wherdr 2.4.0 → 2.6.0

package/.output/public/_nuxt/{settings.Cdb21nNw.css → settings.ycbeituV.css}

@@ -1 +1 @@
-.notification-level[data-v-aa9b4e30]{flex-direction:column;gap:6px;min-width:0;display:flex}.notification-level select[data-v-aa9b4e30]{border:1px solid var(--line);background:var(--bg);max-width:100%;min-height:44px;color:var(--text);font:inherit;border-radius:0;padding:8px}.notification-level-hint[data-v-aa9b4e30]{color:var(--muted);font-size:12px}.notification-customize summary[data-v-aa9b4e30]{cursor:pointer;min-height:36px;color:var(--muted);align-items:center;gap:4px;font-size:13px;list-style:none;display:flex}.notification-customize summary[data-v-aa9b4e30]::-webkit-details-marker{display:none}.notification-chev[data-v-aa9b4e30]{transition:transform .15s}.notification-customize[open] .notification-chev[data-v-aa9b4e30]{transform:rotate(90deg)}.notification-events[data-v-aa9b4e30]{flex-wrap:wrap;gap:4px 18px;display:flex}.notification-events label[data-v-aa9b4e30]{align-items:center;gap:6px;min-height:44px;display:flex}.notification-events input[data-v-aa9b4e30]{accent-color:var(--accent)}.notification-rules .settings-toggle[data-v-aeafb17e]{gap:16px}.notification-rules .settings-toggle>span[data-v-aeafb17e]{flex:1;min-width:0}.notification-default[data-v-aeafb17e]>.notification-level{margin-bottom:8px}.notification-help[data-v-aeafb17e]{margin:8px 0 0;font-size:12px}.notification-rule[data-v-aeafb17e]{border:1px solid var(--line);flex-direction:column;gap:10px;min-width:0;margin:12px 0;padding:14px;display:flex}.notification-rule-head b[data-v-aeafb17e],.notification-rule-head small[data-v-aeafb17e]{overflow-wrap:anywhere;display:block}.notification-rule-head small[data-v-aeafb17e]{color:var(--muted);font:11px var(--mono);margin-bottom:4px}.notification-rule-head .notification-diff[data-v-aeafb17e]{font:12px var(--sans,inherit);margin:4px 0 0}.notification-rule .settings-action small[data-v-aeafb17e]{margin-left:auto;padding-left:8px;font-size:11px}.notification-add[data-v-aeafb17e]{margin-top:12px}.notification-picker[data-v-aeafb17e]{border:1px solid var(--line);flex-direction:column;gap:12px;margin-top:8px;padding:12px;display:flex}.notification-picker-group[data-v-aeafb17e]{flex-direction:column;gap:4px;display:flex}.notification-picker-group>small[data-v-aeafb17e]{color:var(--muted);font:11px var(--mono)}.notification-reset[data-v-aeafb17e]{margin-top:16px}
+.notification-level[data-v-aa9b4e30]{flex-direction:column;gap:6px;min-width:0;display:flex}.notification-level select[data-v-aa9b4e30]{border:1px solid var(--line);background:var(--bg);max-width:100%;min-height:44px;color:var(--text);font:inherit;border-radius:0;padding:8px}.notification-level-hint[data-v-aa9b4e30]{color:var(--muted);font-size:12px}.notification-customize summary[data-v-aa9b4e30]{cursor:pointer;min-height:36px;color:var(--muted);align-items:center;gap:4px;font-size:13px;list-style:none;display:flex}.notification-customize summary[data-v-aa9b4e30]::-webkit-details-marker{display:none}.notification-chev[data-v-aa9b4e30]{transition:transform .15s}.notification-customize[open] .notification-chev[data-v-aa9b4e30]{transform:rotate(90deg)}.notification-events[data-v-aa9b4e30]{flex-wrap:wrap;gap:4px 18px;display:flex}.notification-events label[data-v-aa9b4e30]{align-items:center;gap:6px;min-height:44px;display:flex}.notification-events input[data-v-aa9b4e30]{accent-color:var(--accent)}.notification-rules .settings-toggle[data-v-aeafb17e]{gap:16px}.notification-rules .settings-toggle>span[data-v-aeafb17e]{flex:1;min-width:0}.notification-default[data-v-aeafb17e]>.notification-level{margin-bottom:8px}.notification-help[data-v-aeafb17e]{margin:8px 0 0;font-size:12px}.notification-rule[data-v-aeafb17e]{border:1px solid var(--line);flex-direction:column;gap:10px;min-width:0;margin:12px 0;padding:14px;display:flex}.notification-rule-head b[data-v-aeafb17e],.notification-rule-head small[data-v-aeafb17e]{overflow-wrap:anywhere;display:block}.notification-rule-head small[data-v-aeafb17e]{color:var(--muted);font:11px var(--mono);margin-bottom:4px}.notification-rule-head .notification-diff[data-v-aeafb17e]{font:12px var(--sans,inherit);margin:4px 0 0}.notification-rule .settings-action small[data-v-aeafb17e]{margin-left:auto;padding-left:8px;font-size:11px}.notification-add[data-v-aeafb17e]{margin-top:12px}.notification-picker[data-v-aeafb17e]{border:1px solid var(--line);flex-direction:column;gap:12px;margin-top:8px;padding:12px;display:flex}.notification-picker-group[data-v-aeafb17e]{flex-direction:column;gap:4px;display:flex}.notification-picker-group>small[data-v-aeafb17e]{color:var(--muted);font:11px var(--mono)}.notification-reset[data-v-aeafb17e]{margin-top:16px}.push-devices[data-v-a2f67b97]{margin-top:10px;padding-top:12px}.push-devices p[data-v-a2f67b97]{margin:0 0 4px;font-size:13px}.push-devices ul[data-v-a2f67b97]{margin:0;padding:0;list-style:none}.push-devices li[data-v-a2f67b97]{border-top:1px solid var(--line-soft);align-items:center;gap:12px;padding:10px 0;display:flex}.push-devices li[data-v-a2f67b97]:first-child{border-top:0}.push-device-main[data-v-a2f67b97]{overflow-wrap:anywhere;flex-direction:column;flex:1;gap:2px;min-width:0;font-size:13px;display:flex}.push-device-main b[data-v-a2f67b97]{font-size:14.5px;font-weight:500}.push-device-main small[data-v-a2f67b97]{font:500 10.5px/1 var(--mono);text-transform:uppercase;color:var(--accent);margin-left:8px}.push-result[data-v-a2f67b97]{font-family:var(--mono);font-size:12px}.push-result-ok[data-v-a2f67b97]{color:var(--green)}.push-result-bad[data-v-a2f67b97]{color:var(--danger)}.push-result-none[data-v-a2f67b97]{color:var(--muted)}.push-device-remove[data-v-a2f67b97]{border:1px solid var(--line);min-height:44px;color:var(--danger);cursor:pointer;background:0 0;flex:none;align-items:center;gap:6px;padding:0 12px;font-size:13px;display:flex}.push-device-remove[data-v-a2f67b97]:focus-visible{outline:1px solid var(--accent);outline-offset:-2px}

package/.output/public/_nuxt/useViewport.D9mmYA6A.css

@@ -0,0 +1 @@
+.omp-context-progress[data-v-e967b731]{pointer-events:none;background:var(--green);height:2px;position:absolute;bottom:0;left:0}.omp-context-progress.mid[data-v-e967b731]{background:var(--ochre)}.omp-context-progress.hi[data-v-e967b731]{background:var(--rose)}.omp-context-progress.last-known[data-v-e967b731]{opacity:.5}.omp-context[data-v-e967b731]{white-space:nowrap;font-variant-numeric:tabular-nums;cursor:pointer;position:relative}.omp-context[data-v-e967b731]:after{content:"";position:absolute;inset:-6px 0}.omp-context-detail[data-v-e967b731]{width:min(300px,80vw);color:var(--text);white-space:normal;overflow-wrap:anywhere;padding:10px;font-size:12px}.omp-context-status[data-v-e967b731]{color:var(--muted);font-family:var(--mono);margin-top:8px}

package/.output/public/_nuxt/useWorktrees.BWpb3OO0.css

@@ -0,0 +1 @@
+.md-body[data-v-8ea9a8a3] .svg-block{background:0 0}.md-body[data-v-8ea9a8a3] img.svg-preview{-o-object-fit:contain;object-fit:contain;cursor:zoom-in;background:0 0;border:0;width:100%;max-width:100%;max-height:65dvh;margin:0;padding:12px;display:block}.md-body[data-v-8ea9a8a3] .svg-source[hidden],.md-body[data-v-8ea9a8a3] img.svg-preview[hidden]{display:none}.md-body[data-v-8ea9a8a3] .svg-toggle:focus-visible,.md-body[data-v-8ea9a8a3] img.svg-preview:focus-visible{outline:1px solid var(--accent);outline-offset:-2px}.md-body[data-v-8ea9a8a3] .svg-toggle{min-width:64px;min-height:44px;color:var(--muted);font:500 10px/1 var(--mono);letter-spacing:.14em;text-transform:uppercase;cursor:pointer;padding:6px 8px}.md-body[data-v-8ea9a8a3] .svg-toggle:hover{color:var(--text);background:var(--surface-2)}.md-body[data-v-8ea9a8a3] .svg-note{color:var(--muted);margin:0;padding:12px 14px;font-size:13px}.md-body[data-v-8ea9a8a3] .svg-block .code-head{height:auto;min-height:44px}.md-body[data-v-8ea9a8a3] .svg-block .code-copy{min-width:44px;min-height:44px}

package/.output/public/sw.js

@@ -15,7 +15,7 @@
 	var sw = self;
 	var CACHE = "wherdr-v1";
 	var NETWORK_WAIT_MS = 3e3;
-	var PRECACHE = ["/", ...[{"revision":"e6a852ba6e2a724d2255af526cb04083","url":"manifest.webmanifest"},{"revision":"b1a14fab8c06784649bf26c636747a86","url":"manifest-en.webmanifest"},{"revision":null,"url":"_nuxt/wherdr-symbols.C1LsPKmg.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-powerline.B_kAMxXr.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-octicons.Hl4VEx8m.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-4.CO_PudDR.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-3.8xz7iX-Y.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-2.C_flbBWO.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-1.BdvqkCqW.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-extension.Dai_ky39.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-devicons.ZMSFX1sW.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-codicons.CtEsfSAf.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-awesome.DQ3_iAfa.woff2"},{"revision":null,"url":"_nuxt/settings.Cdb21nNw.css"},{"revision":null,"url":"_nuxt/jetbrains-mono-vietnamese-wght-normal.Bt-aOZkq.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-latin-wght-normal.B9CIFXIH.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-latin-ext-wght-normal.DBQx-q_a.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-greek-wght-normal.Bw9x6K1M.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-cyrillic-wght-normal.D73BlboJ.woff2"},{"revision":null,"url":"_nuxt/inter-vietnamese-wght-normal.CBcvBZtf.woff2"},{"revision":null,"url":"_nuxt/inter-latin-wght-normal.Dx4kXJAl.woff2"},{"revision":null,"url":"_nuxt/inter-latin-ext-wght-normal.DO1Apj_S.woff2"},{"revision":null,"url":"_nuxt/inter-greek-wght-normal.CkhJZR-_.woff2"},{"revision":null,"url":"_nuxt/inter-greek-ext-wght-normal.DlzME5K_.woff2"},{"revision":null,"url":"_nuxt/inter-cyrillic-wght-normal.DqGufNeO.woff2"},{"revision":null,"url":"_nuxt/inter-cyrillic-ext-wght-normal.BOeWTOD4.woff2"},{"revision":null,"url":"_nuxt/hePW80VL.js"},{"revision":null,"url":"_nuxt/error-500.Bwd7zAaE.css"},{"revision":null,"url":"_nuxt/error-404.Bb87HomL.css"},{"revision":null,"url":"_nuxt/entry.KNdllmoL.css"},{"revision":null,"url":"_nuxt/board.fZYj3O-m.css"},{"revision":null,"url":"_nuxt/archivo-vietnamese-wght-normal.XAtsl5Q_.woff2"},{"revision":null,"url":"_nuxt/archivo-latin-wght-normal.E0tuGl4L.woff2"},{"revision":null,"url":"_nuxt/archivo-latin-ext-wght-normal.C4zznr8T.woff2"},{"revision":null,"url":"_nuxt/Dpe9TNcA.js"},{"revision":null,"url":"_nuxt/DFe-cDm2.js"},{"revision":null,"url":"_nuxt/D7fCPncR.js"},{"revision":null,"url":"_nuxt/CwurhZnh.js"},{"revision":null,"url":"_nuxt/CgUSTIM1.js"},{"revision":null,"url":"_nuxt/CXJnLmWv.js"},{"revision":null,"url":"_nuxt/CV6ukk-M.js"},{"revision":null,"url":"_nuxt/CTPNZj4T.js"},{"revision":null,"url":"_nuxt/CPlkxpge.js"},{"revision":null,"url":"_nuxt/CO4sDeSt.js"},{"revision":null,"url":"_nuxt/CLf2i_DM.js"},{"revision":null,"url":"_nuxt/CDWjMk9C.js"},{"revision":null,"url":"_nuxt/C25ROUa9.js"},{"revision":null,"url":"_nuxt/C-BDzEtI.js"},{"revision":null,"url":"_nuxt/BxlzUs1i.js"},{"revision":null,"url":"_nuxt/Bpoxvzh6.js"},{"revision":null,"url":"_nuxt/BdJIc1Xf.js"},{"revision":null,"url":"_nuxt/Bd17z0YL.js"},{"revision":null,"url":"_nuxt/BYZVrreW.js"},{"revision":null,"url":"_nuxt/BGD5AamG.js"},{"revision":null,"url":"_nuxt/BDTOz37p.js"},{"revision":null,"url":"_nuxt/BDNMzG2s.js"},{"revision":null,"url":"_nuxt/B2KlcBQ-.js"},{"revision":null,"url":"_nuxt/AgentView.B12D6ccj.css"},{"revision":"bff8cb35087735ca3272b598a917118a","url":"_nuxt/builds/latest.json"},{"revision":null,"url":"_nuxt/builds/meta/75cc4ea7-3027-463a-aa3e-29e474ed7173.json"}].map((e) => "/" + (typeof e === "string" ? e : e.url).replace(/^\//, ""))];
+	var PRECACHE = ["/", ...[{"revision":"e6a852ba6e2a724d2255af526cb04083","url":"manifest.webmanifest"},{"revision":"b1a14fab8c06784649bf26c636747a86","url":"manifest-en.webmanifest"},{"revision":null,"url":"_nuxt/wherdr-symbols.C1LsPKmg.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-powerline.B_kAMxXr.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-octicons.Hl4VEx8m.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-4.CO_PudDR.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-3.8xz7iX-Y.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-2.C_flbBWO.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-material-1.BdvqkCqW.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-extension.Dai_ky39.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-devicons.ZMSFX1sW.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-codicons.CtEsfSAf.woff2"},{"revision":null,"url":"_nuxt/wherdr-nerd-awesome.DQ3_iAfa.woff2"},{"revision":null,"url":"_nuxt/useWorktrees.BWpb3OO0.css"},{"revision":null,"url":"_nuxt/useViewport.D9mmYA6A.css"},{"revision":null,"url":"_nuxt/settings.ycbeituV.css"},{"revision":null,"url":"_nuxt/jetbrains-mono-vietnamese-wght-normal.Bt-aOZkq.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-latin-wght-normal.B9CIFXIH.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-latin-ext-wght-normal.DBQx-q_a.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-greek-wght-normal.Bw9x6K1M.woff2"},{"revision":null,"url":"_nuxt/jetbrains-mono-cyrillic-wght-normal.D73BlboJ.woff2"},{"revision":null,"url":"_nuxt/inter-vietnamese-wght-normal.CBcvBZtf.woff2"},{"revision":null,"url":"_nuxt/inter-latin-wght-normal.Dx4kXJAl.woff2"},{"revision":null,"url":"_nuxt/inter-latin-ext-wght-normal.DO1Apj_S.woff2"},{"revision":null,"url":"_nuxt/inter-greek-wght-normal.CkhJZR-_.woff2"},{"revision":null,"url":"_nuxt/inter-greek-ext-wght-normal.DlzME5K_.woff2"},{"revision":null,"url":"_nuxt/inter-cyrillic-wght-normal.DqGufNeO.woff2"},{"revision":null,"url":"_nuxt/inter-cyrillic-ext-wght-normal.BOeWTOD4.woff2"},{"revision":null,"url":"_nuxt/hePW80VL.js"},{"revision":null,"url":"_nuxt/error-500.Bwd7zAaE.css"},{"revision":null,"url":"_nuxt/error-404.Bb87HomL.css"},{"revision":null,"url":"_nuxt/entry.C_hImCpq.css"},{"revision":null,"url":"_nuxt/board.CpFnG_Ho.css"},{"revision":null,"url":"_nuxt/archivo-vietnamese-wght-normal.XAtsl5Q_.woff2"},{"revision":null,"url":"_nuxt/archivo-latin-wght-normal.E0tuGl4L.woff2"},{"revision":null,"url":"_nuxt/archivo-latin-ext-wght-normal.C4zznr8T.woff2"},{"revision":null,"url":"_nuxt/T-qXNaMY.js"},{"revision":null,"url":"_nuxt/D_x7Rysx.js"},{"revision":null,"url":"_nuxt/DNs2cMBZ.js"},{"revision":null,"url":"_nuxt/CnjxEm0H.js"},{"revision":null,"url":"_nuxt/CiG2Lovu.js"},{"revision":null,"url":"_nuxt/CXJnLmWv.js"},{"revision":null,"url":"_nuxt/COWXF9OU.js"},{"revision":null,"url":"_nuxt/CDWjMk9C.js"},{"revision":null,"url":"_nuxt/CAkH_IfS.js"},{"revision":null,"url":"_nuxt/C8tHIeGN.js"},{"revision":null,"url":"_nuxt/C25ROUa9.js"},{"revision":null,"url":"_nuxt/ByLPJEo6.js"},{"revision":null,"url":"_nuxt/Bqz3nVVB.js"},{"revision":null,"url":"_nuxt/Bpoxvzh6.js"},{"revision":null,"url":"_nuxt/Bd17z0YL.js"},{"revision":null,"url":"_nuxt/BK1_9FXg.js"},{"revision":null,"url":"_nuxt/BDNMzG2s.js"},{"revision":null,"url":"_nuxt/B5cSia3P.js"},{"revision":null,"url":"_nuxt/B40shTLf.js"},{"revision":null,"url":"_nuxt/AgentView.BwyQIUef.css"},{"revision":null,"url":"_nuxt/7KozZy5Y.js"},{"revision":null,"url":"_nuxt/6YTlf8ot.js"},{"revision":null,"url":"_nuxt/3bE7s96N.js"},{"revision":null,"url":"_nuxt/2fsYF-LK.js"},{"revision":"49e0b22686896464e4fa37a1e1160a8f","url":"_nuxt/builds/latest.json"},{"revision":null,"url":"_nuxt/builds/meta/e2ee8d99-6a6a-4754-934f-8b7dbecfcdcb.json"}].map((e) => "/" + (typeof e === "string" ? e : e.url).replace(/^\//, ""))];
 	sw.addEventListener("install", (e) => {
 		e.waitUntil((async () => {
 			const c = await caches.open(CACHE);
@@ -49,7 +49,11 @@
 		}
 		const network = fetch(req, { cache: "no-cache" });
 		e.waitUntil(network.then((res) => keep(req, res)).catch(() => {}));
-		const fromCache = async () => await caches.match(req) || (req.mode === "navigate" ? caches.match("/") : void 0);
+		if (req.mode === "navigate") {
+			e.respondWith(caches.match("/").then((hit) => hit || network));
+			return;
+		}
+		const fromCache = async () => await caches.match(req) || void 0;
 		e.respondWith(networkFirst(network, fromCache, NETWORK_WAIT_MS));
 	});
 	sw.addEventListener("push", (e) => {

package/.output/server/chunks/_/branding.mjs

@@ -1,4 +1,4 @@
-import { s as sendError, cv as useStorage, aw as setResponseHeader } from '../nitro/nitro.mjs';
+import { s as sendError, cN as useStorage, aK as setResponseHeader } from '../nitro/nitro.mjs';
 import fs from 'node:fs';
 import path from 'node:path';
 

package/.output/server/chunks/_/fileDownload.mjs

@@ -1,4 +1,4 @@
-import { H as HerdrError, a as defineApi, i as getQuery, f as findPane, m as machineFor, aw as setResponseHeader, ax as getRequestHeader, ay as setResponseStatus } from '../nitro/nitro.mjs';
+import { H as HerdrError, a as defineApi, i as getQuery, f as findPane, B as machineFor, aK as setResponseHeader, aL as getRequestHeader, aM as setResponseStatus } from '../nitro/nitro.mjs';
 import { w as writtenTarget, c as cleanRelative, r as rootOf, i as isVideo, O as OPEN_FILE, V as VIDEO_HEAD, s as shellError, v as videoType, a as readWrittenBytes, b as readFileBytes, d as isPdf, e as attachmentHeader } from './files.mjs';
 import { spawn } from 'node:child_process';
 import crypto from 'node:crypto';

package/.output/server/chunks/_/files.mjs

@@ -1,8 +1,8 @@
 import { execFile } from 'node:child_process';
 import path from 'node:path';
+import { H as HerdrError, ac as DATA_DIR, aJ as shq } from '../nitro/nitro.mjs';
 import { r as resolveAgentPath, p as posixResolve } from './filePaths.mjs';
 import { g as gitToplevel } from './changes.mjs';
-import { H as HerdrError } from '../nitro/nitro.mjs';
 
 const MAX_ENTRIES = 2e3;
 const TEXT_BYTES = 256 * 1024;
@@ -62,7 +62,17 @@ printf '=\\0'
 [ "$#" -gt 0 ] || exit 0
 if stat -f %z / >/dev/null 2>&1; then stat -f %z -- "$@"; else stat -c %s -- "$@"; fi 2>/dev/null
 exit 0`;
+const PROTECTED_HOME = [".ssh", ".config/herdr"];
+const protectedDirs = (home) => [...home ? PROTECTED_HOME.map((d) => path.posix.join(posixResolve("/", home), d)) : [], path.resolve(DATA_DIR)];
+const PROTECTED = `protected_path() {
+  for pp in ${PROTECTED_HOME.map((d) => `"$HOME/${d}"`).join(" ")} ${shq(path.resolve(DATA_DIR))}; do
+    pd=$(cd "$pp" 2>/dev/null && pwd -P) || continue
+    case "$1/" in "\${pd%/}/"*) return 0 ;; esac
+  done
+  return 1
+}`;
 const OPEN_FILE = `${RESOLVE}
+${PROTECTED}
 case "$2" in */*) d=\${2%/*} ;; *) d=. ;; esac
 b=\${2##*/}
 dir=$(cd "$root" && cd -- "./$d" 2>/dev/null && pwd -P) || { echo "not found" >&2; exit 4; }
@@ -77,6 +87,7 @@ while [ -L "$f" ]; do
 done
 [ -e "$f" ] || { echo "not found" >&2; exit 4; }
 under "$f" || { echo "outside" >&2; exit 5; }
+protected_path "$f" && { echo "protected" >&2; exit 9; }
 [ -f "$f" ] || { echo "not a file" >&2; exit 6; }
 [ -r "$f" ] || { echo "permission denied" >&2; exit 7; }
 command exec 3< "$f" || { echo "permission denied" >&2; exit 7; }
@@ -94,6 +105,7 @@ s=\${m#* }; s=$((\${s%% *}))
 echo $s
 [ -n "$4" ] && [ "$s" -ge "$3" ] && exit 0
 head -c "$3" <&3`;
+const PROTECTED_MESSAGE = "This file is protected: wherdr never shows its own data, ~/.ssh or ~/.config/herdr";
 const MACOS_SSH_DENIED = "macOS blocks access to this folder. On the Mac: System Settings \u203A General \u203A Sharing \u203A Remote Login \u24D8 \u203A \u201CAllow full disk access for remote users\u201D.";
 const MACOS_LOCAL_DENIED = "macOS blocks access to this folder. Allow the app that runs wherdr in System Settings \u203A Privacy & Security \u203A Full Disk Access.";
 function executor(m, { timeoutMs = 15e3, maxBytes = IMAGE_BYTES } = {}) {
@@ -120,6 +132,7 @@ function shellError(m, code, stderr) {
   if (r.code === 6) return new HerdrError("not_file", "Not a file");
   if (r.code === 7) return new HerdrError("denied", "Permission denied");
   if (r.code === 8) return new HerdrError("denied", m.exec ? MACOS_SSH_DENIED : MACOS_LOCAL_DENIED);
+  if (r.code === 9) return new HerdrError("protected", PROTECTED_MESSAGE);
   if (r.code === 124) return new HerdrError("timeout", "The folder took too long to read");
   if (r.code === 255 || r.code === null) return new HerdrError("unreachable", "Machine unreachable");
   return new HerdrError("remote", r.stderr.trim().split("\n").pop() || `code ${r.code}`);
@@ -185,8 +198,14 @@ function writtenTarget(m, cwd, written) {
   const root = posixResolve("/", m.home);
   const rel = path.posix.relative(root, abs);
   if (!rel) throw new HerdrError("not_file", "Not a file");
+  refuseProtected(m, abs);
   return { root, rel, abs };
 }
+function refuseProtected(m, abs) {
+  for (const d of protectedDirs(m.home)) {
+    if (abs === d || abs.startsWith(d.replace(/\/+$/, "") + "/")) throw new HerdrError("protected", PROTECTED_MESSAGE);
+  }
+}
 async function readHead(m, root, rel, max, opts) {
   const out = await run(m, READ_SCRIPT, [root, rel, String(max), ...(opts == null ? void 0 : opts.whole) ? ["1"] : []], opts);
   const nl = out.indexOf(10);
@@ -214,7 +233,9 @@ async function previewAt(m, root, rel, shown) {
 async function readFilePreview(m, cwd, rel) {
   const p = cleanRelative(rel);
   if (!p) throw new HerdrError("not_file", "Not a file");
-  return previewAt(m, await rootOf(m, cwd), p, p);
+  const root = await rootOf(m, cwd);
+  refuseProtected(m, path.posix.join(root, p));
+  return previewAt(m, root, p, p);
 }
 async function readWrittenPreview(m, cwd, written) {
   const t = writtenTarget(m, cwd, written);
@@ -228,7 +249,9 @@ async function bytesAt(m, root, rel) {
 async function readFileBytes(m, cwd, rel) {
   const p = cleanRelative(rel);
   if (!p) throw new HerdrError("not_file", "Not a file");
-  return bytesAt(m, await rootOf(m, cwd), p);
+  const root = await rootOf(m, cwd);
+  refuseProtected(m, path.posix.join(root, p));
+  return bytesAt(m, root, p);
 }
 async function readWrittenBytes(m, cwd, written) {
   const t = writtenTarget(m, cwd, written);

package/.output/server/chunks/_/machineOrder.mjs

@@ -1,7 +1,7 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { randomUUID } from 'node:crypto';
-import { aG as baseMachines, aH as DATA_DIR } from '../nitro/nitro.mjs';
+import { aU as baseMachines, ac as DATA_DIR } from '../nitro/nitro.mjs';
 
 function cleanMachineOrder(value, known) {
   if (!Array.isArray(value)) return [];

package/.output/server/chunks/_/onboarding.mjs

@@ -1,6 +1,6 @@
 import fs from 'node:fs';
 import path from 'node:path';
-import { aW as HOST_LABEL, aH as DATA_DIR } from '../nitro/nitro.mjs';
+import { b7 as HOST_LABEL, ac as DATA_DIR } from '../nitro/nitro.mjs';
 
 const ONBOARDING_FILE = path.join(DATA_DIR, "onboarding.json");
 function readOnboarding(file = ONBOARDING_FILE, host = HOST_LABEL) {

package/.output/server/chunks/_/package.mjs

@@ -1,5 +1,5 @@
 var name = "wherdr";
-var version = "2.4.0";
+var version = "2.6.0";
 var license = "MIT";
 var type = "module";
 var description = "Unofficial mobile web client (PWA) to drive the coding agents running in Herdr";

package/.output/server/chunks/_/plugins.mjs

@@ -1,4 +1,4 @@
-import { m as machineFor, aZ as herdrOn, H as HerdrError, f as findPane, a_ as splitId, a$ as getState, aa as log, X as sleep } from '../nitro/nitro.mjs';
+import { B as machineFor, ba as herdrOn, H as HerdrError, f as findPane, bb as splitId, bc as getState, an as log, a5 as sleep } from '../nitro/nitro.mjs';
 
 const PLUGIN_ID_RE = /^[A-Za-z0-9.:_-]{1,100}$/;
 const ACTION_ID_RE = /^[A-Za-z0-9:_-]{1,100}$/;

package/.output/server/chunks/_/restart.mjs

@@ -1,4 +1,4 @@
-import { H as HerdrError, a3 as paneForeground, a4 as codexMenuOpen, a5 as stopAgent, a6 as terminalUpdateLine, a7 as waitFor, a8 as terminalUpdateDone, a9 as startAgent, X as sleep, f as findPane, T as restarts, aa as log, M as withPaneLock, ab as RESTARTABLE, y as transcripts, ac as claudeFooterMode, ad as planRestart, h as herdr, p as poll } from '../nitro/nitro.mjs';
+import { H as HerdrError, ag as paneForeground, ah as codexMenuOpen, ai as stopAgent, aj as terminalUpdateLine, ak as waitFor, al as terminalUpdateDone, am as startAgent, a5 as sleep, f as findPane, a2 as restarts, an as log, Y as withPaneLock, ao as RESTARTABLE, J as transcripts, ap as claudeFooterMode, aq as planRestart, h as herdr, p as poll } from '../nitro/nitro.mjs';
 import crypto from 'node:crypto';
 
 const TERM_UPDATE_MS = 10 * 6e4;

package/.output/server/chunks/_/revoke.mjs

@@ -0,0 +1,22 @@
+import { m as dropAllSubs } from '../nitro/nitro.mjs';
+import { r as revalidatePeers } from './ws.mjs';
+
+async function revokeEverywhere(peers) {
+  await dropAllSubs();
+  return peers ? revalidatePeers(peers) : revalidatePeers();
+}
+const PUSH_RESUBSCRIBE = JSON.stringify({ type: "push-resubscribe" });
+function askPushResubscribe(clients) {
+  let asked = 0;
+  for (const c of clients) {
+    try {
+      c.send(PUSH_RESUBSCRIBE);
+      asked++;
+    } catch {
+    }
+  }
+  return asked;
+}
+
+export { askPushResubscribe as a, revokeEverywhere as r };
+//# sourceMappingURL=revoke.mjs.map

package/.output/server/chunks/_/selfupdate.mjs

@@ -3,7 +3,7 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { p as pkg } from './package.mjs';
-import { cp as installMode, H as HerdrError, aa as log, cq as oneTapMode, ct as updateRunning } from '../nitro/nitro.mjs';
+import { cE as installMode, H as HerdrError, an as log, cH as oneTapMode, cL as updateRunning, cJ as majorOf } from '../nitro/nitro.mjs';
 import { c as checkUpdate, R as REPO } from './updates.mjs';
 
 function wherdrDir(env = process.env) {
@@ -23,6 +23,7 @@ function buildPlan(o) {
   if (!oneTapMode(o.mode)) throw new HerdrError("update_manual", "This installation cannot update itself: run the update command");
   if (updateRunning(o.job, o.now)) throw new HerdrError("update_running", "An update is already in progress");
   if (!o.latest || o.to !== o.latest) throw new HerdrError("update_version", "No newer version to install");
+  if (majorOf(o.latest) !== majorOf(o.current)) throw new HerdrError("update_major", `wherdr ${o.latest} is a new major version: it installs beside this one, see its migration guide`);
   return {
     kind: o.mode,
     from: o.current,

package/.output/server/chunks/_/splitShell.mjs

@@ -0,0 +1,42 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { a9 as getMachine, H as HerdrError, ac as DATA_DIR, ad as RemoteMachine, ae as HERDR_BIN } from '../nitro/nitro.mjs';
+
+const SPLIT_TERMINAL_TOKEN = "wherdr_split_terminal";
+const SPLIT_PROMPT_TOKEN = "wherdr_split_prompt";
+const quote = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
+function splitShellHooks(binary, session) {
+  const report = `${quote(binary)} --session ${quote(session)} pane report-metadata "$HERDR_PANE_ID" --source wherdr-split`;
+  const busy = `${report} --clear-token ${SPLIT_PROMPT_TOKEN} >/dev/null 2>&1`;
+  const ready = `${report} --token "${SPLIT_PROMPT_TOKEN}=$$" >/dev/null 2>&1`;
+  return {
+    bash: `if (( BASH_VERSINFO[0] > 4 || (BASH_VERSINFO[0] == 4 && BASH_VERSINFO[1] >= 4) )); then PS0=${quote(`$(${busy})`)}; ${ready}; fi`,
+    zsh: `_wherdr_split_busy() { ${busy}; }
+_wherdr_split_ready() { ${ready}; }
+preexec_functions+=(_wherdr_split_busy)
+precmd_functions+=(_wherdr_split_ready)
+`
+  };
+}
+async function prepareSplitShell(machine) {
+  const m = getMachine(machine);
+  if (!m) throw new HerdrError("bad_machine", "Unknown machine");
+  const dir = m.local ? path.join(DATA_DIR, "split-shell") : path.posix.join(m.home, ".cache/herdr-web/split-shell");
+  const hooks = splitShellHooks(m instanceof RemoteMachine ? m.bin : HERDR_BIN, m.session);
+  const zshenv = 'unset ZDOTDIR\n[[ -f "$HOME/.zshenv" ]] && source "$HOME/.zshenv"\nexport WHERDR_SPLIT_USER_ZDOTDIR=${ZDOTDIR:-$HOME}\nexport ZDOTDIR=$WHERDR_SPLIT_BOOTSTRAP\n';
+  const zprofile = 'ZDOTDIR=$WHERDR_SPLIT_USER_ZDOTDIR\n[[ -f "$ZDOTDIR/.zprofile" ]] && source "$ZDOTDIR/.zprofile"\nexport WHERDR_SPLIT_USER_ZDOTDIR=${ZDOTDIR:-$HOME}\nexport ZDOTDIR=$WHERDR_SPLIT_BOOTSTRAP\n';
+  const zshrc = 'ZDOTDIR=$WHERDR_SPLIT_USER_ZDOTDIR\n[[ -f "$ZDOTDIR/.zshrc" ]] && source "$ZDOTDIR/.zshrc"\n' + hooks.zsh;
+  if (m.exec) {
+    const r = await m.exec('umask 077; mkdir -p "$1" && printf %s "$2" > "$1/.zshenv" && printf %s "$3" > "$1/.zshrc" && printf %s "$4" > "$1/.zprofile"', [dir, zshenv, zshrc, zprofile], { timeoutMs: 5e3 });
+    if (r.code !== 0) throw new HerdrError("split_failed", "Could not prepare the split terminal. No command was sent.");
+  } else {
+    await fs.mkdir(dir, { recursive: true, mode: 448 });
+    await fs.writeFile(path.join(dir, ".zshenv"), zshenv, { mode: 384 });
+    await fs.writeFile(path.join(dir, ".zshrc"), zshrc, { mode: 384 });
+    await fs.writeFile(path.join(dir, ".zprofile"), zprofile, { mode: 384 });
+  }
+  return { PROMPT_COMMAND: hooks.bash, ZDOTDIR: dir, WHERDR_SPLIT_BOOTSTRAP: dir };
+}
+
+export { SPLIT_PROMPT_TOKEN as S, SPLIT_TERMINAL_TOKEN as a, prepareSplitShell as p };
+//# sourceMappingURL=splitShell.mjs.map

package/.output/server/chunks/_/updates.mjs

@@ -1,5 +1,5 @@
 import { p as pkg } from './package.mjs';
-import { cp as installMode, cq as oneTapMode, cr as updateCommand, cs as compareVersions } from '../nitro/nitro.mjs';
+import { cE as installMode, cF as updateCommand, cG as releaseBranch, cH as oneTapMode, cI as compareVersions, cJ as majorOf, cK as majorMove } from '../nitro/nitro.mjs';
 
 const REPO = "afloury/wherdr";
 const RELEASES_URL = `https://api.github.com/repos/${REPO}/releases?per_page=100`;
@@ -9,6 +9,7 @@ function createUpdateChecker(opts) {
   var _a;
   const now = (_a = opts.now) != null ? _a : Date.now;
   let cached = null;
+  let nextMajor = null;
   let nextAt = 0;
   let pending = null;
   async function refresh() {
@@ -17,9 +18,21 @@ function createUpdateChecker(opts) {
       const res = await opts.fetch(RELEASES_URL);
       if (!res.ok) throw new Error("http");
       const releases = await res.json();
-      const stable = releases.filter((r) => !r.draft && !r.prerelease && /^v\d+\.\d+\.\d+$/.test(String(r.tag_name))).sort((a, b) => compareVersions(String(b.tag_name), String(a.tag_name)));
+      const all = releases.filter((r) => !r.draft && !r.prerelease && /^v\d+\.\d+\.\d+$/.test(String(r.tag_name))).sort((a, b) => compareVersions(String(b.tag_name), String(a.tag_name)));
+      const major = majorOf(opts.current);
+      const next = all.find((r) => {
+        var _a3;
+        return ((_a3 = majorOf(String(r.tag_name))) != null ? _a3 : 0) > (major != null ? major : Infinity);
+      });
+      nextMajor = next ? majorMove(REPO, String(next.tag_name).replace(/^v/, ""), typeof next.html_url === "string" ? next.html_url : "") : null;
+      const stable = all.filter((r) => majorOf(String(r.tag_name)) === major);
       const body = stable[0];
-      if (!body || typeof body.tag_name !== "string") throw new Error("tag");
+      if (!body) {
+        cached != null ? cached : cached = { version: opts.current, url: "", missed: [], truncated: false };
+        nextAt = now() + DAY_MS;
+        return;
+      }
+      if (typeof body.tag_name !== "string") throw new Error("tag");
       const missed = [...new Set(stable.map((r) => String(r.tag_name).replace(/^v/, "")))].filter((version) => compareVersions(version, opts.current) > 0);
       const candidate = {
         version: body.tag_name.replace(/^v/, ""),
@@ -66,7 +79,7 @@ function createUpdateChecker(opts) {
   }
   return async function check() {
     const mode = installMode(opts.env.WHERDR_INSTALL);
-    const base = { current: opts.current, mode, command: updateCommand(mode, REPO), oneTap: oneTapMode(mode), behind: 0, missed: [], behindAtLeast: false };
+    const base = { current: opts.current, mode, command: updateCommand(mode, REPO, releaseBranch(opts.current)), oneTap: oneTapMode(mode), behind: 0, missed: [], behindAtLeast: false };
     if (String(opts.env.WHERDR_UPDATE_CHECK || "").toLowerCase() === "off") return { ...base, latest: null, url: null, checked: false };
     if (now() >= nextAt) {
       pending != null ? pending : pending = refresh().finally(() => {
@@ -80,6 +93,7 @@ function createUpdateChecker(opts) {
       latest: newer ? cached.version : null,
       url: newer ? cached.url || null : null,
       checked: !!cached,
+      nextMajor,
       ...newer ? { behind: cached.missed.length, missed: cached.missed.slice(0, 5), behindAtLeast: cached.truncated } : {}
     };
   };

package/.output/server/chunks/_/uploadHashes.mjs

@@ -0,0 +1,46 @@
+import { createHash } from 'node:crypto';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { U as UPLOAD_DIR, S as uploadNames } from '../nitro/nitro.mjs';
+
+const UPLOAD_PATH = /\.cache\/herdr-web\/uploads\/([\w-]+\.[a-z]+)/g;
+const CACHE_MAX = 500;
+const cache = /* @__PURE__ */ new Map();
+async function uploadHash(dir, name) {
+  const key = `${dir}
+${name}`;
+  if (cache.has(key)) return cache.get(key);
+  let hash = null;
+  try {
+    hash = createHash("sha256").update(await fs.readFile(path.join(dir, path.basename(name)))).digest("hex");
+  } catch {
+    hash = null;
+  }
+  if (cache.size >= CACHE_MAX) cache.delete(cache.keys().next().value);
+  cache.set(key, hash);
+  return hash;
+}
+async function addUploadHashes(items, dir = UPLOAD_DIR) {
+  var _a;
+  for (const it of items) {
+    if (it.role === "user") {
+      const names = uploadNames(it.text);
+      if (!names.length) continue;
+      const own = (await Promise.all(names.map((n) => uploadHash(dir, n)))).filter((h) => !!h);
+      const hashes = [...it.hashes || [], ...own.filter((h) => {
+        var _a2;
+        return !((_a2 = it.hashes) == null ? void 0 : _a2.includes(h));
+      })];
+      if (hashes.length) it.hashes = hashes;
+    } else if (it.images === 1) {
+      const names = [...new Set([...`${it.text}
+${((_a = it.omp) == null ? void 0 : _a.target) || ""}`.matchAll(UPLOAD_PATH)].map((m) => m[1]))];
+      if (names.length !== 1) continue;
+      const h = await uploadHash(dir, names[0]);
+      if (h) it.hashes = [h];
+    }
+  }
+}
+
+export { addUploadHashes as a };
+//# sourceMappingURL=uploadHashes.mjs.map

package/.output/server/chunks/_/worktrees.mjs

@@ -1,4 +1,4 @@
-import { cu as allMachines, $ as getMachine, H as HerdrError, a_ as splitId, aZ as herdrOn, p as poll, an as recentDirs, bY as joinId, a$ as getState } from '../nitro/nitro.mjs';
+import { cM as allMachines, a9 as getMachine, H as HerdrError, bb as splitId, ba as herdrOn, p as poll, aA as recentDirs, c9 as joinId, bc as getState } from '../nitro/nitro.mjs';
 
 const opts = { trust_repository: true };
 async function machineWorktrees(m) {

package/.output/server/chunks/_/ws.mjs

@@ -1,4 +1,4 @@
-import { cC as networkReady, cD as ensureFresh, cE as gateDecision, cF as sameOrigin, cG as hostAllowed, k as auth, cH as checkRequestClient, cI as onNetworkReading } from '../nitro/nitro.mjs';
+import { n as networkReady, o as ensureFresh, q as gateDecision, t as sameOrigin, u as hostAllowed, k as auth, v as checkRequestClient, x as onNetworkReading } from '../nitro/nitro.mjs';
 
 var _a, _b;
 const WS_MAX = 256 * 1024;
@@ -11,7 +11,7 @@ function headersOf(h) {
 }
 function upgradeVerdict(headers, remoteAddress) {
   return gateDecision({
-    check: checkRequestClient(remoteAddress, headers),
+    check: checkRequestClient(remoteAddress, headers, auth.isEnabled()),
     unlocked: auth.isUnlocked({ headers }),
     hostOk: hostAllowed(headers.host),
     crossSite: !sameOrigin(headers),
@@ -90,5 +90,5 @@ function messageText(message) {
   return t.length > WS_MAX ? null : t;
 }
 
-export { checkUpgrade as c, isOpen as i, messageText as m, unwatchPeer as u, watchPeer as w };
+export { checkUpgrade as c, isOpen as i, messageText as m, revalidatePeers as r, unwatchPeer as u, watchPeer as w };
 //# sourceMappingURL=ws.mjs.map