ptn 0.1.4__py3-none-any.whl

porterminal/pty/env.py

@@ -0,0 +1,97 @@
+"""Environment variable sanitization for PTY processes."""
+
+import os
+
+# Environment variables to allowlist (safe to pass to shell)
+SAFE_ENV_VARS: frozenset[str] = frozenset(
+    {
+        # System paths
+        "PATH",
+        "PATHEXT",
+        "SYSTEMROOT",
+        "WINDIR",
+        "TEMP",
+        "TMP",
+        "COMSPEC",
+        # User directories
+        "HOME",
+        "USERPROFILE",
+        "HOMEDRIVE",
+        "HOMEPATH",
+        "LOCALAPPDATA",
+        "APPDATA",
+        "PROGRAMFILES",
+        "PROGRAMFILES(X86)",
+        "COMMONPROGRAMFILES",
+        # System info
+        "COMPUTERNAME",
+        "USERNAME",
+        "USERDOMAIN",
+        "OS",
+        "PROCESSOR_ARCHITECTURE",
+        "NUMBER_OF_PROCESSORS",
+        # Terminal
+        "TERM",
+        # Locale settings for proper text rendering
+        "LANG",
+        "LC_ALL",
+        "LC_CTYPE",
+    }
+)
+
+# Environment variables to explicitly block (secrets)
+BLOCKED_ENV_VARS: frozenset[str] = frozenset(
+    {
+        # AWS
+        "AWS_ACCESS_KEY_ID",
+        "AWS_SECRET_ACCESS_KEY",
+        "AWS_SESSION_TOKEN",
+        # Azure
+        "AZURE_CLIENT_SECRET",
+        "AZURE_CLIENT_ID",
+        # Git/GitHub/GitLab
+        "GH_TOKEN",
+        "GITHUB_TOKEN",
+        "GITLAB_TOKEN",
+        # Package managers
+        "NPM_TOKEN",
+        # AI APIs
+        "ANTHROPIC_API_KEY",
+        "OPENAI_API_KEY",
+        "GOOGLE_API_KEY",
+        # Payment
+        "STRIPE_SECRET_KEY",
+        # Database
+        "DATABASE_URL",
+        "DB_PASSWORD",
+        # Generic secrets
+        "SECRET_KEY",
+        "API_KEY",
+        "API_SECRET",
+        "PRIVATE_KEY",
+    }
+)
+
+
+def build_safe_environment() -> dict[str, str]:
+    """Build a sanitized environment for the PTY.
+
+    Returns:
+        Dictionary of safe environment variables.
+    """
+    safe_env: dict[str, str] = {}
+
+    # Copy only allowed variables
+    for var in SAFE_ENV_VARS:
+        if var in os.environ:
+            safe_env[var] = os.environ[var]
+
+    # Ensure blocked vars are not included (defense in depth)
+    for var in BLOCKED_ENV_VARS:
+        safe_env.pop(var, None)
+
+    # Set custom variables for audit trail
+    safe_env["TERM"] = "xterm-256color"
+    safe_env["TERM_SESSION_TYPE"] = "remote-web"
+
+    return safe_env

porterminal/pty/manager.py

@@ -0,0 +1,163 @@
+"""Secure PTY manager with security controls."""
+
+import logging
+import shutil
+from pathlib import Path
+from typing import TYPE_CHECKING
+
+from .env import build_safe_environment
+from .protocol import PTYBackend
+
+if TYPE_CHECKING:
+    from ..config import ShellConfig
+
+logger = logging.getLogger(__name__)
+
+
+class SecurePTYManager:
+    """PTY manager with security controls - delegates to platform backend.
+
+    This class provides:
+    - Environment variable sanitization
+    - Shell path validation
+    - Bounds checking for terminal dimensions
+    - Unified interface across platforms
+    """
+
+    def __init__(
+        self,
+        backend: PTYBackend,
+        shell_config: "ShellConfig",
+        cols: int = 120,
+        rows: int = 30,
+        cwd: str | None = None,
+    ) -> None:
+        """Initialize the PTY manager.
+
+        Args:
+            backend: Platform-specific PTY backend.
+            shell_config: Shell configuration (command, args).
+            cols: Initial terminal columns (clamped to 40-500).
+            rows: Initial terminal rows (clamped to 10-200).
+            cwd: Working directory, or None for default.
+        """
+        self._backend = backend
+        self.shell_config = shell_config
+        self.cols = max(40, min(cols, 500))
+        self.rows = max(10, min(rows, 200))
+        self.cwd = cwd
+        self._closed = False
+
+    def _build_command(self) -> list[str]:
+        """Build the shell command with arguments."""
+        cmd = [self.shell_config.command]
+        cmd.extend(self.shell_config.args)
+        return cmd
+
+    def spawn(self) -> "SecurePTYManager":
+        """Spawn the PTY process.
+
+        Returns:
+            Self for method chaining.
+
+        Raises:
+            FileNotFoundError: If shell command is not found.
+        """
+        # Verify shell exists
+        shell_cmd = self.shell_config.command
+        if not shutil.which(shell_cmd) and not Path(shell_cmd).exists():
+            raise FileNotFoundError(f"Shell not found: {shell_cmd}")
+
+        # Build command and environment
+        cmd = self._build_command()
+        env = build_safe_environment()
+
+        # Validate working directory
+        cwd = self.cwd
+        if cwd:
+            cwd_path = Path(cwd)
+            if not cwd_path.exists() or not cwd_path.is_dir():
+                logger.warning("Invalid cwd %s, using default", cwd)
+                cwd = None
+
+        logger.info(
+            "Spawning PTY cmd=%s rows=%d cols=%d cwd=%s",
+            cmd,
+            self.rows,
+            self.cols,
+            cwd,
+        )
+
+        self._backend.spawn(cmd, env, cwd, self.rows, self.cols)
+        return self
+
+    def read(self, size: int = 4096) -> bytes:
+        """Read from the PTY (non-blocking).
+
+        Args:
+            size: Maximum bytes to read.
+
+        Returns:
+            Bytes read, or empty bytes if nothing available or closed.
+        """
+        if self._closed:
+            return b""
+
+        try:
+            return self._backend.read(size)
+        except OSError as e:
+            logger.error("PTY read error: %s", e)
+            return b""
+
+    def write(self, data: bytes) -> None:
+        """Write to the PTY.
+
+        Args:
+            data: Bytes to write.
+        """
+        if self._closed:
+            return
+
+        try:
+            self._backend.write(data)
+        except OSError as e:
+            logger.error("PTY write error: %s", e)
+
+    def resize(self, cols: int, rows: int) -> None:
+        """Resize the PTY with bounds checking.
+
+        Args:
+            cols: New number of columns (clamped to 40-500).
+            rows: New number of rows (clamped to 10-200).
+        """
+        if self._closed:
+            return
+
+        cols = max(40, min(cols, 500))
+        rows = max(10, min(rows, 200))
+
+        try:
+            self._backend.resize(rows, cols)
+            self.cols = cols
+            self.rows = rows
+        except OSError as e:
+            logger.error("PTY resize error: %s", e)
+
+    def is_alive(self) -> bool:
+        """Check if the PTY process is still alive.
+
+        Returns:
+            True if process is running and not closed, False otherwise.
+        """
+        if self._closed:
+            return False
+        return self._backend.is_alive()
+
+    def close(self) -> None:
+        """Close the PTY and clean up resources."""
+        if self._closed:
+            return
+
+        self._closed = True
+        self._backend.close()
+        logger.info("PTY closed")

porterminal/pty/protocol.py

@@ -0,0 +1,84 @@
+"""Protocol definition for PTY backends."""
+
+from typing import Protocol, runtime_checkable
+
+
+@runtime_checkable
+class PTYBackend(Protocol):
+    """Protocol for platform-specific PTY implementations.
+
+    This defines the interface that all PTY backends must implement.
+    Using a Protocol allows for structural subtyping (duck typing with type hints).
+    """
+
+    @property
+    def rows(self) -> int:
+        """Current number of rows."""
+        ...
+
+    @property
+    def cols(self) -> int:
+        """Current number of columns."""
+        ...
+
+    def spawn(
+        self,
+        cmd: list[str],
+        env: dict[str, str],
+        cwd: str | None,
+        rows: int,
+        cols: int,
+    ) -> None:
+        """Spawn the PTY process.
+
+        Args:
+            cmd: Command and arguments to execute.
+            env: Environment variables for the process.
+            cwd: Working directory, or None for default.
+            rows: Initial terminal rows.
+            cols: Initial terminal columns.
+
+        Raises:
+            RuntimeError: If PTY is already spawned.
+        """
+        ...
+
+    def read(self, size: int = 4096) -> bytes:
+        """Read from the PTY (non-blocking).
+
+        Args:
+            size: Maximum bytes to read.
+
+        Returns:
+            Bytes read, or empty bytes if nothing available.
+        """
+        ...
+
+    def write(self, data: bytes) -> None:
+        """Write to the PTY.
+
+        Args:
+            data: Bytes to write.
+        """
+        ...
+
+    def resize(self, rows: int, cols: int) -> None:
+        """Resize the PTY window.
+
+        Args:
+            rows: New number of rows.
+            cols: New number of columns.
+        """
+        ...
+
+    def is_alive(self) -> bool:
+        """Check if the PTY process is still alive.
+
+        Returns:
+            True if process is running, False otherwise.
+        """
+        ...
+
+    def close(self) -> None:
+        """Close the PTY and clean up resources."""
+        ...

porterminal/pty/unix.py

@@ -0,0 +1,162 @@
+"""Unix PTY backend using the pty module."""
+
+import logging
+import os
+import select
+import sys
+import time
+
+logger = logging.getLogger(__name__)
+
+# Unix-only imports
+if sys.platform != "win32":
+    import fcntl
+    import pty
+    import signal
+    import struct
+    import termios
+
+
+class UnixPTYBackend:
+    """Unix PTY implementation using the pty module."""
+
+    def __init__(self) -> None:
+        if sys.platform == "win32":
+            raise RuntimeError("UnixPTYBackend is not supported on Windows")
+        self._master_fd: int | None = None
+        self._pid: int | None = None
+        self._rows: int = 30
+        self._cols: int = 120
+
+    @property
+    def rows(self) -> int:
+        """Current number of rows."""
+        return self._rows
+
+    @property
+    def cols(self) -> int:
+        """Current number of columns."""
+        return self._cols
+
+    def spawn(
+        self,
+        cmd: list[str],
+        env: dict[str, str],
+        cwd: str | None,
+        rows: int,
+        cols: int,
+    ) -> None:
+        """Spawn PTY on Unix using pty module."""
+        if self._master_fd is not None:
+            raise RuntimeError("PTY already spawned")
+
+        self._rows = rows
+        self._cols = cols
+
+        self._pid, self._master_fd = pty.fork()
+
+        if self._pid == 0:
+            # Child process
+            if cwd:
+                os.chdir(cwd)
+            os.execvpe(cmd[0], cmd, env)
+        else:
+            # Parent process - set non-blocking
+            flags = fcntl.fcntl(self._master_fd, fcntl.F_GETFL)
+            fcntl.fcntl(self._master_fd, fcntl.F_SETFL, flags | os.O_NONBLOCK)
+            # Set initial size
+            self._set_winsize(rows, cols)
+            logger.debug("Unix PTY spawned pid=%d cmd=%s", self._pid, cmd)
+
+    def _set_winsize(self, rows: int, cols: int) -> None:
+        """Set window size on Unix PTY."""
+        if self._master_fd is None:
+            return
+        winsize = struct.pack("HHHH", rows, cols, 0, 0)
+        fcntl.ioctl(self._master_fd, termios.TIOCSWINSZ, winsize)
+
+    def read(self, size: int = 4096) -> bytes:
+        """Read from Unix PTY (non-blocking)."""
+        if self._master_fd is None:
+            return b""
+
+        readable, _, _ = select.select([self._master_fd], [], [], 0)
+        if not readable:
+            return b""
+
+        try:
+            data = os.read(self._master_fd, size)
+            if data:
+                logger.debug("PTY read bytes=%d", len(data))
+            return data
+        except OSError:
+            return b""
+
+    def write(self, data: bytes) -> None:
+        """Write to Unix PTY."""
+        if self._master_fd is None:
+            return
+        logger.debug("PTY write bytes=%d", len(data))
+        os.write(self._master_fd, data)
+
+    def resize(self, rows: int, cols: int) -> None:
+        """Resize the PTY window."""
+        self._set_winsize(rows, cols)
+        self._rows = rows
+        self._cols = cols
+        logger.debug("PTY resize rows=%d cols=%d", rows, cols)
+
+    def is_alive(self) -> bool:
+        """Check if the PTY process is still alive."""
+        if self._pid is None:
+            return False
+        try:
+            pid, _ = os.waitpid(self._pid, os.WNOHANG)
+            return pid == 0
+        except ChildProcessError:
+            return False
+
+    def close(self) -> None:
+        """Close the PTY and clean up resources."""
+        try:
+            if self._master_fd is not None:
+                os.close(self._master_fd)
+                self._master_fd = None
+
+            if self._pid is not None:
+                try:
+                    # Send SIGTERM for graceful termination
+                    os.kill(self._pid, signal.SIGTERM)
+
+                    # Poll with WNOHANG for up to 3 seconds
+                    grace_period_ms = 3000
+                    poll_interval_ms = 100
+                    elapsed = 0
+
+                    while elapsed < grace_period_ms:
+                        pid, _ = os.waitpid(self._pid, os.WNOHANG)
+                        if pid != 0:
+                            # Process exited gracefully
+                            logger.debug("PTY process exited gracefully after SIGTERM")
+                            self._pid = None
+                            return
+                        time.sleep(poll_interval_ms / 1000)
+                        elapsed += poll_interval_ms
+
+                    # Process didn't respond to SIGTERM, escalate to SIGKILL
+                    logger.warning(
+                        "PTY process %d did not respond to SIGTERM, sending SIGKILL",
+                        self._pid,
+                    )
+                    os.kill(self._pid, signal.SIGKILL)
+                    os.waitpid(self._pid, 0)  # SIGKILL cannot be ignored
+
+                except (ProcessLookupError, ChildProcessError):
+                    # Process already dead
+                    pass
+                finally:
+                    self._pid = None
+        except OSError as e:
+            logger.error("PTY close error: %s", e)
+        finally:
+            logger.info("Unix PTY closed")

porterminal/pty/windows.py

@@ -0,0 +1,131 @@
+"""Windows PTY backend using pywinpty."""
+
+import logging
+import select
+import time
+from typing import Any
+
+logger = logging.getLogger(__name__)
+
+# Import pywinpty - only available on Windows
+try:
+    from winpty import PtyProcess as WinPtyProcess
+
+    HAS_WINPTY = True
+except ImportError:
+    WinPtyProcess = None  # type: ignore[misc, assignment]
+    HAS_WINPTY = False
+
+
+class WindowsPTYBackend:
+    """Windows PTY implementation using pywinpty."""
+
+    def __init__(self) -> None:
+        if not HAS_WINPTY:
+            raise RuntimeError("pywinpty is not installed")
+        self._pty: Any | None = None
+        self._rows: int = 30
+        self._cols: int = 120
+
+    @property
+    def rows(self) -> int:
+        """Current number of rows."""
+        return self._rows
+
+    @property
+    def cols(self) -> int:
+        """Current number of columns."""
+        return self._cols
+
+    def spawn(
+        self,
+        cmd: list[str],
+        env: dict[str, str],
+        cwd: str | None,
+        rows: int,
+        cols: int,
+    ) -> None:
+        """Spawn PTY on Windows using pywinpty."""
+        if self._pty is not None:
+            raise RuntimeError("PTY already spawned")
+
+        self._rows = rows
+        self._cols = cols
+
+        self._pty = WinPtyProcess.spawn(
+            cmd,
+            dimensions=(rows, cols),
+            env=env,
+            cwd=cwd,
+        )
+        logger.debug("Windows PTY spawned cmd=%s", cmd)
+
+    def read(self, size: int = 4096) -> bytes:
+        """Read from Windows PTY (non-blocking)."""
+        if self._pty is None:
+            return b""
+
+        # Try socket-based read first (faster)
+        sock = getattr(self._pty, "fileobj", None)
+        if sock is not None:
+            readable, _, _ = select.select([sock], [], [], 0)
+            if not readable:
+                return b""
+            data = sock.recv(size)
+            # Filter out pywinpty noise
+            if not data or data == b"0011Ignore":
+                return b""
+            logger.debug("PTY read bytes=%d", len(data))
+            return data
+
+        # Fallback to blocking read
+        data = self._pty.read(size)
+        data_bytes = data.encode("utf-8") if isinstance(data, str) else data
+        if data_bytes:
+            logger.debug("PTY read bytes=%d", len(data_bytes))
+        return data_bytes
+
+    def write(self, data: bytes) -> None:
+        """Write to Windows PTY."""
+        if self._pty is None:
+            return
+        text = data.decode("utf-8", errors="replace")
+        logger.debug("PTY write bytes=%d", len(data))
+        self._pty.write(text)
+
+    def resize(self, rows: int, cols: int) -> None:
+        """Resize the PTY window."""
+        if self._pty is None:
+            return
+        self._pty.setwinsize(rows, cols)
+        self._rows = rows
+        self._cols = cols
+        logger.debug("PTY resize rows=%d cols=%d", rows, cols)
+
+    def is_alive(self) -> bool:
+        """Check if the PTY process is still alive."""
+        return self._pty is not None and self._pty.isalive()
+
+    def close(self) -> None:
+        """Close the PTY with grace period before force kill."""
+        if self._pty is None:
+            return
+
+        try:
+            if self._pty.isalive():
+                # Try graceful termination first
+                self._pty.terminate(force=False)
+                # Wait up to 3 seconds for process to exit
+                for _ in range(30):
+                    if not self._pty.isalive():
+                        break
+                    time.sleep(0.1)
+                # Force kill if still alive
+                if self._pty.isalive():
+                    logger.debug("PTY did not exit gracefully, force killing")
+                    self._pty.terminate(force=True)
+        except OSError as e:
+            logger.error("PTY close error: %s", e)
+        finally:
+            self._pty = None
+            logger.info("Windows PTY closed")

porterminal/static/assets/app-BQiuUo6Q.css

@@ -0,0 +1,32 @@
+/**
+ * Copyright (c) 2014 The xterm.js authors. All rights reserved.
+ * Copyright (c) 2012-2013, Christopher Jeffrey (MIT License)
+ * https://github.com/chjj/term.js
+ * @license MIT
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ *
+ * Originally forked from (with the author's permission):
+ *   Fabrice Bellard's javascript vt100 for jslinux:
+ *   http://bellard.org/jslinux/
+ *   Copyright (c) 2011 Fabrice Bellard
+ *   The original design remains. The terminal itself
+ *   has been extended to include xterm CSI codes, among
+ *   other features.
+ */.xterm{cursor:text;position:relative;user-select:none;-ms-user-select:none;-webkit-user-select:none}.xterm.focus,.xterm:focus{outline:none}.xterm .xterm-helpers{position:absolute;top:0;z-index:5}.xterm .xterm-helper-textarea{padding:0;border:0;margin:0;position:absolute;opacity:0;left:-9999em;top:0;width:0;height:0;z-index:-5;white-space:nowrap;overflow:hidden;resize:none}.xterm .composition-view{background:#000;color:#fff;display:none;position:absolute;white-space:nowrap;z-index:1}.xterm .composition-view.active{display:block}.xterm .xterm-viewport{background-color:#000;overflow-y:scroll;cursor:default;position:absolute;right:0;left:0;top:0;bottom:0}.xterm .xterm-screen{position:relative}.xterm .xterm-screen canvas{position:absolute;left:0;top:0}.xterm .xterm-scroll-area{visibility:hidden}.xterm-char-measure-element{display:inline-block;visibility:hidden;position:absolute;top:0;left:-9999em;line-height:normal}.xterm.enable-mouse-events{cursor:default}.xterm.xterm-cursor-pointer,.xterm .xterm-cursor-pointer{cursor:pointer}.xterm.column-select.focus{cursor:crosshair}.xterm .xterm-accessibility:not(.debug),.xterm .xterm-message{position:absolute;left:0;top:0;bottom:0;right:0;z-index:10;color:transparent;pointer-events:none}.xterm .xterm-accessibility-tree:not(.debug) *::selection{color:transparent}.xterm .xterm-accessibility-tree{-webkit-user-select:text;user-select:text;white-space:pre}.xterm .live-region{position:absolute;left:-9999px;width:1px;height:1px;overflow:hidden}.xterm-dim{opacity:1!important}.xterm-underline-1{text-decoration:underline}.xterm-underline-2{text-decoration:double underline}.xterm-underline-3{text-decoration:wavy underline}.xterm-underline-4{text-decoration:dotted underline}.xterm-underline-5{text-decoration:dashed underline}.xterm-overline{text-decoration:overline}.xterm-overline.xterm-underline-1{text-decoration:overline underline}.xterm-overline.xterm-underline-2{text-decoration:overline double underline}.xterm-overline.xterm-underline-3{text-decoration:overline wavy underline}.xterm-overline.xterm-underline-4{text-decoration:overline dotted underline}.xterm-overline.xterm-underline-5{text-decoration:overline dashed underline}.xterm-strikethrough{text-decoration:line-through}.xterm-screen .xterm-decoration-container .xterm-decoration{z-index:6;position:absolute}.xterm-screen .xterm-decoration-container .xterm-decoration.xterm-decoration-top-layer{z-index:7}.xterm-decoration-overview-ruler{z-index:8;position:absolute;top:0;right:0;pointer-events:none}.xterm-decoration-top{z-index:2;position:relative}*{box-sizing:border-box;-webkit-tap-highlight-color:transparent}:root{--bg-primary: #1e1e1e;--bg-elevated: #252525;--bg-surface: #2d2d2d;--bg-gradient-top: #232323;--bg-gradient-bottom: #1a1a1a;--text-primary: #cccccc;--text-high: rgba(255, 255, 255, .9);--text-secondary: rgba(255, 255, 255, .7);--text-muted: rgba(255, 255, 255, .5);--text-disabled: rgba(255, 255, 255, .4);--border-subtle: rgba(255, 255, 255, .05);--border-light: rgba(255, 255, 255, .1);--border-medium: rgba(255, 255, 255, .15);--color-success: rgba(100, 220, 100, .8);--color-success-text: rgba(130, 230, 150, 1);--color-success-bg: rgba(100, 200, 120, .15);--color-danger: rgba(255, 100, 100, .8);--color-danger-muted: rgba(255, 120, 120, .7);--color-danger-text: rgba(255, 150, 150, 1);--color-danger-bg: rgba(255, 80, 80, .15);--color-accent: rgba(80, 160, 255, .8);--color-accent-text: rgba(150, 200, 255, 1);--color-accent-bg: rgba(80, 160, 255, .3);--color-accent-strong: rgba(80, 160, 255, .5);--hover-overlay: rgba(255, 255, 255, .05);--active-overlay: rgba(255, 255, 255, .08);--scrollbar-thumb: rgba(255, 255, 255, .15);--scrollbar-hover: rgba(255, 255, 255, .25);--cursor-color: #aeafad;--selection-bg: rgba(38, 79, 120, .5);--shadow-elevated: 0 4px 16px rgba(0, 0, 0, .5);--glow-success: 0 0 6px rgba(100, 220, 100, .4);--glow-danger: 0 0 6px rgba(255, 100, 100, .4);--glow-accent: 0 0 8px rgba(80, 160, 255, .4);--overlay-bg: rgba(0, 0, 0, .9)}.tool-btn,.tab-btn{-webkit-touch-callout:none}html,body{margin:0;padding:0;height:100%;overflow:hidden;background:var(--bg-primary);color:var(--text-primary);font-family:-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif;font-size:13px;position:fixed;width:100%;touch-action:none;overscroll-behavior:none}#app{display:flex;flex-direction:column;height:100%;height:100dvh;height:100svh;padding-top:env(safe-area-inset-top,0px);padding-bottom:env(safe-area-inset-bottom,0px);overflow:hidden;overscroll-behavior:none}#tab-bar{display:flex;align-items:center;height:30px;min-height:30px;background:linear-gradient(to bottom,var(--bg-gradient-top),var(--bg-gradient-bottom));border-bottom:1px solid var(--border-subtle);overflow-x:auto;overflow-y:hidden;scrollbar-width:none;-ms-overflow-style:none}#tab-bar::-webkit-scrollbar{display:none}.tab-btn{display:flex;align-items:center;gap:2px;height:30px;padding:0 2px 0 8px;background:transparent;border:none;border-right:1px solid var(--border-subtle);color:var(--text-muted);font-size:12px;cursor:pointer;white-space:nowrap;flex-shrink:0;transition:all .15s ease}.tab-btn:active{background:var(--hover-overlay)}.tab-btn.active{background:var(--active-overlay);color:var(--text-high)}.tab-btn.tab-add{color:var(--text-disabled);font-size:18px;padding:0 10px;border-right:none}.tab-btn.tab-add:active{color:#fffc}.tab-label{max-width:100px;overflow:hidden;text-overflow:ellipsis}.tab-close{display:flex;align-items:center;justify-content:center;width:16px;height:16px;margin-left:2px;border-radius:4px;font-size:14px;color:var(--text-disabled);transition:all .15s ease;position:relative;overflow:hidden}.tab-close:before{content:"";position:absolute;top:0;left:0;width:100%;height:100%;background:var(--color-danger-bg);transform:scaleX(0);transform-origin:left;transition:transform .4s ease-out;z-index:-1}.tab-close.holding:before{transform:scaleX(1)}.tab-close.holding{color:var(--color-danger-text)}.tab-close.ready{background:var(--color-danger-bg);color:var(--color-danger-text);animation:pulseReady .3s ease}@keyframes pulseReady{0%,to{transform:scale(1)}50%{transform:scale(1.1)}}#shell-selector{margin-left:auto;display:flex;align-items:center;padding:0 12px;height:30px;border-left:1px solid var(--border-subtle)}#shell-select{background:transparent;border:none;color:#fff9;font-size:11px;padding:4px 8px;cursor:pointer;-webkit-appearance:none;-moz-appearance:none;appearance:none}#connection-dot{width:6px;height:6px;border-radius:50%;background:var(--color-danger);margin-left:12px;margin-right:8px;box-shadow:var(--glow-danger);flex-shrink:0}#connection-dot.connected{background:var(--color-success);box-shadow:var(--glow-success)}#btn-info,#btn-textview,#btn-shutdown{background:transparent;border:none;color:var(--text-disabled);font-size:14px;padding:4px;margin-left:4px;cursor:pointer;transition:color .15s ease}#btn-info:active,#btn-textview:active{color:var(--color-accent)}#btn-shutdown{color:var(--color-danger-muted)}#btn-shutdown:active{color:var(--color-danger-text)}#terminal-container{flex:1;overflow:hidden;background:var(--bg-primary);-webkit-user-select:none;user-select:none;-webkit-touch-callout:none;touch-action:none;overscroll-behavior:contain;contain:strict;isolation:isolate}#terminal{height:100%!important;width:100%!important;contain:layout paint}.terminal-instance{height:100%;width:100%;contain:layout paint}.xterm-screen canvas,.xterm canvas{transform:translateZ(0);backface-visibility:hidden}#terminal .xterm-viewport{background:var(--bg-primary)!important;touch-action:none;overscroll-behavior:contain;contain:paint}#terminal .xterm-viewport::-webkit-scrollbar{width:8px}#terminal .xterm-viewport::-webkit-scrollbar-track{background:transparent}#terminal .xterm-viewport::-webkit-scrollbar-thumb{background:var(--scrollbar-thumb);border-radius:4px}#terminal .xterm-viewport::-webkit-scrollbar-thumb:hover{background:var(--scrollbar-hover)}#terminal .xterm-screen{-webkit-user-select:none;user-select:none;-webkit-touch-callout:none}#terminal .xterm-helper-textarea,.xterm-helper-textarea{-webkit-text-security:none!important;font-size:16px!important;-webkit-user-select:text;user-select:text}.xterm-helper-textarea::-webkit-contacts-auto-fill-button,.xterm-helper-textarea::-webkit-credentials-auto-fill-button{visibility:hidden;display:none!important;pointer-events:none;position:absolute;right:0;width:0;height:0}#toolbar{display:flex;flex-direction:column;background:linear-gradient(to bottom,var(--bg-gradient-top),var(--bg-gradient-bottom));border-top:1px solid var(--border-subtle);padding-bottom:env(safe-area-inset-bottom,0px)}.toolbar-row{display:flex;align-items:center;justify-content:center;height:30px;min-height:30px;gap:0;overflow-x:auto;overflow-y:hidden;scrollbar-width:none;-ms-overflow-style:none}.toolbar-row:first-child{border-bottom:1px solid var(--border-subtle)}.toolbar-row::-webkit-scrollbar{display:none}.tool-btn{display:flex;align-items:center;justify-content:center;height:30px;padding:0 10px;background:transparent;border:none;border-right:1px solid var(--border-subtle);border-radius:0;color:var(--text-muted);font-size:12px;cursor:pointer;transition:all .15s ease;-webkit-touch-callout:none;flex-shrink:0}.tool-btn:active{background:var(--hover-overlay);color:var(--text-high)}.tool-btn.arrow{padding:0 10px}.tool-btn.danger{color:var(--color-danger-muted)}.tool-btn.danger:active{background:var(--color-danger-bg);color:var(--color-danger-text)}.tool-btn.modifier{padding:0 10px}.tool-btn.icon{font-size:18px}.tool-btn.enter{color:#64c878cc}.tool-btn.enter:active{background:var(--color-success-bg);color:var(--color-success-text)}.tool-btn.sticky{background:var(--color-accent-bg);color:var(--color-accent-text)}.tool-btn.locked{background:var(--color-accent-strong);color:#fff;box-shadow:var(--glow-accent)}#disconnect-overlay{position:fixed;top:0;left:0;right:0;bottom:0;background:var(--overlay-bg);z-index:1000;display:flex;align-items:center;justify-content:center}#disconnect-content{text-align:center}#disconnect-icon{font-size:48px;color:var(--color-danger);margin-bottom:16px}#disconnect-text{color:var(--text-secondary);font-size:18px;margin-bottom:24px}#disconnect-retry{padding:12px 32px;background:var(--border-light);border:1px solid var(--border-medium);border-radius:8px;color:#fffc;font-size:14px;cursor:pointer;transition:all .15s ease}#disconnect-retry:active{background:#fff3;color:#fff}#copy-button{position:fixed;top:50%;left:50%;transform:translate(-50%,-50%);padding:8px 20px;background:linear-gradient(to bottom,var(--bg-surface),var(--bg-elevated));border:1px solid var(--border-light);border-radius:6px;color:var(--text-high);font-family:-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif;font-size:13px;font-weight:500;cursor:pointer;z-index:10000;box-shadow:var(--shadow-elevated);display:none;-webkit-tap-highlight-color:transparent;-webkit-touch-callout:none;touch-action:manipulation;transition:all .15s ease}#copy-button:active{background:linear-gradient(to bottom,#3a3a3a,var(--bg-surface));transform:translate(-50%,-50%) scale(.97)}#copy-button.visible{display:block;animation:copyButtonAppear .1s ease-out}#copy-button.success{background:linear-gradient(to bottom,#2a3a2a,#1f2f1f);border-color:#64c8784d;color:var(--color-success-text)}#copy-button.error{background:linear-gradient(to bottom,#3a2a2a,#2f1f1f);border-color:#ff78784d;color:var(--color-danger-text)}@keyframes copyButtonAppear{0%{opacity:0;transform:translate(-50%,-50%) scale(.9)}to{opacity:1;transform:translate(-50%,-50%) scale(1)}}#help-overlay{position:fixed;top:0;left:0;right:0;bottom:0;background:var(--overlay-bg);z-index:1000;display:flex;align-items:center;justify-content:center;padding:20px}#help-content{background:var(--bg-elevated);border:1px solid var(--border-light);border-radius:12px;max-width:320px;width:100%;box-shadow:var(--shadow-elevated);animation:helpAppear .15s ease-out}@keyframes helpAppear{0%{opacity:0;transform:scale(.95)}to{opacity:1;transform:scale(1)}}#help-header{display:flex;align-items:center;justify-content:space-between;padding:12px 16px;border-bottom:1px solid var(--border-subtle);color:var(--text-high);font-size:14px;font-weight:500}#help-close{background:transparent;border:none;color:var(--text-muted);font-size:20px;cursor:pointer;padding:4px 8px;line-height:1}#help-close:active{color:var(--text-high)}#help-body{padding:12px 16px}.help-section{margin-bottom:12px}.help-section:last-child{margin-bottom:0}.help-title{color:var(--text-muted);font-size:10px;text-transform:uppercase;letter-spacing:.5px;margin-bottom:6px}.help-item{display:flex;align-items:center;gap:10px;padding:4px 0;color:var(--text-secondary);font-size:12px}.help-key{display:inline-block;min-width:80px;padding:2px 6px;background:var(--bg-surface);border:1px solid var(--border-subtle);border-radius:4px;color:var(--text-high);font-size:11px;text-align:center}#textview-overlay{position:fixed;top:0;left:0;right:0;bottom:0;background:var(--bg-primary);z-index:1000;display:flex;flex-direction:column;padding-top:env(safe-area-inset-top,0px);padding-bottom:env(safe-area-inset-bottom,0px)}#textview-content{display:flex;flex-direction:column;width:100%;height:100%;background:var(--bg-primary)}#textview-header{display:flex;align-items:center;height:30px;min-height:30px;background:linear-gradient(to bottom,var(--bg-gradient-top),var(--bg-gradient-bottom));border-bottom:1px solid var(--border-subtle);flex-shrink:0}#textview-title{padding:0 12px;color:var(--text-muted);font-size:12px;border-right:1px solid var(--border-subtle)}.textview-zoom-btn{display:flex;align-items:center;justify-content:center;height:30px;padding:0 12px;background:transparent;border:none;border-right:1px solid var(--border-subtle);color:var(--text-muted);font-size:14px;cursor:pointer;transition:all .15s ease}.textview-zoom-btn:active{background:var(--hover-overlay);color:var(--text-high)}#textview-close{margin-left:auto;display:flex;align-items:center;justify-content:center;height:30px;padding:0 12px;background:transparent;border:none;border-left:1px solid var(--border-subtle);color:var(--text-muted);font-size:16px;cursor:pointer;transition:all .15s ease}#textview-close:active{background:var(--hover-overlay);color:var(--text-high)}#textview-body{flex:1;min-height:0;margin:0;padding:8px 12px;background:var(--bg-primary);border:none;color:var(--text-primary);font-family:Menlo,Monaco,Consolas,monospace;font-size:10px;line-height:1.3;overflow-y:auto;white-space:pre-wrap;word-wrap:break-word;user-select:text;-webkit-user-select:text}.hidden{display:none!important}@media(prefers-reduced-motion:reduce){*,*:before,*:after{animation-duration:.01ms!important;transition-duration:.01ms!important}}