@abot-ai/runtime 1.3.1 → 1.4.0

package/dist/src/sessions/types.d.ts

@@ -1,3 +1,4 @@
+import type { SessionProject } from "./project-binding.js";
 import type { AgentMode } from "../shared/types.js";
 import type { RuntimeAttachmentReference } from "../shared/attachments.js";
 import type { SessionMemoryCheckpoint } from "./memory/contracts.js";
@@ -50,6 +51,8 @@ export type SessionRuntimeEvent = {
 export type SessionRequestRecord = {
     requestId: string;
     sessionId: string;
+    /** Absent for legacy records and records recreated by late event appends. */
+    generation?: string;
     status: SessionRequestStatus;
     createdAt: string;
     updatedAt: string;
@@ -68,10 +71,12 @@ export type SessionRequestFinalState = {
 export type SessionRequestReplay = {
     requestId: string;
     sessionId: string;
+    generation?: string;
     events: Record<string, unknown>[];
     finalState: SessionRequestFinalState | null;
 };
 export type SessionListItem = {
+    project?: SessionProject;
     id: string;
     title: string;
     createdAt: number;
@@ -110,6 +115,7 @@ export type SessionSnapshotRequest = {
     finalState: SessionRequestFinalState | null;
 };
 export type SessionSnapshot = {
+    project?: SessionProject;
     sessionId: string;
     title: string;
     messages: SessionSnapshotMessage[];
@@ -156,6 +162,7 @@ export type SessionMessage = {
     attachments?: RuntimeAttachmentReference[];
 };
 export type SessionRecord = {
+    project?: SessionProject;
     id: string;
     title: string;
     createdAt: string;

package/dist/src/web-ui/app/ARCHITECTURE.md

@@ -48,6 +48,17 @@ the completion-event boundary: tool output, canonical evidence and model context
 are unchanged. The Web UI does not fetch a file or memory record again to recreate
 historical evidence. Passive Runtime memory remains outside tool activity.
 
+`tool-process-activity-fields.js` projects declared process display fields without
+branching on tool identities. Opted-in commands retain up to 4,096 characters and
+whitespace; shared `conversation-tool-evidence.js` renders them as inert
+preformatted text in both activity and approval disclosures. Working
+directory, target, exit code and recorded process evidence remain distinct from
+model-authored intent. Result output stays a bounded excerpt, and completion or
+exit zero does not establish an application window or independent outcome check.
+Terminal failures preserve recorded result fields and clipping flags. Old events
+without declared input/output evidence remain unavailable; the UI never guesses
+commands from rationale or opaque parameter summaries.
+
 Web sources appear in a separate Activity section alongside role cards and the event timeline. `web-source-event.js` projects only successful `web_search` and `web_fetch` completions; `web-sources.js` validates bounded plugin receipts and groups them by recorded call. `conversation-sources.js` renders links and retrieval/presentation states without interpreting answer text. Source-bearing events retain their own identity before display grouping, and stored session events use the same projection as live events. Session switching clears them with the existing Activity state.
 
 The optional `meta.webSources` version 1 receipt describes the final bounded **tool output**, not whether a later model invocation consumed or cited it. Older events can show found/fetched URLs with unknown output visibility; absent or unsupported receipts never imply full content. Favicons are best-effort browser requests to the source origin's `/favicon.ico`, loaded lazily with no referrer and a local fallback. No third-party icon service or server proxy is used. Source URL policy rejects unsafe schemes and credentials, and prevents automatic image loads for local/private IP literals; origin DNS, redirects, cookies, and browser image policy remain browser concerns. Icons carry no evidence and never block tool execution.
@@ -80,6 +91,36 @@ The native conversation list uses the existing `SessionService` disk reader and
 
 Read-state persistence is an optional Web UI projection. `session-read-state/availability.ts` isolates sidecar failures from listing, loading, clearing and deleting conversations. A failure returns `readStateStatus: "unavailable"` and unknown counts, preserves the sidecar for diagnosis, and leaves read acknowledgements unsuccessful. The browser keeps the last known receipt, labels unavailable tracking explicitly and resumes normal counts after a healthy list refresh. Canonical session and attachment failures remain errors. Workspace visibility is committed before change callbacks attempt to acknowledge visible messages, including drawer closure and responsive layout changes.
 
+## Conversation file preview
+
+`conversation-file-reference.js` projects only explicit successful file-output
+receipts from tool events. Activity keeps this reference separate from the
+historical sent/received fields and excerpt. `conversation-file-action.js` makes
+the existing filename an inline preview control inside the tool summary. Its click suppresses disclosure activation;
+other summary interactions retain the recorded evidence disclosure.
+
+`conversation-file-preview-controller.js` owns scoped loading and stale-response
+rejection. The feature adapter mounts the viewer outside the message subtree and
+preserves conversation scroll while the layout changes. Session resets and
+workspace departure close it; responsive focus and Escape behavior belong to
+`conversation-file-focus.js`. Transport stays in the conversation-files service.
+
+The local backend's `conversation-file-access.ts` admits only a saved or scoped
+active completion belonging to the requested environment, session and request.
+`conversation-file-target.ts` owns the held file and root/containment identity
+checks shared by content reads and native opening. The route revalidates request
+generation and completion before returning bytes or handing off to a Mac app.
+`conversation-file-native-request.ts` limits native opening to same-origin JSON
+POSTs from a local browser on macOS. `conversation-file-native-open.ts` restricts
+file types and invokes the fixed OS opener without a shell. The viewer exposes
+this action only when its preview response includes `nativeOpenAvailable: true`;
+its controller scopes busy/failure feedback to the selected file. The OS app
+resolves the original pathname after handoff; that asynchronous read is outside
+the preview reader's held-descriptor guarantee. The receipt
+is presentation-only: the optional filesystem report callback feeds event
+metadata, never the canonical tool result or model context. No file registry or
+historical content snapshot is created.
+
 ## Styles
 
 `styles.css` is the ordered manifest. The modules under `styles/` own:
@@ -97,7 +138,6 @@ Keep responsive overrides last and avoid moving declarations between modules wit
 
 Visual components may format or group events, but they never accept transport frames or construct Runtime API payloads. Realtime frame parsing belongs to `realtime-transport.js`; request sequence and terminal-state reduction belong to `realtime-event-controller.js`; endpoint construction and HTTP payload serialization belong to `runtime-web-client.js` and its feature request modules; and feature controllers own when those operations occur. Config remains explicit-save; presentation changes must never introduce autosave.
 
-
 ## Core schedules
 
 `schedules-feature.js` composes the scheduler browser feature from its controller,
@@ -125,3 +165,83 @@ run identity before activating the ordinary realtime request lifecycle. Duplicat
 trigger delivery cannot add another user message or reactivate a completed run.
 The scheduler page and chat card are presentation-only consumers; the runtime
 scheduler remains the sole owner of Job state and dispatch decisions.
+
+## Interactive setup and configuration activation
+
+The setup guide composes focused rendering/validation modules and receives
+configuration transport callbacks. Runtime onboarding retains catalog authority
+over chat readiness. Home suppresses its dashboard data and shortcuts while
+setup is required; the guide has one scroll owner in either Home or Chat.
+OpenAI credentials live only in the current password input and one save payload.
+They never enter browser state, HTML attributes, preferences or control logs.
+
+The setup sequence is Provider, Connection, Embedding, Plugins and Ready.
+The onboarding feature assembles transport dependencies outside app.js; focused
+step modules own embedding and plugin card selection. Chat connection writes
+defer activation in the wizard, while ordinary setup API callers retain their
+existing immediate-activation behavior. The pending-activation gate keeps the
+catalog unavailable until the explicit final apply, including browser reload in
+the same Web process. Optional choices are read back from canonical saved files.
+
+Embedding setup prepares only the requested provider and its private credential,
+then delegates to the existing memory probe-before-save service. Probe dimensions
+and fingerprints come from the provider response; the UI never invents them.
+Provider preparation may survive a later probe failure, which is reported without
+exposing credentials. The memory Web router resolves the current configuration
+path per request so first-time setup uses local/runtime.config.json correctly.
+Plugin cards reuse the existing manifest selection API, preserving sibling tools
+and saved policies. Fresh installations start with all plugins and tools selected.
+The onboarding plugin cards display every tool checkbox directly. Their dedicated
+stylesheet widens only this step and keeps the outer workspace as the scroll owner.
+
+Configuration composes a plugin manager using the canonical manifest selection
+projection. The separate activation control explicitly applies saved files.
+The server checks synchronous owner admission, refuses busy or externally owned
+environments, and refreshes its gateway through the owning lifecycle callback.
+Browser reload and saved selection are not evidence of live activation.
+
+### Additive model setup
+
+Configuration composes a separate Provider / Model / Ready dialog in
+components/model-setup/. It shares the wizard shell and connection form with
+first setup, while retaining its own additive save/apply lifecycle. The dialog
+is outside the dashboard so refresh and mutation locking cannot detach it.
+An entered API key remains only in the mounted password field until final save;
+review and back navigation do not copy it into state or markup.
+
+configuration-feature.js guards opening against existing configuration drafts,
+blocks workspace/environment navigation while the dialog is open, and holds the
+external mutation lock during save, Apply and refresh. Saved model identity
+survives Apply failure; successful Apply survives refresh failure. Completion
+refreshes Memory provider choices and chat models, selects the new profile, and
+focuses it only after closing the modal and releasing the lock.
+
+local-runtime/model-setup-\* owns catalog/input/credential/addition behavior.
+It uses the canonical configuration repository and shared CLI merge helper,
+preserving existing profiles, references, defaults and connection settings.
+Only new OpenAI/Ollama connections are created here; existing provider IDs are
+resolved by adapter type. The transport exposes no secret values and requires
+the same-origin JSON mutation guard. This flow does not invoke a model.
+
+## Projects and permission modes
+
+`projects-feature.js` composes project UI; `projects-controller.js` owns project
+and folder loading, creation and stale-response rejection. Presentation modules
+render the creation form and sidebar groups, while `runtime-web-client/projects.js`
+owns transport. The folder form occupies the chat canvas without resetting the
+active conversation or draft. It closes the file viewer through its existing
+presentation lifecycle. Creation calls the owner API; a saved project session is
+opened through the canonical conversation controller without a model request.
+
+The session controller remains the owner of session row actions and read state.
+Its injected group renderer places project groups above ordinary conversations,
+including projects with no sessions. The session's saved project snapshot also
+provides the visible working-folder label. Neither project presentation nor client
+request payloads overwrite global runtime paths.
+
+`tool-permission-mode-controller.js` owns the permission selector and explicit
+per-session preference changes; `lib/tool-permission-mode.js` owns known browser
+values and server compatibility. FULL+ requires advertised server support, and
+transport rejects unsupported requests without a silent downgrade. The existing
+composer queue keeps its captured mode. Project membership never selects FULL+.
+`app-state.js` constructs the same one shared browser state identity for `app.js`.

package/dist/src/web-ui/app/app-bootstrap.js

@@ -8,6 +8,7 @@ export async function bootstrapWebApp({
   homeComposer,
   dashboard,
   schedules,
+  projects,
   selection,
   client,
   bindables,
@@ -30,6 +31,7 @@ export async function bootstrapWebApp({
   renderMessages();
   state.config = await client.loadWebConfig();
   schedules.refreshAvailability();
+  projects?.refreshAvailability();
   selection.renderEnvironmentOptions();
   const options = selection.environmentOptions();
   const saved = preferences.environmentId();
@@ -42,6 +44,7 @@ export async function bootstrapWebApp({
   selection.renderAgentPicker();
   realtime.connect();
   await Promise.allSettled([
+    projects?.load(),
     selection.loadModels(),
     selection.loadAgentMode(),
     operations.loadRuntimeStatus(),

package/dist/src/web-ui/app/app-dom.js

@@ -26,6 +26,8 @@ export function findAppDom(documentRoot = document) {
     environmentSelect: documentRoot.getElementById("environmentSelect"),
     agentPickerButton: documentRoot.getElementById("agentPickerButton"),
     agentPickerMenu: documentRoot.getElementById("agentPickerMenu"),
+    newProjectButton: documentRoot.getElementById("newProjectButton"),
+    projectCreationRoot: documentRoot.getElementById("projectCreationRoot"),
     newSessionButton: documentRoot.getElementById("newSessionButton"),
     refreshSessionsButton: documentRoot.getElementById("refreshSessionsButton"),
     closeSessionsButton: documentRoot.getElementById("closeSessionsButton"),
@@ -33,6 +35,7 @@ export function findAppDom(documentRoot = document) {
     sessionSearchInput: documentRoot.getElementById("sessionSearchInput"),
     sessionsCount: documentRoot.getElementById("sessionsCount"),
     sessionsList: documentRoot.getElementById("sessionsList"),
+    currentProjectContext: documentRoot.getElementById("currentProjectContext"),
     sessionTitle: documentRoot.getElementById("sessionTitle"),
     agentModeButton: documentRoot.getElementById("agentModeButton"),
     agentModeMenu: documentRoot.getElementById("agentModeMenu"),

package/dist/src/web-ui/app/app-state.js

@@ -0,0 +1,38 @@
+export function createAppState() {
+  return {
+    config: null,
+    connected: false,
+    sessions: [],
+    pinnedSessionIds: [],
+    sessionModes: {},
+    sessionModels: {},
+    lastModelByEnvironment: {},
+    agentMode: "reasoning",
+    supportedAgentModes: ["fast", "reasoning", "deep", "auto"],
+    agentModeMenuOpen: false,
+    permissionModeMenuOpen: false,
+    agentPickerOpen: false,
+    busySessionIds: new Set(),
+    messages: [],
+    events: [],
+    taskProgressByRequest: new Map(),
+    contextWindowByRequest: new Map(),
+    submittedToolApprovalIds: new Set(),
+    requestMessages: new Map(),
+    currentSessionId: "",
+    activeRequestId: "",
+    sessionViewVersion: 0,
+    lastSeqByRequest: new Map(),
+    modelProfiles: [],
+    defaultModelProfileId: "",
+    runtimeAvailability: { status: "loading" },
+    pendingAttachments: [],
+    pendingAttachmentUploadCounts: new Map(),
+    composerAttachmentGeneration: 0,
+    composerSending: false,
+    composerQueueDrainingScopes: new Set(),
+    composerQueueRecoveredReleaseTokens: new Set(),
+    activeComposerQueueRecovery: null,
+    sessionQuery: "",
+  };
+}

package/dist/src/web-ui/app/app.js

@@ -1,7 +1,13 @@
-import { captureComposerSubmissionScope, isCurrentComposerSubmissionScope } from "./lib/composer-submission-scope.js";
+import { createAppState } from "./app-state.js";
+import { createProjectsFeature } from "./projects-feature.js";
+import {
+  captureComposerSubmissionScope,
+  isCurrentComposerSubmissionScope,
+} from "./lib/composer-submission-scope.js";
 import { createComposerSurfaceController } from "./controllers/composer-surface-controller.js";
 import { bootstrapWebApp } from "./app-bootstrap.js";
-import { createConfigurationFeature } from "./configuration-feature.js";
+import { bindRuntimeSetupPageLifecycle } from "./runtime-setup-page-lifecycle.js";
+import { createConfigurationFeature } from "./configuration-environment-refresh.js";
 import { createDashboardFeature } from "./dashboard-feature.js";
 import { createComposerWorkspaceController } from "./controllers/composer-workspace-controller.js";
 import { createHomeComposerFeature } from "./controllers/home-composer-feature.js";
@@ -11,11 +17,11 @@ import { createSchedulesFeature } from "./schedules-feature.js";
 import { createWorkspaceShell } from "./components/workspace-shell.js";
 import { createComposerActions } from "./components/composer-actions.js";
 import { createModelSelector } from "./components/model-selector.js";
-import { createRuntimeSetupGuide } from "./components/runtime-setup-guide.js";
+import { createRuntimeOnboardingFeature } from "./runtime-onboarding-feature.js";
 import { createSessionActionsMenu } from "./components/session-actions-menu.js";
 import { createToolApprovalCard } from "./components/tool-approval-card.js";
 import { textOf } from "./lib/text-format.js";
-import { createConversationView } from "./components/conversation-view.js";
+import { createConversationViewFeature as createConversationView } from "./controllers/conversation-view-feature.js";
 import { createSessionComposerQueue } from "./lib/session-composer-queue.js";
 import { createRuntimeWebClient } from "./services/runtime-web-client.js";
 import { createClientPreferences } from "./services/client-preferences.js";
@@ -27,49 +33,13 @@ import { createComposerAttachmentsController } from "./controllers/composer-atta
 import { createComposerQueueController } from "./controllers/composer-queue-controller.js";
 import { createRealtimeEventController } from "./controllers/realtime-event-controller.js";
 import { createRuntimeSelectionController } from "./controllers/runtime-selection-controller.js";
-import { createRuntimeOnboardingController } from "./controllers/runtime-onboarding-controller.js";
 import { createAppEventBindings } from "./controllers/app-event-bindings.js";
 import { createConversationSessionController } from "./controllers/conversation-session-controller.js";
 import { createChatRequestController } from "./controllers/chat-request-controller.js";
 import { createToolApprovalController } from "./controllers/tool-approval-controller.js";
 import { createComposerSubmitController } from "./controllers/composer-submit-controller.js";
 
-const state = {
-  config: null,
-  connected: false,
-  sessions: [],
-  pinnedSessionIds: [],
-  sessionModes: {},
-  sessionModels: {},
-  lastModelByEnvironment: {},
-  agentMode: "reasoning",
-  supportedAgentModes: ["fast", "reasoning", "deep", "auto"],
-  agentModeMenuOpen: false,
-  permissionModeMenuOpen: false,
-  agentPickerOpen: false,
-  busySessionIds: new Set(),
-  messages: [],
-  events: [],
-  taskProgressByRequest: new Map(),
-  contextWindowByRequest: new Map(),
-  submittedToolApprovalIds: new Set(),
-  requestMessages: new Map(),
-  currentSessionId: "",
-  activeRequestId: "",
-  sessionViewVersion: 0,
-  lastSeqByRequest: new Map(),
-  modelProfiles: [],
-  defaultModelProfileId: "",
-  runtimeAvailability: { status: "loading" },
-  pendingAttachments: [],
-  pendingAttachmentUploadCounts: new Map(),
-  composerAttachmentGeneration: 0,
-  composerSending: false,
-  composerQueueDrainingScopes: new Set(),
-  composerQueueRecoveredReleaseTokens: new Set(),
-  activeComposerQueueRecovery: null,
-  sessionQuery: "",
-};
+const state = createAppState();
 
 const dom = findAppDom();
 
@@ -89,6 +59,7 @@ let schedulesFeature;
 let dashboardFeature;
 let homeComposer;
 let runtimeSelection;
+let projectsFeature;
 const operationsController = createOperationsController({
   dom,
   client: runtimeClient,
@@ -141,6 +112,9 @@ const shell = createWorkspaceShell({
   onWorkspaceChange: (workspace) => {
     runtimeSelection?.rememberModelSelection();
     homeComposer?.setWorkspace(workspace);
+    conversationView?.setWorkspace(workspace);
+    projectsFeature?.workspaceChanged(workspace);
+    runtimeSetupGuide.clearSecret();
     schedulesFeature?.setActive(workspace === "schedules");
     dashboardFeature?.setActive(workspace === "home");
     runtimeSelection?.applyModelSelection();
@@ -157,23 +131,21 @@ const shell = createWorkspaceShell({
     return configWorkspace.prepareDiscardChanges("leave configuration");
   },
 });
-const runtimeSetupGuide = createRuntimeSetupGuide({
-  container: dom.runtimeSetupGuide,
-  conversationRegion: dom.messagesList,
-  copyText: (value) => navigator.clipboard.writeText(value),
-  getSetupCommandMode: () => state.config?.setupCommandMode,
-});
-const runtimeOnboarding = createRuntimeOnboardingController({
-  state,
-  guide: runtimeSetupGuide,
-  reloadModels: loadModels,
-  setMessageStatus: setMessageActivityStatus,
-  onStateChange: () => {
-    updateComposerSendState();
-    renderAttachmentComposer();
-    dashboardFeature?.publish();
-  },
-});
+const { guide: runtimeSetupGuide, controller: runtimeOnboarding } =
+  createRuntimeOnboardingFeature({
+    dom,
+    runtimeClient,
+    selectedEnvironmentId,
+    state,
+    reloadModels: () => configWorkspace.reloadAppliedEnvironmentModels(),
+    reloadCatalog: loadModels,
+    setMessageStatus: setMessageActivityStatus,
+    onStateChange: () => {
+      updateComposerSendState();
+      renderAttachmentComposer();
+      dashboardFeature?.runtimeAvailabilityChanged();
+    },
+  });
 
 const composerActions = createComposerActions({
   dom,
@@ -200,6 +172,7 @@ dashboardFeature = createDashboardFeature({
   isComposerAvailable: runtimeOnboarding.isReady,
 });
 const composerWorkspace = createComposerWorkspaceController({
+  onSessionCreated: (sessionId) => runtimeSelection.initializeSessionMode(sessionId),
   state,
   dom,
   homeComposerHost: dashboardFeature.composerHost,
@@ -231,6 +204,7 @@ const sessionController = createSessionController({
   state,
   dom,
   sessionActionsMenu,
+  renderGroups: (input) => projectsFeature?.renderSessionGroups(input) ?? false,
   shell,
   preferences,
   client: runtimeClient,
@@ -276,12 +250,10 @@ const toolApprovalController = createToolApprovalController({
   createCard: createToolApprovalCard,
 });
 conversationView = createConversationView({
-  dom: {
-    messagesList: dom.messagesList,
-    jumpToLatestButton: dom.jumpToLatestButton,
-    composerContextWindow: dom.composerContextWindow,
-    composerPlan: dom.composerPlan,
-  },
+  dom,
+  filePreviewClient: runtimeClient,
+  getFileEnvironmentId: selectedEnvironmentId,
+  getFileSessionId: () => state.currentSessionId,
   getMessages: () => state.messages,
   getActiveRequestId: () => state.activeRequestId,
   isConnected: () => state.connected,
@@ -301,6 +273,7 @@ conversationView = createConversationView({
   canOpenSchedule: runtimeClient.supportsSchedules,
 });
 conversationSession = createConversationSessionController({
+  onSessionCreated: (sessionId) => runtimeSelection.initializeSessionMode(sessionId),
   state,
   dom,
   client: runtimeClient,
@@ -335,6 +308,23 @@ conversationSession = createConversationSessionController({
   isCurrentComposerScope: (scope) =>
     composerQueueController.isCurrentScope(scope),
 });
+projectsFeature = createProjectsFeature({
+  onSessionCreated: (sessionId) => runtimeSelection.initializeSessionMode(sessionId),
+  dom,
+  state,
+  client: runtimeClient,
+  shell,
+  selectedEnvironmentId,
+  conversationSession,
+  renderSessions,
+  closeFilePreview: conversationView.closeFilePreview,
+  prepareConversation: () => {
+    const activate = shell.prepareWorkspaceActivation("chat", { focus: false });
+    if (!activate) return false;
+    if (!composerQueueController.suspendRecoveryForNavigation()) return false;
+    return activate() !== false;
+  },
+});
 chatRequests = createChatRequestController({
   state,
   client: runtimeClient,
@@ -472,16 +462,24 @@ homeComposer = createHomeComposerFeature({
     updateComposerSendState,
   }),
   sendMessage: async (text) => {
-    const scope = captureComposerSubmissionScope(state, selectedEnvironmentId());
+    const scope = captureComposerSubmissionScope(
+      state,
+      selectedEnvironmentId(),
+    );
     state.composerSending = true;
     updateComposerSendState();
     try {
       await chatRequests.sendMessage(text);
     } catch (error) {
-      if (!isCurrentComposerSubmissionScope(scope, state, selectedEnvironmentId())) return;
+      if (
+        !isCurrentComposerSubmissionScope(scope, state, selectedEnvironmentId())
+      )
+        return;
       conversationSession.appendRequestError(error);
     } finally {
-      if (isCurrentComposerSubmissionScope(scope, state, selectedEnvironmentId())) {
+      if (
+        isCurrentComposerSubmissionScope(scope, state, selectedEnvironmentId())
+      ) {
         state.composerSending = false;
         updateComposerSendState();
       }
@@ -489,6 +487,7 @@ homeComposer = createHomeComposerFeature({
   },
 });
 const appEventBindings = createAppEventBindings({
+  onSessionCreated: (sessionId) => runtimeSelection.initializeSessionMode(sessionId),
   state,
   dom,
   shell,
@@ -535,6 +534,9 @@ const appEventBindings = createAppEventBindings({
 });
 
 configWorkspace = createConfigurationFeature({
+  state,
+  selection: runtimeSelection,
+  onConfigurationApplied: loadModels,
   dom,
   runtimeClient,
   selectedEnvironmentId,
@@ -726,6 +728,11 @@ async function loadSystemHealth() {
 
 function bindEvents() {
   appEventBindings.bind();
+  bindRuntimeSetupPageLifecycle({
+    page: window,
+    dispose: runtimeSetupGuide.dispose,
+    reloadModels: loadModels,
+  });
   document.addEventListener(
     "visibilitychange",
     conversationSession.markCurrentSessionReadSoon,
@@ -748,10 +755,12 @@ void bootstrapWebApp({
   homeComposer,
   dashboard: dashboardFeature,
   schedules: schedulesFeature,
+  projects: projectsFeature,
   selection: runtimeSelection,
   client: runtimeClient,
   bindables: [
     sessionActionsMenu,
+    projectsFeature,
     conversationView,
     configWorkspace,
     composerActions,

package/dist/src/web-ui/app/components/config-workspace/config-model.js

@@ -1,6 +1,17 @@
+import {
+  malformedConfigRaw,
+  configRequiresRawRepair,
+} from "./raw-config-repair.js";
 import { textOf } from "../../lib/text-format.js";
 
-export const CONFIG_CATEGORIES = ["memory", "pipeline", "models", "advanced"];
+export const CONFIG_CATEGORIES = [
+  "memory",
+  "pipeline",
+  "models",
+  "plugins",
+  "computer",
+  "advanced",
+];
 
 const DEFAULT_MODEL_EXECUTION_POLICY = "supervisor-worker-v1";
 
@@ -120,6 +131,7 @@ export function createConfigWorkspaceModel() {
     configDashboard: null,
     baselinesByKey: new Map(),
     rawDraftsByKey: new Map(),
+    appliedJsonRepairKeys: new Set(),
     savingKeys: new Set(),
     savedKeys: new Set(),
     expandedCalibrationKeys: new Set(),
@@ -165,11 +177,15 @@ export function createConfigWorkspaceModel() {
   function captureBaselines() {
     state.baselinesByKey.clear();
     state.rawDraftsByKey.clear();
+    state.appliedJsonRepairKeys.clear();
     state.savedKeys.clear();
     for (const file of configFileEntries()) {
       const key = configFileKey(file);
       state.baselinesByKey.set(key, cloneConfig(file.config));
-      state.rawDraftsByKey.set(key, formattedConfig(file.config));
+      state.rawDraftsByKey.set(
+        key,
+        malformedConfigRaw(file) ?? formattedConfig(file.config),
+      );
     }
   }
 
@@ -178,6 +194,7 @@ export function createConfigWorkspaceModel() {
   }
 
   function isFileDirty(file) {
+    if (state.appliedJsonRepairKeys.has(configFileKey(file))) return true;
     const baseline = baselineFor(file);
     return baseline ? !configValuesEqual(file.config, baseline) : false;
   }
@@ -186,10 +203,13 @@ export function createConfigWorkspaceModel() {
     const key = configFileKey(file);
     return state.rawDraftsByKey.has(key)
       ? state.rawDraftsByKey.get(key)
-      : formattedConfig(file.config);
+      : (malformedConfigRaw(file) ?? formattedConfig(file.config));
   }
 
   function hasRawDraftChanges(file) {
+    const appliedRepair = state.appliedJsonRepairKeys.has(configFileKey(file));
+    if (configRequiresRawRepair(file, appliedRepair))
+      return rawDraftFor(file) !== malformedConfigRaw(file);
     return rawConfigDraftHasChanges(rawDraftFor(file), file.config);
   }
 

package/dist/src/web-ui/app/components/config-workspace/dashboard-rendering.js

@@ -1,3 +1,4 @@
+import { configRepairGuidance } from "./raw-config-repair.js";
 import { escapeAttribute, escapeHtml } from "../../lib/text-format.js";
 
 export function createConfigDashboardRendering({
@@ -78,6 +79,7 @@ export function createConfigDashboardRendering({
             >Save file</button>
           </div>
         </div>
+        <p id="configRawRepairGuidance" class="error-text" ${configRepairGuidance(file) ? "" : "hidden"}>${escapeHtml(configRepairGuidance(file))}</p>
         <textarea
           id="configRawEditor"
           class="config-view"

package/dist/src/web-ui/app/components/config-workspace/field-rendering.js

@@ -1,3 +1,4 @@
+import { malformedConfigRaw } from "./raw-config-repair.js";
 import { escapeAttribute, escapeHtml, textOf } from "../../lib/text-format.js";
 import {
   isConfigObject,
@@ -224,6 +225,7 @@ export function createConfigFieldRendering({
     if (hasRawDraftChanges(file)) return "Raw draft not applied";
     if (isFileDirty(file)) return "Unsaved changes";
     if (state.savedKeys.has(key)) return "Saved";
+    if (malformedConfigRaw(file) !== undefined) return "Invalid JSON";
     return "Clean";
   }
 

package/dist/src/web-ui/app/components/config-workspace/model-rendering.js

@@ -1,3 +1,4 @@
+import { configRequiresRawRepair } from "./raw-config-repair.js";
 import { escapeAttribute, escapeHtml, textOf } from "../../lib/text-format.js";
 import { isConfigObject } from "./config-model.js";
 
@@ -152,6 +153,11 @@ export function createConfigModelRendering({
       return '<div class="empty-state compact">No model configs found</div>';
     }
     state.selectedConfigModelId = model.id;
+    if (configRequiresRawRepair(
+      model,
+      state.appliedJsonRepairKeys.has(configFileKey(model)),
+    ))
+      return '<p class="error-text">Repair this linked file in Advanced → Raw JSON before editing model settings.</p>';
     const calibration = isConfigObject(model.config?.calibration)
       ? model.config.calibration
       : {};