Function fetch

browse/src/terminal-agent.ts:495–647

(req, server)

    idleTimeout: 0, // PTY connections are long-lived; default idleTimeout would kill them

    fetch(req, server) {
      const url = new URL(req.url);

      // /internal/grant — loopback-only handshake from parent server.
      // v1.44+: accepts `{token, sessionId?}`. The sessionId binding lets
      // the agent route re-attach attempts (same sessionId, fresh token)
      // back to the same PtySession. Legacy callers passing just `{token}`
      // still work — sessionId becomes null and re-attach is unavailable
      // for that grant.
      if (url.pathname === '/internal/grant' && req.method === 'POST') {
        return internalHandler(req, (body) => {
          if (typeof body?.token === 'string' && body.token.length > 16) {
            const sid = typeof body?.sessionId === 'string' && body.sessionId.length > 0
              ? body.sessionId
              : null;
            validTokens.set(body.token, sid);
          }
        });
      }

      // /internal/revoke — drop a token (called on WS close or bootstrap reload)
      if (url.pathname === '/internal/revoke' && req.method === 'POST') {
        return internalHandler(req, (body) => {
          if (typeof body?.token === 'string') validTokens.delete(body.token);
        });
      }

      // /internal/restart — dispose the PtySession for a specific sessionId.
      // Scoped to one caller (not enumerate-all). Server.ts /pty-restart
      // posts here with the caller's sessionId; we kill ONLY that PTY,
      // leaving any other live sidebar tabs untouched. Codex T2 of the
      // eng review caught this gap — pre-spec the route would have
      // disposed all sessions.
      if (url.pathname === '/internal/restart' && req.method === 'POST') {
        return internalHandler(req, (body) => {
          const sid = typeof body?.sessionId === 'string' ? body.sessionId : null;
          if (!sid) return { killed: 0 };
          const session = sessionsById.get(sid);
          if (!session) return { killed: 0 };
          // Cancel any pending detach timer before disposal — otherwise it
          // would fire later against an already-disposed session.
          if (session.detachTimer) {
            clearTimeout(session.detachTimer);
            session.detachTimer = null;
          }
          disposeSession(session);
          sessionsById.delete(sid);
          return { killed: 1 };
        });
      }

      // /internal/healthz — liveness probe used by the v1.44 watchdog.
      // Returns this agent's pid + gen + active session count without
      // touching claude binary lookup (which can fail for non-process
      // reasons and isn't a useful liveness signal). GET — no body to parse,
      // so it stays on the bare checkInternalAuth gate.
      if (url.pathname === '/internal/healthz' && req.method === 'GET') {
        const denied = checkInternalAuth(req);