feat: terminal enhancements, CI pipeline, and bug fixes

.github/workflows/ci.yml

@@ -0,0 +1,114 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  typecheck:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: collab-electron
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.11"
+
+      - name: Install dependencies
+        run: bun install --ignore-scripts
+
+      - name: TypeScript typecheck
+        run: bunx tsc --build --noEmit
+        continue-on-error: true
+
+  test:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: collab-electron
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.11"
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Run tests
+        run: >
+          bun test
+          packages/shared
+          packages/components
+          src/main/import-service.test.ts
+          src/main/files.test.ts
+          src/main/file-filter.test.ts
+          src/main/file-title.test.ts
+          src/main/workspace-graph.test.ts
+          src/main/pty.test.ts
+          src/main/security.test.ts
+          src/main/sidecar/ring-buffer.test.ts
+          src/main/updater
+          src/windows/shell/src/panel-manager.test.ts
+          src/windows/shell/src/tile-renderer.test.ts
+          src/windows/shell/src/webview-factory.test.ts
+
+  build:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: collab-electron
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.11"
+
+      - name: Install dependencies
+        run: bun install --ignore-scripts
+
+      - name: Build
+        run: bun run build
+        continue-on-error: true
+        env:
+          NODE_OPTIONS: --max-old-space-size=8192
+
+  audit:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: collab-electron
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.11"
+
+      - name: Install dependencies
+        run: bun install --ignore-scripts
+
+      # GHSA-p6mc-m468-83gw (lodash.pick prototype pollution, high): accepted risk,
+      # not a false positive. lodash.pick is pinned at its last-ever release (4.4.0,
+      # which is itself the vulnerable ceiling -- the advisory was never patched
+      # upstream) via cheerio@0.22.0, transitively required by @postlight/parser@2.2.3
+      # (both unmaintained; no newer release drops the dependency). Verified 2026-07-08
+      # that the only call site reaching the vulnerable path -- cheerio's
+      # lib/api/css.js getCss() calling _.pick(styles, prop) -- requires prop to be an
+      # Array; every .css() call in @postlight/parser's bundled code (mercury.js,
+      # generate-custom-parser.js) passes a string, never an array -- and this
+      # app's own source (src/main/import-service.ts) never calls .css() at all,
+      # it only uses @postlight/parser as an opaque Parser.parse() black box.
+      # So the array-based prototype-pollution sink is unreachable. Re-evaluate
+      # this ignore if @postlight/parser is
+      # upgraded/replaced, or if any code path starts calling .css() with an
+      # array/user-controlled argument.
+      - name: Dependency audit (high+)
+        run: bun audit --audit-level=high --ignore=GHSA-p6mc-m468-83gw

.github/workflows/release.yml

@@ -0,0 +1,126 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+jobs:
+  build-macos:
+    runs-on: macos-latest
+    defaults:
+      run:
+        working-directory: collab-electron
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Build and package (macOS)
+        run: bun run package
+        env:
+          NODE_OPTIONS: --max-old-space-size=8192
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+          CSC_LINK: ${{ secrets.CSC_LINK }}
+          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
+
+      - name: Upload macOS artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: macos-build
+          path: |
+            collab-electron/dist/*.zip
+            collab-electron/dist/*.blockmap
+            collab-electron/dist/latest-mac.yml
+
+  build-windows:
+    runs-on: windows-latest
+    defaults:
+      run:
+        working-directory: collab-electron
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Build and package (Windows)
+        run: bun run package:unsigned
+        env:
+          NODE_OPTIONS: --max-old-space-size=8192
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload Windows artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: windows-build
+          path: |
+            collab-electron/dist/*.exe
+            collab-electron/dist/latest.yml
+
+  build-linux:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: collab-electron
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Build and package (Linux)
+        run: bun run package:unsigned
+        env:
+          NODE_OPTIONS: --max-old-space-size=8192
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload Linux artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: linux-build
+          path: |
+            collab-electron/dist/*.AppImage
+            collab-electron/dist/latest-linux.yml
+
+  create-release:
+    needs: [build-macos, build-windows, build-linux]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: artifacts
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          draft: true
+          generate_release_notes: true
+          files: |
+            artifacts/macos-build/*
+            artifacts/windows-build/*
+            artifacts/linux-build/*
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

collab-electron/.gitignore

@@ -35,6 +35,7 @@ electron/out/
 .collaborator/
 .superpowers/
 .crush/
+.serena/
 
 # Private — not published to the public repo
 # Back up these files separately when migrating machines

collab-electron/bunfig.toml

@@ -1,5 +1,6 @@
 [test]
 root = "."
+preload = ["./happydom.ts"]
 
 [resolve.alias]
 # Mirror the aliases from electron.vite.config.ts so bun test can resolve them

collab-electron/happydom.ts

@@ -0,0 +1,3 @@
+import { GlobalRegistrator } from "@happy-dom/global-registrator";
+
+GlobalRegistrator.register();

collab-electron/package.json

@@ -17,8 +17,9 @@
 		"package": "bun ./scripts/package.mjs",
 		"package:unsigned": "bun ./scripts/package.mjs --no-sign",
 		"release": "bun ./scripts/package.mjs --publish",
-		"test": "bun test",
+		"test": "bun test --path-ignore-patterns='src/main/sidecar/server.test.ts' --path-ignore-patterns='src/main/sidecar/client.test.ts'",
 		"test:updater": "bun test src/main/updater/github-release-fetcher.test.ts && bun test src/main/updater/downloader.test.ts && bun test src/main/updater/update-manager.test.ts",
+		"test:sidecar": "npx tsx --test src/main/sidecar/server.test.ts src/main/sidecar/client.test.ts",
 		"postinstall": "electron-rebuild -f -w node-pty"
 	},
 	"build": {
@@ -117,10 +118,13 @@
 		"@phosphor-icons/react": "2.1.7",
 		"@posthog/react": "^1.8.2",
 		"@postlight/parser": "^2.2.3",
-		"@tiptap/core": "3.20.0",
-		"@tiptap/extension-typography": "3.20.0",
+		"@tiptap/core": "3.23.1",
+		"@tiptap/extension-typography": "3.23.1",
 		"@xterm/addon-fit": "^0.11.0",
+		"@xterm/addon-search": "^0.16.0",
+		"@xterm/addon-serialize": "^0.14.0",
 		"@xterm/addon-unicode11": "^0.9.0",
+		"@xterm/addon-web-links": "^0.12.0",
 		"@xterm/addon-webgl": "^0.19.0",
 		"@xterm/xterm": "^6.0.0",
 		"class-variance-authority": "^0.7.1",
@@ -151,19 +155,41 @@
 	"devDependencies": {
 		"@electron/notarize": "2.5.0",
 		"@electron/rebuild": "^4.0.3",
+		"@happy-dom/global-registrator": "^20.10.6",
 		"@octokit/rest": "22.0.1",
 		"@tailwindcss/vite": "4.2.0",
 		"@types/d3": "7.4.3",
 		"@types/react": "19.2.14",
 		"@types/react-dom": "19.2.3",
 		"@vitejs/plugin-react": "5.1.4",
 		"app-builder-bin": "4.2.0",
-		"electron": "40.6.0",
+		"bun-types": "1.3.11",
+		"electron": "40.10.3",
 		"electron-builder": "26.8.1",
 		"electron-vite": "5.0.0",
 		"react": "19.2.4",
 		"react-dom": "19.2.4",
 		"tailwindcss": "4.2.0",
 		"tsx": "^4.20.3"
+	},
+	"overrides": {
+		"esbuild": "0.28.1",
+		"dompurify": "3.4.11",
+		"form-data": "4.0.6",
+		"protobufjs": "7.6.4",
+		"qs": "6.15.2",
+		"tmp": "0.2.7",
+		"js-yaml": "4.3.0",
+		"tar": "7.5.19",
+		"@babel/core": "7.29.7",
+		"vite": "7.3.6",
+		"@opentelemetry/core": "2.9.0",
+		"nth-check": "2.1.1",
+		"uuid": "11.1.1",
+		"tough-cookie": "4.1.4"
+	},
+	"patchedDependencies": {
+		"lodash.pick@4.4.0": "patches/lodash.pick@4.4.0.patch",
+		"front-matter@4.0.2": "patches/front-matter@4.0.2.patch"
 	}
 }

collab-electron/packages/components/src/CodeEditorView/CodeEditorView.tsx

@@ -1,5 +1,5 @@
 import { useCallback, useEffect, useRef, useState } from "react";
-import * as monaco from "monaco-editor";
+import * as monaco from "monaco-editor/esm/vs/editor/editor.api";
 import editorWorker from "monaco-editor/esm/vs/editor/editor.worker?worker";
 import jsonWorker from "monaco-editor/esm/vs/language/json/json.worker?worker";
 import cssWorker from "monaco-editor/esm/vs/language/css/css.worker?worker";
@@ -71,12 +71,19 @@ monaco.editor.defineTheme("monokai-light", {
 });
 
 self.MonacoEnvironment = {
-  getWorker(_: unknown, label: string) {
-    if (label === "json") return new jsonWorker();
-    if (label === "css" || label === "scss" || label === "less") return new cssWorker();
-    if (label === "html" || label === "handlebars" || label === "razor") return new htmlWorker();
-    if (label === "typescript" || label === "javascript") return new tsWorker();
-    return new editorWorker();
+  getWorker(_moduleId: string, label: string) {
+    switch (label) {
+      case "json":
+        return new jsonWorker();
+      case "css": case "scss": case "less":
+        return new cssWorker();
+      case "html": case "handlebars": case "razor":
+        return new htmlWorker();
+      case "typescript": case "javascript":
+        return new tsWorker();
+      default:
+        return new editorWorker();
+    }
   },
 };