docs: README propre pour visiteurs + .gitignore + sortir CLAUDE.md du suivi

- README réécrit (anglais) : setup, quick start, usage, accès Tailscale,
  flags CLI, sécurité, comparatif, section développement
- .gitignore réorganisé par sections (ajout *.tgz, coverage, .claude, .remember, CLAUDE.md)
- CLAUDE.md retiré du suivi git (reste local, non publié)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -41,21 +41,14 @@ jobs:
           cache: npm
       - run: npm ci
       - run: npm run build
-      # @arboretum/shared (dépendance runtime non publiée) est embarquée dans le tarball
-      # via bundleDependencies (matérialisée au prepack). On packe donc UN SEUL tarball
-      # et on l'installe seul, comme un vrai consommateur depuis le registre.
-      - name: Pack tarball
+      # @arboretum/shared est une dépendance runtime non publiée : on packe les
+      # deux tarballs et on les installe ensemble dans un projet vierge.
+      - name: Pack tarballs
         run: |
           mkdir -p /tmp/tarballs
-          npm pack -w @johanleroy/git-arboretum --pack-destination /tmp/tarballs
+          npm pack -w @arboretum/shared -w git-arboretum --pack-destination /tmp/tarballs
           ls -l /tmp/tarballs
-      - name: Assert @arboretum/shared is bundled in the tarball
-        run: |
-          tgz=$(ls /tmp/tarballs/*.tgz)
-          tar -tzf "$tgz" | grep -q 'node_modules/@arboretum/shared/dist/index.js' \
-            || { echo "ERREUR: @arboretum/shared non embarqué dans $tgz"; exit 1; }
-          echo "OK: bundleDependency @arboretum/shared présente dans $tgz"
-      - name: Install tarball in an empty project
+      - name: Install tarballs in an empty project
         run: |
           mkdir /tmp/smoke
           cd /tmp/smoke

.github/workflows/release.yml

@@ -1,42 +0,0 @@
-# Publication du paquet @johanleroy/git-arboretum sur le registre npm du Gitea,
-# déclenchée UNIQUEMENT par un tag vX.Y.Z (jamais sur un push de branche).
-name: Release
-
-on:
-  push:
-    tags: ['v*']
-
-permissions:
-  contents: read
-  packages: write
-
-jobs:
-  publish:
-    name: Publish to Gitea npm registry
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          registry-url: 'https://git.lidge.fr/api/packages/johanleroy/npm/'
-          scope: '@johanleroy'
-          cache: npm
-      - run: npm ci
-      - run: npm run build
-      # Garde-fou : le tag (sans le "v") doit correspondre à la version du paquet.
-      # GITHUB_REF_NAME est une variable d'env du runner (pas d'interpolation ${{ }} dans le shell).
-      - name: Verify tag matches package version
-        run: |
-          pkg=$(node -p "require('./packages/server/package.json').version")
-          tag="${GITHUB_REF_NAME#v}"
-          if [ "$pkg" != "$tag" ]; then
-            echo "ERREUR: tag '$tag' != version paquet '$pkg'"
-            exit 1
-          fi
-          echo "OK: tag $tag == version $pkg"
-      - run: npm publish -w @johanleroy/git-arboretum
-        env:
-          # Mapper le secret du registre (PAT Gitea write:package, ou le token auto
-          # GITEA_TOKEN s'il a ce scope) sur NODE_AUTH_TOKEN lu par le .npmrc de setup-node.
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.gitignore

@@ -5,11 +5,6 @@ node_modules/
 dist/
 packages/server/public/
 *.tgz
-*.tsbuildinfo
-
-# README/LICENSE copiés dans le paquet au prepack (générés depuis la racine)
-packages/server/README.md
-packages/server/LICENSE
 
 # Test / coverage
 coverage/

.npmrc

@@ -1,5 +0,0 @@
-# Route le scope @johanleroy vers le registre npm intégré du Gitea self-hosted.
-# Les dépendances publiques (fastify, node-pty…) restent résolues depuis npmjs.
-# Le token d'auth (_authToken) ne se commit JAMAIS : il vit dans ~/.npmrc (local)
-# ou dans un secret CI (NODE_AUTH_TOKEN écrit par setup-node).
-@johanleroy:registry=https://git.lidge.fr/api/packages/johanleroy/npm/

README.md

@@ -1,10 +1,6 @@
-<p align="center">
-  <img src="brand/arboretum-logo-on-dark.png" alt="Arboretum" width="300">
-</p>
+# Arboretum
 
-<p align="center">
-  A self-hosted web dashboard for your git worktrees and the Claude Code sessions running on them — from any device.
-</p>
+> A self-hosted web dashboard for your git worktrees and the Claude Code sessions running on them — from any device.
 
 **Status: MVP.** The worktree-first dashboard, session discovery & resume, multi-repo worktree lifecycle, live session states, the web terminal, and mobile supervision (installable PWA, Web Push when a session needs you, approve/deny without opening a terminal) are implemented and tested.
 
@@ -40,17 +36,8 @@ A single Node.js daemon you run on your dev machine (`npx git-arboretum`), servi
 
 ### Run it (recommended)
 
-Arboretum is published to a private Gitea npm registry. Point the `@johanleroy` scope at it once per machine — add to `~/.npmrc`:
-
-```
-@johanleroy:registry=https://git.lidge.fr/api/packages/johanleroy/npm/
-//git.lidge.fr/api/packages/johanleroy/npm/:_authToken=<your-gitea-token>
-```
-
-(The `_authToken` line is only needed if the package is private.) Then run it from anywhere:
-
 ```bash
-npx @johanleroy/git-arboretum
+npx git-arboretum
 ```
 
 On first start, Arboretum prints a one-time **access token** and the URL to open:
@@ -98,45 +85,13 @@ tailscale serve --bg 7317
 Then start Arboretum allowing your tailnet origin (the strict Origin check needs to know about it):
 
 ```bash
-npx @johanleroy/git-arboretum --allow-origin https://<machine>.<tailnet>.ts.net
+npx git-arboretum --allow-origin https://<machine>.<tailnet>.ts.net
 ```
 
 Open `https://<machine>.<tailnet>.ts.net` from any device on your tailnet. **Web Push requires HTTPS**, so Tailscale Serve (or another HTTPS front) is also what enables mobile notifications. On **iOS**, install the app to your home screen first, then allow notifications.
 
 > ⚠️ A web terminal is remote code execution **by design**. Never expose Arboretum directly to the public internet.
 
-## Running it as a background service
-
-For a daemon that survives logout and restarts on boot, run it under a **systemd user service**. Install a pinned version globally (`npm i -g @johanleroy/git-arboretum`), then create `~/.config/systemd/user/arboretum.service`:
-
-```ini
-[Unit]
-Description=Arboretum — git worktree & Claude Code dashboard
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-ExecStart=%h/.local/bin/arboretum --port 7317 --allow-origin https://MACHINE.TAILNET.ts.net
-Restart=on-failure
-RestartSec=5
-KillSignal=SIGTERM
-TimeoutStopSec=10
-Environment=NODE_ENV=production
-
-[Install]
-WantedBy=default.target
-```
-
-```bash
-which arboretum                    # adjust ExecStart to the real path if needed
-systemctl --user daemon-reload
-systemctl --user enable --now arboretum
-loginctl enable-linger "$USER"     # start the service at boot, without an open session
-journalctl --user -u arboretum -f  # logs
-```
-
-> The one-time **access token is printed only on the very first run** (empty database). When running as a service, capture it from `journalctl`, or do one manual run before enabling the service. The token is hashed and never shown again.
-
 ## Configuration
 
 All options are CLI flags:
@@ -182,7 +137,7 @@ Arboretum wraps the **interactive** Claude Code CLI in a PTY — the same thing
 
 ## Development
 
-Arboretum is an npm-workspaces monorepo: `@arboretum/shared` (WS/REST protocol, source of truth), `@johanleroy/git-arboretum` (the Fastify daemon, the published package), and `@arboretum/web` (the Vue 3 SPA).
+Arboretum is an npm-workspaces monorepo: `@arboretum/shared` (WS/REST protocol, source of truth), `git-arboretum` (the Fastify daemon, the published package), and `@arboretum/web` (the Vue 3 SPA).
 
 ```bash
 npm run build        # build shared → server → web (order matters)

brand/README.md

@@ -1,42 +0,0 @@
-# Brand assets
-
-Logo and icon assets for Arboretum. Source artwork is a neon circuit-tree (green
-branches, cyan session nodes, a `>_` prompt at the base) on a dark background.
-
-| File | Use |
-| --- | --- |
-| `arboretum-logo-source.png` | Master artwork (opaque dark background). Keep; everything else derives from it. |
-| `arboretum-logo.png` | Full logo, **transparent**. Best on dark surfaces (the wordmark is light). |
-| `arboretum-logo-on-dark.png` | Full logo on the app background `#09090b`. Safe on any theme — used in the README. |
-| `arboretum-mark.png` | Square, **transparent**, tree only (no wordmark). Ideal **Gitea repo avatar** — reads on both light and dark. |
-
-The transparent versions are extracted by luminance (alpha ∝ brightness), the clean
-way to lift glow-on-black artwork: the dark background becomes fully transparent, the
-bright strokes stay opaque, and the glow halos stay semi-transparent so the logo sits
-correctly on any dark surface.
-
-## Gitea
-
-Upload `arboretum-mark.png` as the repository avatar (Settings → uploads a square image;
-the tree-only mark stays legible at small sizes and works on Gitea's light and dark themes).
-Use `arboretum-logo.png` (transparent) on dark pages, or `arboretum-logo-on-dark.png`
-when the surrounding background might be light.
-
-## App / favicon assets
-
-The web-facing assets live in `packages/web/public/` and are wired into the SPA:
-
-- `icon.svg` — scalable favicon, redrawn to match the brand (vector, glow, `>_`).
-- `icon-192.png` / `icon-512.png` — maskable PWA icons (tree on `#09090b`, content in the safe zone).
-- `apple-touch-icon.png` — iOS home-screen icon (180×180).
-- `favicon.ico` — multi-size favicon (16/32/48), transparent.
-- `logo.png` — transparent full logo for in-app use.
-
-## Regenerate
-
-```bash
-python3 brand/build-assets.py            # uses brand/arboretum-logo-source.png
-python3 brand/build-assets.py other.png  # or pass another source
-```
-
-Requires Python with Pillow + numpy. Writes both `brand/` and `packages/web/public/`.

brand/build-assets.py

@@ -1,100 +0,0 @@
-#!/usr/bin/env python3
-"""Génère le jeu complet d'assets de marque Arboretum depuis le logo source.
-
-Source : un PNG « néon sur fond sombre » (arbre-circuit + texte « Arboretum »).
-On extrait l'alpha par luminance (méthode propre pour ce type d'artwork glow-on-black) :
-chaque pixel reçoit une transparence proportionnelle à sa luminosité, ce qui rend le
-fond sombre totalement transparent, garde le cœur des traits opaque et conserve le halo
-en semi-transparent — donc lisible sur n'importe quel fond.
-
-Sorties :
-  brand/arboretum-logo.png          logo complet transparent (haute déf) — Gitea / README
-  brand/arboretum-mark.png          marque carrée transparente (arbre seul) — avatar Gitea
-  brand/arboretum-logo-on-dark.png  logo complet sur fond #09090b (fallback fond clair)
-  packages/web/public/logo.png      logo complet transparent, optimisé pour l'UI
-  packages/web/public/icon-192.png  icône PWA maskable (arbre, fond #09090b)
-  packages/web/public/icon-512.png  icône PWA maskable (arbre, fond #09090b)
-  packages/web/public/apple-touch-icon.png  icône iOS 180 (arbre, fond #09090b)
-  packages/web/public/favicon.ico   favicon transparent (arbre, 16/32/48)
-
-Usage : python3 brand/build-assets.py <source.png>
-"""
-import sys
-import numpy as np
-from PIL import Image
-
-SRC = sys.argv[1] if len(sys.argv) > 1 else "brand/arboretum-logo-source.png"
-BG = (9, 9, 11)  # #09090b — couleur de fond du dashboard (manifest background_color/theme_color)
-
-# Découpe verticale arbre / texte (mesurée sur la source)
-TREE_Y = (130, 930)   # arbre + curseur >_
-FULL_Y = (130, 1060)  # arbre + texte
-
-
-def extract_rgba(path):
-    """Charge la source et calcule l'alpha par luminance (floor + knee)."""
-    rgb = np.asarray(Image.open(path).convert("RGB"), dtype=np.float32)
-    maxc = rgb.max(axis=2)
-    # floor > canal max du fond (~14) pour annuler totalement le fond ; knee = seuil d'opacité.
-    floor, knee = 20.0, 185.0  # < floor : transparent ; >= knee : opaque
-    alpha = np.clip((maxc - floor) / (knee - floor), 0.0, 1.0) * 255.0
-    alpha[alpha < 8] = 0.0  # gate anti-bruit : un vrai fond transparent et une bbox serrée
-    out = np.dstack([rgb, alpha]).astype(np.uint8)
-    return Image.fromarray(out, "RGBA")
-
-
-def crop_band(rgba, y0, y1):
-    """Recadre une bande verticale puis serre sur le contenu non transparent."""
-    band = rgba.crop((0, y0, rgba.width, y1))
-    bbox = band.getbbox()  # bbox sur l'alpha
-    return band.crop(bbox)
-
-
-def square(content, pad_frac, bg=None):
-    """Centre `content` dans un carré ; bg=None → transparent, sinon fond plein."""
-    side = round(max(content.size) / (1 - 2 * pad_frac))
-    fill = (0, 0, 0, 0) if bg is None else (*bg, 255)
-    canvas = Image.new("RGBA", (side, side), fill)
-    canvas.paste(content, ((side - content.width) // 2, (side - content.height) // 2), content)
-    return canvas
-
-
-def save(img, path, size=None):
-    if size:
-        img = img.resize((size, size), Image.LANCZOS)
-    img.save(path)
-    print(f"  {path}  {img.size[0]}x{img.size[1]}")
-
-
-def main():
-    rgba = extract_rgba(SRC)
-    full = crop_band(rgba, *FULL_Y)   # logo complet transparent serré
-    tree = crop_band(rgba, *TREE_Y)   # arbre seul transparent serré
-
-    print("brand/")
-    save(full, "brand/arboretum-logo.png")
-    save(square(tree, 0.08), "brand/arboretum-mark.png")
-    # logo complet sur fond sombre (pour surfaces claires où la transparence gêne)
-    on_dark = Image.new("RGBA", (full.width + 160, full.height + 160), (*BG, 255))
-    on_dark.paste(full, (80, 80), full)
-    save(on_dark, "brand/arboretum-logo-on-dark.png")
-
-    print("packages/web/public/")
-    # logo UI : largeur max 600 px, transparent
-    ui = full.copy()
-    ui.thumbnail((600, 600), Image.LANCZOS)
-    ui.save("packages/web/public/logo.png")
-    print(f"  packages/web/public/logo.png  {ui.size[0]}x{ui.size[1]}")
-    # icônes maskable : arbre dans la zone sûre (contenu ~80 %), fond #09090b
-    mask = square(tree, 0.12, bg=BG)
-    save(mask, "packages/web/public/icon-192.png", 192)
-    save(mask, "packages/web/public/icon-512.png", 512)
-    save(mask, "packages/web/public/apple-touch-icon.png", 180)
-    # favicon : arbre transparent, multi-tailles
-    fav = square(tree, 0.04)
-    fav.save("packages/web/public/favicon.ico", sizes=[(16, 16), (32, 32), (48, 48)])
-    print("  packages/web/public/favicon.ico  16/32/48")
-
-
-if __name__ == "__main__":
-    main()

package-lock.json

@@ -848,10 +848,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/@johanleroy/git-arboretum": {
-      "resolved": "packages/server",
-      "link": true
-    },
     "node_modules/@jridgewell/gen-mapping": {
       "version": "0.3.13",
       "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
@@ -3007,6 +3003,10 @@
         "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
       }
     },
+    "node_modules/git-arboretum": {
+      "resolved": "packages/server",
+      "link": true
+    },
     "node_modules/github-from-package": {
       "version": "0.0.0",
       "resolved": "https://registry.npmjs.org/github-from-package/-/github-from-package-0.0.0.tgz",
@@ -4959,11 +4959,8 @@
       }
     },
     "packages/server": {
-      "name": "@johanleroy/git-arboretum",
-      "version": "1.0.0",
-      "bundleDependencies": [
-        "@arboretum/shared"
-      ],
+      "name": "git-arboretum",
+      "version": "0.1.0",
       "license": "MIT",
       "dependencies": {
         "@arboretum/shared": "0.1.0",

package.json

@@ -10,11 +10,11 @@
     "node": ">=22.16"
   },
   "scripts": {
-    "build": "npm run build -w @arboretum/shared -w @johanleroy/git-arboretum -w @arboretum/web",
+    "build": "npm run build -w @arboretum/shared -w git-arboretum -w @arboretum/web",
     "typecheck": "tsc -b packages/shared packages/server",
-    "pack": "npm run build && npm pack -w @johanleroy/git-arboretum",
+    "pack": "npm run build && npm pack -w git-arboretum",
     "test": "vitest run",
-    "dev:server": "npm run dev -w @johanleroy/git-arboretum",
+    "dev:server": "npm run dev -w git-arboretum",
     "dev:web": "npm run dev -w @arboretum/web"
   },
   "devDependencies": {

packages/server/package.json

@@ -1,55 +1,26 @@
 {
-  "name": "@johanleroy/git-arboretum",
-  "version": "1.0.0",
+  "name": "git-arboretum",
+  "version": "0.1.0",
   "description": "Self-hosted web dashboard for git worktrees and the Claude Code sessions running on them",
   "license": "MIT",
   "type": "module",
-  "author": "Johan LEROY <contact@johanleroy.fr>",
-  "homepage": "https://git.lidge.fr/johanleroy/arboretum#readme",
-  "repository": {
-    "type": "git",
-    "url": "git+https://git.lidge.fr/johanleroy/arboretum.git",
-    "directory": "packages/server"
-  },
-  "bugs": {
-    "url": "https://git.lidge.fr/johanleroy/arboretum/issues"
-  },
-  "keywords": [
-    "git",
-    "worktree",
-    "claude",
-    "claude-code",
-    "dashboard",
-    "self-hosted",
-    "pty",
-    "terminal",
-    "cli",
-    "daemon",
-    "pwa"
-  ],
   "bin": {
     "arboretum": "./dist/index.js"
   },
   "main": "./dist/app.js",
   "files": [
-    "dist/**/*.js",
+    "dist",
     "public"
   ],
   "engines": {
     "node": ">=22.16"
   },
-  "publishConfig": {
-    "registry": "https://git.lidge.fr/api/packages/johanleroy/npm/"
-  },
   "scripts": {
     "build": "tsc -b",
     "dev": "tsc -b --watch & node --watch dist/index.js",
-    "prepack": "node scripts/copy-web.mjs && node scripts/vendor-shared.mjs && node scripts/copy-meta.mjs",
+    "prepack": "node scripts/copy-web.mjs",
     "test": "vitest run"
   },
-  "bundleDependencies": [
-    "@arboretum/shared"
-  ],
   "dependencies": {
     "@arboretum/shared": "0.1.0",
     "@fastify/cookie": "^11.0.0",

packages/server/scripts/copy-meta.mjs

@@ -1,33 +0,0 @@
-#!/usr/bin/env node
-// Copie le README et la LICENSE racine dans packages/server/ avant le pack, pour que
-// la page du paquet (registre Gitea) ne soit pas nue et que la licence soit jointe.
-// npm inclut automatiquement README* et LICENSE* dans le tarball s'ils sont présents.
-// Branché sur le hook "prepack". Ces copies sont gitignorées (générées, non versionnées).
-import { copyFileSync, existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { join, dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const serverDir = join(dirname(fileURLToPath(import.meta.url)), '..');
-const rootDir = join(serverDir, '..', '..');
-
-// README : réécrit les chemins d'images relatifs (brand/…) en URL absolue Gitea raw,
-// sinon le logo est cassé hors du repo (sur la page du paquet).
-const readmeSrc = join(rootDir, 'README.md');
-if (existsSync(readmeSrc)) {
-  const rawBase = 'https://git.lidge.fr/johanleroy/arboretum/raw/branch/main/';
-  const readme = readFileSync(readmeSrc, 'utf8').replaceAll('src="brand/', `src="${rawBase}brand/`);
-  writeFileSync(join(serverDir, 'README.md'), readme);
-  console.log('copy-meta: README.md copié (chemins images réécrits en absolu)');
-} else {
-  console.error(`copy-meta: ${readmeSrc} introuvable`);
-  process.exit(1);
-}
-
-const licenseSrc = join(rootDir, 'LICENSE');
-if (existsSync(licenseSrc)) {
-  copyFileSync(licenseSrc, join(serverDir, 'LICENSE'));
-  console.log('copy-meta: LICENSE copié');
-} else {
-  console.error(`copy-meta: ${licenseSrc} introuvable`);
-  process.exit(1);
-}

packages/server/scripts/vendor-shared.mjs

@@ -1,43 +0,0 @@
-#!/usr/bin/env node
-// Embarque @arboretum/shared (dépendance runtime non publiée) DANS le tarball npm.
-// Branché sur le hook "prepack", aux côtés de bundleDependencies dans package.json.
-//
-// Pourquoi un vrai dossier et pas le symlink workspace : sous npm workspaces, shared
-// est seulement symlinké dans le node_modules racine ; `npm pack` n'embarque une
-// bundleDependency que si elle existe comme VRAI dossier dans le node_modules du
-// paquet packé (packages/server/node_modules/@arboretum/shared). On le matérialise ici.
-import { cpSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import { join, dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const serverDir = join(dirname(fileURLToPath(import.meta.url)), '..');
-const sharedDir = join(serverDir, '..', 'shared');
-const sharedDist = join(sharedDir, 'dist');
-const target = join(serverDir, 'node_modules', '@arboretum', 'shared');
-
-if (!existsSync(sharedDist)) {
-  console.error(
-    `vendor-shared: ${sharedDist} introuvable — lance "npm run build" (shared doit être compilé) avant le pack.`,
-  );
-  process.exit(1);
-}
-
-// package.json minimal et déterministe : on reprend les champs de résolution réels de
-// shared (version incluse, pour rester synchro), sans scripts ni files inutiles au runtime.
-const shared = JSON.parse(readFileSync(join(sharedDir, 'package.json'), 'utf8'));
-const minimal = {
-  name: shared.name,
-  version: shared.version,
-  type: shared.type,
-  main: shared.main,
-  types: shared.types,
-  exports: shared.exports,
-};
-
-// Idempotent : on repart d'un dossier propre à chaque pack.
-rmSync(target, { recursive: true, force: true });
-mkdirSync(target, { recursive: true });
-writeFileSync(join(target, 'package.json'), JSON.stringify(minimal, null, 2) + '\n');
-cpSync(sharedDist, join(target, 'dist'), { recursive: true });
-
-console.log(`vendor-shared: embarqué ${shared.name}@${shared.version} -> ${target}`);

packages/server/src/app.ts

@@ -17,7 +17,6 @@ import { registerSessionRoutes } from './routes/sessions.js';
 import { registerRepoRoutes } from './routes/repos.js';
 import { registerWorktreeRoutes } from './routes/worktrees.js';
 import { registerPushRoutes } from './routes/push.js';
-import { registerFsRoutes } from './routes/fs.js';
 import { registerWsGateway } from './ws/gateway.js';
 
 declare module 'fastify' {
@@ -93,7 +92,6 @@ export function buildApp(config: Config, db: Db, serverVersion: string): AppBund
   registerRepoRoutes(app, worktrees);
   registerWorktreeRoutes(app, worktrees);
   registerPushRoutes(app, push);
-  registerFsRoutes(app);
   // La route websocket doit être déclarée APRÈS le chargement du plugin (contexte
   // encapsulé) — sinon le handler reçoit la signature REST (request, reply).
   void app.register(async (scoped) => {

packages/server/src/routes/fs.ts

@@ -1,82 +0,0 @@
-import type { FastifyInstance } from 'fastify';
-import { readdir, stat } from 'node:fs/promises';
-import { existsSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { join, dirname, resolve } from 'node:path';
-import type { FsEntry, FsListResponse } from '@arboretum/shared';
-
-/**
- * Navigation du système de fichiers pour le sélecteur de dossier côté web.
- * Ne renvoie QUE des noms de sous-dossiers (jamais de contenu de fichier) ; authentifié
- * par le hook preValidation global comme tout /api/**. Un utilisateur authentifié dispose
- * déjà d'un terminal (RCE par conception) : lister des dossiers n'élargit pas le modèle de menace.
- *
- * GET /api/v1/fs/list?path=<abs>&markRepos=1&showHidden=1
- * - path absent → home de l'utilisateur
- * - markRepos   → annote les sous-dossiers qui sont des dépôts git (présence d'un `.git`)
- * - showHidden  → inclut les dotfiles (masqués par défaut)
- */
-export function registerFsRoutes(app: FastifyInstance): void {
-  app.get('/api/v1/fs/list', async (req, reply) => {
-    const q = req.query as { path?: string; markRepos?: string; showHidden?: string };
-    const raw = q.path && q.path.length > 0 ? q.path : homedir();
-    if (!raw.startsWith('/')) {
-      return reply.status(400).send({ error: { code: 'BAD_PATH', message: 'path must be absolute' } });
-    }
-    // resolve() normalise et clampe à la racine : aucun échappement d'arborescence via `..`.
-    const abs = resolve(raw);
-
-    let st;
-    try {
-      st = await stat(abs);
-    } catch (err) {
-      const code = (err as NodeJS.ErrnoException).code;
-      if (code === 'ENOENT') return reply.status(404).send({ error: { code: 'NOT_FOUND', message: `No such directory: ${abs}` } });
-      if (code === 'EACCES') return reply.status(403).send({ error: { code: 'FORBIDDEN', message: `Permission denied: ${abs}` } });
-      return reply.status(400).send({ error: { code: 'BAD_PATH', message: (err as Error).message } });
-    }
-    if (!st.isDirectory()) {
-      return reply.status(400).send({ error: { code: 'NOT_A_DIRECTORY', message: `Not a directory: ${abs}` } });
-    }
-
-    const markRepos = q.markRepos === '1' || q.markRepos === 'true';
-    const showHidden = q.showHidden === '1' || q.showHidden === 'true';
-
-    let dirents;
-    try {
-      dirents = await readdir(abs, { withFileTypes: true });
-    } catch (err) {
-      const code = (err as NodeJS.ErrnoException).code;
-      if (code === 'EACCES') return reply.status(403).send({ error: { code: 'FORBIDDEN', message: `Permission denied: ${abs}` } });
-      return reply.status(400).send({ error: { code: 'BAD_PATH', message: (err as Error).message } });
-    }
-
-    const entries: FsEntry[] = [];
-    for (const d of dirents) {
-      if (!showHidden && d.name.startsWith('.')) continue;
-      let isDir = d.isDirectory();
-      // symlink éventuel vers un dossier : résolu par stat (tolérant aux liens cassés).
-      if (!isDir && d.isSymbolicLink()) {
-        try {
-          isDir = (await stat(join(abs, d.name))).isDirectory();
-        } catch {
-          isDir = false;
-        }
-      }
-      if (!isDir) continue;
-      const full = join(abs, d.name);
-      const entry: FsEntry = { name: d.name, path: full };
-      if (markRepos && existsSync(join(full, '.git'))) entry.isRepo = true;
-      entries.push(entry);
-    }
-    entries.sort((a, b) => a.name.toLowerCase().localeCompare(b.name.toLowerCase()));
-
-    const res: FsListResponse = {
-      path: abs,
-      parent: abs === '/' ? null : dirname(abs),
-      home: homedir(),
-      entries,
-    };
-    return reply.send(res);
-  });
-}

packages/server/test/dialog-detection.test.ts

@@ -6,7 +6,7 @@ import type { DialogKind } from '@arboretum/shared';
 import { ScreenReader } from '../src/core/screen-reader.js';
 import { classifyDialog, parseOptions, type ClassifiedDialog } from '../src/core/dialog-classifier.js';
 
-const capturesDir = join(dirname(fileURLToPath(import.meta.url)), 'fixtures', 'dialogs');
+const capturesDir = join(dirname(fileURLToPath(import.meta.url)), '..', '..', '..', 'spikes', 's3-tui', 'captures');
 
 /** Rejoue un flux PTY brut par segments (comme l'adapter en prod) et collecte écran+dialogue détecté. */
 async function replay(fixture: string): Promise<Array<{ dialog: ClassifiedDialog; text: string }>> {
@@ -26,7 +26,7 @@ async function replay(fixture: string): Promise<Array<{ dialog: ClassifiedDialog
 
 describe('ScreenReader (@xterm/headless) — anti strip-ANSI naïf', () => {
   it('préserve les espaces du dialogue (« Do you want to create », pas « Doyouwant »)', async () => {
-    const seen = await replay('perm-write2.raw');
+    const seen = await replay('perm-write2.raw.log');
     expect(seen.length).toBeGreaterThan(0);
     expect(seen.some((s) => /Do you want to create/.test(s.text))).toBe(true);
   });
@@ -57,7 +57,7 @@ describe('classifyDialog — unitaire (lignes synthétiques)', () => {
 
 describe('détection sur fixtures réelles S3 (replay headless)', () => {
   it('perm-write2 → permission avec options Yes/…/No, option 1 sélectionnée', async () => {
-    const perms = (await replay('perm-write2.raw')).filter((s) => s.dialog.kind === 'permission');
+    const perms = (await replay('perm-write2.raw.log')).filter((s) => s.dialog.kind === 'permission');
     expect(perms.length).toBeGreaterThan(0);
     const withOpts = perms.find((s) => s.dialog.options.length >= 2);
     expect(withOpts).toBeDefined();
@@ -68,13 +68,13 @@ describe('détection sur fixtures réelles S3 (replay headless)', () => {
   });
 
   it('ask2 → question avec une option « Rouge »', async () => {
-    const qs = (await replay('ask2.raw')).filter((s) => s.dialog.kind === 'question');
+    const qs = (await replay('ask2.raw.log')).filter((s) => s.dialog.kind === 'question');
     expect(qs.length).toBeGreaterThan(0);
     expect(qs.some((s) => s.dialog.options.some((o) => /Rouge/.test(o.label)))).toBe(true);
   });
 
   it('trust → dialogue trust détecté', async () => {
-    const seen = await replay('trust.raw');
+    const seen = await replay('trust.raw.log');
     expect(seen.some((s) => s.dialog.kind === 'trust')).toBe(true);
   });
 });
@@ -83,10 +83,10 @@ describe('détection sur fixtures réelles S3 (replay headless)', () => {
 // classifié de façon fiable (cf. « reste à faire P4 » du verdict S3 : couvrir le refus Esc et le plan).
 describe('campagne de fiabilité P4-C — tous les types de dialogue', () => {
   const realCaptures: Array<{ fixture: string; kind: DialogKind }> = [
-    { fixture: 'trust.raw', kind: 'trust' },
-    { fixture: 'perm-write2.raw', kind: 'permission' },
-    { fixture: 'perm-bash2.raw', kind: 'permission' },
-    { fixture: 'ask2.raw', kind: 'question' },
+    { fixture: 'trust.raw.log', kind: 'trust' },
+    { fixture: 'perm-write2.raw.log', kind: 'permission' },
+    { fixture: 'perm-bash2.raw.log', kind: 'permission' },
+    { fixture: 'ask2.raw.log', kind: 'question' },
   ];
   for (const c of realCaptures) {
     it(`${c.fixture} → ${c.kind} détecté (capture réelle)`, async () => {
@@ -97,7 +97,7 @@ describe('campagne de fiabilité P4-C — tous les types de dialogue', () => {
 
   it('refus par Esc (deny-esc2) : un dialogue est bien affiché avant l’annulation', async () => {
     // un dialogue détecté = l'utilisateur peut répondre « deny » (Esc) depuis le mobile sans terminal.
-    const seen = await replay('deny-esc2.raw');
+    const seen = await replay('deny-esc2.raw.log');
     expect(seen.length).toBeGreaterThan(0);
   });
 

packages/server/test/fixtures/dialogs/ask2.raw

@@ -1,572 +0,0 @@
-78[?25h[?25l[?2004h[?1004h[?2031h[?2026h␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-Accessingworkspace:␍
-␍
-/tmp/spike-s3-ask2␍
-␍
-Quicksafetycheck:Isthisaprojectyoucreatedoroneyoutrust?(Likeyourowncode,awell-knownopensource␍
-project,orworkfromyourteam).Ifnot,takeamomenttoreviewwhat'sinthisfolderfirst.␍
-␍
-ClaudeCode'llbeabletoread,edit,andexecutefileshere.␍
-␍
-]8;id=zaxmda;https://code.claude.com/docs/en/securitySecurity guide]8;;␍
-␍
-❯1.Yes,Itrustthisfolder␍
-2.No,exit␍
-␍
-Entertoconfirm·Esctocancel␍
-[?2026l[>0q[?2026h␍Yes, I trust this folder✔␍
-
-
-
-[?2026l]0;✳ Claude Code[?2026h␍╭───Claude Codev2.1.173─────────────────────────────────────────────────────────────────────────────────────────────╮␍│                                                    │ Tips for getting started                                        │␍│                 Welcome back Johan!│Run/inittocreateaCLAUDE.mdfilewithinstructionsforCla…│␍││───────────────────────────────────────────────────────────────│␍│                   ▐▛███▜▌│What's new│␍│▝▜█████▛▘│FixedFable5modelnameswitha`[1m]`suffixnotbeingnorma…│␍│                     ▘▘ ▝▝                    │ Fixed a spurious "sandbox depenncies missing"startup warnin…│␍│   Opus 4.8 (1M context) with xh… · Claude Team ·   │ Sub-agnts can nowspawn their own sub-agents(upto5levels…│␍│Beehelp│/release-notes for more│␍│               /tmp/spike-s3-ask2              │       │␍╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯␍␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍❯ Try "fix lint errors"␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍? for shortcuts · ← for agents◉ xhigh · /effort␍[?25h[?2026l[?2026h[?25l␍␍
-
-
-[?25h[?2026l[?2026h[?25l␍ ⚠ 2 setup issues: MCP · /doctor␍␍ ▎ Meet Fable 5, our newest model for complex, long-running work. Try anytime with /model.␍▎ Included in yourplan limits until Jun 22, then switch to usage credits to continue.␍
-␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-?forshortcuts·←foragents◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍UsetheAskUserQuestiontooltoaskmewhetherIpreferredorblue.Offerexactlythosetwooptions.␍                              ␍
-[?25h[?2026l]0;⠂ Claude Code[?2026h[?25l␍❯ Use the AskUserQuestion tool to ask me whether I prefer red or blue. Offer exactly those two options.                 ␍␍✽ Simmering… ␍␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerrupt◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍·␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Claude Code]0;⠐ Demander la couleur préférée red ou blue[?2026h[?25l␍S␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍i␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍Smm␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍ie␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢mr␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍mein␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍rg␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*i…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶g…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✽␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Demander la couleur préférée red ou blue[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍S␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*i␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍m␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢Sm␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍imer␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍mi␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Demander la couleur préférée red ou blue[?2026h[?25l␍·en␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍Simrin(2s · thinking with xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍m3thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢i↓ 38 tokens · thinking with xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍57thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*S6␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶74␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻91thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Demander la couleur préférée red ou blue[?2026h[?25l␍✽9thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍102 tokens · thinking with xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍44thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍6thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻19thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶2thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍36␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*41␍
-
-
-
-
-
-[?25h[?2026l]0;✳ Demander la couleur préférée red ou blue[?2026h[?25l␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍ ☐ Couleur ␍Préférez-vous le rouge ou le bleu ?␍␍❯ 1. Rouge␍   Vous préférez le rouge.␍
-2.Bleu␍
-Vouspréférezlebleu.␍
-3.Typesomething.␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-4.Chataboutthis␍
-␍
-Entertoselect·↑/↓tonavigate·Esctocancel␍
-[?2026l(B[?2026h␍ Rouge␍❯Bleu␍
-
-
-
-
-
-
-[?2026l]0;⠂ Demander la couleur préférée red ou blue[?2026h╭───ClaudeCodev2.1.173─────────────────────────────────────────────────────────────────────────────────────────────╮␍
-││Tipsforgettingstarted│␍
-│WelcomebackJohan!│Run/inittocreateaCLAUDE.mdfilewithinstructionsforCla…│␍
-││───────────────────────────────────────────────────────────────│␍
-│ ▐▛███▜▌│What'snew│␍
-│▝▜█████▛▘│FixedFable5modelnameswitha`[1m]`suffixnotbeingnorma…│␍
-│ ▘▘▝▝│Fixedaspurious"sandboxdependenciesmissing"startupwarnin…│␍
-│Opus4.8(1Mcontext)withxh…·ClaudeTeam·│Sub-agentscannowspawntheirownsub-agents(upto5levels…│␍
-│Beehelp│/release-notesformore│␍
-│/tmp/spike-s3-ask2││␍
-╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯␍
-␍
-⚠2setupissues:MCP ·/doctor␍
-␍
-▎MeetFable5,ournewestmodelforcomplex,long-runningwork.Tryanytimewith/model.␍
-▎IncludedinyourplanlimitsuntilJun22,thenswitchtousagecreditstocontinue.␍
-␍
-❯ Use the AskUserQuestion tool to ask me whether I prefer red or blue. Offer exactly those two options.                 ␍
-␍
-✻Bunning… (4s·↓215tokens)␍
-␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerruptYou'veused96%ofyoursessionlimit·resets7pm(Europe/Paris)·/usage-creditstorequestmore␍
-[?25h[?2026l[?2026h[?25l␍✶Bunning…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍● User answered Claude's questions:␍  ⎿  · Préférez-vous le rouge ou le bleu ? → Bleu␍␍✢ Bunning… (4s · ↑215 tokens)␍␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerruptYou'veused96%ofyoursessionlimit·resets7pm(Europe/Paris)·/usage-creditstorequestmore␍
-[?25h[?2026l[?2026h[?25l␍nn␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍·nig…5␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍g␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Demander la couleur préférée red ou blue[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍6␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✽␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍B␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍un␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍Bn␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍ui␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍nnng␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻i…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍n␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Demander la couleur préférée red ou blue[?2026h[?25l␍g␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍7␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍·␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Demander la couleur préférée red ou blue[?2026h[?25l␍Bu␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*Bn␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍ui␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶nnng␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍i…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍g…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✽8␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍●Vous avez choisile bleu 🔵␍✽ Bunning… (running stop hook · 8s · ↓ 218 tokens)␍␍❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerruptYou'veused96%ofyoursessionlimit·resets7pm(Europe/Paris)·/usage-creditstorequestmore␍
-[?25h[?2026l]0;✳ Demander la couleur préférée red ou blue[?2026h[?25l␍✻Sautéed fo 8s␍❯ ␍? for shortcuts · ← for agents␍
-You'veused96%ofyoursessionlimit·resets7pm(Europe/Paris)·/usage-creditstorequestmore␍
-[?25h[?2026l

packages/server/test/fixtures/dialogs/deny-esc2.raw

@@ -1,482 +0,0 @@
-78[?25h[?25l[?2004h[?1004h[?2031h[?2026h␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-Accessingworkspace:␍
-␍
-/tmp/spike-s3-deny2␍
-␍
-Quicksafetycheck:Isthisaprojectyoucreatedoroneyoutrust?(Likeyourowncode,awell-knownopensource␍
-project,orworkfromyourteam).Ifnot,takeamomenttoreviewwhat'sinthisfolderfirst.␍
-␍
-ClaudeCode'llbeabletoread,edit,andexecutefileshere.␍
-␍
-]8;id=zaxmda;https://code.claude.com/docs/en/securitySecurity guide]8;;␍
-␍
-❯1.Yes,Itrustthisfolder␍
-2.No,exit␍
-␍
-Entertoconfirm·Esctocancel␍
-[?2026l[>0q[?2026h␍Yes, I trust this folder✔␍
-
-
-
-[?2026l]0;✳ Claude Code[?2026h␍╭───Claude Codev2.1.173─────────────────────────────────────────────────────────────────────────────────────────────╮␍│                                                    │ Tips for getting started                                        │␍│                 Welcome back Johan!│Run/inittocreateaCLAUDE.mdfilewithinstructionsforCla…│␍││───────────────────────────────────────────────────────────────│␍│                    ▐▛███▜▌│What's new│␍│▝▜█████▛▘│FixedFable5modelnameswitha`[1m]`suffixnotbeingnorma…│␍│                     ▘▘ ▝▝                    │ Fixed a spurious "sandbox depenncies missing"startup warnin…│␍│   Opus 4.8 (1M context) with xh… · Claude Team ·   │ Sub-agnts can nowspawn their own sub-agents(upto5levels…│␍│Beehelp│/release-notes for more│␍│               /tmp/spike-s3-deny2             │       │␍╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯␍␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍❯ Try "create a util logging.py that..."␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍? for shortcuts · ← for agents◉ xhigh · /effort␍[?25h[?2026l[?2026h[?25l␍␍
-
-
-[?25h[?2026l[?2026h[?25l␍ ⚠ 2 setup issues: MCP · /doctor␍␍ ▎ Meet Fable 5, our newest model for complex, long-running work. Try anytime with /model.␍▎ Included in yourplan limits until Jun 22, then switch to usage credits to continue.␍
-␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-?forshortcuts·←foragents◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍Runthisexactbashcommandandshowmeitsoutput:node-e"console.log('should-be-denied')"—donotdoanything␍  else.␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-◉xhigh·/effort␍
-[?25h[?2026l]0;⠂ Claude Code[?2026h[?25l␍❯ Run this exact bash command and show me its output: node -e "console.log('should-be-denied')" — do not do anything    ␍  else.                                                                                                                 ␍␍✽ Unfurling… ␍␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerrupt◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍·␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Claude Code[?2026h[?25l␍U␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Execute Node.js command in bash[?2026h[?25l␍n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍Ufu␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍nr␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢fl␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍urin␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍lg␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*i…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶g…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✽␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Execute Node.js command in bash[?2026h[?25l␍rli␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍(2s · thinking with xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻uithinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶fl␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢nrthinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Execute Node.js command in bash[?2026h[?25l␍·Uuthinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍3␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍f↓ 25 tokens · thinking with xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍50thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢n76thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍8thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*U93␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶104 tokens · thinking with xhigh efort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻16thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍●Bash(node -e "console.log('should-be-denied')")␍  ⎿  Waiting…␍␍✻ Unfurling… (3s · ↓116 tokens · thinking with xhigh effort)␍␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerrupt◉xhigh·/effort␍
-[?25h[?2026l]0;⠂ Execute Node.js command in bash[?2026h[?25l␍ ␍Runn␍)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍Unfurling…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✽Unfurling…35␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍●␍
-
-
-
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍●␍should-be-denied␍Unfurling…↑41 · thinking with xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍6thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍U50thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍4thought for 1s)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍nf7␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍Uu␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍nr8␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻fl60␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍urin␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶lg1␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍i…2␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*ng3␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍…4␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢5␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍6␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Execute Node.js command in bash[?2026h[?25l␍7␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍·8␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍9␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍70␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍1␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍52␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢3␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍U␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍f␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻Unur␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍fur↓␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Execute Node.js command in bash[?2026h[?25l␍●Voici la sortie dela commande :␍  should-be-denied␍␍✻ Unfurling… (5s · ↓ 173 tokens · thought for 1s)␍␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerrupt◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍4␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍Unfurling…running stop hook5s · ↓ 174 tokens · thought for 1s)␍
-
-
-
-
-
-[?25h[?2026l]0;✳ Execute Node.js command in bash[?2026h[?25l␍✻Churned for 5s␍❯ ␍? for shortcuts · ← for agents␍
-[?25h[?2026l[?2026h[?25l␍␍
-You'veused94%ofyoursessionlimit·resets7pm(Europe/Paris)·/usage-creditstorequestmore␍
-[?25h[?2026l[?2026h[?25l[?25h[?2026l[?1006l[?1003l[?1002l[?1000l(B[>4m[<u[?1004l[?2031l[?2004l[?25h78]0;
-Resume this session with:
-claude --resume 68c4db8a-2120-4ab9-9c03-cd3313675be5
-

packages/server/test/fixtures/dialogs/perm-bash2.raw

@@ -1,442 +0,0 @@
-78[?25h[?25l[?2004h[?1004h[?2031h[?2026h␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-Accessingworkspace:␍
-␍
-/tmp/spike-s3-bash2␍
-␍
-Quicksafetycheck:Isthisaprojectyoucreatedoroneyoutrust?(Likeyourowncode,awell-knownopensource␍
-project,orworkfromyourteam).Ifnot,takeamomenttoreviewwhat'sinthisfolderfirst.␍
-␍
-ClaudeCode'llbeabletoread,edit,andexecutefileshere.␍
-␍
-]8;id=zaxmda;https://code.claude.com/docs/en/securitySecurity guide]8;;␍
-␍
-❯1.Yes,Itrustthisfolder␍
-2.No,exit␍
-␍
-Entertoconfirm·Esctocancel␍
-[?2026l[>0q[?2026h␍Yes, I trust this folder✔␍
-
-
-
-[?2026l]0;✳ Claude Code[?2026h␍╭───Claude Codev2.1.173─────────────────────────────────────────────────────────────────────────────────────────────╮␍│                                                    │ Tips for getting started                                        │␍│                 Welcome back Johan!│Run/inittocreateaCLAUDE.mdfilewithinstructionsforCla…│␍││───────────────────────────────────────────────────────────────│␍│                    ▐▛███▜▌│What's new│␍│▝▜█████▛▘│FixedFable5modelnameswitha`[1m]`suffixnotbeingnorma…│␍│                     ▘▘ ▝▝                    │ Fixed a spurious "sandbox depenncies missing"startup warnin…│␍│   Opus 4.8 (1M context) with xh… · Claude Team ·   │ Sub-agnts can nowspawn their own sub-agents(upto5levels…│␍│Beehelp│/release-notes for more│␍│               /tmp/spike-s3-bash2             │       │␍╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯␍␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍❯ Try "edit <filepath> to..."␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍? for shortcuts · ← for agents◉ xhigh · /effort␍[?25h[?2026l[?2026h[?25l␍␍
-
-
-[?25h[?2026l[?2026h[?25l␍ ⚠ 2 setup issues: MCP · /doctor␍␍ ▎ Meet Fable 5, our newest model for complex, long-running work. Try anytime with /model.␍▎ Included in yourplan limits until Jun 22, then switch to usage credits to continue.␍
-␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-?forshortcuts·←foragents◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍Runthisexactbashcommandandshowmeitsoutput:node-e"console.log('spike-s3-marker-xyz')"—donotdo␍  anything else.␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-◉xhigh·/effort␍
-[?25h[?2026l]0;⠂ Claude Code[?2026h[?25l␍❯ Run this exact bash command and show me its output: node -e "console.log('spike-s3-marker-xyz')" — do not do anything ␍  else.                                                                                                                 ␍␍✽ Envisioning… ␍␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerrupt◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍ng…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍g…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Claude Code[?2026h[?25l␍·␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍En␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍v␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢Ei␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍nvsi␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍io␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*sn␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍ii␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Exécuter commande Node.js et afficher résultat[?2026h[?25l␍✶onng␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍i…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍g…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✽␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Exécuter commande Node.js et afficher résultat[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍sio␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍(2s · thinking with xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢iothinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Exécuter commande Node.js et afficher résultat[?2026h[?25l␍·vithinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍ns3thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢Eithinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍↓ 25 tokens · thinking with xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍●Bash(node -e "console.log('spike-s3-marker-xyz')")␍  ⎿  Waiting…␍␍✢ Envisioning… (3s · ↓25 tokens · thinking with xhigh effort)␍␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerrupt◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍*v50␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍ ␍Runn␍visioning…)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶75␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍●␍spike-s3-marker-xyz␍Envisioning…↑88 · thinking with xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻95thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍101 tokens · thinking with xhigh efort)␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Exécuter commande Node.js et afficher résultat[?2026h[?25l␍✽1thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍5␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍8thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍421thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍2thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍3␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍4thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻5thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍En6␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶v7thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍Ei8␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍thought for 1s)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*nvsi9␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍io30␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢sn1␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Exécuter commande Node.js et afficher résultat[?2026h[?25l␍ii2␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍onng3␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍·i…4␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍g…6␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍5␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍↓␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Exécuter commande Node.js et afficher résultat[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✽␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍●Sortie de la commande :␍  spike-s3-marker-xyz␍␍✽ Envisioning… (running stop hook · 5s · ↓ 136 tokens · thought for 1s)␍␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerrupt◉xhigh·/effort␍
-[?25h[?2026l]0;✳ Exécuter commande Node.js et afficher résultat[?2026h[?25l␍✻Brewed for 5s␍❯ ␍? for shortcuts · ← for agents␍
-[?25h[?2026l[?2026h[?25l␍␍
-[?25h[?2026l[?1006l[?1003l[?1002l[?1000l(B[>4m[<u[?1004l[?2031l[?2004l[?25h78]0;
-Resume this session with:
-claude --resume 614ec96a-bc4c-42d7-a18e-eb5d291540f1
-

packages/server/test/fixtures/dialogs/perm-write2.raw

@@ -1,469 +0,0 @@
-78[?25h[?25l[?2004h[?1004h[?2031h[?2026h␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-Accessingworkspace:␍
-␍
-/tmp/spike-s3-write2␍
-␍
-Quicksafetycheck:Isthisaprojectyoucreatedoroneyoutrust?(Likeyourowncode,awell-knownopensource␍
-project,orworkfromyourteam).Ifnot,takeamomenttoreviewwhat'sinthisfolderfirst.␍
-␍
-ClaudeCode'llbeabletoread,edit,andexecutefileshere.␍
-␍
-]8;id=zaxmda;https://code.claude.com/docs/en/securitySecurity guide]8;;␍
-␍
-❯1.Yes,Itrustthisfolder␍
-2.No,exit␍
-␍
-Entertoconfirm·Esctocancel␍
-[?2026l[>0q[?2026h␍Yes, I trust this folder✔␍
-
-
-
-[?2026l]0;✳ Claude Code[?2026h␍╭───Claude Codev2.1.173─────────────────────────────────────────────────────────────────────────────────────────────╮␍│                                                    │ Tips for getting started                                        │␍│                 Welcome back Johan!│Run/inittocreateaCLAUDE.mdfilewithinstructionsforCla…│␍││───────────────────────────────────────────────────────────────│␍│                     ▐▛███▜▌│What's new│␍│▝▜█████▛▘│FixedFable5modelnameswitha`[1m]`suffixnotbeingnorma…│␍│                     ▘▘ ▝▝                    │ Fixed a spurious "sandbox depenncies missing"startup warnin…│␍│   Opus 4.8 (1M context) with xh… · Claude Team ·   │ Sub-agnts can nowspawn their own sub-agents(upto5levels…│␍│Beehelp│/release-notes for more│␍│              /tmp/spike-s3-write2             │       │␍╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯␍␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍❯ Try "edit <filepath> to..."␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍? for shortcuts · ← for agents◉ xhigh · /effort␍[?25h[?2026l[?2026h[?25l␍␍
-
-
-[?25h[?2026l[?2026h[?25l␍ ⚠ 2 setup issues: MCP · /doctor␍␍ ▎ Meet Fable 5, our newest model for complex, long-running work. Try anytime with /model.␍▎ Included in yourplan limits until Jun 22, then switch to usage credits to continue.␍
-␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ Createafilenameds3-edit.txtcontainingexactlythewordhello.UsetheWritetool.Donotdoanythingelse.␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-◉xhigh·/effort␍
-[?25h[?2026l]0;⠂ Claude Code[?2026h[?25l␍❯ Create a file named s3-edit.txt containing exactly the word hello. Use the Write tool. Do not do anything else.       ␍␍✽ Swooping… ␍␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerrupt◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍·␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Claude Code[?2026h[?25l␍S␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍w␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍o␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍Swop␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍oi␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢on␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍pig…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍n␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Créer un fichier s3-edit.txt avec hello[?2026h[?25l␍*g␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✽␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Créer un fichier s3-edit.txt avec hello[?2026h[?25l␍pin␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍(1s · thinking with xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍on2thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻oithinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶wp␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*↓ 25 tokens · tnking wih xhigh effort)␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢So57thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Créer un fichier s3-edit.txt avec hello[?2026h[?25l␍·o68thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍76thinking with xhigh effort␍
-
-
-
-
-
-[?25h[?2026l]0;✳ Créer un fichier s3-edit.txt avec hello[?2026h[?25l␍●Write(]8;id=vlvau2;file:///tmp/spike-s3-write2/s3-edit.txts3-edit.txt]8;;)␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍ Create file␍ s3-edit.txt␍╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌␍
- 1hello␍
-╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌␍
-Doyouwanttocreates3-edit.txt?␍
-❯1.Yes␍
-2.Yes,allowalleditsduringthissession(shift+tab)␍
-3.No␍
-␍
-Esctocancel·Tabtoamend␍
-[?2026l]0;⠐ Créer un fichier s3-edit.txt avec hello[?2026h╭───ClaudeCodev2.1.173─────────────────────────────────────────────────────────────────────────────────────────────╮␍
-││Tipsforgettingstarted│␍
-│WelcomebackJohan!│Run/inittocreateaCLAUDE.mdfilewithinstructionsforCla…│␍
-││───────────────────────────────────────────────────────────────│␍
-│ ▐▛███▜▌│What'snew│␍
-│▝▜█████▛▘│FixedFable5modelnameswitha`[1m]`suffixnotbeingnorma…│␍
-│ ▘▘▝▝│Fixedaspurious"sandboxdependenciesmissing"startupwarnin…│␍
-│Opus4.8(1Mcontext)withxh…·ClaudeTeam·│Sub-agentscannowspawntheirownsub-agents(upto5levels…│␍
-│Beehelp│/release-notesformore│␍
-│/tmp/spike-s3-write2││␍
-╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯␍
-␍
-⚠2setupissues:MCP ·/doctor␍
-␍
-▎MeetFable5,ournewestmodelforcomplex,long-runningwork.Tryanytimewith/model.␍
-▎IncludedinyourplanlimitsuntilJun22,thenswitchtousagecreditstocontinue.␍
-␍
-❯ Create a file named s3-edit.txt containing exactly the word hello. Use the Write tool. Do not do anything else.       ␍
-␍
-●Write(]8;id=vlvau2;file:///tmp/spike-s3-write2/s3-edit.txts3-edit.txt]8;;)␍
-␍
-✻Seasoning… (3s·↓147tokens)␍
-␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerruptYou'veused91%ofyoursessionlimit·resets7pm(Europe/Paris)·/usage-creditstorequestmore␍
-[?25h[?2026l[?2026h[?25l␍✶Seasoning…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍●␍  ⎿  Wrote1linestos3-edit.txt␍     1 hello␍✶ Seasoning… (3s · ↑ 147 tokens)␍␍❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerruptYou'veused91%ofyoursessionlimit·resets7pm(Europe/Paris)·/usage-creditstorequestmore␍
-[?25h[?2026l[?2026h[?25l␍i…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*ng␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍·␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Créer un fichier s3-edit.txt avec hello[?2026h[?25l␍4␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍S␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶e␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍a␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻Seso␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍an␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍si␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✽on␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍nig…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍n␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍g␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍…␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✻␍
-
-
-
-
-
-[?25h[?2026l]0;⠐ Créer un fichier s3-edit.txt avec hello[?2026h[?25l␍5␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✶␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍*␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍✢␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍·␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍↓␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍…␍
-
-
-
-
-
-[?25h[?2026l]0;⠂ Créer un fichier s3-edit.txt avec hello[?2026h[?25l␍●Fichier s3-edit.txt créé avec lecontenuhello.␍· Seasoning… (5s · ↓ 147 tokens)␍␍❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-esctointerruptYou'veused91%ofyoursessionlimit·resets7pm(Europe/Paris)·/usage-creditstorequestmore␍
-[?25h[?2026l[?2026h[?25l␍✢g69␍
-
-
-
-
-
-[?25h[?2026l[?2026h[?25l␍Seasoning…running stop hook · 6s · ↓149 tokens)␍
-
-
-
-
-
-[?25h[?2026l]0;✳ Créer un fichier s3-edit.txt avec hello[?2026h[?25l␍✻Cooked for 6s␍❯ ␍? for shortcuts · ← for agents␍
-You'veused91%ofyoursessionlimit·resets7pm(Europe/Paris)·/usage-creditstorequestmore␍
-[?25h[?2026l[?2026h[?25l╭───ClaudeCodev2.1.173─────────────────────────────────────────────────────────────────────────────────────────────╮␍
-││Tipsforgettingstarted│␍
-│WelcomebackJohan!│Run/inittocreateaCLAUDE.mdfilewithinstructionsforCla…│␍
-││───────────────────────────────────────────────────────────────│␍
-│ ▐▛███▜▌│What'snew│␍
-│▝▜█████▛▘│FixedFable5modelnameswitha`[1m]`suffixnotbeingnorma…│␍
-│ ▘▘▝▝│Fixedaspurious"sandboxdependenciesmissing"startupwarnin…│␍
-│Opus4.8(1Mcontext)withxh…·ClaudeTeam·│Sub-agentscannowspawntheirownsub-agents(upto5levels…│␍
-│Beehelp│/release-notesformore│␍
-│/tmp/spike-s3-write2││␍
-╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯␍
-␍
-⚠2setupissues:MCP ·/doctor␍
-␍
-▎MeetFable5,ournewestmodelforcomplex,long-runningwork.Tryanytimewith/model.␍
-▎IncludedinyourplanlimitsuntilJun22,thenswitchtousagecreditstocontinue.␍
-␍
-❯ Create a file named s3-edit.txt containing exactly the word hello. Use the Write tool. Do not do anything else.       ␍
-␍
-●Write(]8;id=vlvau2;file:///tmp/spike-s3-write2/s3-edit.txts3-edit.txt]8;;)␍
- ⎿ Wrote1linestos3-edit.txt␍
- 1hello␍
-␍
-●Fichiers3-edit.txtcrééaveclecontenuhello.␍
-␍
-✻Cookedfor6s␍
-␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-?forshortcuts·←foragents◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍␍
-[?25h[?2026l[?1006l[?1003l[?1002l[?1000l(B[>4m[<u[?1004l[?2031l[?2004l[?25h78]0;
-Resume this session with:
-claude --resume 4c722fa4-a25b-4cbd-9435-d98ec8cf2a50
-

packages/server/test/fixtures/dialogs/trust.raw

@@ -1,37 +0,0 @@
-78[?25h[?25l[?2004h[?1004h[?2031h[?2026h␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-Accessingworkspace:␍
-␍
-/tmp/spike-s3-trust␍
-␍
-Quicksafetycheck:Isthisaprojectyoucreatedoroneyoutrust?(Likeyourowncode,awell-knownopensource␍
-project,orworkfromyourteam).Ifnot,takeamomenttoreviewwhat'sinthisfolderfirst.␍
-␍
-ClaudeCode'llbeabletoread,edit,andexecutefileshere.␍
-␍
-]8;id=zaxmda;https://code.claude.com/docs/en/securitySecurity guide]8;;␍
-␍
-❯1.Yes,Itrustthisfolder␍
-2.No,exit␍
-␍
-Entertoconfirm·Esctocancel␍
-[?2026l[>0q[?2026h␍Yes, I trust this folder✔␍
-
-
-
-[?2026l]0;✳ Claude Code[?2026h␍╭───Claude Codev2.1.173─────────────────────────────────────────────────────────────────────────────────────────────╮␍│                                                    │ Tips for getting started                                        │␍│                 Welcome back Johan!│Run/inittocreateaCLAUDE.mdfilewithinstructionsforCla…│␍││───────────────────────────────────────────────────────────────│␍│                    ▐▛███▜▌│What's new│␍│▝▜█████▛▘│FixedFable5modelnameswitha`[1m]`suffixnotbeingnorma…│␍│                     ▘▘ ▝▝                    │ Fixed a spurious "sandbox depenncies missing"startup warnin…│␍│   Opus 4.8 (1M context) with xh… · Claude Team ·   │ Sub-agnts can nowspawn their own sub-agents(upto5levels…│␍│Beehelp│/release-notes for more│␍│               /tmp/spike-s3-trust             │       │␍╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯␍␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍❯ Try "create a util logging.py that..."␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍? for shortcuts · ← for agents◉ xhigh · /effort␍[?25h[?2026l[?2026h[?25l␍␍
-
-
-[?25h[?2026l[?2026h[?25l␍ ⚠ 2 setup issues: MCP · /doctor␍␍ ▎ Meet Fable 5, our newest model for complex, long-running work. Try anytime with /model.␍▎ Included in yourplan limits until Jun 22, then switch to usage credits to continue.␍
-␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-?forshortcuts·←foragents◉xhigh·/effort␍
-[?25h[?2026l[?2026h[?25l␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍❯ ␍────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍ ? for shortcuts ·← for agents                                                       ◉ xhigh · /effort␍␍␍␍␍␍[?25h[?2026l[?2026h[?25l␍ ⚠ 2 setup issues: MCP · /doctor␍␍ ▎ Meet Fable 5, our newest model for complex, long-running work. Try anytime with /model.␍▎ Included in yourplan limits until Jun 22, then switch to usage credits to continue.␍
-␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-❯ ␍
-────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────␍
-?forshortcuts·←foragents◉xhigh·/effort␍
-[?25h[?2026l[?1006l[?1003l[?1002l[?1000l(B[>4m[<u[?1004l[?2031l[?2004l[?25h78]0;

packages/server/test/fs-routes.test.ts

@@ -1,143 +0,0 @@
-import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { afterAll, beforeAll, describe, expect, it, vi } from 'vitest';
-import { buildApp, type AppBundle } from '../src/app.js';
-import { openDb, type Db } from '../src/db/index.js';
-import type { Config } from '../src/config.js';
-import type { FsListResponse } from '@arboretum/shared';
-
-// Mêmes stubs que app.e2e : pas de vrai claude ni de vrai PTY en CI.
-vi.mock('node:child_process', () => ({ execFileSync: () => '/usr/bin/claude\n' }));
-vi.mock('@homebridge/node-pty-prebuilt-multiarch', () => {
-  class FakePty {
-    pid = 424242;
-    write = vi.fn();
-    resize = vi.fn();
-    pause = vi.fn();
-    resume = vi.fn();
-    kill = vi.fn();
-    onData(): { dispose: () => void } {
-      return { dispose: () => {} };
-    }
-    onExit(): { dispose: () => void } {
-      return { dispose: () => {} };
-    }
-  }
-  return { default: { spawn: (): FakePty => new FakePty() } };
-});
-
-process.env.ARBORETUM_LOG = 'silent';
-
-let dir: string;
-let root: string;
-let bundle: AppBundle;
-let db: Db;
-let token: string;
-
-const auth = (): { authorization: string } => ({ authorization: `Bearer ${token}` });
-
-beforeAll(() => {
-  dir = mkdtempSync(join(tmpdir(), 'arboretum-fs-'));
-  // Arbo de test : root/{alpha, Beta, .hidden, a-repo/.git, file.txt}
-  root = join(dir, 'root');
-  mkdirSync(join(root, 'alpha'), { recursive: true });
-  mkdirSync(join(root, 'Beta'), { recursive: true });
-  mkdirSync(join(root, '.hidden'), { recursive: true });
-  mkdirSync(join(root, 'a-repo', '.git'), { recursive: true });
-  writeFileSync(join(root, 'file.txt'), 'x');
-
-  const dbPath = join(dir, 'fs.db');
-  db = openDb(dbPath);
-  const config: Config = {
-    port: 7317,
-    bind: '127.0.0.1',
-    dbPath,
-    dataDir: dir,
-    allowedOrigins: [],
-    printToken: false,
-    claudeProjectsDir: join(dir, 'claude', 'projects'),
-    claudeSessionsDir: join(dir, 'claude', 'sessions'),
-    vapidContact: 'mailto:test@localhost',
-  };
-  bundle = buildApp(config, db, '0.0.0-test');
-  const t = bundle.auth.ensureBootstrapToken();
-  if (!t) throw new Error('bootstrap token attendu sur une base vierge');
-  token = t;
-});
-
-afterAll(async () => {
-  await bundle.app.close();
-  db.close();
-  rmSync(dir, { recursive: true, force: true });
-});
-
-describe('GET /api/v1/fs/list', () => {
-  it('liste les sous-dossiers triés, masque les dotfiles et les fichiers', async () => {
-    const res = await bundle.app.inject({ method: 'GET', url: `/api/v1/fs/list?path=${encodeURIComponent(root)}`, headers: auth() });
-    expect(res.statusCode).toBe(200);
-    const body = res.json() as FsListResponse;
-    const names = body.entries.map((e) => e.name);
-    expect(names).toEqual(['a-repo', 'alpha', 'Beta']); // tri insensible à la casse, fichiers/dotfiles exclus
-    expect(body.path).toBe(root);
-    expect(body.parent).toBe(dir);
-    expect(typeof body.home).toBe('string');
-  });
-
-  it('showHidden=1 inclut les dossiers cachés', async () => {
-    const res = await bundle.app.inject({ method: 'GET', url: `/api/v1/fs/list?path=${encodeURIComponent(root)}&showHidden=1`, headers: auth() });
-    const body = res.json() as FsListResponse;
-    expect(body.entries.map((e) => e.name)).toContain('.hidden');
-  });
-
-  it('markRepos=1 annote le dossier contenant un .git', async () => {
-    const res = await bundle.app.inject({ method: 'GET', url: `/api/v1/fs/list?path=${encodeURIComponent(root)}&markRepos=1`, headers: auth() });
-    const body = res.json() as FsListResponse;
-    expect(body.entries.find((e) => e.name === 'a-repo')?.isRepo).toBe(true);
-    expect(body.entries.find((e) => e.name === 'alpha')?.isRepo).toBeUndefined();
-  });
-
-  it('sans markRepos, aucune annotation isRepo', async () => {
-    const res = await bundle.app.inject({ method: 'GET', url: `/api/v1/fs/list?path=${encodeURIComponent(root)}`, headers: auth() });
-    const body = res.json() as FsListResponse;
-    expect(body.entries.every((e) => e.isRepo === undefined)).toBe(true);
-  });
-
-  it('path absent → liste le home (réponse 200 cohérente)', async () => {
-    const res = await bundle.app.inject({ method: 'GET', url: '/api/v1/fs/list', headers: auth() });
-    expect(res.statusCode).toBe(200);
-    const body = res.json() as FsListResponse;
-    expect(body.path).toBe(body.home);
-  });
-
-  it('chemin relatif → 400 BAD_PATH', async () => {
-    const res = await bundle.app.inject({ method: 'GET', url: '/api/v1/fs/list?path=relatif/x', headers: auth() });
-    expect(res.statusCode).toBe(400);
-    expect(res.json()).toMatchObject({ error: { code: 'BAD_PATH' } });
-  });
-
-  it('échappement par `..` neutralisé : resolve clampe, pas de fuite (200 sur un dossier réel)', async () => {
-    // `<root>/../..` résout vers un ancêtre réel : la requête réussit mais ne contient jamais de `..`.
-    const res = await bundle.app.inject({ method: 'GET', url: `/api/v1/fs/list?path=${encodeURIComponent(join(root, '..', '..'))}`, headers: auth() });
-    expect(res.statusCode).toBe(200);
-    expect((res.json() as FsListResponse).path).not.toContain('..');
-  });
-
-  it('chemin inexistant → 404 NOT_FOUND', async () => {
-    const res = await bundle.app.inject({ method: 'GET', url: `/api/v1/fs/list?path=${encodeURIComponent(join(root, 'nope-xyz'))}`, headers: auth() });
-    expect(res.statusCode).toBe(404);
-    expect(res.json()).toMatchObject({ error: { code: 'NOT_FOUND' } });
-  });
-
-  it('cible non-dossier → 400 NOT_A_DIRECTORY', async () => {
-    const res = await bundle.app.inject({ method: 'GET', url: `/api/v1/fs/list?path=${encodeURIComponent(join(root, 'file.txt'))}`, headers: auth() });
-    expect(res.statusCode).toBe(400);
-    expect(res.json()).toMatchObject({ error: { code: 'NOT_A_DIRECTORY' } });
-  });
-
-  it('sans authentification → 401', async () => {
-    const res = await bundle.app.inject({ method: 'GET', url: `/api/v1/fs/list?path=${encodeURIComponent(root)}` });
-    expect(res.statusCode).toBe(401);
-    expect(res.json()).toMatchObject({ error: { code: 'UNAUTHORIZED' } });
-  });
-});

packages/shared/src/api.ts

@@ -91,25 +91,6 @@ export interface AdoptWorktreeRequest {
   preTrust?: boolean;
 }
 
-// ---- Navigateur de répertoires (sélecteur de dossier côté web) ----
-export interface FsEntry {
-  name: string;
-  /** chemin absolu du dossier */
-  path: string;
-  /** présent (true) uniquement en mode markRepos quand le dossier est un dépôt git */
-  isRepo?: boolean;
-}
-export interface FsListResponse {
-  /** chemin absolu listé (normalisé) */
-  path: string;
-  /** parent (null à la racine `/`) — pour le bouton « remonter » */
-  parent: string | null;
-  /** home de l'utilisateur côté serveur — point de départ par défaut */
-  home: string;
-  /** sous-dossiers uniquement, triés sans tenir compte de la casse */
-  entries: FsEntry[];
-}
-
 // ---- Web Push (P4) ----
 export interface VapidKeyResponse {
   /** clé publique VAPID (applicationServerKey côté navigateur). */

packages/web/index.html

@@ -7,12 +7,11 @@
     <meta name="theme-color" content="#09090b" />
     <link rel="manifest" href="/manifest.webmanifest" />
     <link rel="icon" type="image/svg+xml" href="/icon.svg" />
-    <link rel="icon" type="image/x-icon" href="/favicon.ico" />
     <!-- iOS : le Web Push n'est disponible qu'en PWA installée (« Ajouter à l'écran d'accueil ») -->
     <meta name="apple-mobile-web-app-capable" content="yes" />
     <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
     <meta name="apple-mobile-web-app-title" content="Arboretum" />
-    <link rel="apple-touch-icon" href="/apple-touch-icon.png" />
+    <link rel="apple-touch-icon" href="/icon.svg" />
     <title>Arboretum</title>
   </head>
   <body>

packages/web/public/icon.svg

@@ -1,46 +1,18 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="512" height="512" viewBox="0 0 512 512" role="img" aria-label="Arboretum">
-  <defs>
-    <!-- glow néon : flou doux derrière les traits et les nœuds -->
-    <filter id="glow" x="-30%" y="-30%" width="160%" height="160%">
-      <feGaussianBlur stdDeviation="6" result="b"/>
-      <feMerge><feMergeNode in="b"/><feMergeNode in="SourceGraphic"/></feMerge>
-    </filter>
-    <linearGradient id="branch" x1="256" y1="430" x2="256" y2="90" gradientUnits="userSpaceOnUse">
-      <stop offset="0" stop-color="#10b981"/>
-      <stop offset="1" stop-color="#34d399"/>
-    </linearGradient>
-  </defs>
-
   <rect width="512" height="512" fill="#09090b"/>
-
-  <!-- branches / circuit (tronc + fourches symétriques), tracées dans la zone sûre maskable -->
-  <g fill="none" stroke="url(#branch)" stroke-width="17" stroke-linecap="round" stroke-linejoin="round" filter="url(#glow)">
-    <!-- tronc : du nœud sommet jusqu'à la base avec le curseur >_ -->
-    <path d="M256 96 V392"/>
-    <!-- paire haute -->
-    <path d="M256 232 L150 232 V150"/>
-    <path d="M256 232 L362 232 V150"/>
-    <!-- paire médiane -->
-    <path d="M256 300 L104 300 V214"/>
-    <path d="M256 300 L408 300 V214"/>
-    <!-- paire basse -->
-    <path d="M256 356 L150 356 V300"/>
-    <path d="M256 356 L362 356 V300"/>
-    <!-- base : invite de commande >_ -->
-    <path d="M232 404 L246 418 L232 432" stroke-width="14"/>
-    <path d="M258 434 H286" stroke-width="14"/>
+  <!-- arbre / branches (worktrees) — tracé dans la zone sûre maskable (~80% central) -->
+  <g fill="none" stroke="#34d399" stroke-width="22" stroke-linecap="round" stroke-linejoin="round">
+    <!-- tronc -->
+    <path d="M256 420 V232"/>
+    <!-- branche gauche -->
+    <path d="M256 300 L168 212"/>
+    <!-- branche droite -->
+    <path d="M256 268 L344 180"/>
   </g>
-
-  <!-- nœuds (sessions) : anneaux cyan lumineux, centre sombre -->
-  <g filter="url(#glow)">
-    <g fill="#09090b" stroke="#22d3ee" stroke-width="9">
-      <circle cx="256" cy="96"  r="20"/>
-      <circle cx="150" cy="150" r="16"/>
-      <circle cx="362" cy="150" r="16"/>
-      <circle cx="104" cy="214" r="16"/>
-      <circle cx="408" cy="214" r="16"/>
-      <circle cx="150" cy="300" r="16"/>
-      <circle cx="362" cy="300" r="16"/>
-    </g>
+  <!-- nœuds (sessions) -->
+  <g fill="#34d399">
+    <circle cx="256" cy="156" r="34"/>
+    <circle cx="160" cy="196" r="26"/>
+    <circle cx="352" cy="164" r="26"/>
   </g>
 </svg>

packages/web/public/manifest.webmanifest

@@ -8,8 +8,6 @@
   "background_color": "#09090b",
   "theme_color": "#09090b",
   "icons": [
-    { "src": "/icon.svg", "sizes": "any", "type": "image/svg+xml", "purpose": "any" },
-    { "src": "/icon-192.png", "sizes": "192x192", "type": "image/png", "purpose": "maskable" },
-    { "src": "/icon-512.png", "sizes": "512x512", "type": "image/png", "purpose": "maskable" }
+    { "src": "/icon.svg", "sizes": "any", "type": "image/svg+xml", "purpose": "any maskable" }
   ]
 }

packages/web/src/components/DirectoryPicker.vue

@@ -1,84 +0,0 @@
-<template>
-  <section class="flex flex-col gap-2 rounded-lg border border-zinc-800 bg-zinc-950/40 p-2">
-    <header class="flex items-center gap-2">
-      <button type="button" class="btn text-xs" :disabled="loading || parent === null" @click="load(parent ?? undefined)">
-        ↑ {{ t('fs.up') }}
-      </button>
-      <span class="min-w-0 flex-1 truncate font-mono text-xs text-zinc-400" :title="current">{{ current }}</span>
-      <button type="button" class="btn text-xs" @click="emit('close')">{{ t('common.cancel') }}</button>
-    </header>
-
-    <p v-if="error" class="text-sm text-red-400">{{ error }}</p>
-
-    <ul class="flex max-h-60 flex-col gap-0.5 overflow-y-auto">
-      <li v-if="loading" class="px-2 py-1 text-xs text-zinc-500">{{ t('fs.loading') }}</li>
-      <li v-else-if="entries.length === 0" class="px-2 py-1 text-xs text-zinc-500">{{ t('fs.empty') }}</li>
-      <li v-for="e in entries" :key="e.path">
-        <button
-          type="button"
-          class="flex w-full items-center gap-2 rounded px-2 py-1 text-left text-sm text-zinc-200 hover:bg-zinc-800"
-          @click="load(e.path)"
-        >
-          <span class="flex-1 truncate font-mono">{{ e.name }}</span>
-          <span v-if="e.isRepo" class="badge bg-emerald-950 text-emerald-400">{{ t('fs.repoBadge') }}</span>
-        </button>
-      </li>
-    </ul>
-
-    <footer class="flex items-center gap-2">
-      <label class="flex items-center gap-1 text-xs text-zinc-400">
-        <input v-model="showHidden" type="checkbox" @change="load(current || undefined)" /> {{ t('fs.showHidden') }}
-      </label>
-      <button type="button" class="btn-primary ml-auto text-xs" :disabled="loading || current === ''" @click="emit('select', current)">
-        {{ t('fs.useFolder') }}
-      </button>
-    </footer>
-  </section>
-</template>
-
-<script setup lang="ts">
-import { onMounted, ref } from 'vue';
-import { useI18n } from 'vue-i18n';
-import type { FsEntry, FsListResponse } from '@arboretum/shared';
-import { api } from '../lib/api';
-
-// mode 'repo' : annote les sous-dossiers qui sont des dépôts git (badge). 'dir' : navigation simple.
-const props = withDefaults(defineProps<{ mode?: 'dir' | 'repo'; initialPath?: string }>(), {
-  mode: 'dir',
-  initialPath: '',
-});
-const emit = defineEmits<{ select: [path: string]; close: [] }>();
-const { t } = useI18n();
-
-const current = ref('');
-const parent = ref<string | null>(null);
-const entries = ref<FsEntry[]>([]);
-const loading = ref(false);
-const error = ref<string | null>(null);
-const showHidden = ref(false);
-
-/** path absent → le serveur retombe sur le home. En cas d'erreur, on garde l'écoute précédente affichée. */
-async function load(path?: string): Promise<void> {
-  loading.value = true;
-  error.value = null;
-  try {
-    const params = new URLSearchParams();
-    if (path) params.set('path', path);
-    if (props.mode === 'repo') params.set('markRepos', '1');
-    if (showHidden.value) params.set('showHidden', '1');
-    const res = await api.get<FsListResponse>(`/api/v1/fs/list?${params.toString()}`);
-    current.value = res.path;
-    parent.value = res.parent;
-    entries.value = res.entries;
-  } catch (err) {
-    error.value = err instanceof Error ? err.message : String(err);
-  } finally {
-    loading.value = false;
-  }
-}
-
-onMounted(() => {
-  // démarre sur le chemin déjà saisi s'il est absolu, sinon sur le home (path absent).
-  void load(props.initialPath.startsWith('/') ? props.initialPath : undefined);
-});
-</script>

packages/web/src/i18n/en.ts

@@ -103,15 +103,6 @@ export default {
     denied: 'Notification permission denied — enable it in your browser settings.',
     unsupported: 'Push needs HTTPS (e.g. Tailscale Serve); on iOS, install the app to your home screen first.',
   },
-  fs: {
-    browse: 'Browse…',
-    up: 'Up',
-    useFolder: 'Use this folder',
-    showHidden: 'Show hidden',
-    loading: 'Loading…',
-    empty: 'No subfolders',
-    repoBadge: 'repo',
-  },
   ws: {
     reconnecting: 'Connection lost — reconnecting…',
   },

packages/web/src/i18n/fr.ts

@@ -106,15 +106,6 @@ const fr: typeof en = {
     denied: 'Permission de notification refusée — activez-la dans les réglages du navigateur.',
     unsupported: 'Le push nécessite HTTPS (ex. Tailscale Serve) ; sur iOS, installez d’abord l’app sur l’écran d’accueil.',
   },
-  fs: {
-    browse: 'Parcourir…',
-    up: 'Remonter',
-    useFolder: 'Utiliser ce dossier',
-    showHidden: 'Afficher les cachés',
-    loading: 'Chargement…',
-    empty: 'Aucun sous-dossier',
-    repoBadge: 'dépôt',
-  },
   ws: {
     reconnecting: 'Connexion perdue — reconnexion…',
   },

packages/web/src/views/DashboardView.vue

@@ -28,18 +28,10 @@
           {{ t('repos.pathLabel') }}
           <input v-model="newPath" type="text" class="input font-mono" :placeholder="t('repos.pathPlaceholder')" required />
         </label>
-        <button type="button" class="btn whitespace-nowrap" @click="showPicker = !showPicker">{{ t('fs.browse') }}</button>
         <button type="submit" class="btn-primary whitespace-nowrap" :disabled="adding || newPath.trim() === ''">
           {{ adding ? t('repos.adding') : t('repos.add') }}
         </button>
       </form>
-      <DirectoryPicker
-        v-if="showPicker"
-        mode="repo"
-        :initial-path="newPath"
-        @select="onPickPath"
-        @close="showPicker = false"
-      />
       <p v-if="addError" class="text-sm text-red-400">{{ addError }}</p>
 
       <p v-if="store.loadError" class="text-sm text-red-400">{{ store.loadError }}</p>
@@ -61,7 +53,6 @@ import { useSessionsStore } from '../stores/sessions';
 import { usePushStore } from '../stores/push';
 import LanguageSwitcher from '../components/LanguageSwitcher.vue';
 import RepoSection from '../components/RepoSection.vue';
-import DirectoryPicker from '../components/DirectoryPicker.vue';
 
 const { t } = useI18n();
 const router = useRouter();
@@ -71,15 +62,9 @@ const sessions = useSessionsStore();
 const push = usePushStore();
 
 const newPath = ref('');
-const showPicker = ref(false);
 const adding = ref(false);
 const addError = ref<string | null>(null);
 
-function onPickPath(path: string): void {
-  newPath.value = path;
-  showPicker.value = false;
-}
-
 // 'denied'/'unsupported' sont des clés i18n ; tout autre message d'erreur est affiché tel quel.
 const pushErrorText = computed(() => {
   const e = push.error;

packages/web/src/views/LoginView.vue

@@ -5,10 +5,7 @@
       @submit.prevent="onSubmit"
     >
       <div class="flex items-center justify-between">
-        <div class="flex items-center gap-2.5">
-          <img src="/icon.svg" alt="" class="h-9 w-9" />
-          <h1 class="text-lg font-semibold text-zinc-100">{{ t('common.appName') }}</h1>
-        </div>
+        <h1 class="text-lg font-semibold text-zinc-100">{{ t('common.appName') }}</h1>
         <LanguageSwitcher />
       </div>
       <p class="text-sm text-zinc-400">{{ t('login.title') }}</p>

packages/web/src/views/SessionsListView.vue

@@ -35,18 +35,10 @@
             <option value="bash">bash</option>
           </select>
         </label>
-        <button type="button" class="btn whitespace-nowrap" @click="showPicker = !showPicker">{{ t('fs.browse') }}</button>
         <button type="submit" class="btn-primary whitespace-nowrap" :disabled="creating || newCwd.trim() === ''">
           {{ creating ? t('sessions.creating') : t('sessions.newSession') }}
         </button>
       </form>
-      <DirectoryPicker
-        v-if="showPicker"
-        mode="dir"
-        :initial-path="newCwd"
-        @select="onPickCwd"
-        @close="showPicker = false"
-      />
       <p v-if="createError" class="text-sm text-red-400">{{ createError }}</p>
       <p v-if="actionError" class="text-sm text-red-400">{{ actionError }}</p>
 
@@ -120,7 +112,6 @@ import { useSessionsStore } from '../stores/sessions';
 import LanguageSwitcher from '../components/LanguageSwitcher.vue';
 import SessionStateBadge from '../components/SessionStateBadge.vue';
 import DialogPrompt from '../components/DialogPrompt.vue';
-import DirectoryPicker from '../components/DirectoryPicker.vue';
 
 const { t, locale } = useI18n();
 const router = useRouter();
@@ -129,7 +120,6 @@ const store = useSessionsStore();
 
 const newCwd = ref('');
 const newCommand = ref<'claude' | 'bash'>('claude');
-const showPicker = ref(false);
 const creating = ref(false);
 const createError = ref<string | null>(null);
 const killArmedId = ref<string | null>(null);
@@ -146,11 +136,6 @@ function formatDate(iso: string): string {
   return new Date(iso).toLocaleString(locale.value);
 }
 
-function onPickCwd(path: string): void {
-  newCwd.value = path;
-  showPicker.value = false;
-}
-
 async function onCreate(): Promise<void> {
   creating.value = true;
   createError.value = null;