wherdr 1.3.3 → 1.3.4

package/.output/server/chunks/routes/api/board.get.mjs

@@ -29,6 +29,7 @@ import 'qrcode-terminal/vendor/QRCode/index.js';
 import 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import '@simplewebauthn/server';
 import 'node:url';
+import '../../_/projectsPlugin.mjs';
 
 const RESOLVED_KEPT = 20;
 

package/.output/server/chunks/routes/api/chat/image.get.mjs

@@ -1,4 +1,4 @@
-import { d as defineEventHandler, i as getQuery, f as findPane, G as transcripts, s as sendError, M as sendImage } from '../../../nitro/nitro.mjs';
+import { d as defineEventHandler, i as getQuery, f as findPane, J as transcripts, s as sendError, S as sendImage } from '../../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/chat.get.mjs

@@ -1,4 +1,4 @@
-import { U as UPLOAD_DIR, C as uploadNames, a as defineApi, i as getQuery, f as findPane, H as HerdrError, D as machineOfPane, E as fmt, F as takenBackOf, G as transcripts, I as chatPasted, J as withoutTakenBack, K as withSentText, L as currentModel } from '../../nitro/nitro.mjs';
+import { U as UPLOAD_DIR, C as uploadNames, D as runHerdrCli, E as parseIntegrationStatus, a as defineApi, i as getQuery, f as findPane, H as HerdrError, F as machineOfPane, G as fmt, I as takenBackOf, J as transcripts, K as missingIntegration, L as multiMachine, M as integrationCommand, N as chatPasted, O as withoutTakenBack, Q as withSentText, R as currentModel } from '../../nitro/nitro.mjs';
 import { createHash } from 'node:crypto';
 import fs from 'node:fs/promises';
 import path from 'node:path';
@@ -31,19 +31,19 @@ import 'node:url';
 
 const UPLOAD_PATH = /\.cache\/herdr-web\/uploads\/([\w-]+\.[a-z]+)/g;
 const CACHE_MAX = 500;
-const cache = /* @__PURE__ */ new Map();
+const cache$1 = /* @__PURE__ */ new Map();
 async function uploadHash(dir, name) {
   const key = `${dir}
 ${name}`;
-  if (cache.has(key)) return cache.get(key);
+  if (cache$1.has(key)) return cache$1.get(key);
   let hash = null;
   try {
     hash = createHash("sha256").update(await fs.readFile(path.join(dir, path.basename(name)))).digest("hex");
   } catch {
     hash = null;
   }
-  if (cache.size >= CACHE_MAX) cache.delete(cache.keys().next().value);
-  cache.set(key, hash);
+  if (cache$1.size >= CACHE_MAX) cache$1.delete(cache$1.keys().next().value);
+  cache$1.set(key, hash);
   return hash;
 }
 async function addUploadHashes(items, dir = UPLOAD_DIR) {
@@ -68,6 +68,23 @@ ${((_a = it.omp) == null ? void 0 : _a.target) || ""}`.matchAll(UPLOAD_PATH)].ma
   }
 }
 
+const ttl = Number(process.env.WHERDR_INTEGRATION_TTL_MS);
+const TTL_MS = Number.isFinite(ttl) && ttl >= 0 ? ttl : 6e4;
+const cache = /* @__PURE__ */ new Map();
+const keyOf = (m) => m.local ? "" : `${m.target || m.key}`;
+async function integrationStatus(m) {
+  const key = keyOf(m);
+  const hit = cache.get(key);
+  if (hit == null ? void 0 : hit.pending) return hit.pending;
+  if (hit && Date.now() - hit.at < TTL_MS) return hit.status;
+  const pending = runHerdrCli(m, ["integration", "status"], 8e3).then((r) => r.code === 0 ? parseIntegrationStatus(r.stdout.toString("utf8")) : null).catch(() => null).then((status) => {
+    cache.set(key, { at: Date.now(), status: status && Object.keys(status).length ? status : null });
+    return cache.get(key).status;
+  });
+  cache.set(key, { at: (hit == null ? void 0 : hit.at) || 0, status: (hit == null ? void 0 : hit.status) || null, pending });
+  return pending;
+}
+
 const chat_get = defineApi(async (event) => {
   const q = getQuery(event);
   const p = findPane(String(q.pane || ""));
@@ -85,6 +102,9 @@ const chat_get = defineApi(async (event) => {
     before: num("before")
     // older slice, ending at this byte
   });
+  if (!r.available && r.reason === "not_found" && m && p.agent && !p.agentSession && missingIntegration(p, await integrationStatus(m), m.transcripts.wasActive(p.id, p.agent))) {
+    return { ...r, reason: "no_integration", integration: { agent: p.agent, command: integrationCommand(p.agent), machine: multiMachine() ? m.label : null } };
+  }
   if (r.token) r.token += mark;
   if (r.items) {
     r.items = chatPasted(withoutTakenBack(r.items, hidden));

package/.output/server/chunks/routes/api/choose.post.mjs

@@ -1,4 +1,4 @@
-import { H as HerdrError, N as keysFor, O as parseChoices, Q as parseOmpField, a as defineApi, P as PANE_RE, f as findPane, R as withPaneLock, S as selfUpdates, T as restarting, V as updateChoices, W as UPDATE_LABELS, X as updateRestartPlan, Y as restarts, p as poll, h as herdr, G as transcripts, b as screenChoices, Z as usesTerminalException, _ as sameQuestion, $ as sleep, g as choicesCache } from '../../nitro/nitro.mjs';
+import { H as HerdrError, T as keysFor, V as parseChoices, W as parseOmpField, a as defineApi, P as PANE_RE, f as findPane, X as withPaneLock, Y as selfUpdates, Z as restarting, _ as updateChoices, $ as UPDATE_LABELS, a0 as updateRestartPlan, a1 as restarts, p as poll, h as herdr, J as transcripts, b as screenChoices, a2 as usesTerminalException, a3 as sameQuestion, a4 as sleep, g as choicesCache } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -140,24 +140,24 @@ const choose_post = defineApi(async (event, b) => {
       return { ok: true };
     });
   }
-  const r = await herdr("pane.read", { pane_id: b.pane_id, source: "detection" }, 4e3);
-  const text = r.read && r.read.text;
-  const pane = findPane(b.pane_id);
-  const asked = pane && pane.agent === "claude" ? await transcripts.pendingClaudeQuestions(pane).catch(() => []) : [];
-  const choices = screenChoices(text, pane == null ? void 0 : pane.agent, asked);
-  const i = Number(b.index);
-  const option = choices && choices.options[i];
-  const answer = typeof b.text === "string" ? b.text.trim() : "";
-  if (!choices || usesTerminalException({ text: String(text || ""), agent: pane == null ? void 0 : pane.agent, status: pane == null ? void 0 : pane.status }) || !option || option.label !== b.label || answer && !option.free || option.free && !sameQuestion(choices.question, typeof b.question === "string" ? b.question : null)) {
-    throw new HerdrError("stale", "The question has changed \u2014 check the current screen.");
-  }
-  if (option.free && !answer) throw new HerdrError("bad_text", "Write your answer before sending it.");
   try {
+    const pane = findPane(b.pane_id);
+    const asked = pane && pane.agent === "claude" ? await transcripts.pendingClaudeQuestions(pane).catch(() => []) : [];
+    const r = await herdr("pane.read", { pane_id: b.pane_id, source: "detection" }, 4e3);
+    const text = r.read && r.read.text;
+    const choices = screenChoices(text, pane == null ? void 0 : pane.agent, asked);
+    const i = Number(b.index);
+    const option = choices && choices.options[i];
+    const answer = typeof b.text === "string" ? b.text.trim() : "";
+    if (!choices || !b.identity || choices.identity !== b.identity || usesTerminalException({ text: String(text || ""), agent: pane == null ? void 0 : pane.agent, status: pane == null ? void 0 : pane.status }) || !option || option.label !== b.label || answer && !option.free || option.free && !sameQuestion(choices.question, typeof b.question === "string" ? b.question : null)) {
+      throw new HerdrError("stale", "The question has changed \u2014 check the current screen.");
+    }
+    if (option.free && !answer) throw new HerdrError("bad_text", "Write your answer before sending it.");
     if (option.free) await answerFree({ call: herdr, sleep, now: Date.now }, b.pane_id, choices, i, answer, pane == null ? void 0 : pane.agent);
     else await herdr("pane.send_input", { pane_id: b.pane_id, keys: keysFor(choices, i) });
   } finally {
     choicesCache.delete(b.pane_id);
-    setTimeout(poll, 300);
+    setTimeout(poll, 0);
   }
   return { ok: true };
 });

package/.output/server/chunks/routes/api/claude-statusline.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, a0 as MACHINE_KEY_RE, a1 as getMachine, H as HerdrError, a2 as installClaudeStatusline } from '../../nitro/nitro.mjs';
+import { a as defineApi, a5 as MACHINE_KEY_RE, a6 as getMachine, H as HerdrError, a7 as installClaudeStatusline } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/codex-update.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, P as PANE_RE, H as HerdrError, f as findPane, a3 as codexStatus } from '../../nitro/nitro.mjs';
+import { a as defineApi, P as PANE_RE, H as HerdrError, f as findPane, a8 as codexStatus } from '../../nitro/nitro.mjs';
 import { u as updateCodexInPane } from '../../_/restart.mjs';
 import 'node:http';
 import 'node:https';

package/.output/server/chunks/routes/api/commands.get.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, f as findPane, i as getQuery, H as HerdrError, D as machineOfPane, af as builtinCommands, ag as slashCommands, ab as log } from '../../nitro/nitro.mjs';
+import { a as defineApi, f as findPane, i as getQuery, H as HerdrError, F as machineOfPane, ak as builtinCommands, al as slashCommands, ag as log } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -36,7 +36,8 @@ const commands_get = defineApi(async (event) => {
   if (!p.agent || !m || !m.home) return { commands: [] };
   if (!m.local && m.status !== "online") return { commands: builtinCommands(p.agent), partial: true };
   try {
-    return { commands: await slashCommands({ key: m.key, fs: m.fs, exec: m.exec, home: m.home, kind: p.agent, cwd: p.cwd }) };
+    const r = await slashCommands({ key: m.key, fs: m.fs, exec: m.exec, home: m.home, kind: p.agent, cwd: p.cwd });
+    return r.denied ? { ...r, remote: !m.local } : r;
   } catch (e) {
     log(`commands ${p.id}: ${e.message}`);
     return { commands: builtinCommands(p.agent), partial: true };

package/.output/server/chunks/routes/api/config.get.mjs

@@ -1,4 +1,4 @@
-import { ah as HOME, a as defineApi, ai as localMachine, aj as readSubs, ak as vapidPublicKey, al as pushReady, am as machineConfigs, an as recentDirsWithKinds, ao as installedAgentKinds, l as localMachineLabel } from '../../nitro/nitro.mjs';
+import { am as HOME, a as defineApi, an as localMachine, ao as readSubs, ap as vapidPublicKey, aq as pushReady, ar as machineConfigs, as as recentDirsWithKinds, at as installedAgentKinds, l as localMachineLabel } from '../../nitro/nitro.mjs';
 import fs from 'node:fs';
 import path from 'node:path';
 import { h as hostOpenReady } from '../../_/reveal.mjs';

package/.output/server/chunks/routes/api/dirs.get.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, i as getQuery, av as listDirs } from '../../nitro/nitro.mjs';
+import { a as defineApi, i as getQuery, aA as listDirs } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/dismiss-stopped.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, P as PANE_RE, H as HerdrError, R as withPaneLock, f as findPane, T as restarting, aw as dismissStopped, p as poll } from '../../nitro/nitro.mjs';
+import { a as defineApi, P as PANE_RE, H as HerdrError, X as withPaneLock, f as findPane, Z as restarting, aB as dismissStopped, p as poll } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/dismiss.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, P as PANE_RE, H as HerdrError, ax as closePanel } from '../../nitro/nitro.mjs';
+import { a as defineApi, P as PANE_RE, H as HerdrError, aC as closePanel } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/effort.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, P as PANE_RE, H as HerdrError, ay as setEffort, f as findPane, az as refreshModel } from '../../nitro/nitro.mjs';
+import { a as defineApi, P as PANE_RE, H as HerdrError, aD as setEffort, f as findPane, aE as refreshModel } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/efforts.get.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, i as getQuery, P as PANE_RE, H as HerdrError, aA as listEfforts, f as findPane, az as refreshModel } from '../../nitro/nitro.mjs';
+import { a as defineApi, i as getQuery, P as PANE_RE, H as HerdrError, aF as listEfforts, f as findPane, aE as refreshModel } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/file.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, i as getQuery, aB as saveUpload, P as PANE_RE } from '../../nitro/nitro.mjs';
+import { a as defineApi, i as getQuery, aG as saveUpload, P as PANE_RE } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/files/download.get.mjs

@@ -1,5 +1,5 @@
-import { a as defineApi, i as getQuery, f as findPane, H as HerdrError, v as machineFor, aC as setResponseHeader } from '../../../nitro/nitro.mjs';
-import { r as readWrittenBytes, a as readFileBytes, b as attachmentHeader } from '../../../_/files.mjs';
+import { a as defineApi, i as getQuery, f as findPane, H as HerdrError, v as machineFor, aH as setResponseHeader } from '../../../nitro/nitro.mjs';
+import { r as readWrittenBytes, a as readFileBytes, i as isPdf, b as attachmentHeader } from '../../../_/files.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -42,9 +42,16 @@ const download_get = defineApi(async (event) => {
     if (!p.cwd) throw new HerdrError("bad_cwd", "This agent\u2019s folder is unknown");
     f = await readFileBytes(machineFor(p.machine), p.cwd, q.path);
   }
+  setResponseHeader(event, "x-content-type-options", "nosniff");
+  if (q.inline === "1" && isPdf(f.name, f.body)) {
+    setResponseHeader(event, "content-type", "application/pdf");
+    setResponseHeader(event, "content-disposition", attachmentHeader(f.name, "inline"));
+    setResponseHeader(event, "content-security-policy", "default-src 'none'; object-src 'self'; frame-ancestors 'self'");
+    setResponseHeader(event, "cache-control", "private, no-store");
+    return f.body;
+  }
   setResponseHeader(event, "content-type", "application/octet-stream");
   setResponseHeader(event, "content-disposition", attachmentHeader(f.name));
-  setResponseHeader(event, "x-content-type-options", "nosniff");
   setResponseHeader(event, "content-security-policy", "default-src 'none'; sandbox");
   return f.body;
 });

package/.output/server/chunks/routes/api/gitroot.get.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, i as getQuery, v as machineFor, aD as underHome } from '../../nitro/nitro.mjs';
+import { a as defineApi, i as getQuery, v as machineFor, aI as underHome } from '../../nitro/nitro.mjs';
 import { g as gitToplevel } from '../../_/changes.mjs';
 import { p as proposedRepo } from '../../_/projectsActions.mjs';
 import 'node:http';

package/.output/server/chunks/routes/api/index.get.mjs

@@ -29,6 +29,7 @@ import 'qrcode-terminal/vendor/QRCode/index.js';
 import 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import '@simplewebauthn/server';
 import 'node:url';
+import '../../_/projectsPlugin.mjs';
 
 const index_get = defineApi(async (event) => {
   const q = getQuery(event);

package/.output/server/chunks/routes/api/input.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, P as PANE_RE, H as HerdrError, R as withPaneLock, f as findPane, aE as isSlashCommand, aF as addQueued, p as poll, h as herdr } from '../../nitro/nitro.mjs';
+import { a as defineApi, P as PANE_RE, H as HerdrError, X as withPaneLock, f as findPane, J as transcripts, h as herdr, b as screenChoices, a2 as usesTerminalException, aJ as isSlashCommand, aK as addQueued, p as poll, g as choicesCache } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -32,17 +32,34 @@ import 'node:url';
 const input_post = defineApi(async (event, b) => {
   if (!PANE_RE.test(b.pane_id || "")) throw new HerdrError("bad_pane", "Invalid pane");
   const held = await withPaneLock(b.pane_id, async () => {
-    const now = findPane(b.pane_id);
-    if ((now == null ? void 0 : now.stopped) || (now == null ? void 0 : now.leaving)) {
-      if (typeof b.text !== "string" || !b.text.trim() || isSlashCommand(b.text) || !Array.isArray(b.keys) || b.keys.length !== 1 || b.keys[0] !== "enter") {
-        throw new HerdrError("stale", now.stopped ? "Restart Codex before sending a command." : "Codex just stopped. Try again in a few seconds.");
+    var _a;
+    try {
+      const now = findPane(b.pane_id);
+      if (b.native) {
+        const asked = (now == null ? void 0 : now.agent) === "claude" ? await transcripts.pendingClaudeQuestions(now).catch(() => []) : [];
+        const r = await herdr("pane.read", { pane_id: b.pane_id, source: "detection" }, 4e3);
+        const text = (_a = r.read) == null ? void 0 : _a.text;
+        const choices = screenChoices(text, now == null ? void 0 : now.agent, asked);
+        if ((now == null ? void 0 : now.stopped) || (now == null ? void 0 : now.leaving) || !b.identity || (choices == null ? void 0 : choices.identity) !== b.identity || usesTerminalException({ text: String(text || ""), agent: now == null ? void 0 : now.agent, status: now == null ? void 0 : now.status })) {
+          throw new HerdrError("stale", "The question has changed \u2014 check the current screen.");
+        }
+      }
+      if ((now == null ? void 0 : now.stopped) || (now == null ? void 0 : now.leaving)) {
+        if (typeof b.text !== "string" || !b.text.trim() || isSlashCommand(b.text) || !Array.isArray(b.keys) || b.keys.length !== 1 || b.keys[0] !== "enter") {
+          throw new HerdrError("stale", now.stopped ? "Restart Codex before sending a command." : "Codex just stopped. Try again in a few seconds.");
+        }
+        const q = addQueued(b.pane_id, b.text, { held: true });
+        setTimeout(poll, 50);
+        return q;
+      }
+      if (typeof b.text === "string" && b.text) await herdr("pane.send_input", { pane_id: b.pane_id, text: b.text });
+      if (Array.isArray(b.keys) && b.keys.length) await herdr("pane.send_input", { pane_id: b.pane_id, keys: b.keys.map(String) });
+    } finally {
+      if (b.native) {
+        choicesCache.delete(b.pane_id);
+        setTimeout(poll, 0);
       }
-      const q = addQueued(b.pane_id, b.text, { held: true });
-      setTimeout(poll, 50);
-      return q;
     }
-    if (typeof b.text === "string" && b.text) await herdr("pane.send_input", { pane_id: b.pane_id, text: b.text });
-    if (Array.isArray(b.keys) && b.keys.length) await herdr("pane.send_input", { pane_id: b.pane_id, keys: b.keys.map(String) });
   });
   if (held) return { ok: true, queued: held };
   const p = findPane(b.pane_id);

package/.output/server/chunks/routes/api/interrupt.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, P as PANE_RE, H as HerdrError, f as findPane, aG as interruptAgent, $ as sleep, h as herdr, aH as takeBackFromClaude, aI as takeBack, ab as log, p as poll } from '../../nitro/nitro.mjs';
+import { a as defineApi, P as PANE_RE, H as HerdrError, f as findPane, aL as interruptAgent, a4 as sleep, h as herdr, aM as takeBackFromClaude, aN as takeBack, ag as log, p as poll } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/isgit.get.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, i as getQuery, v as machineFor, aD as underHome, aJ as isGitRepo, aK as projectFolderKinds } from '../../nitro/nitro.mjs';
+import { a as defineApi, i as getQuery, v as machineFor, aI as underHome, aO as isGitRepo, aP as projectFolderKinds } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/machine/awake.get.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, i as getQuery, a0 as MACHINE_KEY_RE, H as HerdrError, a1 as getMachine } from '../../../nitro/nitro.mjs';
+import { a as defineApi, i as getQuery, a5 as MACHINE_KEY_RE, H as HerdrError, a6 as getMachine } from '../../../nitro/nitro.mjs';
 import { a as awakeStatus, s as sleepAssertions } from '../../../_/awake.mjs';
 import 'node:http';
 import 'node:https';

package/.output/server/chunks/routes/api/machine/awake.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, a0 as MACHINE_KEY_RE, H as HerdrError, a1 as getMachine } from '../../../nitro/nitro.mjs';
+import { a as defineApi, a5 as MACHINE_KEY_RE, H as HerdrError, a6 as getMachine } from '../../../nitro/nitro.mjs';
 import { b as setAwake } from '../../../_/awake.mjs';
 import 'node:http';
 import 'node:https';

package/.output/server/chunks/routes/api/machine/rename.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, a0 as MACHINE_KEY_RE, a1 as getMachine, H as HerdrError, aN as renameMachine } from '../../../nitro/nitro.mjs';
+import { a as defineApi, a5 as MACHINE_KEY_RE, a6 as getMachine, H as HerdrError, aS as renameMachine } from '../../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/menu.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, P as PANE_RE, H as HerdrError, aO as readMenu, aP as searchKeys, $ as sleep, aQ as findEntry, aR as stepToward, aS as clickMovesOnly, e as watchScreen, G as transcripts, p as poll, h as herdr } from '../../nitro/nitro.mjs';
+import { a as defineApi, P as PANE_RE, H as HerdrError, aT as readMenu, aU as findEntry, aV as menuIdentity, aW as searchKeys, a4 as sleep, aX as stepToward, aY as clickMovesOnly, e as watchScreen, J as transcripts, p as poll, h as herdr } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -38,6 +38,8 @@ const menu_post = defineApi(async (event, b) => {
   const pane = b.pane_id;
   let menu = await readMenu(pane);
   if (!menu) throw new HerdrError("stale", STALE);
+  const targetEntry = b.op === "select" ? menu.items[findEntry(menu, Number(b.index), String(b.label || ""))] : void 0;
+  if (!b.identity || menuIdentity(menu, targetEntry) !== b.identity) throw new HerdrError("stale", STALE);
   if (b.op === "key") {
     const a = menu.actions.find((x) => x.key === b.key && x.label === b.label);
     if (!a) throw new HerdrError("stale", STALE);
@@ -69,6 +71,7 @@ const menu_post = defineApi(async (event, b) => {
       }
       if (!menu || at(menu) === before) throw new HerdrError("stale", "The cursor doesn\u2019t move \u2014 finish in the terminal.");
       target = findEntry(menu, -1, label);
+      if (target < 0 || menuIdentity(menu, menu.items[target]) !== b.identity) throw new HerdrError("stale", STALE);
     }
   } else throw new HerdrError("bad_request", "Invalid operation");
   watchScreen(pane, 3e4);

package/.output/server/chunks/routes/api/model.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, P as PANE_RE, H as HerdrError, aT as setModel, f as findPane, az as refreshModel } from '../../nitro/nitro.mjs';
+import { a as defineApi, P as PANE_RE, H as HerdrError, aZ as setModel, f as findPane, aE as refreshModel } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/models.get.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, i as getQuery, P as PANE_RE, H as HerdrError, aU as listModels } from '../../nitro/nitro.mjs';
+import { a as defineApi, i as getQuery, P as PANE_RE, H as HerdrError, a_ as listModels } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/nav.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, P as PANE_RE, H as HerdrError, f as findPane, h as herdr, aV as TOP, aO as readMenu, aS as clickMovesOnly, b as screenChoices, e as watchScreen, g as choicesCache, p as poll } from '../../nitro/nitro.mjs';
+import { a as defineApi, P as PANE_RE, H as HerdrError, f as findPane, h as herdr, e as watchScreen, a$ as refreshNativeScreen, b0 as TOP, aT as readMenu, aV as menuIdentity, b as screenChoices, aY as clickMovesOnly, g as choicesCache, p as poll } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -31,33 +31,46 @@ import 'node:url';
 
 const KEYS = /* @__PURE__ */ new Set(["up", "down", "enter", "esc", "left", "right"]);
 const nav_post = defineApi(async (event, b) => {
-  var _a, _b;
+  var _a, _b, _c, _d, _e;
   if (!PANE_RE.test(b.pane_id || "")) throw new HerdrError("bad_pane", "Invalid pane");
   const pane = b.pane_id;
   if ((_a = findPane(pane)) == null ? void 0 : _a.stopped) throw new HerdrError("stale", "Use the restart buttons for this stopped agent.");
   const key = String(b.key || "");
   if (!KEYS.has(key)) throw new HerdrError("bad_request", "Invalid key");
-  const r = await herdr("pane.read", { pane_id: pane, source: "detection" }, 4e3);
-  const text = r.read && r.read.text;
-  const agent = (_b = findPane(pane)) == null ? void 0 : _b.agent;
-  const framed = agent !== "omp" && String(text || "").split("\n").some((l) => TOP.test(l));
-  const menu = framed ? await readMenu(pane) : null;
-  if (menu) {
-    if (key === "enter" && clickMovesOnly(menu)) throw new HerdrError("stale", "Enter doesn\u2019t confirm from here \u2014 use the buttons.");
-    if (key === "left" || key === "right") throw new HerdrError("stale", "The screen has changed \u2014 check the current screen.");
-  } else {
-    const choices = screenChoices(text, agent);
-    if (!choices || (key === "left" || key === "right") && !(choices.tabs && !choices.typing)) {
-      throw new HerdrError("stale", "The screen has changed \u2014 check the current screen.");
+  try {
+    const shown = findPane(pane);
+    if ((key === "up" || key === "down") && shown && !shown.leaving && shown.status !== "working" && !((_b = shown.menu) == null ? void 0 : _b.unavailable) && !((_c = shown.prompt) == null ? void 0 : _c.unavailable) && (shown.menu || shown.prompt)) {
+      await herdr("pane.send_input", { pane_id: pane, keys: [key] });
+      watchScreen(pane, 3e4);
+      setTimeout(() => refreshNativeScreen(pane), 50);
+      return { ok: true };
     }
-  }
-  await herdr("pane.send_input", { pane_id: pane, keys: [key] });
-  watchScreen(pane, 3e4);
-  for (const ms of [50, 150, 400]) setTimeout(() => {
+    const r = await herdr("pane.read", { pane_id: pane, source: "detection" }, 4e3);
+    const text = r.read && r.read.text;
+    const agent = (_d = findPane(pane)) == null ? void 0 : _d.agent;
+    const framed = agent !== "omp" && String(text || "").split("\n").some((l) => TOP.test(l));
+    const menu = framed ? await readMenu(pane) : null;
+    if (key === "enter") {
+      const current = menu ? menuIdentity(menu) : (_e = screenChoices(text, agent)) == null ? void 0 : _e.identity;
+      if (!b.identity || current !== b.identity) throw new HerdrError("stale", "The question has changed \u2014 check the current screen.");
+    }
+    if (menu) {
+      if (key === "enter" && clickMovesOnly(menu)) throw new HerdrError("stale", "Enter doesn\u2019t confirm from here \u2014 use the buttons.");
+      if (key === "left" || key === "right") throw new HerdrError("stale", "The screen has changed \u2014 check the current screen.");
+    } else {
+      const choices = screenChoices(text, agent);
+      if (!choices || (key === "left" || key === "right") && !(choices.tabs && !choices.typing)) {
+        throw new HerdrError("stale", "The screen has changed \u2014 check the current screen.");
+      }
+    }
+    await herdr("pane.send_input", { pane_id: pane, keys: [key] });
+    watchScreen(pane, 3e4);
+    setTimeout(() => refreshNativeScreen(pane), 50);
+    return { ok: true };
+  } finally {
     choicesCache.delete(pane);
-    poll();
-  }, ms);
-  return { ok: true };
+    setTimeout(poll, 0);
+  }
 });
 
 export { nav_post as default };

package/.output/server/chunks/routes/api/phone.get.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, aX as phoneAccess, s as sendError, aY as phoneStatus } from '../../nitro/nitro.mjs';
+import { a as defineApi, b2 as phoneAccess, s as sendError, b3 as phoneStatus } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/phone.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, aX as phoneAccess, s as sendError, aZ as phoneAction } from '../../nitro/nitro.mjs';
+import { a as defineApi, b2 as phoneAccess, s as sendError, b4 as phoneAction } from '../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/plugins/actions.get.mjs

@@ -30,6 +30,8 @@ import 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import '@simplewebauthn/server';
 import 'node:url';
 import '../../../_/projectBoard.mjs';
+import '../../../_/projectsPlugin.mjs';
+import '../../../_/projectsPlugin2.mjs';
 import '../../../_/pluginPolicy.mjs';
 import '../../../_/projectsActions.mjs';
 

package/.output/server/chunks/routes/api/plugins/invoke.post.mjs

@@ -30,6 +30,8 @@ import 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import '@simplewebauthn/server';
 import 'node:url';
 import '../../../_/projectBoard.mjs';
+import '../../../_/projectsPlugin.mjs';
+import '../../../_/projectsPlugin2.mjs';
 import '../../../_/pluginPolicy.mjs';
 import '../../../_/projectsActions.mjs';
 

package/.output/server/chunks/routes/api/plugins/profiles.get.mjs

@@ -30,6 +30,8 @@ import 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import '@simplewebauthn/server';
 import 'node:url';
 import '../../../_/projectBoard.mjs';
+import '../../../_/projectsPlugin.mjs';
+import '../../../_/projectsPlugin2.mjs';
 import '../../../_/pluginPolicy.mjs';
 import '../../../_/projectsActions.mjs';
 

package/.output/server/chunks/routes/api/plugins/projects.get.mjs

@@ -1,5 +1,5 @@
-import { a as defineApi, i as getQuery, a0 as MACHINE_KEY_RE, H as HerdrError, a1 as getMachine } from '../../../nitro/nitro.mjs';
-import { p as projectsPluginState } from '../../../_/projectsPlugin.mjs';
+import { a as defineApi, i as getQuery, a5 as MACHINE_KEY_RE, H as HerdrError, a6 as getMachine } from '../../../nitro/nitro.mjs';
+import { p as projectsPluginState } from '../../../_/projectsPlugin2.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -29,6 +29,7 @@ import 'qrcode-terminal/vendor/QRCode/index.js';
 import 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import '@simplewebauthn/server';
 import 'node:url';
+import '../../../_/projectsPlugin.mjs';
 
 const projects_get = defineApi(async (event) => {
   const key = getQuery(event).machine;

package/.output/server/chunks/routes/api/plugins/projects.post.mjs

@@ -1,5 +1,5 @@
-import { a as defineApi, a0 as MACHINE_KEY_RE, H as HerdrError, a1 as getMachine } from '../../../nitro/nitro.mjs';
-import { i as installProjectsPlugin } from '../../../_/projectsPlugin.mjs';
+import { a as defineApi, a5 as MACHINE_KEY_RE, H as HerdrError, a6 as getMachine } from '../../../nitro/nitro.mjs';
+import { i as installProjectsPlugin } from '../../../_/projectsPlugin2.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -29,6 +29,7 @@ import 'qrcode-terminal/vendor/QRCode/index.js';
 import 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import '@simplewebauthn/server';
 import 'node:url';
+import '../../../_/projectsPlugin.mjs';
 
 const projects_post = defineApi(async (_event, body) => {
   const key = body.machine;

package/.output/server/chunks/routes/api/plugins/thread-limits.post.mjs

@@ -1,4 +1,4 @@
-import { a as defineApi, a_ as limitMachineKeys, H as HerdrError, a$ as validLimit, b0 as readThreadLimits, b1 as writeThreadLimits, u as currentMachineSlots } from '../../../nitro/nitro.mjs';
+import { a as defineApi, b5 as limitMachineKeys, H as HerdrError, b6 as validLimit, b7 as readThreadLimits, b8 as writeThreadLimits, u as currentMachineSlots } from '../../../nitro/nitro.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';

package/.output/server/chunks/routes/api/project/inbox.get.mjs

@@ -31,6 +31,7 @@ import '@simplewebauthn/server';
 import 'node:url';
 import '../../../_/projectThreads.mjs';
 import '../../../_/projectBoard.mjs';
+import '../../../_/projectsPlugin.mjs';
 import '../../../_/pluginPolicy.mjs';
 
 const inbox_get = defineApi(async (event) => {

package/.output/server/chunks/routes/api/project/inbox.post.mjs

@@ -31,6 +31,7 @@ import '@simplewebauthn/server';
 import 'node:url';
 import '../../../_/projectThreads.mjs';
 import '../../../_/projectBoard.mjs';
+import '../../../_/projectsPlugin.mjs';
 import '../../../_/pluginPolicy.mjs';
 
 const inbox_post = defineApi(async (_event, body) => {

package/.output/server/chunks/routes/api/project/memory.get.mjs

@@ -30,6 +30,7 @@ import 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import '@simplewebauthn/server';
 import 'node:url';
 import '../../../_/projectBoard.mjs';
+import '../../../_/projectsPlugin.mjs';
 
 const memory_get = defineApi(async (event) => {
   const q = getQuery(event);

package/.output/server/chunks/routes/api/project/report.get.mjs

@@ -29,6 +29,7 @@ import 'qrcode-terminal/vendor/QRCode/index.js';
 import 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import '@simplewebauthn/server';
 import 'node:url';
+import '../../../_/projectsPlugin.mjs';
 
 const report_get = defineApi(async (event) => {
   const q = getQuery(event);

package/.output/server/chunks/routes/api/project/routines.get.mjs

@@ -31,6 +31,7 @@ import '@simplewebauthn/server';
 import 'node:url';
 import '../../../_/projectThreads.mjs';
 import '../../../_/projectBoard.mjs';
+import '../../../_/projectsPlugin.mjs';
 import '../../../_/pluginPolicy.mjs';
 
 const routines_get = defineApi(async (event) => {

package/.output/server/chunks/routes/api/project/settings.get.mjs

@@ -30,6 +30,7 @@ import 'qrcode-terminal/vendor/QRCode/QRErrorCorrectLevel.js';
 import '@simplewebauthn/server';
 import 'node:url';
 import '../../../_/projectBoard.mjs';
+import '../../../_/projectsPlugin.mjs';
 
 const settings_get = defineApi(async (event) => {
   const p = findPane(String(getQuery(event).pane || ""));

package/.output/server/chunks/routes/api/project/thread.get.mjs

@@ -31,6 +31,7 @@ import '@simplewebauthn/server';
 import 'node:url';
 import '../../../_/projectThreads.mjs';
 import '../../../_/projectBoard.mjs';
+import '../../../_/projectsPlugin.mjs';
 import '../../../_/pluginPolicy.mjs';
 
 const thread_get = defineApi(async (event) => {