vibora 3.6.0 → 3.7.0

package/server/index.js

@@ -7683,7 +7683,7 @@ var require_public_api = __commonJS((exports) => {
     }
     return doc;
   }
-  function parse2(src, reviver, options) {
+  function parse(src, reviver, options) {
     let _reviver = undefined;
     if (typeof reviver === "function") {
       _reviver = reviver;
@@ -7724,7 +7724,7 @@ var require_public_api = __commonJS((exports) => {
       return value.toString(options);
     return new Document2.Document(value, _replacer, options).toString(options);
   }
-  exports.parse = parse2;
+  exports.parse = parse;
   exports.parseAllDocuments = parseAllDocuments;
   exports.parseDocument = parseDocument;
   exports.stringify = stringify;
@@ -8511,29 +8511,6 @@ var compose = (middleware, onError, onNotFound) => {
   };
 };
 
-// node_modules/hono/dist/http-exception.js
-var HTTPException = class extends Error {
-  res;
-  status;
-  constructor(status = 500, options) {
-    super(options?.message, { cause: options?.cause });
-    this.res = options?.res;
-    this.status = status;
-  }
-  getResponse() {
-    if (this.res) {
-      const newResponse = new Response(this.res.body, {
-        status: this.status,
-        headers: this.res.headers
-      });
-      return newResponse;
-    }
-    return new Response(this.message, {
-      status: this.status
-    });
-  }
-};
-
 // node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
 
@@ -10152,873 +10129,6 @@ var logger = (fn = console.log) => {
   };
 };
 
-// node_modules/hono/dist/helper/factory/index.js
-var Factory = class {
-  initApp;
-  #defaultAppOptions;
-  constructor(init) {
-    this.initApp = init?.initApp;
-    this.#defaultAppOptions = init?.defaultAppOptions;
-  }
-  createApp = (options) => {
-    const app = new Hono2(options && this.#defaultAppOptions ? { ...this.#defaultAppOptions, ...options } : options ?? this.#defaultAppOptions);
-    if (this.initApp) {
-      this.initApp(app);
-    }
-    return app;
-  };
-  createMiddleware = (middleware) => middleware;
-  createHandlers = (...handlers) => {
-    return handlers.filter((handler) => handler !== undefined);
-  };
-};
-var createMiddleware = (middleware) => middleware;
-
-// node_modules/hono/dist/utils/cookie.js
-var algorithm = { name: "HMAC", hash: "SHA-256" };
-var getCryptoKey = async (secret) => {
-  const secretBuf = typeof secret === "string" ? new TextEncoder().encode(secret) : secret;
-  return await crypto.subtle.importKey("raw", secretBuf, algorithm, false, ["sign", "verify"]);
-};
-var makeSignature = async (value, secret) => {
-  const key = await getCryptoKey(secret);
-  const signature = await crypto.subtle.sign(algorithm.name, key, new TextEncoder().encode(value));
-  return btoa(String.fromCharCode(...new Uint8Array(signature)));
-};
-var verifySignature = async (base64Signature, value, secret) => {
-  try {
-    const signatureBinStr = atob(base64Signature);
-    const signature = new Uint8Array(signatureBinStr.length);
-    for (let i = 0, len = signatureBinStr.length;i < len; i++) {
-      signature[i] = signatureBinStr.charCodeAt(i);
-    }
-    return await crypto.subtle.verify(algorithm, secret, signature, new TextEncoder().encode(value));
-  } catch {
-    return false;
-  }
-};
-var validCookieNameRegEx = /^[\w!#$%&'*.^`|~+-]+$/;
-var validCookieValueRegEx = /^[ !#-:<-[\]-~]*$/;
-var parse = (cookie, name) => {
-  if (name && cookie.indexOf(name) === -1) {
-    return {};
-  }
-  const pairs = cookie.trim().split(";");
-  const parsedCookie = {};
-  for (let pairStr of pairs) {
-    pairStr = pairStr.trim();
-    const valueStartPos = pairStr.indexOf("=");
-    if (valueStartPos === -1) {
-      continue;
-    }
-    const cookieName = pairStr.substring(0, valueStartPos).trim();
-    if (name && name !== cookieName || !validCookieNameRegEx.test(cookieName)) {
-      continue;
-    }
-    let cookieValue = pairStr.substring(valueStartPos + 1).trim();
-    if (cookieValue.startsWith('"') && cookieValue.endsWith('"')) {
-      cookieValue = cookieValue.slice(1, -1);
-    }
-    if (validCookieValueRegEx.test(cookieValue)) {
-      parsedCookie[cookieName] = cookieValue.indexOf("%") !== -1 ? tryDecode(cookieValue, decodeURIComponent_) : cookieValue;
-      if (name) {
-        break;
-      }
-    }
-  }
-  return parsedCookie;
-};
-var parseSigned = async (cookie, secret, name) => {
-  const parsedCookie = {};
-  const secretKey = await getCryptoKey(secret);
-  for (const [key, value] of Object.entries(parse(cookie, name))) {
-    const signatureStartPos = value.lastIndexOf(".");
-    if (signatureStartPos < 1) {
-      continue;
-    }
-    const signedValue = value.substring(0, signatureStartPos);
-    const signature = value.substring(signatureStartPos + 1);
-    if (signature.length !== 44 || !signature.endsWith("=")) {
-      continue;
-    }
-    const isVerified = await verifySignature(signature, signedValue, secretKey);
-    parsedCookie[key] = isVerified ? signedValue : false;
-  }
-  return parsedCookie;
-};
-var _serialize = (name, value, opt = {}) => {
-  let cookie = `${name}=${value}`;
-  if (name.startsWith("__Secure-") && !opt.secure) {
-    throw new Error("__Secure- Cookie must have Secure attributes");
-  }
-  if (name.startsWith("__Host-")) {
-    if (!opt.secure) {
-      throw new Error("__Host- Cookie must have Secure attributes");
-    }
-    if (opt.path !== "/") {
-      throw new Error('__Host- Cookie must have Path attributes with "/"');
-    }
-    if (opt.domain) {
-      throw new Error("__Host- Cookie must not have Domain attributes");
-    }
-  }
-  if (opt && typeof opt.maxAge === "number" && opt.maxAge >= 0) {
-    if (opt.maxAge > 34560000) {
-      throw new Error("Cookies Max-Age SHOULD NOT be greater than 400 days (34560000 seconds) in duration.");
-    }
-    cookie += `; Max-Age=${opt.maxAge | 0}`;
-  }
-  if (opt.domain && opt.prefix !== "host") {
-    cookie += `; Domain=${opt.domain}`;
-  }
-  if (opt.path) {
-    cookie += `; Path=${opt.path}`;
-  }
-  if (opt.expires) {
-    if (opt.expires.getTime() - Date.now() > 34560000000) {
-      throw new Error("Cookies Expires SHOULD NOT be greater than 400 days (34560000 seconds) in the future.");
-    }
-    cookie += `; Expires=${opt.expires.toUTCString()}`;
-  }
-  if (opt.httpOnly) {
-    cookie += "; HttpOnly";
-  }
-  if (opt.secure) {
-    cookie += "; Secure";
-  }
-  if (opt.sameSite) {
-    cookie += `; SameSite=${opt.sameSite.charAt(0).toUpperCase() + opt.sameSite.slice(1)}`;
-  }
-  if (opt.priority) {
-    cookie += `; Priority=${opt.priority.charAt(0).toUpperCase() + opt.priority.slice(1)}`;
-  }
-  if (opt.partitioned) {
-    if (!opt.secure) {
-      throw new Error("Partitioned Cookie must have Secure attributes");
-    }
-    cookie += "; Partitioned";
-  }
-  return cookie;
-};
-var serialize = (name, value, opt) => {
-  value = encodeURIComponent(value);
-  return _serialize(name, value, opt);
-};
-var serializeSigned = async (name, value, secret, opt = {}) => {
-  const signature = await makeSignature(value, secret);
-  value = `${value}.${signature}`;
-  value = encodeURIComponent(value);
-  return _serialize(name, value, opt);
-};
-
-// node_modules/hono/dist/helper/cookie/index.js
-var getCookie = (c, key, prefix) => {
-  const cookie = c.req.raw.headers.get("Cookie");
-  if (typeof key === "string") {
-    if (!cookie) {
-      return;
-    }
-    let finalKey = key;
-    if (prefix === "secure") {
-      finalKey = "__Secure-" + key;
-    } else if (prefix === "host") {
-      finalKey = "__Host-" + key;
-    }
-    const obj2 = parse(cookie, finalKey);
-    return obj2[finalKey];
-  }
-  if (!cookie) {
-    return {};
-  }
-  const obj = parse(cookie);
-  return obj;
-};
-var getSignedCookie = async (c, secret, key, prefix) => {
-  const cookie = c.req.raw.headers.get("Cookie");
-  if (typeof key === "string") {
-    if (!cookie) {
-      return;
-    }
-    let finalKey = key;
-    if (prefix === "secure") {
-      finalKey = "__Secure-" + key;
-    } else if (prefix === "host") {
-      finalKey = "__Host-" + key;
-    }
-    const obj2 = await parseSigned(cookie, secret, finalKey);
-    return obj2[finalKey];
-  }
-  if (!cookie) {
-    return {};
-  }
-  const obj = await parseSigned(cookie, secret);
-  return obj;
-};
-var generateCookie = (name, value, opt) => {
-  let cookie;
-  if (opt?.prefix === "secure") {
-    cookie = serialize("__Secure-" + name, value, { path: "/", ...opt, secure: true });
-  } else if (opt?.prefix === "host") {
-    cookie = serialize("__Host-" + name, value, {
-      ...opt,
-      path: "/",
-      secure: true,
-      domain: undefined
-    });
-  } else {
-    cookie = serialize(name, value, { path: "/", ...opt });
-  }
-  return cookie;
-};
-var setCookie = (c, name, value, opt) => {
-  const cookie = generateCookie(name, value, opt);
-  c.header("Set-Cookie", cookie, { append: true });
-};
-var generateSignedCookie = async (name, value, secret, opt) => {
-  let cookie;
-  if (opt?.prefix === "secure") {
-    cookie = await serializeSigned("__Secure-" + name, value, secret, {
-      path: "/",
-      ...opt,
-      secure: true
-    });
-  } else if (opt?.prefix === "host") {
-    cookie = await serializeSigned("__Host-" + name, value, secret, {
-      ...opt,
-      path: "/",
-      secure: true,
-      domain: undefined
-    });
-  } else {
-    cookie = await serializeSigned(name, value, secret, { path: "/", ...opt });
-  }
-  return cookie;
-};
-var setSignedCookie = async (c, name, value, secret, opt) => {
-  const cookie = await generateSignedCookie(name, value, secret, opt);
-  c.header("set-cookie", cookie, { append: true });
-};
-var deleteCookie = (c, name, opt) => {
-  const deletedCookie = getCookie(c, name, opt?.prefix);
-  setCookie(c, name, "", { ...opt, maxAge: 0 });
-  return deletedCookie;
-};
-
-// server/lib/settings.ts
-import * as fs from "fs";
-import * as path from "path";
-import * as os from "os";
-import * as crypto3 from "crypto";
-
-// server/lib/logger.ts
-import { appendFileSync, statSync, renameSync, unlinkSync } from "fs";
-import { join } from "path";
-
-// shared/logger/types.ts
-var LOG_LEVELS = {
-  debug: 0,
-  info: 1,
-  warn: 2,
-  error: 3
-};
-function formatLogEntry(entry) {
-  return JSON.stringify(entry);
-}
-// server/lib/logger.ts
-var MAX_LOG_SIZE = 10 * 1024 * 1024;
-var MAX_LOG_BACKUPS = 2;
-function getMinLevel() {
-  const level = process.env.LOG_LEVEL;
-  if (level && level in LOG_LEVELS) {
-    return level;
-  }
-  return "info";
-}
-var logFilePath = null;
-function getLogFile() {
-  if (logFilePath !== null) {
-    return logFilePath || null;
-  }
-  try {
-    ensureViboraDir();
-    logFilePath = join(getViboraDir(), "vibora.log");
-    return logFilePath;
-  } catch {
-    logFilePath = "";
-    return null;
-  }
-}
-function rotateLogIfNeeded(logFile) {
-  try {
-    const stats = statSync(logFile);
-    if (stats.size < MAX_LOG_SIZE)
-      return;
-    for (let i = MAX_LOG_BACKUPS;i >= 1; i--) {
-      const older = `${logFile}.${i}`;
-      const newer = i === 1 ? logFile : `${logFile}.${i - 1}`;
-      try {
-        if (i === MAX_LOG_BACKUPS) {
-          unlinkSync(older);
-        }
-      } catch {}
-      try {
-        renameSync(newer, older);
-      } catch {}
-    }
-  } catch {}
-}
-function writeEntry(entry) {
-  const line = formatLogEntry(entry);
-  console.log(line);
-  const logFile = getLogFile();
-  if (logFile) {
-    try {
-      rotateLogIfNeeded(logFile);
-      appendFileSync(logFile, line + `
-`);
-    } catch {}
-  }
-}
-
-class ServerLogger {
-  component;
-  minLevel;
-  constructor(component, minLevel) {
-    this.component = component;
-    this.minLevel = minLevel ?? getMinLevel();
-  }
-  shouldLog(level) {
-    return LOG_LEVELS[level] >= LOG_LEVELS[this.minLevel];
-  }
-  log(level, msg, ctx) {
-    if (!this.shouldLog(level))
-      return;
-    writeEntry({
-      ts: new Date().toISOString(),
-      lvl: level,
-      src: this.component,
-      msg,
-      ...ctx && Object.keys(ctx).length > 0 ? { ctx } : {}
-    });
-  }
-  debug(msg, ctx) {
-    this.log("debug", msg, ctx);
-  }
-  info(msg, ctx) {
-    this.log("info", msg, ctx);
-  }
-  warn(msg, ctx) {
-    this.log("warn", msg, ctx);
-  }
-  error(msg, ctx) {
-    this.log("error", msg, ctx);
-  }
-  child(component) {
-    return new ServerLogger(`${this.component}/${component}`, this.minLevel);
-  }
-}
-function createLogger(component) {
-  return new ServerLogger(component);
-}
-var log2 = {
-  pty: createLogger("PTYManager"),
-  ws: createLogger("WS"),
-  terminal: createLogger("Terminal"),
-  buffer: createLogger("BufferManager"),
-  desktop: createLogger("Desktop"),
-  api: createLogger("API"),
-  metrics: createLogger("MetricsCollector"),
-  pr: createLogger("PRMonitor"),
-  github: createLogger("GitHub"),
-  linear: createLogger("Linear"),
-  notification: createLogger("Notification"),
-  server: createLogger("Server"),
-  settings: createLogger("Settings")
-};
-
-// server/lib/settings.ts
-var CURRENT_SCHEMA_VERSION = 3;
-var CLAUDE_CODE_THEMES = ["light", "light-ansi", "light-daltonized", "dark", "dark-ansi", "dark-daltonized"];
-var DEFAULT_SETTINGS = {
-  _schemaVersion: CURRENT_SCHEMA_VERSION,
-  server: {
-    port: 7777
-  },
-  paths: {
-    defaultGitReposDir: os.homedir()
-  },
-  authentication: {
-    username: null,
-    password: null
-  },
-  editor: {
-    app: "vscode",
-    host: "",
-    sshPort: 22
-  },
-  integrations: {
-    linearApiKey: null,
-    githubPat: null
-  },
-  appearance: {
-    language: null,
-    theme: null,
-    syncClaudeCodeTheme: false,
-    claudeCodeLightTheme: "light-ansi",
-    claudeCodeDarkTheme: "dark-ansi"
-  }
-};
-var OLD_DEFAULT_PORT = 3333;
-var MIGRATION_MAP = {
-  port: "server.port",
-  defaultGitReposDir: "paths.defaultGitReposDir",
-  basicAuthUsername: "authentication.username",
-  basicAuthPassword: "authentication.password",
-  sshPort: "editor.sshPort",
-  linearApiKey: "integrations.linearApiKey",
-  githubPat: "integrations.githubPat",
-  language: "appearance.language",
-  theme: "appearance.theme",
-  syncClaudeCodeTheme: "appearance.syncClaudeCodeTheme",
-  claudeCodeLightTheme: "appearance.claudeCodeLightTheme",
-  claudeCodeDarkTheme: "appearance.claudeCodeDarkTheme"
-};
-function getNestedValue(obj, path2) {
-  return path2.split(".").reduce((o, k) => {
-    if (o && typeof o === "object") {
-      return o[k];
-    }
-    return;
-  }, obj);
-}
-function setNestedValue(obj, path2, value) {
-  const keys = path2.split(".");
-  const lastKey = keys.pop();
-  let current = obj;
-  for (const key of keys) {
-    if (!(key in current) || typeof current[key] !== "object" || current[key] === null) {
-      current[key] = {};
-    }
-    current = current[key];
-  }
-  current[lastKey] = value;
-}
-function migrateSettings(parsed) {
-  const result = { migrated: false, migratedKeys: [], warnings: [] };
-  const version = parsed._schemaVersion ?? 1;
-  if (version >= CURRENT_SCHEMA_VERSION) {
-    return result;
-  }
-  if (version < 2) {
-    for (const [oldKey, newPath] of Object.entries(MIGRATION_MAP)) {
-      if (oldKey in parsed && parsed[oldKey] !== undefined) {
-        const oldValue = parsed[oldKey];
-        if (oldKey === "port" && oldValue === OLD_DEFAULT_PORT) {
-          delete parsed[oldKey];
-          result.migrated = true;
-          continue;
-        }
-        const existingValue = getNestedValue(parsed, newPath);
-        if (existingValue !== undefined) {
-          result.warnings.push(`Key "${oldKey}" exists but "${newPath}" already set. Removing old key.`);
-        } else {
-          setNestedValue(parsed, newPath, oldValue);
-          result.migratedKeys.push(oldKey);
-        }
-        delete parsed[oldKey];
-        result.migrated = true;
-      }
-    }
-    delete parsed.remoteHost;
-    delete parsed.hostname;
-    delete parsed.remoteVibora;
-  }
-  parsed._schemaVersion = CURRENT_SCHEMA_VERSION;
-  result.migrated = true;
-  return result;
-}
-function expandPath(p) {
-  if (p.startsWith("~/")) {
-    return path.join(os.homedir(), p.slice(2));
-  }
-  if (!path.isAbsolute(p)) {
-    return path.resolve(p);
-  }
-  return p;
-}
-function getViboraDir() {
-  if (process.env.VIBORA_DIR) {
-    return expandPath(process.env.VIBORA_DIR);
-  }
-  const cwdVibora = path.join(process.cwd(), ".vibora");
-  if (fs.existsSync(cwdVibora)) {
-    return cwdVibora;
-  }
-  return path.join(os.homedir(), ".vibora");
-}
-function getDatabasePath() {
-  return path.join(getViboraDir(), "vibora.db");
-}
-function getWorktreeBasePath() {
-  return path.join(getViboraDir(), "worktrees");
-}
-function getSettingsPath() {
-  return path.join(getViboraDir(), "settings.json");
-}
-function ensureViboraDir() {
-  const viboraDir = getViboraDir();
-  if (!fs.existsSync(viboraDir)) {
-    fs.mkdirSync(viboraDir, { recursive: true });
-  }
-}
-function ensureWorktreesDir() {
-  const worktreesDir = getWorktreeBasePath();
-  if (!fs.existsSync(worktreesDir)) {
-    fs.mkdirSync(worktreesDir, { recursive: true });
-  }
-}
-function ensureSettingsFile() {
-  const settingsPath = getSettingsPath();
-  if (!fs.existsSync(settingsPath)) {
-    fs.writeFileSync(settingsPath, JSON.stringify(DEFAULT_SETTINGS, null, 2), "utf-8");
-  }
-}
-function initializeViboraDirectories() {
-  ensureViboraDir();
-  ensureSettingsFile();
-  ensureWorktreesDir();
-}
-function getSettings() {
-  ensureViboraDir();
-  const settingsPath = getSettingsPath();
-  let parsed = {};
-  if (fs.existsSync(settingsPath)) {
-    try {
-      const content = fs.readFileSync(settingsPath, "utf-8");
-      parsed = JSON.parse(content);
-    } catch {}
-  }
-  const migrationResult = migrateSettings(parsed);
-  if (migrationResult.migrated) {
-    if (migrationResult.migratedKeys.length > 0) {
-      log2.settings.info("Migrated settings to nested structure", {
-        migratedKeys: migrationResult.migratedKeys
-      });
-    }
-    if (migrationResult.warnings.length > 0) {
-      log2.settings.warn("Settings migration warnings", {
-        warnings: migrationResult.warnings
-      });
-    }
-    fs.writeFileSync(settingsPath, JSON.stringify(parsed, null, 2), "utf-8");
-  }
-  const fileSettings = {
-    _schemaVersion: CURRENT_SCHEMA_VERSION,
-    server: {
-      port: parsed.server?.port ?? DEFAULT_SETTINGS.server.port
-    },
-    paths: {
-      defaultGitReposDir: expandPath(parsed.paths?.defaultGitReposDir ?? DEFAULT_SETTINGS.paths.defaultGitReposDir)
-    },
-    authentication: {
-      username: parsed.authentication?.username ?? null,
-      password: parsed.authentication?.password ?? null
-    },
-    editor: {
-      app: parsed.editor?.app ?? DEFAULT_SETTINGS.editor.app,
-      host: parsed.editor?.host ?? DEFAULT_SETTINGS.editor.host,
-      sshPort: parsed.editor?.sshPort ?? DEFAULT_SETTINGS.editor.sshPort
-    },
-    integrations: {
-      linearApiKey: parsed.integrations?.linearApiKey ?? null,
-      githubPat: parsed.integrations?.githubPat ?? null
-    },
-    appearance: {
-      language: parsed.appearance?.language ?? null,
-      theme: parsed.appearance?.theme ?? null,
-      syncClaudeCodeTheme: parsed.appearance?.syncClaudeCodeTheme ?? false,
-      claudeCodeLightTheme: parsed.appearance?.claudeCodeLightTheme ?? "light-ansi",
-      claudeCodeDarkTheme: parsed.appearance?.claudeCodeDarkTheme ?? "dark-ansi"
-    }
-  };
-  const portEnv = parseInt(process.env.PORT || "", 10);
-  const editorSshPortEnv = parseInt(process.env.VIBORA_SSH_PORT || "", 10);
-  return {
-    ...fileSettings,
-    server: {
-      port: !isNaN(portEnv) && portEnv > 0 ? portEnv : fileSettings.server.port
-    },
-    paths: {
-      defaultGitReposDir: process.env.VIBORA_GIT_REPOS_DIR ? expandPath(process.env.VIBORA_GIT_REPOS_DIR) : fileSettings.paths.defaultGitReposDir
-    },
-    authentication: {
-      username: process.env.VIBORA_BASIC_AUTH_USERNAME ?? fileSettings.authentication.username,
-      password: process.env.VIBORA_BASIC_AUTH_PASSWORD ?? fileSettings.authentication.password
-    },
-    editor: {
-      app: fileSettings.editor.app,
-      host: process.env.VIBORA_EDITOR_HOST ?? fileSettings.editor.host,
-      sshPort: !isNaN(editorSshPortEnv) && editorSshPortEnv > 0 ? editorSshPortEnv : fileSettings.editor.sshPort
-    },
-    integrations: {
-      linearApiKey: process.env.LINEAR_API_KEY ?? fileSettings.integrations.linearApiKey,
-      githubPat: process.env.GITHUB_PAT ?? fileSettings.integrations.githubPat
-    },
-    appearance: fileSettings.appearance
-  };
-}
-function getSetting(path2) {
-  const settings = getSettings();
-  return getNestedValue(settings, path2);
-}
-function getSettingByKey(key) {
-  const settings = getSettings();
-  const legacySettings = toLegacySettings(settings);
-  return legacySettings[key];
-}
-function toLegacySettings(settings) {
-  return {
-    port: settings.server.port,
-    defaultGitReposDir: settings.paths.defaultGitReposDir,
-    sshPort: settings.editor.sshPort,
-    basicAuthUsername: settings.authentication.username,
-    basicAuthPassword: settings.authentication.password,
-    linearApiKey: settings.integrations.linearApiKey,
-    githubPat: settings.integrations.githubPat,
-    language: settings.appearance.language,
-    theme: settings.appearance.theme,
-    syncClaudeCodeTheme: settings.appearance.syncClaudeCodeTheme,
-    claudeCodeLightTheme: settings.appearance.claudeCodeLightTheme,
-    claudeCodeDarkTheme: settings.appearance.claudeCodeDarkTheme
-  };
-}
-function isDeveloperMode() {
-  return process.env.VIBORA_DEVELOPER === "1" || process.env.VIBORA_DEVELOPER === "true";
-}
-function getSessionSecret() {
-  const settings = getSettings();
-  if (!settings.authentication.password) {
-    return null;
-  }
-  return crypto3.createHash("sha256").update(settings.authentication.password + "vibora-session").digest("hex");
-}
-function updateSettingByPath(settingPath, value) {
-  ensureViboraDir();
-  const settingsPath = getSettingsPath();
-  let parsed = {};
-  if (fs.existsSync(settingsPath)) {
-    try {
-      parsed = JSON.parse(fs.readFileSync(settingsPath, "utf-8"));
-    } catch {}
-  }
-  setNestedValue(parsed, settingPath, value);
-  parsed._schemaVersion = CURRENT_SCHEMA_VERSION;
-  fs.writeFileSync(settingsPath, JSON.stringify(parsed, null, 2), "utf-8");
-  return getSettings();
-}
-function getDefaultValue(settingPath) {
-  return getNestedValue(DEFAULT_SETTINGS, settingPath);
-}
-var DEFAULT_NOTIFICATION_SETTINGS = {
-  enabled: true,
-  sound: { enabled: true },
-  slack: { enabled: false },
-  discord: { enabled: false },
-  pushover: { enabled: false }
-};
-function getNotificationSettings() {
-  ensureViboraDir();
-  const settingsPath = getSettingsPath();
-  if (!fs.existsSync(settingsPath)) {
-    return DEFAULT_NOTIFICATION_SETTINGS;
-  }
-  try {
-    const content = fs.readFileSync(settingsPath, "utf-8");
-    const parsed = JSON.parse(content);
-    const notifications = parsed.notifications;
-    if (!notifications) {
-      return DEFAULT_NOTIFICATION_SETTINGS;
-    }
-    return {
-      enabled: notifications.enabled ?? false,
-      sound: { enabled: false, ...notifications.sound },
-      slack: { enabled: false, ...notifications.slack },
-      discord: { enabled: false, ...notifications.discord },
-      pushover: { enabled: false, ...notifications.pushover }
-    };
-  } catch {
-    return DEFAULT_NOTIFICATION_SETTINGS;
-  }
-}
-function updateNotificationSettings(updates) {
-  ensureViboraDir();
-  const settingsPath = getSettingsPath();
-  let parsed = {};
-  if (fs.existsSync(settingsPath)) {
-    try {
-      parsed = JSON.parse(fs.readFileSync(settingsPath, "utf-8"));
-    } catch {}
-  }
-  const current = getNotificationSettings();
-  const updated = {
-    enabled: updates.enabled ?? current.enabled,
-    sound: { ...current.sound, ...updates.sound },
-    slack: { ...current.slack, ...updates.slack },
-    discord: { ...current.discord, ...updates.discord },
-    pushover: { ...current.pushover, ...updates.pushover }
-  };
-  parsed.notifications = updated;
-  fs.writeFileSync(settingsPath, JSON.stringify(parsed, null, 2), "utf-8");
-  return updated;
-}
-function getClaudeSettingsPath() {
-  return path.join(os.homedir(), ".claude", "settings.json");
-}
-function getClaudeSettings() {
-  const settingsPath = getClaudeSettingsPath();
-  if (!fs.existsSync(settingsPath))
-    return {};
-  try {
-    return JSON.parse(fs.readFileSync(settingsPath, "utf-8"));
-  } catch {
-    return {};
-  }
-}
-function updateClaudeSettings(updates) {
-  const settingsPath = getClaudeSettingsPath();
-  const dir = path.dirname(settingsPath);
-  if (!fs.existsSync(dir))
-    fs.mkdirSync(dir, { recursive: true });
-  const current = getClaudeSettings();
-  const merged = { ...current, ...updates };
-  fs.writeFileSync(settingsPath, JSON.stringify(merged, null, 2), "utf-8");
-}
-function getClaudeConfigPath() {
-  return path.join(os.homedir(), ".claude.json");
-}
-function getClaudeConfig() {
-  const configPath = getClaudeConfigPath();
-  if (!fs.existsSync(configPath))
-    return {};
-  try {
-    return JSON.parse(fs.readFileSync(configPath, "utf-8"));
-  } catch {
-    return {};
-  }
-}
-var claudeConfigLock = Promise.resolve();
-function updateClaudeConfig(updates) {
-  claudeConfigLock = claudeConfigLock.then(() => {
-    const configPath = getClaudeConfigPath();
-    const current = getClaudeConfig();
-    const merged = { ...current, ...updates };
-    fs.writeFileSync(configPath, JSON.stringify(merged, null, 2), "utf-8");
-  }).catch((err) => {
-    log2.settings.error("Failed to update Claude config", { error: String(err) });
-  });
-}
-function syncClaudeCodeTheme(resolvedTheme) {
-  const settings = getSettings();
-  if (!settings.appearance.syncClaudeCodeTheme)
-    return;
-  const claudeTheme = resolvedTheme === "light" ? settings.appearance.claudeCodeLightTheme : settings.appearance.claudeCodeDarkTheme;
-  updateClaudeConfig({ theme: claudeTheme });
-  log2.settings.info("Synced Claude Code theme", { claudeTheme, resolvedTheme });
-}
-var DEFAULT_ZAI_SETTINGS = {
-  enabled: false,
-  apiKey: null,
-  haikuModel: "glm-4.5-air",
-  sonnetModel: "glm-4.7",
-  opusModel: "glm-4.7"
-};
-function getZAiSettings() {
-  ensureViboraDir();
-  const settingsPath = getSettingsPath();
-  if (!fs.existsSync(settingsPath)) {
-    return DEFAULT_ZAI_SETTINGS;
-  }
-  try {
-    const content = fs.readFileSync(settingsPath, "utf-8");
-    const parsed = JSON.parse(content);
-    const zai = parsed.zai;
-    if (!zai) {
-      return DEFAULT_ZAI_SETTINGS;
-    }
-    return {
-      enabled: zai.enabled ?? false,
-      apiKey: zai.apiKey ?? null,
-      haikuModel: zai.haikuModel ?? DEFAULT_ZAI_SETTINGS.haikuModel,
-      sonnetModel: zai.sonnetModel ?? DEFAULT_ZAI_SETTINGS.sonnetModel,
-      opusModel: zai.opusModel ?? DEFAULT_ZAI_SETTINGS.opusModel
-    };
-  } catch {
-    return DEFAULT_ZAI_SETTINGS;
-  }
-}
-function updateZAiSettings(updates) {
-  ensureViboraDir();
-  const settingsPath = getSettingsPath();
-  let parsed = {};
-  if (fs.existsSync(settingsPath)) {
-    try {
-      parsed = JSON.parse(fs.readFileSync(settingsPath, "utf-8"));
-    } catch {}
-  }
-  const current = getZAiSettings();
-  const updated = {
-    enabled: updates.enabled ?? current.enabled,
-    apiKey: updates.apiKey !== undefined ? updates.apiKey : current.apiKey,
-    haikuModel: updates.haikuModel ?? current.haikuModel,
-    sonnetModel: updates.sonnetModel ?? current.sonnetModel,
-    opusModel: updates.opusModel ?? current.opusModel
-  };
-  parsed.zai = updated;
-  fs.writeFileSync(settingsPath, JSON.stringify(parsed, null, 2), "utf-8");
-  return updated;
-}
-
-// server/middleware/auth.ts
-var SESSION_COOKIE_NAME = "vibora_session";
-var PUBLIC_API_PATHS = ["/health", "/api/auth/login", "/api/auth/check"];
-var sessionAuthMiddleware = createMiddleware(async (c, next) => {
-  const settings = getSettings();
-  if (!settings.basicAuthUsername || !settings.basicAuthPassword) {
-    return next();
-  }
-  const path2 = c.req.path;
-  if (!path2.startsWith("/api/") && !path2.startsWith("/ws/")) {
-    return next();
-  }
-  if (PUBLIC_API_PATHS.some((p) => path2 === p || path2.startsWith(p + "/"))) {
-    return next();
-  }
-  const secret = getSessionSecret();
-  if (secret) {
-    const sessionCookie = await getSignedCookie(c, secret, SESSION_COOKIE_NAME);
-    if (sessionCookie) {
-      try {
-        const session = JSON.parse(sessionCookie);
-        if (session.exp && session.exp > Date.now()) {
-          return next();
-        }
-      } catch {}
-    }
-  }
-  const authHeader = c.req.header("Authorization");
-  if (authHeader?.startsWith("Basic ")) {
-    const base64Credentials = authHeader.slice(6);
-    try {
-      const credentials = atob(base64Credentials);
-      const [username, password] = credentials.split(":");
-      if (username === settings.basicAuthUsername && password === settings.basicAuthPassword) {
-        return next();
-      }
-    } catch {}
-  }
-  throw new HTTPException(401, { message: "Unauthorized" });
-});
-
 // server/app.ts
 import { readFile as readFile2 } from "fs/promises";
 import { join as join14 } from "path";
@@ -11665,7 +10775,7 @@ function sql(strings, ...params) {
     return new SQL([new StringChunk(str)]);
   }
   sql2.raw = raw2;
-  function join3(chunks, separator) {
+  function join(chunks, separator) {
     const result = [];
     for (const [i, chunk] of chunks.entries()) {
       if (i > 0 && separator !== undefined) {
@@ -11675,7 +10785,7 @@ function sql(strings, ...params) {
     }
     return new SQL(result);
   }
-  sql2.join = join3;
+  sql2.join = join;
   function identifier(value) {
     return new Name(value);
   }
@@ -11768,7 +10878,7 @@ Subquery.prototype.getSQL = function() {
 // node_modules/drizzle-orm/utils.js
 function mapResultRow(columns, row, joinsNotNullableMap) {
   const nullifyMap = {};
-  const result = columns.reduce((result2, { path: path2, field }, columnIndex) => {
+  const result = columns.reduce((result2, { path, field }, columnIndex) => {
     let decoder;
     if (is(field, Column)) {
       decoder = field;
@@ -11780,8 +10890,8 @@ function mapResultRow(columns, row, joinsNotNullableMap) {
       decoder = field.sql.decoder;
     }
     let node = result2;
-    for (const [pathChunkIndex, pathChunk] of path2.entries()) {
-      if (pathChunkIndex < path2.length - 1) {
+    for (const [pathChunkIndex, pathChunk] of path.entries()) {
+      if (pathChunkIndex < path.length - 1) {
         if (!(pathChunk in node)) {
           node[pathChunk] = {};
         }
@@ -11789,8 +10899,8 @@ function mapResultRow(columns, row, joinsNotNullableMap) {
       } else {
         const rawValue = row[columnIndex];
         const value = node[pathChunk] = rawValue === null ? null : decoder.mapFromDriverValue(rawValue);
-        if (joinsNotNullableMap && is(field, Column) && path2.length === 2) {
-          const objectName = path2[0];
+        if (joinsNotNullableMap && is(field, Column) && path.length === 2) {
+          const objectName = path[0];
           if (!(objectName in nullifyMap)) {
             nullifyMap[objectName] = value === null ? getTableName(field.table) : false;
           } else if (typeof nullifyMap[objectName] === "string" && nullifyMap[objectName] !== getTableName(field.table)) {
@@ -13798,7 +12908,7 @@ class SQLiteSelectQueryBuilderBase extends TypedQueryBuilder {
       const tableName = getTableLikeName(table);
       for (const item of extractUsedTable(table))
         this.usedTables.add(item);
-      if (typeof tableName === "string" && this.config.joins?.some((join3) => join3.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins?.some((join) => join.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (!this.isPartialSelect) {
@@ -14212,7 +13322,7 @@ class SQLiteUpdateBase extends QueryPromise {
   createJoin(joinType) {
     return (table, on) => {
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins.some((join3) => join3.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins.some((join) => join.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (typeof on === "function") {
@@ -14916,21 +14026,21 @@ function drizzle(...params) {
 })(drizzle || (drizzle = {}));
 
 // node_modules/drizzle-orm/migrator.js
-import crypto4 from "crypto";
-import fs2 from "fs";
+import crypto3 from "crypto";
+import fs from "fs";
 function readMigrationFiles(config) {
   const migrationFolderTo = config.migrationsFolder;
   const migrationQueries = [];
   const journalPath = `${migrationFolderTo}/meta/_journal.json`;
-  if (!fs2.existsSync(journalPath)) {
+  if (!fs.existsSync(journalPath)) {
     throw new Error(`Can't find meta/_journal.json file`);
   }
-  const journalAsString = fs2.readFileSync(`${migrationFolderTo}/meta/_journal.json`).toString();
+  const journalAsString = fs.readFileSync(`${migrationFolderTo}/meta/_journal.json`).toString();
   const journal = JSON.parse(journalAsString);
   for (const journalEntry of journal.entries) {
     const migrationPath = `${migrationFolderTo}/${journalEntry.tag}.sql`;
     try {
-      const query = fs2.readFileSync(`${migrationFolderTo}/${journalEntry.tag}.sql`).toString();
+      const query = fs.readFileSync(`${migrationFolderTo}/${journalEntry.tag}.sql`).toString();
       const result = query.split("--> statement-breakpoint").map((it) => {
         return it;
       });
@@ -14938,7 +14048,7 @@ function readMigrationFiles(config) {
         sql: result,
         bps: journalEntry.breakpoints,
         folderMillis: journalEntry.when,
-        hash: crypto4.createHash("sha256").update(query).digest("hex")
+        hash: crypto3.createHash("sha256").update(query).digest("hex")
       });
     } catch {
       throw new Error(`No file ${migrationPath} found in ${migrationFolderTo} folder`);
@@ -15043,6 +14153,556 @@ var systemMetrics = sqliteTable("system_metrics", {
   diskTotalBytes: integer("disk_total_bytes").notNull()
 });
 
+// server/lib/settings.ts
+import * as fs2 from "fs";
+import * as path from "path";
+import * as os from "os";
+
+// server/lib/logger.ts
+import { appendFileSync, statSync, renameSync, unlinkSync } from "fs";
+import { join } from "path";
+
+// shared/logger/types.ts
+var LOG_LEVELS = {
+  debug: 0,
+  info: 1,
+  warn: 2,
+  error: 3
+};
+function formatLogEntry(entry) {
+  return JSON.stringify(entry);
+}
+// server/lib/logger.ts
+var MAX_LOG_SIZE = 10 * 1024 * 1024;
+var MAX_LOG_BACKUPS = 2;
+function getMinLevel() {
+  const level = process.env.LOG_LEVEL;
+  if (level && level in LOG_LEVELS) {
+    return level;
+  }
+  return "info";
+}
+var logFilePath = null;
+function getLogFile() {
+  if (logFilePath !== null) {
+    return logFilePath || null;
+  }
+  try {
+    ensureViboraDir();
+    logFilePath = join(getViboraDir(), "vibora.log");
+    return logFilePath;
+  } catch {
+    logFilePath = "";
+    return null;
+  }
+}
+function rotateLogIfNeeded(logFile) {
+  try {
+    const stats = statSync(logFile);
+    if (stats.size < MAX_LOG_SIZE)
+      return;
+    for (let i = MAX_LOG_BACKUPS;i >= 1; i--) {
+      const older = `${logFile}.${i}`;
+      const newer = i === 1 ? logFile : `${logFile}.${i - 1}`;
+      try {
+        if (i === MAX_LOG_BACKUPS) {
+          unlinkSync(older);
+        }
+      } catch {}
+      try {
+        renameSync(newer, older);
+      } catch {}
+    }
+  } catch {}
+}
+function writeEntry(entry) {
+  const line = formatLogEntry(entry);
+  console.log(line);
+  const logFile = getLogFile();
+  if (logFile) {
+    try {
+      rotateLogIfNeeded(logFile);
+      appendFileSync(logFile, line + `
+`);
+    } catch {}
+  }
+}
+
+class ServerLogger {
+  component;
+  minLevel;
+  constructor(component, minLevel) {
+    this.component = component;
+    this.minLevel = minLevel ?? getMinLevel();
+  }
+  shouldLog(level) {
+    return LOG_LEVELS[level] >= LOG_LEVELS[this.minLevel];
+  }
+  log(level, msg, ctx) {
+    if (!this.shouldLog(level))
+      return;
+    writeEntry({
+      ts: new Date().toISOString(),
+      lvl: level,
+      src: this.component,
+      msg,
+      ...ctx && Object.keys(ctx).length > 0 ? { ctx } : {}
+    });
+  }
+  debug(msg, ctx) {
+    this.log("debug", msg, ctx);
+  }
+  info(msg, ctx) {
+    this.log("info", msg, ctx);
+  }
+  warn(msg, ctx) {
+    this.log("warn", msg, ctx);
+  }
+  error(msg, ctx) {
+    this.log("error", msg, ctx);
+  }
+  child(component) {
+    return new ServerLogger(`${this.component}/${component}`, this.minLevel);
+  }
+}
+function createLogger(component) {
+  return new ServerLogger(component);
+}
+var log2 = {
+  pty: createLogger("PTYManager"),
+  ws: createLogger("WS"),
+  terminal: createLogger("Terminal"),
+  buffer: createLogger("BufferManager"),
+  desktop: createLogger("Desktop"),
+  api: createLogger("API"),
+  metrics: createLogger("MetricsCollector"),
+  pr: createLogger("PRMonitor"),
+  github: createLogger("GitHub"),
+  linear: createLogger("Linear"),
+  notification: createLogger("Notification"),
+  server: createLogger("Server"),
+  settings: createLogger("Settings")
+};
+
+// server/lib/settings.ts
+var CURRENT_SCHEMA_VERSION = 3;
+var CLAUDE_CODE_THEMES = ["light", "light-ansi", "light-daltonized", "dark", "dark-ansi", "dark-daltonized"];
+var DEFAULT_SETTINGS = {
+  _schemaVersion: CURRENT_SCHEMA_VERSION,
+  server: {
+    port: 7777
+  },
+  paths: {
+    defaultGitReposDir: os.homedir()
+  },
+  editor: {
+    app: "vscode",
+    host: "",
+    sshPort: 22
+  },
+  integrations: {
+    linearApiKey: null,
+    githubPat: null
+  },
+  appearance: {
+    language: null,
+    theme: null,
+    syncClaudeCodeTheme: false,
+    claudeCodeLightTheme: "light-ansi",
+    claudeCodeDarkTheme: "dark-ansi"
+  }
+};
+var OLD_DEFAULT_PORT = 3333;
+var MIGRATION_MAP = {
+  port: "server.port",
+  defaultGitReposDir: "paths.defaultGitReposDir",
+  sshPort: "editor.sshPort",
+  linearApiKey: "integrations.linearApiKey",
+  githubPat: "integrations.githubPat",
+  language: "appearance.language",
+  theme: "appearance.theme",
+  syncClaudeCodeTheme: "appearance.syncClaudeCodeTheme",
+  claudeCodeLightTheme: "appearance.claudeCodeLightTheme",
+  claudeCodeDarkTheme: "appearance.claudeCodeDarkTheme"
+};
+function getNestedValue(obj, path2) {
+  return path2.split(".").reduce((o, k) => {
+    if (o && typeof o === "object") {
+      return o[k];
+    }
+    return;
+  }, obj);
+}
+function setNestedValue(obj, path2, value) {
+  const keys = path2.split(".");
+  const lastKey = keys.pop();
+  let current = obj;
+  for (const key of keys) {
+    if (!(key in current) || typeof current[key] !== "object" || current[key] === null) {
+      current[key] = {};
+    }
+    current = current[key];
+  }
+  current[lastKey] = value;
+}
+function migrateSettings(parsed) {
+  const result = { migrated: false, migratedKeys: [], warnings: [] };
+  const version2 = parsed._schemaVersion ?? 1;
+  if (version2 >= CURRENT_SCHEMA_VERSION) {
+    return result;
+  }
+  if (version2 < 2) {
+    for (const [oldKey, newPath] of Object.entries(MIGRATION_MAP)) {
+      if (oldKey in parsed && parsed[oldKey] !== undefined) {
+        const oldValue = parsed[oldKey];
+        if (oldKey === "port" && oldValue === OLD_DEFAULT_PORT) {
+          delete parsed[oldKey];
+          result.migrated = true;
+          continue;
+        }
+        const existingValue = getNestedValue(parsed, newPath);
+        if (existingValue !== undefined) {
+          result.warnings.push(`Key "${oldKey}" exists but "${newPath}" already set. Removing old key.`);
+        } else {
+          setNestedValue(parsed, newPath, oldValue);
+          result.migratedKeys.push(oldKey);
+        }
+        delete parsed[oldKey];
+        result.migrated = true;
+      }
+    }
+    delete parsed.remoteHost;
+    delete parsed.hostname;
+    delete parsed.remoteVibora;
+  }
+  parsed._schemaVersion = CURRENT_SCHEMA_VERSION;
+  result.migrated = true;
+  return result;
+}
+function expandPath(p) {
+  if (p.startsWith("~/")) {
+    return path.join(os.homedir(), p.slice(2));
+  }
+  if (!path.isAbsolute(p)) {
+    return path.resolve(p);
+  }
+  return p;
+}
+function getViboraDir() {
+  if (process.env.VIBORA_DIR) {
+    return expandPath(process.env.VIBORA_DIR);
+  }
+  const cwdVibora = path.join(process.cwd(), ".vibora");
+  if (fs2.existsSync(cwdVibora)) {
+    return cwdVibora;
+  }
+  return path.join(os.homedir(), ".vibora");
+}
+function getDatabasePath() {
+  return path.join(getViboraDir(), "vibora.db");
+}
+function getWorktreeBasePath() {
+  return path.join(getViboraDir(), "worktrees");
+}
+function getSettingsPath() {
+  return path.join(getViboraDir(), "settings.json");
+}
+function ensureViboraDir() {
+  const viboraDir = getViboraDir();
+  if (!fs2.existsSync(viboraDir)) {
+    fs2.mkdirSync(viboraDir, { recursive: true });
+  }
+}
+function ensureWorktreesDir() {
+  const worktreesDir = getWorktreeBasePath();
+  if (!fs2.existsSync(worktreesDir)) {
+    fs2.mkdirSync(worktreesDir, { recursive: true });
+  }
+}
+function ensureSettingsFile() {
+  const settingsPath = getSettingsPath();
+  if (!fs2.existsSync(settingsPath)) {
+    fs2.writeFileSync(settingsPath, JSON.stringify(DEFAULT_SETTINGS, null, 2), "utf-8");
+  }
+}
+function initializeViboraDirectories() {
+  ensureViboraDir();
+  ensureSettingsFile();
+  ensureWorktreesDir();
+}
+function getSettings() {
+  ensureViboraDir();
+  const settingsPath = getSettingsPath();
+  let parsed = {};
+  if (fs2.existsSync(settingsPath)) {
+    try {
+      const content = fs2.readFileSync(settingsPath, "utf-8");
+      parsed = JSON.parse(content);
+    } catch {}
+  }
+  const migrationResult = migrateSettings(parsed);
+  if (migrationResult.migrated) {
+    if (migrationResult.migratedKeys.length > 0) {
+      log2.settings.info("Migrated settings to nested structure", {
+        migratedKeys: migrationResult.migratedKeys
+      });
+    }
+    if (migrationResult.warnings.length > 0) {
+      log2.settings.warn("Settings migration warnings", {
+        warnings: migrationResult.warnings
+      });
+    }
+    fs2.writeFileSync(settingsPath, JSON.stringify(parsed, null, 2), "utf-8");
+  }
+  const fileSettings = {
+    _schemaVersion: CURRENT_SCHEMA_VERSION,
+    server: {
+      port: parsed.server?.port ?? DEFAULT_SETTINGS.server.port
+    },
+    paths: {
+      defaultGitReposDir: expandPath(parsed.paths?.defaultGitReposDir ?? DEFAULT_SETTINGS.paths.defaultGitReposDir)
+    },
+    editor: {
+      app: parsed.editor?.app ?? DEFAULT_SETTINGS.editor.app,
+      host: parsed.editor?.host ?? DEFAULT_SETTINGS.editor.host,
+      sshPort: parsed.editor?.sshPort ?? DEFAULT_SETTINGS.editor.sshPort
+    },
+    integrations: {
+      linearApiKey: parsed.integrations?.linearApiKey ?? null,
+      githubPat: parsed.integrations?.githubPat ?? null
+    },
+    appearance: {
+      language: parsed.appearance?.language ?? null,
+      theme: parsed.appearance?.theme ?? null,
+      syncClaudeCodeTheme: parsed.appearance?.syncClaudeCodeTheme ?? false,
+      claudeCodeLightTheme: parsed.appearance?.claudeCodeLightTheme ?? "light-ansi",
+      claudeCodeDarkTheme: parsed.appearance?.claudeCodeDarkTheme ?? "dark-ansi"
+    }
+  };
+  const portEnv = parseInt(process.env.PORT || "", 10);
+  const editorSshPortEnv = parseInt(process.env.VIBORA_SSH_PORT || "", 10);
+  return {
+    ...fileSettings,
+    server: {
+      port: !isNaN(portEnv) && portEnv > 0 ? portEnv : fileSettings.server.port
+    },
+    paths: {
+      defaultGitReposDir: process.env.VIBORA_GIT_REPOS_DIR ? expandPath(process.env.VIBORA_GIT_REPOS_DIR) : fileSettings.paths.defaultGitReposDir
+    },
+    editor: {
+      app: fileSettings.editor.app,
+      host: process.env.VIBORA_EDITOR_HOST ?? fileSettings.editor.host,
+      sshPort: !isNaN(editorSshPortEnv) && editorSshPortEnv > 0 ? editorSshPortEnv : fileSettings.editor.sshPort
+    },
+    integrations: {
+      linearApiKey: process.env.LINEAR_API_KEY ?? fileSettings.integrations.linearApiKey,
+      githubPat: process.env.GITHUB_PAT ?? fileSettings.integrations.githubPat
+    },
+    appearance: fileSettings.appearance
+  };
+}
+function getSetting(path2) {
+  const settings = getSettings();
+  return getNestedValue(settings, path2);
+}
+function getSettingByKey(key) {
+  const settings = getSettings();
+  const legacySettings = toLegacySettings(settings);
+  return legacySettings[key];
+}
+function toLegacySettings(settings) {
+  return {
+    port: settings.server.port,
+    defaultGitReposDir: settings.paths.defaultGitReposDir,
+    sshPort: settings.editor.sshPort,
+    linearApiKey: settings.integrations.linearApiKey,
+    githubPat: settings.integrations.githubPat,
+    language: settings.appearance.language,
+    theme: settings.appearance.theme,
+    syncClaudeCodeTheme: settings.appearance.syncClaudeCodeTheme,
+    claudeCodeLightTheme: settings.appearance.claudeCodeLightTheme,
+    claudeCodeDarkTheme: settings.appearance.claudeCodeDarkTheme
+  };
+}
+function isDeveloperMode() {
+  return process.env.VIBORA_DEVELOPER === "1" || process.env.VIBORA_DEVELOPER === "true";
+}
+function updateSettingByPath(settingPath, value) {
+  ensureViboraDir();
+  const settingsPath = getSettingsPath();
+  let parsed = {};
+  if (fs2.existsSync(settingsPath)) {
+    try {
+      parsed = JSON.parse(fs2.readFileSync(settingsPath, "utf-8"));
+    } catch {}
+  }
+  setNestedValue(parsed, settingPath, value);
+  parsed._schemaVersion = CURRENT_SCHEMA_VERSION;
+  fs2.writeFileSync(settingsPath, JSON.stringify(parsed, null, 2), "utf-8");
+  return getSettings();
+}
+function getDefaultValue(settingPath) {
+  return getNestedValue(DEFAULT_SETTINGS, settingPath);
+}
+var DEFAULT_NOTIFICATION_SETTINGS = {
+  enabled: true,
+  sound: { enabled: true },
+  slack: { enabled: false },
+  discord: { enabled: false },
+  pushover: { enabled: false }
+};
+function getNotificationSettings() {
+  ensureViboraDir();
+  const settingsPath = getSettingsPath();
+  if (!fs2.existsSync(settingsPath)) {
+    return DEFAULT_NOTIFICATION_SETTINGS;
+  }
+  try {
+    const content = fs2.readFileSync(settingsPath, "utf-8");
+    const parsed = JSON.parse(content);
+    const notifications = parsed.notifications;
+    if (!notifications) {
+      return DEFAULT_NOTIFICATION_SETTINGS;
+    }
+    return {
+      enabled: notifications.enabled ?? false,
+      sound: { enabled: false, ...notifications.sound },
+      slack: { enabled: false, ...notifications.slack },
+      discord: { enabled: false, ...notifications.discord },
+      pushover: { enabled: false, ...notifications.pushover }
+    };
+  } catch {
+    return DEFAULT_NOTIFICATION_SETTINGS;
+  }
+}
+function updateNotificationSettings(updates) {
+  ensureViboraDir();
+  const settingsPath = getSettingsPath();
+  let parsed = {};
+  if (fs2.existsSync(settingsPath)) {
+    try {
+      parsed = JSON.parse(fs2.readFileSync(settingsPath, "utf-8"));
+    } catch {}
+  }
+  const current = getNotificationSettings();
+  const updated = {
+    enabled: updates.enabled ?? current.enabled,
+    sound: { ...current.sound, ...updates.sound },
+    slack: { ...current.slack, ...updates.slack },
+    discord: { ...current.discord, ...updates.discord },
+    pushover: { ...current.pushover, ...updates.pushover }
+  };
+  parsed.notifications = updated;
+  fs2.writeFileSync(settingsPath, JSON.stringify(parsed, null, 2), "utf-8");
+  return updated;
+}
+function getClaudeSettingsPath() {
+  return path.join(os.homedir(), ".claude", "settings.json");
+}
+function getClaudeSettings() {
+  const settingsPath = getClaudeSettingsPath();
+  if (!fs2.existsSync(settingsPath))
+    return {};
+  try {
+    return JSON.parse(fs2.readFileSync(settingsPath, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function updateClaudeSettings(updates) {
+  const settingsPath = getClaudeSettingsPath();
+  const dir = path.dirname(settingsPath);
+  if (!fs2.existsSync(dir))
+    fs2.mkdirSync(dir, { recursive: true });
+  const current = getClaudeSettings();
+  const merged = { ...current, ...updates };
+  fs2.writeFileSync(settingsPath, JSON.stringify(merged, null, 2), "utf-8");
+}
+function getClaudeConfigPath() {
+  return path.join(os.homedir(), ".claude.json");
+}
+function getClaudeConfig() {
+  const configPath = getClaudeConfigPath();
+  if (!fs2.existsSync(configPath))
+    return {};
+  try {
+    return JSON.parse(fs2.readFileSync(configPath, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+var claudeConfigLock = Promise.resolve();
+function updateClaudeConfig(updates) {
+  claudeConfigLock = claudeConfigLock.then(() => {
+    const configPath = getClaudeConfigPath();
+    const current = getClaudeConfig();
+    const merged = { ...current, ...updates };
+    fs2.writeFileSync(configPath, JSON.stringify(merged, null, 2), "utf-8");
+  }).catch((err) => {
+    log2.settings.error("Failed to update Claude config", { error: String(err) });
+  });
+}
+function syncClaudeCodeTheme(resolvedTheme) {
+  const settings = getSettings();
+  if (!settings.appearance.syncClaudeCodeTheme)
+    return;
+  const claudeTheme = resolvedTheme === "light" ? settings.appearance.claudeCodeLightTheme : settings.appearance.claudeCodeDarkTheme;
+  updateClaudeConfig({ theme: claudeTheme });
+  log2.settings.info("Synced Claude Code theme", { claudeTheme, resolvedTheme });
+}
+var DEFAULT_ZAI_SETTINGS = {
+  enabled: false,
+  apiKey: null,
+  haikuModel: "glm-4.5-air",
+  sonnetModel: "glm-4.7",
+  opusModel: "glm-4.7"
+};
+function getZAiSettings() {
+  ensureViboraDir();
+  const settingsPath = getSettingsPath();
+  if (!fs2.existsSync(settingsPath)) {
+    return DEFAULT_ZAI_SETTINGS;
+  }
+  try {
+    const content = fs2.readFileSync(settingsPath, "utf-8");
+    const parsed = JSON.parse(content);
+    const zai = parsed.zai;
+    if (!zai) {
+      return DEFAULT_ZAI_SETTINGS;
+    }
+    return {
+      enabled: zai.enabled ?? false,
+      apiKey: zai.apiKey ?? null,
+      haikuModel: zai.haikuModel ?? DEFAULT_ZAI_SETTINGS.haikuModel,
+      sonnetModel: zai.sonnetModel ?? DEFAULT_ZAI_SETTINGS.sonnetModel,
+      opusModel: zai.opusModel ?? DEFAULT_ZAI_SETTINGS.opusModel
+    };
+  } catch {
+    return DEFAULT_ZAI_SETTINGS;
+  }
+}
+function updateZAiSettings(updates) {
+  ensureViboraDir();
+  const settingsPath = getSettingsPath();
+  let parsed = {};
+  if (fs2.existsSync(settingsPath)) {
+    try {
+      parsed = JSON.parse(fs2.readFileSync(settingsPath, "utf-8"));
+    } catch {}
+  }
+  const current = getZAiSettings();
+  const updated = {
+    enabled: updates.enabled ?? current.enabled,
+    apiKey: updates.apiKey !== undefined ? updates.apiKey : current.apiKey,
+    haikuModel: updates.haikuModel ?? current.haikuModel,
+    sonnetModel: updates.sonnetModel ?? current.sonnetModel,
+    opusModel: updates.opusModel ?? current.opusModel
+  };
+  parsed.zai = updated;
+  fs2.writeFileSync(settingsPath, JSON.stringify(parsed, null, 2), "utf-8");
+  return updated;
+}
+
 // server/db/index.ts
 var _db = null;
 var _sqlite = null;
@@ -146676,8 +146336,6 @@ import { spawn as spawn2 } from "child_process";
 var CONFIG_KEYS = {
   PORT: "server.port",
   DEFAULT_GIT_REPOS_DIR: "paths.defaultGitReposDir",
-  BASIC_AUTH_USERNAME: "authentication.username",
-  BASIC_AUTH_PASSWORD: "authentication.password",
   REMOTE_HOST: "remoteVibora.host",
   REMOTE_PORT: "remoteVibora.port",
   EDITOR_APP: "editor.app",
@@ -146694,8 +146352,6 @@ var CONFIG_KEYS = {
 var LEGACY_KEY_MAP = {
   port: "server.port",
   default_git_repos_dir: "paths.defaultGitReposDir",
-  basic_auth_username: "authentication.username",
-  basic_auth_password: "authentication.password",
   remote_host: "remoteVibora.host",
   hostname: "remoteVibora.host",
   ssh_port: "editor.sshPort",
@@ -146704,8 +146360,6 @@ var LEGACY_KEY_MAP = {
   language: "appearance.language",
   theme: "appearance.theme",
   defaultGitReposDir: "paths.defaultGitReposDir",
-  basicAuthUsername: "authentication.username",
-  basicAuthPassword: "authentication.password",
   remoteHost: "remoteVibora.host",
   sshPort: "editor.sshPort",
   linearApiKey: "integrations.linearApiKey",
@@ -146862,13 +146516,6 @@ app5.get("/:key", (c) => {
   const value = getSettingValue(path8);
   const defaultValue = getDefaultValue(path8);
   const isDefault = value === defaultValue || value === undefined || value === null;
-  if (path8 === CONFIG_KEYS.BASIC_AUTH_PASSWORD) {
-    return c.json({
-      key,
-      value: value ? "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" : null,
-      isDefault: value === null || value === undefined
-    });
-  }
   return c.json({ key, value: value ?? defaultValue, isDefault });
 });
 app5.put("/:key", async (c) => {
@@ -146910,14 +146557,11 @@ app5.put("/:key", async (c) => {
         return c.json({ error: `Editor app must be one of: ${validApps.join(", ")}` }, 400);
       }
     } else if (typeof value === "string" && value === "") {
-      if (path8 === CONFIG_KEYS.LINEAR_API_KEY || path8 === CONFIG_KEYS.GITHUB_PAT || path8 === CONFIG_KEYS.BASIC_AUTH_USERNAME || path8 === CONFIG_KEYS.BASIC_AUTH_PASSWORD || path8 === CONFIG_KEYS.REMOTE_HOST || path8 === CONFIG_KEYS.EDITOR_HOST) {
+      if (path8 === CONFIG_KEYS.LINEAR_API_KEY || path8 === CONFIG_KEYS.GITHUB_PAT || path8 === CONFIG_KEYS.REMOTE_HOST || path8 === CONFIG_KEYS.EDITOR_HOST) {
         value = null;
       }
     }
     updateSettingByPath(path8, value);
-    if (path8 === CONFIG_KEYS.BASIC_AUTH_PASSWORD) {
-      return c.json({ key, value: value ? "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022" : null });
-    }
     return c.json({ key, value });
   } catch (err) {
     return c.json({ error: err instanceof Error ? err.message : "Failed to set config" }, 400);
@@ -148271,7 +147915,7 @@ function expand2(template, context) {
     return template.replace(/\/$/, "");
   }
 }
-function parse2(options) {
+function parse(options) {
   let method = options.method.toUpperCase();
   let url = (options.url || "/").replace(/:([a-z]\w+)/g, "{$1}");
   let headers = Object.assign({}, options.headers);
@@ -148326,7 +147970,7 @@ function parse2(options) {
   return Object.assign({ method, url, headers }, typeof body !== "undefined" ? { body } : null, options.request ? { request: options.request } : null);
 }
 function endpointWithDefaults(defaults2, route, options) {
-  return parse2(merge(defaults2, route, options));
+  return parse(merge(defaults2, route, options));
 }
 function withDefaults(oldDefaults, newDefaults) {
   const DEFAULTS2 = merge(oldDefaults, newDefaults);
@@ -148335,7 +147979,7 @@ function withDefaults(oldDefaults, newDefaults) {
     DEFAULTS: DEFAULTS2,
     defaults: withDefaults.bind(null, DEFAULTS2),
     merge: merge.bind(null, DEFAULTS2),
-    parse: parse2
+    parse
   });
 }
 var endpoint = withDefaults(null, DEFAULTS);
@@ -151641,59 +151285,6 @@ app12.get("/prs", async (c) => {
 });
 var github_default = app12;
 
-// server/routes/auth.ts
-var SESSION_COOKIE_NAME2 = "vibora_session";
-var SESSION_EXPIRY_MS = 14 * 24 * 60 * 60 * 1000;
-var app13 = new Hono2;
-app13.post("/login", async (c) => {
-  const { username, password } = await c.req.json();
-  const settings = getSettings();
-  if (!settings.basicAuthUsername || !settings.basicAuthPassword) {
-    return c.json({ error: "Authentication not configured" }, 500);
-  }
-  if (username !== settings.basicAuthUsername || password !== settings.basicAuthPassword) {
-    return c.json({ error: "Invalid credentials" }, 401);
-  }
-  const secret = getSessionSecret();
-  if (!secret) {
-    return c.json({ error: "Session secret not available" }, 500);
-  }
-  const expiry = Date.now() + SESSION_EXPIRY_MS;
-  const sessionData = JSON.stringify({ exp: expiry });
-  await setSignedCookie(c, SESSION_COOKIE_NAME2, sessionData, secret, {
-    path: "/",
-    httpOnly: true,
-    sameSite: "Strict",
-    maxAge: SESSION_EXPIRY_MS / 1000
-  });
-  return c.json({ success: true, expiresAt: new Date(expiry).toISOString() });
-});
-app13.post("/logout", async (c) => {
-  deleteCookie(c, SESSION_COOKIE_NAME2, { path: "/" });
-  return c.json({ success: true });
-});
-app13.get("/check", async (c) => {
-  const settings = getSettings();
-  if (!settings.basicAuthUsername || !settings.basicAuthPassword) {
-    return c.json({ authRequired: false, authenticated: true });
-  }
-  const secret = getSessionSecret();
-  if (!secret) {
-    return c.json({ authRequired: true, authenticated: false });
-  }
-  const sessionCookie = await getSignedCookie(c, secret, SESSION_COOKIE_NAME2);
-  if (sessionCookie) {
-    try {
-      const session = JSON.parse(sessionCookie);
-      if (session.exp && session.exp > Date.now()) {
-        return c.json({ authRequired: true, authenticated: true });
-      }
-    } catch {}
-  }
-  return c.json({ authRequired: true, authenticated: false });
-});
-var auth_default = app13;
-
 // server/routes/monitoring.ts
 import { readdirSync as readdirSync7, readFileSync as readFileSync7, readlinkSync as readlinkSync2, existsSync as existsSync11 } from "fs";
 import { execSync as execSync6 } from "child_process";
@@ -152655,36 +152246,34 @@ function getDistPath() {
   return join14(process.cwd(), "dist");
 }
 function createApp() {
-  const app14 = new Hono2;
-  app14.use("*", logger());
-  app14.use("*", cors({
+  const app13 = new Hono2;
+  app13.use("*", logger());
+  app13.use("*", cors({
     origin: "*",
     allowMethods: ["GET", "POST", "PATCH", "PUT", "DELETE", "OPTIONS"],
-    allowHeaders: ["Content-Type", "Authorization"]
+    allowHeaders: ["Content-Type"]
   }));
-  app14.use("*", sessionAuthMiddleware);
-  app14.route("/health", health_default);
-  app14.route("/api/tasks", tasks_default);
-  app14.route("/api/git", git_default);
-  app14.route("/api/fs", filesystem_default);
-  app14.route("/api/config", config_default);
-  app14.route("/api/uploads", uploads_default);
-  app14.route("/api/worktrees", worktrees_default);
-  app14.route("/api/terminal-view-state", terminal_view_state_default);
-  app14.route("/api/repositories", repositories_default);
-  app14.route("/api/copier", copier_default);
-  app14.route("/api/linear", linear_default);
-  app14.route("/api/github", github_default);
-  app14.route("/api/auth", auth_default);
-  app14.route("/api/monitoring", monitoringRoutes);
-  app14.post("/api/logs", async (c) => {
+  app13.route("/health", health_default);
+  app13.route("/api/tasks", tasks_default);
+  app13.route("/api/git", git_default);
+  app13.route("/api/fs", filesystem_default);
+  app13.route("/api/config", config_default);
+  app13.route("/api/uploads", uploads_default);
+  app13.route("/api/worktrees", worktrees_default);
+  app13.route("/api/terminal-view-state", terminal_view_state_default);
+  app13.route("/api/repositories", repositories_default);
+  app13.route("/api/copier", copier_default);
+  app13.route("/api/linear", linear_default);
+  app13.route("/api/github", github_default);
+  app13.route("/api/monitoring", monitoringRoutes);
+  app13.post("/api/logs", async (c) => {
     const { entries } = await c.req.json();
     for (const entry of entries) {
       writeEntry(entry);
     }
     return c.json({ ok: true });
   });
-  app14.post("/api/debug", async (c) => {
+  app13.post("/api/debug", async (c) => {
     const body = await c.req.json();
     const entry = {
       ts: new Date().toISOString(),
@@ -152721,14 +152310,14 @@ function createApp() {
         headers: { "Content-Type": mimeTypes2[ext2 || ""] || "application/octet-stream" }
       });
     };
-    app14.get("/assets/*", async (c) => {
+    app13.get("/assets/*", async (c) => {
       const assetPath = join14(distPath, c.req.path);
       if (existsSync12(assetPath)) {
         return serveFile(assetPath);
       }
       return c.notFound();
     });
-    app14.get("/sounds/*", async (c) => {
+    app13.get("/sounds/*", async (c) => {
       const soundPath = join14(distPath, c.req.path);
       if (existsSync12(soundPath)) {
         return serveFile(soundPath);
@@ -152737,7 +152326,7 @@ function createApp() {
     });
     const staticFiles = ["vibora-icon.png", "vibora-logo.jpeg", "vite.svg", "logo-dark.jpg", "logo-light.jpg", "goat.jpeg"];
     for (const file of staticFiles) {
-      app14.get(`/${file}`, async () => {
+      app13.get(`/${file}`, async () => {
         const filePath = join14(distPath, file);
         if (existsSync12(filePath)) {
           return serveFile(filePath);
@@ -152745,7 +152334,7 @@ function createApp() {
         return new Response("Not Found", { status: 404 });
       });
     }
-    app14.get("*", async (c, next) => {
+    app13.get("*", async (c, next) => {
       const path9 = c.req.path;
       if (path9.startsWith("/api/") || path9.startsWith("/ws/") || path9 === "/health") {
         return next();
@@ -152754,7 +152343,7 @@ function createApp() {
       return c.html(html);
     });
   }
-  return app14;
+  return app13;
 }
 
 // server/services/pr-monitor.ts
@@ -152857,11 +152446,11 @@ setBroadcastDestroyed((terminalId) => {
     payload: { terminalId }
   });
 });
-var app14 = createApp();
-var { injectWebSocket, upgradeWebSocket } = createNodeWebSocket({ app: app14 });
-app14.get("/ws/terminal", upgradeWebSocket(() => terminalWebSocketHandlers));
+var app13 = createApp();
+var { injectWebSocket, upgradeWebSocket } = createNodeWebSocket({ app: app13 });
+app13.get("/ws/terminal", upgradeWebSocket(() => terminalWebSocketHandlers));
 var server = serve({
-  fetch: app14.fetch,
+  fetch: app13.fetch,
   port: PORT,
   hostname: HOST
 }, (info) => {