@agentorg/computer 0.0.7 → 0.0.9

package/dist/agentcomputer.js

@@ -2295,7 +2295,7 @@ var require_websocket = __commonJS({
     var net = __require("net");
     var querystring = __require("querystring");
     var tls = __require("tls");
-    var { randomBytes: randomBytes5, createHash: createHash2 } = __require("crypto");
+    var { randomBytes: randomBytes6, createHash: createHash2 } = __require("crypto");
     var { Duplex, Readable: Readable5 } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -2845,7 +2845,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes5(16).toString("base64");
+      const key = randomBytes6(16).toString("base64");
       const request = isSecure ? https.request : http.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -3095,21 +3095,21 @@ var require_websocket = __commonJS({
         process.nextTick(cb, err);
       }
     }
-    function receiverOnConclude(code, reason2) {
+    function receiverOnConclude(code, reason3) {
       const websocket = this[kWebSocket];
       websocket._closeFrameReceived = true;
       websocket._closeCode = code;
-      if (reason2.length === 0) {
+      if (reason3.length === 0) {
         websocket._closeMessage = EMPTY_BUFFER;
       } else {
-        websocket._closeMessage = Buffer.allocUnsafeSlow(reason2.length);
-        websocket._closeMessage.set(reason2);
+        websocket._closeMessage = Buffer.allocUnsafeSlow(reason3.length);
+        websocket._closeMessage.set(reason3);
       }
       if (websocket._socket[kWebSocket] === void 0) return;
       websocket._socket.removeListener("data", socketOnData);
       process.nextTick(resume, websocket._socket);
       if (code === 1005) websocket.close();
-      else websocket.close(code, reason2);
+      else websocket.close(code, reason3);
     }
     function receiverOnDrain() {
       const websocket = this[kWebSocket];
@@ -3268,7 +3268,7 @@ var require_stream = __commonJS({
       };
       duplex._final = function(callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open3() {
+          ws.once("open", function open4() {
             duplex._final(callback);
           });
           return;
@@ -3289,7 +3289,7 @@ var require_stream = __commonJS({
       };
       duplex._write = function(chunk, encoding, callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open3() {
+          ws.once("open", function open4() {
             duplex._write(chunk, encoding, callback);
           });
           return;
@@ -3772,9 +3772,9 @@ var playwright = () => {
 // src/browser-host.ts
 var sandboxFor = (options) => options.sandbox ?? (process.platform !== "linux" || !options.executable && !["chromium", "chrome-for-testing"].includes(options.channel ?? "chrome"));
 async function hostBrowser(options) {
-  const run3 = mkdtempSync(join("/tmp", "agentcomputer-"));
-  process.env.XDG_RUNTIME_DIR = run3;
-  process.env.TMPDIR = run3;
+  const run2 = mkdtempSync(join("/tmp", "agentcomputer-"));
+  process.env.XDG_RUNTIME_DIR = run2;
+  process.env.TMPDIR = run2;
   const context = await playwright().chromium.launchPersistentContext(options.profile, {
     headless: true,
     chromiumSandbox: sandboxFor(options),
@@ -3783,7 +3783,7 @@ async function hostBrowser(options) {
   const browser = context.browser();
   if (!browser) throw new Error("The browser can't be shared.");
   const { endpoint } = await browser.bind("agentcomputer");
-  if (!endpoint.startsWith(run3 + sep)) {
+  if (!endpoint.startsWith(run2 + sep)) {
     await context.close();
     throw new Error(`The browser's socket isn't in its own folder: ${endpoint}`);
   }
@@ -3797,13 +3797,54 @@ async function hostBrowser(options) {
     });
     await context.close().catch(() => {
     });
-    rmSync(run3, { recursive: true, force: true });
+    rmSync(run2, { recursive: true, force: true });
     process.exit(0);
   };
   for (const signal of ["SIGINT", "SIGTERM"]) process.once(signal, () => void stop());
   context.on("close", () => void stop());
 }
 
+// src/browser-mcp.ts
+import { createRequire as createRequire2 } from "node:module";
+var require2 = createRequire2(import.meta.url);
+var mcpParts = () => require2("playwright-core/lib/coreBundle").tools;
+async function serveBrowserMcp(options) {
+  const parts = mcpParts();
+  parts.setupExitWatchdog();
+  const config3 = await parts.resolveCLIConfigForMCP({
+    endpoint: options.endpoint,
+    outputDir: options.outputDir,
+    host: "127.0.0.1",
+    port: 0,
+    // The tool that closes the browser refuses, as it does for any browser its clients share.
+    sharedBrowserContext: true
+  });
+  const tools = parts.filteredTools(config3);
+  await parts.start(
+    {
+      name: "Playwright",
+      nameInConfig: "playwright",
+      // playwright-core's, as Playwright MCP's program gives it.
+      version: require2("playwright-core/package.json").version,
+      toolSchemas: tools.map((tool) => tool.schema),
+      ignoreRoots: config3.ignoreRoots,
+      /** One for each client's session: a connection of its own to the one browser. */
+      create: async () => {
+        const browser = await playwright().chromium.connect(options.endpoint);
+        const context = browser.contexts()[0];
+        if (!context) {
+          await browser.close();
+          throw new Error("The browser has no context to work in.");
+        }
+        return new parts.BrowserBackend(config3, context, tools, {
+          dispose: () => browser.close()
+        });
+      }
+    },
+    config3.server
+  );
+}
+
 // src/container.ts
 import { execFile, spawn as spawn3 } from "node:child_process";
 import { readFileSync as readFileSync3 } from "node:fs";
@@ -3815,8 +3856,7 @@ import { promisify } from "node:util";
 
 // src/browser.ts
 import { spawn } from "node:child_process";
-import { createRequire as createRequire2 } from "node:module";
-import { dirname, join as join2 } from "node:path";
+import { join as join2 } from "node:path";
 import { createInterface } from "node:readline";
 import { pipeline, Readable } from "node:stream";
 import { fileURLToPath } from "node:url";
@@ -6576,10 +6616,10 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
     }
     return void 0;
   });
-  const first = def.options.length === 1 ? def.options[0]._zod.run : null;
+  const first2 = def.options.length === 1 ? def.options[0]._zod.run : null;
   inst._zod.parse = (payload, ctx) => {
-    if (first) {
-      return first(payload, ctx);
+    if (first2) {
+      return first2(payload, ctx);
     }
     let async = false;
     const results = [];
@@ -8977,9 +9017,9 @@ var numberProcessor = (schema, ctx, _json, params) => {
       else
         handleUnrepresentable(schema, ctx, json4, params, `A multipleOf divisor of ${divisor} cannot be represented in JSON Schema`);
     }
-    const [first, ...rest] = divisors;
-    if (first !== void 0)
-      json4.multipleOf = first;
+    const [first2, ...rest] = divisors;
+    if (first2 !== void 0)
+      json4.multipleOf = first2;
     if (rest.length)
       json4.allOf = [...json4.allOf ?? [], ...rest.map((m) => ({ multipleOf: m }))];
   }
@@ -15120,7 +15160,7 @@ function linkedRoundAbort(outer) {
   if (outer?.aborted) controller.abort(outer.reason);
   return {
     signal: controller.signal,
-    abort: (reason2) => controller.abort(reason2),
+    abort: (reason3) => controller.abort(reason3),
     dispose: () => outer?.removeEventListener("abort", onOuterAbort)
   };
 }
@@ -15963,8 +16003,8 @@ var Protocol = class {
         return;
       }
       if (options?.signal?.aborted) {
-        const reason2 = options.signal.reason;
-        throw reason2 instanceof SdkError ? reason2 : new SdkError(SdkErrorCode.RequestTimeout, String(reason2));
+        const reason3 = options.signal.reason;
+        throw reason3 instanceof SdkError ? reason3 : new SdkError(SdkErrorCode.RequestTimeout, String(reason3));
       }
       const requestAbort = codec2.era === MODERN_WIRE_REVISION && this._transport.hasPerRequestStream === true ? new AbortController() : void 0;
       const messageId = this._requestMessageId++;
@@ -15986,7 +16026,7 @@ var Protocol = class {
       }
       const outbound = this._envelopeOutbound(jsonrpcRequest);
       let responseReceived = false;
-      const cancel = (reason2) => {
+      const cancel = (reason3) => {
         if (responseReceived) return;
         this._progressHandlers.delete(messageId);
         if (requestAbort === void 0) {
@@ -15995,7 +16035,7 @@ var Protocol = class {
             method: "notifications/cancelled",
             params: {
               requestId: messageId,
-              reason: String(reason2)
+              reason: String(reason3)
             }
           }), {
             relatedRequestId,
@@ -16003,7 +16043,7 @@ var Protocol = class {
             onresumptiontoken
           }).catch((error62) => this._onerror(/* @__PURE__ */ new Error(`Failed to send cancellation: ${error62}`)));
         } else requestAbort.abort();
-        reject(reason2 instanceof SdkError ? reason2 : new SdkError(SdkErrorCode.RequestTimeout, String(reason2)));
+        reject(reason3 instanceof SdkError ? reason3 : new SdkError(SdkErrorCode.RequestTimeout, String(reason3)));
       };
       this._responseHandlers.set(messageId, (response) => {
         if (options?.signal?.aborted) return;
@@ -19189,8 +19229,8 @@ var require_utils = /* @__PURE__ */ __commonJSMin(((exports, module) => {
     }
     if (bestLength < 2) return hextets.join(":");
     const head = hextets.slice(0, bestStart).join(":");
-    const tail = hextets.slice(bestStart + bestLength).join(":");
-    return head + "::" + tail;
+    const tail2 = hextets.slice(bestStart + bestLength).join(":");
+    return head + "::" + tail2;
   }
   function normalizeIPv6Address(input2) {
     const compression = input2.indexOf("::");
@@ -20413,7 +20453,7 @@ var require_core$3 = /* @__PURE__ */ __commonJSMin(((exports) => {
     }
     errorsText(errors = this.errors, { separator = ", ", dataVar = "data" } = {}) {
       if (!errors || errors.length === 0) return "No errors";
-      return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text2, msg) => text2 + separator + msg);
+      return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text3, msg) => text3 + separator + msg);
     }
     $dataMetaSchema(metaSchema, keywordsJsonPointers) {
       const rules = this.RULES.all;
@@ -23818,8 +23858,8 @@ async function random(size) {
   const evenDistCutoff = Math.pow(2, 8) - Math.pow(2, 8) % mask.length;
   let result = "";
   while (result.length < size) {
-    const randomBytes5 = await getRandomValues(size - result.length);
-    for (const randomByte of randomBytes5) {
+    const randomBytes6 = await getRandomValues(size - result.length);
+    for (const randomByte of randomBytes6) {
       if (randomByte < evenDistCutoff) {
         result += mask[randomByte % mask.length];
       }
@@ -25485,11 +25525,11 @@ function normalizeReply(reply, timeoutMs) {
         error: error62
       };
       if (error62 instanceof SdkHttpError) {
-        const text2 = error62.data?.text;
+        const text3 = error62.data?.text;
         return {
           kind: "http-error",
           status: error62.data.status,
-          body: typeof text2 === "string" ? text2 : void 0,
+          body: typeof text3 === "string" ? text3 : void 0,
           statusText: error62.data.statusText
         };
       }
@@ -25731,10 +25771,10 @@ var Client = class extends Protocol {
     this._discoverResult = void 0;
     this._autoOpenedSubscription = void 0;
     if (this._listenState.size > 0) {
-      const reason2 = new SdkError(SdkErrorCode.ConnectionClosed, "subscriptions/listen: client reconnected or closed; subscription state from the previous connection was reset");
+      const reason3 = new SdkError(SdkErrorCode.ConnectionClosed, "subscriptions/listen: client reconnected or closed; subscription state from the previous connection was reset");
       for (const entry of this._listenState.values()) entry.settle({
         cause: "remote",
-        error: reason2
+        error: reason3
       });
     }
     this._listenState.clear();
@@ -26478,8 +26518,8 @@ var Client = class extends Protocol {
     const hit = await this._cache.read(method, params).catch((error62) => void this._reportStoreError(error62));
     if (hit !== void 0) {
       if (options?.signal?.aborted) {
-        const reason2 = options.signal.reason;
-        throw reason2 instanceof SdkError ? reason2 : new SdkError(SdkErrorCode.RequestTimeout, String(reason2));
+        const reason3 = options.signal.reason;
+        throw reason3 instanceof SdkError ? reason3 : new SdkError(SdkErrorCode.RequestTimeout, String(reason3));
       }
       return hit.value;
     }
@@ -26620,8 +26660,8 @@ var Client = class extends Protocol {
       protocolVersion: negotiated
     });
     if (options?.signal?.aborted) {
-      const reason2 = options.signal.reason;
-      throw reason2 instanceof SdkError ? reason2 : new SdkError(SdkErrorCode.RequestTimeout, String(reason2));
+      const reason3 = options.signal.reason;
+      throw reason3 instanceof SdkError ? reason3 : new SdkError(SdkErrorCode.RequestTimeout, String(reason3));
     }
     const requestAbort = new AbortController();
     const listenId = `listen:${this._nextListenId++}`;
@@ -26684,10 +26724,10 @@ var Client = class extends Protocol {
       const callerSignal = options.signal;
       onCallerAbort = () => {
         if (state === "closed") return;
-        const reason2 = callerSignal.reason;
+        const reason3 = callerSignal.reason;
         settle3({
           cause: "local",
-          error: reason2 instanceof Error ? reason2 : new Error(String(reason2 ?? "Aborted"))
+          error: reason3 instanceof Error ? reason3 : new Error(String(reason3 ?? "Aborted"))
         });
         wireTeardown().catch(() => {
         });
@@ -26814,10 +26854,10 @@ var Client = class extends Protocol {
   */
   _onclose() {
     if (this._listenState.size > 0) {
-      const reason2 = new SdkError(SdkErrorCode.ConnectionClosed, "Connection closed");
+      const reason3 = new SdkError(SdkErrorCode.ConnectionClosed, "Connection closed");
       for (const entry of this._listenState.values()) entry.settle({
         cause: "remote",
-        error: reason2
+        error: reason3
       });
       this._listenState.clear();
     }
@@ -27467,8 +27507,8 @@ var StreamableHTTPClientTransport = class {
   }
   /** Error text for a redirect `response` that was not followed, or `undefined` for any other response. */
   _unfollowedRedirect(url3, response) {
-    const text2 = this._redirectPolicy === "follow" ? void 0 : unfollowedRedirect(url3, response);
-    return text2 && `${text2} (redirectPolicy: 'same-origin')`;
+    const text3 = this._redirectPolicy === "follow" ? void 0 : unfollowedRedirect(url3, response);
+    return text3 && `${text3} (redirectPolicy: 'same-origin')`;
   }
   async _commonHeaders() {
     const headers = new Headers(this._requestInit?.headers || void 0);
@@ -27559,13 +27599,13 @@ var StreamableHTTPClientTransport = class {
         if (response.status === 403) {
           const { resourceMetadataUrl, scope, error: error62, errorDescription } = extractWWWAuthenticateParams(response);
           if (error62 === "insufficient_scope") {
-            const text2 = await response.text?.().catch(() => null);
+            const text3 = await response.text?.().catch(() => null);
             if (await this._stepUpAuthorize({
               scope,
               resourceMetadataUrl,
               errorDescription,
               statusText: response.statusText,
-              text: text2
+              text: text3
             }, stepUpRetries) !== "AUTHORIZED") throw markAuthSeamEscape(new UnauthorizedError());
             return this._startOrAuthSse(options, isAuthRetry, stepUpRetries + 1);
           }
@@ -27576,8 +27616,8 @@ var StreamableHTTPClientTransport = class {
           options.onRequestStreamEnd?.();
           return;
         }
-        const reason2 = this._unfollowedRedirect(this._url, response) ?? response.statusText;
-        throw new SdkHttpError(SdkErrorCode.ClientHttpFailedToOpenStream, `Failed to open SSE stream: ${reason2}`, {
+        const reason3 = this._unfollowedRedirect(this._url, response) ?? response.statusText;
+        throw new SdkHttpError(SdkErrorCode.ClientHttpFailedToOpenStream, `Failed to open SSE stream: ${reason3}`, {
           status: response.status,
           statusText: response.statusText
         });
@@ -27797,7 +27837,7 @@ var StreamableHTTPClientTransport = class {
           }));
           throw markAuthSeamEscape(new UnauthorizedError());
         }
-        const text2 = await response.text?.().catch(() => null);
+        const text3 = await response.text?.().catch(() => null);
         if (response.status === 403) {
           const { resourceMetadataUrl, scope, error: error62, errorDescription } = extractWWWAuthenticateParams(response);
           if (error62 === "insufficient_scope") {
@@ -27806,13 +27846,13 @@ var StreamableHTTPClientTransport = class {
               resourceMetadataUrl,
               errorDescription,
               statusText: response.statusText,
-              text: text2
+              text: text3
             }, stepUpRetries) !== "AUTHORIZED") throw markAuthSeamEscape(new UnauthorizedError());
             return this._send(message, options, isAuthRetry, stepUpRetries + 1);
           }
         }
-        if (response.status === 400 && typeof text2 === "string" && this._isModernEnvelopedRequest(message)) try {
-          const parsed = JSONRPCMessageSchema.parse(JSON.parse(text2));
+        if (response.status === 400 && typeof text3 === "string" && this._isModernEnvelopedRequest(message)) try {
+          const parsed = JSONRPCMessageSchema.parse(JSON.parse(text3));
           const requests = (Array.isArray(message) ? message : [message]).filter((m) => isJSONRPCRequest(m));
           if (isJSONRPCErrorResponse(parsed) && requests.some((r) => r.id === parsed.id)) {
             this.onmessage?.(parsed);
@@ -27820,11 +27860,11 @@ var StreamableHTTPClientTransport = class {
           }
         } catch {
         }
-        const reason2 = this._unfollowedRedirect(this._url, response) ?? text2;
-        throw new SdkHttpError(SdkErrorCode.ClientHttpNotImplemented, `Error POSTing to endpoint: ${reason2}`, {
+        const reason3 = this._unfollowedRedirect(this._url, response) ?? text3;
+        throw new SdkHttpError(SdkErrorCode.ClientHttpNotImplemented, `Error POSTing to endpoint: ${reason3}`, {
           status: response.status,
           statusText: response.statusText,
-          text: text2
+          text: text3
         });
       }
       if (response.status === 202) {
@@ -27938,18 +27978,16 @@ function sendAnswer(upstream, response) {
   pipeline(Readable.fromWeb(upstream.body), response, () => {
   });
 }
-var mcpCli = () => join2(dirname(createRequire2(import.meta.url).resolve("@playwright/mcp/package.json")), "cli.js");
 var self = fileURLToPath(import.meta.url);
-var ANSWERS = /* @__PURE__ */ new Set(["browser_handle_dialog", "browser_file_upload"]);
-function withoutHidden(text2, hidden) {
+function withoutHidden(text3, hidden) {
   const clean = (json4) => {
     const message = JSON.parse(json4);
     if (message.result?.tools)
       message.result.tools = message.result.tools.filter((tool) => !hidden.has(tool.name));
     return JSON.stringify(message);
   };
-  if (text2.trimStart().startsWith("{")) return clean(text2);
-  return text2.replace(/^data: (\{.*\})$/gm, (_, json4) => `data: ${clean(json4)}`);
+  if (text3.trimStart().startsWith("{")) return clean(text3);
+  return text3.replace(/^data: (\{.*\})$/gm, (_, json4) => `data: ${clean(json4)}`);
 }
 async function end(child) {
   if (child.exitCode !== null || child.signalCode !== null) return;
@@ -28012,17 +28050,7 @@ var Browser = class {
         if (this.#stopping) return failed(new Error("It stopped."));
         const mcp = spawn(
           process.execPath,
-          [
-            mcpCli(),
-            "--host",
-            "127.0.0.1",
-            "--port",
-            "0",
-            "--endpoint",
-            endpoint,
-            "--output-dir",
-            join2(folder, "output")
-          ],
+          [self, "browser-mcp", "--endpoint", endpoint, "--output", join2(folder, "output")],
           // Its own limit on which files it touches is the folder it starts in.
           { cwd, stdio: ["ignore", "pipe", "pipe"] }
         );
@@ -28075,27 +28103,24 @@ var Browser = class {
     } catch {
     }
     const tool = message.method === "tools/call" ? String(message.params?.name) : void 0;
-    const refuse = (text2, code = -32e3) => {
+    if (tool && this.#hidden.has(tool)) {
       response.writeHead(200, { "Content-Type": "application/json" });
-      response.end(
+      return void response.end(
         JSON.stringify({
           jsonrpc: "2.0",
           id: message.id ?? null,
-          ...code === -32602 ? { error: { code, message: text2 } } : { result: { content: [{ type: "text", text: text2 }], isError: true } }
+          error: { code: -32602, message: `Unknown tool: ${tool}` }
         })
       );
-    };
-    if (tool && this.#hidden.has(tool)) return refuse(`Unknown tool: ${tool}`, -32602);
-    if (tool && this.gate) {
-      const answer = await this.gate.wait();
-      if (answer) return refuse(answer);
     }
     const headers = {};
     for (const name of FORWARDED) {
       const value = request.headers[name];
       if (typeof value === "string") headers[name] = value;
     }
-    if (tool && this.gate?.takeAnsweredChooser())
+    const session = headers["mcp-session-id"] ?? "";
+    if (request.method === "DELETE") this.gate?.sessionEnded(session);
+    if (tool && this.gate?.takeAnsweredChooser(session) && tool !== "browser_file_upload")
       await fetch(`${origin}/mcp`, {
         method: "POST",
         headers,
@@ -28107,15 +28132,15 @@ var Browser = class {
         })
       }).then((answer) => answer.text()).catch(() => {
       });
-    if (tool && ANSWERS.has(tool)) this.gate?.agentAnswered();
+    if (tool === "browser_file_upload") this.gate?.agentAnsweredChooser();
     const upstream = await fetch(`${origin}/mcp`, {
       method: request.method,
       headers,
       ...body.length > 0 ? { body } : {}
     });
     if (message.method === "tools/list" && this.#hidden.size > 0) {
-      const text2 = withoutHidden(await upstream.text(), this.#hidden);
-      return sendAnswer(new Response(text2, upstream), response);
+      const text3 = withoutHidden(await upstream.text(), this.#hidden);
+      return sendAnswer(new Response(text3, upstream), response);
     }
     sendAnswer(upstream, response);
   }
@@ -28131,7 +28156,9 @@ import { homedir } from "node:os";
 import { join as join7 } from "node:path";
 
 // src/runtime.ts
-import { join as join6 } from "node:path";
+import { chmodSync as chmodSync2, existsSync, statSync as statSync2 } from "node:fs";
+import { createRequire as createRequire3 } from "node:module";
+import { dirname as dirname3, join as join6 } from "node:path";
 
 // node_modules/@agentorg/exec/dist/lib.js
 import { realpathSync } from "node:fs";
@@ -28139,9 +28166,22 @@ import { resolve as resolve3 } from "node:path";
 import { STATUS_CODES, ServerResponse, createServer } from "node:http";
 import { Http2ServerRequest, constants } from "node:http2";
 import { Readable as Readable2 } from "node:stream";
+import { randomBytes as randomBytes3 } from "node:crypto";
+import { lstat as lstat2, open as open2, readdir as readdir2, rename as rename2, rm as rm2, stat as stat2 } from "node:fs/promises";
+import { dirname as dirname2, join as join3 } from "node:path";
 import { randomBytes as randomBytes2 } from "node:crypto";
-import { lstat, readdir, readFile, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
-import { basename, dirname as dirname2, join as join3, resolve, sep as sep2 } from "node:path";
+import {
+  chmod,
+  lstat,
+  readdir,
+  readFile,
+  realpath,
+  rename,
+  rm,
+  stat,
+  writeFile
+} from "node:fs/promises";
+import { basename, dirname, join as join4, resolve, sep as sep2 } from "node:path";
 import { spawn as spawn2 } from "node:child_process";
 import { randomBytes } from "node:crypto";
 import { StringDecoder } from "node:string_decoder";
@@ -28373,7 +28413,7 @@ var require_ignore = __commonJS2({
         //   ever starts again inside it -- `(\\+?) ` did, which made a long run
         //   quadratic.
         /(\\+)( ?)/g,
-        (_, run22, space) => space ? run22.slice(0, run22.length - run22.length % 2) + SPACE2 : run22,
+        (_, run2, space) => space ? run2.slice(0, run2.length - run2.length % 2) + SPACE2 : run2,
         ESCAPE + SPACE2
       ],
       // git's wildmatch() reads a run of two or more asterisks as one globstar
@@ -28559,10 +28599,10 @@ var require_ignore = __commonJS2({
     var REGEX_REPLACE_TRAILING_DOUBLESTAR = /\uE001$/;
     var replaceTrailingDoublestar = () => ".+(?=$|\\/$)";
     var WILDCARD2 = "[^\\/]*";
-    var separatorAfter = (run22, at) => {
+    var separatorAfter = (run2, at) => {
       let separator = EMPTY;
-      for (let index = at + 1; index < run22.length && !run22[index].wildcard; index++) {
-        separator += run22[index].single;
+      for (let index = at + 1; index < run2.length && !run2[index].wildcard; index++) {
+        separator += run2[index].single;
       }
       return separator;
     };
@@ -28622,26 +28662,26 @@ var require_ignore = __commonJS2({
         }
       }
       let out = EMPTY;
-      let run22 = [];
+      let run2 = [];
       const flush = () => {
         let lastWildcard;
-        run22.forEach((token, at) => {
+        run2.forEach((token, at) => {
           if (token.wildcard) {
             lastWildcard = at;
           }
         });
-        run22.forEach((token, at) => {
+        run2.forEach((token, at) => {
           if (!token.wildcard) {
             out += token.single;
             return;
           }
-          out += at === lastWildcard ? WILDCARD2 : `(?:(?!${separatorAfter(run22, at)})[^\\/])*`;
+          out += at === lastWildcard ? WILDCARD2 : `(?:(?!${separatorAfter(run2, at)})[^\\/])*`;
         });
-        run22 = [];
+        run2 = [];
       };
       tokens.forEach((token) => {
         if (token.boundary === void 0) {
-          run22.push(token);
+          run2.push(token);
           return;
         }
         flush();
@@ -28921,11 +28961,11 @@ var require_ignore = __commonJS2({
       return true;
     };
     var isNotRelative = (path) => {
-      const first = path.charCodeAt(0);
-      if (first === SLASH_CODE) {
+      const first2 = path.charCodeAt(0);
+      if (first2 === SLASH_CODE) {
         return true;
       }
-      if (first !== DOT_CODE) {
+      if (first2 !== DOT_CODE) {
         return false;
       }
       if (path.length === 1) {
@@ -32834,10 +32874,10 @@ var $ZodUnion2 = /* @__PURE__ */ $constructor2("$ZodUnion", (inst, def) => {
     }
     return void 0;
   });
-  const first = def.options.length === 1 ? def.options[0]._zod.run : null;
+  const first2 = def.options.length === 1 ? def.options[0]._zod.run : null;
   inst._zod.parse = (payload, ctx) => {
-    if (first) {
-      return first(payload, ctx);
+    if (first2) {
+      return first2(payload, ctx);
     }
     let async = false;
     const results = [];
@@ -32894,10 +32934,10 @@ function handleExclusiveUnionResults(results, final, inst, ctx) {
 var $ZodXor2 = /* @__PURE__ */ $constructor2("$ZodXor", (inst, def) => {
   $ZodUnion2.init(inst, def);
   def.inclusive = false;
-  const first = def.options.length === 1 ? def.options[0]._zod.run : null;
+  const first2 = def.options.length === 1 ? def.options[0]._zod.run : null;
   inst._zod.parse = (payload, ctx) => {
-    if (first) {
-      return first(payload, ctx);
+    if (first2) {
+      return first2(payload, ctx);
     }
     let async = false;
     const results = [];
@@ -34276,7 +34316,7 @@ function bucketFor2(state, inst) {
   return bucket;
 }
 var handoff2;
-var open2 = [];
+var open3 = [];
 var memo3 = {
   alloc(_inst, payload, empty) {
     const bucket = handoff2;
@@ -34285,7 +34325,7 @@ var memo3 = {
     handoff2 = void 0;
     const entry = { value: empty, issues: null };
     bucket.set(payload.value, entry);
-    open2.push(entry);
+    open3.push(entry);
     return empty;
   },
   guard(inst) {
@@ -34356,10 +34396,10 @@ var memo3 = {
           return payload;
         }
         handoff2 = bucket;
-        const depth = open2.length;
+        const depth = open3.length;
         const result = base(payload, ctx);
         handoff2 = void 0;
-        const entry = open2.length > depth ? open2.pop() : void 0;
+        const entry = open3.length > depth ? open3.pop() : void 0;
         if (result instanceof Promise) {
           return result.then((r) => {
             if (entry)
@@ -38340,8 +38380,8 @@ function ko_default() {
     localeError: error32()
   };
 }
-var capitalizeFirstCharacter = (text2) => {
-  return text2.charAt(0).toUpperCase() + text2.slice(1);
+var capitalizeFirstCharacter = (text22) => {
+  return text22.charAt(0).toUpperCase() + text22.slice(1);
 };
 function getUnitTypeFromNumber(number42) {
   const abs = Math.abs(number42);
@@ -45232,9 +45272,9 @@ var numberProcessor2 = (schema, ctx, _json, params) => {
       else
         handleUnrepresentable2(schema, ctx, json32, params, `A multipleOf divisor of ${divisor} cannot be represented in JSON Schema`);
     }
-    const [first, ...rest] = divisors;
-    if (first !== void 0)
-      json32.multipleOf = first;
+    const [first2, ...rest] = divisors;
+    if (first2 !== void 0)
+      json32.multipleOf = first2;
     if (rest.length)
       json32.allOf = [...json32.allOf ?? [], ...rest.map((m) => ({ multipleOf: m }))];
   }
@@ -47918,14 +47958,14 @@ function checkArrayGuards(arraySchema, guards) {
         const key = canonicalKey(items[i], /* @__PURE__ */ new Set());
         if (key === null)
           continue;
-        const first = firstSeen.get(key);
-        if (first === void 0) {
+        const first2 = firstSeen.get(key);
+        if (first2 === void 0) {
           firstSeen.set(key, i);
           continue;
         }
         payload.issues.push({
           code: "custom",
-          message: `Array items must be unique: element at index ${i} duplicates the one at index ${first}`,
+          message: `Array items must be unique: element at index ${i} duplicates the one at index ${first2}`,
           input: items,
           path: [i],
           continue: true
@@ -48403,7 +48443,7 @@ function visit(schema, fnOrHandlers) {
     return h ? h(node22, rewritten) : node22;
   };
   const cache = /* @__PURE__ */ new Map();
-  function run22(s) {
+  function run2(s) {
     const cached22 = cache.get(s);
     if (cached22 === RESOLVING) {
       return new $ZodLazy2({
@@ -48426,69 +48466,69 @@ function visit(schema, fnOrHandlers) {
       case "object": {
         const oldShape = def.shape;
         const keys = Object.keys(oldShape);
-        let changed = false;
+        let changed2 = false;
         const newShape = {};
         for (const k of keys) {
-          const mapped = run22(oldShape[k]);
+          const mapped = run2(oldShape[k]);
           if (mapped !== oldShape[k])
-            changed = true;
+            changed2 = true;
           newShape[k] = mapped;
         }
         let newCatchall = def.catchall;
         if (def.catchall) {
-          newCatchall = run22(def.catchall);
+          newCatchall = run2(def.catchall);
           if (newCatchall !== def.catchall)
-            changed = true;
+            changed2 = true;
         }
-        return changed ? clone2(s, { ...def, shape: newShape, catchall: newCatchall }) : s;
+        return changed2 ? clone2(s, { ...def, shape: newShape, catchall: newCatchall }) : s;
       }
       case "array": {
-        const mapped = run22(def.element);
+        const mapped = run2(def.element);
         return mapped === def.element ? s : clone2(s, { ...def, element: mapped });
       }
       case "tuple": {
         const oldItems = def.items;
-        let changed = false;
+        let changed2 = false;
         const newItems = [];
         for (const item of oldItems) {
-          const mapped = run22(item);
+          const mapped = run2(item);
           if (mapped !== item)
-            changed = true;
+            changed2 = true;
           newItems.push(mapped);
         }
         let newRest = def.rest;
         if (def.rest) {
-          newRest = run22(def.rest);
+          newRest = run2(def.rest);
           if (newRest !== def.rest)
-            changed = true;
+            changed2 = true;
         }
-        return changed ? clone2(s, { ...def, items: newItems, rest: newRest }) : s;
+        return changed2 ? clone2(s, { ...def, items: newItems, rest: newRest }) : s;
       }
       case "record":
       case "map": {
-        const newKey = run22(def.keyType);
-        const newVal = run22(def.valueType);
+        const newKey = run2(def.keyType);
+        const newVal = run2(def.valueType);
         return newKey === def.keyType && newVal === def.valueType ? s : clone2(s, { ...def, keyType: newKey, valueType: newVal });
       }
       case "set": {
-        const newVal = run22(def.valueType);
+        const newVal = run2(def.valueType);
         return newVal === def.valueType ? s : clone2(s, { ...def, valueType: newVal });
       }
       case "union": {
         const oldOptions = def.options;
-        let changed = false;
+        let changed2 = false;
         const newOptions = [];
         for (const opt of oldOptions) {
-          const mapped = run22(opt);
+          const mapped = run2(opt);
           if (mapped !== opt)
-            changed = true;
+            changed2 = true;
           newOptions.push(mapped);
         }
-        return changed ? clone2(s, { ...def, options: newOptions }) : s;
+        return changed2 ? clone2(s, { ...def, options: newOptions }) : s;
       }
       case "intersection": {
-        const newLeft = run22(def.left);
-        const newRight = run22(def.right);
+        const newLeft = run2(def.left);
+        const newRight = run2(def.right);
         return newLeft === def.left && newRight === def.right ? s : clone2(s, { ...def, left: newLeft, right: newRight });
       }
       case "optional":
@@ -48500,23 +48540,23 @@ function visit(schema, fnOrHandlers) {
       case "nonoptional":
       case "promise":
       case "success": {
-        const newInner = run22(def.innerType);
+        const newInner = run2(def.innerType);
         return newInner === def.innerType ? s : clone2(s, { ...def, innerType: newInner });
       }
       case "pipe": {
-        const newIn = run22(def.in);
-        const newOut = run22(def.out);
+        const newIn = run2(def.in);
+        const newOut = run2(def.out);
         return newIn === def.in && newOut === def.out ? s : clone2(s, { ...def, in: newIn, out: newOut });
       }
       case "function": {
-        const newInput = run22(def.input);
-        const newOutput = run22(def.output);
+        const newInput = run2(def.input);
+        const newOutput = run2(def.output);
         return newInput === def.input && newOutput === def.output ? s : clone2(s, { ...def, input: newInput, output: newOutput });
       }
       case "lazy": {
         const original = def.getter;
         const { _cachedInner, ...rest } = def;
-        return clone2(s, { ...rest, getter: () => run22(original()) });
+        return clone2(s, { ...rest, getter: () => run2(original()) });
       }
       // A leaf by choice: `parts` are regex fragments, not data positions.
       case "template_literal":
@@ -48547,7 +48587,7 @@ function visit(schema, fnOrHandlers) {
       }
     }
   }
-  return run22(schema);
+  return run2(schema);
 }
 function deepPartial(schema) {
   return visit(schema, {
@@ -52975,7 +53015,7 @@ function linkedRoundAbort2(outer) {
   if (outer?.aborted) controller.abort(outer.reason);
   return {
     signal: controller.signal,
-    abort: (reason2) => controller.abort(reason2),
+    abort: (reason22) => controller.abort(reason22),
     dispose: () => outer?.removeEventListener("abort", onOuterAbort)
   };
 }
@@ -53770,8 +53810,8 @@ var Protocol2 = class {
         return;
       }
       if (options?.signal?.aborted) {
-        const reason2 = options.signal.reason;
-        throw reason2 instanceof SdkError2 ? reason2 : new SdkError2(SdkErrorCode2.RequestTimeout, String(reason2));
+        const reason22 = options.signal.reason;
+        throw reason22 instanceof SdkError2 ? reason22 : new SdkError2(SdkErrorCode2.RequestTimeout, String(reason22));
       }
       const requestAbort = codec2.era === MODERN_WIRE_REVISION2 && this._transport.hasPerRequestStream === true ? new AbortController() : void 0;
       const messageId = this._requestMessageId++;
@@ -53793,7 +53833,7 @@ var Protocol2 = class {
       }
       const outbound = this._envelopeOutbound(jsonrpcRequest);
       let responseReceived = false;
-      const cancel = (reason2) => {
+      const cancel = (reason22) => {
         if (responseReceived) return;
         this._progressHandlers.delete(messageId);
         if (requestAbort === void 0) {
@@ -53802,7 +53842,7 @@ var Protocol2 = class {
             method: "notifications/cancelled",
             params: {
               requestId: messageId,
-              reason: String(reason2)
+              reason: String(reason22)
             }
           }), {
             relatedRequestId,
@@ -53810,7 +53850,7 @@ var Protocol2 = class {
             onresumptiontoken
           }).catch((error62) => this._onerror(/* @__PURE__ */ new Error(`Failed to send cancellation: ${error62}`)));
         } else requestAbort.abort();
-        reject(reason2 instanceof SdkError2 ? reason2 : new SdkError2(SdkErrorCode2.RequestTimeout, String(reason2)));
+        reject(reason22 instanceof SdkError2 ? reason22 : new SdkError2(SdkErrorCode2.RequestTimeout, String(reason22)));
       };
       this._responseHandlers.set(messageId, (response) => {
         if (options?.signal?.aborted) return;
@@ -56907,8 +56947,8 @@ var require_utils2 = /* @__PURE__ */ __commonJSMin2(((exports, module) => {
     }
     if (bestLength < 2) return hextets.join(":");
     const head = hextets.slice(0, bestStart).join(":");
-    const tail = hextets.slice(bestStart + bestLength).join(":");
-    return head + "::" + tail;
+    const tail2 = hextets.slice(bestStart + bestLength).join(":");
+    return head + "::" + tail2;
   }
   function normalizeIPv6Address(input2) {
     const compression = input2.indexOf("::");
@@ -58131,7 +58171,7 @@ var require_core$32 = /* @__PURE__ */ __commonJSMin2(((exports) => {
     }
     errorsText(errors = this.errors, { separator = ", ", dataVar = "data" } = {}) {
       if (!errors || errors.length === 0) return "No errors";
-      return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text2, msg) => text2 + separator + msg);
+      return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text22, msg) => text22 + separator + msg);
     }
     $dataMetaSchema(metaSchema, keywordsJsonPointers) {
       const rules = this.RULES.all;
@@ -63273,21 +63313,21 @@ async function readRequestBody(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_SIZE
   const reader = request.body.getReader();
   const decoder = new TextDecoder();
   let received = 0;
-  let text2 = "";
+  let text22 = "";
   try {
     for (; ; ) {
       const { done, value } = await reader.read();
       if (done) break;
       received += value.byteLength;
       if (received > maxBytes) return { tooLarge: true };
-      text2 += decoder.decode(value, { stream: true });
+      text22 += decoder.decode(value, { stream: true });
     }
   } finally {
     reader.releaseLock();
   }
   return {
     tooLarge: false,
-    text: text2 + decoder.decode()
+    text: text22 + decoder.decode()
   };
 }
 var WebStandardStreamableHTTPServerTransport = class {
@@ -63381,9 +63421,9 @@ var WebStandardStreamableHTTPServerTransport = class {
       }
     });
   }
-  async _checkScopeChallenge(messages, authInfo) {
+  async _checkScopeChallenge(messages2, authInfo) {
     if (!this._scopeChallengeResolver) return;
-    const challenge = await findScopeChallenge(messages.filter((message) => isJSONRPCRequest2(message)), authInfo, this._scopeChallengeResolver);
+    const challenge = await findScopeChallenge(messages2.filter((message) => isJSONRPCRequest2(message)), authInfo, this._scopeChallengeResolver);
     return challenge === void 0 ? void 0 : createScopeChallengeResponse(challenge, scopeChallengeResourceMetadataUrl(authInfo));
   }
   /**
@@ -63681,21 +63721,21 @@ data:
         this.onerror?.(/* @__PURE__ */ new Error(`Invalid Request: Batch must not exceed ${MAX_BATCH_SIZE} messages`));
         return this.createJsonErrorResponse(400, -32600, `Invalid Request: Batch must not exceed ${MAX_BATCH_SIZE} messages`);
       }
-      let messages;
+      let messages2;
       try {
-        messages = Array.isArray(rawMessage) ? rawMessage.map((msg) => JSONRPCMessageSchema2.parse(msg)) : [JSONRPCMessageSchema2.parse(rawMessage)];
+        messages2 = Array.isArray(rawMessage) ? rawMessage.map((msg) => JSONRPCMessageSchema2.parse(msg)) : [JSONRPCMessageSchema2.parse(rawMessage)];
       } catch (error62) {
         this.onerror?.(error62);
         return this.createJsonErrorResponse(400, -32700, "Parse error: Invalid JSON-RPC message");
       }
       if (this._closed) return this.createJsonErrorResponse(404, -32001, "Session not found");
-      const isInitializationRequest = messages.some((element) => isInitializeRequest2(element));
+      const isInitializationRequest = messages2.some((element) => isInitializeRequest2(element));
       if (isInitializationRequest) {
         if (this._initialized && this.sessionId !== void 0) {
           this.onerror?.(/* @__PURE__ */ new Error("Invalid Request: Server already initialized"));
           return this.createJsonErrorResponse(400, -32600, "Invalid Request: Server already initialized");
         }
-        if (messages.length > 1) {
+        if (messages2.length > 1) {
           this.onerror?.(/* @__PURE__ */ new Error("Invalid Request: Only one initialization request is allowed"));
           return this.createJsonErrorResponse(400, -32600, "Invalid Request: Only one initialization request is allowed");
         }
@@ -63712,21 +63752,21 @@ data:
       if (this._closed) return this.createJsonErrorResponse(404, -32001, "Session not found");
       let scopeChallengeResponse;
       try {
-        scopeChallengeResponse = await this._checkScopeChallenge(messages, options?.authInfo);
+        scopeChallengeResponse = await this._checkScopeChallenge(messages2, options?.authInfo);
       } catch (error62) {
         this.onerror?.(error62);
         return this.createJsonErrorResponse(500, -32603, "Internal server error");
       }
       if (scopeChallengeResponse) return scopeChallengeResponse;
-      if (!messages.some((element) => isJSONRPCRequest2(element))) {
-        for (const message of messages) this.onmessage?.(message, {
+      if (!messages2.some((element) => isJSONRPCRequest2(element))) {
+        for (const message of messages2) this.onmessage?.(message, {
           authInfo: options?.authInfo,
           request
         });
         return new Response(null, { status: 202 });
       }
       const streamId = crypto.randomUUID();
-      const initRequest = messages.find((m) => isInitializeRequest2(m));
+      const initRequest = messages2.find((m) => isInitializeRequest2(m));
       const clientProtocolVersion = initRequest ? initRequest.params.protocolVersion : req.headers.get("mcp-protocol-version") ?? DEFAULT_NEGOTIATED_PROTOCOL_VERSION2;
       if (this._enableJsonResponse) return new Promise((resolve42) => {
         this._streamMapping.set(streamId, {
@@ -63735,8 +63775,8 @@ data:
             this._streamMapping.delete(streamId);
           }
         });
-        for (const message of messages) if (isJSONRPCRequest2(message)) this._requestToStreamMapping.set(message.id, streamId);
-        for (const message of messages) this.onmessage?.(message, {
+        for (const message of messages2) if (isJSONRPCRequest2(message)) this._requestToStreamMapping.set(message.id, streamId);
+        for (const message of messages2) this.onmessage?.(message, {
           authInfo: options?.authInfo,
           request
         });
@@ -63760,7 +63800,7 @@ data:
         "X-Accel-Buffering": "no"
       };
       if (this.sessionId !== void 0) headers["mcp-session-id"] = this.sessionId;
-      for (const message of messages) if (isJSONRPCRequest2(message)) {
+      for (const message of messages2) if (isJSONRPCRequest2(message)) {
         this._streamMapping.set(streamId, {
           controller: streamController,
           encoder,
@@ -63776,7 +63816,7 @@ data:
         this._requestToStreamMapping.set(message.id, streamId);
       }
       await this.writePrimingEvent(streamController, encoder, streamId, clientProtocolVersion);
-      for (const message of messages) {
+      for (const message of messages2) {
         let closeSSEStream;
         let closeStandaloneSSEStream;
         if (isJSONRPCRequest2(message) && this._eventStore && this.supportsEmptySSEData(clientProtocolVersion)) {
@@ -64356,8 +64396,8 @@ var readRawBodyIfAvailable = (request) => {
 };
 var normalizeAbortError = (request, incoming) => {
   if (incoming.errored) return incoming.errored;
-  const reason2 = request[abortReasonKey];
-  if (reason2 !== void 0) return reason2 instanceof Error ? reason2 : new Error(String(reason2));
+  const reason22 = request[abortReasonKey];
+  if (reason22 !== void 0) return reason22 instanceof Error ? reason22 : new Error(String(reason22));
   return /* @__PURE__ */ new Error("Client connection prematurely closed.");
 };
 var readBodyDirect = (request) => {
@@ -64451,10 +64491,10 @@ var requestPrototype = {
   get headers() {
     return this[headersKey] ||= newHeadersFromIncoming(this[incomingKey]);
   },
-  [abortRequest](reason2) {
-    if (this[abortReasonKey] === void 0) this[abortReasonKey] = reason2;
+  [abortRequest](reason22) {
+    if (this[abortReasonKey] === void 0) this[abortReasonKey] = reason22;
     const abortController = this[abortControllerKey];
-    if (abortController && !abortController.signal.aborted) abortController.abort(reason2);
+    if (abortController && !abortController.signal.aborted) abortController.abort(reason22);
   },
   [getAbortController]() {
     this[abortControllerKey] ||= new AbortController();
@@ -65098,8 +65138,8 @@ var upgradeWebSocket = defineWebSocketHelper(async (c, events, options) => {
     ws.on("message", bufferMessage);
     const ctx = {
       binaryType: "arraybuffer",
-      close(code, reason2) {
-        ws.close(code, reason2);
+      close(code, reason22) {
+        ws.close(code, reason22);
       },
       protocol: ws.protocol,
       raw: ws,
@@ -65129,11 +65169,11 @@ var upgradeWebSocket = defineWebSocketHelper(async (c, events, options) => {
     ws.on("message", (data, isBinary) => {
       handleMessage(data, isBinary);
     });
-    ws.on("close", (code, reason2) => {
+    ws.on("close", (code, reason22) => {
       try {
         events?.onClose?.(new CloseEvent("close", {
           code,
-          reason: reason2.toString()
+          reason: reason22.toString()
         }), ctx);
       } catch (e) {
         (options?.onError ?? console.error)(e);
@@ -65757,9 +65797,9 @@ function createTwoFilesPatch(oldFileName, newFileName, oldStr, newStr, oldHeader
     } }));
   }
 }
-function splitLines(text2) {
-  const hasTrailingNl = text2.endsWith("\n");
-  const result = text2.split("\n").map((line) => line + "\n");
+function splitLines(text22) {
+  const hasTrailingNl = text22.endsWith("\n");
+  const result = text22.split("\n").map((line) => line + "\n");
   if (hasTrailingNl) {
     result.pop();
   } else {
@@ -65769,26 +65809,26 @@ function splitLines(text2) {
 }
 var CHARS_PER_TOKEN = 4;
 var HELD = 1024 * 1024;
-function cut(text2, max) {
-  if (text2.length <= max) return text2;
+function cut(text22, max) {
+  if (text22.length <= max) return text22;
   const half = Math.max(1, Math.floor(max / 2));
-  const head = text2.slice(0, half).replace(/[\uD800-\uDBFF]$/, "");
-  const tail = text2.slice(-half).replace(/^[\uDC00-\uDFFF]/, "");
+  const head = text22.slice(0, half).replace(/[\uD800-\uDBFF]$/, "");
+  const tail2 = text22.slice(-half).replace(/^[\uDC00-\uDFFF]/, "");
   return `${head}
-\u2026 ${text2.length - head.length - tail.length} characters cut \u2026
-${tail}`;
+\u2026 ${text22.length - head.length - tail2.length} characters cut \u2026
+${tail2}`;
 }
 var Pending = class {
   #head = "";
   #tail = "";
   #dropped = 0;
-  add(text2) {
+  add(text22) {
     const room = HELD / 2 - this.#head.length;
     if (room > 0) {
-      this.#head += text2.slice(0, room);
-      text2 = text2.slice(room);
+      this.#head += text22.slice(0, room);
+      text22 = text22.slice(room);
     }
-    this.#tail += text2;
+    this.#tail += text22;
     const over = this.#tail.length - HELD / 2;
     if (over > 0) {
       this.#tail = this.#tail.slice(over);
@@ -65797,13 +65837,13 @@ var Pending = class {
   }
   /** What is pending, leaving nothing. */
   take() {
-    const text2 = this.#dropped ? `${this.#head}
+    const text22 = this.#dropped ? `${this.#head}
 \u2026 ${this.#dropped} characters cut \u2026
 ${this.#tail}` : this.#head + this.#tail;
     this.#head = "";
     this.#tail = "";
     this.#dropped = 0;
-    return text2;
+    return text22;
   }
 };
 var MIN_YIELD_MS = 250;
@@ -65812,6 +65852,10 @@ var DEFAULT_YIELD_MS = 1e4;
 var MIN_POLL_MS = 5e3;
 var WRITE_YIELD_MS = 250;
 var MAX_RUNNING = 64;
+var MAX_ENDED = 64;
+var KEPT = 64 * 1024;
+var CMD_SHOWN = 200;
+var MAX_SIZE = 1e3;
 var DEFAULT_MAX_TOKENS = 7e3;
 var DRAIN_MS = 200;
 var KILL_AFTER_MS = 1e3;
@@ -65825,48 +65869,183 @@ var SIGNALS = {
   SIGTERM: 15
 };
 var clamp = (value, low, high) => Math.min(Math.max(value, low), high);
+var tail = (text22) => text22.slice(-KEPT).replace(/^[\uDC00-\uDFFF]/, "");
 var Sessions = class {
   #sessions = /* @__PURE__ */ new Map();
+  /** Those that have ended and are still listed, in the order they ended. */
+  #ended = [];
   #root;
   #emit;
+  #pty;
   constructor(root, emit = () => {
-  }) {
+  }, pty2) {
     this.#root = root;
     this.#emit = emit;
+    this.#pty = pty2;
   }
   /** Run `cmd` in a login shell, in `workdir` or the workspace. */
   async exec(input2) {
-    const running = [...this.#sessions.values()].filter((s) => s.exitCode === void 0);
-    if (running.length >= MAX_RUNNING)
-      throw new ExecRefused(`${MAX_RUNNING} commands are running. Wait for one, or stop one.`);
+    this.#room();
     const started = Date.now();
     const session = this.#start(input2.cmd, input2.workdir ?? this.#root);
     const wait = clamp(input2.yield_time_ms ?? DEFAULT_YIELD_MS, MIN_YIELD_MS, MAX_YIELD_MS);
     return this.#after(session, wait, started, input2.max_output_tokens);
   }
   /**
-   * Type into a running command, or with no `chars` wait and see what it has written. Ctrl-C
-   * (`\u0003`) interrupts it and Ctrl-D (`\u0004`) ends its input.
+   * Type into a running terminal, or with no `chars` wait and see what it has written. In a
+   * command, Ctrl-C (`\u0003`) interrupts it and Ctrl-D (`\u0004`) ends its input; a shell on a
+   * terminal device is typed into as it is.
    */
   async write(input2) {
     const session = this.#sessions.get(input2.session_id);
-    if (!session) throw new ExecRefused(`No session ${input2.session_id.slice(0, 64)} is running.`);
+    if (!session || session.reported)
+      throw new ExecRefused(`No session ${input2.session_id.slice(0, 64)} is running.`);
     const started = Date.now();
     const chars = input2.chars ?? "";
-    if (session.exitCode === void 0) this.#type(session, chars);
+    if (session.exitCode === void 0) session.type(chars);
     const wait = chars ? clamp(input2.yield_time_ms ?? WRITE_YIELD_MS, MIN_YIELD_MS, MAX_YIELD_MS) : clamp(input2.yield_time_ms ?? MIN_POLL_MS, MIN_POLL_MS, MAX_YIELD_MS);
     return this.#after(session, wait, started, input2.max_output_tokens);
   }
-  /** Stop every command: a polite signal, then a certain one. */
+  /** Every terminal, the oldest first: those running, and the last that ended. */
+  list() {
+    return [...this.#sessions.values()].map((session) => ({
+      id: session.id,
+      by: session.by,
+      cmd: session.cmd,
+      workdir: session.workdir,
+      tty: session.tty,
+      at: session.at,
+      output: tail(session.last),
+      ...session.exitCode === void 0 ? {} : { exitCode: session.exitCode, endedAt: session.endedAt }
+    }));
+  }
+  /** Start a person's login shell in the workspace, on a terminal device of this size. */
+  open(columns, rows) {
+    if (!this.#pty)
+      throw new ExecRefused("A shell needs a terminal device, and this host has none to give.");
+    this.#room();
+    const size = sized(columns, rows);
+    const file2 = process.env.SHELL || "/bin/bash";
+    let shell;
+    try {
+      shell = this.#pty(file2, ["-l"], {
+        name: "xterm-256color",
+        ...size,
+        cwd: this.#root,
+        env: process.env
+      });
+    } catch (error62) {
+      const why = error62 instanceof Error ? error62.message : String(error62);
+      throw new ExecRefused(`The shell didn't start: ${why}`);
+    }
+    const { session, wrote, finish } = this.#begin("person", file2, this.#root, true, {
+      type: (chars) => shell.write(chars),
+      signal(signal) {
+        try {
+          shell.kill(signal);
+        } catch {
+        }
+      },
+      resize: (cols, lines) => shell.resize(cols, lines)
+    });
+    shell.onData((text22) => wrote(text22));
+    shell.onExit(({ exitCode, signal }) => finish(signal ? 128 + signal : exitCode));
+    return session.id;
+  }
+  /** Type into a running terminal, as `write` does and with no answer. */
+  type(id, chars) {
+    this.#running(id).type(chars);
+  }
+  /** Give a shell's terminal device a new size. */
+  resize(id, columns, rows) {
+    const session = this.#running(id);
+    if (!session.resize) throw new ExecRefused("Only a shell on a terminal device has a size.");
+    const size = sized(columns, rows);
+    session.resize(size.cols, size.rows);
+  }
+  /**
+   * End one terminal: an interrupt, then a certain signal. It resolves once the terminal has
+   * ended or that signal is sent. One that has ended is left alone.
+   */
+  async stop(id) {
+    const session = this.#sessions.get(id);
+    if (!session) throw new ExecRefused(`No terminal ${id.slice(0, 64)} is here.`);
+    await this.#end([session], "SIGINT");
+  }
+  /** Stop every terminal: a polite signal, then a certain one. */
   async stopAll() {
-    const running = [...this.#sessions.values()].filter((s) => s.exitCode === void 0);
-    for (const session of running) this.#signal(session, "SIGTERM");
+    await this.#end([...this.#sessions.values()], "SIGTERM");
+  }
+  async #end(sessions, polite) {
+    const running = sessions.filter((s) => s.exitCode === void 0);
+    for (const session of running) session.signal(session.tty ? "SIGHUP" : polite);
+    let timer;
     await Promise.race([
       Promise.all(running.map((s) => s.ended)),
-      new Promise((done) => setTimeout(done, KILL_AFTER_MS))
+      new Promise((done) => {
+        timer = setTimeout(done, KILL_AFTER_MS);
+      })
     ]);
-    for (const session of running)
-      if (session.exitCode === void 0) this.#signal(session, "SIGKILL");
+    clearTimeout(timer);
+    for (const session of running) if (session.exitCode === void 0) session.signal("SIGKILL");
+  }
+  #room() {
+    const running = [...this.#sessions.values()].filter((s) => s.exitCode === void 0);
+    if (running.length >= MAX_RUNNING)
+      throw new ExecRefused(`${MAX_RUNNING} commands are running. Wait for one, or stop one.`);
+  }
+  #running(id) {
+    const session = this.#sessions.get(id);
+    if (!session) throw new ExecRefused(`No terminal ${id.slice(0, 64)} is here.`);
+    if (session.exitCode !== void 0) throw new ExecRefused("That terminal has ended.");
+    return session;
+  }
+  /**
+   * List a terminal that has just started, with the ways to act on its process, and give the two
+   * ways that process reports back.
+   */
+  #begin(by, cmd, workdir, tty, acts) {
+    const id = `s_${randomBytes(9).toString("hex")}`;
+    const at = (/* @__PURE__ */ new Date()).toISOString();
+    let done = () => {
+    };
+    const session = {
+      id,
+      by,
+      cmd,
+      workdir,
+      tty,
+      at,
+      pending: new Pending(),
+      last: "",
+      ended: new Promise((resolve42) => {
+        done = resolve42;
+      }),
+      ...acts
+    };
+    this.#sessions.set(id, session);
+    this.#emit({ type: "start", id, by, cmd, workdir, tty, at });
+    const wrote = (text22, stream) => {
+      if (!text22) return;
+      session.pending.add(text22);
+      session.last += text22;
+      if (session.last.length > 2 * KEPT) session.last = tail(session.last);
+      this.#emit({ type: "output", id, ...stream ? { stream } : {}, text: text22 });
+    };
+    const finish = (exitCode) => {
+      if (session.exitCode !== void 0) return;
+      session.exitCode = exitCode;
+      session.endedAt = (/* @__PURE__ */ new Date()).toISOString();
+      this.#emit({ type: "exit", id, exitCode, at: session.endedAt });
+      this.#ended.push(session);
+      if (this.#ended.length > MAX_ENDED) {
+        const read = this.#ended.findIndex((one) => one.reported);
+        const [old] = this.#ended.splice(Math.max(read, 0), 1);
+        this.#sessions.delete(old.id);
+      }
+      done();
+    };
+    return { session, wrote, finish };
   }
   #start(cmd, cwd) {
     const child = spawn2(process.env.SHELL || "/bin/bash", ["-lc", cmd], {
@@ -65875,62 +66054,44 @@ var Sessions = class {
       // Its own process group, so a signal reaches what it started.
       detached: true
     });
-    const pending = new Pending();
-    const id = `s_${randomBytes(9).toString("hex")}`;
-    const session = { id, child, pending };
-    this.#emit({ type: "start", id, cmd, workdir: cwd, at: (/* @__PURE__ */ new Date()).toISOString() });
+    const signal = (name) => {
+      try {
+        if (child.pid) process.kill(-child.pid, name);
+      } catch {
+      }
+    };
+    const type = (chars) => {
+      for (const part of chars.split(new RegExp("(\\p{Cc})", "u"))) {
+        if (part === "") signal("SIGINT");
+        else if (part === "") child.stdin.end();
+        else if (part && child.stdin.writable) child.stdin.write(part);
+      }
+    };
+    const { session, wrote, finish } = this.#begin("agent", cmd, cwd, false, { type, signal });
     for (const [name, stream] of [
       ["stdout", child.stdout],
       ["stderr", child.stderr]
     ]) {
       const decoder = new StringDecoder("utf8");
-      stream.on("data", (chunk) => {
-        const text2 = decoder.write(chunk);
-        pending.add(text2);
-        if (text2) this.#emit({ type: "output", id, stream: name, text: text2 });
-      });
+      stream.on("data", (chunk) => wrote(decoder.write(chunk), name));
     }
     child.stdin.on("error", () => {
     });
-    session.ended = new Promise((done) => {
-      const finish = (code) => {
-        if (session.exitCode !== void 0) return;
-        session.exitCode = code;
-        this.#emit({ type: "exit", id, exitCode: code, at: (/* @__PURE__ */ new Date()).toISOString() });
-        done();
-      };
-      child.once("error", (error62) => {
-        pending.add(`${error62.message}
-`);
-        this.#emit({ type: "output", id, stream: "stderr", text: `${error62.message}
-` });
-        finish(127);
-      });
-      child.once("exit", (code, signal) => {
-        const exitCode = code ?? 128 + (signal ? SIGNALS[signal] ?? 1 : 1);
-        const late = setTimeout(() => finish(exitCode), DRAIN_MS);
-        child.once("close", () => {
-          clearTimeout(late);
-          finish(exitCode);
-        });
+    child.once("error", (error62) => {
+      wrote(`${error62.message}
+`, "stderr");
+      finish(127);
+    });
+    child.once("exit", (code, signal2) => {
+      const exitCode = code ?? 128 + (signal2 ? SIGNALS[signal2] ?? 1 : 1);
+      const late = setTimeout(() => finish(exitCode), DRAIN_MS);
+      child.once("close", () => {
+        clearTimeout(late);
+        finish(exitCode);
       });
     });
-    this.#sessions.set(session.id, session);
     return session;
   }
-  #type(session, chars) {
-    for (const part of chars.split(new RegExp("(\\p{Cc})", "u"))) {
-      if (part === "") this.#signal(session, "SIGINT");
-      else if (part === "") session.child.stdin.end();
-      else if (part && session.child.stdin.writable) session.child.stdin.write(part);
-    }
-  }
-  #signal(session, signal) {
-    try {
-      if (session.child.pid) process.kill(-session.child.pid, signal);
-    } catch {
-    }
-  }
   async #after(session, waitMs, started, maxTokens) {
     let timer;
     await Promise.race([
@@ -65941,7 +66102,7 @@ var Sessions = class {
     ]);
     clearTimeout(timer);
     const exited = session.exitCode !== void 0;
-    if (exited) this.#sessions.delete(session.id);
+    if (exited) session.reported = true;
     return {
       exit_code: exited ? session.exitCode : null,
       seconds: Math.round(Date.now() - started) / 1e3,
@@ -65950,6 +66111,12 @@ var Sessions = class {
     };
   }
 };
+function sized(columns, rows) {
+  for (const value of [columns, rows])
+    if (!Number.isInteger(value) || value < 1 || value > MAX_SIZE)
+      throw new ExecRefused(`A terminal has 1 to ${MAX_SIZE} columns and rows.`);
+  return { cols: columns, rows };
+}
 function formatAnswer(answer) {
   return [
     `exit_code: ${answer.exit_code ?? "running"}`,
@@ -65959,6 +66126,31 @@ function formatAnswer(answer) {
     answer.text
   ].join("\n");
 }
+function listing(terminals) {
+  return terminals.map((one) => {
+    const line = one.cmd.split("\n", 1)[0].slice(0, CMD_SHOWN);
+    const shown = line.replace(/[\uD800-\uDBFF]$/, "");
+    return {
+      session_id: one.id,
+      started_by: one.by,
+      since: one.at,
+      exit_code: one.exitCode ?? null,
+      cmd: shown === one.cmd ? shown : `${shown}\u2026`
+    };
+  });
+}
+function formatSessions(listed) {
+  if (listed.length === 0) return "No sessions.";
+  return listed.map(
+    (one) => [
+      `session_id: ${one.session_id}`,
+      `started_by: ${one.started_by}`,
+      `since: ${one.since}`,
+      `exit_code: ${one.exit_code ?? "running"}`,
+      `cmd: ${one.cmd}`
+    ].join("\n")
+  ).join("\n\n");
+}
 var DEFAULT_LINES = 2e3;
 var MAX_READ_CHARS = 28e3;
 var MAX_LINE_CHARS = 2e3;
@@ -65980,6 +66172,7 @@ var refusing = async (work) => {
     throw new ExecRefused(reason(error62));
   }
 };
+var foldersFirst = (a, b) => Number(b.isDirectory()) - Number(a.isDirectory()) || a.name.localeCompare(b.name);
 async function inside(root, path) {
   const refused2 = () => new ExecRefused(`${path} is outside the workspace.`);
   const wanted = resolve(root, path);
@@ -65994,43 +66187,48 @@ async function inside(root, path) {
         () => false
       ))
         throw refused2();
-      const above = dirname2(at);
+      const above = dirname(at);
       if (above === at) throw refused2();
-      return join3(await real(above), basename(at));
+      return join4(await real(above), basename(at));
     }
   };
   const found = await real(wanted);
   if (found !== root && !found.startsWith(root + sep2)) throw refused2();
   return found;
 }
+async function aFile(path, given) {
+  const found = await stat(path);
+  if (found.isDirectory()) throw new ExecRefused(`${given} is a folder.`);
+  if (!found.isFile()) throw new ExecRefused(`${given} isn't a file that can be read.`);
+  return found;
+}
 function createFiles(root) {
   const at = (path) => inside(root, path);
-  const text2 = async (path) => {
+  const text22 = async (path, given) => {
+    await aFile(path, given);
     const bytes = await readFile(path);
-    if (bytes.includes(0)) throw new ExecRefused(`${path} is a binary file.`);
+    if (bytes.includes(0)) throw new ExecRefused(`${given} is a binary file.`);
     return bytes.toString("utf8");
   };
   return {
     /** Numbered lines of a file. */
     read: (input2) => refusing(async () => {
-      const lines = (await text2(await at(input2.path))).split("\n");
-      const first = Math.max(input2.offset ?? 1, 1);
-      const shown = lines.slice(first - 1, first - 1 + (input2.limit ?? DEFAULT_LINES)).map((line, i) => `${first + i}	${cut(line, MAX_LINE_CHARS)}`);
-      const last = first + shown.length - 1;
-      return `lines ${first}-${last} of ${lines.length}
+      const lines = (await text22(await at(input2.path), input2.path)).split("\n");
+      const first2 = Math.max(input2.offset ?? 1, 1);
+      const shown = lines.slice(first2 - 1, first2 - 1 + (input2.limit ?? DEFAULT_LINES)).map((line, i) => `${first2 + i}	${cut(line, MAX_LINE_CHARS)}`);
+      const last = first2 + shown.length - 1;
+      return `lines ${first2}-${last} of ${lines.length}
 ${cut(shown.join("\n"), MAX_READ_CHARS)}`;
     }),
     /** A folder's entries, folders first, each folder ending in `/`. */
     list: (input2) => refusing(async () => {
       const folder = await at(input2.path ?? ".");
       const entries = await readdir(folder, { withFileTypes: true });
-      entries.sort(
-        (a, b) => Number(b.isDirectory()) - Number(a.isDirectory()) || a.name.localeCompare(b.name)
-      );
+      entries.sort(foldersFirst);
       const lines = await Promise.all(
         entries.slice(0, MAX_ENTRIES).map(async (entry) => {
           if (entry.isDirectory()) return `${entry.name}/`;
-          const { size } = await lstat(join3(folder, entry.name));
+          const { size } = await lstat(join4(folder, entry.name));
           return `${entry.name}	${size}`;
         })
       );
@@ -66050,7 +66248,7 @@ ${cut(shown.join("\n"), MAX_READ_CHARS)}`;
       });
       if (found && found.size > MAX_EDIT_BYTES)
         throw new ExecRefused(`${input2.path} is too large to edit here.`);
-      const before = found ? await text2(path) : "";
+      const before = found ? await text22(path, input2.path) : "";
       let after;
       if (input2.old_text === "") {
         if (before !== "")
@@ -66067,9 +66265,10 @@ ${cut(shown.join("\n"), MAX_READ_CHARS)}`;
         after = before.split(input2.old_text).join(input2.new_text);
       }
       if (after === before) throw new ExecRefused("That edit changes nothing.");
-      const temporary = join3(dirname2(path), `.agentexec-${randomBytes2(6).toString("hex")}`);
+      const temporary = join4(dirname(path), `.agentexec-${randomBytes2(6).toString("hex")}`);
       try {
         await writeFile(temporary, after, found ? { mode: found.mode } : {});
+        if (found) await chmod(temporary, found.mode & 511);
         await rename(temporary, path);
       } catch (error62) {
         await rm(temporary, { force: true });
@@ -66084,32 +66283,18 @@ var DEADLINE_MS = 2e4;
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 var MAX_LINE_CHARS2 = 500;
 var DEFAULT_MATCHES = 200;
+var MAX_CHANGES = 1e3;
 var SKIPPED = /* @__PURE__ */ new Set([".git", "node_modules"]);
-function run(job) {
-  const start = resolve2(job.root, job.path ?? ".");
-  const pattern = job.regex ? job.pattern : job.pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const matcher = new RegExp(pattern, job.ignore_case ? "i" : "");
-  const limit = job.limit ?? DEFAULT_MATCHES;
-  const out = [];
-  const name = (path) => relative(job.root, path) || path;
-  const scan = (file2) => {
-    if (statSync(file2).size > MAX_FILE_BYTES) return;
-    const bytes = readFileSync(file2);
-    if (bytes.includes(0)) return;
-    bytes.toString("utf8").split("\n").forEach((line, i) => {
-      if (out.length <= limit && matcher.test(line))
-        out.push(`${name(file2)}:${i + 1}:${line.slice(0, MAX_LINE_CHARS2)}`);
-    });
-  };
+function eachFile(start, visit2) {
   const walk = (folder, rules) => {
     let here = rules;
     try {
-      const own22 = (0, import_ignore.default)().add(readFileSync(join22(folder, ".gitignore"), "utf8"));
-      here = [...rules, { base: folder, ignore: own22 }];
+      const own22 = join22(folder, ".gitignore");
+      if (statSync(own22).isFile())
+        here = [...rules, { base: folder, ignore: (0, import_ignore.default)().add(readFileSync(own22, "utf8")) }];
     } catch {
     }
     for (const entry of readdirSync(folder, { withFileTypes: true })) {
-      if (out.length > limit) return;
       if (SKIPPED.has(entry.name) || entry.isSymbolicLink()) continue;
       const path = join22(folder, entry.name);
       const suffix = entry.isDirectory() ? "/" : "";
@@ -66118,30 +66303,78 @@ function run(job) {
       );
       if (ignored) continue;
       try {
-        if (entry.isDirectory()) walk(path, here);
-        else if (entry.isFile()) scan(path);
+        const carryOn = entry.isDirectory() ? walk(path, here) : !entry.isFile() || visit2(path);
+        if (!carryOn) return false;
       } catch {
       }
     }
+    return true;
   };
-  if (statSync(start).isDirectory()) walk(start, []);
+  walk(start, []);
+}
+function searched(job) {
+  const start = resolve2(job.root, job.path ?? ".");
+  const pattern = job.regex ? job.pattern : job.pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const matcher = new RegExp(pattern, job.ignore_case ? "i" : "");
+  const limit = job.limit ?? DEFAULT_MATCHES;
+  const out = [];
+  const name = (path) => relative(job.root, path) || path;
+  const scan = (file2) => {
+    const found = statSync(file2);
+    if (!found.isFile() || found.size > MAX_FILE_BYTES) return;
+    const bytes = readFileSync(file2);
+    if (bytes.includes(0)) return;
+    bytes.toString("utf8").split("\n").forEach((line, i) => {
+      if (out.length <= limit && matcher.test(line))
+        out.push(`${name(file2)}:${i + 1}:${line.slice(0, MAX_LINE_CHARS2)}`);
+    });
+  };
+  if (statSync(start).isDirectory())
+    eachFile(start, (file2) => {
+      scan(file2);
+      return out.length <= limit;
+    });
   else scan(start);
   const more = out.length > limit;
   return (more ? [...out.slice(0, limit), `\u2026 more than ${limit} matches`] : out).join("\n");
 }
-async function search(root, input2) {
-  const path = await inside(root, input2.path ?? ".");
+function changed(job) {
+  const changes = [];
+  let more = false;
+  const newest = () => {
+    changes.sort(
+      (a, b) => b.modifiedAt.localeCompare(a.modifiedAt) || a.path.localeCompare(b.path)
+    );
+    if (changes.length <= MAX_CHANGES) return;
+    more = true;
+    changes.length = MAX_CHANGES;
+  };
+  eachFile(job.root, (file2) => {
+    const { mtime, size } = statSync(file2);
+    if (mtime.getTime() > job.since) {
+      changes.push({
+        path: relative(job.root, file2).split(sep22).join("/"),
+        size,
+        modifiedAt: mtime.toISOString()
+      });
+      if (changes.length >= 2 * MAX_CHANGES) newest();
+    }
+    return true;
+  });
+  newest();
+  return { changes, more };
+}
+function onThread(job, what) {
   return new Promise((done, failed) => {
-    const workerData2 = { ...input2, path, root, agentexecSearch: true };
-    const worker = new Worker(fileURLToPath2(import.meta.url), { workerData: workerData2 });
+    const worker = new Worker(fileURLToPath2(import.meta.url), { workerData: job });
     const timer = setTimeout(() => {
       void worker.terminate();
-      failed(new ExecRefused(`That search took over ${DEADLINE_MS / 1e3} s, so it was stopped.`));
+      failed(new ExecRefused(`${what} took over ${DEADLINE_MS / 1e3} s, so it was stopped.`));
     }, DEADLINE_MS);
-    worker.once("message", (text2) => {
+    worker.once("message", (answer) => {
       clearTimeout(timer);
       void worker.terminate();
-      done(text2);
+      done(answer);
     });
     worker.once("error", (error62) => {
       clearTimeout(timer);
@@ -66149,8 +66382,136 @@ async function search(root, input2) {
     });
   });
 }
-if (!isMainThread && workerData?.agentexecSearch)
-  parentPort?.postMessage(run(workerData));
+async function search(root, input2) {
+  const path = await inside(root, input2.path ?? ".");
+  return onThread({ ...input2, path, root, agentexecSearch: true }, "That search");
+}
+function changedSince(root, since) {
+  return onThread({ root, since, agentexecSearch: true }, "Looking for what changed");
+}
+if (!isMainThread && workerData?.agentexecSearch) {
+  const job = workerData;
+  parentPort?.postMessage("since" in job ? changed(job) : searched(job));
+}
+var MAX_READ_BYTES = 1024 * 1024;
+function createHostFiles(root, level) {
+  const uploads = /* @__PURE__ */ new Set();
+  let closes = 0;
+  const files = {
+    list: (path = ".") => refusing(async () => {
+      const folder = await inside(root, path);
+      const found = await readdir2(folder, { withFileTypes: true });
+      found.sort(foldersFirst);
+      const entries = await Promise.all(
+        found.slice(0, MAX_ENTRIES).map(async (entry) => {
+          const own22 = await lstat2(join3(folder, entry.name)).catch(() => void 0);
+          return own22 && {
+            name: entry.name,
+            kind: entry.isDirectory() ? "folder" : entry.isSymbolicLink() ? "link" : "file",
+            size: own22.size,
+            modifiedAt: own22.mtime.toISOString()
+          };
+        })
+      );
+      return {
+        entries: entries.filter((entry) => entry !== void 0),
+        more: found.length > MAX_ENTRIES
+      };
+    }),
+    read: (path, offset, length) => refusing(async () => {
+      if (!Number.isSafeInteger(offset) || offset < 0 || !Number.isSafeInteger(length) || length < 1 || length > MAX_READ_BYTES)
+        throw new ExecRefused("A read starts at 0 or later and takes 1 to 1,048,576 bytes.");
+      const real = await inside(root, path);
+      const found = await aFile(real, path);
+      const file2 = await open2(real, "r");
+      try {
+        const bytes = Buffer.alloc(Math.max(0, Math.min(length, found.size - offset)));
+        const { bytesRead } = await file2.read(bytes, 0, bytes.length, offset);
+        return {
+          bytes: bytes.subarray(0, bytesRead),
+          size: found.size,
+          modifiedAt: found.mtime.toISOString()
+        };
+      } finally {
+        await file2.close();
+      }
+    }),
+    changed: (since) => refusing(async () => {
+      const from = since.getTime();
+      if (Number.isNaN(from)) throw new ExecRefused("That isn't a time.");
+      return changedSince(root, from);
+    }),
+    upload: (path) => refusing(async () => {
+      if (level === "read") throw new ExecRefused("Files here can be read, not written.");
+      const opening = closes;
+      const target = await inside(root, path);
+      const before = await stat2(target).catch((error62) => {
+        if (error62.code === "ENOENT") return void 0;
+        throw error62;
+      });
+      if (before?.isDirectory()) throw new ExecRefused(`${path} is a folder.`);
+      await stat2(dirname2(target));
+      const temporary = join3(dirname2(target), `.agentexec-${randomBytes3(6).toString("hex")}`);
+      const file2 = await open2(temporary, "wx");
+      const discard = async () => {
+        await file2.close().catch(() => {
+        });
+        await rm2(temporary, { force: true });
+      };
+      let ended = false;
+      let written = Promise.resolve();
+      const end2 = () => {
+        if (ended) throw new ExecRefused("That upload has ended.");
+        ended = true;
+        uploads.delete(upload);
+      };
+      const upload = {
+        write: (bytes) => refusing(async () => {
+          if (ended) throw new ExecRefused("That upload has ended.");
+          written = written.then(() => file2.appendFile(bytes));
+          await written;
+        }),
+        finish: () => refusing(async () => {
+          end2();
+          try {
+            await written;
+            await file2.close();
+            await rename2(temporary, target);
+          } catch (error62) {
+            await discard();
+            throw error62;
+          }
+          const after = await stat2(target);
+          return { size: after.size, modifiedAt: after.mtime.toISOString() };
+        }),
+        abort: () => refusing(async () => {
+          if (ended) return;
+          end2();
+          await written.catch(() => {
+          });
+          await discard();
+        })
+      };
+      try {
+        if (before) await file2.chmod(before.mode & 511);
+        if (closes !== opening) throw new ExecRefused("It closed before that upload began.");
+      } catch (error62) {
+        await discard();
+        throw error62;
+      }
+      uploads.add(upload);
+      return upload;
+    })
+  };
+  return {
+    files,
+    /** Give up every upload still open, and any that is opening. */
+    close: async () => {
+      closes++;
+      await Promise.all([...uploads].map((upload) => upload.abort()));
+    }
+  };
+}
 var text = (value) => ({ content: [{ type: "text", text: value }] });
 var refused = (error62) => {
   if (!(error62 instanceof ExecRefused)) throw error62;
@@ -66202,9 +66563,9 @@ function createServer2(root, sessions, version22, level) {
     server.registerTool(
       "write_stdin",
       {
-        description: "Types into a running command and returns what it wrote since. With no chars, waits and returns what it has written. A Ctrl-C character (\\u0003) interrupts it; Ctrl-D (\\u0004) ends its input.",
+        description: "Types into a running command and returns what it wrote since. With no chars, waits and returns what it has written. A Ctrl-C character (\\u0003) interrupts it; Ctrl-D (\\u0004) ends its input. It also reaches a shell a person opened, by its id from list_sessions: there these are keys, what you type joins anything already typed, and Ctrl-D at its prompt closes it. Once an answer has given a session's exit code, that session is refused.",
         inputSchema: {
-          session_id: external_exports.string().min(1).describe("From exec_command's answer."),
+          session_id: external_exports.string().min(1).describe("From exec_command's answer, or list_sessions."),
           chars: external_exports.string().optional().describe("What to type; include \\n to press Enter."),
           yield_time_ms: YieldTime.describe(
             "How long to wait: with chars 250 to 30000, by default 250; with none 5000 to 30000."
@@ -66216,6 +66577,28 @@ function createServer2(root, sessions, version22, level) {
       },
       (input2) => answering(() => sessions.write(input2))
     );
+    server.registerTool(
+      "list_sessions",
+      {
+        description: "Lists the sessions here, running or lately ended: each command exec_command started, and each shell a person opened. Gives each one's session_id for write_stdin, who started it, since when, its exit code and the start of its command.",
+        outputSchema: {
+          sessions: external_exports.array(
+            external_exports.object({
+              session_id: external_exports.string(),
+              started_by: external_exports.enum(["agent", "person"]).describe("A person's is their own shell."),
+              since: external_exports.string().describe("When it started."),
+              exit_code: external_exports.number().nullable().describe("Null while it is still running."),
+              cmd: external_exports.string().describe("Its first line, or the start of it.")
+            })
+          )
+        },
+        annotations: READ_ONLY
+      },
+      () => {
+        const listed = listing(sessions.list());
+        return { ...text(formatSessions(listed)), structuredContent: { sessions: listed } };
+      }
+    );
   }
   server.registerTool(
     "read",
@@ -66271,18 +66654,23 @@ function createServer2(root, sessions, version22, level) {
     );
   return server;
 }
-var VERSION = "0.0.3";
+var VERSION = "0.0.5";
 function createAgentExec(options) {
   const root = realpathSync(resolve3(options.workspace));
   const level = options.level ?? "read";
   const listeners = /* @__PURE__ */ new Set();
-  const sessions = new Sessions(root, (event) => {
-    for (const listener of listeners)
-      try {
-        listener(event);
-      } catch {
-      }
-  });
+  const sessions = new Sessions(
+    root,
+    (event) => {
+      for (const listener of listeners)
+        try {
+          listener(event);
+        } catch {
+        }
+    },
+    options.pty
+  );
+  const host = createHostFiles(root, level);
   return {
     async handle(request, response, body) {
       const server = createServer2(root, sessions, VERSION, level);
@@ -66298,23 +66686,56 @@ function createAgentExec(options) {
       listeners.add(listener);
       return () => void listeners.delete(listener);
     },
-    close: () => sessions.stopAll()
+    files: host.files,
+    terminals: {
+      list: () => sessions.list(),
+      open({ columns, rows }) {
+        if (level !== "terminal") throw new Error("A shell needs the terminal level.");
+        return sessions.open(columns, rows);
+      },
+      write: (id, text22) => sessions.type(id, text22),
+      resize: (id, columns, rows) => sessions.resize(id, columns, rows),
+      stop: (id) => sessions.stop(id)
+    },
+    async close() {
+      await Promise.all([sessions.stopAll(), host.close()]);
+    }
   };
 }
 
 // src/screencast.ts
+var FIRST_FRAME_MS = 500;
+var RESTARTS = 3;
 async function startScreencast(page, onFrame) {
-  await page.screencast.start({
+  let seen = false;
+  let stopped = false;
+  const start = () => page.screencast.start({
     quality: 70,
-    onFrame: ({ data, viewportWidth, viewportHeight }) => onFrame({ data, width: viewportWidth, height: viewportHeight })
-  });
-  return () => page.screencast.stop().catch(() => {
+    onFrame: ({ data, viewportWidth, viewportHeight }) => {
+      seen = true;
+      onFrame({ data, width: viewportWidth, height: viewportHeight });
+    }
   });
+  await start();
+  void (async () => {
+    for (let left = RESTARTS; left > 0; left--) {
+      await new Promise((done) => setTimeout(done, FIRST_FRAME_MS).unref());
+      if (seen || stopped) return;
+      await page.screencast.stop().catch(() => {
+      });
+      if (stopped) return;
+      if (!await start().then(() => true).catch(() => false))
+        return;
+    }
+  })();
+  return async () => {
+    stopped = true;
+    await page.screencast.stop().catch(() => {
+    });
+  };
 }
 
 // src/browser-live.ts
-var WAIT_MS = 25e3;
-var IDLE_MS = 6e4;
 var TITLE_CHECK_MS = 1e3;
 var STEP_MS = 2e3;
 var MAX_BUFFERED = 4 * 1024 * 1024;
@@ -66322,269 +66743,292 @@ var sleep3 = (ms) => new Promise((done) => setTimeout(done, ms));
 var within = (work, ms) => Promise.race([work, sleep3(ms).then(() => void 0)]);
 var BrowserLive = class {
   #endpoint;
-  #sockets = /* @__PURE__ */ new Map();
-  #viewer;
+  #viewers = /* @__PURE__ */ new Map();
+  #client;
   #context;
   #ids = /* @__PURE__ */ new Map();
   #nextId = 1;
-  #shown;
-  #stopCast;
-  #size = { width: 0, height: 0 };
-  #dialog;
-  #chooser;
-  #choice;
-  #swallowUp = false;
-  #driver;
-  #lastInput = 0;
-  #agentWaiting = 0;
-  #answeredChooser = false;
+  #casts = /* @__PURE__ */ new Map();
+  /** A page's cast that is still stopping, which its next one waits for. */
+  #stopping = /* @__PURE__ */ new Map();
+  #dialogs = /* @__PURE__ */ new Map();
+  #choosers = /* @__PURE__ */ new Map();
+  /** The agent's MCP sessions seen so far. */
+  #sessions = /* @__PURE__ */ new Set();
+  /** Those still to be told that a person answered a file chooser. */
+  #owed = /* @__PURE__ */ new Set();
   /** The tabs last sent, to send them again only when something about them changed. */
   #lastTabs = "";
   #titles;
   #checking = false;
-  #steps = Promise.resolve();
+  /** Counts each time everyone has left, so a connection begun before that knows it is stale. */
+  #ended = 0;
   constructor(endpoint) {
     this.#endpoint = endpoint;
   }
   // ---- The agent's side
-  async wait() {
-    if (!this.#held()) return void 0;
-    this.#agentWaiting++;
-    this.#announceDriver();
-    try {
-      const deadline = Date.now() + WAIT_MS;
-      while (this.#held() && Date.now() < deadline) await sleep3(200);
-      return this.#held() ? "A person has the browser now, so this didn't run. Try again later." : "A person used the browser, so this didn't run and the page may have changed. Take a new snapshot before you act.";
-    } finally {
-      this.#agentWaiting--;
-      this.#announceDriver();
-    }
+  takeAnsweredChooser(session) {
+    this.#sessions.add(session);
+    return this.#owed.delete(session);
   }
-  takeAnsweredChooser() {
-    const answered2 = this.#answeredChooser;
-    this.#answeredChooser = false;
-    return answered2;
+  sessionEnded(session) {
+    this.#sessions.delete(session);
+    this.#owed.delete(session);
   }
-  agentAnswered() {
-    this.#dialog = void 0;
-    this.#chooser = void 0;
-    this.#broadcast({ type: "dialog", open: false });
-    this.#broadcast({ type: "file-chooser", open: false });
+  agentAnsweredChooser() {
+    this.#choosers.clear();
+    for (const ws of this.#viewers.keys()) this.#send(ws, { type: "file-chooser", open: false });
   }
   // ---- The person's side
   open(ws, mode) {
-    this.#sockets.set(ws, mode);
-    if (mode === "operate") {
-      this.#driver = ws;
-      this.#lastInput = Date.now();
-    }
+    const viewer = { mode, chose: false, swallowUp: false, steps: Promise.resolve() };
+    this.#viewers.set(ws, viewer);
     ws.on("close", () => this.#left(ws));
     ws.on("message", (data, binary) => {
-      if (binary || this.#sockets.get(ws) !== "operate") return;
+      if (binary || viewer.mode !== "operate") return;
       let message;
       try {
         message = JSON.parse(data.toString());
       } catch {
         return;
       }
-      this.#input(ws, message);
+      this.#input(ws, viewer, message);
     });
     this.#begin().then(
-      () => this.#greet(ws),
+      // Unless it chose a tab while this was starting, it is shown the newest.
+      () => viewer.chose ? void 0 : this.#show(ws, this.#newest()),
       () => ws.close(1011, "The browser can't be reached.")
     );
   }
   async close() {
-    for (const ws of this.#sockets.keys()) ws.close(1001, "It stopped.");
+    for (const ws of this.#viewers.keys()) ws.close(1001, "It stopped.");
     await this.#end();
   }
-  #held() {
-    return this.#driver !== void 0 && Date.now() - this.#lastInput < IDLE_MS;
-  }
   #send(ws, message) {
     if (ws.readyState === ws.OPEN) ws.send(JSON.stringify(message));
   }
-  #broadcast(message) {
-    for (const ws of this.#sockets.keys()) this.#send(ws, message);
+  /** The sockets shown a page. */
+  #shownTo(page) {
+    return [...this.#viewers].filter(([, viewer]) => viewer.shown === page).map(([ws]) => ws);
   }
-  #announceDriver() {
-    for (const ws of this.#sockets.keys())
-      this.#send(ws, {
-        type: "driver",
-        you: ws === this.#driver && this.#held(),
-        held: this.#held(),
-        agentWaiting: this.#agentWaiting > 0
-      });
+  #newest() {
+    return this.#context?.pages().at(-1);
   }
   async #begin() {
-    this.#viewer ??= (async () => {
-      const viewer = await playwright().chromium.connect(await this.#endpoint);
-      const context = viewer.contexts()[0] ?? await viewer.newContext();
+    this.#client ??= (async () => {
+      const ended = this.#ended;
+      const client = await playwright().chromium.connect(await this.#endpoint);
+      const context = client.contexts()[0] ?? await client.newContext();
+      if (ended !== this.#ended) return client;
       this.#context = context;
       for (const page of context.pages()) this.#track(page);
       context.on("page", (page) => {
         this.#track(page);
-        void this.#show(page);
+        for (const [ws, viewer] of this.#viewers)
+          if (!viewer.chose || !viewer.shown) void this.#show(ws, page);
+        void this.#tabs();
       });
-      await this.#show(context.pages().at(-1) ?? await context.newPage());
-      this.#titles = setInterval(() => void this.#checkTabs(), TITLE_CHECK_MS);
-      return viewer;
+      if (context.pages().length === 0) await context.newPage();
+      if (ended === this.#ended)
+        this.#titles = setInterval(() => void this.#checkTabs(), TITLE_CHECK_MS);
+      return client;
     })();
-    await this.#viewer;
+    await this.#client;
   }
+  /** Everyone has left. All of it is forgotten at once, so a socket that opens next starts anew. */
   async #end() {
-    const viewer = this.#viewer;
-    this.#viewer = void 0;
+    const client = this.#client;
+    const casts = [...this.#casts.values()];
+    this.#ended++;
+    this.#client = void 0;
+    this.#context = void 0;
     clearInterval(this.#titles);
     this.#titles = void 0;
     this.#lastTabs = "";
-    await this.#stopCast?.();
-    this.#stopCast = void 0;
-    this.#shown = void 0;
+    this.#casts.clear();
+    this.#stopping.clear();
     this.#ids.clear();
-    await (await viewer?.catch(() => void 0))?.close().catch(() => {
+    this.#dialogs.clear();
+    this.#choosers.clear();
+    await Promise.all(casts.map((cast) => cast.stop.then((stop) => stop?.()).catch(() => {
+    })));
+    await (await client?.catch(() => void 0))?.close().catch(() => {
     });
   }
   #left(ws) {
-    this.#sockets.delete(ws);
-    if (this.#driver === ws) {
-      this.#driver = void 0;
-      this.#announceDriver();
-    }
-    if (this.#sockets.size === 0) void this.#end();
-  }
-  async #greet(ws) {
-    await this.#tabs(ws);
-    if (this.#size.width) this.#send(ws, { type: "viewport", ...this.#size });
-    if (this.#dialog)
-      this.#send(ws, {
-        type: "dialog",
-        open: true,
-        kind: this.#dialog.type(),
-        message: this.#dialog.message()
-      });
-    if (this.#chooser)
-      this.#send(ws, { type: "file-chooser", open: true, multiple: this.#chooser.isMultiple() });
-    this.#announceDriver();
+    const shown = this.#viewers.get(ws)?.shown;
+    this.#viewers.delete(ws);
+    if (this.#viewers.size === 0) return void this.#end();
+    if (shown) void this.#uncast(shown);
   }
   #track(page) {
     if (this.#ids.has(page)) return;
     this.#ids.set(page, this.#nextId++);
     page.on("dialog", (dialog) => {
-      this.#dialog = dialog;
-      this.#broadcast({
-        type: "dialog",
-        open: true,
-        kind: dialog.type(),
-        message: dialog.message(),
-        ...dialog.defaultValue() ? { defaultValue: dialog.defaultValue() } : {}
-      });
+      this.#dialogs.set(page, dialog);
+      for (const ws of this.#shownTo(page)) this.#tellDialog(ws, page);
+    });
+    page.on("dialogclosed", () => {
+      this.#dialogs.delete(page);
+      for (const ws of this.#shownTo(page)) this.#tellDialog(ws, page);
     });
     page.on("filechooser", (chooser) => {
-      this.#chooser = chooser;
-      this.#broadcast({ type: "file-chooser", open: true, multiple: chooser.isMultiple() });
+      this.#choosers.set(page, chooser);
+      for (const ws of this.#shownTo(page)) this.#tellChooser(ws, page);
     });
     page.on("framenavigated", (frame) => {
       if (frame === page.mainFrame()) void this.#tabs();
     });
     page.on("close", () => {
       this.#ids.delete(page);
-      if (this.#shown === page) void this.#show(this.#context?.pages().at(-1));
-      else void this.#tabs();
+      this.#dialogs.delete(page);
+      this.#choosers.delete(page);
+      this.#casts.delete(page);
+      this.#stopping.delete(page);
+      for (const ws of this.#shownTo(page)) void this.#show(ws, this.#newest());
+      void this.#tabs();
     });
   }
-  /** Which page the frames are of: the newest by default, or the one the person picked. */
-  async #show(page) {
-    if (page === this.#shown) return;
-    await this.#stopCast?.();
-    this.#stopCast = void 0;
-    this.#shown = page;
-    this.#choice = void 0;
+  #tellDialog(ws, page) {
+    const dialog = this.#dialogs.get(page);
+    this.#send(
+      ws,
+      dialog ? {
+        type: "dialog",
+        open: true,
+        kind: dialog.type(),
+        message: dialog.message(),
+        ...dialog.defaultValue() ? { defaultValue: dialog.defaultValue() } : {}
+      } : { type: "dialog", open: false }
+    );
+  }
+  #tellChooser(ws, page) {
+    const chooser = this.#choosers.get(page);
+    this.#send(
+      ws,
+      chooser ? { type: "file-chooser", open: true, multiple: chooser.isMultiple() } : { type: "file-chooser", open: false }
+    );
+  }
+  /** The cast of a page, started if no socket was shown it yet. */
+  #cast(page) {
+    const running = this.#casts.get(page);
+    if (running) return running;
+    const onFrame = (frame) => {
+      const watching = this.#shownTo(page);
+      if (frame.width !== cast.size.width || frame.height !== cast.size.height) {
+        cast.size = { width: frame.width, height: frame.height };
+        for (const ws of watching) this.#send(ws, { type: "viewport", ...cast.size });
+      }
+      cast.last = frame.data;
+      for (const ws of watching)
+        if (ws.readyState === ws.OPEN && ws.bufferedAmount < MAX_BUFFERED) ws.send(frame.data);
+    };
+    const cast = {
+      size: { width: 0, height: 0 },
+      // A page has one screencast at a time, so this one starts once the last has stopped.
+      stop: (this.#stopping.get(page) ?? Promise.resolve()).then(() => startScreencast(page, onFrame)).catch(() => void 0)
+    };
+    this.#casts.set(page, cast);
+    return cast;
+  }
+  /** Stop casting a page no socket is shown any more. */
+  async #uncast(page) {
+    const cast = this.#casts.get(page);
+    if (!cast || this.#shownTo(page).length > 0) return;
+    this.#casts.delete(page);
+    const stopped = cast.stop.then((stop) => stop?.()).catch(() => {
+    });
+    this.#stopping.set(page, stopped);
+    await stopped;
+    if (this.#stopping.get(page) === stopped) this.#stopping.delete(page);
+  }
+  /** Change the page a socket is shown, and tell it what that page is waiting on. */
+  async #show(ws, page) {
+    const viewer = this.#viewers.get(ws);
+    if (!viewer || page && viewer.shown === page) return;
+    const before = viewer.shown;
+    viewer.shown = page;
+    viewer.choice = void 0;
+    viewer.swallowUp = false;
+    if (before) await this.#uncast(before);
+    if (this.#viewers.get(ws) !== viewer || viewer.shown !== page) return;
     if (page) {
-      this.#stopCast = await startScreencast(page, (frame) => {
-        if (frame.width !== this.#size.width || frame.height !== this.#size.height) {
-          this.#size = { width: frame.width, height: frame.height };
-          this.#broadcast({ type: "viewport", ...this.#size });
-        }
-        for (const ws of this.#sockets.keys())
-          if (ws.readyState === ws.OPEN && ws.bufferedAmount < MAX_BUFFERED) ws.send(frame.data);
-      }).catch(() => void 0);
+      const cast = this.#cast(page);
+      if (cast.size.width) this.#send(ws, { type: "viewport", ...cast.size });
+      if (cast.last && ws.readyState === ws.OPEN) ws.send(cast.last);
+      this.#tellDialog(ws, page);
+      this.#tellChooser(ws, page);
     }
-    await this.#tabs();
+    await this.#tabs(ws);
   }
   async #tabList() {
-    const tabs = await Promise.all(
+    return Promise.all(
       [...this.#ids].map(async ([page, id]) => ({
         id,
         url: page.url(),
         title: await within(page.title(), STEP_MS).catch(() => void 0) ?? ""
       }))
     );
-    return { type: "tabs", tabs, shown: (this.#shown && this.#ids.get(this.#shown)) ?? null };
   }
-  async #tabs(only) {
-    const message = await this.#tabList();
-    this.#lastTabs = JSON.stringify(message);
-    if (only) this.#send(only, message);
-    else this.#broadcast(message);
+  /** The tabs, to one socket or to all, each told which one it is shown. */
+  async #tabs(only, listed) {
+    const tabs = listed ?? await this.#tabList();
+    if (!only) this.#lastTabs = JSON.stringify(tabs);
+    for (const [ws, viewer] of this.#viewers)
+      if (!only || ws === only)
+        this.#send(ws, {
+          type: "tabs",
+          tabs,
+          shown: (viewer.shown && this.#ids.get(viewer.shown)) ?? null
+        });
   }
   /** Send the tabs again if anything about them changed, such as a title. */
   async #checkTabs() {
     if (this.#checking) return;
     this.#checking = true;
     try {
-      const message = await this.#tabList();
-      const text2 = JSON.stringify(message);
-      if (text2 === this.#lastTabs) return;
-      this.#lastTabs = text2;
-      this.#broadcast(message);
+      const tabs = await this.#tabList();
+      if (JSON.stringify(tabs) !== this.#lastTabs) await this.#tabs(void 0, tabs);
     } finally {
       this.#checking = false;
     }
   }
   /** Each step in order, none waiting on another for long: a dialog blocks the page's input. */
-  #step(work) {
-    this.#steps = this.#steps.then(() => within(work(), STEP_MS)).catch(() => {
+  #step(viewer, work) {
+    viewer.steps = viewer.steps.then(() => within(work(), STEP_MS)).catch(() => {
     });
   }
-  #input(ws, message) {
-    if (message.type === "release") {
-      if (this.#driver === ws) this.#driver = void 0;
-      return this.#announceDriver();
-    }
-    const changed = this.#driver !== ws || !this.#held();
-    this.#driver = ws;
-    this.#lastInput = Date.now();
-    if (changed) this.#announceDriver();
-    const page = this.#shown;
+  #input(ws, viewer, message) {
+    const page = viewer.shown;
     switch (message.type) {
       case "mouse":
         if (!page) return;
-        return this.#step(() => this.#mouse(page, message));
+        return this.#step(viewer, () => this.#mouse(ws, viewer, page, message));
       case "key":
         if (!page) return;
         return this.#step(
+          viewer,
           () => message.action === "down" ? page.keyboard.down(message.key) : page.keyboard.up(message.key)
         );
       case "text":
         if (!page) return;
-        return this.#step(() => page.keyboard.insertText(message.text));
+        return this.#step(viewer, () => page.keyboard.insertText(message.text));
       case "dialog": {
-        const dialog = this.#dialog;
-        this.#dialog = void 0;
-        this.#broadcast({ type: "dialog", open: false });
+        const dialog = page && this.#dialogs.get(page);
         if (!dialog) return;
         return this.#step(
+          viewer,
           () => message.accept ? dialog.accept(message.text ?? void 0) : dialog.dismiss()
         );
       }
       case "files": {
-        const chooser = this.#chooser;
-        this.#chooser = void 0;
-        this.#broadcast({ type: "file-chooser", open: false });
-        if (!chooser) return;
-        this.#answeredChooser = true;
+        const chooser = page && this.#choosers.get(page);
+        if (!page || !chooser) return;
+        this.#choosers.delete(page);
+        for (const socket of this.#shownTo(page)) this.#tellChooser(socket, page);
+        for (const session of this.#sessions) this.#owed.add(session);
         return this.#step(
+          viewer,
           () => chooser.setFiles(
             message.files.map((file2) => ({
               name: file2.name,
@@ -66595,16 +67039,16 @@ var BrowserLive = class {
         );
       }
       case "choice": {
-        const choice = this.#choice;
-        this.#choice = void 0;
+        const choice = viewer.choice;
+        viewer.choice = void 0;
         if (!choice) return;
-        return this.#step(() => choice.selectOption(message.values));
+        return this.#step(viewer, () => choice.selectOption(message.values));
       }
       case "tab":
-        return this.#step(() => this.#tab(message));
+        return this.#step(viewer, () => this.#tab(ws, viewer, message));
       case "navigate":
         if (!page) return;
-        return this.#step(async () => {
+        return this.#step(viewer, async () => {
           if (message.to === "back") await page.goBack();
           else if (message.to === "forward") await page.goForward();
           else if (message.to === "reload") await page.reload();
@@ -66612,15 +67056,15 @@ var BrowserLive = class {
         });
     }
   }
-  async #mouse(page, message) {
+  async #mouse(ws, viewer, page, message) {
     const { x, y } = message;
     if (message.action === "move") return page.mouse.move(x, y);
     if (message.action === "wheel")
       return page.mouse.wheel(message.deltaX ?? 0, message.deltaY ?? 0);
     const button = message.button ?? "left";
     if (message.action === "up") {
-      if (this.#swallowUp) {
-        this.#swallowUp = false;
+      if (viewer.swallowUp) {
+        viewer.swallowUp = false;
         return;
       }
       return page.mouse.up({ button });
@@ -66646,29 +67090,33 @@ var BrowserLive = class {
           ([px, py]) => document.elementFromPoint(px, py),
           [x, y]
         );
-        this.#choice = handle.asElement() ?? void 0;
-        this.#swallowUp = true;
-        return this.#broadcast({ type: "choice", ...choice });
+        viewer.choice = handle.asElement() ?? void 0;
+        viewer.swallowUp = true;
+        return this.#send(ws, { type: "choice", ...choice });
       }
     }
     await page.mouse.move(x, y);
     return page.mouse.down({ button });
   }
-  async #tab(message) {
+  /** Showing or opening a tab makes the socket's page its own from then on. */
+  async #tab(ws, viewer, message) {
     const byId = (id) => [...this.#ids].find(([, known]) => known === id)?.[0];
-    if (message.action === "show") return this.#show(byId(message.id));
     if (message.action === "close") return byId(message.id)?.close();
+    if (message.action === "show") {
+      const page2 = byId(message.id);
+      if (!page2) return;
+      viewer.chose = true;
+      return this.#show(ws, page2);
+    }
     const page = await this.#context?.newPage();
-    if (page && message.url) await page.goto(message.url).catch(() => {
+    if (!page) return;
+    viewer.chose = true;
+    await this.#show(ws, page);
+    if (message.url) await page.goto(message.url).catch(() => {
     });
   }
 };
 
-// src/live.ts
-import { chmodSync, existsSync, statSync as statSync2 } from "node:fs";
-import { createRequire as createRequire3 } from "node:module";
-import { dirname as dirname3, join as join4 } from "node:path";
-
 // node_modules/ws/wrapper.mjs
 var import_stream2 = __toESM(require_stream(), 1);
 var import_extension = __toESM(require_extension(), 1);
@@ -66679,71 +67127,239 @@ var import_subprotocol = __toESM(require_subprotocol(), 1);
 var import_websocket = __toESM(require_websocket(), 1);
 var import_websocket_server = __toESM(require_websocket_server(), 1);
 
+// src/files-live.ts
+var MAX_PART = 1024 * 1024;
+var MAX_BUFFERED2 = 4 * 1024 * 1024;
+var MAX_UPLOADS = 64;
+var reason2 = (error62) => error62 instanceof Error ? error62.message : String(error62);
+var text2 = (value) => typeof value === "string";
+var whole = (value) => Number.isSafeInteger(value);
+var sleep4 = (ms) => new Promise((done) => setTimeout(done, ms));
+var FilesLive = class {
+  #files;
+  #sockets = /* @__PURE__ */ new Set();
+  /** One walk of the workspace at a time, however many ask. */
+  #walking = Promise.resolve();
+  /** How many files are part written, over every socket. */
+  #uploads = 0;
+  constructor(files) {
+    this.#files = files;
+  }
+  close() {
+    for (const ws of this.#sockets) ws.close(1001, "It stopped.");
+  }
+  open(ws, mode) {
+    this.#sockets.add(ws);
+    const uploads = /* @__PURE__ */ new Map();
+    let awaited;
+    let writing = Promise.resolve();
+    let waiting = 0;
+    let reading = Promise.resolve();
+    let closed = false;
+    const send2 = (answer) => {
+      if (ws.readyState === ws.OPEN) ws.send(JSON.stringify(answer));
+    };
+    const refuse = (id, message) => send2({ type: "refused", id, message });
+    const giveUp = async (path) => {
+      const had = uploads.get(path);
+      if (!had) return;
+      uploads.delete(path);
+      this.#uploads--;
+      await had.upload.abort().catch(() => {
+      });
+    };
+    const drained = async () => {
+      while (!closed && ws.bufferedAmount > MAX_BUFFERED2) await sleep4(50);
+    };
+    const writePart = async (write, bytes) => {
+      const { id, path, offset, last } = write;
+      if (bytes.length !== write.length)
+        throw new Error(`It said ${write.length} bytes, and ${bytes.length} came.`);
+      if (offset === 0) {
+        await giveUp(path);
+        if (this.#uploads >= MAX_UPLOADS)
+          throw new Error(`${MAX_UPLOADS} files are part written here. Finish one first.`);
+        this.#uploads++;
+        try {
+          uploads.set(path, { upload: await this.#files.upload(path), size: 0 });
+        } catch (error62) {
+          this.#uploads--;
+          throw error62;
+        }
+      }
+      const file2 = uploads.get(path);
+      if (!file2 || file2.size !== offset)
+        throw new Error(`The next part of ${path} starts at ${file2?.size ?? 0}.`);
+      await file2.upload.write(bytes);
+      file2.size += bytes.length;
+      if (!last) return void 0;
+      uploads.delete(path);
+      this.#uploads--;
+      return { type: "written", id, path, size: (await file2.upload.finish()).size };
+    };
+    const inTurn = (work) => {
+      const done = reading.then(async () => {
+        await drained();
+        if (!closed) await work();
+      });
+      reading = done.catch(() => {
+      });
+      return done;
+    };
+    const handle = async (request) => {
+      const { id } = request;
+      switch (request.type) {
+        case "list": {
+          const path = request.path ?? ".";
+          if (!text2(path)) throw new Error("A path is text.");
+          return inTurn(
+            async () => send2({ type: "entries", id, path, ...await this.#files.list(path) })
+          );
+        }
+        case "read": {
+          const { path, offset, length } = request;
+          if (!text2(path)) throw new Error("A path is text.");
+          return inTurn(async () => {
+            const { bytes, size, modifiedAt } = await this.#files.read(path, offset, length);
+            if (ws.readyState !== ws.OPEN) return;
+            send2({ type: "data", id, path, offset, length: bytes.length, size, modifiedAt });
+            ws.send(bytes);
+          });
+        }
+        case "changed": {
+          const { since } = request;
+          if (!text2(since)) throw new Error("That isn't a time.");
+          const walked = this.#walking.then(
+            () => ws.readyState === ws.OPEN ? this.#files.changed(new Date(since)) : void 0
+          );
+          this.#walking = walked.catch(() => {
+          });
+          const found = await walked;
+          await drained();
+          if (found) send2({ type: "changes", id, since, ...found });
+          return;
+        }
+        case "write": {
+          awaited = "refused";
+          if (mode !== "operate") throw new Error("This socket watches: it can't write.");
+          const { path, offset, length, last } = request;
+          if (!text2(path) || !whole(offset) || offset < 0 || !whole(length) || length < 0 || length > MAX_PART || typeof last !== "boolean")
+            throw new Error(
+              "A write names a path, where it starts, 0 to 1,048,576 bytes, and last."
+            );
+          awaited = request;
+          return;
+        }
+        default:
+          throw new Error("That isn't something files@1 does.");
+      }
+    };
+    ws.on("close", () => {
+      closed = true;
+      this.#sockets.delete(ws);
+      void writing.finally(() => Promise.all([...uploads.keys()].map(giveUp)));
+    });
+    ws.on("message", (data, binary) => {
+      const write = awaited;
+      awaited = void 0;
+      if (binary) {
+        if (write === "refused") return;
+        if (!write) return ws.close(1008, "Those bytes belong to no write.");
+        waiting++;
+        ws.pause();
+        writing = writing.then(() => closed ? void 0 : writePart(write, data)).then(
+          (done) => done && send2(done),
+          async (error62) => {
+            await giveUp(write.path);
+            refuse(write.id, reason2(error62));
+          }
+        ).finally(() => {
+          if (--waiting === 0) ws.resume();
+        });
+        return;
+      }
+      if (write && write !== "refused") refuse(write.id, "Its bytes didn't follow it.");
+      let request;
+      try {
+        request = JSON.parse(data.toString());
+      } catch {
+        return refuse("", "That isn't JSON.");
+      }
+      const { id, type } = request ?? {};
+      if (type === "write") awaited = "refused";
+      if (!text2(id) || id.length < 1 || id.length > 64)
+        return refuse("", "Every request has an id of 1 to 64 characters.");
+      handle(request).catch((error62) => refuse(id, reason2(error62)));
+    });
+  }
+};
+
+// src/text.ts
+var MAX_TEXT = 1e4;
+function* pieces(text3, most = MAX_TEXT) {
+  for (let from = 0; from < text3.length; ) {
+    let to = Math.min(from + most, text3.length);
+    const last = text3.charCodeAt(to - 1);
+    if (to < text3.length && last >= 55296 && last <= 56319) to -= 1;
+    yield text3.slice(from, to);
+    from = to;
+  }
+}
+
 // src/live.ts
 var PROTOCOLS = {
-  commands: "commands@1",
-  terminal: "pty@1",
+  terminal: "terminal@1",
+  files: "files@1",
   browser: "screencast@1"
 };
-var MAX_EVENTS = 2e3;
-var MAX_SCROLLBACK = 64 * 1024;
-var OUTPUT = 48;
-var INPUT = 48;
-var RESIZE = 49;
-var sockets = new import_websocket_server.default({ noServer: true });
-var pty;
-var loadPty = () => {
-  pty ??= (async () => {
-    const require2 = createRequire3(import.meta.url);
-    let loaded2;
-    try {
-      loaded2 = require2("node-pty");
-    } catch {
-      return "The terminal needs node-pty, which isn't installed with this service.";
-    }
-    const root = dirname3(require2.resolve("node-pty/package.json"));
-    for (const helper of [
-      join4(root, "prebuilds", `${process.platform}-${process.arch}`, "spawn-helper"),
-      join4(root, "build", "Release", "spawn-helper")
-    ])
-      try {
-        if (existsSync(helper) && (statSync2(helper).mode & 73) === 0) chmodSync(helper, 493);
-      } catch {
-        return `The terminal needs ${helper} to be executable, and it isn't.`;
-      }
-    return loaded2;
-  })();
-  return pty;
+var MAX_MESSAGE = 64 * 1024;
+var MAX_BUFFERED3 = 4 * 1024 * 1024;
+var deliver = (ws, message) => {
+  if (ws.bufferedAmount > MAX_BUFFERED3) ws.terminate();
+  else ws.send(JSON.stringify(message));
+};
+var MAX_CMD = 8e3;
+var MAX_WORKDIR = 2e3;
+var SERVERS = {
+  terminal: new import_websocket_server.default({ noServer: true, maxPayload: MAX_MESSAGE }),
+  files: new import_websocket_server.default({ noServer: true, maxPayload: MAX_PART }),
+  browser: new import_websocket_server.default({ noServer: true })
 };
+var MALFORMED = "That isn't a terminal@1 message.";
+var first = (text3, most) => {
+  const [head = ""] = pieces(text3, most);
+  return head;
+};
+function* messages(event) {
+  if (event.type === "start")
+    yield { ...event, cmd: first(event.cmd, MAX_CMD), workdir: first(event.workdir, MAX_WORKDIR) };
+  else if (event.type === "exit") yield event;
+  else for (const text3 of pieces(event.text)) yield { ...event, text: text3 };
+}
 var Live = class {
-  #workspace;
-  #terminal;
-  #events = [];
-  #watchers = /* @__PURE__ */ new Set();
-  #shells = /* @__PURE__ */ new Map();
-  #shell;
-  #scrollback = "";
+  #terminals;
+  #viewers = /* @__PURE__ */ new Set();
   #browser;
-  constructor(exec, workspace, terminal, browser) {
-    this.#workspace = workspace;
-    this.#terminal = terminal && exec !== void 0;
+  #files;
+  /** Whether a person may write files here: not where the agent can only read them. */
+  #writes;
+  constructor(exec, access, browser) {
+    if (exec && access === "terminal") {
+      this.#terminals = exec.terminals;
+      exec.onCommand((event) => {
+        for (const message of messages(event)) for (const ws of this.#viewers) deliver(ws, message);
+      });
+    }
+    this.#files = exec && new FilesLive(exec.files);
+    this.#writes = access !== "read";
     this.#browser = browser;
-    exec?.onCommand((event) => this.#heard(event));
   }
-  async surfaces() {
+  surfaces() {
     const surfaces = [];
-    if (this.#terminal) {
-      const loaded2 = await loadPty();
-      surfaces.push(
-        { surface: "commands", protocol: PROTOCOLS.commands, operate: false },
-        {
-          surface: "terminal",
-          protocol: PROTOCOLS.terminal,
-          operate: true,
-          ...typeof loaded2 === "string" ? { unavailable: loaded2 } : {}
-        }
-      );
-    }
+    if (this.#terminals)
+      surfaces.push({ surface: "terminal", protocol: PROTOCOLS.terminal, operate: true });
+    if (this.#files)
+      surfaces.push({ surface: "files", protocol: PROTOCOLS.files, operate: this.#writes });
     if (this.#browser)
       surfaces.push({ surface: "browser", protocol: PROTOCOLS.browser, operate: true });
     return surfaces;
@@ -66751,95 +67367,71 @@ var Live = class {
   /** Take an upgraded request as a socket on one surface. */
   open(surface, mode, request, socket, head) {
     socket.on("error", () => socket.destroy());
-    sockets.handleUpgrade(request, socket, head, (ws) => {
+    SERVERS[surface].handleUpgrade(request, socket, head, (ws) => {
       ws.on("error", () => ws.terminate());
-      if (surface === "commands") this.#watch(ws);
+      if (surface === "terminal" && this.#terminals) this.#view(ws, mode, this.#terminals);
+      else if (surface === "files" && this.#files) this.#files.open(ws, mode);
       else if (surface === "browser" && this.#browser) this.#browser.open(ws, mode);
-      else if (surface === "terminal") this.#attach(ws, mode).catch(() => ws.terminate());
       else ws.close(1011, `There's no ${surface} here.`);
     });
   }
+  /** The terminals themselves end with the AgentExec that runs them. */
   close() {
     void this.#browser?.close();
-    for (const ws of [...this.#watchers, ...this.#shells.keys()]) ws.close(1001, "It stopped.");
-    this.#shell?.kill();
-    this.#shell = void 0;
-  }
-  #heard(event) {
-    this.#events.push(event);
-    if (this.#events.length > MAX_EVENTS) this.#events.splice(0, this.#events.length - MAX_EVENTS);
-    const message = JSON.stringify(event);
-    for (const ws of this.#watchers) ws.send(message);
-  }
-  /** commands@1: each event as a JSON message, those before it first. Nothing comes back. */
-  #watch(ws) {
-    for (const event of this.#events) ws.send(JSON.stringify(event));
-    this.#watchers.add(ws);
-    ws.on("close", () => this.#watchers.delete(ws));
-  }
-  /** pty@1: one shell for the computer, shared by every socket on it. */
-  async #attach(ws, mode) {
-    const loaded2 = await loadPty();
-    if (typeof loaded2 === "string") return ws.close(1011, loaded2);
-    if (!this.#shell) {
-      this.#scrollback = "";
-      let shell;
+    this.#files?.close();
+    for (const ws of this.#viewers) ws.close(1001, "It stopped.");
+  }
+  /**
+   * terminal@1: every terminal on one socket. Those already here come first, each with the end of
+   * what it wrote, and then each event as it happens. Listing and joining are one step, so nothing
+   * falls between them.
+   */
+  #view(ws, mode, terminals) {
+    for (const { id, by, cmd, workdir, tty, at, output: output2, exitCode, endedAt } of terminals.list()) {
+      const events = [{ type: "start", id, by, cmd, workdir, tty, at }];
+      if (output2) events.push({ type: "output", id, text: output2 });
+      if (exitCode !== void 0 && endedAt)
+        events.push({ type: "exit", id, exitCode, at: endedAt });
+      for (const event of events)
+        for (const message of messages(event)) ws.send(JSON.stringify(message));
+    }
+    this.#viewers.add(ws);
+    ws.on("close", () => this.#viewers.delete(ws));
+    if (mode !== "operate") return;
+    const refuse = (why) => deliver(ws, { type: "refused", message: reason2(why) });
+    ws.on("message", (data) => {
       try {
-        shell = loaded2.spawn(process.env.SHELL || "/bin/bash", ["-l"], {
-          name: "xterm-256color",
-          cols: 80,
-          rows: 24,
-          cwd: this.#workspace,
-          env: process.env
-        });
+        const sent = JSON.parse(data.toString()) ?? {};
+        const { type, id, text: text3 } = sent;
+        const [columns, rows] = [sent.columns, sent.rows];
+        if (type === "open") terminals.open({ columns, rows });
+        else if (typeof id !== "string") throw new Error(MALFORMED);
+        else if (type === "input" && typeof text3 === "string") terminals.write(id, text3);
+        else if (type === "resize") terminals.resize(id, columns, rows);
+        else if (type === "stop") terminals.stop(id).catch(refuse);
+        else throw new Error(MALFORMED);
       } catch (error62) {
-        return ws.close(1011, `The shell didn't start: ${String(error62)}`.slice(0, 120));
+        refuse(error62 instanceof SyntaxError ? MALFORMED : error62);
       }
-      shell.onData((data) => {
-        this.#scrollback = (this.#scrollback + data).slice(-MAX_SCROLLBACK);
-        const frame = Buffer.concat([Buffer.from([OUTPUT]), Buffer.from(data)]);
-        for (const client of this.#shells.keys()) client.send(frame);
-      });
-      shell.onExit(() => {
-        if (this.#shell !== shell) return;
-        this.#shell = void 0;
-        for (const client of this.#shells.keys()) client.close(1e3, "The shell exited.");
-      });
-      this.#shell = shell;
-    }
-    if (this.#scrollback)
-      ws.send(Buffer.concat([Buffer.from([OUTPUT]), Buffer.from(this.#scrollback)]));
-    this.#shells.set(ws, mode);
-    ws.on("close", () => this.#shells.delete(ws));
-    ws.on("message", (data, binary) => {
-      const frame = binary ? data : Buffer.from(data);
-      if (mode !== "operate" || frame.length === 0 || !this.#shell) return;
-      if (frame[0] === INPUT) this.#shell.write(frame.subarray(1).toString());
-      else if (frame[0] === RESIZE)
-        try {
-          const { columns, rows } = JSON.parse(frame.subarray(1).toString());
-          if (columns > 0 && rows > 0) this.#shell.resize(Math.floor(columns), Math.floor(rows));
-        } catch {
-        }
     });
   }
 };
 
 // src/store.ts
-import { createHash, randomBytes as randomBytes3, timingSafeEqual } from "node:crypto";
-import { chmodSync as chmodSync2, mkdirSync, readFileSync as readFileSync2, renameSync, writeFileSync } from "node:fs";
+import { createHash, randomBytes as randomBytes4, timingSafeEqual } from "node:crypto";
+import { chmodSync, mkdirSync, readFileSync as readFileSync2, renameSync, writeFileSync } from "node:fs";
 import { join as join5 } from "node:path";
-var newToken = () => randomBytes3(32).toString("base64url");
+var newToken = () => randomBytes4(32).toString("base64url");
 var digestOf = (token) => createHash("sha256").update(token).digest("hex");
 var sameToken = (token, digest) => timingSafeEqual(Buffer.from(digestOf(token), "hex"), Buffer.from(digest, "hex"));
-function writePrivate(file2, text2) {
-  writeFileSync(`${file2}.tmp`, text2, { mode: 384, flush: true });
+function writePrivate(file2, text3) {
+  writeFileSync(`${file2}.tmp`, text3, { mode: 384, flush: true });
   renameSync(`${file2}.tmp`, file2);
-  chmodSync2(file2, 384);
+  chmodSync(file2, 384);
 }
 var privateFolder = (dir) => {
   mkdirSync(dir, { recursive: true, mode: 448 });
-  chmodSync2(dir, 448);
+  chmodSync(dir, 448);
   return dir;
 };
 function controlToken(data) {
@@ -66863,6 +67455,33 @@ var ApiError = class extends Error {
     this.status = status;
   }
 };
+var pty;
+var loadPty = () => {
+  pty ??= (async () => {
+    const fails = (why) => () => {
+      throw new Error(why);
+    };
+    const require3 = createRequire3(import.meta.url);
+    let loaded2;
+    try {
+      loaded2 = require3("node-pty");
+    } catch {
+      return fails("node-pty isn't installed with this service.");
+    }
+    const root = dirname3(require3.resolve("node-pty/package.json"));
+    for (const helper of [
+      join6(root, "prebuilds", `${process.platform}-${process.arch}`, "spawn-helper"),
+      join6(root, "build", "Release", "spawn-helper")
+    ])
+      try {
+        if (existsSync(helper) && (statSync2(helper).mode & 73) === 0) chmodSync2(helper, 493);
+      } catch {
+        return fails(`${helper} has to be executable, and it isn't.`);
+      }
+    return loaded2.spawn;
+  })();
+  return pty;
+};
 var ProcessRuntime = class {
   isolation = "none";
   #config;
@@ -66878,7 +67497,11 @@ var ProcessRuntime = class {
   async start(spec, folder, events) {
     let exec;
     if (spec.access !== "none")
-      exec = createAgentExec({ workspace: spec.workspace, level: spec.access });
+      exec = createAgentExec({
+        workspace: spec.workspace,
+        level: spec.access,
+        pty: await loadPty()
+      });
     let browser;
     let browserDown = false;
     if (spec.browser) {
@@ -66906,10 +67529,19 @@ var ProcessRuntime = class {
       browserLive = new BrowserLive(browser.endpoint);
       browser.gate = browserLive;
     }
-    const live = new Live(exec, spec.workspace, spec.access === "terminal", browserLive);
+    const live = new Live(exec, spec.access, browserLive);
+    const surfaces = live.surfaces();
     return {
       browserTools: browser?.tools ?? [],
-      surfaces: await live.surfaces(),
+      /** As they are now: a browser that has stopped can't be opened, and says so. */
+      get surfaces() {
+        return surfaces.map(
+          (one) => one.surface === "browser" && browserDown ? {
+            ...one,
+            unavailable: "Its browser has stopped. Stop the computer and start it again."
+          } : one
+        );
+      },
       openLive: async (surface, mode, request, socket, head) => live.open(surface, mode, request, socket, head),
       handle: async (endpoint, request, response) => {
         if (endpoint === "computer") return exec.handle(request, response);
@@ -66944,8 +67576,8 @@ async function serveInside(options) {
       log: (line) => process.stdout.write(`${line}
 `),
       // The service sees the container end, and shows the computer as failed.
-      failed: (reason2) => {
-        process.stderr.write(`${reason2}
+      failed: (reason3) => {
+        process.stderr.write(`${reason3}
 `);
         process.exit(1);
       }
@@ -66974,7 +67606,7 @@ async function serveInside(options) {
     socket.on("error", () => socket.destroy());
     const given = /^Bearer (\S+)$/.exec(request.headers.authorization ?? "")?.[1];
     const url3 = new URL(request.url ?? "/", "http://localhost");
-    const surface = /^\/live\/(commands|terminal|browser)$/.exec(url3.pathname)?.[1];
+    const surface = /^\/live\/(terminal|files|browser)$/.exec(url3.pathname)?.[1];
     const mode = url3.searchParams.get("mode");
     if (!given || !sameToken(given, digest) || !surface || mode !== "watch" && mode !== "operate")
       return void socket.end("HTTP/1.1 401 Unauthorized\r\nConnection: close\r\n\r\n");
@@ -66989,7 +67621,7 @@ async function serveInside(options) {
 }
 
 // src/container.ts
-var run2 = promisify(execFile);
+var run = promisify(execFile);
 var START_MS2 = 6e4;
 var STOP_SECONDS = "5";
 var NOT_FORWARDED = /* @__PURE__ */ new Set([
@@ -67003,7 +67635,7 @@ var NOT_FORWARDED = /* @__PURE__ */ new Set([
 ]);
 async function docker(args, env = process.env) {
   try {
-    return (await run2("docker", args, { env, maxBuffer: 16 * 1024 * 1024 })).stdout.trim();
+    return (await run("docker", args, { env, maxBuffer: 16 * 1024 * 1024 })).stdout.trim();
   } catch (error62) {
     const { stderr, message } = error62;
     throw new Error(stderr?.trim() || message);
@@ -67018,7 +67650,7 @@ var UPGRADE_HEADERS = [
   "sec-websocket-protocol"
 ];
 var nameOf = (id) => `agentcomputer-${id}`;
-var sleep4 = (ms) => new Promise((done) => setTimeout(done, ms));
+var sleep5 = (ms) => new Promise((done) => setTimeout(done, ms));
 var ContainerRuntime = class {
   isolation = "container";
   #image;
@@ -67130,7 +67762,16 @@ var ContainerRuntime = class {
       throw error62;
     }
     return {
-      ...ready,
+      browserTools: ready.browserTools,
+      /** As they are now: nothing of a container that has stopped can be opened. */
+      get surfaces() {
+        return ready.surfaces.map(
+          (one) => ended ? {
+            ...one,
+            unavailable: "Its container has stopped. Stop the computer and start it again."
+          } : one
+        );
+      },
       stop,
       openLive: async (surface, mode, request, socket, head) => pipeUpgrade(
         Number(port),
@@ -67155,7 +67796,7 @@ var ContainerRuntime = class {
         if (answer.ok) return await answer.json();
       } catch {
       }
-      await sleep4(100);
+      await sleep5(100);
     }
     throw new Error("Its container didn't start. Its logs say why.");
   }
@@ -67212,7 +67853,7 @@ async function forward(url3, authorization, request, response) {
 }
 
 // src/handlers.ts
-var VERSION2 = "0.0.7";
+var VERSION2 = "0.0.9";
 function createHandlers(computers) {
   return {
     getInfo: async () => ({ version: VERSION2, isolation: computers.isolation }),
@@ -67761,9 +68402,9 @@ var Endpoint = class {
   async #call(name, args) {
     const client = await this.#connected();
     const result = await client.callTool({ name, arguments: args });
-    const text2 = result.content.map((block) => block.text ?? "").join("");
-    if (result.isError) throw new ComputerError(400, text2);
-    return { text: text2, structured: result.structuredContent };
+    const text3 = result.content.map((block) => block.text ?? "").join("");
+    if (result.isError) throw new ComputerError(400, text3);
+    return { text: text3, structured: result.structuredContent };
   }
   async text(name, args) {
     return (await this.#call(name, args)).text;
@@ -67794,32 +68435,30 @@ async function openLive(session, onMessage) {
   ws.addEventListener("message", (event) => onMessage(event.data));
   return { ws, closed };
 }
-var INPUT2 = 48;
-var RESIZE2 = 49;
-var Pty = class {
+var Terminals = class {
   #open;
-  constructor(open3) {
-    this.#open = open3;
+  constructor(open4) {
+    this.#open = open4;
   }
-  /** Attach to its shell, starting one if none is running. Every attachment shares it. */
+  /**
+   * Each terminal as it starts, writes and exits: those already there first, each with the end of
+   * what it wrote. Operating, the default, can also open a shell and act on any of them.
+   */
   async connect(opts) {
-    const mode = opts.mode ?? "operate";
-    const decoder = new TextDecoder();
-    const { ws, closed } = await openLive(await this.#open("terminal", mode), (data) => {
-      if (typeof data === "string") return;
-      const frame = new Uint8Array(data);
-      if (frame[0] === INPUT2) opts.onData(decoder.decode(frame.subarray(1), { stream: true }));
-    });
-    const send2 = (type, text2) => {
-      const body = new TextEncoder().encode(text2);
-      const frame = new Uint8Array(body.length + 1);
-      frame[0] = type;
-      frame.set(body, 1);
-      ws.send(frame);
-    };
+    const { ws, closed } = await openLive(
+      await this.#open("terminal", opts.mode ?? "operate"),
+      (data) => {
+        if (typeof data === "string") opts.onEvent(JSON.parse(data));
+      }
+    );
+    const send2 = (input2) => ws.send(JSON.stringify(input2));
     return {
-      sendInput: (data) => send2(INPUT2, data),
-      resize: (columns, rows) => send2(RESIZE2, JSON.stringify({ columns, rows })),
+      openShell: (columns, rows) => send2({ type: "open", columns, rows }),
+      sendInput: (id, text3) => {
+        for (const piece of pieces(text3)) send2({ type: "input", id, text: piece });
+      },
+      resize: (id, columns, rows) => send2({ type: "resize", id, columns, rows }),
+      stop: (id) => send2({ type: "stop", id }),
       close: () => ws.close(),
       closed
     };
@@ -67827,17 +68466,8 @@ var Pty = class {
 };
 var Commands = class {
   #endpoint;
-  #open;
-  constructor(endpoint, open3) {
+  constructor(endpoint) {
     this.#endpoint = endpoint;
-    this.#open = open3;
-  }
-  /** Each of the agent's commands as it runs: the ones already heard first, then as they come. */
-  async watch(onEvent) {
-    const { ws, closed } = await openLive(await this.#open("commands", "watch"), (data) => {
-      if (typeof data === "string") onEvent(JSON.parse(data));
-    });
-    return { close: () => ws.close(), closed };
   }
   async run(cmd, opts = {}) {
     let answer = await this.#endpoint.command("exec_command", {
@@ -67897,16 +68527,16 @@ var Files = class {
   }
   /** A folder's entries, the first thousand. */
   async list(path = ".") {
-    const text2 = await this.#endpoint.text("list", { path });
-    return text2.split("\n").filter((line) => line.endsWith("/") || line.includes("	")).map((line) => {
+    const text3 = await this.#endpoint.text("list", { path });
+    return text3.split("\n").filter((line) => line.endsWith("/") || line.includes("	")).map((line) => {
       const [name = "", size] = line.split("	");
       return name.endsWith("/") ? { name: name.slice(0, -1), type: "dir" } : { name, type: "file", size: Number(size) };
     });
   }
   /** Lines matching text under a folder, as `path:line:text`. */
   async search(pattern, opts = {}) {
-    const text2 = await this.#endpoint.text("search", { pattern, ...opts });
-    return text2 ? text2.split("\n") : [];
+    const text3 = await this.#endpoint.text("search", { pattern, ...opts });
+    return text3 ? text3.split("\n") : [];
   }
 };
 var pathOf = (computerID) => ({ params: { path: { computerID } } });
@@ -67914,7 +68544,7 @@ var Computer = class _Computer {
   computerID;
   commands;
   files;
-  pty;
+  terminals;
   #connection;
   #token;
   #computer;
@@ -67925,9 +68555,8 @@ var Computer = class _Computer {
     this.#token = token;
     this.#urls = info.endpoints;
     this.#computer = new Endpoint(info.endpoints.computer, token);
-    const open3 = (surface, mode) => this.liveSession(surface, mode);
-    this.commands = new Commands(this.#computer, open3);
-    this.pty = new Pty(open3);
+    this.commands = new Commands(this.#computer);
+    this.terminals = new Terminals((surface, mode) => this.liveSession(surface, mode));
     this.files = new Files(this.#computer);
   }
   static async create(opts) {
@@ -71509,7 +72138,7 @@ var REQUEST_STATE_ONLY_LEG_PACING_MS3 = 250;
 function inputRequiredRoundsExceededMessage3(method, maxRounds) {
   return `Multi-round-trip request '${method}' still required input after ${maxRounds} rounds (inputRequired.maxRounds)`;
 }
-function sleep5(ms, signal) {
+function sleep6(ms, signal) {
   return new Promise((resolve6, reject) => {
     if (signal?.aborted) {
       reject(signal.reason instanceof SdkError3 ? signal.reason : new SdkError3(SdkErrorCode3.RequestTimeout, String(signal.reason)));
@@ -71533,7 +72162,7 @@ function linkedRoundAbort3(outer) {
   if (outer?.aborted) controller.abort(outer.reason);
   return {
     signal: controller.signal,
-    abort: (reason2) => controller.abort(reason2),
+    abort: (reason3) => controller.abort(reason3),
     dispose: () => outer?.removeEventListener("abort", onOuterAbort)
   };
 }
@@ -72328,8 +72957,8 @@ var Protocol3 = class {
         return;
       }
       if (options?.signal?.aborted) {
-        const reason2 = options.signal.reason;
-        throw reason2 instanceof SdkError3 ? reason2 : new SdkError3(SdkErrorCode3.RequestTimeout, String(reason2));
+        const reason3 = options.signal.reason;
+        throw reason3 instanceof SdkError3 ? reason3 : new SdkError3(SdkErrorCode3.RequestTimeout, String(reason3));
       }
       const requestAbort = codec2.era === MODERN_WIRE_REVISION3 && this._transport.hasPerRequestStream === true ? new AbortController() : void 0;
       const messageId = this._requestMessageId++;
@@ -72351,7 +72980,7 @@ var Protocol3 = class {
       }
       const outbound = this._envelopeOutbound(jsonrpcRequest);
       let responseReceived = false;
-      const cancel = (reason2) => {
+      const cancel = (reason3) => {
         if (responseReceived) return;
         this._progressHandlers.delete(messageId);
         if (requestAbort === void 0) {
@@ -72360,7 +72989,7 @@ var Protocol3 = class {
             method: "notifications/cancelled",
             params: {
               requestId: messageId,
-              reason: String(reason2)
+              reason: String(reason3)
             }
           }), {
             relatedRequestId,
@@ -72368,7 +72997,7 @@ var Protocol3 = class {
             onresumptiontoken
           }).catch((error62) => this._onerror(/* @__PURE__ */ new Error(`Failed to send cancellation: ${error62}`)));
         } else requestAbort.abort();
-        reject(reason2 instanceof SdkError3 ? reason2 : new SdkError3(SdkErrorCode3.RequestTimeout, String(reason2)));
+        reject(reason3 instanceof SdkError3 ? reason3 : new SdkError3(SdkErrorCode3.RequestTimeout, String(reason3)));
       };
       this._responseHandlers.set(messageId, (response) => {
         if (options?.signal?.aborted) return;
@@ -75482,8 +76111,8 @@ var require_utils3 = /* @__PURE__ */ __commonJSMin3(((exports, module) => {
     }
     if (bestLength < 2) return hextets.join(":");
     const head = hextets.slice(0, bestStart).join(":");
-    const tail = hextets.slice(bestStart + bestLength).join(":");
-    return head + "::" + tail;
+    const tail2 = hextets.slice(bestStart + bestLength).join(":");
+    return head + "::" + tail2;
   }
   function normalizeIPv6Address(input2) {
     const compression = input2.indexOf("::");
@@ -76706,7 +77335,7 @@ var require_core$33 = /* @__PURE__ */ __commonJSMin3(((exports) => {
     }
     errorsText(errors = this.errors, { separator = ", ", dataVar = "data" } = {}) {
       if (!errors || errors.length === 0) return "No errors";
-      return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text2, msg) => text2 + separator + msg);
+      return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text3, msg) => text3 + separator + msg);
     }
     $dataMetaSchema(metaSchema, keywordsJsonPointers) {
       const rules = this.RULES.all;
@@ -80506,7 +81135,7 @@ var LegacyInputRequiredShim2 = class {
         } finally {
           roundAbort.dispose();
         }
-      } else await sleep5(REQUEST_STATE_ONLY_LEG_PACING_MS3, outerSignal);
+      } else await sleep6(REQUEST_STATE_ONLY_LEG_PACING_MS3, outerSignal);
       let ctxNext = {
         ...ctx,
         mcpReq: {
@@ -81852,21 +82481,21 @@ async function readRequestBody2(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_SIZ
   const reader = request.body.getReader();
   const decoder = new TextDecoder();
   let received = 0;
-  let text2 = "";
+  let text3 = "";
   try {
     for (; ; ) {
       const { done, value } = await reader.read();
       if (done) break;
       received += value.byteLength;
       if (received > maxBytes) return { tooLarge: true };
-      text2 += decoder.decode(value, { stream: true });
+      text3 += decoder.decode(value, { stream: true });
     }
   } finally {
     reader.releaseLock();
   }
   return {
     tooLarge: false,
-    text: text2 + decoder.decode()
+    text: text3 + decoder.decode()
   };
 }
 var WebStandardStreamableHTTPServerTransport2 = class {
@@ -81960,9 +82589,9 @@ var WebStandardStreamableHTTPServerTransport2 = class {
       }
     });
   }
-  async _checkScopeChallenge(messages, authInfo) {
+  async _checkScopeChallenge(messages2, authInfo) {
     if (!this._scopeChallengeResolver) return;
-    const challenge = await findScopeChallenge2(messages.filter((message) => isJSONRPCRequest3(message)), authInfo, this._scopeChallengeResolver);
+    const challenge = await findScopeChallenge2(messages2.filter((message) => isJSONRPCRequest3(message)), authInfo, this._scopeChallengeResolver);
     return challenge === void 0 ? void 0 : createScopeChallengeResponse2(challenge, scopeChallengeResourceMetadataUrl2(authInfo));
   }
   /**
@@ -82260,21 +82889,21 @@ data:
         this.onerror?.(/* @__PURE__ */ new Error(`Invalid Request: Batch must not exceed ${MAX_BATCH_SIZE2} messages`));
         return this.createJsonErrorResponse(400, -32600, `Invalid Request: Batch must not exceed ${MAX_BATCH_SIZE2} messages`);
       }
-      let messages;
+      let messages2;
       try {
-        messages = Array.isArray(rawMessage) ? rawMessage.map((msg) => JSONRPCMessageSchema.parse(msg)) : [JSONRPCMessageSchema.parse(rawMessage)];
+        messages2 = Array.isArray(rawMessage) ? rawMessage.map((msg) => JSONRPCMessageSchema.parse(msg)) : [JSONRPCMessageSchema.parse(rawMessage)];
       } catch (error62) {
         this.onerror?.(error62);
         return this.createJsonErrorResponse(400, -32700, "Parse error: Invalid JSON-RPC message");
       }
       if (this._closed) return this.createJsonErrorResponse(404, -32001, "Session not found");
-      const isInitializationRequest = messages.some((element) => isInitializeRequest3(element));
+      const isInitializationRequest = messages2.some((element) => isInitializeRequest3(element));
       if (isInitializationRequest) {
         if (this._initialized && this.sessionId !== void 0) {
           this.onerror?.(/* @__PURE__ */ new Error("Invalid Request: Server already initialized"));
           return this.createJsonErrorResponse(400, -32600, "Invalid Request: Server already initialized");
         }
-        if (messages.length > 1) {
+        if (messages2.length > 1) {
           this.onerror?.(/* @__PURE__ */ new Error("Invalid Request: Only one initialization request is allowed"));
           return this.createJsonErrorResponse(400, -32600, "Invalid Request: Only one initialization request is allowed");
         }
@@ -82291,21 +82920,21 @@ data:
       if (this._closed) return this.createJsonErrorResponse(404, -32001, "Session not found");
       let scopeChallengeResponse;
       try {
-        scopeChallengeResponse = await this._checkScopeChallenge(messages, options?.authInfo);
+        scopeChallengeResponse = await this._checkScopeChallenge(messages2, options?.authInfo);
       } catch (error62) {
         this.onerror?.(error62);
         return this.createJsonErrorResponse(500, -32603, "Internal server error");
       }
       if (scopeChallengeResponse) return scopeChallengeResponse;
-      if (!messages.some((element) => isJSONRPCRequest3(element))) {
-        for (const message of messages) this.onmessage?.(message, {
+      if (!messages2.some((element) => isJSONRPCRequest3(element))) {
+        for (const message of messages2) this.onmessage?.(message, {
           authInfo: options?.authInfo,
           request
         });
         return new Response(null, { status: 202 });
       }
       const streamId = crypto.randomUUID();
-      const initRequest = messages.find((m) => isInitializeRequest3(m));
+      const initRequest = messages2.find((m) => isInitializeRequest3(m));
       const clientProtocolVersion = initRequest ? initRequest.params.protocolVersion : req.headers.get("mcp-protocol-version") ?? DEFAULT_NEGOTIATED_PROTOCOL_VERSION;
       if (this._enableJsonResponse) return new Promise((resolve6) => {
         this._streamMapping.set(streamId, {
@@ -82314,8 +82943,8 @@ data:
             this._streamMapping.delete(streamId);
           }
         });
-        for (const message of messages) if (isJSONRPCRequest3(message)) this._requestToStreamMapping.set(message.id, streamId);
-        for (const message of messages) this.onmessage?.(message, {
+        for (const message of messages2) if (isJSONRPCRequest3(message)) this._requestToStreamMapping.set(message.id, streamId);
+        for (const message of messages2) this.onmessage?.(message, {
           authInfo: options?.authInfo,
           request
         });
@@ -82339,7 +82968,7 @@ data:
         "X-Accel-Buffering": "no"
       };
       if (this.sessionId !== void 0) headers["mcp-session-id"] = this.sessionId;
-      for (const message of messages) if (isJSONRPCRequest3(message)) {
+      for (const message of messages2) if (isJSONRPCRequest3(message)) {
         this._streamMapping.set(streamId, {
           controller: streamController,
           encoder,
@@ -82355,7 +82984,7 @@ data:
         this._requestToStreamMapping.set(message.id, streamId);
       }
       await this.writePrimingEvent(streamController, encoder, streamId, clientProtocolVersion);
-      for (const message of messages) {
+      for (const message of messages2) {
         let closeSSEStream;
         let closeStandaloneSSEStream;
         if (isJSONRPCRequest3(message) && this._eventStore && this.supportsEmptySSEData(clientProtocolVersion)) {
@@ -82950,8 +83579,8 @@ var readRawBodyIfAvailable2 = (request) => {
 };
 var normalizeAbortError2 = (request, incoming) => {
   if (incoming.errored) return incoming.errored;
-  const reason2 = request[abortReasonKey2];
-  if (reason2 !== void 0) return reason2 instanceof Error ? reason2 : new Error(String(reason2));
+  const reason3 = request[abortReasonKey2];
+  if (reason3 !== void 0) return reason3 instanceof Error ? reason3 : new Error(String(reason3));
   return /* @__PURE__ */ new Error("Client connection prematurely closed.");
 };
 var readBodyDirect2 = (request) => {
@@ -83045,10 +83674,10 @@ var requestPrototype2 = {
   get headers() {
     return this[headersKey2] ||= newHeadersFromIncoming2(this[incomingKey2]);
   },
-  [abortRequest2](reason2) {
-    if (this[abortReasonKey2] === void 0) this[abortReasonKey2] = reason2;
+  [abortRequest2](reason3) {
+    if (this[abortReasonKey2] === void 0) this[abortReasonKey2] = reason3;
     const abortController = this[abortControllerKey2];
-    if (abortController && !abortController.signal.aborted) abortController.abort(reason2);
+    if (abortController && !abortController.signal.aborted) abortController.abort(reason3);
   },
   [getAbortController2]() {
     this[abortControllerKey2] ||= new AbortController();
@@ -83692,8 +84321,8 @@ var upgradeWebSocket2 = defineWebSocketHelper2(async (c, events, options) => {
     ws.on("message", bufferMessage);
     const ctx = {
       binaryType: "arraybuffer",
-      close(code, reason2) {
-        ws.close(code, reason2);
+      close(code, reason3) {
+        ws.close(code, reason3);
       },
       protocol: ws.protocol,
       raw: ws,
@@ -83723,11 +84352,11 @@ var upgradeWebSocket2 = defineWebSocketHelper2(async (c, events, options) => {
     ws.on("message", (data, isBinary) => {
       handleMessage(data, isBinary);
     });
-    ws.on("close", (code, reason2) => {
+    ws.on("close", (code, reason3) => {
       try {
         events?.onClose?.(new CloseEvent2("close", {
           code,
-          reason: reason2.toString()
+          reason: reason3.toString()
         }), ctx);
       } catch (e) {
         (options?.onError ?? console.error)(e);
@@ -83862,13 +84491,13 @@ var NodeStreamableHTTPServerTransport2 = class {
 };
 
 // src/computers.ts
-import { randomBytes as randomBytes4 } from "node:crypto";
+import { randomBytes as randomBytes5 } from "node:crypto";
 import { appendFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync4, rmSync as rmSync2, statSync as statSync3 } from "node:fs";
 import { isAbsolute, join as join9, resolve as resolve4 } from "node:path";
 var TOOLS = {
   read: ["read", "list", "search"],
   files: ["read", "list", "search", "edit"],
-  terminal: ["read", "list", "search", "edit", "exec_command", "write_stdin"]
+  terminal: ["read", "list", "search", "edit", "exec_command", "write_stdin", "list_sessions"]
 };
 var MAX_LOG = 256 * 1024;
 var MAX_TIMER_S = 2e6;
@@ -83924,7 +84553,7 @@ var Computers = class {
       if (!folder) throw new ApiError(400, `There's no folder at ${input2.workspace}.`);
       workspace = resolve4(input2.workspace);
     }
-    const id = `c_${randomBytes4(9).toString("hex")}`;
+    const id = `c_${randomBytes5(9).toString("hex")}`;
     const token = newToken();
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const stored = {
@@ -84023,12 +84652,12 @@ var Computers = class {
   }
   logs(id) {
     this.#found(id);
-    let text2 = "";
+    let text3 = "";
     try {
-      text2 = readFileSync4(this.#logFile(id), "utf8");
+      text3 = readFileSync4(this.#logFile(id), "utf8");
     } catch {
     }
-    return text2.split("\n").filter(Boolean).map((entry) => ({
+    return text3.split("\n").filter(Boolean).map((entry) => ({
       timestamp: entry.slice(0, entry.indexOf(" ")),
       line: entry.slice(entry.indexOf(" ") + 1)
     }));
@@ -84060,7 +84689,7 @@ var Computers = class {
     const now = Date.now();
     for (const [key, ticket2] of this.#tickets)
       if (ticket2.expiresAt <= now) this.#tickets.delete(key);
-    const ticket = `l_${randomBytes4(24).toString("base64url")}`;
+    const ticket = `l_${randomBytes5(24).toString("base64url")}`;
     const expiresAt = now + TICKET_MS;
     this.#tickets.set(ticket, { computerID: id, surface, mode, expiresAt });
     return {
@@ -84144,9 +84773,9 @@ var Computers = class {
       this.#folder(stored.id),
       {
         log: (line) => this.#log(stored.id, line),
-        failed: (reason2) => {
+        failed: (reason3) => {
           live.failed = true;
-          this.#log(stored.id, reason2);
+          this.#log(stored.id, reason3);
         }
       }
     );
@@ -84187,7 +84816,7 @@ var OPENAPI = {
   "openapi": "3.1.0",
   "info": {
     "title": "AgentComputer",
-    "version": "0.0.7",
+    "version": "0.0.9",
     "description": "Computers for agents. This file is the source of truth: the HTTP API, the MCP control tools and the SDK are all generated from it. An operation with `x-mcp-tool` is also an MCP tool of that name.",
     "license": {
       "name": "Apache-2.0",
@@ -84508,7 +85137,7 @@ var OPENAPI = {
       "post": {
         "operationId": "createLiveSession",
         "x-mcp-tool": "computer_live",
-        "summary": "A one-time ticket to watch or operate one of its surfaces live: the agent's commands as they run, or a shell of your own. Open its url as a WebSocket within 60 seconds.",
+        "summary": "A one-time ticket to watch or operate one of its surfaces live: its terminals, its files, or its browser. Open its url as a WebSocket within 60 seconds.",
         "requestBody": {
           "required": true,
           "content": {
@@ -84639,7 +85268,7 @@ var OPENAPI = {
           "files",
           "terminal"
         ],
-        "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command and write_stdin. Below terminal, the browser's code-running tool is hidden."
+        "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command, write_stdin and list_sessions. Below terminal, the browser's code-running tool is hidden."
       },
       "ComputerState": {
         "type": "string",
@@ -84847,11 +85476,11 @@ var OPENAPI = {
       "Surface": {
         "type": "string",
         "enum": [
-          "commands",
           "terminal",
+          "files",
           "browser"
         ],
-        "description": "commands: the agent's commands as they run, read-only, in commands@1. terminal: a shell of your own in its workspace, as its user, in pty@1. browser: its browser, in screencast@1: binary messages are JPEG frames of the page shown, text messages are ScreencastEvent one way and ScreencastInput the other. Opening it to operate makes you the driver: the agent's browser calls wait up to 25 seconds while you are, then answer that a person has or had it. You stop being the driver when you send release, close the socket, or send nothing for 60 seconds, and sending input takes it again."
+        "description": "terminal: every terminal on it, the agent's commands and a person's shells alike, on one socket in terminal@1: text messages are TerminalEvent one way and TerminalInput the other. Watching reads them all; operating also opens a shell, types into any of them, the agent's included, sizes and stops them. files: its workspace's files, in files@1: text messages are FilesRequest one way and FilesAnswer the other, and a file's bytes travel as binary messages of at most 1,048,576 bytes. Watching lists and reads; operating also writes, which a computer with read access doesn't offer. browser: its browser, in screencast@1: binary messages are JPEG frames of the page shown, text messages are ScreencastEvent one way and ScreencastInput the other. Nobody waits for anybody: the agent's tools and a person's input act on the same browser at once. The page shown is each socket's own. A socket is shown each new tab as it opens, until it sends a tab input to show or open one; from then its page changes only when that page closes."
       },
       "LiveMode": {
         "type": "string",
@@ -84859,7 +85488,7 @@ var OPENAPI = {
           "watch",
           "operate"
         ],
-        "description": "In watch, what you send is dropped."
+        "description": "In watch you see and don't act: what you send is dropped, except that a files socket may still ask to list, to read and for what changed."
       },
       "SurfaceInfo": {
         "type": "object",
@@ -84882,8 +85511,7 @@ var OPENAPI = {
           },
           "unavailable": {
             "type": "string",
-            "description": "Why it can't be opened here",
-            "if it can't.": null
+            "description": "Why it can't be opened now, if it can't."
           }
         }
       },
@@ -84942,7 +85570,7 @@ var OPENAPI = {
         "oneOf": [
           {
             "type": "object",
-            "description": "The open tabs, and which one the frames are of, sent again whenever a tab opens, closes, navigates or changes its title.",
+            "description": "The open tabs, and which one this socket's frames are of, sent again whenever a tab opens, closes, navigates or changes its title, or the socket is shown another.",
             "required": [
               "type",
               "tabs",
@@ -85090,30 +85718,6 @@ var OPENAPI = {
                 }
               }
             }
-          },
-          {
-            "type": "object",
-            "description": "Who holds the browser, and whether the agent is waiting for it.",
-            "required": [
-              "type",
-              "you",
-              "held",
-              "agentWaiting"
-            ],
-            "properties": {
-              "type": {
-                "const": "driver"
-              },
-              "you": {
-                "type": "boolean"
-              },
-              "held": {
-                "type": "boolean"
-              },
-              "agentWaiting": {
-                "type": "boolean"
-              }
-            }
           }
         ]
       },
@@ -85276,6 +85880,7 @@ var OPENAPI = {
           },
           {
             "type": "object",
+            "description": "Show this socket another tab, open one and show it, or close one. After show or open, the socket's page is its own and no longer follows new tabs.",
             "required": [
               "type",
               "action"
@@ -85312,20 +85917,533 @@ var OPENAPI = {
               },
               "to": {
                 "type": "string",
-                "description": "A URL",
-                "or back": null,
-                "forward or reload.": null
+                "description": "A URL, or back, forward or reload."
+              }
+            }
+          }
+        ]
+      },
+      "TerminalEvent": {
+        "description": "What the service sends on a terminal@1 socket, as JSON text, no message over 65,536 bytes. A terminal is a command the agent started or a shell a person opened; its id is the session id the agent's tools use. A new socket is first sent, for each terminal already there, the oldest first, its start, the end of what it wrote (its last 65,536 characters), and its exit if it has ended; then each event as it happens, with nothing to mark where the first ends. The last 64 that ended are among those already there, and one that leaves that list is not told. A character here is a UTF-16 unit. A socket with more than 4 MiB still to be sent to it is closed, with no close frame (1006): one that has stopped reading, or one that is reading while a terminal writes tens of megabytes at once. It isn't an error. Opened again, it is sent every terminal afresh, with the last 65,536 characters each wrote, in place of whatever it held.",
+        "oneOf": [
+          {
+            "type": "object",
+            "description": "A terminal began.",
+            "required": [
+              "type",
+              "id",
+              "by",
+              "cmd",
+              "workdir",
+              "tty",
+              "at"
+            ],
+            "properties": {
+              "type": {
+                "const": "start"
+              },
+              "id": {
+                "type": "string"
+              },
+              "by": {
+                "type": "string",
+                "enum": [
+                  "agent",
+                  "person"
+                ],
+                "description": "The way in it came: agent through a tool, person through this surface."
+              },
+              "cmd": {
+                "type": "string",
+                "description": "Its command, the first 8,000 characters of it."
+              },
+              "workdir": {
+                "type": "string",
+                "description": "Its folder, the first 2,000 characters of it."
+              },
+              "tty": {
+                "type": "boolean",
+                "description": "Whether it is on a terminal device, as a person's shell is. One that isn't, as the agent's commands aren't, echoes nothing typed into it and wants a line feed for Enter. Nothing tells the size of one that is."
+              },
+              "at": {
+                "type": "string",
+                "format": "date-time"
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "What it wrote, as it writes: 10,000 characters a message at most, a longer piece as several. A command that left something running can still write after its exit.",
+            "required": [
+              "type",
+              "id",
+              "text"
+            ],
+            "properties": {
+              "type": {
+                "const": "output"
+              },
+              "id": {
+                "type": "string"
+              },
+              "stream": {
+                "type": "string",
+                "enum": [
+                  "stdout",
+                  "stderr"
+                ],
+                "description": "Left out for one on a terminal device, which has one stream, and in what a new socket is first sent, where the two are one text."
+              },
+              "text": {
+                "type": "string"
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "It ended.",
+            "required": [
+              "type",
+              "id",
+              "exitCode",
+              "at"
+            ],
+            "properties": {
+              "type": {
+                "const": "exit"
+              },
+              "id": {
+                "type": "string"
+              },
+              "exitCode": {
+                "type": "integer"
+              },
+              "at": {
+                "type": "string",
+                "format": "date-time"
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "What this socket asked wasn't done, and why, in words for a person. Sent only to the operate socket that asked. What was done is answered by its event, or by nothing.",
+            "required": [
+              "type",
+              "message"
+            ],
+            "properties": {
+              "type": {
+                "const": "refused"
+              },
+              "message": {
+                "type": "string"
+              }
+            }
+          }
+        ]
+      },
+      "TerminalInput": {
+        "description": "What an operate socket sends on terminal@1, as JSON text. One that can't be done, or that is none of these, is answered with refused. What a watch socket sends is dropped. A message over 65,536 bytes closes the socket, so a long text goes as several inputs.",
+        "oneOf": [
+          {
+            "type": "object",
+            "description": "Start a shell of your own in the workspace, as its user, on a terminal device of this size. It arrives as a start like any other. Refused past the 64 terminals that may run at once, and where the service has no node-pty.",
+            "required": [
+              "type",
+              "columns",
+              "rows"
+            ],
+            "properties": {
+              "type": {
+                "const": "open"
+              },
+              "columns": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 1e3
+              },
+              "rows": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 1e3
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "Type into a running terminal, the agent's included. In a command, Ctrl-C (U+0003) interrupts it and Ctrl-D (U+0004) ends its input. Refused for one that has ended or isn't there.",
+            "required": [
+              "type",
+              "id",
+              "text"
+            ],
+            "properties": {
+              "type": {
+                "const": "input"
+              },
+              "id": {
+                "type": "string"
+              },
+              "text": {
+                "type": "string"
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "Give a terminal on a terminal device a new size, which is the size for everyone looking at it. Refused for a command, which has none, and for one that has ended or isn't there.",
+            "required": [
+              "type",
+              "id",
+              "columns",
+              "rows"
+            ],
+            "properties": {
+              "type": {
+                "const": "resize"
+              },
+              "id": {
+                "type": "string"
+              },
+              "columns": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 1e3
+              },
+              "rows": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 1e3
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "End a terminal: an interrupt for a command, a hangup for a shell, then a kill a second later. Its exit is the answer. One that has ended is left as it is, and one that isn't there is refused.",
+            "required": [
+              "type",
+              "id"
+            ],
+            "properties": {
+              "type": {
+                "const": "stop"
+              },
+              "id": {
+                "type": "string"
+              }
+            }
+          }
+        ]
+      },
+      "FilesRequest": {
+        "description": "What a socket sends on files@1, as JSON text. Each has an id of its own choosing, which the answer repeats; answers come as they are ready, in any order, and ids aren't checked for repeats. A request still unanswered when the socket closes gets no answer. A path is from the workspace, with / between its parts, or absolute inside it, and nothing outside the workspace is reached. A binary message that follows no write closes the socket, and so does any message over 1,048,576 bytes.",
+        "oneOf": [
+          {
+            "type": "object",
+            "description": "A folder's entries, folders first, the first thousand. There is no asking for the rest.",
+            "required": [
+              "type",
+              "id"
+            ],
+            "properties": {
+              "type": {
+                "const": "list"
+              },
+              "id": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 64
+              },
+              "path": {
+                "type": "string",
+                "description": "The workspace itself, if left out."
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "Bytes of a file from an offset. The answer is a data message and then one binary message, the bytes: fewer than asked for at the file's end, and none past it.",
+            "required": [
+              "type",
+              "id",
+              "path",
+              "offset",
+              "length"
+            ],
+            "properties": {
+              "type": {
+                "const": "read"
+              },
+              "id": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 64
+              },
+              "path": {
+                "type": "string"
+              },
+              "offset": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "length": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 1048576
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "The files modified after a time, in whole milliseconds: the newest thousand, the newest first. It skips what .gitignore files ignore, .git, node_modules and links, and a file that was removed isn't one of them. Each one asked walks the workspace once, and a computer walks for one at a time. Nothing is walked that wasn't asked for.",
+            "required": [
+              "type",
+              "id",
+              "since"
+            ],
+            "properties": {
+              "type": {
+                "const": "changed"
+              },
+              "id": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 64
+              },
+              "since": {
+                "type": "string",
+                "format": "date-time"
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "The next part of a file, on an operate socket, followed by one binary message of exactly length bytes, with no message between them. The part at offset 0 starts the file, or starts it again, and each one after starts where the last ended. Nothing is at the path until the part marked last, which puts the file there whole, over any that was there, and is answered with written. Only that part, and a part that is refused, is answered. It makes no folders. A file not finished when the socket closes is given up.",
+            "required": [
+              "type",
+              "id",
+              "path",
+              "offset",
+              "length",
+              "last"
+            ],
+            "properties": {
+              "type": {
+                "const": "write"
+              },
+              "id": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 64
+              },
+              "path": {
+                "type": "string"
+              },
+              "offset": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "length": {
+                "type": "integer",
+                "minimum": 0,
+                "maximum": 1048576
+              },
+              "last": {
+                "type": "boolean"
+              }
+            }
+          }
+        ]
+      },
+      "FilesAnswer": {
+        "description": "What the service sends on files@1, as JSON text, each with the id it answers. Nothing comes between a data message and its bytes.",
+        "oneOf": [
+          {
+            "type": "object",
+            "required": [
+              "type",
+              "id",
+              "path",
+              "entries",
+              "more"
+            ],
+            "properties": {
+              "type": {
+                "const": "entries"
+              },
+              "id": {
+                "type": "string"
+              },
+              "path": {
+                "type": "string"
+              },
+              "entries": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "description": "A link is not followed, and its size and date are its own.",
+                  "required": [
+                    "name",
+                    "kind",
+                    "size",
+                    "modifiedAt"
+                  ],
+                  "properties": {
+                    "name": {
+                      "type": "string"
+                    },
+                    "kind": {
+                      "type": "string",
+                      "enum": [
+                        "file",
+                        "folder",
+                        "link"
+                      ]
+                    },
+                    "size": {
+                      "type": "integer"
+                    },
+                    "modifiedAt": {
+                      "type": "string",
+                      "format": "date-time"
+                    }
+                  }
+                }
+              },
+              "more": {
+                "type": "boolean",
+                "description": "Whether the folder has more than these."
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "What the binary message after it is, and the file's whole size and date.",
+            "required": [
+              "type",
+              "id",
+              "path",
+              "offset",
+              "length",
+              "size",
+              "modifiedAt"
+            ],
+            "properties": {
+              "type": {
+                "const": "data"
+              },
+              "id": {
+                "type": "string"
+              },
+              "path": {
+                "type": "string"
+              },
+              "offset": {
+                "type": "integer"
+              },
+              "length": {
+                "type": "integer",
+                "description": "How many bytes follow."
+              },
+              "size": {
+                "type": "integer"
+              },
+              "modifiedAt": {
+                "type": "string",
+                "format": "date-time"
               }
             }
           },
           {
             "type": "object",
             "required": [
-              "type"
+              "type",
+              "id",
+              "since",
+              "changes",
+              "more"
             ],
             "properties": {
               "type": {
-                "const": "release"
+                "const": "changes"
+              },
+              "id": {
+                "type": "string"
+              },
+              "since": {
+                "type": "string",
+                "format": "date-time"
+              },
+              "changes": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "required": [
+                    "path",
+                    "size",
+                    "modifiedAt"
+                  ],
+                  "properties": {
+                    "path": {
+                      "type": "string"
+                    },
+                    "size": {
+                      "type": "integer"
+                    },
+                    "modifiedAt": {
+                      "type": "string",
+                      "format": "date-time"
+                    }
+                  }
+                }
+              },
+              "more": {
+                "type": "boolean",
+                "description": "Whether more than these changed."
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "The file is in place.",
+            "required": [
+              "type",
+              "id",
+              "path",
+              "size"
+            ],
+            "properties": {
+              "type": {
+                "const": "written"
+              },
+              "id": {
+                "type": "string"
+              },
+              "path": {
+                "type": "string"
+              },
+              "size": {
+                "type": "integer"
+              }
+            }
+          },
+          {
+            "type": "object",
+            "description": "It wasn't done, and why. The id is empty when what was sent had none to repeat.",
+            "required": [
+              "type",
+              "id",
+              "message"
+            ],
+            "properties": {
+              "type": {
+                "const": "refused"
+              },
+              "id": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
               }
             }
           }
@@ -85486,7 +86604,7 @@ var OPERATIONS = [
               "files",
               "terminal"
             ],
-            "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command and write_stdin. Below terminal, the browser's code-running tool is hidden."
+            "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command, write_stdin and list_sessions. Below terminal, the browser's code-running tool is hidden."
           },
           "browser": {
             "type": "boolean"
@@ -85575,7 +86693,7 @@ var OPERATIONS = [
             "files",
             "terminal"
           ],
-          "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command and write_stdin. Below terminal, the browser's code-running tool is hidden."
+          "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command, write_stdin and list_sessions. Below terminal, the browser's code-running tool is hidden."
         },
         "browser": {
           "type": "boolean",
@@ -85645,7 +86763,7 @@ var OPERATIONS = [
                 "files",
                 "terminal"
               ],
-              "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command and write_stdin. Below terminal, the browser's code-running tool is hidden."
+              "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command, write_stdin and list_sessions. Below terminal, the browser's code-running tool is hidden."
             },
             "browser": {
               "type": "boolean"
@@ -85785,7 +86903,7 @@ var OPERATIONS = [
                 "files",
                 "terminal"
               ],
-              "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command and write_stdin. Below terminal, the browser's code-running tool is hidden."
+              "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command, write_stdin and list_sessions. Below terminal, the browser's code-running tool is hidden."
             },
             "browser": {
               "type": "boolean"
@@ -85869,11 +86987,11 @@ var OPERATIONS = [
                   "surface": {
                     "type": "string",
                     "enum": [
-                      "commands",
                       "terminal",
+                      "files",
                       "browser"
                     ],
-                    "description": "commands: the agent's commands as they run, read-only, in commands@1. terminal: a shell of your own in its workspace, as its user, in pty@1. browser: its browser, in screencast@1: binary messages are JPEG frames of the page shown, text messages are ScreencastEvent one way and ScreencastInput the other. Opening it to operate makes you the driver: the agent's browser calls wait up to 25 seconds while you are, then answer that a person has or had it. You stop being the driver when you send release, close the socket, or send nothing for 60 seconds, and sending input takes it again."
+                    "description": "terminal: every terminal on it, the agent's commands and a person's shells alike, on one socket in terminal@1: text messages are TerminalEvent one way and TerminalInput the other. Watching reads them all; operating also opens a shell, types into any of them, the agent's included, sizes and stops them. files: its workspace's files, in files@1: text messages are FilesRequest one way and FilesAnswer the other, and a file's bytes travel as binary messages of at most 1,048,576 bytes. Watching lists and reads; operating also writes, which a computer with read access doesn't offer. browser: its browser, in screencast@1: binary messages are JPEG frames of the page shown, text messages are ScreencastEvent one way and ScreencastInput the other. Nobody waits for anybody: the agent's tools and a person's input act on the same browser at once. The page shown is each socket's own. A socket is shown each new tab as it opens, until it sends a tab input to show or open one; from then its page changes only when that page closes."
                   },
                   "protocol": {
                     "type": "string"
@@ -85885,8 +87003,7 @@ var OPERATIONS = [
                   },
                   "unavailable": {
                     "type": "string",
-                    "description": "Why it can't be opened here",
-                    "if it can't.": null
+                    "description": "Why it can't be opened now, if it can't."
                   }
                 }
               }
@@ -86016,7 +87133,7 @@ var OPERATIONS = [
             "files",
             "terminal"
           ],
-          "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command and write_stdin. Below terminal, the browser's code-running tool is hidden."
+          "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command, write_stdin and list_sessions. Below terminal, the browser's code-running tool is hidden."
         },
         "browser": {
           "type": "boolean"
@@ -86140,7 +87257,7 @@ var OPERATIONS = [
             "files",
             "terminal"
           ],
-          "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command and write_stdin. Below terminal, the browser's code-running tool is hidden."
+          "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command, write_stdin and list_sessions. Below terminal, the browser's code-running tool is hidden."
         },
         "browser": {
           "type": "boolean"
@@ -86269,7 +87386,7 @@ var OPERATIONS = [
             "files",
             "terminal"
           ],
-          "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command and write_stdin. Below terminal, the browser's code-running tool is hidden."
+          "description": "How far it reaches into files and commands, each level containing the one before: `read` has read, list and search; `files` adds edit; `terminal` adds exec_command, write_stdin and list_sessions. Below terminal, the browser's code-running tool is hidden."
         },
         "browser": {
           "type": "boolean"
@@ -86390,7 +87507,7 @@ var OPERATIONS = [
     "method": "POST",
     "path": "/v1/computers/{computerID}/live",
     "tool": "computer_live",
-    "summary": "A one-time ticket to watch or operate one of its surfaces live: the agent's commands as they run, or a shell of your own. Open its url as a WebSocket within 60 seconds.",
+    "summary": "A one-time ticket to watch or operate one of its surfaces live: its terminals, its files, or its browser. Open its url as a WebSocket within 60 seconds.",
     "status": 201,
     "hasBody": true,
     "pathParameters": [
@@ -86409,11 +87526,11 @@ var OPERATIONS = [
         "surface": {
           "type": "string",
           "enum": [
-            "commands",
             "terminal",
+            "files",
             "browser"
           ],
-          "description": "commands: the agent's commands as they run, read-only, in commands@1. terminal: a shell of your own in its workspace, as its user, in pty@1. browser: its browser, in screencast@1: binary messages are JPEG frames of the page shown, text messages are ScreencastEvent one way and ScreencastInput the other. Opening it to operate makes you the driver: the agent's browser calls wait up to 25 seconds while you are, then answer that a person has or had it. You stop being the driver when you send release, close the socket, or send nothing for 60 seconds, and sending input takes it again."
+          "description": "terminal: every terminal on it, the agent's commands and a person's shells alike, on one socket in terminal@1: text messages are TerminalEvent one way and TerminalInput the other. Watching reads them all; operating also opens a shell, types into any of them, the agent's included, sizes and stops them. files: its workspace's files, in files@1: text messages are FilesRequest one way and FilesAnswer the other, and a file's bytes travel as binary messages of at most 1,048,576 bytes. Watching lists and reads; operating also writes, which a computer with read access doesn't offer. browser: its browser, in screencast@1: binary messages are JPEG frames of the page shown, text messages are ScreencastEvent one way and ScreencastInput the other. Nobody waits for anybody: the agent's tools and a person's input act on the same browser at once. The page shown is each socket's own. A socket is shown each new tab as it opens, until it sends a tab input to show or open one; from then its page changes only when that page closes."
         },
         "mode": {
           "allOf": [
@@ -86423,7 +87540,7 @@ var OPERATIONS = [
                 "watch",
                 "operate"
               ],
-              "description": "In watch, what you send is dropped."
+              "description": "In watch you see and don't act: what you send is dropped, except that a files socket may still ask to list, to read and for what changed."
             }
           ],
           "default": "watch"
@@ -86455,11 +87572,11 @@ var OPERATIONS = [
         "surface": {
           "type": "string",
           "enum": [
-            "commands",
             "terminal",
+            "files",
             "browser"
           ],
-          "description": "commands: the agent's commands as they run, read-only, in commands@1. terminal: a shell of your own in its workspace, as its user, in pty@1. browser: its browser, in screencast@1: binary messages are JPEG frames of the page shown, text messages are ScreencastEvent one way and ScreencastInput the other. Opening it to operate makes you the driver: the agent's browser calls wait up to 25 seconds while you are, then answer that a person has or had it. You stop being the driver when you send release, close the socket, or send nothing for 60 seconds, and sending input takes it again."
+          "description": "terminal: every terminal on it, the agent's commands and a person's shells alike, on one socket in terminal@1: text messages are TerminalEvent one way and TerminalInput the other. Watching reads them all; operating also opens a shell, types into any of them, the agent's included, sizes and stops them. files: its workspace's files, in files@1: text messages are FilesRequest one way and FilesAnswer the other, and a file's bytes travel as binary messages of at most 1,048,576 bytes. Watching lists and reads; operating also writes, which a computer with read access doesn't offer. browser: its browser, in screencast@1: binary messages are JPEG frames of the page shown, text messages are ScreencastEvent one way and ScreencastInput the other. Nobody waits for anybody: the agent's tools and a person's input act on the same browser at once. The page shown is each socket's own. A socket is shown each new tab as it opens, until it sends a tab input to show or open one; from then its page changes only when that page closes."
         },
         "mode": {
           "type": "string",
@@ -86467,7 +87584,7 @@ var OPERATIONS = [
             "watch",
             "operate"
           ],
-          "description": "In watch, what you send is dropped."
+          "description": "In watch you see and don't act: what you send is dropped, except that a files socket may still ask to list, to read and for what changed."
         },
         "expiresAt": {
           "type": "string",
@@ -86531,13 +87648,13 @@ function parseListen(listen) {
 }
 var bearerOf = (request) => /^Bearer (\S+)$/.exec(request.headers.authorization ?? "")?.[1];
 async function jsonBody(request) {
-  let text2 = "";
+  let text3 = "";
   for await (const chunk of request) {
-    text2 += String(chunk);
-    if (text2.length > MAX_BODY2) throw new ApiError(413, "That request is too large.");
+    text3 += String(chunk);
+    if (text3.length > MAX_BODY2) throw new ApiError(413, "That request is too large.");
   }
   try {
-    const parsed = JSON.parse(text2 || "{}");
+    const parsed = JSON.parse(text3 || "{}");
     if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed))
       return parsed;
   } catch {
@@ -86565,7 +87682,7 @@ async function serve(options) {
     pattern: new RegExp(`^${operation.path.replace(/\{[^}]+\}/g, "([^/]+)")}$`),
     check: fromJsonSchema3(operation.input)
   }));
-  const run3 = async (route2, input2) => {
+  const run2 = async (route2, input2) => {
     const checked = await route2.check["~standard"].validate(input2);
     if (checked.issues)
       throw new ApiError(400, checked.issues.map((issue3) => issue3.message).join("; "));
@@ -86580,7 +87697,7 @@ async function serve(options) {
           { description: route2.operation.summary, inputSchema: route2.check },
           async (input2) => {
             try {
-              const output2 = await run3(route2, input2) ?? {};
+              const output2 = await run2(route2, input2) ?? {};
               return { content: [{ type: "text", text: JSON.stringify(output2) }] };
             } catch (error62) {
               if (!(error62 instanceof ApiError)) throw error62;
@@ -86632,7 +87749,7 @@ async function serve(options) {
         const value = url3.searchParams.get(name);
         if (value !== null) input2[name] = value;
       }
-      return send(response, operation.status, await run3(candidate, input2));
+      return send(response, operation.status, await run2(candidate, input2));
     }
     throw pathMatched ? new ApiError(405, "Not allowed.") : new ApiError(404, "Not found.");
   };
@@ -86719,7 +87836,7 @@ var USAGE = `Usage: agentcomputer <command> [--data DIR]
   stop <id>                         stop it, keeping its folder and token
   start <id> [--timeout SECONDS]    start a stopped computer again
   logs <id>                         what its servers wrote
-  live <id> --surface commands|terminal [--mode watch|operate]
+  live <id> --surface terminal|files|browser [--mode watch|operate]
                                     a one-time ticket to open one live, as a WebSocket
   kill <id>                         stop it and remove what the service made
 
@@ -86767,6 +87884,8 @@ async function main() {
       channel: { type: "string" },
       executable: { type: "string" },
       "no-sandbox": { type: "boolean" },
+      endpoint: { type: "string" },
+      output: { type: "string" },
       access: { type: "string" },
       workspace: { type: "string" },
       name: { type: "string" },
@@ -86813,6 +87932,11 @@ async function main() {
       executable: values.executable,
       sandbox: values["no-sandbox"] ? false : void 0
     });
+  if (command === "browser-mcp")
+    return serveBrowserMcp({
+      endpoint: values.endpoint ?? "",
+      outputDir: values.output ?? ""
+    });
   if (command === "inside")
     return serveInside({
       access: values.access,