminalTitle
 }) {
@@ -6307,7 +6386,8 @@ function startDaemonControlServer({
     typed.post("/clipboard", {
       schema: {
         body: z.object({
-          text: z.string()
+          text: z.string(),
+          terminalId: z.string().regex(/^[a-zA-Z0-9_-]{1,64}$/).optional()
         }),
         response: {
           200: z.object({
@@ -6319,9 +6399,25 @@ function startDaemonControlServer({
         }
       }
     }, async (request) => {
-      const { text } = request.body;
+      const { text, terminalId } = request.body;
       logger.debug(`[CONTROL SERVER] Clipboard push request (${text.length} chars)`);
-      return pushClipboard(text);
+      return terminalId ? pushClipboard(text, terminalId) : pushClipboard(text);
+    });
+    typed.post("/file-preview", {
+      schema: {
+        body: z.object({
+          terminalId: z.string().regex(/^[a-zA-Z0-9_-]{1,64}$/),
+          path: z.string().min(1),
+          mode: z.enum(["file", "diff"]).optional()
+        }),
+        response: { 200: z.object({ delivered: z.boolean(), error: z.string().optional() }) }
+      }
+    }, async (request) => {
+      const { terminalId, path, mode } = request.body;
+      const verdict = checkPreviewPath(path);
+      if (verdict.deniedReason) return { delivered: false, error: verdict.deniedReason };
+      if (!pushFilePreview) return { delivered: false, error: "daemon is still starting up" };
+      return pushFilePreview(terminalId, verdict.resolved, mode ?? "file");
     });
     typed.post("/terminal-title", {
       schema: {
@@ -9044,14 +9140,15 @@ On restart inspect authoritative state and messages before taking new actions. D
 `;
 const PI_TEAMS_EXTENSION = `// Managed by Very Happy Agent Teams.
 export default async function(pi) {
-  const endpoint = process.env.HAPPY_MCP_URL;
+  const managed = !!process.env.HAPPY_MCP_URL;
+  const endpoint = process.env.HAPPY_MCP_URL || process.env.HAPPY_TERMINAL_MCP_URL;
   if (!endpoint) return;
   const url = new URL(endpoint);
   if (!['127.0.0.1', 'localhost', '[::1]'].includes(url.hostname) || url.protocol !== 'http:') throw new Error('Very Happy MCP must be local');
   const {readFile} = await import('node:fs/promises');
   const {join} = await import('node:path');
   const {homedir} = await import('node:os');
-  const contextEndpoint = process.env.HAPPY_CONTEXT_USAGE_URL;
+  const contextEndpoint = managed && process.env.HAPPY_CONTEXT_USAGE_URL;
   if (contextEndpoint) {
     const target = new URL(contextEndpoint);
     if (target.origin !== url.origin || !target.pathname.startsWith('/runtime-context/')) throw new Error('Very Happy context must be local');
@@ -9069,7 +9166,7 @@ export default async function(pi) {
       });
     }
   }
-  pi.on('tool_call', async (event, ctx) => {
+  if (managed) pi.on('tool_call', async (event, ctx) => {
     let mode = process.env.HAPPY_PERMISSION_MODE || 'default';
     const sid = process.env.HAPPY_SESSION_ID;
     if (sid && /^[a-zA-Z0-9_-]+$/.test(sid)) {
@@ -9108,7 +9205,11 @@ export default async function(pi) {
   const available = await rpc('tools/list', {});
   for (const tool of available.tools || []) {
     pi.registerTool({name:tool.name,label:tool.name,description:tool.description || tool.name,parameters:tool.inputSchema,
-      async execute(_id, args) { const result = await rpc('tools/call', {name:tool.name,arguments:args}); return {content:result.content,details:{isError:!!result.isError}}; }
+      async execute(_id, args) {
+        const result = await rpc('tools/call', {name:tool.name,arguments:args});
+        if (result.isError) throw new Error((result.content || []).filter(block => block.type === 'text').map(block => block.text).join('\\n') || 'Very Happy tool failed');
+        return {content:result.content,details:{isError:false}};
+      }
     });
   }
 }
@@ -10984,11 +11085,15 @@ async function startDaemon() {
       onSessionStateEvent,
       onClaudeAuthFailed: (sessionId) => claudeAuthServiceRef?.signalAuthFailed(sessionId),
       onSessionTurnEvent: (sessionId, event) => turnActivity.apply(sessionId, event),
-      pushClipboard: (text) => {
+      pushClipboard: (text, terminalId) => {
         if (!apiMachineRef) {
           return { delivered: false, truncated: false, totalBytes: 0, error: "daemon is still starting up" };
         }
-        return apiMachineRef.pushClipboard(text);
+        return apiMachineRef.pushClipboard(text, terminalId);
+      },
+      pushFilePreview: (terminalId, path, mode) => {
+        if (!apiMachineRef) return { delivered: false, error: "daemon is still starting up" };
+        return apiMachineRef.pushFilePreview(terminalId, path, mode);
       },
       onTerminalHook: (body) => {
         mirrorManagerRef?.handleHookPayload(body);
@@ -11725,83 +11830,6 @@ function normalizeProgress(value) {
   return flat.length > PROGRESS_MAX_CHARS$1 ? flat.slice(0, PROGRESS_MAX_CHARS$1) : flat;
 }
 
-const DENIED_HOME_DIRS = [
-  ".secrets",
-  ".ssh",
-  ".gnupg",
-  ".aws",
-  ".kube",
-  ".config/rbw"
-];
-const DENIED_HOME_FILES = [
-  ".claude.json",
-  ".claude/.credentials.json",
-  ".netrc",
-  ".pgpass"
-];
-const DENIED_BASENAME_PATTERNS = [
-  /^\.env$/i,
-  /^\.env\./i,
-  /\.env$/i,
-  /\.pem$/i,
-  /\.key$/i,
-  /\.p12$/i,
-  /\.pfx$/i,
-  /^id_(rsa|dsa|ecdsa|ed25519)$/i,
-  /^\.htpasswd$/i
-];
-const DENIED_PATH_SUFFIXES = [
-  `${sep}.git${sep}config`
-];
-function expandHome(input, home) {
-  if (input === "~") return home;
-  if (input.startsWith(`~${sep}`) || input.startsWith("~/")) {
-    return resolve(home, input.slice(2));
-  }
-  return input;
-}
-function basenameOf(p) {
-  const parts = p.split(sep);
-  return parts[parts.length - 1] ?? "";
-}
-function isUnder(child, parent) {
-  return child === parent || child.startsWith(parent.endsWith(sep) ? parent : parent + sep);
-}
-function checkPreviewPath(input, opts) {
-  const home = homedir();
-  const cwd = process.cwd();
-  if (typeof input !== "string" || !input.trim()) {
-    return { resolved: "", deniedReason: "path must be a non-empty string" };
-  }
-  if (input.includes("\0")) {
-    return { resolved: "", deniedReason: "path contains a NUL byte" };
-  }
-  const expanded = expandHome(input.trim(), home);
-  const resolved = isAbsolute(expanded) ? resolve(expanded) : resolve(cwd, expanded);
-  for (const dir of DENIED_HOME_DIRS) {
-    if (isUnder(resolved, resolve(home, dir))) {
-      return { resolved, deniedReason: `refusing to preview anything under ~/${dir} (credential material)` };
-    }
-  }
-  for (const file of DENIED_HOME_FILES) {
-    if (resolved === resolve(home, file)) {
-      return { resolved, deniedReason: `refusing to preview ~/${file} (credential material)` };
-    }
-  }
-  const base = basenameOf(resolved);
-  for (const pattern of DENIED_BASENAME_PATTERNS) {
-    if (pattern.test(base)) {
-      return { resolved, deniedReason: `refusing to preview "${base}" (looks like credential material)` };
-    }
-  }
-  for (const suffix of DENIED_PATH_SUFFIXES) {
-    if (resolved.endsWith(suffix)) {
-      return { resolved, deniedReason: `refusing to preview ${suffix} (may contain credentials)` };
-    }
-  }
-  return { resolved, deniedReason: null };
-}
-
 function createMcpServer(handlers, options, sessionId) {
   const mcp = new McpServer({
     name: "Very Happy Tools",
@@ -11853,7 +11881,7 @@ function createMcpServer(handlers, options, sessionId) {
       return {
         content: [{
           type: "text",
-          text: `Sent to the user's clipboard on their currently open device(s)${note}. If the page was not focused, they may need to tap a confirmation button.`
+          text: `Queued a clipboard request for the user's open Very Happy device(s)${note}. This does not confirm that a browser wrote the clipboard; the user may need to tap a confirmation button.`
         }],
         isError: false
       };
@@ -12322,7 +12350,7 @@ function registerSideQuestionHandler(rpc, deps) {
   const retainMs = deps.retainMs ?? SIDE_QUESTION_RETAIN_MS;
   const maxRunMs = deps.maxRunMs ?? SIDE_QUESTION_MAX_RUN_MS;
   const run = deps.run ?? (async (input) => {
-    const { query } = await import('./index-DhfgAB8K.mjs');
+    const { query } = await import('./index-CNARLBax.mjs');
     return runSideQuestion(query, input);
   });
   const slots = /* @__PURE__ */ new Map();
@@ -17556,9 +17584,18 @@ Conversation history is preserved on the server, but in-flight tool calls are in
   } else if (subcommand === "bye") {
     console.log("Bye!");
     process.exit(0);
+  } else if (subcommand === "install-pi-tools") {
+    try {
+      const { handleInstallPiTools } = await import('./installPiTools-C-Lxv4Bt.mjs');
+      await handleInstallPiTools(args.slice(1));
+    } catch (error) {
+      console.error(error instanceof Error ? error.message : "Pi tools installation failed");
+      process.exitCode = 1;
+    }
+    return;
   } else if (subcommand === "install-terminal-hooks") {
     try {
-      const { installTerminalHooks, parseTerminalHooksArgs, TERMINAL_HOOKS_HELP } = await import('./installTerminalHooks-zmtIrf3E.mjs');
+      const { installTerminalHooks, parseTerminalHooksArgs, TERMINAL_HOOKS_HELP } = await import('./installTerminalHooks-BPJu2WVz.mjs');
       const command = parseTerminalHooksArgs(args.slice(1));
       if (command.action === "help") {
         console.log(TERMINAL_HOOKS_HELP);
@@ -17575,7 +17612,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     }
   } else if (subcommand === "spawn") {
     try {
-      const { handleSpawnCommand } = await import('./spawn-Ca0A70dX.mjs');
+      const { handleSpawnCommand } = await import('./spawn-CnMk3LFG.mjs');
       await handleSpawnCommand(args.slice(1));
     } catch (error) {
       console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
@@ -17587,7 +17624,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "sessions") {
     try {
-      const { handleSessionsCommand } = await import('./sessions-DDWTq2AG.mjs');
+      const { handleSessionsCommand } = await import('./sessions-JiL4aJkC.mjs');
       await handleSessionsCommand(args.slice(1));
     } catch (error) {
       console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
@@ -17599,7 +17636,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "send") {
     try {
-      const { handleSendCommand } = await import('./send-DT04hV8o.mjs');
+      const { handleSendCommand } = await import('./send-DV8liaRN.mjs');
       await handleSendCommand(args.slice(1));
     } catch (error) {
       console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
@@ -17705,9 +17742,9 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     if (geminiSubcommand === "project" && args[2] === "set" && args[3]) {
       const projectId = args[3];
       try {
-        const { saveGoogleCloudProjectToConfig } = await import('./config-DY57frJF.mjs');
-        const { readCredentialsForConfiguredRelay: readCredentialsForConfiguredRelay2 } = await import('./limits-DT5Yk_UH.mjs').then(function (n) { return n.X; });
-        const { ApiClient: ApiClient2 } = await import('./types-CLosaeZT.mjs').then(function (n) { return n.ad; });
+        const { saveGoogleCloudProjectToConfig } = await import('./config-ZsBeq10u.mjs');
+        const { readCredentialsForConfiguredRelay: readCredentialsForConfiguredRelay2 } = await import('./limits-CHsz3Ba-.mjs').then(function (n) { return n.Y; });
+        const { ApiClient: ApiClient2 } = await import('./types-Dnoxgb7G.mjs').then(function (n) { return n.ad; });
         let userEmail = void 0;
         try {
           const credentials = await readCredentialsForConfiguredRelay2();
@@ -17738,7 +17775,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     }
     if (geminiSubcommand === "project" && args[2] === "get") {
       try {
-        const { readGeminiLocalConfig } = await import('./config-DY57frJF.mjs');
+        const { readGeminiLocalConfig } = await import('./config-ZsBeq10u.mjs');
         const config = readGeminiLocalConfig();
         if (config.googleCloudProject) {
           console.log(`Current Google Cloud Project: ${config.googleCloudProject}`);
@@ -17778,7 +17815,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
       process.exit(0);
     }
     try {
-      const { runGemini } = await import('./runGemini-BmdhYEzM.mjs');
+      const { runGemini } = await import('./runGemini-rgFHTnG7.mjs');
       let startedBy = void 0;
       for (let i = 1; i < args.length; i++) {
         if (args[i] === "--started-by") {
@@ -17799,6 +17836,16 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     }
     return;
   } else if (subcommand === "pi") {
+    if (args[1] === "--terminal") {
+      try {
+        const { runPiTerminal } = await import('./piTerminal-Bc3jSCnY.mjs');
+        process.exitCode = await runPiTerminal(args.slice(2));
+      } catch (error) {
+        console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
+        process.exitCode = 1;
+      }
+      return;
+    }
     let hintPrinted = false;
     const printHint = (detail) => {
       const hint = piAdapterMissingHint(detail);
@@ -17808,7 +17855,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
       }
     };
     try {
-      const { runAcp, resolveAcpAgentConfig } = await import('./index-Dz6FgNFg.mjs');
+      const { runAcp, resolveAcpAgentConfig } = await import('./index-CY0zmhIp.mjs');
       const parsed = parsePiRunnerArgs(args.slice(1));
       const resolved = resolveAcpAgentConfig(["pi", ...parsed.passthrough]);
       const { credentials } = await authAndSetupMachineIfNeeded();
@@ -17836,7 +17883,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "acp") {
     try {
-      const { runAcp, resolveAcpAgentConfig } = await import('./index-Dz6FgNFg.mjs');
+      const { runAcp, resolveAcpAgentConfig } = await import('./index-CY0zmhIp.mjs');
       let startedBy = void 0;
       let verbose = false;
       const acpArgs = [];
@@ -17876,7 +17923,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "openclaw") {
     try {
-      const { runOpenClaw } = await import('./runOpenClaw-CYpO3Vv8.mjs');
+      const { runOpenClaw } = await import('./runOpenClaw-GjLWwjas.mjs');
       let startedBy = void 0;
       let verbose = false;
       let gatewayUrl;
@@ -17927,7 +17974,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "todo") {
     try {
-      const { handleTodoCommand } = await import('./todo-4WhOom8k.mjs');
+      const { handleTodoCommand } = await import('./todo-oHWNpEx_.mjs');
       await handleTodoCommand(args.slice(1));
     } catch (error) {
       console.error(JSON.stringify({ error: error instanceof Error ? error.message : "Todo command failed" }));
@@ -17936,17 +17983,17 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "teams") {
     try {
-      const { handleTeamsCommand } = await import('./teams-CzK1zg0m.mjs');
+      const { handleTeamsCommand } = await import('./teams-uHZcdX9j.mjs');
       await handleTeamsCommand(args.slice(1));
     } catch (error) {
       console.error(error instanceof Error ? error.message : "Teams command failed");
       process.exitCode = 1;
     }
     return;
-  } else if (subcommand === "mcp" && args.length === 1) {
+  } else if (subcommand === "mcp" && (args.length === 1 || args.length === 2 && args[1] === "--terminal-tools")) {
     try {
-      const { handleMcpCommand } = await import('./mcp-Bzy-X9kI.mjs');
-      await handleMcpCommand();
+      const { handleMcpCommand } = await import('./mcp-BkWBRWFe.mjs');
+      await handleMcpCommand(args[1] === "--terminal-tools");
     } catch (error) {
       process.stderr.write(`[very-happy mcp] Fatal: ${error instanceof Error ? error.message : String(error)}
 `);
@@ -18166,6 +18213,10 @@ ${chalk.bold("Usage:")}
   very-happy codex             Start Codex mode
   very-happy gemini            Start Gemini mode (ACP)
   very-happy pi                Start pi mode (ACP via the pi-acp adapter)
+  very-happy pi --terminal     Run native pi with title, clipboard and preview tools
+                            inside a Very Happy terminal
+  very-happy install-pi-tools  Install tools for directly launched pi sessions
+                            (add --remove to uninstall)
   very-happy acp               Start a generic ACP-compatible agent
   very-happy openclaw          Connect through a configured OpenClaw gateway
   very-happy install-terminal-hooks
@@ -18307,4 +18358,4 @@ ${chalk.bold("Examples:")}
   }
 }
 
-export { ALLOWED_SPAWN_PERMISSION_MODES as A, appendStagedAttachmentsToPrompt as B, CLAUDE_ATTACHMENT_KINDS as C, DEFAULT_RECENT_LIMIT as D, BasePermissionHandler as E, writeSessionModeFile as F, GEMINI_MODEL_ENV as G, normalizeAcpPermissionMode as H, removeSessionModeFile as I, GEMINI_API_KEY_ENV as J, GOOGLE_API_KEY_ENV as K, BaseReasoningProcessor as L, MAX_READ_LIMIT as M, MessageBuffer as N, CHANGE_TITLE_INSTRUCTION as O, PI_TEAMS_EXTENSION as P, SPAWN_AGENTS as S, TEAM_SKILL as T, sanitizeSpawnPermissionMode as a, sendUserMessage as b, listSessions as c, stopSession as d, resolvePermissionRequest as e, archiveSession as f, DEFAULT_GEMINI_MODEL as g, registerAssistantSessionTools as h, isValidSpawnOrigin as i, initialMachineMetadata as j, createSessionMetadata as k, listAccountSessions as l, setupOfflineReconnection as m, MessageQueue2 as n, registerKillSessionHandler as o, StreamRelay as p, query as q, readSessionTranscript as r, sessionWebUrl as s, tmuxSupportsSessionEnv as t, hashObject as u, startHappyServer as v, waitForSessionKey as w, registerAgentAttachmentDownloads as x, TitleGenerator as y, stageClaudeAttachments as z };
+export { ALLOWED_SPAWN_PERMISSION_MODES as A, appendStagedAttachmentsToPrompt as B, CLAUDE_ATTACHMENT_KINDS as C, DEFAULT_RECENT_LIMIT as D, BasePermissionHandler as E, writeSessionModeFile as F, GEMINI_MODEL_ENV as G, normalizeAcpPermissionMode as H, removeSessionModeFile as I, TEAM_SKILL as J, GEMINI_API_KEY_ENV as K, GOOGLE_API_KEY_ENV as L, MAX_READ_LIMIT as M, BaseReasoningProcessor as N, MessageBuffer as O, PI_TEAMS_EXTENSION as P, CHANGE_TITLE_INSTRUCTION as Q, SPAWN_AGENTS as S, TitleGenerator as T, sanitizeSpawnPermissionMode as a, sendUserMessage as b, listSessions as c, stopSession as d, resolvePermissionRequest as e, archiveSession as f, DEFAULT_GEMINI_MODEL as g, checkPreviewPath as h, isValidSpawnOrigin as i, registerAssistantSessionTools as j, initialMachineMetadata as k, listAccountSessions as l, createSessionMetadata as m, setupOfflineReconnection as n, StreamRelay as o, MessageQueue2 as p, query as q, readSessionTranscript as r, sessionWebUrl as s, tmuxSupportsSessionEnv as t, hashObject as u, startHappyServer as v, waitForSessionKey as w, registerAgentAttachmentDownloads as x, registerKillSessionHandler as y, stageClaudeAttachments as z };

package/dist/index.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
 require('chalk');
-require('./index-ChWePQEd.cjs');
-require('./limits-DbLWXlJm.cjs');
+require('./index-CSQZhQ0C.cjs');
+require('./limits-B3hngubn.cjs');
 require('zod');
-require('./types-Bk3W89Z3.cjs');
+require('./types-Xd_LJRJN.cjs');
 require('node:child_process');
 require('node:os');
 require('node:crypto');
@@ -12,7 +12,10 @@ require('cross-spawn');
 require('node:path');
 require('node:readline');
 require('node:fs');
-require('./agentGuidance-B9ENxSaS.cjs');
+require('./projectPath-ChLhdOyt.cjs');
+require('path');
+require('url');
+require('./agentGuidance-Bi8iBjy3.cjs');
 require('node:fs/promises');
 require('fs/promises');
 require('ink');
@@ -26,7 +29,6 @@ require('os');
 require('child_process');
 require('@paralleldrive/cuid2');
 require('fs');
-require('path');
 require('@anthropic-ai/sandbox-runtime');
 require('expo-server-sdk');
 require('crypto');
@@ -45,6 +47,5 @@ require('util');
 require('inquirer');
 require('node:url');
 require('node:readline/promises');
-require('url');
 require('node-pty');
 

package/dist/index.mjs

@@ -1,8 +1,8 @@
 import 'chalk';
-import './index-C55sW8E9.mjs';
-import './limits-DT5Yk_UH.mjs';
+import './index-CYFendNf.mjs';
+import './limits-CHsz3Ba-.mjs';
 import 'zod';
-import './types-CLosaeZT.mjs';
+import './types-Dnoxgb7G.mjs';
 import 'node:child_process';
 import 'node:os';
 import 'node:crypto';
@@ -10,7 +10,10 @@ import 'cross-spawn';
 import 'node:path';
 import 'node:readline';
 import 'node:fs';
-import './agentGuidance-Do7cQka3.mjs';
+import './projectPath-CSpqWdxp.mjs';
+import 'path';
+import 'url';
+import './agentGuidance-Cz8QVcX3.mjs';
 import 'node:fs/promises';
 import 'fs/promises';
 import 'ink';
@@ -24,7 +27,6 @@ import 'os';
 import 'child_process';
 import '@paralleldrive/cuid2';
 import 'fs';
-import 'path';
 import '@anthropic-ai/sandbox-runtime';
 import 'expo-server-sdk';
 import 'crypto';
@@ -43,5 +45,4 @@ import 'util';
 import 'inquirer';
 import 'node:url';
 import 'node:readline/promises';
-import 'url';
 import 'node-pty';