@abot-ai/runtime 1.6.0 → 1.7.0

package/dist/src/web-ui/app/styles/46-system-host.css

@@ -8,39 +8,14 @@
   background: var(--panel);
 }
 
-.system-host-summary {
-  display: flex;
-  align-items: center;
-  gap: 16px;
-  min-height: 60px;
-  padding: 12px 16px;
-  list-style: none;
-  cursor: pointer;
-  font-size: var(--font-size-sm);
-}
-
-.system-host-summary::-webkit-details-marker { display: none; }
-.system-host-summary-title { flex-shrink: 0; color: var(--text); }
-.system-host-summary .system-host-status { margin: 0; padding: 0; border: 0; }
-.system-host-summary-name {
-  min-width: 0;
-  overflow: hidden;
-  color: var(--muted);
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-.system-host-summary-action { margin-left: auto; color: var(--accent); white-space: nowrap; }
+.system-host-permission-details { grid-column: 1 / -1; min-width: 0; }
+.system-host-permission-details > summary { display: flex; align-items: baseline; flex-wrap: wrap; gap: 4px 12px; padding: 6px 0; color: var(--muted); cursor: pointer; font-size: var(--font-size-xs); }
+.system-host-permission-details > summary:hover { color: var(--text); }
+.system-host-permission-details > summary:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; border-radius: 3px; }
+.system-host-permission-details > summary::after { content: "⌄"; margin-left: auto; }
+.system-host-permission-details[open] > summary::after { transform: rotate(180deg); }
 .system-host-summary-permissions { color: var(--muted); font-size: var(--font-size-xs); }
-.system-host-summary-action > span { display: inline-block; transition: transform 150ms ease; }
-.system-host-compact[open] .system-host-summary-action > span { transform: rotate(180deg); }
-.system-host-summary:hover { background: var(--control-bg); }
-.system-host-summary:focus-visible { outline: 2px solid var(--accent); outline-offset: -3px; }
-.system-host-management-body {
-  max-height: min(520px, 60dvh);
-  padding: 0 16px;
-  overflow-y: auto;
-  border-top: 1px solid var(--line);
-}
+.system-host-permission-details .system-host-permissions { margin-top: 6px; max-height: min(420px, 45dvh); overflow-y: auto; overscroll-behavior: contain; scrollbar-width: thin; }
 
 .home-computer-access:focus-visible {
   outline: 2px solid var(--accent);
@@ -54,14 +29,6 @@
   line-height: 1.6;
 }
 
-.system-host-heading,
-.system-host-actions {
-  display: flex;
-  align-items: flex-start;
-  justify-content: space-between;
-  gap: 16px;
-}
-
 .system-host-permissions { margin-block: 20px; border-block: 1px solid var(--line); padding-block: 16px; }
 .system-host-permission-heading { display: flex; align-items: center; justify-content: space-between; gap: 12px; }
 .system-host-permission-heading h3 { margin: 0; font-size: var(--font-size-base); font-weight: 500; }
@@ -78,24 +45,7 @@
 .system-host-native-permissions { margin-top: 16px; }
 .system-host-native-permissions pre { white-space: pre-wrap; overflow-wrap: anywhere; user-select: text; }
 
-.system-host-heading h2 {
-  margin: 0 0 6px;
-  font-size: var(--font-size-2xl);
-  font-weight: 400;
-}
-
-.system-host-heading p,
-.system-host-note {
-  color: var(--config-muted, var(--muted));
-}
-
-.system-host-heading p {
-  margin: 0;
-}
-
-.system-host-heading button {
-  flex-shrink: 0;
-}
+.system-host-note { color: var(--config-muted, var(--muted)); }
 
 .system-host-panel button {
   min-height: 32px;
@@ -130,50 +80,23 @@
   color: var(--danger);
 }
 
-.system-host-panel button:disabled {
-  opacity: 0.45;
-  cursor: not-allowed;
-}
-
-.system-host-status {
-  display: flex;
-  align-items: center;
-  gap: 9px;
-  padding-block: 12px;
-  border-block: 1px solid var(--line);
-}
-
-.system-host-status-dot {
-  flex: 0 0 8px;
-  width: 8px;
-  height: 8px;
-  border-radius: 50%;
-  background: var(--danger, #e27575);
-}
-
-.system-host-status[data-tone="ready"] .system-host-status-dot {
-  background: var(--success, #79d7a7);
-}
-
-.system-host-identity {
-  display: grid;
-  gap: 6px;
-  margin-block: 20px;
-}
-
-.system-host-identity > div {
-  display: grid;
-  grid-template-columns: 140px minmax(0, 1fr);
-  gap: 16px;
+.system-host-panel button[data-system-host-revoke]:hover:not(:disabled) {
+  border-color: transparent;
+  background: transparent;
+  color: var(--danger);
+  text-decoration: underline;
+  text-underline-offset: 3px;
 }
 
-.system-host-identity dt {
-  color: var(--config-muted, var(--muted));
+.system-host-panel button[data-system-host-revoke]:focus-visible {
+  background: transparent;
+  outline-color: var(--danger);
+  outline-offset: 3px;
 }
 
-.system-host-identity dd {
-  margin: 0;
-  overflow-wrap: anywhere;
+.system-host-panel button:disabled {
+  opacity: 0.45;
+  cursor: not-allowed;
 }
 
 .system-host-download {
@@ -184,6 +107,34 @@
   overflow-wrap: anywhere;
 }
 
+.system-host-card { padding: 14px 18px; line-height: 1.5; }
+.system-host-card-heading { display: flex; align-items: center; justify-content: space-between; gap: 12px; margin-bottom: 4px; }
+.system-host-card-heading h2 { margin: 0; font-size: var(--font-size-base); font-weight: 600; line-height: 1.4; }
+.system-host-card-status { display: inline-flex; align-items: center; gap: 6px; flex-shrink: 0; color: var(--amber); font-size: var(--font-size-xs); }
+.system-host-card-status[data-tone="ready"] { color: var(--accent); }
+.system-host-card-status i { width: 5px; height: 5px; border-radius: 50%; background: currentColor; }
+.system-host-card-description { margin: 0; max-width: 640px; color: var(--muted); }
+.system-host-card-action { display: flex; align-items: center; gap: 14px; flex-wrap: wrap; margin-top: 12px; }
+.system-host-panel .system-host-card-primary { display: inline-flex; align-items: center; justify-content: center; min-height: 32px; padding: 5px 12px; border: 1px solid var(--accent); border-radius: 5px; background: var(--accent); color: var(--bg); font-size: var(--font-size-sm); font-weight: 500; text-decoration: none; }
+.system-host-store-icon { flex-shrink: 0; margin-inline-end: 8px; }
+.system-host-panel .system-host-card-primary:hover:not(:disabled) { background: var(--accent); border-color: var(--accent); filter: brightness(1.08); }
+.system-host-panel .system-host-card-secondary { min-height: 32px; padding: 5px 2px; border: 0; background: transparent; color: var(--muted); font-size: var(--font-size-sm); text-decoration: none; }
+.system-host-panel .system-host-card-secondary:hover:not(:disabled) { background: transparent; border-color: transparent; color: var(--text); text-decoration: underline; text-underline-offset: 3px; }
+.system-host-card a:focus-visible { outline: 2px solid var(--accent); outline-offset: 3px; }
+.system-host-card-hint { margin: 8px 0 0; color: var(--muted); font-size: var(--font-size-xs); }
+.system-host-card-message { margin: 8px 0 0; color: var(--accent); font-size: var(--font-size-xs); }
+.system-host-card-computer { display: flex; align-items: center; justify-content: space-between; gap: 8px 16px; flex-wrap: wrap; margin-top: 12px; color: var(--muted); font-size: var(--font-size-xs); }
+.system-host-card-computer > span { overflow-wrap: anywhere; min-width: 0; }
+.system-host-card-computer [data-system-host-revoke] { min-height: 32px; padding: 0; border: 0; font-size: inherit; }
+.system-host-card-access-note { margin: 8px 0 0; color: var(--muted); font-size: var(--font-size-xs); }
+.system-host-card-ready { display: grid; grid-template-columns: auto minmax(0, 1fr) auto; align-items: center; gap: 4px 16px; min-height: 44px; padding: 6px 16px; }
+.system-host-card-ready-title { display: flex; align-items: center; gap: 8px; margin: 0; font-size: var(--font-size-sm); font-weight: 500; white-space: nowrap; }
+.system-host-card-ready .system-host-card-computer { display: contents; }
+.system-host-card-ready .system-host-card-computer > span { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.system-host-card-ready [data-system-host-revoke] { white-space: nowrap; }
+.system-host-card-other { margin-top: 12px; padding-top: 12px; border-top: 1px solid var(--line); }
+.system-host-card-other .system-host-actions { margin-top: 8px; }
+
 .system-host-restart {
   border: 1px solid var(--line);
   border-radius: 6px;
@@ -193,6 +144,8 @@
 }
 
 .system-host-actions {
+  display: flex;
+  gap: 12px;
   justify-content: flex-start;
   flex-wrap: wrap;
   margin-top: 20px;
@@ -241,14 +194,15 @@
   display: none;
 }
 
+@media (max-width: 620px) {
+  .system-host-card.system-host-card-ready { grid-template-columns: minmax(0, 1fr) auto; gap: 2px 12px; padding: 8px 14px; }
+  .system-host-card-ready-title { grid-column: 1; grid-row: 1; white-space: normal; }
+  .system-host-card-ready .system-host-card-computer > span { grid-column: 1; grid-row: 2; }
+  .system-host-card-ready [data-system-host-revoke] { grid-column: 2; grid-row: 1 / span 2; }
+}
+
 @media (max-width: 520px) {
-  .system-host-summary { flex-wrap: wrap; gap: 6px 12px; }
-  .system-host-summary-name { display: none; }
-  .system-host-heading {
-    flex-direction: column;
-  }
-  .system-host-identity > div {
-    grid-template-columns: 110px minmax(0, 1fr);
-    gap: 10px;
-  }
+  .system-host-card { padding: 12px 14px; }
+  .system-host-card-heading { align-items: flex-start; }
+  .system-host-card-action { gap: 12px; }
 }

package/dist/src/web-ui/app/styles/47-config-controls.css

@@ -135,6 +135,7 @@
   border-top: 1px solid var(--config-line);
 }
 
+.model-plugin-permissions > summary,
 .config-calibration-section-title {
   display: flex;
   align-items: center;
@@ -147,27 +148,38 @@
   cursor: pointer;
 }
 
+.model-plugin-permissions > summary:focus-visible,
+.config-calibration-section-title:focus-visible {
+  outline: 2px solid var(--accent);
+  outline-offset: 3px;
+}
+
+.model-plugin-permissions > summary::-webkit-details-marker,
 .config-calibration-section-title::-webkit-details-marker {
   display: none;
 }
 
+.model-plugin-permissions > summary::before,
 .config-calibration-section-title::before {
   content: "";
   width: 6px;
   height: 6px;
   flex: none;
-  border-right: 1px solid var(--config-muted);
+  border-inline-end: 1px solid var(--config-muted);
   border-bottom: 1px solid var(--config-muted);
   transform: rotate(-45deg);
 }
 
+.model-plugin-permissions[open] > summary::before,
 .config-calibration-section[open] > .config-calibration-section-title::before {
   transform: rotate(45deg);
 }
 
+.model-plugin-summary-count,
 .config-calibration-section-title small {
   margin-inline-start: auto;
   color: var(--config-muted);
+  font-size: var(--font-size-xs);
   font-weight: 400;
 }
 

package/dist/src/web-ui/app/styles/54-spark-chat.css

@@ -79,7 +79,39 @@
 .spark-chat-panel .conversation-file-backdrop { display: none; }
 .spark-chat-results:empty { display: none; }
 .spark-handoff-actions { margin-top: 10px; }
-.spark-handoff-button { min-height: 30px; padding: 5px 9px; border: 1px solid #ffffff14; border-radius: 7px; background: #ffffff08; color: var(--text); font-size: 11px; box-shadow: none; }
+.spark-companion :is(.spark-setup-button, .spark-handoff-button) {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  justify-self: start;
+  max-width: 100%;
+  min-height: 32px;
+  padding: 6px 12px;
+  border: 1px solid var(--line);
+  border-radius: 7px;
+  background: var(--control-bg);
+  color: var(--accent-strong);
+  font-size: var(--font-size-sm);
+  font-weight: 400;
+  line-height: 1.5;
+  white-space: normal;
+  text-align: start;
+  box-shadow: none;
+}
+.spark-companion :is(.spark-setup-button, .spark-handoff-button):hover:not(:disabled) {
+  border-color: var(--line-strong);
+  background: var(--control-bg-hover);
+}
+.spark-companion :is(.spark-setup-button, .spark-handoff-button):focus-visible {
+  border-color: var(--accent);
+}
+.spark-companion :is(.spark-setup-button, .spark-handoff-button):disabled {
+  background: var(--control-fill);
+  color: var(--muted-2);
+  opacity: .5;
+  cursor: not-allowed;
+}
+.spark-companion .spark-setup-button { margin-top: 12px; }
 .spark-handoff-actions p { margin: 5px 0 0; color: var(--muted); font-size: 11px; }
 .spark-chat-results .conversation-tool-file-action { max-width: 100%; font-size: 12px; }
 .spark-result-warning { margin: 6px 0; color: var(--amber); font-size: 12px; }

package/dist/src/web-ui/app/styles.css

@@ -18,6 +18,9 @@
 @import url("./styles/30-inspector-config.css");
 @import url("./styles/40-config-workspace.css");
 @import url("./styles/41-plugin-management.css");
+@import url("./styles/42-model-plugin-permissions.css");
+@import url("./styles/41-plugin-discovery.css");
+@import url("./styles/41-plugin-configuration.css");
 @import url("./styles/42-runtime-setup-plugins.css");
 @import url("./styles/43-model-setup.css");
 @import url("./styles/44-model-provider-cards.css");
@@ -40,6 +43,7 @@
 @import url("./styles/45-bridge-setup.css");
 @import url("./styles/46-system-host.css");
 @import url("./styles/11-workspace-header-width.css");
+@import url("./styles/11-product-links.css");
 @import url("./styles/28-tool-approval-card.css");
 @import url("./styles/14-startup-screen.css");
 @import url("./styles/93-compact-viewport.css");

package/dist/src/web-ui/local-runtime/api-router.js

@@ -88,6 +88,11 @@ export class LocalRuntimeApiRouter {
         }));
         this.plugins = new PluginManagementRoutes({
             rootDir: options.rootDir ?? process.cwd(),
+            requireMutationIdle: () => this.environments.requirePluginMutationIdle(this.requests.healthDetails().length > 0),
+            removalRuntime: {
+                applyConfiguration: (revision) => this.applyWhenRequestsIdle(revision),
+                requireInactive: (pluginId, capabilities) => this.environments.requirePluginInactive(pluginId, capabilities),
+            },
             getConfigPath: () => options.configPath ?? process.env.LLM_RUNTIME_CONFIG_FILE,
         });
         this.readStates = new WebSessionReadStates((id) => this.environments.get(id));
@@ -101,7 +106,7 @@ export class LocalRuntimeApiRouter {
         }));
         this.memoryManagement = new LongTermMemoryManagementRoutes((environmentId) => this.environments.get(environmentId).services.longTermMemory);
     }
-    async applyWhenRequestsIdle() {
+    async applyWhenRequestsIdle(expectedRevision) {
         const hasAcknowledgedRequests = this.requests.healthDetails().length > 0;
         if (hasAcknowledgedRequests) {
             return {
@@ -109,7 +114,7 @@ export class LocalRuntimeApiRouter {
                 message: "Your agent is working. Wait for active conversations and Jobs to finish, then apply again.",
             };
         }
-        return this.environments.applyConfiguration();
+        return this.environments.applyConfiguration(expectedRevision);
     }
     async initializeSessionReadState(environmentIds) {
         for (const id of environmentIds) {
@@ -222,7 +227,7 @@ export class LocalRuntimeApiRouter {
             response: res,
         }))
             return;
-        if (await this.plugins.handle({ method, route, body, response: res }))
+        if (await this.plugins.handle({ method, route, body, request: req, response: res }))
             return;
         if (segments[0] === "schedules")
             await this.initializeSessionReadState([environmentId]);
@@ -320,10 +325,10 @@ export class LocalRuntimeApiRouter {
             });
             return;
         }
-        if ((method === "GET" && route === "chat/sessions") ||
+        if (((method === "GET" && route === "chat/sessions") || (method === "POST" && route === "chat/sessions/page")) ||
             (method === "POST" && route === "chat/messages")) {
             const setupRequirement = this.environments.setupRequirement(environmentId);
-            if (setupRequirement && method === "GET") {
+            if (setupRequirement && route !== "chat/messages") {
                 sendJson(res, 200, {
                     ok: true,
                     sessions: [],
@@ -350,7 +355,7 @@ export class LocalRuntimeApiRouter {
         if (await this.sessions.handle({
             method,
             segments,
-            body,
+            url, body,
             environmentId,
             environment,
             response: res,

package/dist/src/web-ui/local-runtime/approval-request-attachment.js

@@ -1,4 +1,5 @@
 import { createRequestSteeringInbox } from "../../runtime/request/request-steering.js";
+import { traceWebProjection } from "./request-control-observation.js";
 function hasMatchingRequestView(active, input) {
     if (active.environmentId !== input.environmentId)
         return false;
@@ -22,9 +23,13 @@ export async function attachApprovalRequest(input) {
             lastEventName: "tool.approval.required",
             events: [...input.events],
             finalState: null,
-            requestSteering: createRequestSteeringInbox({ requestId }),
+            requestSteering: createRequestSteeringInbox({
+                requestId,
+                diagnostics: { origin: "web_projection" },
+            }),
         };
         activeRequests.set(requestId, active);
+        traceWebProjection("projection.opened", requestId, active, "approval_attachment");
     }
     if (pending.run)
         return;
@@ -37,8 +42,10 @@ export async function attachApprovalRequest(input) {
             resolve();
         })
             .catch((error) => {
-            if (createdProjection && activeRequests.get(requestId) === projection)
-                activeRequests.delete(requestId);
+            if (createdProjection && activeRequests.get(requestId) === projection) {
+                const removed = activeRequests.delete(requestId);
+                traceWebProjection("projection.removed", requestId, projection, "attachment_error", removed);
+            }
             if (accepted)
                 input.publish(JSON.stringify({
                     type: "control",
@@ -51,8 +58,10 @@ export async function attachApprovalRequest(input) {
             .finally(() => {
             if (!projection.finalState)
                 return;
-            if (activeRequests.get(requestId) === projection)
-                activeRequests.delete(requestId);
+            if (activeRequests.get(requestId) === projection) {
+                const removed = activeRequests.delete(requestId);
+                traceWebProjection("projection.removed", requestId, projection, "attachment_terminal_settled", removed);
+            }
         });
     });
 }

package/dist/src/web-ui/local-runtime/configuration-activation-source.d.ts

@@ -4,4 +4,4 @@ export type ConfigurationActivationPreparation = {
     restoreConfiguration(): void;
 };
 /** Cooperating root and linked-file saves wait for activation or restoration to finish. */
-export declare function withConfigurationActivationSource(configPath: string, operation: (preparation: ConfigurationActivationPreparation) => Promise<RuntimeSetupActivation>): Promise<RuntimeSetupActivation>;
+export declare function withConfigurationActivationSource(configPath: string, operation: (preparation: ConfigurationActivationPreparation) => Promise<RuntimeSetupActivation>, expectedRevision?: string, pluginRootDir?: string): Promise<RuntimeSetupActivation>;

package/dist/src/web-ui/local-runtime/configuration-activation-source.js

@@ -1,4 +1,5 @@
-import { withConfigFileTransaction } from "../../runtime/adapters/config-file-transaction.js";
+import { withPluginConfigurationLock } from "../../runtime/plugins/configuration-write.js";
+import { ConfigFileConflictError, withConfigFileTransaction, } from "../../runtime/adapters/config-file-transaction.js";
 import { resolveRequestRunnerConfigReference } from "../../runtime/config/request-runner-config.js";
 import { invalidateRequestRunnerConfig } from "../../runtime/config/runner/loader.js";
 function restoreUnappliedRequestRunner(activation, preparation) {
@@ -7,8 +8,11 @@ function restoreUnappliedRequestRunner(activation, preparation) {
     preparation.restoreConfiguration();
 }
 /** Cooperating root and linked-file saves wait for activation or restoration to finish. */
-export function withConfigurationActivationSource(configPath, operation) {
+export function withConfigurationActivationSource(configPath, operation, expectedRevision, pluginRootDir) {
     return withConfigFileTransaction(configPath, async (transaction) => {
+        if (expectedRevision !== undefined &&
+            transaction.snapshot.revision !== expectedRevision)
+            throw new ConfigFileConflictError();
         const runner = resolveRequestRunnerConfigReference({
             fileConfig: transaction.snapshot.config,
             mainConfigPath: configPath,
@@ -24,7 +28,9 @@ export function withConfigurationActivationSource(configPath, operation) {
             },
         };
         try {
-            const activation = await operation(preparation);
+            const activation = await (pluginRootDir
+                ? withPluginConfigurationLock(pluginRootDir, () => operation(preparation))
+                : operation(preparation));
             restoreUnappliedRequestRunner(activation, preparation);
             return activation;
         }

package/dist/src/web-ui/local-runtime/contracts.d.ts

@@ -1,4 +1,4 @@
-import type { RuntimeSetupGatewayRestorePoint } from "../runtime-setup-gateway.js";
+import type { AppliedGatewayConfigurations, RuntimeSetupGatewayRestorePoint } from "../runtime-setup-gateway.js";
 import type { WebUiEnvironmentConfig } from "../environment-config.js";
 import type { RuntimeSetupActivation } from "./runtime-setup-input.js";
 import type { LocalRuntimeApplication } from "../../runtime/local-application.js";
@@ -11,9 +11,10 @@ export type LocalRuntimeBackendOptions = {
     defaultEnvironmentId: string;
     resolveEnvironmentConfig?: (configPath?: string) => WebUiEnvironmentConfig;
     providerAdapters?: ModelProviderAdapterRegistry;
-    onRuntimeSetup?: (configPath: string) => Promise<RuntimeSetupActivation>;
+    captureRuntimeSetupConfiguration?: (configPath?: string) => string | null;
+    onRuntimeSetup?: (configPath: string, applied?: AppliedGatewayConfigurations) => Promise<RuntimeSetupActivation>;
     createRuntimeSetupRestorePoint?: () => RuntimeSetupGatewayRestorePoint;
-    checkRuntimeSetupActivation?: (configPath: string) => Promise<RuntimeSetupActivation>;
+    checkRuntimeSetupActivation?: (configPath: string, applied?: AppliedGatewayConfigurations) => Promise<RuntimeSetupActivation>;
 };
 export type ResolvedLocalRuntimeBackendOptions = Omit<LocalRuntimeBackendOptions, "providerAdapters"> & {
     providerAdapters: ModelProviderAdapterRegistry;

package/dist/src/web-ui/local-runtime/environment-registry.d.ts

@@ -7,6 +7,7 @@ export declare class RuntimeEnvironmentRegistry {
     private readonly options;
     private readonly schedulerBindings;
     private readonly environments;
+    private readonly gatewayConfigurations;
     private stopped;
     private readonly desiredEnvironmentIds;
     private applying;
@@ -23,13 +24,16 @@ export declare class RuntimeEnvironmentRegistry {
         status(): Promise<import("../../computer-access/native-permission-contract.js").NativePermissionStatus>;
         prepare(input: import("../../computer-access/native-permission-contract.js").NativePermissionInput): Promise<import("../../computer-access/native-permission-contract.js").NativePermissionResult>;
     }> | undefined;
-    applyConfiguration(): Promise<RuntimeSetupActivation>;
+    requirePluginInactive(pluginId: string, capabilityIds: readonly string[]): void;
+    requirePluginMutationIdle(hasAcknowledgedRequests?: boolean): void;
+    applyConfiguration(expectedRevision?: string): Promise<RuntimeSetupActivation>;
     private applySavedConfiguration;
     private checkGatewayActivation;
     configure(configPath: string): void;
     modelCatalog(environmentId: string): RuntimeModelCatalogState;
     setupRequirement(environmentId: string): RuntimeSetupRequirement | null;
     get(environmentId: string): RuntimeEnvironment;
+    private captureGatewayConfiguration;
     private createEnvironment;
     start(environmentIds: readonly string[]): Promise<void>;
     private startEnvironment;

package/dist/src/web-ui/local-runtime/environment-registry.js

@@ -1,3 +1,7 @@
+import { requirePluginOwnersIdle } from "./plugin-mutation-admission.js";
+import { ConfigFileConflictError } from "../../runtime/adapters/config-file-transaction.js";
+import { PluginManagementError } from "../plugin-management-service.js";
+import { isPluginToolSelected, normalizePluginSelection, } from "../../runtime/plugins/selection.js";
 import { requiresConfiguredCredential } from "./runtime-setup-provider.js";
 import { applyRuntimeConfiguration } from "./configuration-activation.js";
 import { withConfigurationActivationSource, } from "./configuration-activation-source.js";
@@ -11,6 +15,7 @@ export class RuntimeEnvironmentRegistry {
     options;
     schedulerBindings;
     environments = new Map();
+    gatewayConfigurations = new WeakMap();
     stopped = false;
     desiredEnvironmentIds = new Set();
     applying;
@@ -30,13 +35,35 @@ export class RuntimeEnvironmentRegistry {
             return undefined;
         return this.environments.get(environmentId)?.nativePermissions;
     }
-    applyConfiguration() {
+    requirePluginInactive(pluginId, capabilityIds) {
+        this.requireEnvironmentIntakeOpen();
+        if (this.setupActivationPending || this.environments.size === 0)
+            throw new PluginManagementError("plugin_runtime_unavailable", "Apply Runtime configuration before removing plugins.", 409);
+        for (const environment of this.environments.values()) {
+            const selection = normalizePluginSelection(environment.services.config.plugins);
+            if (environment.getOwnership() !== "owner" ||
+                capabilityIds.some((toolName) => isPluginToolSelected({ pluginId, toolName, selection })))
+                throw new PluginManagementError("plugin_still_active", "The plugin is still available in a Runtime environment. Apply its disable before removing it.", 409);
+        }
+    }
+    requirePluginMutationIdle(hasAcknowledgedRequests = false) {
+        requirePluginOwnersIdle({
+            environments: this.environments.values(),
+            unavailable: this.stopped || this.setupActivationPending,
+            busy: hasAcknowledgedRequests || !!this.applying,
+        });
+    }
+    applyConfiguration(expectedRevision) {
         if (this.stopped)
             return Promise.reject(new Error("web_runtime_stopped"));
-        if (this.applying)
+        if (this.applying) {
+            // A coalesced Apply may have loaded a different revision from this removal.
+            if (expectedRevision !== undefined)
+                return Promise.reject(new ConfigFileConflictError());
             return this.applying;
+        }
         const configPath = inspectRuntimeConfigFileWithMeta(this.options.rootDir ?? process.cwd(), this.options.configPath ?? process.env.LLM_RUNTIME_CONFIG_FILE).path;
-        const apply = withConfigurationActivationSource(configPath, (prepare) => this.applySavedConfiguration(configPath, prepare));
+        const apply = withConfigurationActivationSource(configPath, (prepare) => this.applySavedConfiguration(configPath, prepare), expectedRevision, this.options.rootDir ?? process.cwd());
         this.applying = apply.finally(() => {
             this.applying = undefined;
         });
@@ -44,6 +71,7 @@ export class RuntimeEnvironmentRegistry {
     }
     applySavedConfiguration(configPath, preparation) {
         const nextEnvironments = this.options.resolveEnvironmentConfig?.(configPath);
+        let appliedGatewayConfigurations;
         return applyRuntimeConfiguration({
             environments: this.environments,
             defaultEnvironmentId: nextEnvironments?.defaultEnvironmentId ??
@@ -51,16 +79,18 @@ export class RuntimeEnvironmentRegistry {
             environmentIds: nextEnvironments?.environments.map(({ id }) => id) ?? [
                 ...this.desiredEnvironmentIds,
             ],
-            createEnvironment: (id) => this.createEnvironment(id, this.loadConfig(id, configPath)),
-            recreateEnvironment: (id, previous) => this.createEnvironment(id, previous.services.config),
+            createEnvironment: (id) => this.createEnvironment(id, this.loadConfig(id, configPath), this.captureGatewayConfiguration(configPath)),
+            recreateEnvironment: (id, previous) => this.createEnvironment(id, previous.services.config, this.gatewayConfigurations.get(previous) ?? null),
             createGatewayRestorePoint: this.options.createRuntimeSetupRestorePoint,
             onRestorationFailure: () => {
                 this.setupActivationPending = true;
             },
             ...preparation,
-            checkGateway: () => this.checkGatewayActivation(configPath),
-            activateGateway: () => this.options.onRuntimeSetup?.(configPath) ??
-                Promise.resolve({ status: "ready" }),
+            checkGateway: () => {
+                appliedGatewayConfigurations = [...this.environments.values()].map((environment) => this.gatewayConfigurations.get(environment) ?? null);
+                return this.checkGatewayActivation(configPath, appliedGatewayConfigurations);
+            },
+            activateGateway: () => this.options.onRuntimeSetup?.(configPath, appliedGatewayConfigurations) ?? Promise.resolve({ status: "ready" }),
             canContinue: () => !this.stopped,
         }).then((result) => {
             if (result.status !== "ready")
@@ -77,9 +107,9 @@ export class RuntimeEnvironmentRegistry {
             return result;
         });
     }
-    checkGatewayActivation(configPath) {
+    checkGatewayActivation(configPath, applied) {
         if (this.options.checkRuntimeSetupActivation)
-            return this.options.checkRuntimeSetupActivation(configPath);
+            return this.options.checkRuntimeSetupActivation(configPath, applied);
         if (this.options.onRuntimeSetup)
             return Promise.resolve({ status: "ready" });
         return Promise.resolve({
@@ -141,10 +171,22 @@ export class RuntimeEnvironmentRegistry {
         this.environments.set(normalized, environment);
         return environment;
     }
-    createEnvironment(environmentId, config = this.loadConfig(environmentId)) {
+    captureGatewayConfiguration(configPath) {
+        try {
+            return (this.options.captureRuntimeSetupConfiguration?.(configPath) ?? null);
+        }
+        catch {
+            // An unavailable gateway snapshot cannot block an otherwise valid Runtime.
+            // Apply still refuses external reuse when any owner's snapshot is unknown.
+            return null;
+        }
+    }
+    createEnvironment(environmentId, config = this.loadConfig(environmentId), gatewayConfiguration = this.captureGatewayConfiguration(this.options.configPath)) {
         const environment = createLocalRuntimeApplication(config, {
             scheduledRequestOptions: this.schedulerBindings.requestOptions,
         });
+        // Capture before startup; restored owners keep their prior immutable snapshot.
+        this.gatewayConfigurations.set(environment, gatewayConfiguration);
         if (this.schedulerBindings.publish) {
             environment.subscribeScheduledEvents(this.schedulerBindings.publish);
         }

package/dist/src/web-ui/local-runtime/history-pagination.d.ts

@@ -0,0 +1,16 @@
+import type { RuntimeConfig } from "../../runtime/ports.js";
+import type { SessionSnapshotOptions } from "../../sessions/snapshot.js";
+import type { SessionSnapshot } from "../../sessions/types.js";
+export declare function webPageSize(config: RuntimeConfig): number;
+export declare function historyPageOptions(url: URL | undefined, config: RuntimeConfig): SessionSnapshotOptions;
+/** Compact identities stay between the session service and the read-state owner. */
+export declare function publicHistorySnapshot(snapshot: SessionSnapshot): {
+    kind?: import("../../sessions/spark-session.js").SessionKind;
+    project?: import("../../sessions/project-binding.js").SessionProject;
+    sessionId: string;
+    title: string;
+    messages: import("../../sessions/types.js").SessionSnapshotMessage[];
+    requests: import("../../sessions/types.js").SessionSnapshotRequest[];
+    nextCursor: string | null;
+    newerCursor?: string | null;
+};