feat(web): render terminals with libghostty-vt

apps/desktop/src/electron/ElectronProtocol.test.ts

@@ -57,7 +57,7 @@ describe("ElectronProtocol", () => {
           assert.equal(yield* Effect.promise(() => response.text()), "ok");
           assert.include(
             response.headers.get("content-security-policy") ?? "",
-            "script-src 'self' 'unsafe-inline' https://clerk.t3.codes https://challenges.cloudflare.com",
+            "script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://clerk.t3.codes https://challenges.cloudflare.com",
           );
           assert.include(
             response.headers.get("content-security-policy") ?? "",
@@ -212,6 +212,7 @@ describe("ElectronProtocol", () => {
     assert.deepEqual(directives["script-src"], [
       "'self'",
       "'unsafe-inline'",
+      "'wasm-unsafe-eval'",
       "https://clerk.t3.codes",
       "https://challenges.cloudflare.com",
     ]);

apps/desktop/src/electron/ElectronProtocol.ts

@@ -71,6 +71,7 @@ export function makeDesktopContentSecurityPolicy(input: DesktopProtocolRegistrat
   const scriptSources = [
     "'self'",
     "'unsafe-inline'",
+    "'wasm-unsafe-eval'",
     ...(clerkOrigin ? [clerkOrigin] : []),
     "https://challenges.cloudflare.com",
   ];

apps/mobile/modules/t3-terminal/THIRD_PARTY_NOTICES.md

@@ -18,13 +18,14 @@ Ghostty's MIT license applies to the vendored framework. Keep this notice in syn
 ## Ghostty / libghostty-vt
 
 The Android terminal renderer vendors upstream `libghostty-vt` shared libraries and C headers.
+The web terminal vendors a WebAssembly build from the same revision and uses the same C ABI.
 
 - Upstream project: https://github.com/ghostty-org/ghostty
 - Vendored revision: `9f62873bf195e4d8a762d768a1405a5f2f7b1697`
 - License: MIT
 
-Ghostty's MIT license applies to the vendored Android libraries. Keep this notice in sync when
-updating `Vendor/libghostty-vt`.
+Ghostty's MIT license applies to the vendored Android and web libraries. Keep this notice and both
+artifacts in sync when updating `Vendor/libghostty-vt`.
 
 ## MesloLGS NF (Android terminal font)
 

apps/web/package.json

@@ -4,6 +4,7 @@
   "private": true,
   "type": "module",
   "scripts": {
+    "build:ghostty-wasm": "bash scripts/build-libghostty-wasm.sh",
     "dev": "vp dev",
     "build": "vp build",
     "preview": "vp preview",
@@ -31,8 +32,6 @@
     "@t3tools/shared": "workspace:*",
     "@tanstack/react-pacer": "^0.19.4",
     "@tanstack/react-router": "^1.160.2",
-    "@xterm/addon-fit": "^0.11.0",
-    "@xterm/xterm": "^6.0.0",
     "class-variance-authority": "^0.7.1",
     "effect": "catalog:",
     "jose": "catalog:",

apps/web/scripts/build-libghostty-wasm.sh

@@ -0,0 +1,123 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+WEB_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+REPO_DIR="$(cd "${WEB_DIR}/../.." && pwd)"
+MOBILE_VENDOR_DIR="${REPO_DIR}/apps/mobile/modules/t3-terminal/Vendor/libghostty-vt"
+VENDOR_DIR="${WEB_DIR}/src/terminal/ghostty/vendor"
+
+GHOSTTY_REVISION="$(tr -d '[:space:]' < "${MOBILE_VENDOR_DIR}/VERSION")"
+GHOSTTY_SOURCE_DIR="${GHOSTTY_SOURCE_DIR:-${HOME}/.cache/t3code/ghostty-${GHOSTTY_REVISION:0:8}}"
+GHOSTTY_ZIG_VERSION="${GHOSTTY_ZIG_VERSION:-0.15.2}"
+GHOSTTY_ZIG="${GHOSTTY_ZIG:-}"
+
+log() {
+  printf '[libghostty-vt-wasm] %s\n' "$*"
+}
+
+die() {
+  printf '[libghostty-vt-wasm] error: %s\n' "$*" >&2
+  exit 1
+}
+
+require_cmd() {
+  command -v "$1" >/dev/null 2>&1 || die "missing required command: $1"
+}
+
+ensure_zig() {
+  if [[ -n "${GHOSTTY_ZIG}" ]]; then
+    [[ -x "${GHOSTTY_ZIG}" ]] || die "GHOSTTY_ZIG is not executable: ${GHOSTTY_ZIG}"
+    return
+  fi
+  if command -v zig >/dev/null 2>&1 && [[ "$(zig version)" == "${GHOSTTY_ZIG_VERSION}" ]]; then
+    GHOSTTY_ZIG="$(command -v zig)"
+    return
+  fi
+
+  local host_os host_arch cache_dir
+  host_os="$(uname -s | tr '[:upper:]' '[:lower:]')"
+  host_arch="$(uname -m)"
+  case "${host_os}" in
+    darwin) host_os="macos" ;;
+    linux) ;;
+    *) die "unsupported host OS for Zig download: ${host_os}" ;;
+  esac
+  case "${host_arch}" in
+    arm64) host_arch="aarch64" ;;
+    aarch64 | x86_64) ;;
+    *) die "unsupported host architecture: ${host_arch}" ;;
+  esac
+
+  cache_dir="${HOME}/.cache/t3code/zig-${GHOSTTY_ZIG_VERSION}"
+  GHOSTTY_ZIG="${cache_dir}/zig"
+  if [[ -x "${GHOSTTY_ZIG}" ]]; then
+    return
+  fi
+
+  require_cmd curl
+  require_cmd tar
+  mkdir -p "${cache_dir}"
+  log "downloading Zig ${GHOSTTY_ZIG_VERSION}"
+  curl -fsSL \
+    "https://ziglang.org/download/${GHOSTTY_ZIG_VERSION}/zig-${host_arch}-${host_os}-${GHOSTTY_ZIG_VERSION}.tar.xz" \
+    | tar -xJ --strip-components=1 -C "${cache_dir}"
+}
+
+ensure_ghostty_source() {
+  require_cmd git
+  if [[ ! -d "${GHOSTTY_SOURCE_DIR}/.git" ]]; then
+    mkdir -p "$(dirname "${GHOSTTY_SOURCE_DIR}")"
+    log "cloning Ghostty ${GHOSTTY_REVISION}"
+    git clone --filter=blob:none --no-checkout https://github.com/ghostty-org/ghostty.git \
+      "${GHOSTTY_SOURCE_DIR}"
+  fi
+
+  # A cached checkout may still be on a previously pinned revision; converge on
+  # the pinned one instead of failing the rebuild.
+  local actual_revision
+  actual_revision="$(git -C "${GHOSTTY_SOURCE_DIR}" rev-parse HEAD 2>/dev/null || echo none)"
+  if [[ "${actual_revision}" != "${GHOSTTY_REVISION}" ]]; then
+    log "checking out Ghostty ${GHOSTTY_REVISION}"
+    git -C "${GHOSTTY_SOURCE_DIR}" fetch --depth=1 origin "${GHOSTTY_REVISION}"
+    git -C "${GHOSTTY_SOURCE_DIR}" checkout --detach "${GHOSTTY_REVISION}"
+  fi
+
+  actual_revision="$(git -C "${GHOSTTY_SOURCE_DIR}" rev-parse HEAD)"
+  [[ "${actual_revision}" == "${GHOSTTY_REVISION}" ]] || \
+    die "expected Ghostty ${GHOSTTY_REVISION}, found ${actual_revision}"
+}
+
+ensure_zig
+ensure_ghostty_source
+
+build_root="$(mktemp -d)"
+trap 'rm -rf "${build_root}"' EXIT
+
+log "building ${GHOSTTY_REVISION} for wasm32-freestanding"
+(
+  cd "${GHOSTTY_SOURCE_DIR}"
+  # The pinned revision rides along as semver build metadata so the artifact
+  # identifies its own provenance through ghostty_build_info(); mobile's
+  # VERSION file stays the single source of truth for the pin.
+  "${GHOSTTY_ZIG}" build \
+    -Demit-lib-vt \
+    -Dtarget=wasm32-freestanding \
+    -Doptimize=ReleaseSmall \
+    -Dstrip=true \
+    -Dlib-version-string="0.1.0-dev+${GHOSTTY_REVISION}" \
+    -p "${build_root}"
+)
+
+mkdir -p "${VENDOR_DIR}"
+cp "${build_root}/bin/ghostty-vt.wasm" "${VENDOR_DIR}/ghostty-vt.wasm"
+"${GHOSTTY_ZIG}" build-exe \
+  "${SCRIPT_DIR}/ghostty-write-pty.zig" \
+  -target wasm32-freestanding \
+  -O ReleaseSmall \
+  -fno-entry \
+  -rdynamic \
+  -femit-bin="${VENDOR_DIR}/ghostty-write-pty.wasm"
+chmod 0644 "${VENDOR_DIR}/ghostty-write-pty.wasm"
+log "wrote ${VENDOR_DIR}/ghostty-vt.wasm"

apps/web/scripts/ghostty-write-pty.zig

@@ -0,0 +1,5 @@
+extern "env" fn t3_write_pty(terminal: u32, userdata: u32, data: u32, len: u32) void;
+
+export fn ghostty_write_pty(terminal: u32, userdata: u32, data: u32, len: u32) void {
+    t3_write_pty(terminal, userdata, data, len);
+}