Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n // v0.8 cycle 36: OpenAI turned reasoning into a request parameter, so\n // there are no `-thinking` ids any more — the deep-reasoning SKUs are\n // `gpt-5.x-pro`. Grok's explicit reasoning variants and Hunyuan's\n // agentic hy3-preview think silently for minutes too.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5[\\d.]*-pro|^gpt-5.*think|^grok-.*reasoning|^hy3-preview|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n // v0.8 cycle 36: OpenAI turned reasoning into a request parameter, so\n // there are no `-thinking` ids any more — the deep-reasoning SKUs are\n // `gpt-5.x-pro`. Grok's explicit reasoning variants and Hunyuan's\n // agentic hy3-preview think silently for minutes too.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5[\\d.]*-pro|^gpt-5.*think|^grok-.*reasoning|^hy3-preview|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n // v0.8 cycle 36: OpenAI turned reasoning into a request parameter, so\n // there are no `-thinking` ids any more — the deep-reasoning SKUs are\n // `gpt-5.x-pro`. Grok's explicit reasoning variants and Hunyuan's\n // agentic hy3-preview think silently for minutes too.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5[\\d.]*-pro|^gpt-5.*think|^grok-.*reasoning|^hy3-preview|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 26: clear one store. Renames the file to .cleared-Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 25: \"Your data\" — reinforce the private wedge by showing\n// exactly what Labaik keeps on this Mac, with sizes. Read-only inventory;\n// reveal/clear go through existing show-in-folder / per-store handlers.\nipcMain.handle('data-inventory', () => {\n const fs = require('fs')\n const items = [\n { key: 'sessions.json', label: 'Conversations' },\n { key: 'memory.json', label: 'Memory' },\n { key: 'profile.json', label: 'Profile' },\n { key: 'routines.json', label: 'Routines' },\n { key: 'routine-history.ndjson', label: 'Routine run log' },\n { key: 'spaces.json', label: 'Spaces' },\n { key: 'credentials.json', label: 'API keys (never leave this Mac)' },\n { key: 'events.ndjson', label: 'Local usage events' },\n { key: 'images', label: 'Generated images', dir: true },\n { key: 'skills', label: 'Folder skills', dir: true },\n ]\n const dirSize = (d) => {\n let total = 0\n try {\n for (const e of fs.readdirSync(d, { withFileTypes: true })) {\n const fp = require('path').join(d, e.name)\n try { total += e.isDirectory() ? dirSize(fp) : fs.statSync(fp).size } catch {}\n }\n } catch {}\n return total\n }\n const out = []\n for (const it of items) {\n const fp = require('path').join(paths.BASE_DIR, it.key)\n let bytes = 0, exists = false\n try {\n const st = fs.statSync(fp)\n exists = true\n bytes = it.dir ? dirSize(fp) : st.size\n } catch {}\n out.push({ ...it, bytes, exists })\n }\n return { baseDir: paths.BASE_DIR, items: out }\n})\n\n// v0.8 cycle 22: backup & restore. One portable JSON bundle (sessions,\n// memory, profile, routines, spaces, skills) — credentials excluded by\n// design. Import backs up every file it overwrites.\nipcMain.handle('backup-export', async (_e, rendererExtras) => {\n const backup = require('./backup')\n const res = await dialog.showSaveDialog({\n title: 'Save Labaik backup',\n defaultPath: `labaik-backup-${new Date().toISOString().slice(0, 10)}.json`,\n filters: [{ name: 'Labaik backup', extensions: ['json'] }],\n })\n if (res.canceled || !res.filePath) return { ok: false, reason: 'cancelled' }\n try {\n const bundle = backup.exportBundle(rendererExtras)\n require('fs').writeFileSync(res.filePath, JSON.stringify(bundle), 'utf8')\n return { ok: true, path: res.filePath, files: Object.keys(bundle.files).length, skills: bundle.skills.length }\n } catch (err) {\n return { ok: false, reason: err.message }\n }\n})\nipcMain.handle('backup-import', async () => {\n const backup = require('./backup')\n const res = await dialog.showOpenDialog({\n title: 'Pick a Labaik backup file',\n filters: [{ name: 'Labaik backup', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n try {\n const bundle = JSON.parse(require('fs').readFileSync(res.filePaths[0], 'utf8'))\n return backup.importBundle(bundle)\n } catch (err) {\n return { ok: false, reason: 'Could not read backup: ' + err.message }\n }\n})\n\n// v0.8 market-fit: ChatGPT history import. Parses conversations.json from\n// ChatGPT's data export (Settings → Data controls → Export) and converts\n// each conversation to a plain {title, createdAt, messages[]} the renderer\n// merges into its sessions. The mapping is a node tree; we walk parent\n// links from current_node and reverse — the standard linearization.\nipcMain.handle('import-chatgpt', async () => {\n const fs = require('fs')\n const res = await dialog.showOpenDialog({\n title: 'Pick conversations.json from your ChatGPT export',\n filters: [{ name: 'ChatGPT export', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n let data\n try {\n const stat = fs.statSync(res.filePaths[0])\n if (stat.size > 300 * 1024 * 1024) return { ok: false, reason: 'File larger than 300MB' }\n data = JSON.parse(fs.readFileSync(res.filePaths[0], 'utf8'))\n } catch (err) {\n return { ok: false, reason: 'Could not parse: ' + err.message }\n }\n return require('./import-chatgpt').convertChatGPTExport(data)\n})\n\n// v0.8 market-fit: paste-any-key provider detection. Pattern fast-paths\n// for unambiguous formats; the ambiguous sk-… family gets resolved by\n// probing each candidate's cheap GET /models endpoint in parallel with the\n// pasted key — first authenticated 200 wins.\nconst KEY_PATTERNS = [\n [/^sk-ant-/, 'anthropic'],\n [/^AIza/, 'google'],\n [/^xai-/, 'xai'],\n [/^eyJ[A-Za-z0-9_-]+\\./, 'minimax'], // JWT\n [/^[0-9a-f]{16,}\\.[A-Za-z0-9]+$/, 'zhipu'], // id.secret\n]\nconst PROBE_ORDER = ['openai', 'deepseek', 'moonshot', 'kimi', 'dashscope', 'hunyuan', 'zhipu']\nfunction probeProviderKey(provider, key) {\n const https = require('https')\n const base = (getBaseURL(provider) || 'https://api.openai.com/v1').replace(/\\/$/, '')\n return new Promise((resolve) => {\n let u\n try { u = new URL(base + '/models') } catch { return resolve(null) }\n const req = https.request(u, { method: 'GET', headers: { Authorization: `Bearer ${key}` }, timeout: 6000 }, (res) => {\n res.resume()\n resolve(res.statusCode === 200 ? provider : null)\n })\n req.on('error', () => resolve(null))\n req.on('timeout', () => { try { req.destroy() } catch {}; resolve(null) })\n req.end()\n })\n}\nipcMain.handle('login-detect-key', async (_e, rawKey) => {\n const key = String(rawKey || '').trim()\n if (!key) return { provider: null }\n for (const [re, prov] of KEY_PATTERNS) {\n if (re.test(key)) return { provider: prov, method: 'pattern' }\n }\n const hits = (await Promise.all(PROBE_ORDER.map((p) => probeProviderKey(p, key)))).filter(Boolean)\n if (hits.length) return { provider: hits[0], method: 'probe', also: hits.slice(1) }\n return { provider: null }\n})\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\nipcMain.handle('routines-history', (_e, limit) => routines.history(limit))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 22: backup & restore. One portable JSON bundle (sessions,\n// memory, profile, routines, spaces, skills) — credentials excluded by\n// design. Import backs up every file it overwrites.\nipcMain.handle('backup-export', async (_e, rendererExtras) => {\n const backup = require('./backup')\n const res = await dialog.showSaveDialog({\n title: 'Save Labaik backup',\n defaultPath: `labaik-backup-${new Date().toISOString().slice(0, 10)}.json`,\n filters: [{ name: 'Labaik backup', extensions: ['json'] }],\n })\n if (res.canceled || !res.filePath) return { ok: false, reason: 'cancelled' }\n try {\n const bundle = backup.exportBundle(rendererExtras)\n require('fs').writeFileSync(res.filePath, JSON.stringify(bundle), 'utf8')\n return { ok: true, path: res.filePath, files: Object.keys(bundle.files).length, skills: bundle.skills.length }\n } catch (err) {\n return { ok: false, reason: err.message }\n }\n})\nipcMain.handle('backup-import', async () => {\n const backup = require('./backup')\n const res = await dialog.showOpenDialog({\n title: 'Pick a Labaik backup file',\n filters: [{ name: 'Labaik backup', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n try {\n const bundle = JSON.parse(require('fs').readFileSync(res.filePaths[0], 'utf8'))\n return backup.importBundle(bundle)\n } catch (err) {\n return { ok: false, reason: 'Could not read backup: ' + err.message }\n }\n})\n\n// v0.8 market-fit: ChatGPT history import. Parses conversations.json from\n// ChatGPT's data export (Settings → Data controls → Export) and converts\n// each conversation to a plain {title, createdAt, messages[]} the renderer\n// merges into its sessions. The mapping is a node tree; we walk parent\n// links from current_node and reverse — the standard linearization.\nipcMain.handle('import-chatgpt', async () => {\n const fs = require('fs')\n const res = await dialog.showOpenDialog({\n title: 'Pick conversations.json from your ChatGPT export',\n filters: [{ name: 'ChatGPT export', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n let data\n try {\n const stat = fs.statSync(res.filePaths[0])\n if (stat.size > 300 * 1024 * 1024) return { ok: false, reason: 'File larger than 300MB' }\n data = JSON.parse(fs.readFileSync(res.filePaths[0], 'utf8'))\n } catch (err) {\n return { ok: false, reason: 'Could not parse: ' + err.message }\n }\n return require('./import-chatgpt').convertChatGPTExport(data)\n})\n\n// v0.8 market-fit: paste-any-key provider detection. Pattern fast-paths\n// for unambiguous formats; the ambiguous sk-… family gets resolved by\n// probing each candidate's cheap GET /models endpoint in parallel with the\n// pasted key — first authenticated 200 wins.\nconst KEY_PATTERNS = [\n [/^sk-ant-/, 'anthropic'],\n [/^AIza/, 'google'],\n [/^xai-/, 'xai'],\n [/^eyJ[A-Za-z0-9_-]+\\./, 'minimax'], // JWT\n [/^[0-9a-f]{16,}\\.[A-Za-z0-9]+$/, 'zhipu'], // id.secret\n]\nconst PROBE_ORDER = ['openai', 'deepseek', 'moonshot', 'kimi', 'dashscope', 'hunyuan', 'zhipu']\nfunction probeProviderKey(provider, key) {\n const https = require('https')\n const base = (getBaseURL(provider) || 'https://api.openai.com/v1').replace(/\\/$/, '')\n return new Promise((resolve) => {\n let u\n try { u = new URL(base + '/models') } catch { return resolve(null) }\n const req = https.request(u, { method: 'GET', headers: { Authorization: `Bearer ${key}` }, timeout: 6000 }, (res) => {\n res.resume()\n resolve(res.statusCode === 200 ? provider : null)\n })\n req.on('error', () => resolve(null))\n req.on('timeout', () => { try { req.destroy() } catch {}; resolve(null) })\n req.end()\n })\n}\nipcMain.handle('login-detect-key', async (_e, rawKey) => {\n const key = String(rawKey || '').trim()\n if (!key) return { provider: null }\n for (const [re, prov] of KEY_PATTERNS) {\n if (re.test(key)) return { provider: prov, method: 'pattern' }\n }\n const hits = (await Promise.all(PROBE_ORDER.map((p) => probeProviderKey(p, key)))).filter(Boolean)\n if (hits.length) return { provider: hits[0], method: 'probe', also: hits.slice(1) }\n return { provider: null }\n})\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\nipcMain.handle('routines-history', (_e, limit) => routines.history(limit))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 cycle 22: backup & restore. One portable JSON bundle (sessions,\n// memory, profile, routines, spaces, skills) — credentials excluded by\n// design. Import backs up every file it overwrites.\nipcMain.handle('backup-export', async (_e, rendererExtras) => {\n const backup = require('./backup')\n const res = await dialog.showSaveDialog({\n title: 'Save Labaik backup',\n defaultPath: `labaik-backup-${new Date().toISOString().slice(0, 10)}.json`,\n filters: [{ name: 'Labaik backup', extensions: ['json'] }],\n })\n if (res.canceled || !res.filePath) return { ok: false, reason: 'cancelled' }\n try {\n const bundle = backup.exportBundle(rendererExtras)\n require('fs').writeFileSync(res.filePath, JSON.stringify(bundle), 'utf8')\n return { ok: true, path: res.filePath, files: Object.keys(bundle.files).length, skills: bundle.skills.length }\n } catch (err) {\n return { ok: false, reason: err.message }\n }\n})\nipcMain.handle('backup-import', async () => {\n const backup = require('./backup')\n const res = await dialog.showOpenDialog({\n title: 'Pick a Labaik backup file',\n filters: [{ name: 'Labaik backup', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n try {\n const bundle = JSON.parse(require('fs').readFileSync(res.filePaths[0], 'utf8'))\n return backup.importBundle(bundle)\n } catch (err) {\n return { ok: false, reason: 'Could not read backup: ' + err.message }\n }\n})\n\n// v0.8 market-fit: ChatGPT history import. Parses conversations.json from\n// ChatGPT's data export (Settings → Data controls → Export) and converts\n// each conversation to a plain {title, createdAt, messages[]} the renderer\n// merges into its sessions. The mapping is a node tree; we walk parent\n// links from current_node and reverse — the standard linearization.\nipcMain.handle('import-chatgpt', async () => {\n const fs = require('fs')\n const res = await dialog.showOpenDialog({\n title: 'Pick conversations.json from your ChatGPT export',\n filters: [{ name: 'ChatGPT export', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n let data\n try {\n const stat = fs.statSync(res.filePaths[0])\n if (stat.size > 300 * 1024 * 1024) return { ok: false, reason: 'File larger than 300MB' }\n data = JSON.parse(fs.readFileSync(res.filePaths[0], 'utf8'))\n } catch (err) {\n return { ok: false, reason: 'Could not parse: ' + err.message }\n }\n return require('./import-chatgpt').convertChatGPTExport(data)\n})\n\n// v0.8 market-fit: paste-any-key provider detection. Pattern fast-paths\n// for unambiguous formats; the ambiguous sk-… family gets resolved by\n// probing each candidate's cheap GET /models endpoint in parallel with the\n// pasted key — first authenticated 200 wins.\nconst KEY_PATTERNS = [\n [/^sk-ant-/, 'anthropic'],\n [/^AIza/, 'google'],\n [/^xai-/, 'xai'],\n [/^eyJ[A-Za-z0-9_-]+\\./, 'minimax'], // JWT\n [/^[0-9a-f]{16,}\\.[A-Za-z0-9]+$/, 'zhipu'], // id.secret\n]\nconst PROBE_ORDER = ['openai', 'deepseek', 'moonshot', 'kimi', 'dashscope', 'hunyuan', 'zhipu']\nfunction probeProviderKey(provider, key) {\n const https = require('https')\n const base = (getBaseURL(provider) || 'https://api.openai.com/v1').replace(/\\/$/, '')\n return new Promise((resolve) => {\n let u\n try { u = new URL(base + '/models') } catch { return resolve(null) }\n const req = https.request(u, { method: 'GET', headers: { Authorization: `Bearer ${key}` }, timeout: 6000 }, (res) => {\n res.resume()\n resolve(res.statusCode === 200 ? provider : null)\n })\n req.on('error', () => resolve(null))\n req.on('timeout', () => { try { req.destroy() } catch {}; resolve(null) })\n req.end()\n })\n}\nipcMain.handle('login-detect-key', async (_e, rawKey) => {\n const key = String(rawKey || '').trim()\n if (!key) return { provider: null }\n for (const [re, prov] of KEY_PATTERNS) {\n if (re.test(key)) return { provider: prov, method: 'pattern' }\n }\n const hits = (await Promise.all(PROBE_ORDER.map((p) => probeProviderKey(p, key)))).filter(Boolean)\n if (hits.length) return { provider: hits[0], method: 'probe', also: hits.slice(1) }\n return { provider: null }\n})\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\nipcMain.handle('routines-history', (_e, limit) => routines.history(limit))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const researchMode = !!uxMeta?.researchMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode, researchMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 market-fit: ChatGPT history import. Parses conversations.json from\n// ChatGPT's data export (Settings → Data controls → Export) and converts\n// each conversation to a plain {title, createdAt, messages[]} the renderer\n// merges into its sessions. The mapping is a node tree; we walk parent\n// links from current_node and reverse — the standard linearization.\nipcMain.handle('import-chatgpt', async () => {\n const fs = require('fs')\n const res = await dialog.showOpenDialog({\n title: 'Pick conversations.json from your ChatGPT export',\n filters: [{ name: 'ChatGPT export', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n let data\n try {\n const stat = fs.statSync(res.filePaths[0])\n if (stat.size > 300 * 1024 * 1024) return { ok: false, reason: 'File larger than 300MB' }\n data = JSON.parse(fs.readFileSync(res.filePaths[0], 'utf8'))\n } catch (err) {\n return { ok: false, reason: 'Could not parse: ' + err.message }\n }\n return require('./import-chatgpt').convertChatGPTExport(data)\n})\n\n// v0.8 market-fit: paste-any-key provider detection. Pattern fast-paths\n// for unambiguous formats; the ambiguous sk-… family gets resolved by\n// probing each candidate's cheap GET /models endpoint in parallel with the\n// pasted key — first authenticated 200 wins.\nconst KEY_PATTERNS = [\n [/^sk-ant-/, 'anthropic'],\n [/^AIza/, 'google'],\n [/^xai-/, 'xai'],\n [/^eyJ[A-Za-z0-9_-]+\\./, 'minimax'], // JWT\n [/^[0-9a-f]{16,}\\.[A-Za-z0-9]+$/, 'zhipu'], // id.secret\n]\nconst PROBE_ORDER = ['openai', 'deepseek', 'moonshot', 'kimi', 'dashscope', 'hunyuan', 'zhipu']\nfunction probeProviderKey(provider, key) {\n const https = require('https')\n const base = (getBaseURL(provider) || 'https://api.openai.com/v1').replace(/\\/$/, '')\n return new Promise((resolve) => {\n let u\n try { u = new URL(base + '/models') } catch { return resolve(null) }\n const req = https.request(u, { method: 'GET', headers: { Authorization: `Bearer ${key}` }, timeout: 6000 }, (res) => {\n res.resume()\n resolve(res.statusCode === 200 ? provider : null)\n })\n req.on('error', () => resolve(null))\n req.on('timeout', () => { try { req.destroy() } catch {}; resolve(null) })\n req.end()\n })\n}\nipcMain.handle('login-detect-key', async (_e, rawKey) => {\n const key = String(rawKey || '').trim()\n if (!key) return { provider: null }\n for (const [re, prov] of KEY_PATTERNS) {\n if (re.test(key)) return { provider: prov, method: 'pattern' }\n }\n const hits = (await Promise.all(PROBE_ORDER.map((p) => probeProviderKey(p, key)))).filter(Boolean)\n if (hits.length) return { provider: hits[0], method: 'probe', also: hits.slice(1) }\n return { provider: null }\n})\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\nipcMain.handle('routines-history', (_e, limit) => routines.history(limit))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 market-fit: ChatGPT history import. Parses conversations.json from\n// ChatGPT's data export (Settings → Data controls → Export) and converts\n// each conversation to a plain {title, createdAt, messages[]} the renderer\n// merges into its sessions. The mapping is a node tree; we walk parent\n// links from current_node and reverse — the standard linearization.\nipcMain.handle('import-chatgpt', async () => {\n const fs = require('fs')\n const res = await dialog.showOpenDialog({\n title: 'Pick conversations.json from your ChatGPT export',\n filters: [{ name: 'ChatGPT export', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n let data\n try {\n const stat = fs.statSync(res.filePaths[0])\n if (stat.size > 300 * 1024 * 1024) return { ok: false, reason: 'File larger than 300MB' }\n data = JSON.parse(fs.readFileSync(res.filePaths[0], 'utf8'))\n } catch (err) {\n return { ok: false, reason: 'Could not parse: ' + err.message }\n }\n return require('./import-chatgpt').convertChatGPTExport(data)\n})\n\n// v0.8 market-fit: paste-any-key provider detection. Pattern fast-paths\n// for unambiguous formats; the ambiguous sk-… family gets resolved by\n// probing each candidate's cheap GET /models endpoint in parallel with the\n// pasted key — first authenticated 200 wins.\nconst KEY_PATTERNS = [\n [/^sk-ant-/, 'anthropic'],\n [/^AIza/, 'google'],\n [/^xai-/, 'xai'],\n [/^eyJ[A-Za-z0-9_-]+\\./, 'minimax'], // JWT\n [/^[0-9a-f]{16,}\\.[A-Za-z0-9]+$/, 'zhipu'], // id.secret\n]\nconst PROBE_ORDER = ['openai', 'deepseek', 'moonshot', 'kimi', 'dashscope', 'hunyuan', 'zhipu']\nfunction probeProviderKey(provider, key) {\n const https = require('https')\n const base = (getBaseURL(provider) || 'https://api.openai.com/v1').replace(/\\/$/, '')\n return new Promise((resolve) => {\n let u\n try { u = new URL(base + '/models') } catch { return resolve(null) }\n const req = https.request(u, { method: 'GET', headers: { Authorization: `Bearer ${key}` }, timeout: 6000 }, (res) => {\n res.resume()\n resolve(res.statusCode === 200 ? provider : null)\n })\n req.on('error', () => resolve(null))\n req.on('timeout', () => { try { req.destroy() } catch {}; resolve(null) })\n req.end()\n })\n}\nipcMain.handle('login-detect-key', async (_e, rawKey) => {\n const key = String(rawKey || '').trim()\n if (!key) return { provider: null }\n for (const [re, prov] of KEY_PATTERNS) {\n if (re.test(key)) return { provider: prov, method: 'pattern' }\n }\n const hits = (await Promise.all(PROBE_ORDER.map((p) => probeProviderKey(p, key)))).filter(Boolean)\n if (hits.length) return { provider: hits[0], method: 'probe', also: hits.slice(1) }\n return { provider: null }\n})\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\nipcMain.handle('routines-history', (_e, limit) => routines.history(limit))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 market-fit: ChatGPT history import. Parses conversations.json from\n// ChatGPT's data export (Settings → Data controls → Export) and converts\n// each conversation to a plain {title, createdAt, messages[]} the renderer\n// merges into its sessions. The mapping is a node tree; we walk parent\n// links from current_node and reverse — the standard linearization.\nipcMain.handle('import-chatgpt', async () => {\n const fs = require('fs')\n const res = await dialog.showOpenDialog({\n title: 'Pick conversations.json from your ChatGPT export',\n filters: [{ name: 'ChatGPT export', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n let data\n try {\n const stat = fs.statSync(res.filePaths[0])\n if (stat.size > 300 * 1024 * 1024) return { ok: false, reason: 'File larger than 300MB' }\n data = JSON.parse(fs.readFileSync(res.filePaths[0], 'utf8'))\n } catch (err) {\n return { ok: false, reason: 'Could not parse: ' + err.message }\n }\n return require('./import-chatgpt').convertChatGPTExport(data)\n})\n\n// v0.8 market-fit: paste-any-key provider detection. Pattern fast-paths\n// for unambiguous formats; the ambiguous sk-… family gets resolved by\n// probing each candidate's cheap GET /models endpoint in parallel with the\n// pasted key — first authenticated 200 wins.\nconst KEY_PATTERNS = [\n [/^sk-ant-/, 'anthropic'],\n [/^AIza/, 'google'],\n [/^xai-/, 'xai'],\n [/^eyJ[A-Za-z0-9_-]+\\./, 'minimax'], // JWT\n [/^[0-9a-f]{16,}\\.[A-Za-z0-9]+$/, 'zhipu'], // id.secret\n]\nconst PROBE_ORDER = ['openai', 'deepseek', 'moonshot', 'kimi', 'dashscope', 'hunyuan', 'zhipu']\nfunction probeProviderKey(provider, key) {\n const https = require('https')\n const base = (getBaseURL(provider) || 'https://api.openai.com/v1').replace(/\\/$/, '')\n return new Promise((resolve) => {\n let u\n try { u = new URL(base + '/models') } catch { return resolve(null) }\n const req = https.request(u, { method: 'GET', headers: { Authorization: `Bearer ${key}` }, timeout: 6000 }, (res) => {\n res.resume()\n resolve(res.statusCode === 200 ? provider : null)\n })\n req.on('error', () => resolve(null))\n req.on('timeout', () => { try { req.destroy() } catch {}; resolve(null) })\n req.end()\n })\n}\nipcMain.handle('login-detect-key', async (_e, rawKey) => {\n const key = String(rawKey || '').trim()\n if (!key) return { provider: null }\n for (const [re, prov] of KEY_PATTERNS) {\n if (re.test(key)) return { provider: prov, method: 'pattern' }\n }\n const hits = (await Promise.all(PROBE_ORDER.map((p) => probeProviderKey(p, key)))).filter(Boolean)\n if (hits.length) return { provider: hits[0], method: 'probe', also: hits.slice(1) }\n return { provider: null }\n})\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\nipcMain.handle('routines-history', (_e, limit) => routines.history(limit))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 market-fit: ChatGPT history import. Parses conversations.json from\n// ChatGPT's data export (Settings → Data controls → Export) and converts\n// each conversation to a plain {title, createdAt, messages[]} the renderer\n// merges into its sessions. The mapping is a node tree; we walk parent\n// links from current_node and reverse — the standard linearization.\nipcMain.handle('import-chatgpt', async () => {\n const fs = require('fs')\n const res = await dialog.showOpenDialog({\n title: 'Pick conversations.json from your ChatGPT export',\n filters: [{ name: 'ChatGPT export', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n let data\n try {\n const stat = fs.statSync(res.filePaths[0])\n if (stat.size > 300 * 1024 * 1024) return { ok: false, reason: 'File larger than 300MB' }\n data = JSON.parse(fs.readFileSync(res.filePaths[0], 'utf8'))\n } catch (err) {\n return { ok: false, reason: 'Could not parse: ' + err.message }\n }\n return require('./import-chatgpt').convertChatGPTExport(data)\n})\n\n// v0.8 market-fit: paste-any-key provider detection. Pattern fast-paths\n// for unambiguous formats; the ambiguous sk-… family gets resolved by\n// probing each candidate's cheap GET /models endpoint in parallel with the\n// pasted key — first authenticated 200 wins.\nconst KEY_PATTERNS = [\n [/^sk-ant-/, 'anthropic'],\n [/^AIza/, 'google'],\n [/^xai-/, 'xai'],\n [/^eyJ[A-Za-z0-9_-]+\\./, 'minimax'], // JWT\n [/^[0-9a-f]{16,}\\.[A-Za-z0-9]+$/, 'zhipu'], // id.secret\n]\nconst PROBE_ORDER = ['openai', 'deepseek', 'moonshot', 'kimi', 'dashscope', 'hunyuan', 'zhipu']\nfunction probeProviderKey(provider, key) {\n const https = require('https')\n const base = (getBaseURL(provider) || 'https://api.openai.com/v1').replace(/\\/$/, '')\n return new Promise((resolve) => {\n let u\n try { u = new URL(base + '/models') } catch { return resolve(null) }\n const req = https.request(u, { method: 'GET', headers: { Authorization: `Bearer ${key}` }, timeout: 6000 }, (res) => {\n res.resume()\n resolve(res.statusCode === 200 ? provider : null)\n })\n req.on('error', () => resolve(null))\n req.on('timeout', () => { try { req.destroy() } catch {}; resolve(null) })\n req.end()\n })\n}\nipcMain.handle('login-detect-key', async (_e, rawKey) => {\n const key = String(rawKey || '').trim()\n if (!key) return { provider: null }\n for (const [re, prov] of KEY_PATTERNS) {\n if (re.test(key)) return { provider: prov, method: 'pattern' }\n }\n const hits = (await Promise.all(PROBE_ORDER.map((p) => probeProviderKey(p, key)))).filter(Boolean)\n if (hits.length) return { provider: hits[0], method: 'probe', also: hits.slice(1) }\n return { provider: null }\n})\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\nipcMain.handle('routines-history', (_e, limit) => routines.history(limit))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 market-fit: ChatGPT history import. Parses conversations.json from\n// ChatGPT's data export (Settings → Data controls → Export) and converts\n// each conversation to a plain {title, createdAt, messages[]} the renderer\n// merges into its sessions. The mapping is a node tree; we walk parent\n// links from current_node and reverse — the standard linearization.\nipcMain.handle('import-chatgpt', async () => {\n const fs = require('fs')\n const res = await dialog.showOpenDialog({\n title: 'Pick conversations.json from your ChatGPT export',\n filters: [{ name: 'ChatGPT export', extensions: ['json'] }],\n properties: ['openFile'],\n })\n if (res.canceled || !res.filePaths?.[0]) return { ok: false, reason: 'cancelled' }\n let data\n try {\n const stat = fs.statSync(res.filePaths[0])\n if (stat.size > 300 * 1024 * 1024) return { ok: false, reason: 'File larger than 300MB' }\n data = JSON.parse(fs.readFileSync(res.filePaths[0], 'utf8'))\n } catch (err) {\n return { ok: false, reason: 'Could not parse: ' + err.message }\n }\n return require('./import-chatgpt').convertChatGPTExport(data)\n})\n\n// v0.8 market-fit: paste-any-key provider detection. Pattern fast-paths\n// for unambiguous formats; the ambiguous sk-… family gets resolved by\n// probing each candidate's cheap GET /models endpoint in parallel with the\n// pasted key — first authenticated 200 wins.\nconst KEY_PATTERNS = [\n [/^sk-ant-/, 'anthropic'],\n [/^AIza/, 'google'],\n [/^xai-/, 'xai'],\n [/^eyJ[A-Za-z0-9_-]+\\./, 'minimax'], // JWT\n [/^[0-9a-f]{16,}\\.[A-Za-z0-9]+$/, 'zhipu'], // id.secret\n]\nconst PROBE_ORDER = ['openai', 'deepseek', 'moonshot', 'kimi', 'dashscope', 'hunyuan', 'zhipu']\nfunction probeProviderKey(provider, key) {\n const https = require('https')\n const base = (getBaseURL(provider) || 'https://api.openai.com/v1').replace(/\\/$/, '')\n return new Promise((resolve) => {\n let u\n try { u = new URL(base + '/models') } catch { return resolve(null) }\n const req = https.request(u, { method: 'GET', headers: { Authorization: `Bearer ${key}` }, timeout: 6000 }, (res) => {\n res.resume()\n resolve(res.statusCode === 200 ? provider : null)\n })\n req.on('error', () => resolve(null))\n req.on('timeout', () => { try { req.destroy() } catch {}; resolve(null) })\n req.end()\n })\n}\nipcMain.handle('login-detect-key', async (_e, rawKey) => {\n const key = String(rawKey || '').trim()\n if (!key) return { provider: null }\n for (const [re, prov] of KEY_PATTERNS) {\n if (re.test(key)) return { provider: prov, method: 'pattern' }\n }\n const hits = (await Promise.all(PROBE_ORDER.map((p) => probeProviderKey(p, key)))).filter(Boolean)\n if (hits.length) return { provider: hits[0], method: 'probe', also: hits.slice(1) }\n return { provider: null }\n})\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 market-fit: paste-any-key provider detection. Pattern fast-paths\n// for unambiguous formats; the ambiguous sk-… family gets resolved by\n// probing each candidate's cheap GET /models endpoint in parallel with the\n// pasted key — first authenticated 200 wins.\nconst KEY_PATTERNS = [\n [/^sk-ant-/, 'anthropic'],\n [/^AIza/, 'google'],\n [/^xai-/, 'xai'],\n [/^eyJ[A-Za-z0-9_-]+\\./, 'minimax'], // JWT\n [/^[0-9a-f]{16,}\\.[A-Za-z0-9]+$/, 'zhipu'], // id.secret\n]\nconst PROBE_ORDER = ['openai', 'deepseek', 'moonshot', 'kimi', 'dashscope', 'hunyuan', 'zhipu']\nfunction probeProviderKey(provider, key) {\n const https = require('https')\n const base = (getBaseURL(provider) || 'https://api.openai.com/v1').replace(/\\/$/, '')\n return new Promise((resolve) => {\n let u\n try { u = new URL(base + '/models') } catch { return resolve(null) }\n const req = https.request(u, { method: 'GET', headers: { Authorization: `Bearer ${key}` }, timeout: 6000 }, (res) => {\n res.resume()\n resolve(res.statusCode === 200 ? provider : null)\n })\n req.on('error', () => resolve(null))\n req.on('timeout', () => { try { req.destroy() } catch {}; resolve(null) })\n req.end()\n })\n}\nipcMain.handle('login-detect-key', async (_e, rawKey) => {\n const key = String(rawKey || '').trim()\n if (!key) return { provider: null }\n for (const [re, prov] of KEY_PATTERNS) {\n if (re.test(key)) return { provider: prov, method: 'pattern' }\n }\n const hits = (await Promise.all(PROBE_ORDER.map((p) => probeProviderKey(p, key)))).filter(Boolean)\n if (hits.length) return { provider: hits[0], method: 'probe', also: hits.slice(1) }\n return { provider: null }\n})\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8 market-fit: paste-any-key provider detection. Pattern fast-paths\n// for unambiguous formats; the ambiguous sk-… family gets resolved by\n// probing each candidate's cheap GET /models endpoint in parallel with the\n// pasted key — first authenticated 200 wins.\nconst KEY_PATTERNS = [\n [/^sk-ant-/, 'anthropic'],\n [/^AIza/, 'google'],\n [/^xai-/, 'xai'],\n [/^eyJ[A-Za-z0-9_-]+\\./, 'minimax'], // JWT\n [/^[0-9a-f]{16,}\\.[A-Za-z0-9]+$/, 'zhipu'], // id.secret\n]\nconst PROBE_ORDER = ['openai', 'deepseek', 'moonshot', 'kimi', 'dashscope', 'hunyuan', 'zhipu']\nfunction probeProviderKey(provider, key) {\n const https = require('https')\n const base = (getBaseURL(provider) || 'https://api.openai.com/v1').replace(/\\/$/, '')\n return new Promise((resolve) => {\n let u\n try { u = new URL(base + '/models') } catch { return resolve(null) }\n const req = https.request(u, { method: 'GET', headers: { Authorization: `Bearer ${key}` }, timeout: 6000 }, (res) => {\n res.resume()\n resolve(res.statusCode === 200 ? provider : null)\n })\n req.on('error', () => resolve(null))\n req.on('timeout', () => { try { req.destroy() } catch {}; resolve(null) })\n req.end()\n })\n}\nipcMain.handle('login-detect-key', async (_e, rawKey) => {\n const key = String(rawKey || '').trim()\n if (!key) return { provider: null }\n for (const [re, prov] of KEY_PATTERNS) {\n if (re.test(key)) return { provider: prov, method: 'pattern' }\n }\n const hits = (await Promise.all(PROBE_ORDER.map((p) => probeProviderKey(p, key)))).filter(Boolean)\n if (hits.length) return { provider: hits[0], method: 'probe', also: hits.slice(1) }\n return { provider: null }\n})\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\n// v0.8: Stop generation. Cancels every in-flight worker chat — the worker\n// aborts its provider stream(s) and each chat resolves with partial text.\nipcMain.handle('chat-cancel-all', () => {\n let n = 0\n for (const id of pendingRequests.keys()) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'chat-cancel', id }) + '\\n'); n++ } catch {}\n }\n return n\n})\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n chatId: resp.chatId, // pendingRequests key — workerId is the ap_ bridge id\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.chatId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/Invalid state or missing code. Please try again.
')\n server.close()\n reject(new Error('OAuth state mismatch'))\n return\n }\n\n // Exchange code for tokens\n try {\n const tokenRes = await fetch(OAUTH_CONFIG.tokenUrl, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n grant_type: 'authorization_code',\n client_id: OAUTH_CONFIG.clientId,\n code,\n redirect_uri: `http://localhost:${port}/callback`,\n code_verifier: verifier,\n }),\n })\n\n if (!tokenRes.ok) {\n const errText = await tokenRes.text()\n throw new Error(`Token exchange failed: ${tokenRes.status} ${errText}`)\n }\n\n const tokens = await tokenRes.json()\n const accessToken = tokens.access_token\n\n // Save the OAuth access token under the oauth slot (not the api-key\n // slot) so chatAnthropic can pass it as a Bearer token instead of\n // x-api-key.\n saveCredential('anthropic', accessToken, 'oauth')\n\n res.writeHead(200, { 'Content-Type': 'text/html' })\n res.end('You can close this window and return to Labaik.
')\n server.close()\n\n // Notify the renderer\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('login-success', 'anthropic')\n }\n\n resolve({ provider: 'anthropic', success: true })\n } catch (err) {\n res.writeHead(500, { 'Content-Type': 'text/html' })\n res.end(`${err.message}
`)\n server.close()\n reject(err)\n }\n })\n\n // Fail fast if the random port is already in use (was hanging until the\n // 5-min timeout because no 'error' handler existed on the server).\n server.on('error', (err) => { try { server.close() } catch {}; reject(err) })\n server.listen(port, '127.0.0.1', () => {\n // Build the OAuth URL\n const authUrl = new URL(OAUTH_CONFIG.authorizeUrl)\n authUrl.searchParams.set('client_id', OAUTH_CONFIG.clientId)\n authUrl.searchParams.set('response_type', 'code')\n authUrl.searchParams.set('redirect_uri', `http://localhost:${port}/callback`)\n authUrl.searchParams.set('scope', OAUTH_CONFIG.scopes)\n authUrl.searchParams.set('code_challenge', challenge)\n authUrl.searchParams.set('code_challenge_method', 'S256')\n authUrl.searchParams.set('state', state)\n authUrl.searchParams.set('code', 'true')\n\n // Open browser\n shell.openExternal(authUrl.toString())\n })\n\n // Timeout after 5 minutes\n setTimeout(() => {\n server.close()\n reject(new Error('Login timed out'))\n }, 300000)\n })\n}\n\nfunction saveCredential(provider, key, kind /* 'api' | 'oauth' */) {\n const fs = require('fs')\n // v0.7.64: writes go to ~/.labaik/credentials.json. Reads still fall\n // back to ~/.claude/.credentials.json until the user saves a key, at\n // which point the new file becomes authoritative.\n const credPath = paths.CREDENTIALS_FILE\n const legacyCredPath = path.join(paths.LEGACY_CLAUDE_DIR, '.credentials.json')\n\n let data = {}\n try {\n if (fs.existsSync(credPath)) {\n data = JSON.parse(fs.readFileSync(credPath, 'utf8'))\n } else if (fs.existsSync(legacyCredPath)) {\n // First write after upgrade: seed from the legacy file so other\n // providers' keys don't get wiped when saving one.\n data = JSON.parse(fs.readFileSync(legacyCredPath, 'utf8'))\n }\n } catch {}\n\n if (kind === 'oauth') {\n if (!data.providerOauthTokens) data.providerOauthTokens = {}\n data.providerOauthTokens[provider] = key\n // Clear any stale API key in the same slot — OAuth wins.\n if (data.providerApiKeys && data.providerApiKeys[provider]) {\n delete data.providerApiKeys[provider]\n }\n } else {\n if (!data.providerApiKeys) data.providerApiKeys = {}\n data.providerApiKeys[provider] = key\n // And clear any stale OAuth token so API-key-set replaces it.\n if (data.providerOauthTokens && data.providerOauthTokens[provider]) {\n delete data.providerOauthTokens[provider]\n }\n }\n\n paths.ensureBaseDir()\n fs.writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 0o600 })\n}\n\n// ── IPC: Chat ────────────────────────────────────────────────────────────────\n\n// ── API Worker (runs in plain Node.js to avoid Electron network issues) ──────\n\nconst { spawn: spawnChild } = require('child_process')\n\n// ── v0.7.40 — dev server lifecycle tracking ──────────────────────────\n// Servers started via the worker's start_dev_server tool live as detached\n// child processes. Without tracking them, they accumulate across sessions:\n// closing Labaik doesn't stop them, so the next test that picks the same\n// port silently collides with a zombie server (the recurring \"localhost\n// serves old files\" bug). We store PIDs here and kill them on:\n// - window close (before quit)\n// - new session (renderer sends 'kill-tracked-servers')\n// Tracking is lossy across Labaik restarts (servers from a previous run\n// are orphaned) — mostly that's fine since they die with the shell; the\n// stuck ones are the ones we started in THIS process.\nlet trackedServers = []\nfunction killAllTrackedServers(reason = 'cleanup') {\n const killed = []\n for (const s of trackedServers) {\n try {\n // Detached children started by `spawn(..., {detached: true})` run as\n // their own process group; -pid kills the whole group.\n try { process.kill(-s.pid, 'SIGTERM') } catch { process.kill(s.pid, 'SIGTERM') }\n killed.push(s.pid)\n } catch (err) {\n // Already dead / permission denied — ignore, continue to next.\n }\n }\n if (killed.length) console.log(`[server-cleanup] killed ${killed.length} tracked server(s) (${reason}):`, killed)\n trackedServers = []\n return killed\n}\n// Last-chance cleanup when Labaik itself is quitting.\napp?.on?.('before-quit', () => killAllTrackedServers('app-quit'))\nlet apiWorker = null\nlet requestId = 0\nconst pendingRequests = new Map()\n\nfunction getWorker() {\n if (apiWorker && !apiWorker.killed) return apiWorker\n\n // Binary selection:\n // Packaged app → always use Electron-as-Node (process.execPath +\n // ELECTRON_RUN_AS_NODE=1). Guaranteed present inside the .app bundle.\n // System `node` doesn't exist on every Mac, and even when it does it\n // can't read files packaged inside app.asar — which is where main.js\n // lives at runtime.\n // Dev mode → prefer a real system `node` (slightly snappier startup,\n // and the original reason we introduced the split). Fall back to\n // Electron-as-Node if no system node is found.\n const nodeBin = (() => {\n if (app.isPackaged) return process.execPath\n const fsMod = require('fs')\n const candidates = [\n '/usr/local/bin/node',\n '/opt/homebrew/bin/node',\n path.join(os.homedir(), '.nvm/versions/node', 'current', 'bin', 'node'),\n ]\n for (const c of candidates) { if (fsMod.existsSync(c)) return c }\n return process.execPath\n })()\n const workerEnv = { ...process.env }\n if (nodeBin === process.execPath) workerEnv.ELECTRON_RUN_AS_NODE = '1'\n\n console.log('[worker] spawning with binary:', nodeBin, '(packaged:', app.isPackaged, ')')\n apiWorker = spawnChild(nodeBin, [path.join(__dirname, 'api-worker.js')], {\n stdio: ['pipe', 'pipe', 'inherit'],\n env: workerEnv,\n })\n\n // Surface worker-side crashes so \"Worker crashed\" is actionable, not silent\n apiWorker.on('error', (err) => console.error('[worker] spawn error:', err))\n apiWorker.stderr?.on('data', (chunk) => process.stderr.write(`[worker stderr] ${chunk}`))\n\n let buf = ''\n apiWorker.stdout.setEncoding('utf8')\n apiWorker.stdout.on('data', (chunk) => {\n buf += chunk\n let idx\n while ((idx = buf.indexOf('\\n')) !== -1) {\n const line = buf.slice(0, idx)\n buf = buf.slice(idx + 1)\n if (!line.trim()) continue\n try {\n const resp = JSON.parse(line)\n // Live in-flight events (tool calls, thinking steps). Forward to\n // renderer but DON'T resolve the pending promise — the final\n // {id, result} still follows.\n if (resp.activity) {\n // Route activity to the window that actually sent this request.\n // Broadcasting to both windows leaked Quick-window tool calls onto\n // the main chat (and vice versa) when both were in use.\n const pendingForActivity = pendingRequests.get(resp.id)\n const sender = pendingForActivity?.sender\n try {\n if (sender && !sender.isDestroyed()) sender.send('tool-activity', resp.activity)\n else mainWindow?.webContents?.send('tool-activity', resp.activity)\n } catch {}\n // Each activity tick resets the \"no progress\" idle timer. Long\n // website-builds etc. that stream for minutes now stay alive.\n try { pendingForActivity?.onActivity?.() } catch {}\n continue\n }\n // v0.7.40: worker spawned a dev server via start_dev_server. Track\n // its PID so we can kill it on window close / new session — avoids\n // the \"stale Python server holding port 8000\" bug where every new\n // test started a new server on top of a zombie one.\n if (resp.type === 'server_started' && typeof resp.pid === 'number') {\n trackedServers.push({\n pid: resp.pid,\n port: resp.port,\n command: resp.command,\n workspacePath: resp.workspacePath,\n startedAt: Date.now(),\n })\n // Cap memory: keep the last 20 (oldest dropped, but still killed\n // as part of killAllTrackedServers on app quit).\n if (trackedServers.length > 20) trackedServers = trackedServers.slice(-20)\n continue\n }\n // v0.5.6: MCP tool bridge. Worker asks main for the current MCP\n // tool schemas (so it can merge them into the request) or to execute\n // an MCP tool call. Same shape as the browser-tool bridge.\n if (resp.type === 'mcp-list') {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-list-response', id: resp.id, tools: mcp.getToolSchemas() }) + '\\n') } catch {}\n continue\n }\n if (resp.type === 'mcp-call') {\n ;(async () => {\n let result\n try { result = await mcp.callTool(resp.name, resp.args || {}) }\n catch (err) { result = { error: String(err?.message || err) } }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'mcp-call-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.4.1: approval request. The worker wants to run a side-effecting\n // tool; main resolves the permission gate (it owns the rules) and,\n // if the verdict is 'prompt', asks the user via the renderer dialog.\n if (resp.type === 'approval') {\n const pendingForApproval = pendingRequests.get(resp.chatId)\n handleApprovalRequest(resp, pendingForApproval)\n continue\n }\n // v0.5.5: Browser Agent tool request from the worker. We run the\n // actual Electron BrowserWindow API here in main (the worker can't\n // touch BrowserWindow) and write the result back to its stdin.\n if (resp.type === 'browser-tool') {\n const bA = require('./browser-agent')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'browser_navigate') result = await bA.navigate(a.url)\n else if (resp.name === 'browser_get_text') result = await bA.getText(a.selector)\n else if (resp.name === 'browser_click') result = await bA.click(a.selector)\n else if (resp.name === 'browser_fill') result = await bA.fill(a.selector, a.text)\n else if (resp.name === 'browser_screenshot') result = await bA.screenshot()\n else result = { error: `unknown browser tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'browser-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n // v0.5.10: Screen control tool request (full desktop, not just browser).\n if (resp.type === 'screen-tool') {\n const sC = require('./screen-control')\n ;(async () => {\n let result\n try {\n const a = resp.args || {}\n if (resp.name === 'screen_click') result = await sC.click(a)\n else if (resp.name === 'screen_type') result = await sC.type(a)\n else if (resp.name === 'screen_key') result = await sC.key(a)\n else if (resp.name === 'screen_move_mouse') result = await sC.moveMouse(a)\n else result = { error: `unknown screen tool: ${resp.name}` }\n } catch (err) {\n result = { error: String(err?.message || err) }\n }\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'screen-tool-response', id: resp.id, result }) + '\\n') } catch {}\n })()\n continue\n }\n const pending = pendingRequests.get(resp.id)\n if (pending) {\n pendingRequests.delete(resp.id)\n if (resp.error) pending.reject(new Error(resp.error))\n else pending.resolve(resp.result)\n }\n } catch {}\n }\n })\n\n apiWorker.on('exit', () => {\n apiWorker = null\n for (const [id, p] of pendingRequests) {\n p.reject(new Error('Worker crashed'))\n pendingRequests.delete(id)\n }\n })\n\n return apiWorker\n}\n\nipcMain.handle('chat', async (event, messagesRaw, model, workspacePath, spaceId, uxMeta) => {\n const id = ++requestId\n const worker = getWorker()\n const senderWebContents = event?.sender\n\n // Compose system prompt from active space\n let spacePrompt = ''\n if (spaceId) {\n const builtIn = getSpaceById(spaceId)\n if (builtIn && builtIn.id === spaceId) {\n spacePrompt = builtIn.systemPromptAddition || ''\n } else {\n const custom = spacesStore.getCustomSpaces().find(s => s.id === spaceId)\n spacePrompt = custom?.systemPromptAddition || ''\n }\n }\n\n // ── OODA: log chat_send ──\n const messageId = uxMeta?.messageId || `m_${id}_${Date.now()}`\n const sessionId = uxMeta?.sessionId || 'unknown'\n const lastUser = messagesRaw.slice().reverse().find(m => m.role === 'user')\n const promptLen = lastUser ? String(lastUser.content || '').length : 0\n const provider = detectProviderForUx(model)\n const sendTs = Date.now()\n ooda.logEvent({\n kind: 'chat_send',\n sessionId,\n messageId,\n space: spaceId || 'general',\n provider,\n model: model || '',\n entry: uxMeta?.entry || 'freeform',\n action: uxMeta?.action || null,\n hasWorkspace: !!workspacePath,\n hasAttachments: !!uxMeta?.hasAttachments,\n promptHash: uxMeta?.promptHash || null,\n promptLen,\n })\n\n const finalize = (success, errorMsg, responseLen) => {\n ooda.logEvent({\n kind: success ? 'chat_complete' : 'chat_error',\n sessionId,\n messageId,\n success,\n latencyMs: Date.now() - sendTs,\n errorType: success ? null : classifyError(errorMsg),\n errorMsg: success ? null : String(errorMsg || '').slice(0, 200),\n responseLen: responseLen || 0,\n })\n // chat_complete-kinded event must exist for outcome builder — emit a synthetic\n // completion marker on error too so the outcome is captured.\n if (!success) {\n ooda.logEvent({\n kind: 'chat_complete',\n sessionId,\n messageId,\n success: false,\n latencyMs: Date.now() - sendTs,\n errorType: classifyError(errorMsg),\n })\n }\n // Fire-and-forget batch check\n setImmediate(() => {\n const res = ooda.maybeRunBatch()\n if (res?.ran) console.log(`[ooda] batch #${res.batchId} ran — ${res.diagnosis?.problem}`)\n })\n }\n\n return new Promise((resolve, reject) => {\n // Activity-based idle timeout. Previous design was a hard wall-clock\n // cap (2 min cloud / 10 min local) that killed legit long workflows\n // like 'build me a website' — models that tool-call + stream for 3+\n // min would get cut off even though every turn was making progress.\n // Now: each activity event (token chunk, tool_start, tool_end,\n // file_edit, thinking) resets the timer. Only a genuinely silent\n // provider/worker bails out.\n const isLocalModel = provider === 'ollama'\n // v0.7.69: reasoning-model carve-out. Models that \"think\" before\n // emitting visible tokens (DeepSeek V4 / Reasoner, OpenAI o1/o3,\n // any *-thinking variant, GLM-4.5-thinking, Qwen3-thinking) can\n // legitimately be silent for 2-5 minutes mid-analysis. The default\n // cloud cap of 90s killed those requests with the misleading\n // \"Provider is silent\" error. Real-world repro: DeepSeek-v4-pro\n // on a multi-file code review crashed at the 90s mark.\n const isReasoningModel = /reasoner|thinking|^o[13]|^gpt-5.*think|deepseek-v4|deepseek-reasoner/i.test(model || '')\n // Idle (no-activity) cap. Reasoning + local both get 5 min; other\n // cloud models get 3 min (was 90s — still strong enough to surface\n // a genuinely dead socket without amputating legit long thinking).\n const IDLE_MS = (isLocalModel || isReasoningModel) ? 5 * 60 * 1000 : 3 * 60 * 1000\n // Absolute ceiling so a model in an infinite tool-loop doesn't burn\n // credits forever even if it keeps emitting activity.\n const ABS_MS = isLocalModel ? 30 * 60 * 1000 : 15 * 60 * 1000\n let idleTimer = null\n const absTimer = setTimeout(() => {\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n const err = new Error(`Request exceeded hard cap (${Math.round(ABS_MS / 60000)} min). The model was still producing but hit the overall safety ceiling — split the task into smaller turns.`)\n finalize(false, err); reject(err)\n }\n }, ABS_MS)\n const armIdle = () => {\n if (idleTimer) clearTimeout(idleTimer)\n idleTimer = setTimeout(() => {\n // Don't kill a request that's parked on a human approval dialog —\n // re-arm and keep waiting (the 10-min worker-side cap + ABS_MS\n // ceiling still bound the wait).\n if (pendingRequests.get(id)?.awaitingApproval) { armIdle(); return }\n if (pendingRequests.has(id)) {\n pendingRequests.delete(id)\n clearTimeout(absTimer)\n const secs = Math.round(IDLE_MS / 1000)\n const err = new Error(`No activity for ${secs}s. ${isLocalModel\n ? 'Local model may be stuck — check Ollama is running and try a shorter prompt.'\n : 'Provider is silent — could be rate-limit, a dead socket, or network trouble.'}`)\n finalize(false, err); reject(err)\n }\n }, IDLE_MS)\n }\n pendingRequests.set(id, {\n sender: senderWebContents,\n resolve: (result) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(true, null, String(result || '').length); resolve(result)\n },\n reject: (err) => {\n clearTimeout(absTimer); if (idleTimer) clearTimeout(idleTimer)\n finalize(false, err); reject(err)\n },\n // Called from the activity forwarder whenever the worker emits a\n // token / tool_start / tool_end / file_edit / thinking event.\n onActivity: armIdle,\n })\n // Pass the current permission mode for this workspace so the worker can\n // gate tool execution before the OS-level tool call actually runs.\n const mode = getCurrentMode(workspacePath)\n // v0.7.67 — plan mode propagates from the renderer through uxMeta. The\n // worker uses it to swap in the plan-only system prompt and skip tool\n // offerings so the model can't sneak past the \"no execution\" rule.\n const planMode = !!uxMeta?.planMode\n const req = JSON.stringify({ id, messageId, messages: messagesRaw, model, workspacePath, spacePrompt, mode, planMode }) + '\\n'\n console.log('[chat] sending to worker, id:', id, 'space:', spaceId || 'general')\n worker.stdin.write(req, 'utf8')\n armIdle()\n })\n})\n\n// ── OODA IPC ─────────────────────────────────────────────────────────────────\nipcMain.handle('ux-event', (_e, event) => {\n try { ooda.logEvent(event); return true } catch { return false }\n})\nipcMain.handle('ux-insights', () => ooda.getLatestSummary())\nipcMain.handle('ux-run-batch', () => ooda.maybeRunBatch({ force: true }))\n\nasync function chatAnthropic(messagesRaw, model, workspacePath) {\n const AnthropicModule = require('@anthropic-ai/sdk')\n const Anthropic = AnthropicModule.default || AnthropicModule\n const apiKey = getApiKey('anthropic')\n if (!apiKey) throw new Error('No Anthropic API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new Anthropic({ apiKey, timeout: 60000 })\n\n const systemPrompt = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user. When writing code, always use write_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant.'\n\n const anthropicTools = workspacePath ? TOOLS.map(t => ({\n name: t.function.name,\n description: t.function.description,\n input_schema: t.function.parameters,\n })) : undefined\n\n const messages = messagesRaw.map(m => ({ role: m.role, content: m.content }))\n\n let fullResponse = ''\n let toolLog = ''\n\n for (let i = 0; i < 10; i++) {\n const response = await client.messages.create({\n model: model || 'claude-sonnet-4-5',\n max_tokens: 4096,\n system: systemPrompt,\n messages,\n ...(anthropicTools ? { tools: anthropicTools } : {}),\n })\n\n // Collect text\n for (const block of response.content) {\n if (block.type === 'text') fullResponse += block.text\n }\n\n // Handle tool use\n const toolUseBlocks = response.content.filter(b => b.type === 'tool_use')\n if (toolUseBlocks.length > 0) {\n messages.push({ role: 'assistant', content: response.content })\n\n const toolResults = []\n for (const tu of toolUseBlocks) {\n console.log(`[tool] ${tu.name}(${JSON.stringify(tu.input).slice(0, 200)})`)\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tu.name, tu.input)\n }\n\n const result = executeToolCall(tu.name, tu.input, workspacePath)\n\n if (tu.name === 'write_file') toolLog += `\\n📝 Wrote \\`${tu.input.path}\\``\n else if (tu.name === 'read_file') toolLog += `\\n📖 Read \\`${tu.input.path}\\``\n else if (tu.name === 'list_directory') toolLog += `\\n📁 Listed \\`${tu.input.path || '.'}\\``\n else if (tu.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${tu.input.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n toolResults.push({ type: 'tool_result', tool_use_id: tu.id, content: JSON.stringify(result) })\n }\n\n messages.push({ role: 'user', content: toolResults })\n continue\n }\n\n break\n }\n\n return (fullResponse + toolLog) || '(Done)'\n}\n\nasync function chatOpenAI(messagesRaw, model, provider, workspacePath) {\n const OpenAIModule = require('openai')\n const OpenAI = OpenAIModule.default || OpenAIModule\n const apiKey = getApiKey(provider)\n if (!apiKey) throw new Error(`No ${provider} API key. Click \"API Keys\" in the top right to add one.`)\n\n const baseURL = getBaseURL(provider)\n const client = new OpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), timeout: 60000 })\n\n const systemMsg = workspacePath\n ? `You are Labaik, an AI coding assistant. You have access to the user's workspace at: ${workspacePath}\\n\\nYou can read files, write files, list directories, and run shell commands. Use the provided tools to help the user with coding tasks. When writing code, always use write_file to save it. When the user asks to see files, use read_file. Always explain what you're doing.`\n : 'You are Labaik, an AI coding assistant. Help the user with coding questions and tasks.'\n\n const messages = [\n { role: 'system', content: systemMsg },\n ...messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'assistant' : 'user',\n content: m.content,\n })),\n ]\n\n const useTools = workspacePath ? TOOLS : undefined\n let fullResponse = ''\n let toolLog = ''\n\n // Tool-calling loop (max 10 rounds)\n for (let i = 0; i < 10; i++) {\n const response = await client.chat.completions.create({\n model,\n messages,\n max_completion_tokens: 4096,\n ...(useTools ? { tools: useTools, tool_choice: 'auto' } : {}),\n })\n\n const choice = response.choices?.[0]\n const msg = choice?.message\n if (!msg) break\n\n // Add assistant response to conversation\n messages.push(msg)\n\n // Collect text content\n if (msg.content) fullResponse += msg.content\n\n // Handle tool calls\n if (msg.tool_calls && msg.tool_calls.length > 0) {\n for (const tc of msg.tool_calls) {\n const args = JSON.parse(tc.function.arguments || '{}')\n console.log(`[tool] ${tc.function.name}(${JSON.stringify(args).slice(0, 200)})`)\n\n // Notify renderer about tool activity\n if (mainWindow && !mainWindow.isDestroyed()) {\n mainWindow.webContents.send('tool-activity', tc.function.name, args)\n }\n\n const result = executeToolCall(tc.function.name, args, workspacePath)\n const resultStr = JSON.stringify(result)\n\n // Build tool activity log for display\n if (tc.function.name === 'write_file') {\n toolLog += `\\n📝 Wrote \\`${args.path}\\``\n } else if (tc.function.name === 'read_file') {\n toolLog += `\\n📖 Read \\`${args.path}\\``\n } else if (tc.function.name === 'list_directory') {\n toolLog += `\\n📁 Listed \\`${args.path || '.'}\\``\n } else if (tc.function.name === 'run_command') {\n toolLog += `\\n⚡ Ran \\`${args.command}\\``\n if (result.output) toolLog += `\\n\\`\\`\\`\\n${result.output.slice(0, 500)}\\n\\`\\`\\``\n }\n\n messages.push({\n role: 'tool',\n tool_call_id: tc.id,\n content: resultStr,\n })\n }\n continue // go another round so the model can respond with text\n }\n\n // No tool calls — we're done\n break\n }\n\n return (fullResponse + toolLog) || '(Done — no text response)'\n}\n\nasync function chatGemini(messagesRaw, model) {\n const { GoogleGenAI } = require('@google/genai')\n const apiKey = getApiKey('google')\n if (!apiKey) throw new Error('No Gemini API key. Click \"API Keys\" in the top right to add one.')\n\n const client = new GoogleGenAI({ apiKey })\n\n const chatMessages = messagesRaw.map(m => ({\n role: m.role === 'assistant' ? 'model' : 'user',\n parts: [{ text: m.content }],\n }))\n\n const response = await client.models.generateContent({\n model: model || 'gemini-2.0-flash',\n contents: chatMessages,\n })\n\n return response.text || ''\n}\n\n// ── IPC: Permission modes (v0.4.0) ──────────────────────────────────────────\n\nipcMain.handle('perm-get-mode', (_e, workspacePath) => {\n const mode = getCurrentMode(workspacePath)\n return { mode, meta: permissions.MODE_META[mode], allModes: permissions.MODES, allMeta: permissions.MODE_META }\n})\n\nipcMain.handle('perm-set-mode', (_e, workspacePath, mode) => {\n return setCurrentMode(workspacePath, mode)\n})\n\nipcMain.handle('perm-cycle-mode', (_e, workspacePath) => {\n const current = getCurrentMode(workspacePath)\n const next = permissions.nextMode(current)\n setCurrentMode(workspacePath, next)\n return { mode: next, meta: permissions.MODE_META[next] }\n})\n\nipcMain.handle('perm-get-state', () => {\n if (!permState) permState = loadPermissions()\n return permState\n})\n\n// ── Approval flow (v0.4.1) ──────────────────────────────────────────────────\n// The worker asks (via stdout) before running side-effecting tools. We resolve\n// the gate with the full rule set; an instant allow/deny replies immediately,\n// a 'prompt' verdict shows the renderer dialog and waits for the user.\nconst pendingApprovals = new Map() // approvalId -> { workerId, workspacePath, tool, args, floor }\n\nfunction summarizeToolArgs(tool, args) {\n const a = args || {}\n if (tool === 'run_command' || tool === 'start_dev_server') return String(a.command || '').slice(0, 200)\n if (tool === 'open_in_browser') return String(a.url || '').slice(0, 200)\n if (tool === 'write_file' || tool === 'read_file') return String(a.path || '').slice(0, 200)\n if (tool === 'list_directory') return String(a.path || '.').slice(0, 200)\n return ''\n}\n\nfunction replyApprovalToWorker(workerId, verdict, message) {\n try { apiWorker?.stdin.write(JSON.stringify({ type: 'approval-response', id: workerId, verdict, message }) + '\\n') } catch {}\n}\n\nfunction handleApprovalRequest(resp, pendingChat) {\n const workspacePath = resp.workspacePath || null\n const mode = getCurrentMode(workspacePath)\n if (!permState) permState = loadPermissions()\n let gate\n try {\n gate = permissions.resolveGate({\n tool: resp.tool,\n args: resp.args || {},\n mode,\n workspaceRoot: workspacePath,\n home: os.homedir(),\n rules: permState,\n })\n } catch (err) {\n console.warn('[approval] gate error, denying:', err.message)\n return replyApprovalToWorker(resp.id, 'deny', 'Permission check failed.')\n }\n\n if (gate.verdict === 'allow') return replyApprovalToWorker(resp.id, 'allow')\n if (gate.verdict === 'deny') return replyApprovalToWorker(resp.id, 'deny', gate.message || 'Blocked by permission policy.')\n\n // verdict === 'prompt' — surface the dialog and wait for the user.\n const target = (pendingChat?.sender && !pendingChat.sender.isDestroyed())\n ? pendingChat.sender\n : (mainWindow && !mainWindow.isDestroyed() ? mainWindow.webContents : null)\n if (!target) return replyApprovalToWorker(resp.id, 'deny', 'No window available to confirm the action.')\n\n const approvalId = 'pa_' + (++requestId) + '_' + Date.now().toString(36)\n pendingApprovals.set(approvalId, {\n workerId: resp.id,\n workspacePath,\n tool: resp.tool,\n args: resp.args || {},\n floor: !!gate.floor,\n })\n // Keep the chat request alive while the user decides — otherwise the idle\n // timer would reject it mid-dialog. Cleared on response (see perm-respond).\n if (pendingChat) { pendingChat.awaitingApproval = true; pendingChat.onActivity?.() }\n\n try {\n target.send('permission-request', {\n approvalId,\n tool: resp.tool,\n summary: resp.summary || summarizeToolArgs(resp.tool, resp.args),\n reason: gate.reason || null,\n why: gate.detail?.why || null,\n floor: !!gate.floor, // protected paths / dangerous commands: no \"always\"\n mode,\n })\n } catch (err) {\n pendingApprovals.delete(approvalId)\n if (pendingChat) pendingChat.awaitingApproval = false\n replyApprovalToWorker(resp.id, 'deny', 'Could not show the approval dialog.')\n }\n}\n\nfunction addAllowRule(workspacePath, tool, args) {\n if (!workspacePath) return\n if (!permState) permState = loadPermissions()\n if (!permState.workspaces[workspacePath]) permState.workspaces[workspacePath] = {}\n const ws = permState.workspaces[workspacePath]\n if (!Array.isArray(ws.allow)) ws.allow = []\n const esc = (s) => String(s || '').replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n let pattern\n if (tool === 'run_command' || tool === 'start_dev_server') pattern = '^' + esc(args?.command) + '$'\n else if (tool === 'open_in_browser') pattern = '^' + esc(args?.url) + '$'\n else pattern = '^' + esc(args?.path) + '$'\n if (!ws.allow.some(r => r.tool === tool && r.pattern === pattern)) {\n ws.allow.push({ tool, pattern })\n savePermissions(permState)\n }\n}\n\nipcMain.handle('perm-respond', (_e, approvalId, decision) => {\n const pend = pendingApprovals.get(approvalId)\n if (!pend) return false\n pendingApprovals.delete(approvalId)\n // Re-arm the chat's idle timer now that the human has answered.\n const pendingChat = pendingRequests.get(pend.workerId)\n if (pendingChat) { pendingChat.awaitingApproval = false; pendingChat.onActivity?.() }\n\n if (decision === 'deny') {\n replyApprovalToWorker(pend.workerId, 'deny', 'You denied this action.')\n return true\n }\n if (decision === 'allow-always' && !pend.floor) {\n addAllowRule(pend.workspacePath, pend.tool, pend.args)\n }\n replyApprovalToWorker(pend.workerId, 'allow')\n return true\n})\n\n// ── IPC: Routines (v0.5.4 as \"Cron Skills\"; renamed v0.8) ─────────────────────────────────────────────\n// Scheduled background chats. Read/write/list/toggle routines; the actual\n// firing happens inside the scheduler started at app-ready, which pipes\n// through the same `chat` IPC so routine runs share provider creds, memory,\n// and the api-worker's tool pipeline.\nipcMain.handle('routines-list', () => routines.list())\nipcMain.handle('routines-upsert', (_e, routine) => routines.upsert(routine))\nipcMain.handle('routines-remove', (_e, id) => { routines.remove(id); return true })\nipcMain.handle('routines-set-enabled', (_e, id, enabled) => routines.setEnabled(id, enabled))\n\n// ── IPC: folder-skills (v0.7.67) ─────────────────────────────────────────\n// Filesystem-discovered skill templates from ~/.labaik/skills/