wherdr 1.3.3 → 2.0.0

package/.output/public/_nuxt/settings.Cdb21nNw.css

@@ -0,0 +1 @@
+.notification-level[data-v-aa9b4e30]{flex-direction:column;gap:6px;min-width:0;display:flex}.notification-level select[data-v-aa9b4e30]{border:1px solid var(--line);background:var(--bg);max-width:100%;min-height:44px;color:var(--text);font:inherit;border-radius:0;padding:8px}.notification-level-hint[data-v-aa9b4e30]{color:var(--muted);font-size:12px}.notification-customize summary[data-v-aa9b4e30]{cursor:pointer;min-height:36px;color:var(--muted);align-items:center;gap:4px;font-size:13px;list-style:none;display:flex}.notification-customize summary[data-v-aa9b4e30]::-webkit-details-marker{display:none}.notification-chev[data-v-aa9b4e30]{transition:transform .15s}.notification-customize[open] .notification-chev[data-v-aa9b4e30]{transform:rotate(90deg)}.notification-events[data-v-aa9b4e30]{flex-wrap:wrap;gap:4px 18px;display:flex}.notification-events label[data-v-aa9b4e30]{align-items:center;gap:6px;min-height:44px;display:flex}.notification-events input[data-v-aa9b4e30]{accent-color:var(--accent)}.notification-rules .settings-toggle[data-v-aeafb17e]{gap:16px}.notification-rules .settings-toggle>span[data-v-aeafb17e]{flex:1;min-width:0}.notification-default[data-v-aeafb17e]>.notification-level{margin-bottom:8px}.notification-help[data-v-aeafb17e]{margin:8px 0 0;font-size:12px}.notification-rule[data-v-aeafb17e]{border:1px solid var(--line);flex-direction:column;gap:10px;min-width:0;margin:12px 0;padding:14px;display:flex}.notification-rule-head b[data-v-aeafb17e],.notification-rule-head small[data-v-aeafb17e]{overflow-wrap:anywhere;display:block}.notification-rule-head small[data-v-aeafb17e]{color:var(--muted);font:11px var(--mono);margin-bottom:4px}.notification-rule-head .notification-diff[data-v-aeafb17e]{font:12px var(--sans,inherit);margin:4px 0 0}.notification-rule .settings-action small[data-v-aeafb17e]{margin-left:auto;padding-left:8px;font-size:11px}.notification-add[data-v-aeafb17e]{margin-top:12px}.notification-picker[data-v-aeafb17e]{border:1px solid var(--line);flex-direction:column;gap:12px;margin-top:8px;padding:12px;display:flex}.notification-picker-group[data-v-aeafb17e]{flex-direction:column;gap:4px;display:flex}.notification-picker-group>small[data-v-aeafb17e]{color:var(--muted);font:11px var(--mono)}.notification-reset[data-v-aeafb17e]{margin-top:16px}

package/.output/public/sw.js

@@ -15,7 +15,7 @@
 	var sw = self;
 	var CACHE = "wherdr-v1";
 	var NETWORK_WAIT_MS = 3e3;
-	var PRECACHE = ["/", ...[{"revision":"e6a852ba6e2a724d2255af526cb04083","url":"manifest.webmanifest"},{"revision":"b1a14fab8c06784649bf26c636747a86","url":"manifest-en.webmanifest"},{"revision":null,"url":"_nuxt/yzABg5xl.js"},{"revision":null,"url":"_nuxt/xYX85SPI.js"},{"revision":null,"url":"_nuxt/wherdr-symbols.C1LsPKmg.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-powerline.B_kAMxXr.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-octicons.Hl4VEx8m.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-4.CO_PudDR.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-3.8xz7iX-Y.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-2.C_flbBWO.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-1.BdvqkCqW.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-extension.Dai_ky39.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-devicons.ZMSFX1sW.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-codicons.CtEsfSAf.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-awesome.DQ3_iAfa.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-vietnamese-wght-normal.Bt-aOZkq.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-latin-wght-normal.B9CIFXIH.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-latin-ext-wght-normal.DBQx-q_a.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-greek-wght-normal.Bw9x6K1M.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-cyrillic-wght-normal.D73BlboJ.woff2"},{"revision":null,"url":"_nuxt/inter-vietnamese-wght-normal.CBcvBZtf.woff2"},{"revision":null,"url":"_nuxt/inter-latin-wght-normal.Dx4kXJAl.woff2"},{"revision":null,"url":"_nuxt/inter-latin-ext-wght-normal.DO1Apj_S.woff2"},{"revision":null,"url":"_nuxt/inter-greek-wght-normal.CkhJZR-_.woff2"},{"revision":null,"url":"_nuxt/inter-greek-ext-wght-normal.DlzME5K_.woff2"},{"revision":null,"url":"_nuxt/inter-cyrillic-wght-normal.DqGufNeO.woff2"},{"revision":null,"url":"_nuxt/inter-cyrillic-ext-wght-normal.BOeWTOD4.woff2"},{"revision":null,"url":"_nuxt/hePW80VL.js"},{"revision":null,"url":"_nuxt/error-500.Bwd7zAaE.css"},{"revision":null,"url":"_nuxt/error-404.Bb87HomL.css"},{"revision":null,"url":"_nuxt/entry.CGWKmYU3.css"},{"revision":null,"url":"_nuxt/dPxB2L94.js"},{"revision":null,"url":"_nuxt/archivo-vietnamese-wght-normal.XAtsl5Q_.woff2"},{"revision":null,"url":"_nuxt/archivo-latin-wght-normal.E0tuGl4L.woff2"},{"revision":null,"url":"_nuxt/archivo-latin-ext-wght-normal.C4zznr8T.woff2"},{"revision":null,"url":"_nuxt/VpjCgSXu.js"},{"revision":null,"url":"_nuxt/SiL1FJ5s.js"},{"revision":null,"url":"_nuxt/DcJi16XA.js"},{"revision":null,"url":"_nuxt/DaaJIRB3.js"},{"revision":null,"url":"_nuxt/DT8qZ0Wv.js"},{"revision":null,"url":"_nuxt/DAg9fiVh.js"},{"revision":null,"url":"_nuxt/Cr3SrGky.js"},{"revision":null,"url":"_nuxt/CkbmecwS.js"},{"revision":null,"url":"_nuxt/Ci8N4mWR.js"},{"revision":null,"url":"_nuxt/CWwyK2XK.js"},{"revision":null,"url":"_nuxt/CP8o925U.js"},{"revision":null,"url":"_nuxt/CKhgznq4.js"},{"revision":null,"url":"_nuxt/BkOxQzbS.js"},{"revision":null,"url":"_nuxt/BgPDnf2S.js"},{"revision":null,"url":"_nuxt/Bd17z0YL.js"},{"revision":null,"url":"_nuxt/BX5PM2JQ.js"},{"revision":null,"url":"_nuxt/BSy6OCIY.js"},{"revision":null,"url":"_nuxt/BBw_0a4M.js"},{"revision":null,"url":"_nuxt/B4Yk2tB1.js"},{"revision":null,"url":"_nuxt/AgentView.DzFWBd2A.css"},{"revision":"f0fc32f393fea2b75a91e3f10a5be779","url":"_nuxt/builds/latest.json"},{"revision":null,"url":"_nuxt/builds/meta/c735b6c0-1bd0-47d7-a208-d310f0a06287.json"}].map((e) => "/" + (typeof e === "string" ? e : e.url).replace(/^\//, ""))];
+	var PRECACHE = ["/", ...[{"revision":"e6a852ba6e2a724d2255af526cb04083","url":"manifest.webmanifest"},{"revision":"b1a14fab8c06784649bf26c636747a86","url":"manifest-en.webmanifest"},{"revision":null,"url":"_nuxt/wherdr-symbols.C1LsPKmg.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-powerline.B_kAMxXr.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-octicons.Hl4VEx8m.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-4.CO_PudDR.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-3.8xz7iX-Y.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-2.C_flbBWO.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-1.BdvqkCqW.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-extension.Dai_ky39.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-devicons.ZMSFX1sW.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-codicons.CtEsfSAf.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-awesome.DQ3_iAfa.woff2"},{"revision":null,"url":"_nuxt/settings.Cdb21nNw.css"},{"revision":null,"url":"_nuxt/jetbrains-mono-vietnamese-wght-normal.Bt-aOZkq.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-latin-wght-normal.B9CIFXIH.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-latin-ext-wght-normal.DBQx-q_a.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-greek-wght-normal.Bw9x6K1M.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-cyrillic-wght-normal.D73BlboJ.woff2"},{"revision":null,"url":"_nuxt/inter-vietnamese-wght-normal.CBcvBZtf.woff2"},{"revision":null,"url":"_nuxt/inter-latin-wght-normal.Dx4kXJAl.woff2"},{"revision":null,"url":"_nuxt/inter-latin-ext-wght-normal.DO1Apj_S.woff2"},{"revision":null,"url":"_nuxt/inter-greek-wght-normal.CkhJZR-_.woff2"},{"revision":null,"url":"_nuxt/inter-greek-ext-wght-normal.DlzME5K_.woff2"},{"revision":null,"url":"_nuxt/inter-cyrillic-wght-normal.DqGufNeO.woff2"},{"revision":null,"url":"_nuxt/inter-cyrillic-ext-wght-normal.BOeWTOD4.woff2"},{"revision":null,"url":"_nuxt/hePW80VL.js"},{"revision":null,"url":"_nuxt/error-500.Bwd7zAaE.css"},{"revision":null,"url":"_nuxt/error-404.Bb87HomL.css"},{"revision":null,"url":"_nuxt/entry.CKoXcwRa.css"},{"revision":null,"url":"_nuxt/board.CEEcFc6M.css"},{"revision":null,"url":"_nuxt/archivo-vietnamese-wght-normal.XAtsl5Q_.woff2"},{"revision":null,"url":"_nuxt/archivo-latin-wght-normal.E0tuGl4L.woff2"},{"revision":null,"url":"_nuxt/archivo-latin-ext-wght-normal.C4zznr8T.woff2"},{"revision":null,"url":"_nuxt/R0Y4VoeX.js"},{"revision":null,"url":"_nuxt/NIF0VwHk.js"},{"revision":null,"url":"_nuxt/FaNto0ga.js"},{"revision":null,"url":"_nuxt/DyfFwwGq.js"},{"revision":null,"url":"_nuxt/DrKKeFFE.js"},{"revision":null,"url":"_nuxt/DmkWvmnE.js"},{"revision":null,"url":"_nuxt/DZGKxROq.js"},{"revision":null,"url":"_nuxt/DFmgQVme.js"},{"revision":null,"url":"_nuxt/DFGEl0v2.js"},{"revision":null,"url":"_nuxt/CuUQ4mEf.js"},{"revision":null,"url":"_nuxt/CXJnLmWv.js"},{"revision":null,"url":"_nuxt/CDWjMk9C.js"},{"revision":null,"url":"_nuxt/C3Bkn4ac.js"},{"revision":null,"url":"_nuxt/C25ROUa9.js"},{"revision":null,"url":"_nuxt/BtH82ZuZ.js"},{"revision":null,"url":"_nuxt/Bpoxvzh6.js"},{"revision":null,"url":"_nuxt/BhgehRdJ.js"},{"revision":null,"url":"_nuxt/Bd17z0YL.js"},{"revision":null,"url":"_nuxt/BYZVrreW.js"},{"revision":null,"url":"_nuxt/BHenDMeH.js"},{"revision":null,"url":"_nuxt/BETID3_E.js"},{"revision":null,"url":"_nuxt/BDNMzG2s.js"},{"revision":null,"url":"_nuxt/AgentView.DzFWBd2A.css"},{"revision":"cd669ad19a6e6aac95c99782fbde9967","url":"_nuxt/builds/latest.json"},{"revision":null,"url":"_nuxt/builds/meta/0b28b3e9-664e-4347-a35b-afb0a711d5c5.json"}].map((e) => "/" + (typeof e === "string" ? e : e.url).replace(/^\//, ""))];
 	sw.addEventListener("install", (e) => {
 		e.waitUntil((async () => {
 			const c = await caches.open(CACHE);

package/.output/server/chunks/_/branding.mjs

@@ -1,4 +1,4 @@
-import { s as sendError, bJ as useStorage, aC as setResponseHeader } from '../nitro/nitro.mjs';
+import { s as sendError, cd as useStorage, aw as setResponseHeader } from '../nitro/nitro.mjs';
 import fs from 'node:fs';
 import path from 'node:path';
 

package/.output/server/chunks/_/changes.mjs

@@ -55,7 +55,7 @@ function parseNumstat(raw) {
   }
   return stats;
 }
-function runner(m) {
+function runner(m, signal) {
   const remoteExec = m.exec;
   if (remoteExec) return async (script, args, timeout = 12e3) => {
     const r = await remoteExec(script, args, { timeoutMs: timeout });
@@ -63,7 +63,7 @@ function runner(m) {
     return r.stdout;
   };
   return (script, args, timeout = 12e3) => new Promise((resolve, reject) => {
-    execFile("sh", ["-c", script, "sh", ...args], { timeout, encoding: "buffer", maxBuffer: 512 * 1024 }, (err, out, stderr) => {
+    execFile("sh", ["-c", script, "sh", ...args], { timeout, encoding: "buffer", maxBuffer: 512 * 1024, signal }, (err, out, stderr) => {
       if (err) reject(new Error(String(stderr || err.message).trim()));
       else resolve(out);
     });
@@ -72,8 +72,8 @@ function runner(m) {
 const git = "git --no-optional-locks -c core.fsmonitor=false -c core.hooksPath=/dev/null -c core.quotePath=false -c diff.external=";
 const generated = /(^|\/)(?:dist|build|generated|coverage|node_modules|\.nuxt)\/|(^|\/)(?:package-lock\.json|pnpm-lock\.yaml|yarn\.lock|Cargo\.lock|composer\.lock|Gemfile\.lock|.*\.min\.(?:js|css)|.*\.map|.*\.generated\.[^/]+)$/i;
 const emptySet = () => ({ files: [], truncated: false, count: 0 });
-async function gitToplevel(m, cwd) {
-  const out = await runner(m)(`cd "$1" 2>/dev/null && ${git} rev-parse --show-toplevel 2>/dev/null || true`, [cwd]).catch(() => Buffer.alloc(0));
+async function gitToplevel(m, cwd, signal) {
+  const out = await runner(m, signal)(`cd "$1" 2>/dev/null && ${git} rev-parse --show-toplevel 2>/dev/null || true`, [cwd]).catch(() => Buffer.alloc(0));
   return out.toString("utf8").trim();
 }
 async function readChangeStatus(m, cwd) {

package/.output/server/chunks/_/fileDownload.mjs

@@ -0,0 +1,278 @@
+import { H as HerdrError, a as defineApi, i as getQuery, f as findPane, m as machineFor, aw as setResponseHeader, ax as getRequestHeader, ay as setResponseStatus } from '../nitro/nitro.mjs';
+import { w as writtenTarget, c as cleanRelative, r as rootOf, i as isVideo, O as OPEN_FILE, V as VIDEO_HEAD, s as shellError, v as videoType, a as readWrittenBytes, b as readFileBytes, d as isPdf, e as attachmentHeader } from './files.mjs';
+import { spawn } from 'node:child_process';
+import crypto from 'node:crypto';
+import path from 'node:path';
+import { Readable } from 'node:stream';
+
+const VIDEO_BLOCK = 64 * 1024;
+const OPEN_TIMEOUT_MS = 15e3;
+const STREAM_SCRIPT = `${OPEN_FILE}
+m=$(meta) || exit 4
+echo "$(date +%s) $m"
+dd bs=${VIDEO_HEAD} count=1 <&3 2>/dev/null
+read skip count || exit 0
+[ "$count" -gt 0 ] 2>/dev/null || exit 0
+exec dd bs=${VIDEO_BLOCK} skip="$skip" count="$count" <&3 2>/dev/null`;
+function parseRange(header, size) {
+  var _a;
+  if (header === void 0) return { kind: "full" };
+  const m = /^bytes[ \t]*=[ \t]*(.*)$/i.exec(header.trim());
+  if (!m) return { kind: "full" };
+  const specs = m[1].split(",").map((x) => x.trim()).filter(Boolean);
+  if (!specs.length) return { kind: "full" };
+  const parsed = [];
+  for (const spec of specs) {
+    const r = /^(\d*)-(\d*)$/.exec(spec);
+    if (!r || !r[1] && !r[2]) return { kind: "full" };
+    if (!r[1]) parsed.push({ suffix: Number(r[2]) });
+    else {
+      const first = Number(r[1]);
+      const last = r[2] ? Number(r[2]) : void 0;
+      if (last !== void 0 && last < first) return { kind: "full" };
+      parsed.push({ first, last });
+    }
+  }
+  for (const p of parsed) {
+    if (p.suffix !== void 0) {
+      if (p.suffix > 0 && size > 0) return { kind: "part", start: Math.max(0, size - p.suffix), end: size - 1 };
+    } else if (p.first < size) {
+      return { kind: "part", start: p.first, end: Math.min((_a = p.last) != null ? _a : size - 1, size - 1) };
+    }
+  }
+  return { kind: "none" };
+}
+function answer(v, req) {
+  let range = req.method === "HEAD" ? void 0 : req.range;
+  if (range !== void 0 && req.ifRange !== void 0 && (req.ifRange.trim() !== v.etag || v.etag.startsWith("W/"))) range = void 0;
+  const r = parseRange(range, v.size);
+  if (r.kind === "none") return { status: 416, start: 0, len: 0, contentRange: `bytes */${v.size}` };
+  if (r.kind === "full") return { status: 200, start: 0, len: v.size };
+  return { status: 206, start: r.start, len: r.end - r.start + 1, contentRange: `bytes ${r.start}-${r.end}/${v.size}` };
+}
+function videoEtag(meta) {
+  var _a;
+  const frac = ((_a = /\.(\d+)/.exec(meta.version)) == null ? void 0 : _a[1]) || "";
+  const strong = /[1-9]/.test(frac) && meta.now - meta.mtime >= 2;
+  const hash = crypto.createHash("sha1").update(`${meta.ino}|${meta.size}|${meta.version}`).digest("hex").slice(0, 20);
+  return `${strong ? "" : "W/"}"${hash}"`;
+}
+function cutOnError(res, body) {
+  body.once("error", () => res.destroy());
+  return body;
+}
+function readPlan(start, len, head) {
+  const fromHead = start < head ? Math.min(len, head - start) : 0;
+  const rest = len - fromHead;
+  if (rest <= 0) return { fromHead, skip: 0, count: 0, drop: 0 };
+  const at = start + fromHead - head;
+  const skip = Math.floor(at / VIDEO_BLOCK);
+  const drop = at - skip * VIDEO_BLOCK;
+  return { fromHead, skip, count: Math.ceil((drop + rest) / VIDEO_BLOCK), drop };
+}
+function spawnScript(m, args) {
+  var _a;
+  if (!m.exec) {
+    return spawn("sh", ["-c", STREAM_SCRIPT, "sh", ...args], { stdio: ["pipe", "pipe", "pipe"], detached: true });
+  }
+  const child = (_a = m.spawnShell) == null ? void 0 : _a.call(m, STREAM_SCRIPT, args);
+  if (!child) throw new HerdrError("unreachable", "Machine unreachable");
+  return child;
+}
+function kill(child, local) {
+  if (child.exitCode !== null || child.signalCode !== null) return;
+  try {
+    if (local && child.pid) process.kill(-child.pid, "SIGKILL");
+    else child.kill("SIGKILL");
+  } catch {
+  }
+}
+const closedError = () => new HerdrError("closed", "Request closed");
+async function openAt(m, root, rel, signal) {
+  if (signal == null ? void 0 : signal.aborted) throw closedError();
+  const child = spawnScript(m, [root, rel]);
+  const done = new Promise((resolve) => {
+    child.on("close", () => resolve());
+    child.on("error", () => resolve());
+  });
+  const local = !m.exec;
+  const close = () => kill(child, local);
+  child.stdin.on("error", () => {
+  });
+  let buf = Buffer.alloc(0);
+  let stderr = "";
+  child.stderr.on("data", (b) => {
+    if (stderr.length < 4e3) stderr += b.toString("utf8");
+  });
+  const opened = await new Promise((resolve, reject) => {
+    const timer = setTimeout(() => {
+      close();
+      reject(new HerdrError("timeout", "The folder took too long to read"));
+    }, OPEN_TIMEOUT_MS);
+    const onAbort = () => done2(() => {
+      close();
+      reject(closedError());
+    });
+    signal == null ? void 0 : signal.addEventListener("abort", onAbort, { once: true });
+    const done2 = (f) => {
+      clearTimeout(timer);
+      signal == null ? void 0 : signal.removeEventListener("abort", onAbort);
+      child.stdout.off("data", onData);
+      child.off("close", onClose);
+      child.off("error", onError);
+      f();
+    };
+    const onData = (b) => {
+      buf = Buffer.concat([buf, b]);
+      const nl = buf.indexOf(10);
+      if (nl < 0) return;
+      const [now = "0", ino = "0", size = "0", mtime = "0", ...version] = buf.subarray(0, nl).toString("utf8").trim().split(/\s+/);
+      const n = Number(size) || 0;
+      const headLen = Math.min(VIDEO_HEAD, n);
+      if (buf.length - nl - 1 < headLen) return;
+      child.stdout.pause();
+      const head = buf.subarray(nl + 1, nl + 1 + headLen);
+      done2(() => resolve({ now: Number(now) || 0, ino, size: n, mtime: Number(mtime) || 0, version: version.join(" "), head }));
+    };
+    const onClose = (code) => done2(() => reject(code === 0 ? new HerdrError("not_found", "File not found") : shellError(m, code, stderr)));
+    const onError = () => done2(() => reject(new HerdrError("unreachable", "Machine unreachable")));
+    child.stdout.on("data", onData);
+    child.on("close", onClose);
+    child.on("error", onError);
+  });
+  const name = path.posix.basename(rel);
+  if (!isVideo(name, opened.head)) {
+    close();
+    throw new HerdrError("not_video", "Not a video");
+  }
+  let reading = false;
+  return {
+    name,
+    size: opened.size,
+    mtime: opened.mtime,
+    etag: videoEtag(opened),
+    close,
+    done,
+    read(start, len) {
+      if (reading) throw new Error("read once");
+      reading = true;
+      const plan = readPlan(start, len, opened.head.length);
+      child.stdin.end(`${plan.skip} ${plan.count}
+`);
+      const out = child.stdout;
+      async function* bytes() {
+        let left = len;
+        try {
+          if (plan.fromHead) {
+            yield opened.head.subarray(start, start + plan.fromHead);
+            left -= plan.fromHead;
+          }
+          let drop = plan.drop;
+          for await (const chunk of out) {
+            if (left <= 0) break;
+            let c = chunk;
+            if (drop) {
+              const n = Math.min(drop, c.length);
+              c = c.subarray(n);
+              drop -= n;
+            }
+            if (!c.length) continue;
+            if (c.length > left) c = c.subarray(0, left);
+            left -= c.length;
+            yield c;
+            if (left <= 0) break;
+          }
+          if (left > 0) throw new HerdrError("truncated", "The file shrank while being read");
+        } finally {
+          close();
+        }
+      }
+      return Readable.from(bytes(), { objectMode: false });
+    }
+  };
+}
+function untilClosed(p, signal) {
+  if (!signal) return p;
+  if (signal.aborted) return Promise.reject(closedError());
+  return new Promise((resolve, reject) => {
+    const onAbort = () => reject(closedError());
+    signal.addEventListener("abort", onAbort, { once: true });
+    p.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
+  });
+}
+async function openVideo(m, cwd, rel, signal) {
+  if (signal == null ? void 0 : signal.aborted) throw closedError();
+  const p = cleanRelative(rel);
+  if (!p) throw new HerdrError("not_file", "Not a file");
+  const root = await untilClosed(rootOf(m, cwd, signal), signal);
+  if (signal == null ? void 0 : signal.aborted) throw closedError();
+  return openAt(m, root, p, signal);
+}
+async function openWrittenVideo(m, cwd, written, signal) {
+  const t = writtenTarget(m, cwd, written);
+  return openAt(m, t.root, t.rel, signal);
+}
+
+async function serveVideo(event, p, q, type) {
+  const m = machineFor(p.machine);
+  const res = event.node.res;
+  const closed = new AbortController();
+  res.once("close", () => closed.abort());
+  if (res.destroyed) closed.abort();
+  const v = q.from === "chat" ? await openWrittenVideo(m, p.cwd, q.path, closed.signal) : await openVideo(m, p.cwd, q.path, closed.signal);
+  if (closed.signal.aborted) {
+    v.close();
+    return "";
+  }
+  closed.signal.addEventListener("abort", v.close, { once: true });
+  try {
+    setResponseHeader(event, "x-content-type-options", "nosniff");
+    setResponseHeader(event, "accept-ranges", "bytes");
+    setResponseHeader(event, "content-security-policy", "default-src 'none'; media-src 'self'; frame-ancestors 'self'");
+    setResponseHeader(event, "etag", v.etag);
+    setResponseHeader(event, "last-modified", new Date(v.mtime * 1e3).toUTCString());
+    const a = answer(v, { method: event.method, range: getRequestHeader(event, "range"), ifRange: getRequestHeader(event, "if-range") });
+    setResponseStatus(event, a.status);
+    if (a.contentRange) setResponseHeader(event, "content-range", a.contentRange);
+    if (a.status === 416) {
+      v.close();
+      setResponseHeader(event, "content-type", "text/plain");
+      return "";
+    }
+    setResponseHeader(event, "content-type", type);
+    setResponseHeader(event, "content-disposition", attachmentHeader(v.name, "inline"));
+    setResponseHeader(event, "content-length", a.len);
+    if (event.method === "HEAD" || !a.len) {
+      v.close();
+      return "";
+    }
+    return cutOnError(res, v.read(a.start, a.len));
+  } catch (e) {
+    v.close();
+    throw e;
+  }
+}
+const fileDownload = defineApi(async (event) => {
+  const q = getQuery(event);
+  const p = findPane(String(q.pane || ""));
+  if (!p) throw new HerdrError("bad_pane", "Pane not found");
+  if (q.from !== "chat" && !p.cwd) throw new HerdrError("bad_cwd", "This agent\u2019s folder is unknown");
+  const video = q.inline === "1" ? videoType(String(q.path || "")) : void 0;
+  if (video) return serveVideo(event, p, q, video);
+  const f = q.from === "chat" ? await readWrittenBytes(machineFor(p.machine), p.cwd, q.path) : await readFileBytes(machineFor(p.machine), p.cwd, q.path);
+  setResponseHeader(event, "x-content-type-options", "nosniff");
+  if (q.inline === "1" && isPdf(f.name, f.body)) {
+    setResponseHeader(event, "content-type", "application/pdf");
+    setResponseHeader(event, "content-disposition", attachmentHeader(f.name, "inline"));
+    setResponseHeader(event, "content-security-policy", "default-src 'none'; object-src 'self'; frame-ancestors 'self'");
+    setResponseHeader(event, "cache-control", "private, no-store");
+    return f.body;
+  }
+  setResponseHeader(event, "content-type", "application/octet-stream");
+  setResponseHeader(event, "content-disposition", attachmentHeader(f.name));
+  setResponseHeader(event, "content-security-policy", "default-src 'none'; sandbox");
+  return f.body;
+});
+
+export { fileDownload as f };
+//# sourceMappingURL=fileDownload.mjs.map

package/.output/server/chunks/_/files.mjs

@@ -19,6 +19,18 @@ const IMAGE_TYPES = {
   ico: "image/x-icon",
   svg: "image/svg+xml"
 };
+const PDF_HEAD = 1024;
+const isPdf = (name, head) => path.posix.extname(name).toLowerCase() === ".pdf" && head.subarray(0, PDF_HEAD).includes("%PDF-");
+const VIDEO_TYPES = { mp4: "video/mp4", m4v: "video/mp4", mov: "video/quicktime", webm: "video/webm" };
+const VIDEO_HEAD = 12;
+const MP4_BOXES = /* @__PURE__ */ new Set(["ftyp", "moov", "mdat", "wide", "free", "skip", "pnot"]);
+const videoType = (name) => VIDEO_TYPES[path.posix.extname(name).slice(1).toLowerCase()];
+function isVideo(name, head) {
+  const type = videoType(name);
+  if (!type || head.length < 8) return false;
+  if (type === "video/webm") return head.readUInt32BE(0) === 440786851;
+  return MP4_BOXES.has(head.subarray(4, 8).toString("latin1"));
+}
 const RESOLVE = `root=$(cd "$1" 2>/dev/null && pwd -P) || { echo "folder not found" >&2; exit 3; }
 under() { case "$1/" in "\${root%/}/"*) return 0 ;; esac; return 1; }`;
 const LIST_SCRIPT = `${RESOLVE}
@@ -29,7 +41,10 @@ else
   under "$dir" || { echo "outside" >&2; exit 5; }
 fi
 cd "$dir" || exit 4
-[ -r . ] || { echo "permission denied" >&2; exit 7; }
+e=$(LC_ALL=C ls -A 2>&1 >/dev/null) || {
+  case "$e" in *"not permitted"*) [ "$(uname -s)" = Darwin ] && exit 8 ;; esac
+  echo "permission denied" >&2; exit 7
+}
 printf '%s\\0%s\\0' "$root" "$dir"
 max=$3; n=0
 set --
@@ -47,7 +62,7 @@ printf '=\\0'
 [ "$#" -gt 0 ] || exit 0
 if stat -f %z / >/dev/null 2>&1; then stat -f %z -- "$@"; else stat -c %s -- "$@"; fi 2>/dev/null
 exit 0`;
-const READ_SCRIPT = `${RESOLVE}
+const OPEN_FILE = `${RESOLVE}
 case "$2" in */*) d=\${2%/*} ;; *) d=. ;; esac
 b=\${2##*/}
 dir=$(cd "$root" && cd -- "./$d" 2>/dev/null && pwd -P) || { echo "not found" >&2; exit 4; }
@@ -64,10 +79,23 @@ done
 under "$f" || { echo "outside" >&2; exit 5; }
 [ -f "$f" ] || { echo "not a file" >&2; exit 6; }
 [ -r "$f" ] || { echo "permission denied" >&2; exit 7; }
-s=$(wc -c < "$f") || exit 4
+command exec 3< "$f" || { echo "permission denied" >&2; exit 7; }
+# "<inode> <size> <mtime> <version>" of the opened file, from its metadata:
+# never a read (BusyBox's wc -c reads every byte). <version>: modification
+# and change times to the nanosecond (GNU/BusyBox, then BSD). Without the
+# descriptor's metadata, the path's, with no <version>: never a strong ETag.
+meta() {
+  stat -L -c '%i %s %Y %y %z' /dev/fd/3 2>/dev/null || stat -L -f '%i %z %m %Fm %Fc' /dev/fd/3 2>/dev/null ||
+  stat -L -c '%i %s %Y' "$f" 2>/dev/null || stat -L -f '%i %z %m' "$f" 2>/dev/null || echo "0 $(wc -c < "$f") 0"
+}`;
+const READ_SCRIPT = `${OPEN_FILE}
+m=$(meta) || exit 4
+s=\${m#* }; s=$((\${s%% *}))
 echo $s
-[ -n "$4" ] && [ $(($s)) -ge "$3" ] && exit 0
-head -c "$3" < "$f"`;
+[ -n "$4" ] && [ "$s" -ge "$3" ] && exit 0
+head -c "$3" <&3`;
+const MACOS_SSH_DENIED = "macOS blocks access to this folder. On the Mac: System Settings \u203A General \u203A Sharing \u203A Remote Login \u24D8 \u203A \u201CAllow full disk access for remote users\u201D.";
+const MACOS_LOCAL_DENIED = "macOS blocks access to this folder. Allow the app that runs wherdr in System Settings \u203A Privacy & Security \u203A Full Disk Access.";
 function executor(m, { timeoutMs = 15e3, maxBytes = IMAGE_BYTES } = {}) {
   const remote = m.exec;
   if (remote) return (script, args) => remote(script, args, { timeoutMs });
@@ -82,14 +110,19 @@ function executor(m, { timeoutMs = 15e3, maxBytes = IMAGE_BYTES } = {}) {
 async function run(m, script, args, opts) {
   const r = await executor(m, opts)(script, args);
   if (r.code === 0) return r.stdout;
-  if (r.code === 3) throw new HerdrError("bad_cwd", "This agent\u2019s folder is unknown");
-  if (r.code === 4) throw new HerdrError("not_found", "File not found");
-  if (r.code === 5) throw new HerdrError("outside", "Outside the project folder");
-  if (r.code === 6) throw new HerdrError("not_file", "Not a file");
-  if (r.code === 7) throw new HerdrError("denied", "Permission denied");
-  if (r.code === 124) throw new HerdrError("timeout", "The folder took too long to read");
-  if (r.code === 255 || r.code === null) throw new HerdrError("unreachable", "Machine unreachable");
-  throw new HerdrError("remote", r.stderr.trim().split("\n").pop() || `code ${r.code}`);
+  throw shellError(m, r.code, r.stderr);
+}
+function shellError(m, code, stderr) {
+  const r = { code, stderr };
+  if (r.code === 3) return new HerdrError("bad_cwd", "This agent\u2019s folder is unknown");
+  if (r.code === 4) return new HerdrError("not_found", "File not found");
+  if (r.code === 5) return new HerdrError("outside", "Outside the project folder");
+  if (r.code === 6) return new HerdrError("not_file", "Not a file");
+  if (r.code === 7) return new HerdrError("denied", "Permission denied");
+  if (r.code === 8) return new HerdrError("denied", m.exec ? MACOS_SSH_DENIED : MACOS_LOCAL_DENIED);
+  if (r.code === 124) return new HerdrError("timeout", "The folder took too long to read");
+  if (r.code === 255 || r.code === null) return new HerdrError("unreachable", "Machine unreachable");
+  return new HerdrError("remote", r.stderr.trim().split("\n").pop() || `code ${r.code}`);
 }
 function cleanRelative(p) {
   const raw = String(p != null ? p : "").replace(/\\/g, "/");
@@ -126,8 +159,8 @@ function parseListing(raw) {
   entries.sort((a, b) => Number(b.kind === "dir") - Number(a.kind === "dir") || a.name.localeCompare(b.name, void 0, { numeric: true, sensitivity: "base" }));
   return { root, dir, entries, truncated };
 }
-async function rootOf(m, cwd) {
-  return await gitToplevel(m, cwd) || cwd;
+async function rootOf(m, cwd, signal) {
+  return await gitToplevel(m, cwd, signal) || cwd;
 }
 async function listFiles(m, cwd, rel, opts = {}) {
   var _a, _b;
@@ -160,8 +193,15 @@ async function readHead(m, root, rel, max, opts) {
   return { size: Number(out.subarray(0, nl).toString("utf8")) || 0, body: out.subarray(nl + 1) };
 }
 async function previewAt(m, root, rel, shown) {
-  const mime = IMAGE_TYPES[path.posix.extname(rel).slice(1).toLowerCase()];
-  const { size, body } = await readHead(m, root, rel, mime ? IMAGE_BYTES + 1 : TEXT_BYTES + 1);
+  const ext = path.posix.extname(rel).slice(1).toLowerCase();
+  const mime = IMAGE_TYPES[ext];
+  const video = VIDEO_TYPES[ext];
+  const { size, body } = await readHead(m, root, rel, mime ? IMAGE_BYTES + 1 : ext === "pdf" ? PDF_HEAD : video ? VIDEO_HEAD : TEXT_BYTES + 1);
+  if (video) return { path: shown, size, kind: isVideo(rel, body) ? "video" : "binary", truncated: false };
+  if (ext === "pdf") {
+    if (!isPdf(rel, body)) return { path: shown, size, kind: "binary", truncated: false };
+    return { path: shown, size, kind: size > DOWNLOAD_BYTES ? "large" : "pdf", truncated: false };
+  }
   if (mime) {
     if (size > IMAGE_BYTES) return { path: shown, size, kind: "large", truncated: true };
     return { path: shown, size, kind: "image", dataUrl: `data:${mime};base64,${body.toString("base64")}`, truncated: false };
@@ -194,11 +234,11 @@ async function readWrittenBytes(m, cwd, written) {
   const t = writtenTarget(m, cwd, written);
   return bytesAt(m, t.root, t.rel);
 }
-function attachmentHeader(name) {
+function attachmentHeader(name, type = "attachment") {
   const ascii = name.replace(/[^\x20-\x7e]|["\\]/g, "_") || "download";
   const utf8 = encodeURIComponent(name).replace(/['()*]/g, (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`);
-  return `attachment; filename="${ascii}"; filename*=UTF-8''${utf8}`;
+  return `${type}; filename="${ascii}"; filename*=UTF-8''${utf8}`;
 }
 
-export { readFileBytes as a, attachmentHeader as b, readWrittenPreview as c, readFilePreview as d, listFiles as l, readWrittenBytes as r };
+export { OPEN_FILE as O, VIDEO_HEAD as V, readWrittenBytes as a, readFileBytes as b, cleanRelative as c, isPdf as d, attachmentHeader as e, readWrittenPreview as f, readFilePreview as g, isVideo as i, listFiles as l, rootOf as r, shellError as s, videoType as v, writtenTarget as w };
 //# sourceMappingURL=files.mjs.map

package/.output/server/chunks/_/machineOrder.mjs

@@ -1,7 +1,7 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { randomUUID } from 'node:crypto';
-import { aL as baseMachines, aM as DATA_DIR } from '../nitro/nitro.mjs';
+import { aG as baseMachines, aH as DATA_DIR } from '../nitro/nitro.mjs';
 
 function cleanMachineOrder(value, known) {
   if (!Array.isArray(value)) return [];

package/.output/server/chunks/_/onboarding.mjs

@@ -1,6 +1,6 @@
 import fs from 'node:fs';
 import path from 'node:path';
-import { aW as HOST_LABEL, aM as DATA_DIR } from '../nitro/nitro.mjs';
+import { aW as HOST_LABEL, aH as DATA_DIR } from '../nitro/nitro.mjs';
 
 const ONBOARDING_FILE = path.join(DATA_DIR, "onboarding.json");
 function readOnboarding(file = ONBOARDING_FILE, host = HOST_LABEL) {

package/.output/server/chunks/_/package.mjs

@@ -1,5 +1,5 @@
 var name = "wherdr";
-var version = "1.3.3";
+var version = "2.0.0";
 var license = "MIT";
 var type = "module";
 var description = "Unofficial mobile web client (PWA) to drive the coding agents running in Herdr";
@@ -25,7 +25,8 @@ var files = [
 	".output",
 	"!.output/**/*.map",
 	"bin",
-	"skills/wherdr"
+	"skills/wherdr",
+	"docs/*.md"
 ];
 var engines = {
 	node: ">=22"
@@ -38,10 +39,15 @@ var scripts = {
 	typecheck: "nuxt typecheck",
 	test: "vitest run",
 	"test:e2e": "playwright test",
+	"shots:readme": "node tools/readme-shots/capture.mjs",
+	"test:e2e:shots": "SHOTS=${SHOTS:-.shots} playwright test tests/e2e/question-reply.spec.ts --grep screenshot:",
+	"test:e2e:stability": "playwright test menu-responsiveness codex-self-update quote-mode onboarding-tailnet --grep \"MCP arrow paints|a new Codex restarts|the former per-device values|a quoted question keeps|#/setup[?]step=security opens|a direct Security link\"",
 	prepare: "nuxt prepare",
 	prepack: "nuxt build && node scripts/pack-output.mjs",
+	"check:docs": "node scripts/check-doc-links.mjs",
 	"check:leaks": "node scripts/check-leaks.mjs",
-	"hooks:install": "git config core.hooksPath .githooks"
+	"hooks:install": "git config core.hooksPath .githooks",
+	"test:affected": "node scripts/test-affected.mjs"
 };
 var dependencies = {
 	"qrcode-terminal": "^0.12.0"
@@ -59,6 +65,7 @@ var devDependencies = {
 	"@types/node": "^22.0.0",
 	"@types/web-push": "^3.6.4",
 	"@vite-pwa/nuxt": "^1.1.1",
+	"@vue/reactivity": "^3.5.43",
 	"@vue/test-utils": "^2.5.1",
 	"@xterm/addon-fit": "^0.10.0",
 	"@xterm/addon-webgl": "^0.18.0",
@@ -67,6 +74,7 @@ var devDependencies = {
 	"happy-dom": "^20.14.5",
 	marked: "^15.0.12",
 	nuxt: "^4.5.2",
+	"pdfjs-dist": "5.4.624",
 	tailwindcss: "^4.3.3",
 	typescript: "~5.9.3",
 	vitest: "^4.1.11",