@agentproto/runtime 2.10.0 → 2.11.0

package/dist/index.mjs

@@ -11,7 +11,7 @@ import { EventEmitter } from 'events';
 import { listAuthProfiles, eligibleProfiles, getAuthProfile, createAuthProfile, AuthProfileValidationError, deleteAuthProfile, KeychainStore, removeAuthProfile, addAuthProfile, setAuthProfileEnabled, setAuthProfileModels, refreshAuthProfileModels, credentialIdentity } from '@agentproto/auth';
 import { resolveRecipeMethod, resolveSourceSpec } from '@agentproto/secrets/provision/recipe';
 import { getModelProvider, resolveContextWindow, formatTokens, resolvePricing, LLM_PRICING_CATALOG, resolvePricingExact, MODEL_ALIASES } from '@agentproto/model-catalog/llm';
-import { resolveCustomRoute, registerCustomRoute, stripRouteSuffix, stripFixedNativeVendor, formatModelRef, resolveLlmModelRoute, tryParseModelRef } from '@agentproto/model-catalog/route-identity';
+import { resolveCustomRoute, registerCustomRoute, formatModelRef, resolveLlmModelRoute, tryParseModelRef, stripRouteSuffix, stripFixedNativeVendor } from '@agentproto/model-catalog/route-identity';
 import { findAnthropicGatewayPreset, anthropicGatewayPresetList, getAnthropicGatewayPreset } from '@agentproto/provider-presets';
 import * as providers_store_star from '@agentproto/providers-store';
 import { makeAdapterLister, makeAdapterResolver, makeCredsStore, discoverAdapterPackages, makeSetupLedger, makeListTool, makeSetupTool } from '@agentproto/provider-kit';
@@ -20,11 +20,13 @@ import { inferLegacyModeKind, parseModelSwitchCommand, isModelSwitchAcknowledgem
 import { loadSandboxConfig, resolveCommandSandbox, COMMAND_SANDBOX_MODE_ENV } from '@agentproto/command-sandbox';
 import { CatalogProviderSchema, getModelsByProvider, getStaticModelProvider } from '@agentproto/model-catalog';
 import { createBrainManager, parseKnowledgeConfig } from '@agentproto/workspace-brain';
+import { makeSessionsPanelApp, makeAgentsOverviewApp, makeBureauSessionsApp, makeSessionStoryPanelApp, makeLiveSessionApp, sessionsPanelApp, agentsOverviewApp, bureauSessionsApp, sessionStoryApp, liveSessionApp } from '@agentproto/apps';
 import matter2 from 'gray-matter';
 import { createServer } from 'http';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { WebSocketServer } from 'ws';
 import { loadAppHandle } from '@agentproto/app-kit';
+import { loadAgent } from '@agentproto/agent';
 import { normalizeToolId } from '@agentproto/driver';
 import { createIngestionClient } from '@agentproto/telemetry-langfuse';
 import { resolveRedactor } from '@agentproto/redaction';
@@ -239,6 +241,14 @@ function appendFooterOnce(body, footer) {
 function hasProvenanceFooter(body) {
   return new RegExp(`<sub>[^\\n]*${MARKER}`).test(body);
 }
+function footerHasCost(body) {
+  const m = new RegExp(`<sub>[^\\n]*${MARKER}[^\\n]*</sub>`).exec(body);
+  return m !== null && /\$\d/.test(m[0]);
+}
+function replaceProvenanceFooter(body, footer) {
+  if (!hasProvenanceFooter(body)) return appendFooterOnce(body, footer);
+  return body.replace(FOOTER_BLOCK_RE, footer);
+}
 function parseGhPrCreate(command, args, stdout) {
   if (basename(command) !== "gh") return null;
   const positionals = args.filter((a) => !a.startsWith("-"));
@@ -279,7 +289,7 @@ function pickExecutorSession(sessions, cwd) {
   if (live.length > 0) return live[0];
   return [...candidates].sort(byRecency)[0];
 }
-var MARKER, fmtTokens, buildFooter;
+var MARKER, fmtTokens, buildFooter, FOOTER_BLOCK_RE;
 var init_pr_provenance = __esm({
   "src/pr-provenance.ts"() {
     MARKER = "@agentproto-bot";
@@ -324,6 +334,7 @@ var init_pr_provenance = __esm({
 ---
 <sub>${parts.join(" \xB7 ")}</sub>`;
     };
+    FOOTER_BLOCK_RE = new RegExp(`(?:\\n+---)?\\n*<sub>[^\\n]*${MARKER}[^\\n]*</sub>`);
   }
 });
 function sessionTranscriptDir(sessionId, baseDir) {
@@ -3831,60 +3842,6 @@ function resolveWorktreeIdentity(cwd) {
     dir = parent;
   }
 }
-function normalizeModelForWire(model, opts) {
-  if (opts.routeSelection === "derived-from-model") {
-    return stripRouteSuffix(model);
-  }
-  const nativeVendor = opts.gateway ?? opts.fixedProvider;
-  if (nativeVendor) {
-    return stripFixedNativeVendor(model, nativeVendor);
-  }
-  return stripRouteSuffix(model);
-}
-
-// src/launch-config.ts
-function buildRouteAwareLaunchConfig(input) {
-  const prefix = input.prefix ?? "agent_start";
-  const baseOptions = input.options ?? {};
-  const hasExplicitBaseUrlOption = typeof baseOptions.base_url === "string" && baseOptions.base_url.length > 0;
-  const gatewayResolvedBaseUrl = input.authSpec?.baseUrl;
-  const resolvedBaseUrl = gatewayResolvedBaseUrl ?? input.route?.baseUrl;
-  let routedOptions = baseOptions;
-  if (!hasExplicitBaseUrlOption && typeof resolvedBaseUrl === "string" && resolvedBaseUrl.length > 0) {
-    const declaresBaseUrl = input.declaredOptions?.some((o) => o.id === "base_url") ?? false;
-    const declaredOptionsKnown = input.declaredOptions !== void 0;
-    if (declaresBaseUrl || !declaredOptionsKnown) {
-      routedOptions = { ...baseOptions, base_url: resolvedBaseUrl };
-    } else if (input.routeSelection === "derived-from-model") {
-      routedOptions = baseOptions;
-    } else {
-      throw new Error(
-        `${prefix}: adapter "${input.adapter}" cannot be routed through gateway "${input.route?.gateway ?? "unknown"}" \u2014 it declares no \`base_url\` option and does not derive its route from the model id (routeSelection !== "derived-from-model"), so the resolved gateway endpoint has nowhere to go. Declare a \`base_url\` option on the adapter manifest, or mark it \`routeSelection: "derived-from-model"\` if it already resolves its own gateway from the model prefix.`
-      );
-    }
-  }
-  const effectiveOptions = normalizeSkillsOption(
-    input.skills ?? [],
-    routedOptions,
-    input.declaredOptions
-  );
-  const wireModel = input.model ? normalizeModelForWire(input.model, {
-    routeSelection: input.routeSelection,
-    gateway: input.route?.gateway,
-    fixedProvider: input.adapterProvider
-  }) : void 0;
-  const out = {};
-  if (Object.keys(effectiveOptions).length > 0) {
-    out.options = effectiveOptions;
-  }
-  if (wireModel) {
-    out.wireModel = wireModel;
-  }
-  if (resolvedBaseUrl) {
-    out.resolvedBaseUrl = resolvedBaseUrl;
-  }
-  return out;
-}
 var WIDENING_ROUTES = ["openrouter", "requesty", "huggingface"];
 var VENDOR_COMPATIBILITY_ROUTES = {
   xai: ["xai", "xai-anthropic"]
@@ -4279,6 +4236,67 @@ function modelWalletIneligibleMessage(opts) {
   return `${opts.prefix}: model "${opts.model}" is not serviceable on the resolved ${wallet} (adapter "${opts.adapter}") and would 404 upstream. This model bills route "${primary}"${also} \u2014 re-spawn on it: set route.gateway="${primary}" with an eligible "${primary}" api-key profile (access.profileRef). This guard only rejects; it never switches wallets for you.`;
 }
 
+// src/model-wire.ts
+function normalizeModelForWire(model, opts) {
+  if (opts.routeSelection === "derived-from-model") {
+    const bare = stripRouteSuffix(model);
+    if (opts.modelDerivedApiKey && opts.gateway && WIDENING_ROUTES.includes(opts.gateway) && !bare.startsWith(`${opts.gateway}/`)) {
+      return `${opts.gateway}/${bare}`;
+    }
+    return bare;
+  }
+  const nativeVendor = opts.gateway ?? opts.fixedProvider;
+  if (nativeVendor) {
+    return stripFixedNativeVendor(model, nativeVendor);
+  }
+  return stripRouteSuffix(model);
+}
+
+// src/launch-config.ts
+function buildRouteAwareLaunchConfig(input) {
+  const prefix = input.prefix ?? "agent_start";
+  const baseOptions = input.options ?? {};
+  const hasExplicitBaseUrlOption = typeof baseOptions.base_url === "string" && baseOptions.base_url.length > 0;
+  const gatewayResolvedBaseUrl = input.authSpec?.baseUrl;
+  const resolvedBaseUrl = gatewayResolvedBaseUrl ?? input.route?.baseUrl;
+  let routedOptions = baseOptions;
+  if (!hasExplicitBaseUrlOption && typeof resolvedBaseUrl === "string" && resolvedBaseUrl.length > 0) {
+    const declaresBaseUrl = input.declaredOptions?.some((o) => o.id === "base_url") ?? false;
+    const declaredOptionsKnown = input.declaredOptions !== void 0;
+    if (declaresBaseUrl || !declaredOptionsKnown) {
+      routedOptions = { ...baseOptions, base_url: resolvedBaseUrl };
+    } else if (input.routeSelection === "derived-from-model") {
+      routedOptions = baseOptions;
+    } else {
+      throw new Error(
+        `${prefix}: adapter "${input.adapter}" cannot be routed through gateway "${input.route?.gateway ?? "unknown"}" \u2014 it declares no \`base_url\` option and does not derive its route from the model id (routeSelection !== "derived-from-model"), so the resolved gateway endpoint has nowhere to go. Declare a \`base_url\` option on the adapter manifest, or mark it \`routeSelection: "derived-from-model"\` if it already resolves its own gateway from the model prefix.`
+      );
+    }
+  }
+  const effectiveOptions = normalizeSkillsOption(
+    input.skills ?? [],
+    routedOptions,
+    input.declaredOptions
+  );
+  const wireModel = input.model ? normalizeModelForWire(input.model, {
+    routeSelection: input.routeSelection,
+    gateway: input.route?.gateway,
+    fixedProvider: input.adapterProvider,
+    modelDerivedApiKey: input.modelDerivedApiKey
+  }) : void 0;
+  const out = {};
+  if (Object.keys(effectiveOptions).length > 0) {
+    out.options = effectiveOptions;
+  }
+  if (wireModel) {
+    out.wireModel = wireModel;
+  }
+  if (resolvedBaseUrl) {
+    out.resolvedBaseUrl = resolvedBaseUrl;
+  }
+  return out;
+}
+
 // src/context-continuity.ts
 var CONTEXT_CONTINUITY_DEFAULTS = {
   mode: "ask",
@@ -6248,6 +6266,7 @@ async function spawnAgentSession(deps2, input) {
       declaredOptions: resolved?.declaredOptions,
       routeSelection: resolved?.routeSelection,
       adapterProvider: resolved?.authDescriptor?.provider,
+      modelDerivedApiKey: resolved?.authDescriptor?.modelDerivedApiKey,
       skills: spawnDefaults.skills,
       prefix: "agent_start"
     });
@@ -6313,7 +6332,13 @@ async function spawnAgentSession(deps2, input) {
     const existing = claims.get(key);
     if (existing) {
       const result = await existing.result;
-      return result.ok ? { ...result, deduped: true, dedupeSource } : result;
+      if (result.ok) {
+        console.warn(
+          `[agent_start] dedupe hit (${dedupeSource}): returning existing session ${result.descriptor.id}${input.label ? ` (label "${input.label}")` : ""} for a repeated spawn (adapter ${input.adapter}, cwd ${cwd})`
+        );
+        return { ...result, deduped: true, dedupeSource };
+      }
+      return result;
     }
     let resolveClaim;
     claims.set(key, {
@@ -6352,6 +6377,7 @@ async function spawnAgentSession(deps2, input) {
         ...worktreeAutoProvisioned ? { worktreeAutoProvisioned: true } : {},
         ...resolved?.routeSelection !== void 0 ? { routeSelection: resolved.routeSelection } : {},
         ...resolved?.authDescriptor?.provider !== void 0 ? { adapterProvider: resolved.authDescriptor.provider } : {},
+        ...resolved?.authDescriptor?.modelDerivedApiKey !== void 0 ? { modelDerivedApiKey: resolved.authDescriptor.modelDerivedApiKey } : {},
         ...input.model ? { model: input.model } : defaultModel2 ? { model: defaultModel2 } : {},
         ...input.mode ? { mode: input.mode } : {},
         ...input.effort ? { effort: input.effort } : {},
@@ -6589,7 +6615,11 @@ ${asyncPrompt}`;
           // the descriptor's `parentSessionId` so the child can discover
           // who spawned it without a registry round-trip. Absent on a
           // parentless root spawn.
-          ...parentSessionId ? { [PARENT_SESSION_ID_ENV]: parentSessionId } : {}
+          ...parentSessionId ? { [PARENT_SESSION_ID_ENV]: parentSessionId } : {},
+          // App identity (APP_ID_ENV's doc, sessions.ts) — set only for an
+          // `app_run` spawn, so a daemon-tool proxy the child builds can
+          // auto-fill `appId` into an `app_*` call that omits one.
+          ...input.appId ? { [APP_ID_ENV]: input.appId } : {}
         },
         onActivity: () => {
           if (liveSessionId) registry.pulseActivity(liveSessionId);
@@ -6629,6 +6659,7 @@ ${effectivePrompt}`;
       harness: input.harness ?? input.adapter,
       ...resolved?.routeSelection !== void 0 ? { routeSelection: resolved.routeSelection } : {},
       ...resolved?.authDescriptor?.provider !== void 0 ? { adapterProvider: resolved.authDescriptor.provider } : {},
+      ...resolved?.authDescriptor?.modelDerivedApiKey !== void 0 ? { modelDerivedApiKey: resolved.authDescriptor.modelDerivedApiKey } : {},
       ...input.model ? { model: input.model } : defaultModel ? { model: defaultModel } : {},
       ...input.mode ? { mode: input.mode } : {},
       ...input.effort ? { effort: input.effort } : {},
@@ -6874,7 +6905,25 @@ async function bootSandboxAgentSession(opts) {
     agentSession: createSandboxAgentSessionProxy({ host, remoteSessionId, lifecyclePolicy }),
     commandPreview: `sandbox:${providerSlug} \u2192 ${opts.adapter}`,
     sandboxId: host.sandboxId,
-    sandboxTeardown: lifecyclePolicy.teardown
+    sandboxTeardown: lifecyclePolicy.teardown,
+    // The proxy flattens the box's stream to text (documented limitation),
+    // so cost/tokens/model never ride the event stream out of the box. Read
+    // them back from the box daemon's own `session_usage` at each turn-end —
+    // the same `readUsage` hook hermes uses for its state.db — so the HOST
+    // descriptor (and every footer / session_usage built from it) carries
+    // the amount the sandboxed session actually spent.
+    ...typeof host.usage === "function" ? {
+      readUsage: async () => {
+        const snap = await host.usage(remoteSessionId);
+        const usage = {
+          ...typeof snap.model === "string" && snap.model.length > 0 ? { model: snap.model } : {},
+          ...typeof snap.costUsd === "number" ? { costUsd: snap.costUsd } : {},
+          ...typeof snap.tokensIn === "number" ? { tokensIn: snap.tokensIn } : {},
+          ...typeof snap.tokensOut === "number" ? { tokensOut: snap.tokensOut } : {}
+        };
+        return Object.keys(usage).length > 0 ? usage : null;
+      }
+    } : {}
   };
 }
 function sandboxAuthFromResolved(auth) {
@@ -8440,6 +8489,7 @@ function adapterConfigDirFor(sessionId) {
 var SESSION_ID_ENV = "AGENTPROTO_SESSION_ID";
 var WORKSPACE_SLUG_ENV = "AGENTPROTO_WORKSPACE_SLUG";
 var PARENT_SESSION_ID_ENV = "AGENTPROTO_PARENT_SESSION_ID";
+var APP_ID_ENV = "AGENTPROTO_APP_ID";
 var SessionNotAliveError = class extends Error {
   sessionId;
   status;
@@ -9877,6 +9927,9 @@ ${message}`;
           try {
             const usage2 = await rt.readUsage();
             if (usage2) {
+              if (typeof usage2.model === "string" && usage2.model.length > 0 && rt.desc.model === void 0) {
+                rt.desc.model = usage2.model;
+              }
               if (usage2.costUsd !== void 0) {
                 rt.desc.costUsd = usage2.costUsd;
                 rt.adapterReportedCost = true;
@@ -10151,6 +10204,7 @@ ${message}`;
         harness: input.harness ?? input.adapterSlug,
         ...input.routeSelection !== void 0 ? { routeSelection: input.routeSelection } : {},
         ...input.adapterProvider !== void 0 ? { adapterProvider: input.adapterProvider } : {},
+        ...input.modelDerivedApiKey !== void 0 ? { modelDerivedApiKey: input.modelDerivedApiKey } : {},
         // ACP-level session id — sticks across daemon restart so
         // `agentproto sessions restart <id>` can pass it as
         // `resumeSessionId` and the adapter reattaches to the prior
@@ -10276,6 +10330,7 @@ ${message}`;
         harness: input.harness ?? input.adapterSlug,
         ...input.routeSelection !== void 0 ? { routeSelection: input.routeSelection } : {},
         ...input.adapterProvider !== void 0 ? { adapterProvider: input.adapterProvider } : {},
+        ...input.modelDerivedApiKey !== void 0 ? { modelDerivedApiKey: input.modelDerivedApiKey } : {},
         ...input.label ? { label: input.label } : {},
         ...input.title ? { title: input.title } : {},
         ...input.label ? { renamedByUser: false } : {},
@@ -10812,7 +10867,8 @@ ${message}`;
       }
       let routeSelection = rt.desc.routeSelection;
       let adapterProvider = rt.desc.adapterProvider;
-      const needsAdapterMetadata = routeSelection === void 0 || routeSelection !== "derived-from-model" && adapterProvider === void 0;
+      let modelDerivedApiKey = rt.desc.modelDerivedApiKey;
+      const needsAdapterMetadata = routeSelection === void 0 || modelDerivedApiKey === void 0 || routeSelection !== "derived-from-model" && adapterProvider === void 0;
       const adapterSlug = rt.desc.adapterSlug ?? rt.adapterSlug;
       if (needsAdapterMetadata && resolveAgentAdapter && adapterSlug) {
         try {
@@ -10828,6 +10884,11 @@ ${message}`;
             rt.desc.adapterProvider = adapterProvider;
             hydrated = true;
           }
+          if (modelDerivedApiKey === void 0 && resolved?.authDescriptor?.modelDerivedApiKey !== void 0) {
+            modelDerivedApiKey = resolved.authDescriptor.modelDerivedApiKey;
+            rt.desc.modelDerivedApiKey = modelDerivedApiKey;
+            hydrated = true;
+          }
           if (hydrated) schedulePersist();
         } catch {
         }
@@ -10835,7 +10896,8 @@ ${message}`;
       const wireModel = normalizeModelForWire(modelId, {
         routeSelection,
         gateway: rt.desc.route?.gateway,
-        fixedProvider: adapterProvider
+        fixedProvider: adapterProvider,
+        modelDerivedApiKey
       });
       const result = await rt.agentSession.setModel(wireModel);
       if (result.applied) {
@@ -11569,6 +11631,15 @@ async function stampFooterOnPr(input) {
     if (view.exitCode !== 0) return { stamped: false, reason: `gh pr view exit ${view.exitCode}` };
     const body = view.stdout.replace(/\n+$/, "");
     const alreadyStamped = hasProvenanceFooter(body);
+    if (alreadyStamped && input.refresh === true) {
+      if (footerHasCost(body) || !footerHasCost(footer)) {
+        return { stamped: true, url: input.prUrl, number: input.prNumber, sessionId: input.session.id, alreadyStamped, refreshed: false };
+      }
+      const refreshedBody = replaceProvenanceFooter(body, footer);
+      const edit = await run(["pr", "edit", input.prUrl, "--body", refreshedBody], input.cwd);
+      if (edit.exitCode !== 0) return { stamped: false, reason: `gh pr edit exit ${edit.exitCode}` };
+      return { stamped: true, url: input.prUrl, number: input.prNumber, sessionId: input.session.id, alreadyStamped, refreshed: true };
+    }
     if (!alreadyStamped) {
       const newBody = appendFooterOnce(body, footer);
       const edit = await run(["pr", "edit", input.prUrl, "--body", newBody], input.cwd);
@@ -13989,6 +14060,7 @@ async function restartAgentSession(registry, resolveAgentAdapter, prev, opts = {
         declaredOptions: resolved.declaredOptions,
         routeSelection: resolved.routeSelection,
         adapterProvider: resolved.authDescriptor?.provider,
+        modelDerivedApiKey: resolved.authDescriptor?.modelDerivedApiKey,
         prefix: "restart"
       });
     } catch (err) {
@@ -14031,6 +14103,7 @@ async function restartAgentSession(registry, resolveAgentAdapter, prev, opts = {
       harness: effHarness,
       ...resolved.routeSelection !== void 0 ? { routeSelection: resolved.routeSelection } : {},
       ...resolved.authDescriptor?.provider !== void 0 ? { adapterProvider: resolved.authDescriptor.provider } : {},
+      ...resolved.authDescriptor?.modelDerivedApiKey !== void 0 ? { modelDerivedApiKey: resolved.authDescriptor.modelDerivedApiKey } : {},
       ...prev.label ? { label: prev.label } : {},
       ...prev.mcpServers ? { mcpServers: prev.mcpServers } : {},
       ...effModel ? { model: effModel } : {},
@@ -18127,528 +18200,48 @@ function registerMcpApps(server, apps) {
     );
   }
 }
-
-// src/panel-bridge.ts
-function panelBridgeScript(appName) {
-  return `// \u2500\u2500 MCP Apps bridge (shared: panel-bridge.ts) \u2500\u2500
-// JSON-RPC 2.0 over window.parent.postMessage \xB7 spec 2026-01-26
-var _nextId = 1, _pending = {}, _notifyHandlers = [];
-var _hostContext = null, _hostContextHandlers = [];
-function post(msg){ window.parent.postMessage(msg, '*'); }
-function getHostContext(){ return _hostContext; }
-function onHostContext(cb){
-  _hostContextHandlers.push(cb);
-  // Replay the last context so a late subscriber isn't stuck blind.
-  if (_hostContext){ try { cb(_hostContext); } catch(_) {} }
-}
-function _setHostContext(ctx){
-  if (!ctx || typeof ctx !== 'object') return;
-  // ui/notifications/host-context-changed carries only the changed keys \u2014
-  // merge, matching the official ext-apps App behaviour.
-  _hostContext = Object.assign({}, _hostContext || {}, ctx);
-  for (var i = 0; i < _hostContextHandlers.length; i++){
-    try { _hostContextHandlers[i](_hostContext); } catch(_) {}
-  }
-}
-function rpcRequest(method, params){
-  return new Promise(function(resolve, reject){
-    var id = _nextId++;
-    _pending[id] = {resolve: resolve, reject: reject};
-    post({jsonrpc: '2.0', id: id, method: method, params: params || {}});
-  });
-}
-function rpcNotify(method, params){ post({jsonrpc: '2.0', method: method, params: params || {}}); }
-function onHostNotification(cb){ _notifyHandlers.push(cb); }
-window.addEventListener('message', function(evt){
-  var msg = evt.data;
-  if (!msg || typeof msg !== 'object' || msg.jsonrpc !== '2.0') return;
-  if (msg.id != null && msg.method == null){
-    var p = _pending[msg.id];
-    if (!p) return;
-    delete _pending[msg.id];
-    if (msg.error) p.reject(new Error(msg.error.message || ('rpc error ' + msg.error.code)));
-    else p.resolve(msg.result);
-    return;
-  }
-  if (msg.method){
-    if (msg.method === 'ui/notifications/host-context-changed'){
-      _setHostContext(msg.params || {});
-    }
-    for (var i = 0; i < _notifyHandlers.length; i++){
-      try { _notifyHandlers[i](msg.method, msg.params || {}); } catch(_) {}
-    }
-  }
-});
-function initBridge(){
-  return rpcRequest('ui/initialize', {
-    appInfo: {name: ${JSON.stringify(appName)}, version: '0.1.0'},
-    appCapabilities: {availableDisplayModes: ['inline', 'fullscreen', 'pip']},
-    protocolVersion: '2026-01-26'
-  }).then(function(result){
-    // The initialize result carries the initial hostContext (displayMode +
-    // availableDisplayModes) \u2014 capture it before notifying the host.
-    if (result && result.hostContext) _setHostContext(result.hostContext);
-    rpcNotify('ui/notifications/initialized', {});
-  });
-}
-function requestDisplayMode(mode){
-  return rpcRequest('ui/request-display-mode', {mode: mode});
-}
-function callTool(name, args){
-  return rpcRequest('tools/call', {name: name, arguments: args || {}}).then(function(result){
-    if (result.isError){
-      var e = (result.content && result.content[0] && result.content[0].text) || 'tool error';
-      throw new Error(e);
-    }
-    var text = (result.content && result.content[0] && result.content[0].text) || '{}';
-    return JSON.parse(text);
-  });
-}
-
-// \u2500\u2500 Display-mode toggle buttons (NO auto-request) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-// Injected by the shared bridge so every panel gets them without touching
-// its own markup. Mirrors guilde canvas.app.ts canvasShellHtml(): the
-// panel stays inline by default; the user expands on demand. Buttons only
-// appear for modes the host advertises in hostContext.availableDisplayModes.
-(function(){
-  function mount(){
-    var style = document.createElement('style');
-    style.textContent = '#dm,#pin{display:none;position:fixed;top:8px;z-index:10;'
-      + 'border:1px solid #d0d0d0;background:#fff;color:#1a1a1a;'
-      + 'font:600 13px/1 system-ui,sans-serif;padding:7px 12px;border-radius:6px;'
-      + 'cursor:pointer;box-shadow:0 1px 4px rgba(0,0,0,.18)}'
-      + '#dm{right:8px}#pin{right:118px}'
-      + '#dm:hover,#pin:hover{background:#f2f2f2;border-color:#b0b0b0}'
-      + '@media (prefers-color-scheme:dark){'
-      + '#dm,#pin{border-color:#555;background:#2a2a2a;color:#f0f0f0;box-shadow:0 1px 4px rgba(0,0,0,.5)}'
-      + '#dm:hover,#pin:hover{background:#333;border-color:#777}}';
-    document.head.appendChild(style);
-
-    var btn = document.createElement('button');
-    btn.id = 'dm'; btn.type = 'button'; btn.title = "Basculer l'affichage";
-    var pin = document.createElement('button');
-    pin.id = 'pin'; pin.type = 'button'; pin.title = '\xC9pingler sur le c\xF4t\xE9 (pip)';
-    document.body.appendChild(pin);
-    document.body.appendChild(btn);
-
-    function has(avail, m){ return !!avail && avail.indexOf(m) >= 0; }
-
-    // Re-sync button visibility + label from the current host context.
-    function syncBtn(ctx){
-      ctx = ctx || {};
-      var avail = ctx.availableDisplayModes;
-      // Diagnostic: what does THIS host actually advertise? (inline/fullscreen/pip)
-      console.log('[mcp-app] displayMode=', ctx.displayMode,
-                  'availableDisplayModes=', avail);
-
-      // Fullscreen toggle button.
-      if (has(avail, 'fullscreen')){
-        btn.style.display = 'block';
-        btn.textContent = (ctx.displayMode === 'fullscreen') ? '\u2921 R\xE9duire' : '\u2922 Agrandir';
-      } else { btn.style.display = 'none'; }
-
-      // Dedicated pip ("pinned on side") button \u2014 only if the host advertises pip.
-      if (has(avail, 'pip')){
-        pin.style.display = 'block';
-        pin.textContent = (ctx.displayMode === 'pip') ? '\u2921 D\xE9tacher' : '\u{1F4CC} \xC9pingler';
-      } else { pin.style.display = 'none'; }
-    }
-
-    onHostContext(syncBtn);
-
-    btn.addEventListener('click', function(){
-      var ctx = getHostContext() || {};
-      var inPanel = (ctx.displayMode === 'fullscreen' || ctx.displayMode === 'pip');
-      requestDisplayMode(inPanel ? 'inline' : 'fullscreen').catch(function(){});
-    });
-
-    pin.addEventListener('click', function(){
-      var ctx = getHostContext() || {};
-      requestDisplayMode(ctx.displayMode === 'pip' ? 'inline' : 'pip').catch(function(){});
-    });
-  }
-  if (document.body) mount();
-  else document.addEventListener('DOMContentLoaded', mount);
-})();`;
-}
-
-// src/sessions-panel.ts
-var PANEL_HTML = `<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>agentproto sessions</title>
-<style>
-*{box-sizing:border-box;margin:0;padding:0}
-:root{
-  --bg:#0d1117;--bg2:#161b22;--bg3:#21262d;--border:#30363d;
-  --text:#e6edf3;--text2:#8b949e;
-  --green:#3fb950;--yellow:#d29922;--red:#f85149;--blue:#58a6ff;--purple:#bc8cff;
-}
-html,body{height:100%;font-family:Menlo,Monaco,'Courier New',monospace;font-size:13px;background:var(--bg);color:var(--text);overflow:hidden}
-#app{display:flex;height:100%}
-#sidebar{width:220px;min-width:180px;background:var(--bg2);border-right:1px solid var(--border);display:flex;flex-direction:column;flex-shrink:0}
-#sidebar-hdr{padding:10px 12px;border-bottom:1px solid var(--border);display:flex;align-items:center;justify-content:space-between}
-#sidebar-hdr h1{font-size:11px;font-weight:600;color:var(--text2);text-transform:uppercase;letter-spacing:.06em}
-#refresh-btn{background:none;border:none;cursor:pointer;color:var(--text2);font-size:15px;line-height:1;padding:2px 4px;border-radius:4px;font-family:inherit}
-#refresh-btn:hover{color:var(--text);background:var(--bg3)}
-#session-list{flex:1;overflow-y:auto;padding:4px 0}
-.si{padding:8px 12px;cursor:pointer;border-left:2px solid transparent}
-.si:hover{background:var(--bg3)}
-.si.active{background:var(--bg3);border-left-color:var(--blue)}
-.sn{font-size:12px;font-weight:500;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
-.sm{font-size:11px;color:var(--text2);margin-top:2px;display:flex;gap:6px;align-items:center}
-.badge{display:inline-block;padding:1px 5px;border-radius:10px;font-size:10px;font-weight:600}
-.br{background:rgba(63,185,80,.15);color:var(--green)}
-.bs{background:rgba(88,166,255,.15);color:var(--blue)}
-.be{background:rgba(139,148,158,.1);color:var(--text2)}
-.bk{background:rgba(248,81,73,.1);color:var(--red)}
-.berr{background:rgba(248,81,73,.2);color:var(--red)}
-#main{flex:1;display:flex;flex-direction:column;overflow:hidden;min-width:0}
-#toolbar{padding:8px 12px;border-bottom:1px solid var(--border);display:flex;align-items:center;gap:8px;background:var(--bg2)}
-#session-title{font-size:12px;font-weight:500;flex:1;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
-.abtn{background:var(--bg3);border:1px solid var(--border);color:var(--text);padding:4px 10px;border-radius:4px;cursor:pointer;font-size:12px;font-family:inherit}
-.abtn:hover{background:var(--border)}
-.abtn:disabled{opacity:.4;cursor:default}
-.abtn.danger{border-color:var(--red);color:var(--red)}
-.abtn.danger:hover{background:rgba(248,81,73,.1)}
-#output{flex:1;overflow-y:auto;padding:8px 12px;background:var(--bg);font-size:12px;line-height:1.6}
-.line{white-space:pre-wrap;word-break:break-all}
-#empty{display:flex;flex-direction:column;align-items:center;justify-content:center;height:100%;color:var(--text2);gap:8px;text-align:center;padding:24px}
-#empty .ico{font-size:32px}
-#statusbar{padding:4px 12px;font-size:11px;color:var(--text2);border-top:1px solid var(--border);background:var(--bg2);flex-shrink:0}
-.errmsg{color:var(--red);padding:12px}
-/* ANSI SGR */
-.ab{font-weight:bold}.ad{opacity:.6}.ai{font-style:italic}.au{text-decoration:underline}
-.f0{color:#21262d}.f1{color:#f85149}.f2{color:#3fb950}.f3{color:#d29922}
-.f4{color:#58a6ff}.f5{color:#bc8cff}.f6{color:#39d353}.f7{color:#e6edf3}
-.f8{color:#8b949e}.f9{color:#ff7b72}.f10{color:#56d364}.f11{color:#e3b341}
-.f12{color:#79c0ff}.f13{color:#d2a8ff}.f14{color:#56d364}.f15{color:#f0f6fc}
-</style>
-</head>
-<body>
-<div id="app">
-  <div id="sidebar">
-    <div id="sidebar-hdr">
-      <h1>Sessions</h1>
-      <button id="refresh-btn" title="Refresh" onclick="doRefresh()">&#8635;</button>
-    </div>
-    <div id="session-list"></div>
-  </div>
-  <div id="main">
-    <div id="toolbar" style="display:none">
-      <span id="session-title"></span>
-      <button class="abtn danger" id="kill-btn" onclick="doKill()">Kill</button>
-    </div>
-    <div id="output">
-      <div id="empty"><div class="ico">&#9889;</div><div>Select a session</div></div>
-    </div>
-    <div id="statusbar">Connecting to bridge&#8230;</div>
-  </div>
-</div>
-<script>
-${panelBridgeScript("agentproto-sessions-panel")}
-
-// ============================================================
-// ANSI-to-HTML renderer (SGR codes: colors 0-15, bold/dim/italic/underline)
-// ============================================================
-
-function escHtml(s) {
-  return s.replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');
-}
-
-function ansiToHtml(raw) {
-  // Strip CR overwrite sequences (progress bars: CR without LF)
-  var text = raw.replace(/[^\\n]*\\r([^\\n])/g, '$1').replace(/\\r/g, '');
-  var bold = false, dim = false, italic = false, underline = false, fg = -1;
-  var out = '';
-  // Split on ESC [ ... m (SGR) sequences; keep delimiters
-  var ESC = '\x1B';
-  var parts = text.split(/([\x1B]\\[[0-9;]*m)/);
-  for (var pi = 0; pi < parts.length; pi++) {
-    var part = parts[pi];
-    if (part.length === 0) continue;
-    if (part.charCodeAt(0) === 0x1b && part[1] === '[') {
-      // Parse SGR parameters
-      var inner = part.slice(2, part.length - 1); // strip ESC[ and m
-      var codes = inner === '' ? [0] : inner.split(';').map(Number);
-      for (var ci = 0; ci < codes.length; ci++) {
-        var c = codes[ci];
-        if (c === 0) { bold = false; dim = false; italic = false; underline = false; fg = -1; }
-        else if (c === 1) bold = true;
-        else if (c === 2) dim = true;
-        else if (c === 3) italic = true;
-        else if (c === 4) underline = true;
-        else if (c === 22) { bold = false; dim = false; }
-        else if (c === 23) italic = false;
-        else if (c === 24) underline = false;
-        else if (c >= 30 && c <= 37) fg = c - 30;
-        else if (c === 39) fg = -1;
-        else if (c >= 90 && c <= 97) fg = c - 90 + 8;
-      }
-    } else {
-      // Text segment \u2014 strip any remaining non-printable ESC sequences
-      var safe = escHtml(part).replace(/\x1B\\[[^m]*[A-Za-z]/g, '');
-      if (safe === '') continue;
-      var cls = '';
-      if (bold) cls += ' ab';
-      if (dim) cls += ' ad';
-      if (italic) cls += ' ai';
-      if (underline) cls += ' au';
-      if (fg >= 0 && fg <= 15) cls += ' f' + fg;
-      cls = cls.trim();
-      out += cls ? '<span class="' + cls + '">' + safe + '</span>' : safe;
-    }
-  }
-  return out;
-}
-
-// ============================================================
-// App state
-// ============================================================
-
-var sessions = [];
-var activeId = null;
-var outputLines = [];
-var nextCursor = 0;
-var pollTimer = null;
-var pollActive = false;
-
-function setStatus(msg) {
-  document.getElementById('statusbar').textContent = msg;
-}
-
-// ============================================================
-// Session list
-// ============================================================
-
-function badgeClass(status) {
-  if (status === 'running') return 'br';
-  if (status === 'starting') return 'bs';
-  if (status === 'killed') return 'bk';
-  if (status === 'error') return 'berr';
-  return 'be'; // exited
-}
-
-// Derive a turn-aware display badge. A session's 'status' only tracks process
-// liveness, so an agent-cli process stays "running" while idle between turns.
-// Read 'busy' / 'awaitingInput' to show real activity instead:
-//   working  \u2014 a turn is in flight (busy)
-//   waiting  \u2014 turn ended on awaiting-input (needs a reply)
-//   idle     \u2014 process alive, no turn running (last turn done)
-function displayBadge(s) {
-  if (s.status === 'running' && s.kind === 'agent-cli') {
-    if (s.busy) return { label: 'working', cls: 'br' };
-    if (s.awaitingInput) return { label: 'waiting', cls: 'bs' };
-    return { label: 'idle', cls: 'be' };
-  }
-  return { label: s.status, cls: badgeClass(s.status) };
-}
-
-function renderSidebar() {
-  var el = document.getElementById('session-list');
-  if (sessions.length === 0) {
-    el.innerHTML = '<div style="padding:12px;color:var(--text2);font-size:11px">No sessions</div>';
-    return;
-  }
-  var html = '';
-  for (var i = 0; i < sessions.length; i++) {
-    var s = sessions[i];
-    var label = s.label || s.name || (s.command ? s.command.split('/').pop() : null) || s.id.slice(0, 8);
-    var db = displayBadge(s);
-    var active = s.id === activeId ? ' active' : '';
-    // blockedOn (set while the turn waits on a spawned sub-agent or a
-    // shell command) rides next to the status badge; waiting-on-user is
-    // NOT here \u2014 that's awaitingInput, a different signal.
-    var blocked = '';
-    if (s.blockedOn === 'subagent') blocked = '<span class="badge bs">&#129513; sous-agent</span>';
-    else if (s.blockedOn === 'command') blocked = '<span class="badge bs">&#9203; commande</span>';
-    html += '<div class="si' + active + '" onclick="selectSession(\\'' + s.id + '\\')">'
-          + '<div class="sn">' + escHtml(label) + '</div>'
-          + '<div class="sm">'
-          + '<span class="badge ' + db.cls + '">' + db.label + '</span>'
-          + blocked
-          + '<span>' + escHtml(s.kind || '') + '</span>'
-          + '</div></div>';
-  }
-  el.innerHTML = html;
-}
-
-function loadSessions() {
-  // {kind:'all'} is session_list's live-able default \u2014 agent-CLI + terminal/
-  // PTY only. kind:"command" rows (a shell-execution log, not a resumable
-  // session) are excluded unless includeCommands is explicitly passed.
-  return callTool('session_list', {kind: 'all'}).then(function(data) {
-    sessions = data.sessions || [];
-    renderSidebar();
-    setStatus(sessions.length + ' session' + (sessions.length === 1 ? '' : 's') + ' \xB7 ' + new Date().toLocaleTimeString());
-  }).catch(function(e) {
-    setStatus('Error: ' + e.message);
-  });
-}
-
-// ============================================================
-// Output panel
-// ============================================================
-
-function renderOutputFull() {
-  var el = document.getElementById('output');
-  if (outputLines.length === 0) {
-    el.innerHTML = '<div id="empty"><div class="ico">&#9889;</div><div>No output yet</div></div>';
-    return;
-  }
-  var html = '';
-  for (var i = 0; i < outputLines.length; i++) {
-    html += '<div class="line">' + ansiToHtml(outputLines[i]) + '</div>';
-  }
-  el.innerHTML = html;
-  el.scrollTop = el.scrollHeight;
-}
-
-function appendLines(lines) {
-  var el = document.getElementById('output');
-  // Remove empty-state placeholder if present
-  var empty = el.querySelector('#empty');
-  if (empty) empty.parentNode.removeChild(empty);
-  var frag = document.createDocumentFragment();
-  for (var i = 0; i < lines.length; i++) {
-    var div = document.createElement('div');
-    div.className = 'line';
-    div.innerHTML = ansiToHtml(lines[i]);
-    frag.appendChild(div);
-  }
-  el.appendChild(frag);
-  el.scrollTop = el.scrollHeight;
-}
-
-function selectSession(id) {
-  activeId = id;
-  outputLines = [];
-  nextCursor = 0;
-  renderSidebar();
-
-  var s = null;
-  for (var i = 0; i < sessions.length; i++) {
-    if (sessions[i].id === id) { s = sessions[i]; break; }
-  }
-
-  var toolbar = document.getElementById('toolbar');
-  toolbar.style.display = 'flex';
-  document.getElementById('session-title').textContent = (s && (s.label || s.name)) || id.slice(0, 12);
-
-  var killBtn = document.getElementById('kill-btn');
-  killBtn.disabled = !s || (s.status !== 'running' && s.status !== 'starting');
-
-  document.getElementById('output').innerHTML = '<div style="padding:12px;color:var(--text2)">Loading&#8230;</div>';
-
-  // Initial load
-  callTool('agent_output', {sessionId: id, lastN: 200}).then(function(data) {
-    outputLines = data.lines || [];
-    nextCursor = data.nextCursor || 0;
-    renderOutputFull();
-  }).catch(function(e) {
-    document.getElementById('output').innerHTML = '<div class="errmsg">Error: ' + escHtml(e.message) + '</div>';
-  });
-}
-
-// ============================================================
-// Kill
-// ============================================================
-
-function doKill() {
-  if (!activeId) return;
-  var s = null;
-  for (var i = 0; i < sessions.length; i++) {
-    if (sessions[i].id === activeId) { s = sessions[i]; break; }
-  }
-  var toolName = (s && s.pty) ? 'terminal_kill' : 'agent_kill';
-  callTool(toolName, {sessionId: activeId}).then(function() {
-    return doRefresh();
-  }).catch(function(e) {
-    setStatus('Kill failed: ' + e.message);
-  });
+function makeBuiltinPanelApps(ops) {
+  return [
+    makeSessionsPanelApp({ listSessions: ops.listSessions }),
+    makeAgentsOverviewApp({ listSessions: ops.listSessions }),
+    makeBureauSessionsApp({ listSessions: ops.listSessions }),
+    makeSessionStoryPanelApp({ listSessions: ops.listSessions }),
+    // Live-session widget — resource ui://live_session/view, also bound to
+    // `agent_start` via _meta.ui.resourceUri (agent-tools.ts) so a launch
+    // auto-renders it.
+    makeLiveSessionApp({ httpBaseUrl: ops.httpBaseUrl })
+  ];
 }
-
-// ============================================================
-// Poll
-// ============================================================
-
-function doPoll() {
-  if (pollActive) return;
-  pollActive = true;
-  var p = loadSessions();
-  if (activeId) {
-    var capturedId = activeId;
-    var capturedCursor = nextCursor;
-    p = p.then(function() {
-      return callTool('agent_output', {sessionId: capturedId, since: capturedCursor});
-    }).then(function(data) {
-      if (capturedId !== activeId) return; // user switched sessions
-      var newLines = data.lines || [];
-      if (newLines.length > 0) {
-        outputLines = outputLines.concat(newLines);
-        if (outputLines.length > 2000) outputLines = outputLines.slice(-2000);
-        nextCursor = data.nextCursor || nextCursor;
-        appendLines(newLines);
-      }
-    }).catch(function() {});
-  }
-  p.then(function() {
-    pollActive = false;
-    pollTimer = setTimeout(doPoll, 3000);
-  }).catch(function() {
-    pollActive = false;
-    pollTimer = setTimeout(doPoll, 3000);
+var PANEL_APP_HANDLES = [
+  sessionsPanelApp,
+  agentsOverviewApp,
+  bureauSessionsApp,
+  sessionStoryApp,
+  liveSessionApp
+];
+function builtinPanelCatalogEntries() {
+  const apps = makeBuiltinPanelApps({
+    listSessions: () => [],
+    httpBaseUrl: "http://127.0.0.1:0"
   });
-}
-
-function doRefresh() {
-  return loadSessions().then(function() {
-    if (activeId) {
-      return callTool('agent_output', {sessionId: activeId, lastN: 200}).then(function(data) {
-        outputLines = data.lines || [];
-        nextCursor = data.nextCursor || 0;
-        renderOutputFull();
-      });
-    }
+  return apps.map((app, i) => {
+    const handle = PANEL_APP_HANDLES[i];
+    const slug = (handle.id ?? app.id).replace(/^@[^/]+\//, "");
+    return {
+      appId: handle.id ?? `@agentproto/${slug}`,
+      name: handle.name ?? app.title,
+      description: handle.description ?? app.description ?? app.title,
+      dir: `packages/apps/src/${slug}`,
+      category: "builtin",
+      installed: true,
+      hasUi: true,
+      hasArtifact: false,
+      hasSkill: false,
+      toolId: app.id,
+      resourceUri: `ui://${app.id}/view`
+    };
   });
 }
-
-// ============================================================
-// Boot
-// ============================================================
-
-initBridge().then(function() {
-  return loadSessions();
-}).then(function() {
-  pollTimer = setTimeout(doPoll, 3000);
-}).catch(function(e) {
-  setStatus('Bridge error: ' + e.message);
-  document.getElementById('output').innerHTML = '<div class="errmsg">Failed to connect to MCP bridge: ' + escHtml(e.message) + '</div>';
-});
-</script>
-</body>
-</html>`;
-
-// src/sessions-panel-app.ts
-var sessionsPanelInputSchema = z.object({
-  filter: z.enum(["running", "all"]).optional().describe(
-    "Which sessions to return. `running` = only alive; `all` = running + recent (default)."
-  )
-});
-function makeSessionsPanelApp(ops) {
-  return {
-    id: "agentproto_sessions",
-    title: "Agent Sessions",
-    description: "Open the agentproto sessions panel \u2014 an interactive UI that shows all running and recent agent-CLI and terminal/PTY sessions. Raw shell-command runs are a log, not a resumable session, and don't appear here \u2014 see `command_list`. The panel polls live data and lets you inspect output or kill sessions.",
-    inputSchema: sessionsPanelInputSchema,
-    execute: async (input) => ({
-      sessions: ops.listSessions(input.filter)
-    }),
-    html: PANEL_HTML
-  };
-}
 function summarizeSession(desc, lines, nowMs) {
   return {
     sessionId: desc.id,
@@ -18687,1164 +18280,6 @@ function registerSummarizeSessionTool(server, ops) {
     }
   );
 }
-var agentsOverviewInputSchema = z.object({
-  filter: z.enum(["running", "all"]).optional().describe("`running` = only alive agent sessions; `all` = running + recent (default).")
-});
-function makeAgentsOverviewApp(ops) {
-  return {
-    id: "agentproto_agents_overview",
-    title: "Agents \u2014 vue claire",
-    description: "Open the agents overview \u2014 a plain-language card per agent session with one human sentence (what it's doing / last said) and a coarse state (\xE0 traiter / au travail / en attente / termin\xE9). Polls live and asks the server to summarise each session.",
-    inputSchema: agentsOverviewInputSchema,
-    execute: async (input) => ({ sessions: ops.listSessions(input.filter) }),
-    html: AGENTS_OVERVIEW_HTML
-  };
-}
-var AGENTS_OVERVIEW_HTML = `<!DOCTYPE html>
-<html lang="fr">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>agents \u2014 vue claire</title>
-<style>
-*{box-sizing:border-box;margin:0;padding:0}
-:root{
-  --bg:#0d1117;--bg2:#161b22;--bg3:#21262d;--border:#30363d;
-  --text:#e6edf3;--text2:#8b949e;
-  --green:#3fb950;--yellow:#d29922;--red:#f85149;--blue:#58a6ff;--purple:#bc8cff;
-}
-html,body{height:100%;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;font-size:13px;background:var(--bg);color:var(--text);overflow:hidden}
-#app{display:flex;flex-direction:column;height:100%}
-#hdr{padding:12px 16px;border-bottom:1px solid var(--border);display:flex;align-items:center;justify-content:space-between;background:var(--bg2);flex-shrink:0}
-#hdr h1{font-size:13px;font-weight:600;letter-spacing:.02em}
-#hdr .sub{font-size:11px;color:var(--text2);margin-top:2px}
-#refresh-btn{background:none;border:none;cursor:pointer;color:var(--text2);font-size:16px;line-height:1;padding:4px 6px;border-radius:6px}
-#refresh-btn:hover{color:var(--text);background:var(--bg3)}
-#grid{flex:1;overflow-y:auto;padding:14px 16px;display:grid;grid-template-columns:repeat(auto-fill,minmax(280px,1fr));gap:12px;align-content:start}
-.card{background:var(--bg2);border:1px solid var(--border);border-left:3px solid var(--border);border-radius:8px;padding:12px 14px;display:flex;flex-direction:column;gap:8px;min-height:96px}
-.card.s-todo{border-left-color:var(--purple)}
-.card.s-work{border-left-color:var(--green)}
-.card.s-wait{border-left-color:var(--yellow)}
-.card.s-done{border-left-color:var(--text2)}
-.card-top{display:flex;align-items:center;justify-content:space-between;gap:8px}
-.title{font-size:12px;font-weight:600;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;flex:1}
-.state{font-size:10px;font-weight:700;padding:2px 8px;border-radius:11px;white-space:nowrap;letter-spacing:.02em}
-.state.s-todo{background:rgba(188,140,255,.16);color:var(--purple)}
-.state.s-work{background:rgba(63,185,80,.16);color:var(--green)}
-.state.s-wait{background:rgba(210,153,34,.16);color:var(--yellow)}
-.state.s-done{background:rgba(139,148,158,.14);color:var(--text2)}
-.summary{font-size:12.5px;line-height:1.5;color:var(--text);word-break:break-word}
-.summary.muted{color:var(--text2);font-style:italic}
-.meta{font-size:10.5px;color:var(--text2);display:flex;gap:8px;align-items:center;flex-wrap:wrap;margin-top:auto}
-.dot{width:5px;height:5px;border-radius:50%;background:var(--text2);display:inline-block}
-#empty{grid-column:1/-1;display:flex;flex-direction:column;align-items:center;justify-content:center;color:var(--text2);gap:8px;padding:48px;text-align:center}
-#empty .ico{font-size:30px}
-#statusbar{padding:5px 16px;font-size:11px;color:var(--text2);border-top:1px solid var(--border);background:var(--bg2);flex-shrink:0}
-</style>
-</head>
-<body>
-<div id="app">
-  <div id="hdr">
-    <div>
-      <h1>Agents \u2014 vue claire</h1>
-      <div class="sub">une carte par agent \xB7 r\xE9sum\xE9 + \xE9tat</div>
-    </div>
-    <button id="refresh-btn" title="Rafra\xEEchir" onclick="doRefresh()">&#8635;</button>
-  </div>
-  <div id="grid"><div id="empty"><div class="ico">&#9889;</div><div>Connexion au bridge&#8230;</div></div></div>
-  <div id="statusbar">Connexion&#8230;</div>
-</div>
-<script>
-${panelBridgeScript("agentproto-agents-overview")}
-
-// \u2500\u2500 State \u2500\u2500
-var REFRESH_MS = 12000;
-var pollTimer = null, polling = false;
-function esc(s){ return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;'); }
-function setStatus(m){ document.getElementById('statusbar').textContent = m; }
-
-var STATE_CLASS = {
-  '\xE0 traiter':'s-todo', 'au travail':'s-work', 'en attente':'s-wait', 'termin\xE9':'s-done'
-};
-function stateClass(st){ return STATE_CLASS[st] || 's-wait'; }
-
-function fmtAgo(iso){
-  if (!iso) return '';
-  var t = Date.parse(iso);
-  if (isNaN(t)) return '';
-  var s = Math.max(0, Math.round((Date.now() - t) / 1000));
-  if (s < 60) return 'il y a ' + s + 's';
-  var m = Math.round(s/60);
-  if (m < 60) return 'il y a ' + m + 'min';
-  var h = Math.round(m/60);
-  return 'il y a ' + h + 'h';
-}
-
-function titleOf(s){
-  return s.label || s.name || (s.command ? s.command.split(/\\s+/)[0].split('/').pop() : null) || s.id.slice(0,8);
-}
-
-function render(sessions, summaries){
-  var grid = document.getElementById('grid');
-  if (!sessions.length){
-    grid.innerHTML = '<div id="empty"><div class="ico">&#128564;</div><div>Aucune session d\\'agent</div></div>';
-    return;
-  }
-  var html = '';
-  for (var i=0;i<sessions.length;i++){
-    var s = sessions[i];
-    var sum = summaries[s.id] || {};
-    var st = sum.state || 'en attente';
-    var cls = stateClass(st);
-    var summary = sum.summary || 'R\xE9sum\xE9 indisponible.';
-    var muted = !sum.summary ? ' muted' : '';
-    html += '<div class="card ' + cls + '">'
-      + '<div class="card-top">'
-      +   '<span class="title">' + esc(titleOf(s)) + '</span>'
-      +   '<span class="state ' + cls + '">' + esc(st) + '</span>'
-      + '</div>'
-      + '<div class="summary' + muted + '">' + esc(summary) + '</div>'
-      + '<div class="meta">'
-      +   '<span>' + esc(s.kind || '') + '</span><span class="dot"></span>'
-      +   '<span>' + esc(s.status || '') + '</span>'
-      +   (s.lastOutputAt ? '<span class="dot"></span><span>' + esc(fmtAgo(s.lastOutputAt)) + '</span>' : '')
-      + '</div>'
-      + '</div>';
-  }
-  grid.innerHTML = html;
-}
-
-function loadAndRender(){
-  return callTool('session_list', {kind:'all'}).then(function(data){
-    var all = data.sessions || [];
-    var agents = all.filter(function(s){ return s.kind === 'agent-cli'; });
-    // Render shells immediately, then fill summaries as they arrive.
-    var summaries = {};
-    render(agents, summaries);
-    setStatus(agents.length + ' agent' + (agents.length===1?'':'s') + ' \xB7 ' + new Date().toLocaleTimeString('fr-FR'));
-    return Promise.all(agents.map(function(s){
-      return callTool('summarize_session', {sessionId: s.id}).then(function(sum){
-        summaries[s.id] = sum;
-      }).catch(function(){ /* leave shell */ });
-    })).then(function(){ render(agents, summaries); });
-  }).catch(function(e){ setStatus('Erreur : ' + e.message); });
-}
-
-function doPoll(){
-  if (polling) return;
-  polling = true;
-  loadAndRender().then(function(){
-    polling = false;
-    pollTimer = setTimeout(doPoll, REFRESH_MS);
-  }).catch(function(){
-    polling = false;
-    pollTimer = setTimeout(doPoll, REFRESH_MS);
-  });
-}
-function doRefresh(){ if (pollTimer) clearTimeout(pollTimer); return loadAndRender().then(function(){ pollTimer = setTimeout(doPoll, REFRESH_MS); }); }
-
-initBridge().then(loadAndRender).then(function(){
-  pollTimer = setTimeout(doPoll, REFRESH_MS);
-}).catch(function(e){
-  setStatus('Bridge : ' + e.message);
-  document.getElementById('grid').innerHTML = '<div id="empty"><div class="ico">&#9888;</div><div>\xC9chec connexion bridge : ' + esc(e.message) + '</div></div>';
-});
-</script>
-</body>
-</html>`;
-var bureauSessionsInputSchema = z.object({
-  filter: z.enum(["running", "all"]).optional().describe("`running` = only alive browser sessions; `all` = running + recent (default).")
-});
-function makeBureauSessionsApp(ops) {
-  return {
-    id: "agentproto_bureau_sessions",
-    title: "Bureau \u2014 sessions navigateur",
-    description: "Open the browser-sessions panel \u2014 one row per browser service (adapter, base URL, port, status, uptime). Polls live every ~5 s.",
-    inputSchema: bureauSessionsInputSchema,
-    execute: async (input) => ({
-      sessions: ops.listSessions(input.filter).filter((s) => s.kind === "browser")
-    }),
-    html: BUREAU_SESSIONS_HTML
-  };
-}
-var BUREAU_SESSIONS_HTML = `<!DOCTYPE html>
-<html lang="fr">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>bureau \u2014 sessions navigateur</title>
-<style>
-*{box-sizing:border-box;margin:0;padding:0}
-:root{
-  --bg:#0d1117;--bg2:#161b22;--bg3:#21262d;--border:#30363d;
-  --text:#e6edf3;--text2:#8b949e;
-  --green:#3fb950;--yellow:#d29922;--red:#f85149;--blue:#58a6ff;--purple:#bc8cff;
-}
-*{box-sizing:border-box}
-html,body{height:100%;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;font-size:13px;background:var(--bg);color:var(--text);overflow:hidden}
-#app{display:flex;flex-direction:column;height:100%}
-#hdr{padding:12px 16px;border-bottom:1px solid var(--border);display:flex;align-items:center;justify-content:space-between;background:var(--bg2);flex-shrink:0}
-#hdr h1{font-size:13px;font-weight:600}
-#hdr .sub{font-size:11px;color:var(--text2);margin-top:2px}
-#refresh-btn{background:none;border:none;cursor:pointer;color:var(--text2);font-size:16px;line-height:1;padding:4px 6px;border-radius:6px}
-#refresh-btn:hover{color:var(--text);background:var(--bg3)}
-#list{flex:1;overflow-y:auto;padding:14px 16px;display:flex;flex-direction:column;gap:10px}
-.row{background:var(--bg2);border:1px solid var(--border);border-radius:8px;padding:11px 14px;display:flex;align-items:center;gap:14px}
-.icon{font-size:20px;flex-shrink:0}
-.body{flex:1;min-width:0}
-.r1{display:flex;align-items:center;gap:8px}
-.adapter{font-size:12.5px;font-weight:600;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
-.url{font-family:Menlo,Monaco,'Courier New',monospace;font-size:11.5px;color:var(--blue);margin-top:3px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
-.meta{font-size:10.5px;color:var(--text2);margin-top:3px;display:flex;gap:8px;align-items:center;flex-wrap:wrap}
-.dot{width:5px;height:5px;border-radius:50%;background:var(--text2);display:inline-block}
-.badge{font-size:10px;font-weight:700;padding:2px 8px;border-radius:11px;white-space:nowrap}
-.br{background:rgba(63,185,80,.16);color:var(--green)}
-.bs{background:rgba(88,166,255,.16);color:var(--blue)}
-.bk{background:rgba(248,81,73,.14);color:var(--red)}
-.be{background:rgba(139,148,158,.14);color:var(--text2)}
-.berr{background:rgba(248,81,73,.22);color:var(--red)}
-.port{font-family:Menlo,Monaco,'Courier New',monospace}
-#empty{flex:1;display:flex;flex-direction:column;align-items:center;justify-content:center;color:var(--text2);gap:8px;padding:48px;text-align:center}
-#empty .ico{font-size:30px}
-#statusbar{padding:5px 16px;font-size:11px;color:var(--text2);border-top:1px solid var(--border);background:var(--bg2);flex-shrink:0}
-</style>
-</head>
-<body>
-<div id="app">
-  <div id="hdr">
-    <div>
-      <h1>Bureau \u2014 sessions navigateur</h1>
-      <div class="sub">services navigateur actifs \xB7 URL / port / statut</div>
-    </div>
-    <button id="refresh-btn" title="Rafra\xEEchir" onclick="doRefresh()">&#8635;</button>
-  </div>
-  <div id="list"><div id="empty"><div class="ico">&#127760;</div><div>Connexion au bridge&#8230;</div></div></div>
-  <div id="statusbar">Connexion&#8230;</div>
-</div>
-<script>
-${panelBridgeScript("agentproto-bureau-sessions")}
-
-// \u2500\u2500 State \u2500\u2500
-var REFRESH_MS = 5000;
-var pollTimer = null, polling = false;
-function esc(s){ return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;'); }
-function setStatus(m){ document.getElementById('statusbar').textContent = m; }
-
-function badgeClass(st){
-  if (st === 'running') return 'br';
-  if (st === 'starting') return 'bs';
-  if (st === 'killed') return 'bk';
-  if (st === 'error') return 'berr';
-  return 'be';
-}
-function fmtUptime(iso, end){
-  if (!iso) return '';
-  var start = Date.parse(iso);
-  if (isNaN(start)) return '';
-  var ref = end ? Date.parse(end) : Date.now();
-  var s = Math.max(0, Math.round((ref - start) / 1000));
-  if (s < 60) return s + 's';
-  var m = Math.floor(s/60), rs = s%60;
-  if (m < 60) return m + 'm ' + rs + 's';
-  var h = Math.floor(m/60), rm = m%60;
-  return h + 'h ' + rm + 'm';
-}
-
-function render(rows){
-  var list = document.getElementById('list');
-  if (!rows.length){
-    list.innerHTML = '<div id="empty"><div class="ico">&#127760;</div><div>Aucune session navigateur</div></div>';
-    return;
-  }
-  var html = '';
-  for (var i=0;i<rows.length;i++){
-    var s = rows[i];
-    var bc = badgeClass(s.status);
-    var url = s.browserBaseUrl || (s.browserPort ? ('http://127.0.0.1:' + s.browserPort) : '');
-    var adapter = s.browserAdapterId || s.label || s.name || 'navigateur';
-    var up = fmtUptime(s.startedAt, s.endedAt);
-    html += '<div class="row">'
-      + '<div class="icon">&#127760;</div>'
-      + '<div class="body">'
-      +   '<div class="r1"><span class="adapter">' + esc(adapter) + '</span>'
-      +     '<span class="badge ' + bc + '">' + esc(s.status || '') + '</span></div>'
-      +   (url ? '<div class="url">' + esc(url) + '</div>' : '')
-      +   '<div class="meta">'
-      +     (s.browserPort ? '<span>port <span class="port">' + esc(s.browserPort) + '</span></span><span class="dot"></span>' : '')
-      +     '<span>' + (up ? 'uptime ' + esc(up) : '') + '</span>'
-      +   '</div>'
-      + '</div>'
-      + '</div>';
-  }
-  list.innerHTML = html;
-}
-
-function loadAndRender(){
-  return callTool('session_list', {kind:'all'}).then(function(data){
-    var all = data.sessions || [];
-    var browsers = all.filter(function(s){ return s.kind === 'browser'; });
-    render(browsers);
-    setStatus(browsers.length + ' session' + (browsers.length===1?'':'s') + ' \xB7 ' + new Date().toLocaleTimeString('fr-FR'));
-  }).catch(function(e){ setStatus('Erreur : ' + e.message); });
-}
-
-function doPoll(){
-  if (polling) return;
-  polling = true;
-  loadAndRender().then(function(){
-    polling = false;
-    pollTimer = setTimeout(doPoll, REFRESH_MS);
-  }).catch(function(){
-    polling = false;
-    pollTimer = setTimeout(doPoll, REFRESH_MS);
-  });
-}
-function doRefresh(){ if (pollTimer) clearTimeout(pollTimer); return loadAndRender().then(function(){ pollTimer = setTimeout(doPoll, REFRESH_MS); }); }
-
-initBridge().then(loadAndRender).then(function(){
-  pollTimer = setTimeout(doPoll, REFRESH_MS);
-}).catch(function(e){
-  setStatus('Bridge : ' + e.message);
-  document.getElementById('list').innerHTML = '<div id="empty"><div class="ico">&#9888;</div><div>\xC9chec connexion bridge : ' + esc(e.message) + '</div></div>';
-});
-</script>
-</body>
-</html>`;
-
-// src/session-story-panel.ts
-var SESSION_STORY_PANEL_HTML = `<!doctype html>
-<html lang="fr">
-<head>
-<meta charset="utf-8" />
-<meta name="viewport" content="width=device-width, initial-scale=1" />
-<title>session story</title>
-<style>
-  :root {
-    color-scheme: light;
-    --bg:#faf8f5; --panel:#fffdfa; --line:#ece5da; --line-soft:#f2ede3;
-    --ink:#241f1a; --ink-mute:#7d7060; --ink-faint:#a9997f; --ink-ghost:#b3a893;
-    --accent:#0d7a4f; --accent-soft:#e8f4ec;
-    --gold:#a6701b; --gold-soft:#fff2dc;
-    --blue:#1d4e80; --blue-soft:#e9f1fb;
-    --violet:#5b3fa6; --violet-soft:#ede9ff;
-    --sel:#fbeccd; --red:#b3261e; --red-soft:#fbeae8;
-  }
-  * { box-sizing:border-box; }
-  html,body { height:100%; }
-  body { margin:0; font-family:ui-sans-serif,system-ui,-apple-system,"Segoe UI",sans-serif; background:var(--bg); color:var(--ink); -webkit-font-smoothing:antialiased; }
-  .app { height:100vh; display:flex; flex-direction:column; }
-  .hidden { display:none !important; }
-
-  /* \u2500\u2500 picker screen \u2500\u2500 */
-  #pickerScreen { height:100vh; display:flex; flex-direction:column; align-items:center; justify-content:center; gap:14px; padding:24px; }
-  #pickerScreen h1 { font-size:15px; font-weight:700; }
-  #pickerList { width:min(520px,90vw); max-height:60vh; overflow-y:auto; border:1px solid var(--line); border-radius:12px; background:var(--panel); }
-  .pk-item { padding:10px 14px; border-bottom:1px solid var(--line-soft); cursor:pointer; display:flex; align-items:center; gap:10px; }
-  .pk-item:last-child { border-bottom:none; }
-  .pk-item:hover { background:var(--line-soft); }
-  .pk-name { flex:1; min-width:0; font-size:13px; font-weight:600; white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
-  .pk-meta { flex:none; font-size:10.5px; color:var(--ink-faint); font-weight:600; }
-  .pk-empty { padding:24px; text-align:center; color:var(--ink-mute); font-size:12.5px; }
-  .badge { display:inline-block; padding:1px 8px; border-radius:999px; font-size:10px; font-weight:700; }
-  .badge.running { background:var(--accent-soft); color:var(--accent); }
-  .badge.starting { background:var(--blue-soft); color:var(--blue); }
-  .badge.exited { background:var(--line-soft); color:var(--ink-faint); }
-  .badge.killed, .badge.error { background:var(--red-soft); color:var(--red); }
-
-  /* \u2500\u2500 big picture : mission + plan de sous-t\xE2ches \u2500\u2500 */
-  .hero { flex:none; padding:13px 20px 0; border-bottom:1px solid var(--line); background:var(--panel); }
-  .hero-top { display:flex; align-items:center; gap:13px; }
-  .pulse { width:10px; height:10px; border-radius:50%; background:var(--accent); flex:none;
-           box-shadow:0 0 0 0 rgba(13,122,79,.35); animation:pulse 2.4s infinite; }
-  .pulse.off { background:var(--ink-ghost); animation:none; }
-  @keyframes pulse { 70% { box-shadow:0 0 0 9px rgba(13,122,79,0); } 100% { box-shadow:0 0 0 0 rgba(13,122,79,0); } }
-  .who { min-width:0; flex:1; }
-  .who .h1 { font-size:14.5px; font-weight:700; white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
-  .who .h2 { font-size:12px; color:var(--ink-mute); margin-top:1px; white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
-  .modewrap { display:flex; border:1px solid var(--line); border-radius:9px; overflow:hidden; flex:none; }
-  .modewrap button { border:none; background:var(--panel); color:var(--ink-mute); font-size:11px; font-weight:700; padding:6px 11px; cursor:pointer; }
-  .modewrap button.on { background:var(--ink); color:#fdf9f2; }
-  button.sim, a.sim { border:1px solid var(--line); background:var(--panel); color:var(--ink-mute); font-weight:700;
-               font-size:11.5px; border-radius:8px; padding:6px 12px; cursor:pointer; flex:none; }
-  button.sim.on { background:var(--ink); border-color:var(--ink); color:#fdf9f2; }
-  a.sim { display:inline-flex; align-items:center; text-decoration:none; }
-  a.sim:hover { border-color:var(--ink-ghost); color:var(--ink); }
-
-  /* plan strip : les sous-t\xE2ches, l'avancement d'un coup d'\u0153il */
-  .plan { display:flex; gap:6px; overflow-x:auto; padding:11px 0 12px; scrollbar-width:none; }
-  .plan::-webkit-scrollbar { display:none; }
-  .pt { flex:none; display:flex; align-items:center; gap:6px; font-size:11.5px; font-weight:700; padding:5px 11px;
-        border-radius:999px; border:1px solid var(--line); background:var(--bg); color:var(--ink-mute); cursor:pointer; white-space:nowrap; }
-  .pt:hover { border-color:var(--ink-ghost); }
-  .pt .st { font-size:10px; }
-  .pt.done { color:var(--accent); background:var(--accent-soft); border-color:transparent; }
-  .pt.cur { color:var(--gold); background:var(--gold-soft); border-color:transparent; }
-  .pt.cur .st { animation:blink 1.6s infinite; }
-  @keyframes blink { 50% { opacity:.35; } }
-
-  /* \u2500\u2500 corps \u2500\u2500 */
-  .body { flex:1; display:flex; min-height:0; }
-  .feedcol { flex:1; min-width:320px; display:flex; flex-direction:column; }
-  .feed { flex:1; overflow-y:auto; padding:4px 14px 10px; display:flex; flex-direction:column; scroll-behavior:smooth; }
-  .fspacer { flex:1; }
-
-  /* chapitres */
-  .chap { flex:none; position:sticky; top:0; z-index:5; margin:8px -4px 2px; padding:7px 12px; display:flex; align-items:center; gap:9px;
-          background:color-mix(in srgb, var(--bg) 88%, transparent); backdrop-filter:blur(6px);
-          border-radius:9px; cursor:pointer; font-size:11.5px; font-weight:800; letter-spacing:.03em; color:var(--ink-mute); }
-  .chap:hover { color:var(--ink); }
-  .chap .cst { flex:none; width:17px; height:17px; border-radius:50%; display:grid; place-items:center; font-size:9.5px; font-weight:900; }
-  .chap.done .cst { background:var(--accent-soft); color:var(--accent); }
-  .chap.cur .cst { background:var(--gold-soft); color:var(--gold); }
-  .chap .cnum { color:var(--ink-ghost); font-weight:700; }
-  .chap .csum { flex:1; min-width:0; white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
-  .chap .cmeta { flex:none; font-size:10.5px; color:var(--ink-ghost); font-weight:600; }
-  .chap .cchev { flex:none; color:var(--ink-ghost); transition:transform .15s; }
-  .chap.open .cchev { transform:rotate(90deg); }
-
-  .row { flex:none; min-height:44px; margin:1px 0 1px 10px; padding:5px 12px 5px 10px; display:flex; align-items:center; gap:11px;
-         cursor:pointer; border-radius:10px; border-left:3px solid transparent; transition:background .12s; }
-  .row:hover { background:var(--line-soft); }
-  .row[aria-selected="true"] { background:var(--sel); border-left-color:var(--gold); }
-  .row .ico { width:24px; height:24px; border-radius:8px; flex:none; display:grid; place-items:center; font-size:11.5px; font-weight:800; }
-  .ico.k-text { background:var(--blue-soft); color:var(--blue); }
-  .ico.k-edit { background:var(--gold-soft); color:var(--gold); }
-  .ico.k-bash { background:var(--accent-soft); color:var(--accent); }
-  .ico.k-read { background:var(--violet-soft); color:var(--violet); }
-  .ico.k-user { background:var(--ink); color:#fdf9f2; }
-  .row .mid { flex:1; min-width:0; }
-  .row .sum { display:block; font-size:13.5px; line-height:1.35; white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
-  .row .raw1 { display:block; font-size:10.5px; color:var(--ink-faint); font-family:ui-monospace,Menlo,monospace;
-               white-space:nowrap; overflow:hidden; text-overflow:ellipsis; margin-top:1px; }
-  body:not(.tech) .row .raw1 { display:none; }
-  .row .route { display:inline-block; font-size:10px; font-weight:800; padding:1px 8px; border-radius:999px; margin-top:2px; }
-  .route.cont { background:var(--blue-soft); color:var(--blue); }
-  .route.newt { background:var(--gold-soft); color:var(--gold); }
-  .row .cnt { flex:none; font-size:10px; font-weight:800; color:var(--gold); background:var(--gold-soft); padding:2px 7px; border-radius:999px; }
-  .row .ts { flex:none; font-size:10.5px; color:var(--ink-ghost); font-variant-numeric:tabular-nums; }
-  @keyframes slidein { from { opacity:0; transform:translateY(6px); } }
-  .row.new { animation:slidein .25s ease-out; }
-
-  /* \u2500\u2500 panneau ancr\xE9 \u2500\u2500 */
-  .panel { flex:none; width:0; overflow:hidden; border-left:1px solid transparent; background:var(--panel);
-           display:flex; flex-direction:column; transition:width .22s ease, border-color .22s; }
-  .panel.open { width:min(430px,46vw); border-left-color:var(--line); }
-  .panel-inner { width:min(430px,46vw); flex:1; display:flex; flex-direction:column; min-height:0; }
-  .phead { flex:none; padding:14px 16px 12px; border-bottom:1px solid var(--line); display:flex; align-items:flex-start; gap:11px; }
-  .phead .ico { width:28px; height:28px; font-size:13px; border-radius:9px; }
-  .phead .tt { min-width:0; flex:1; }
-  .phead .t { font-size:14px; font-weight:700; line-height:1.4; }
-  .phead .s { font-size:11px; color:var(--ink-faint); margin-top:3px; font-variant-numeric:tabular-nums; }
-  .pnav { display:flex; gap:4px; flex:none; }
-  .pnav button { width:26px; height:26px; border:1px solid var(--line); background:var(--panel); border-radius:8px;
-                 color:var(--ink-mute); font-size:12px; cursor:pointer; display:grid; place-items:center; }
-  .pnav button:disabled { opacity:.3; cursor:default; }
-  .pbody { flex:1; overflow-y:auto; padding:16px; display:flex; flex-direction:column; gap:14px; }
-  .plain { font-size:14px; line-height:1.7; }
-  .plain .why { margin-top:8px; font-size:12.5px; color:var(--ink-mute); line-height:1.6; }
-  .facts { display:flex; flex-wrap:wrap; gap:6px; }
-  .fact { font-size:11px; font-weight:700; background:var(--bg); border:1px solid var(--line); color:var(--ink-mute); padding:4px 10px; border-radius:999px; }
-  .fact.ok { background:var(--accent-soft); border-color:transparent; color:var(--accent); }
-  details.techbox { border:1px solid var(--line); border-radius:12px; background:var(--bg); overflow:hidden; }
-  details.techbox summary { list-style:none; cursor:pointer; padding:10px 14px; font-size:11.5px; font-weight:800;
-          letter-spacing:.04em; text-transform:uppercase; color:var(--ink-faint); display:flex; align-items:center; gap:8px; }
-  details.techbox summary::-webkit-details-marker { display:none; }
-  details.techbox summary::after { content:"\u25B8"; margin-left:auto; transition:transform .15s; }
-  details.techbox[open] summary::after { transform:rotate(90deg); }
-  .techlist { padding:0 12px 12px; display:flex; flex-direction:column; gap:8px; }
-  .titem { border:1px solid var(--line); border-radius:10px; background:var(--panel); overflow:hidden; }
-  .titem .th { padding:8px 12px; font-size:11.5px; font-weight:700; color:var(--ink-mute); display:flex; align-items:center; gap:8px; }
-  .titem .th .copy { margin-left:auto; border:none; background:none; color:var(--ink-ghost); font-size:11px; cursor:pointer; padding:2px 4px; border-radius:5px; }
-  .titem .th .copy:hover { color:var(--ink); background:var(--line-soft); }
-  .titem pre { margin:0; border-top:1px solid var(--line-soft); font-family:ui-monospace,Menlo,monospace; font-size:11.5px;
-               line-height:1.55; color:#4a4236; padding:9px 12px; overflow:auto; max-height:240px; white-space:pre-wrap; word-break:break-word; }
-  .d-text { font-size:13.5px; line-height:1.7; }
-  .d-text p { margin:0 0 8px; }
-  .d-text p:last-child { margin-bottom:0; }
-  .d-text h1, .d-text h2, .d-text h3, .d-text h4, .d-text h5, .d-text h6 { margin:12px 0 6px; line-height:1.3; }
-  .d-text h1:first-child, .d-text h2:first-child, .d-text h3:first-child { margin-top:0; }
-  .d-text ul, .d-text ol { margin:0 0 8px; padding-left:20px; }
-  .d-text code { font-family:ui-monospace,Menlo,monospace; font-size:12.5px; background:var(--bg); border-radius:4px; padding:1px 5px; }
-  .d-text pre { margin:0 0 8px; background:var(--bg); border:1px solid var(--line); border-radius:8px; padding:9px 12px; overflow:auto; }
-  .d-text pre code { background:none; border-radius:0; padding:0; }
-  .d-text table { border-collapse:collapse; margin:0 0 8px; font-size:12.5px; }
-  .d-text th, .d-text td { border:1px solid var(--line); padding:4px 8px; text-align:left; }
-  .d-text a { color:var(--blue); }
-  .pfoot { flex:none; border-top:1px solid var(--line); padding:9px 16px; font-size:11px; color:var(--ink-ghost); display:flex; gap:10px; }
-  .kbd { font-family:ui-monospace,Menlo,monospace; font-size:10px; border:1px solid var(--line); border-bottom-width:2px;
-         border-radius:5px; padding:1px 5px; background:var(--panel); color:var(--ink-mute); }
-
-  /* \u2500\u2500 bo\xEEte d'envoi + routage IA \u2500\u2500 */
-  .composer { flex:none; border-top:1px solid var(--line); background:var(--panel); padding:10px 14px; }
-  .composer .cbar { display:flex; gap:8px; }
-  .composer textarea { flex:1; resize:none; border:1px solid var(--line); border-radius:10px; padding:9px 12px; font:inherit; font-size:13px; max-height:110px; background:var(--bg); }
-  .composer textarea:focus { outline:2px solid #241f1a22; }
-  .composer textarea:disabled { opacity:.5; cursor:not-allowed; }
-  .composer button { border:none; border-radius:10px; padding:0 16px; background:var(--ink); color:#fdf9f2; font-weight:700; font-size:13px; cursor:pointer; }
-  .composer button:disabled { opacity:.4; cursor:not-allowed; }
-  .composer .routing { font-size:11px; color:var(--ink-faint); padding:6px 2px 0; min-height:22px; }
-  .composer .routing .r-cont { color:var(--blue); font-weight:700; }
-  .composer .routing .r-newt { color:var(--gold); font-weight:700; }
-  #statusbar { flex:none; padding:4px 20px; font-size:10.5px; color:var(--ink-ghost); border-top:1px solid var(--line-soft); }
-</style>
-</head>
-<body>
-<div id="pickerScreen">
-  <h1>Choisis une session</h1>
-  <div id="pickerList"><div class="pk-empty">Connexion&#8230;</div></div>
-</div>
-
-<div class="app hidden" id="storyScreen">
-  <div class="hero">
-    <div class="hero-top">
-      <span class="pulse" id="pulse"></span>
-      <div class="who">
-        <div class="h1" id="heroTitle"></div>
-        <div class="h2" id="heroSub"></div>
-      </div>
-      <div class="modewrap"><button id="modeSimple" class="on" type="button">Simple</button><button id="modeTech" type="button">Tech</button></div>
-      <a class="sim" id="fullPanelLink" href="#" target="_blank" rel="noopener" title="Ouvrir le panneau complet (Terminal/Chat/JSON/TTY)">&#8599; panneau complet</a>
-      <button class="sim" id="switchBtn" type="button">&#8646; changer</button>
-    </div>
-    <div class="plan" id="plan"></div>
-  </div>
-
-  <div class="body">
-    <div class="feedcol">
-      <div class="feed" id="feed"><div class="fspacer"></div><div id="rows"></div></div>
-      <div class="composer">
-        <div class="cbar">
-          <textarea id="msgBox" rows="1" placeholder="\xC9cris \xE0 l'agent\u2026 (la surcouche classe ton message : suite de la sous-t\xE2che ou nouvelle sous-t\xE2che)"></textarea>
-          <button id="sendBtn" type="button">Envoyer</button>
-        </div>
-        <div class="routing" id="routing"></div>
-      </div>
-    </div>
-
-    <aside class="panel" id="panel" aria-label="D\xE9tail de l'\xE9tape">
-      <div class="panel-inner">
-        <div class="phead">
-          <span class="ico" id="pIco"></span>
-          <div class="tt"><div class="t" id="pTitle"></div><div class="s" id="pSub"></div></div>
-          <div class="pnav"><button id="pPrev" type="button">\u2191</button><button id="pNext" type="button">\u2193</button><button id="pClose" type="button">\u2715</button></div>
-        </div>
-        <div class="pbody" id="pBody"></div>
-        <div class="pfoot"><span class="kbd">\u2191</span><span class="kbd">\u2193</span> naviguer \xB7 <span class="kbd">Esc</span> fermer</div>
-      </div>
-    </aside>
-  </div>
-  <div id="statusbar"></div>
-</div>
-
-<script>
-var $=function(id){ return document.getElementById(id); };
-var esc=function(s){ return String(s==null?"":s).replace(/[&<>]/g,function(c){ return {"&":"&amp;","<":"&lt;",">":"&gt;"}[c]; }); };
-
-// ============================================================
-// renderMd \u2014 vanilla-JS port of markdown-lite.ts. Kept
-// function-for-function identical so the two are easy to diff (same
-// self-contained-panel constraint as buildStoryJs below): headers,
-// bold/italic, inline/fenced code, bullet/numbered lists, pipe tables and
-// links, with every raw text run HTML-escaped before any generated tag
-// wraps it.
-// ============================================================
-function escHtmlMd(s){ return String(s).replace(/[&<>"]/g,function(c){ if(c==='&') return '&amp;'; if(c==='<') return '&lt;'; if(c==='>') return '&gt;'; return '&quot;'; }); }
-function renderInlineMd(text){
-  var out=escHtmlMd(text);
-  out=out.replace(/\`([^\`]+)\`/g,function(_m,code){ return '<code>'+code+'</code>'; });
-  out=out.replace(/\\[([^\\]]+)\\]\\((https?:\\/\\/[^\\s)]+)\\)/g,function(_m,label,url){ return '<a href="'+url+'" target="_blank" rel="noopener noreferrer">'+label+'</a>'; });
-  out=out.replace(/\\*\\*([^*]+)\\*\\*/g,'<strong>$1</strong>');
-  out=out.replace(/(^|[^*])\\*([^*]+)\\*(?!\\*)/g,'$1<em>$2</em>');
-  return out;
-}
-function isTableSepMd(line){ return /^\\s*\\|?\\s*:?-+:?\\s*(\\|\\s*:?-+:?\\s*)+\\|?\\s*$/.test(line); }
-function splitRowMd(line){ return line.trim().replace(/^\\|/,'').replace(/\\|$/,'').split('|').map(function(c){ return c.trim(); }); }
-function renderMd(md){
-  var lines=String(md==null?'':md).replace(/\\r\\n?/g,'\\n').split('\\n');
-  var out=[], para=[], list=null;
-  function flushPara(){ if(para.length){ out.push('<p>'+para.map(renderInlineMd).join('<br>')+'</p>'); para=[]; } }
-  function flushList(){ if(list){ var tag=list.ordered?'ol':'ul'; out.push('<'+tag+'>'+list.items.map(function(i){ return '<li>'+renderInlineMd(i)+'</li>'; }).join('')+'</'+tag+'>'); list=null; } }
-  function flushAll(){ flushPara(); flushList(); }
-  var i=0;
-  while(i<lines.length){
-    var line=lines[i];
-    if(/^\\s*\`\`\`/.test(line)){
-      flushAll();
-      var code=[]; i+=1;
-      while(i<lines.length && !/^\\s*\`\`\`/.test(lines[i])){ code.push(lines[i]); i+=1; }
-      i+=1;
-      out.push('<pre><code>'+escHtmlMd(code.join('\\n'))+'</code></pre>');
-      continue;
-    }
-    var header=line.match(/^(#{1,6})\\s+(.*)$/);
-    if(header){
-      flushAll();
-      var level=header[1].length;
-      out.push('<h'+level+'>'+renderInlineMd(header[2].trim())+'</h'+level+'>');
-      i+=1;
-      continue;
-    }
-    if(/^\\s*\\|/.test(line) && i+1<lines.length && isTableSepMd(lines[i+1])){
-      flushAll();
-      var headCells=splitRowMd(line);
-      i+=2;
-      var bodyRows=[];
-      while(i<lines.length && /^\\s*\\|/.test(lines[i])){ bodyRows.push(splitRowMd(lines[i])); i+=1; }
-      out.push('<table><thead><tr>'+headCells.map(function(c){ return '<th>'+renderInlineMd(c)+'</th>'; }).join('')+'</tr></thead><tbody>'
-        +bodyRows.map(function(r){ return '<tr>'+r.map(function(c){ return '<td>'+renderInlineMd(c)+'</td>'; }).join('')+'</tr>'; }).join('')+'</tbody></table>');
-      continue;
-    }
-    var bullet=line.match(/^\\s*[-*+]\\s+(.*)$/);
-    var numbered=line.match(/^\\s*\\d+\\.\\s+(.*)$/);
-    if(bullet || numbered){
-      flushPara();
-      var ordered=!!numbered;
-      var item=(bullet||numbered)[1];
-      if(!list || list.ordered!==ordered){ flushList(); list={ordered:ordered,items:[]}; }
-      list.items.push(item);
-      i+=1;
-      continue;
-    }
-    if(line.trim()===''){ flushAll(); i+=1; continue; }
-    flushList();
-    para.push(line);
-    i+=1;
-  }
-  flushAll();
-  return out.join('');
-}
-
-${panelBridgeScript("agentproto-session-story-panel")}
-// Best-effort: some hosts forward the triggering tool call's arguments as
-// a notification so the panel can auto-open the right session. Purely
-// additive \u2014 the session picker is the reliable path when this never
-// arrives.
-var pendingSessionId=null;
-onHostNotification(function(method, params){
-  if(/tool-input|tool-call/.test(method)){
-    var args=(params && (params.arguments || params.input)) || {};
-    if(args && args.sessionId) pendingSessionId=args.sessionId;
-  }
-});
-
-// ============================================================
-// buildStory \u2014 vanilla-JS port of session-story.ts. Kept
-// function-for-function identical so the two are easy to diff; the panel
-// resource must be fully self-contained (no bundler/dynamic import), so it
-// cannot import the TS module directly.
-// ============================================================
-
-var SALIENT_KEYS=["file_path","path","filePath","file","command","pattern","query","q","url","todos","description","prompt"];
-function truncateStr(v,max){ var o=String(v).replace(/\\s+/g,' ').trim(); return o.length>max? o.slice(0,max-1)+'\u2026':o; }
-function formatArgValue(v){
-  if(typeof v==='string') return v;
-  if(Array.isArray(v)) return v.length+' item'+(v.length===1?'':'s');
-  if(v && typeof v==='object') return JSON.stringify(v);
-  return String(v);
-}
-function pickSalient(args){
-  for(var i=0;i<SALIENT_KEYS.length;i++){
-    var k=SALIENT_KEYS[i], v=args[k];
-    if(v!==undefined && v!==null && v!=='') return formatArgValue(v);
-  }
-  return null;
-}
-function formatToolCall(name,args){
-  name=name||'tool';
-  args=(args && typeof args==='object' && !Array.isArray(args)) ? args : {};
-  var salient=pickSalient(args);
-  if(salient!==null){
-    if(name.toLowerCase().indexOf(salient.toLowerCase())>=0) return truncateStr(name,120);
-    return truncateStr(name+' '+salient,120);
-  }
-  if(Object.keys(args).length===0) return name;
-  return truncateStr(name+' '+JSON.stringify(args),120);
-}
-function extractText(v){
-  if(v==null) return null;
-  if(typeof v==='string') return v;
-  if(Array.isArray(v)){
-    var parts=v.map(extractText).filter(function(x){ return x!=null; });
-    return parts.length? parts.join('\\n') : null;
-  }
-  if(typeof v==='object'){
-    if(typeof v.text==='string') return v.text;
-    if(typeof v.message==='string') return v.message;
-    if(Array.isArray(v.content)) return extractText(v.content);
-    if(typeof v.error==='string') return v.error;
-    if(v.error && typeof v.error==='object' && typeof v.error.message==='string') return v.error.message;
-    return null;
-  }
-  return null;
-}
-function formatToolResult(toolName,result,isError){
-  var text=extractText(result);
-  if(isError){
-    var message=text!=null? text : (result!=null? JSON.stringify(result) : 'failed');
-    var firstLine=String(message).split(/\\r?\\n/)[0] || message;
-    return truncateStr(firstLine,160);
-  }
-  if(text==null) return null;
-  var trimmed=text.trim();
-  if(!trimmed) return null;
-  var lines=trimmed.split(/\\r?\\n/);
-  if(lines.length>1){
-    var bytes=new TextEncoder().encode(trimmed).length;
-    return lines.length+' lines, '+bytes+'B';
-  }
-  return truncateStr(lines[0],160);
-}
-
-function classifyKind(toolCalls){
-  if(!toolCalls || toolCalls.length===0) return 'text';
-  var names=toolCalls.map(function(t){ return t.name.toLowerCase(); });
-  if(names.some(function(n){ return /edit|write/.test(n); })) return 'edit';
-  if(names.some(function(n){ return /bash|terminal|command/.test(n); })) return 'bash';
-  if(names.some(function(n){ return /read|grep|glob/.test(n); })) return 'read';
-  return 'text';
-}
-var NEW_CHAPTER_RE=/\\b(aussi|autre|ensuite|nouveau|nouvelle|plut[o\xF4]t|maintenant|apr[e\xE8]s \xE7a|il faudrait|peux[- ]tu|on pourrait|ajoute|g[e\xE8]re)\\b/iu;
-function classifyRoute(text){
-  var newt=NEW_CHAPTER_RE.test(text);
-  if(!newt) return {route:'cont'};
-  var title=text.replace(/[.?!].*$/,'').slice(0,42);
-  return {route:'newt', title:title};
-}
-function formatTsJs(ts){
-  if(ts===undefined || ts===null || isNaN(ts)) return '';
-  return new Date(ts).toISOString().slice(11,19);
-}
-function firstMeaningfulLine(text){
-  if(!text) return undefined;
-  var lines=text.split('\\n').map(function(l){ return l.trim(); }).filter(function(l){ return l.length>0; });
-  return lines[0];
-}
-function lineCountOf(text){
-  var n=(text||'').split('\\n').filter(function(l){ return l.trim().length>0; }).length;
-  return n||1;
-}
-function parseArgsJson(s){ try{ return JSON.parse(s); }catch(e){ return {}; } }
-
-function foldToolStep(assistant,toolResults){
-  var toolCalls=assistant.toolCalls||[];
-  var kind=classifyKind(toolCalls);
-  var count=toolCalls.length||1;
-  var items=[], facts=[];
-  if(assistant.text && assistant.text.trim()) items.push({text:assistant.text.trim()});
-  toolCalls.forEach(function(tc,i){
-    var args=parseArgsJson(tc.args);
-    var h=formatToolCall(tc.name,args);
-    var resultMsg=toolResults[i];
-    var resultText=(resultMsg && resultMsg.text) || '';
-    var isError=resultText.indexOf('[error]')===0;
-    var r=isError? resultText.slice(7).trim() : resultText;
-    items.push({h:h,r:r});
-    var fact=formatToolResult(tc.name,r,isError);
-    if(fact) facts.push(fact);
-  });
-  var firstLine=firstMeaningfulLine(assistant.text);
-  var firstToolCall=toolCalls[0];
-  var sum=firstLine!==undefined? firstLine : (firstToolCall? formatToolCall(firstToolCall.name,parseArgsJson(firstToolCall.args)) : '\u2026');
-  var raw1;
-  if(toolCalls.length===0) raw1='assistant \xB7 '+lineCountOf(assistant.text)+' ligne(s)';
-  else if(toolCalls.length===1) raw1=formatToolCall(firstToolCall.name,parseArgsJson(firstToolCall.args));
-  else raw1=(firstToolCall? firstToolCall.name : 'tool')+' \xD7'+toolCalls.length;
-  return {kind:kind, ts:formatTsJs(assistant.ts), sum:sum, raw1:raw1, count:count, facts:facts, items:items};
-}
-function foldUserStep(msg){
-  var text=msg.text||'';
-  return {kind:'user', ts:formatTsJs(msg.ts), sum:'\xAB '+truncateStr(text,80)+' \xBB', raw1:'user \xB7 '+lineCountOf(text)+' ligne(s)', count:1, facts:[], items:[{text:text}], userText:text};
-}
-function foldOrphanToolStep(msg){
-  var text=msg.text||'';
-  var isError=text.indexOf('[error]')===0;
-  var r=isError? text.slice(7).trim() : text;
-  var name=msg.toolName||'tool';
-  var fact=formatToolResult(name,r,isError);
-  return {kind:classifyKind([{name:name}]), ts:formatTsJs(msg.ts), sum: msg.toolName? (msg.toolName+' \xB7 r\xE9sultat') : "R\xE9sultat d'outil", raw1: msg.toolName||'tool', count:1, facts: fact?[fact]:[], items:[{h:name,r:r}]};
-}
-function foldSystemStep(msg){
-  var text=msg.text||'';
-  var line=firstMeaningfulLine(text);
-  return {kind:'text', ts:formatTsJs(msg.ts), sum: line!==undefined? line : text, raw1:'system', count:1, facts:[], items: text?[{text:text}]:[]};
-}
-function foldMessages(messages){
-  var steps=[], i=0;
-  while(i<messages.length){
-    var msg=messages[i];
-    if(msg.role==='user'){ steps.push(foldUserStep(msg)); i+=1; continue; }
-    if(msg.role==='assistant'){
-      var j=i+1, toolResults=[];
-      while(j<messages.length && messages[j].role==='tool'){ toolResults.push(messages[j]); j+=1; }
-      steps.push(foldToolStep(msg,toolResults)); i=j; continue;
-    }
-    if(msg.role==='tool'){ steps.push(foldOrphanToolStep(msg)); i+=1; continue; }
-    steps.push(foldSystemStep(msg)); i+=1;
-  }
-  return steps;
-}
-function buildStoryJs(messages){
-  var folded=foldMessages(messages||[]);
-  var chapters=[], steps=[];
-  var currentChapterId, sawFirstUser=false;
-  function closeCurrent(){ var cur=chapters.filter(function(c){ return c.id===currentChapterId; })[0]; if(cur) cur.status='done'; }
-  function openChapter(title){ var id='c'+(chapters.length+1); chapters.push({id:id,title:title,status:'cur'}); return id; }
-  folded.forEach(function(step){
-    var route;
-    if(step.kind==='user' && step.userText!==undefined){
-      if(!sawFirstUser){ sawFirstUser=true; currentChapterId=openChapter('Cadrage'); }
-      else {
-        var verdict=classifyRoute(step.userText);
-        route=verdict.route;
-        if(verdict.route==='newt'){ closeCurrent(); currentChapterId=openChapter(verdict.title||'Nouvelle sous-t\xE2che'); }
-      }
-    } else if(currentChapterId===undefined){ currentChapterId=openChapter('Cadrage'); }
-    var out={chap:currentChapterId, kind:step.kind, ts:step.ts, sum:step.sum, raw1:step.raw1, count:step.count, facts:step.facts, items:step.items};
-    if(route) out.route=route;
-    steps.push(out);
-  });
-  return {chapters:chapters, steps:steps};
-}
-
-// ============================================================
-// App state
-// ============================================================
-var sessions=[];
-var activeSessionId=null;
-var story={chapters:[], steps:[]};
-var open={};
-var selected=-1;
-var lastSeenOutputAt=null;
-var pollTimer=null, polling=false;
-var ICONS={text:["k-text","A"],edit:["k-edit","\u270E"],bash:["k-bash","\u25B8"],read:["k-read","\u2315"],user:["k-user","T"]};
-var icoSpec=function(k){ return ICONS[k]||ICONS.text; };
-var chapOf=function(id){ return story.chapters.filter(function(c){ return c.id===id; })[0]; };
-var curChap=function(){ return story.chapters.filter(function(c){ return c.status==='cur'; })[0] || story.chapters[story.chapters.length-1]; };
-
-function setStatus(msg){ $('statusbar').textContent=msg; }
-function nowTs(){ return new Date().toLocaleTimeString('fr-FR',{hour:'2-digit',minute:'2-digit',second:'2-digit'}); }
-
-function titleOf(s){
-  return s.label || s.name || (s.command? s.command.split(/\\s+/)[0].split('/').pop() : null) || s.id.slice(0,8);
-}
-
-// ============================================================
-// Picker screen
-// ============================================================
-function renderPicker(){
-  var el=$('pickerList');
-  if(!sessions.length){ el.innerHTML='<div class="pk-empty">Aucune session</div>'; return; }
-  var html='';
-  sessions.forEach(function(s){
-    html+='<div class="pk-item" data-id="'+esc(s.id)+'">'
-        + '<span class="pk-name">'+esc(titleOf(s))+'</span>'
-        + '<span class="badge '+esc(s.status)+'">'+esc(s.status)+'</span>'
-        + '<span class="pk-meta">'+esc(s.kind||'')+'</span>'
-        + '</div>';
-  });
-  el.innerHTML=html;
-  Array.prototype.forEach.call(el.querySelectorAll('.pk-item'), function(row){
-    row.onclick=function(){ openSession(row.getAttribute('data-id')); };
-  });
-}
-
-function showPicker(){
-  activeSessionId=null;
-  $('pickerScreen').classList.remove('hidden');
-  $('storyScreen').classList.add('hidden');
-  renderPicker();
-}
-
-function openSession(id){
-  activeSessionId=id;
-  story={chapters:[], steps:[]};
-  open={};
-  selected=-1;
-  lastSeenOutputAt=null;
-  $('pickerScreen').classList.add('hidden');
-  $('storyScreen').classList.remove('hidden');
-  $('fullPanelLink').href='https://cli.agentproto.sh/panel?session='+encodeURIComponent(id);
-  closePanel();
-  loadStory().then(renderAll);
-}
-
-// ============================================================
-// Story loading
-// ============================================================
-function activeSession(){ return sessions.filter(function(s){ return s.id===activeSessionId; })[0]; }
-
-function loadStory(){
-  return callTool('agent_export', {sessionId:activeSessionId, format:'json'}).then(function(data){
-    var messages=(data && data.messages) || [];
-    story=buildStoryJs(messages);
-    // Default open state: only the last (current) chapter is expanded.
-    var last=story.chapters[story.chapters.length-1];
-    if(last && !(last.id in open)) open[last.id]=true;
-  }).catch(function(e){
-    setStatus('Erreur export : '+e.message);
-  });
-}
-
-function canSend(){
-  var s=activeSession();
-  return !!s && s.kind==='agent-cli' && s.status==='running';
-}
-
-function renderComposer(){
-  var s=activeSession();
-  var box=$('msgBox'), btn=$('sendBtn');
-  var enabled=canSend();
-  box.disabled=!enabled;
-  btn.disabled=!enabled;
-  if(!s){ box.placeholder='Session introuvable.'; }
-  else if(!enabled) box.placeholder='Lecture seule \u2014 session '+esc(s.status)+'.';
-  else box.placeholder="\xC9cris \xE0 l'agent\u2026 (la surcouche classe ton message : suite de la sous-t\xE2che ou nouvelle sous-t\xE2che)";
-}
-
-function renderHero(){
-  var s=activeSession();
-  $('heroTitle').textContent=s? titleOf(s) : (activeSessionId||'');
-  var firstUser=story.steps.filter(function(st){ return st.kind==='user'; })[0];
-  var mission=firstUser? firstUser.userText || (firstUser.items[0] && firstUser.items[0].text) : null;
-  $('heroSub').textContent=mission? truncateStr(mission,200) : 'Aucun message pour le moment.';
-  var p=$('pulse');
-  p.classList.toggle('off', !(s && (s.status==='running' || s.status==='starting')));
-  renderComposer();
-}
-
-function renderAll(){
-  renderHero();
-  renderPlan();
-  renderRows('bottom');
-}
-
-// ============================================================
-// big picture strip
-// ============================================================
-function renderPlan(){
-  var done=story.chapters.filter(function(c){ return c.status==='done'; }).length;
-  $('plan').innerHTML=story.chapters.map(function(c,i){
-    return '<span class="pt '+c.status+'" data-c="'+esc(c.id)+'"><span class="st">'+(c.status==='done'?'\u2713':'\u25CF')+'</span>'+(i+1)+'. '+esc(c.title)+'</span>';
-  }).join('') + '<span class="pt" style="cursor:default"><b>'+done+'/'+story.chapters.length+'</b>&nbsp;faites</span>';
-  Array.prototype.forEach.call($('plan').querySelectorAll('.pt[data-c]'), function(el){
-    el.onclick=function(){ open[el.getAttribute('data-c')]=true; renderRows(); jumpToChap(el.getAttribute('data-c')); };
-  });
-}
-function jumpToChap(cid){
-  var el=document.querySelector('.chap[data-c="'+cid+'"]');
-  if(el) el.scrollIntoView({block:'start',behavior:'smooth'});
-}
-
-// ============================================================
-// feed segment\xE9 par chapitres
-// ============================================================
-function rowHtml(s,i,isNew){
-  var spec=icoSpec(s.kind), cls=spec[0], ch=spec[1];
-  var route=s.route? '<span class="route '+(s.route==='newt'?'newt':'cont')+'">'+(s.route==='newt'?'\u2605 nouvelle sous-t\xE2che':'\u21B3 suite')+'</span>' : '';
-  return '<div class="row '+(isNew?'new':'')+'" aria-selected="'+(i===selected)+'" data-i="'+i+'">'
-    + '<span class="ico '+cls+'">'+ch+'</span>'
-    + '<span class="mid"><span class="sum">'+esc(s.sum)+'</span><span class="raw1">'+esc(s.raw1||'')+'</span>'+route+'</span>'
-    + (s.count>1? '<span class="cnt">\xD7'+s.count+'</span>':'') + '<span class="ts">'+esc(s.ts||'')+'</span>'
-    + '</div>';
-}
-function renderRows(keepScroll,newIdx){
-  var feed=$('feed');
-  var prevH=feed.scrollHeight, prevTop=feed.scrollTop;
-  var html='';
-  story.chapters.forEach(function(c,ci){
-    var chapSteps=[];
-    story.steps.forEach(function(s,i){ if(s.chap===c.id) chapSteps.push({s:s,i:i}); });
-    if(!chapSteps.length) return;
-    var isOpen=!!open[c.id];
-    html+='<div class="chap '+c.status+' '+(isOpen?'open':'')+'" data-c="'+esc(c.id)+'">'
-      + '<span class="cst">'+(c.status==='done'?'\u2713':'\u25CF')+'</span><span class="cnum">'+(ci+1)+'.</span>'
-      + '<span class="csum">'+esc(c.title)+'</span>'
-      + '<span class="cmeta">'+chapSteps.length+' \xE9tape'+(chapSteps.length>1?'s':'')+'</span><span class="cchev">\u25B8</span>'
-      + '</div>';
-    if(isOpen) html += chapSteps.map(function(x){ return rowHtml(x.s,x.i,x.i===newIdx); }).join('');
-  });
-  $('rows').innerHTML=html;
-  Array.prototype.forEach.call(document.querySelectorAll('.row'), function(el){
-    el.onclick=function(){ selectStep(Number(el.getAttribute('data-i'))); };
-  });
-  Array.prototype.forEach.call(document.querySelectorAll('.chap'), function(el){
-    el.onclick=function(){ var c=el.getAttribute('data-c'); open[c]=!open[c]; renderRows(); };
-  });
-  if(keepScroll==='bottom') feed.scrollTop=feed.scrollHeight;
-  else if(keepScroll==='preserve') feed.scrollTop=feed.scrollHeight-prevH+prevTop;
-}
-
-// ============================================================
-// panneau ancr\xE9
-// ============================================================
-function selectStep(i){
-  selected=i;
-  var s=story.steps[i]; if(!s) return;
-  open[s.chap]=true;
-  $('panel').classList.add('open');
-  var spec=icoSpec(s.kind), cls=spec[0], ch=spec[1];
-  var ico=$('pIco'); ico.className='ico '+cls; ico.textContent=ch;
-  $('pTitle').textContent=s.sum;
-  var c=chapOf(s.chap);
-  $('pSub').textContent=(s.ts? s.ts+' \xB7 ':'')+(c? ('sous-t\xE2che : '+c.title) : '');
-  var facts=(s.facts||[]).map(function(f){
-    return '<span class="fact '+(/\u2713|exit 0|passed|0 match/.test(f)?'ok':'')+'">'+esc(f)+'</span>';
-  }).join('');
-  var tech=(s.items||[]).map(function(it,k){
-    return it.text!==undefined
-      ? '<div class="d-text">'+renderMd(it.text)+'</div>'
-      : '<div class="titem"><div class="th">'+esc(it.h)+'<button class="copy" data-k="'+k+'" type="button">\u29C9</button></div><pre>'+esc(it.r)+'</pre></div>';
-  }).join('');
-  $('pBody').innerHTML=''
-    + '<div class="plain"><div>'+esc(s.sum)+'.</div><div class="why">'+esc(s.why||'')+'</div></div>'
-    + (facts? '<div class="facts">'+facts+'</div>':'')
-    + '<details class="techbox" '+(document.body.classList.contains('tech')?'open':'')+'>'
-    + '<summary>D\xE9tail technique \xB7 '+(s.items||[]).length+'</summary><div class="techlist">'+tech+'</div>'
-    + '</details>';
-  Array.prototype.forEach.call($('pBody').querySelectorAll('.copy'), function(btn){
-    btn.onclick=function(e){
-      e.stopPropagation();
-      var it=(s.items||[])[Number(btn.getAttribute('data-k'))];
-      var payload=(it.h||'')+'\\n'+(it.r||it.text||'');
-      if(navigator.clipboard) navigator.clipboard.writeText(payload).catch(function(){});
-      btn.textContent='\u2713'; setTimeout(function(){ btn.textContent='\u29C9'; },900);
-    };
-  });
-  $('pPrev').disabled=i<=0; $('pNext').disabled=i>=story.steps.length-1;
-  renderRows();
-  var el=document.querySelector('.row[data-i="'+i+'"]');
-  if(el) el.scrollIntoView({block:'nearest',behavior:'smooth'});
-}
-function closePanel(){ selected=-1; var p=$('panel'); if(p) p.classList.remove('open'); renderRows(); }
-$('pClose').addEventListener('click',closePanel);
-$('pPrev').addEventListener('click',function(){ if(selected>0) selectStep(selected-1); });
-$('pNext').addEventListener('click',function(){ if(selected<story.steps.length-1) selectStep(selected+1); });
-document.addEventListener('keydown',function(e){
-  if(e.key==='Escape'){ closePanel(); return; }
-  if($('storyScreen').classList.contains('hidden')) return;
-  if(selected<0 || e.target.tagName==='TEXTAREA') return;
-  if(e.key==='ArrowUp'){ e.preventDefault(); if(selected>0) selectStep(selected-1); }
-  if(e.key==='ArrowDown'){ e.preventDefault(); if(selected<story.steps.length-1) selectStep(selected+1); }
-});
-
-// ============================================================
-// Simple / Tech modes
-// ============================================================
-function setMode(tech){
-  document.body.classList.toggle('tech',tech);
-  $('modeTech').classList.toggle('on',tech);
-  $('modeSimple').classList.toggle('on',!tech);
-  if(selected>=0) selectStep(selected);
-}
-$('modeSimple').addEventListener('click',function(){ setMode(false); });
-$('modeTech').addEventListener('click',function(){ setMode(true); });
-$('switchBtn').addEventListener('click', function(){ if(pollTimer) clearTimeout(pollTimer); showPicker(); doPoll(); });
-
-// ============================================================
-// composer \u2014 local chapter-routing classification + agent_prompt
-// ============================================================
-$('sendBtn').addEventListener('click', sendMsg);
-$('msgBox').addEventListener('keydown', function(e){
-  if(e.key==='Enter' && !e.shiftKey){ e.preventDefault(); sendMsg(); }
-});
-function sendMsg(){
-  if(!canSend()) return;
-  var box=$('msgBox'), text=box.value.trim();
-  if(!text) return;
-  box.value='';
-  var cur=curChap();
-  var r=cur? classifyRoute(text) : {route:'cont'};
-  var chapId=cur? cur.id : null;
-  if(r.route==='newt' && cur){
-    cur.status='done';
-    var id='c'+(story.chapters.length+1);
-    story.chapters.push({id:id, title:r.title||'Nouvelle sous-t\xE2che', status:'cur'});
-    chapId=id; open[id]=true;
-    $('routing').innerHTML='\u2726 class\xE9 : <span class="r-newt">\u2605 nouvelle sous-t\xE2che \xAB '+esc(r.title||'')+' \xBB</span>';
-  } else {
-    $('routing').innerHTML='\u2726 class\xE9 : <span class="r-cont">\u21B3 suite de \xAB '+esc(cur? cur.title : '')+' \xBB</span>';
-  }
-  setTimeout(function(){ $('routing').textContent=''; },5000);
-  story.steps.push({
-    chap:chapId, kind:'user', ts:nowTs(),
-    sum:'\xAB '+text.slice(0,80)+(text.length>80?'\u2026':'')+' \xBB',
-    raw1:'user \xB7 '+text.split('\\n').length+' ligne(s)',
-    route:r.route, facts:[], items:[{text:text}], userText:text,
-  });
-  renderPlan(); renderRows('bottom', story.steps.length-1);
-  callTool('agent_prompt', {sessionId:activeSessionId, prompt:text}).catch(function(e){
-    setStatus('Envoi \xE9chou\xE9 : '+e.message);
-  });
-}
-
-// ============================================================
-// Poll \u2014 session_list every ~5s; re-fetch agent_export only on turn
-// boundaries (lastOutputAt changed for the active session).
-// ============================================================
-var POLL_MS=5000;
-function loadSessions(){
-  return callTool('session_list', {kind:'all'}).then(function(data){
-    sessions=data.sessions||[];
-    if($('pickerScreen') && !$('pickerScreen').classList.contains('hidden')) renderPicker();
-  }).catch(function(e){ setStatus('Erreur : '+e.message); });
-}
-function doPoll(){
-  if(polling) return;
-  polling=true;
-  loadSessions().then(function(){
-    if(!activeSessionId){ polling=false; pollTimer=setTimeout(doPoll,POLL_MS); return; }
-    var s=activeSession();
-    if(!s){ polling=false; pollTimer=setTimeout(doPoll,POLL_MS); return; }
-    renderHero();
-    var changed=s.lastOutputAt && s.lastOutputAt!==lastSeenOutputAt;
-    if(changed){
-      lastSeenOutputAt=s.lastOutputAt;
-      loadStory().then(function(){ renderPlan(); renderRows('bottom'); polling=false; pollTimer=setTimeout(doPoll,POLL_MS); });
-    } else {
-      polling=false; pollTimer=setTimeout(doPoll,POLL_MS);
-    }
-  }).catch(function(){ polling=false; pollTimer=setTimeout(doPoll,POLL_MS); });
-}
-
-// ============================================================
-// Boot
-// ============================================================
-initBridge().then(loadSessions).then(function(){
-  setTimeout(function(){
-    var target=pendingSessionId && sessions.some(function(s){ return s.id===pendingSessionId; })
-      ? pendingSessionId
-      : null;
-    if(!target){
-      var agentSessions=sessions.filter(function(s){ return s.kind==='agent-cli'; });
-      if(agentSessions.length===1) target=agentSessions[0].id;
-    }
-    if(target) openSession(target); else showPicker();
-    pollTimer=setTimeout(doPoll,POLL_MS);
-  }, 50);
-}).catch(function(e){
-  setStatus('Bridge : '+e.message);
-  $('pickerList').innerHTML='<div class="pk-empty">\xC9chec connexion bridge : '+esc(e.message)+'</div>';
-});
-</script>
-</body>
-</html>`;
-
-// src/session-story-panel-app.ts
-var sessionStoryInputSchema = z.object({
-  sessionId: z.string().optional().describe(
-    "Session id to open directly. When omitted, the panel shows a session picker (built from session_list) and lets the user choose."
-  )
-});
-function makeSessionStoryPanelApp(ops) {
-  return {
-    id: "agentproto_session_story",
-    title: "Session Story",
-    description: "Open the session story panel \u2014 a readable, per-session timeline for two audiences at once: a plain-language summary of every step for beginners, expandable to raw tool-call detail for technical users. Shows a one-sentence mission, a plan strip of inferred sub-task chapters, a chapter-segmented feed, and a composer to keep driving the session. Polls live data and lets you jump to any step.",
-    inputSchema: sessionStoryInputSchema,
-    execute: async (input) => input.sessionId ? { sessionId: input.sessionId } : { sessions: ops.listSessions("all") },
-    html: SESSION_STORY_PANEL_HTML
-  };
-}
 var terminalPanelInputSchema = z.object({
   sessionId: z.string().optional().describe(
     "Attach to an existing PTY session (id or name from terminal_start). Omit to spawn a new one from `argv`."
@@ -20177,819 +18612,6 @@ initBridge().then(function() {
 </body>
 </html>`;
 }
-var liveSessionInputSchema = z.object({
-  sessionId: z.string().optional().describe(
-    "Attach the widget to an existing session by id or name. Omit to self-discover the newest running session from the tree."
-  )
-});
-function makeLiveSessionApp(ops) {
-  const httpBaseUrl = ops?.httpBaseUrl ?? "http://127.0.0.1:18790";
-  const httpOrigin = new URL(httpBaseUrl).origin;
-  return {
-    id: "live_session",
-    title: "Live Session",
-    description: "Open the live session widget \u2014 a two-pane view of a running agent session: a live tree on the left, a streaming timeline (text, tool calls/results, turn-end) on the right. Omit `sessionId` to attach to the newest running session; pass one to attach directly.",
-    inputSchema: liveSessionInputSchema,
-    execute: async (input) => ({
-      sessionId: input.sessionId,
-      httpBaseUrl
-    }),
-    html: (initData) => LIVE_SESSION_HTML(initData),
-    csp: { connectDomains: [httpOrigin] }
-  };
-}
-function LIVE_SESSION_HTML(initData) {
-  return `<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>agentproto live session</title>
-<style>
-*{box-sizing:border-box;margin:0;padding:0}
-:root{
-  --bg:#0d1117;--bg2:#161b22;--bg3:#21262d;--border:#30363d;
-  --text:#e6edf3;--text2:#8b949e;--text3:#6e7681;
-  --green:#3fb950;--yellow:#d29922;--red:#f85149;--blue:#58a6ff;--purple:#bc8cff;
-}
-html,body{height:100%;font-family:ui-sans-serif,system-ui,-apple-system,'Segoe UI',sans-serif;font-size:13px;background:var(--bg);color:var(--text);overflow:hidden}
-#app{display:flex;height:100%}
-#tree-pane{width:280px;flex-shrink:0;display:flex;flex-direction:column;border-right:1px solid var(--border);background:var(--bg2)}
-#tree-head{padding:10px 12px;border-bottom:1px solid var(--border);font-weight:600;font-size:12px;color:var(--text2);text-transform:uppercase;letter-spacing:.04em;flex-shrink:0}
-#tree-body{flex:1;overflow-y:auto;padding:6px}
-#timeline-pane{flex:1;display:flex;flex-direction:column;min-width:0;position:relative}
-#timeline-head{padding:10px 14px;border-bottom:1px solid var(--border);display:flex;align-items:center;gap:10px;flex-shrink:0}
-#timeline-head .focus-id{font-weight:600;font-size:13px;font-family:Menlo,Monaco,monospace}
-#head-summary{margin-left:auto;font-size:11px;color:var(--text2);display:flex;align-items:center;gap:4px;white-space:nowrap;overflow:hidden;min-width:0}
-#head-summary .sdot{display:inline-block;width:7px;height:7px;border-radius:50%;margin-right:3px;vertical-align:1px}
-#head-summary .sdot.running{background:var(--green)}
-#head-summary .sdot.grey{background:var(--text3)}
-#head-summary .sdot.error{background:var(--red)}
-#usage-chip{font-size:10.5px;font-family:Menlo,Monaco,monospace;background:var(--bg3);border-radius:4px;padding:1px 6px;color:var(--text)}
-#status-line{margin-left:8px;font-size:11px;color:var(--text2);flex-shrink:0}
-#timeline-body{flex:1;overflow-y:auto;padding:10px 14px;display:flex;flex-direction:column;gap:8px}
-#head-selector{display:none;max-width:42%;font:inherit;font-size:12px;background:var(--bg3);color:var(--text);border:1px solid var(--border);border-radius:5px;padding:2px 4px}
-#new-pill{display:none;position:absolute;right:14px;bottom:12px;z-index:6;background:var(--blue);color:#0d1117;border:none;font-size:11px;font-weight:700;padding:5px 11px;border-radius:12px;cursor:pointer;box-shadow:0 1px 4px rgba(0,0,0,.4)}
-#new-pill.show{display:block}
-
-/* WP3 compact mode \u2014 colour rail + tighter rows; only under body.compact-mode
-   (displayMode 'inline' or narrow viewport). fullscreen/pip keep the cards. */
-body.compact-mode #tree-pane{display:none}
-body.compact-mode #head-selector{display:inline-block}
-body.compact-mode #focus-id-label{display:none}
-body.compact-mode .row{border-radius:6px;padding:5px 8px;border-left-width:3px}
-body.compact-mode .row.text{border-left-color:var(--blue)}
-body.compact-mode .row.tool-call{border-left-color:var(--yellow)}
-body.compact-mode .row.turn-end{border-left-color:var(--purple)}
-body.compact-mode .row .body{font-size:12px;margin-top:3px}
-body.compact-mode .row .rhead{font-size:10px}
-details.tool-group{border:1px solid var(--border);border-radius:8px;background:var(--bg2);padding:5px 8px;border-left:3px solid var(--yellow)}
-details.tool-group>summary{cursor:pointer;font-size:11px;color:var(--text2);font-weight:600;list-style:none}
-details.tool-group[open]>summary{margin-bottom:6px}
-details.tool-group .row{margin-top:5px}
-
-.tnode{border-radius:6px;cursor:pointer;padding:5px 8px;margin:1px 0;display:flex;align-items:center;gap:7px;font-size:12px}
-.tnode:hover{background:var(--bg3)}
-.tnode.focus{background:var(--bg3);outline:1px solid var(--blue)}
-.tnode .dot{width:8px;height:8px;border-radius:50%;flex-shrink:0}
-.dot.running{background:var(--green)}
-.dot.grey{background:var(--text3)}
-.dot.error{background:var(--red)}
-.tnode .label{flex:1;min-width:0;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;font-family:Menlo,Monaco,monospace}
-.tnode .badge{font-size:9px;font-weight:700;color:var(--purple);border:1px solid var(--purple);border-radius:3px;padding:0 4px;flex-shrink:0}
-.tchildren{margin-left:14px;border-left:1px solid var(--border);padding-left:4px}
-#tree-empty{padding:12px;color:var(--text3);font-size:12px}
-
-.row{border:1px solid var(--border);border-radius:8px;background:var(--bg2);padding:8px 10px}
-.row .rhead{display:flex;align-items:center;gap:8px;font-size:11px;color:var(--text2)}
-.row .kind{font-weight:700;text-transform:uppercase;letter-spacing:.03em;font-size:10px}
-.row.text .kind{color:var(--blue)}
-.row.tool-call .kind{color:var(--yellow)}
-.row.turn-end .kind{color:var(--purple)}
-.row .body{margin-top:5px;font-size:12.5px;line-height:1.5;white-space:pre-wrap;word-break:break-word}
-.row.text .body{font-family:inherit}
-.row.tool-call .toolname{font-family:Menlo,Monaco,monospace;font-weight:600}
-.status-badge{font-size:9px;font-weight:700;border-radius:3px;padding:1px 5px;margin-left:6px}
-.status-badge.pending{background:var(--bg3);color:var(--text2)}
-.status-badge.ok{background:#0f3d20;color:var(--green)}
-.status-badge.error{background:#3d1418;color:var(--red)}
-.row details{margin-top:6px}
-.row summary{cursor:pointer;font-size:11px;color:var(--text2)}
-.row pre{margin-top:4px;font-family:Menlo,Monaco,monospace;font-size:11px;white-space:pre-wrap;word-break:break-word;color:var(--text2);background:var(--bg);border-radius:5px;padding:6px 8px;max-height:200px;overflow:auto}
-.chip{display:inline-block;font-size:10.5px;font-family:Menlo,Monaco,monospace;background:var(--bg3);border-radius:4px;padding:2px 6px}
-#timeline-empty{color:var(--text3);font-size:12px;padding:8px 2px}
-</style>
-</head>
-<body>
-<div id="app">
-  <div id="tree-pane">
-    <div id="tree-head">Sessions</div>
-    <div id="tree-body"><div id="tree-empty">Loading\u2026</div></div>
-  </div>
-  <div id="timeline-pane">
-    <div id="timeline-head">
-      <span class="focus-id" id="focus-id-label">\u2014</span>
-      <select id="head-selector" title="Sessions"></select>
-      <span id="head-summary"></span>
-      <span id="status-line">connecting\u2026</span>
-    </div>
-    <div id="timeline-body"><div id="timeline-empty">No session focused yet.</div></div>
-    <button id="new-pill" type="button">\u2193 New messages</button>
-  </div>
-</div>
-<script>
-window.__APP_INIT__ = ${JSON.stringify(initData)};
-
-${panelBridgeScript("agentproto-live-session")}
-
-// ============================================================
-// INLINED REDUCER COPY \u2014 hand-kept mirror of live-session-app.logic.ts.
-// Plain JS, same semantics: coalesce consecutive text-delta of the same
-// session (and rejoin an unterminated mid-line fragment split by an
-// interleaved record \u2014 see the TS module's text-delta arm), pair
-// tool-call/tool-result by toolCallId, pass through turn-end, keep usage
-// as STATE (SPEC \xA71: usage leaves the timeline \u2014 a usage_update record
-// never produces a row), ignore unknown kinds. Keep in sync with the TS
-// module; the TS module is the one the test suite imports.
-// ============================================================
-
-function initialTimelineState() {
-  return { rows: [], usage: null };
-}
-
-function rowId(record, rows) {
-  return record.seq != null ? (record.kind + '-' + record.seq) : (record.kind + '-' + rows.length);
-}
-
-// Fold a text-delta record into an existing row (fresh object), keeping the
-// row's "partial" hint in step with the latest record \u2014 see mergeTextDelta in
-// the TS module.
-function mergeTextDelta(row, record) {
-  var merged = Object.assign({}, row, {
-    text: row.text + (record.text || ''),
-    seq: record.seq,
-    ts: record.ts,
-  });
-  if (record.partial === true) merged.partial = true;
-  else delete merged.partial;
-  return merged;
-}
-
-function reduceEvent(state, record) {
-  switch (record.kind) {
-    case 'text-delta': {
-      var last = state.rows[state.rows.length - 1];
-      if (last && last.kind === 'text' && last.sessionId === record.sessionId) {
-        return { rows: state.rows.slice(0, -1).concat([mergeTextDelta(last, record)]), usage: state.usage };
-      }
-      // Debounce can flush an unterminated mid-word fragment (flagged
-      // partial), let a tool-call land, then flush the continuation \u2014 look
-      // back within the same turn (bounded by this session's last turn-end)
-      // for that session's most recent text row and continue it in place.
-      // Only the explicit partial flag glues: a non-partial record with no
-      // trailing newline is the writer's normal end-of-text-block shape.
-      for (var i = state.rows.length - 1; i >= 0; i--) {
-        var prior = state.rows[i];
-        if (prior.sessionId !== record.sessionId) continue;
-        if (prior.kind === 'turn-end') break;
-        if (prior.kind !== 'text') continue;
-        if (prior.partial === true) {
-          var patched = state.rows.slice();
-          patched[i] = mergeTextDelta(prior, record);
-          return { rows: patched, usage: state.usage };
-        }
-        break;
-      }
-      var row = {
-        kind: 'text', id: rowId(record, state.rows), seq: record.seq, ts: record.ts,
-        sessionId: record.sessionId, text: record.text || '',
-      };
-      if (record.partial === true) row.partial = true;
-      return { rows: state.rows.concat([row]), usage: state.usage };
-    }
-    case 'tool-call': {
-      var row = {
-        kind: 'tool-call', id: rowId(record, state.rows), seq: record.seq, ts: record.ts,
-        sessionId: record.sessionId, toolCallId: record.toolCallId || '',
-        toolName: record.toolName || 'unknown', arguments: record.arguments, status: 'pending',
-      };
-      return { rows: state.rows.concat([row]), usage: state.usage };
-    }
-    case 'tool-result': {
-      var idx = -1;
-      for (var i = 0; i < state.rows.length; i++) {
-        if (state.rows[i].kind === 'tool-call' && state.rows[i].toolCallId === record.toolCallId) idx = i;
-      }
-      if (idx === -1) {
-        var row = {
-          kind: 'tool-call', id: rowId(record, state.rows), seq: record.seq, ts: record.ts,
-          sessionId: record.sessionId, toolCallId: record.toolCallId || '', toolName: 'unknown',
-          status: record.isError ? 'error' : 'ok', result: record.result,
-        };
-        return { rows: state.rows.concat([row]), usage: state.usage };
-      }
-      var updated = Object.assign({}, state.rows[idx], {
-        status: record.isError ? 'error' : 'ok', result: record.result,
-      });
-      var rows = state.rows.slice();
-      rows[idx] = updated;
-      return { rows: rows, usage: state.usage };
-    }
-    case 'turn-end': {
-      var row = {
-        kind: 'turn-end', id: rowId(record, state.rows), seq: record.seq, ts: record.ts,
-        sessionId: record.sessionId, reason: record.reason,
-      };
-      return { rows: state.rows.concat([row]), usage: state.usage };
-    }
-    case 'usage_update': {
-      // Usage is state, not a row (SPEC \xA71) \u2014 last-write-wins, no merge with
-      // the prior snapshot. state.rows is reused as-is (it didn't change).
-      return {
-        rows: state.rows,
-        usage: {
-          size: record.size, used: record.used, cost: record.cost,
-          tokensIn: record.tokensIn, tokensOut: record.tokensOut,
-          seq: record.seq, ts: record.ts,
-        },
-      };
-    }
-    default:
-      return state;
-  }
-}
-
-// ============================================================
-// INLINED PURE HELPERS \u2014 exact copies of live-session-app.logic.ts's
-// isNearBottom (SPEC \xA72) and groupAdjacentToolCalls (SPEC \xA73). Same names,
-// same signatures, same default thresholds; plain JS because the widget
-// has no import step.
-// ============================================================
-
-var SCROLL_STICK_THRESHOLD_PX = 24;
-
-function isNearBottom(scrollHeight, scrollTop, clientHeight, threshold) {
-  if (threshold == null) threshold = SCROLL_STICK_THRESHOLD_PX;
-  return scrollHeight - scrollTop - clientHeight <= threshold;
-}
-
-var TOOL_CALL_GROUP_THRESHOLD = 2;
-
-// Collapse runs of \`threshold\`+ adjacent tool-call rows into one
-// {kind:'tool-group', rows:[...]} entry; everything else passes through as
-// individual {kind:'row', row} entries, same order as the input.
-function groupAdjacentToolCalls(rows, threshold) {
-  if (threshold == null) threshold = TOOL_CALL_GROUP_THRESHOLD;
-  var out = [];
-  var run = [];
-  function flushRun() {
-    if (!run.length) return;
-    if (run.length >= threshold) out.push({ kind: 'tool-group', rows: run });
-    else for (var j = 0; j < run.length; j++) out.push({ kind: 'row', row: run[j] });
-    run = [];
-  }
-  for (var i = 0; i < rows.length; i++) {
-    if (rows[i].kind === 'tool-call') { run.push(rows[i]); continue; }
-    flushRun();
-    out.push({ kind: 'row', row: rows[i] });
-  }
-  flushRun();
-  return out;
-}
-
-// ============================================================
-// Rendering helpers
-// ============================================================
-
-function escHtml(s) {
-  return String(s == null ? '' : s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');
-}
-
-function safeJson(v) {
-  try { return JSON.stringify(v, null, 2); } catch (e) { return String(v); }
-}
-
-function statusDotClass(status) {
-  if (status === 'running' || status === 'starting') return 'running';
-  if (status === 'error' || status === 'killed') return 'error';
-  return 'grey';
-}
-
-// SPEC \xA74 (non-contract guidance): 52524 \u2192 "52.5k", >=1e6 \u2192 "M" suffix,
-// one decimal, trailing .0 vanishes because the value stays a number.
-// cost \u2192 "$" + toFixed(2). Read from timelineState.usage.
-function fmtCompactNum(n) {
-  if (typeof n !== 'number' || !isFinite(n)) return null;
-  if (n >= 1000000) return (Math.round(n / 100000) / 10) + 'M';
-  if (n >= 1000) return (Math.round(n / 100) / 10) + 'k';
-  return String(n);
-}
-
-function usageChipText(usage) {
-  if (!usage) return '';
-  var bits = [];
-  if (usage.used != null && usage.size != null) {
-    bits.push(fmtCompactNum(usage.used) + '/' + fmtCompactNum(usage.size));
-  } else if (usage.used != null) {
-    bits.push(fmtCompactNum(usage.used));
-  }
-  if (typeof usage.cost === 'number') bits.push('$' + usage.cost.toFixed(2));
-  return bits.join(' \xB7 ');
-}
-
-// WP5: elapsed seconds since the timeline's first row (running only).
-function elapsedText(rows, status) {
-  if (status !== 'running' && status !== 'starting') return null;
-  if (!rows.length || rows[0].ts == null) return null;
-  var ms = new Date(rows[0].ts).getTime();
-  if (!isFinite(ms)) return null;
-  return Math.max(0, Math.round((Date.now() - ms) / 1000)) + 's';
-}
-
-// ============================================================
-// LEFT pane \u2014 live tree
-// ============================================================
-
-var currentTree = [];
-var focusId = (window.__APP_INIT__ && window.__APP_INIT__.sessionId) || null;
-var treeTimer = null;
-
-function findNode(nodes, id) {
-  for (var i = 0; i < nodes.length; i++) {
-    if (nodes[i].id === id) return nodes[i];
-    var found = findNode(nodes[i].children || [], id);
-    if (found) return found;
-  }
-  return null;
-}
-
-function flattenDfs(nodes, out) {
-  out = out || [];
-  for (var i = 0; i < nodes.length; i++) {
-    out.push(nodes[i]);
-    flattenDfs(nodes[i].children || [], out);
-  }
-  return out;
-}
-
-function pickInitialFocus(tree) {
-  var flat = flattenDfs(tree);
-  var alive = flat.filter(function(n) { return n.status === 'running' || n.status === 'starting'; });
-  if (alive.length) return alive[alive.length - 1].id;
-  return tree.length ? tree[0].id : null;
-}
-
-function renderTreeNode(node, depth) {
-  var childrenHtml = (node.children || []).map(function(c) { return renderTreeNode(c, depth + 1); }).join('');
-  var badge = node.isOrchestrator ? '<span class="badge">orch</span>' : '';
-  var cls = 'tnode' + (node.id === focusId ? ' focus' : '');
-  return '<div class="' + cls + '" data-id="' + escHtml(node.id) + '">' +
-    '<span class="dot ' + statusDotClass(node.status) + '"></span>' +
-    '<span class="label">' + escHtml(node.label || node.id) + '</span>' + badge +
-    '</div>' +
-    (childrenHtml ? '<div class="tchildren">' + childrenHtml + '</div>' : '');
-}
-
-// WP4: compact header <select> mirrors the tree; still routes through
-// setFocus() \u2014 the only session-switch entry point.
-function renderHeadSelector() {
-  var sel = document.getElementById('head-selector');
-  var flat = flattenDfs(currentTree);
-  while (sel.firstChild) sel.removeChild(sel.firstChild);
-  if (!flat.length) return;
-  for (var i = 0; i < flat.length; i++) {
-    var n = flat[i];
-    var o = document.createElement('option');
-    o.value = n.id;
-    o.textContent = (n.id === focusId ? '\u25CF ' : '') + (n.label || n.id);
-    sel.appendChild(o);
-  }
-  sel.value = focusId || '';
-}
-
-function renderTree() {
-  var body = document.getElementById('tree-body');
-  var root = focusId ? findNode(currentTree, focusId) : null;
-  var renderNodes = root ? [root] : currentTree;
-  if (!renderNodes.length) {
-    body.innerHTML = '<div id="tree-empty">No sessions.</div>';
-    renderHeadSelector();
-    return;
-  }
-  body.innerHTML = renderNodes.map(function(n) { return renderTreeNode(n, 0); }).join('');
-  var els = body.querySelectorAll('.tnode');
-  els.forEach(function(el) {
-    el.addEventListener('click', function() {
-      var id = el.getAttribute('data-id');
-      if (id === focusId) return;
-      setFocus(id);
-    });
-  });
-  renderHeadSelector();
-}
-
-function pollTree() {
-  callTool('app_session_tree', {}).then(function(res) {
-    currentTree = res.tree || [];
-    if (!focusId) {
-      focusId = pickInitialFocus(currentTree);
-      if (focusId) startTimeline(focusId);
-    }
-    renderTree();
-    updateHeader();
-  }).catch(function() {
-    // Leave the last-known tree rendered; the next poll may recover.
-  });
-}
-
-// ============================================================
-// RIGHT pane \u2014 timeline for focusId
-// ============================================================
-
-var timelineState = initialTimelineState();
-var sincePtr = 0;
-var activeSource = null; // {type:'sse', es} | {type:'poll', timer}
-var compactMode = false; // WP3: hostContext.displayMode === 'inline' (or narrow)
-
-function setStatus(msg) {
-  document.getElementById('status-line').textContent = msg;
-}
-
-function isCompact() {
-  return (getHostContext() && getHostContext().displayMode === 'inline') ||
-    (typeof window !== 'undefined' && window.innerWidth < 640);
-}
-
-// WP3/WP4: apply the compact/expanded split. Only re-renders the timeline
-// when the mode actually flips (scroll + <details> state survive otherwise).
-function applyDisplayMode() {
-  var c = isCompact();
-  document.body.classList.toggle('compact-mode', c);
-  if (c !== compactMode) {
-    compactMode = c;
-    renderTimelineFull();
-    renderTree();
-  }
-}
-
-// WP5 + WP2: one header line \u2014 \`\u25CF running \xB7 3 tools \xB7 52.5k/200k \xB7 $0.04 \xB7 12s\`
-// (status dot from the focus node, tool count from the rows, usage from
-// timelineState.usage \u2014 no usage_update row anymore) + transport status.
-function updateHeader() {
-  document.getElementById('focus-id-label').textContent = focusId || '\u2014';
-  var rows = timelineState.rows || [];
-  var usage = timelineState.usage;
-  var tools = 0;
-  for (var i = 0; i < rows.length; i++) if (rows[i].kind === 'tool-call') tools++;
-  var node = focusId ? findNode(currentTree, focusId) : null;
-  var st = node ? node.status : null;
-  var parts = [];
-  if (st) parts.push('<span class="sdot ' + statusDotClass(st) + '"></span>' + escHtml(st));
-  if (tools) parts.push(tools + (tools === 1 ? ' tool' : ' tools'));
-  var chip = usageChipText(usage);
-  if (chip) parts.push('<span id="usage-chip" class="chip">' + escHtml(chip) + '</span>');
-  var el = elapsedText(rows, st);
-  if (el) parts.push(escHtml(el));
-  document.getElementById('head-summary').innerHTML = parts.length ? parts.join(' \xB7 ') : '';
-}
-
-function captureDetailsOpenFlags(body) {
-  var dets = body.querySelectorAll('details');
-  var flags = [];
-  for (var i = 0; i < dets.length; i++) flags.push(dets[i].open);
-  return flags;
-}
-
-function restoreDetailsOpenFlags(body, flags) {
-  var dets = body.querySelectorAll('details');
-  for (var i = 0; i < dets.length && i < flags.length; i++) {
-    if (flags[i]) dets[i].open = true;
-  }
-}
-
-// Full rebuild \u2014 used ONLY for the first paint of a session, a setFocus()
-// session switch (SPEC \xA72: full reset is correct there), a display-mode
-// flip, and as the fallback for shapes the incremental patcher can't patch.
-// A display-mode flip re-renders the SAME content (WP3: "r\xE9actif... sans
-// perdre le scroll ni l'\xE9tat des <details>"), so open <details> and the
-// exact scroll offset (not just the at-bottom decision) survive the rebuild.
-function renderTimelineFull() {
-  var body = document.getElementById('timeline-body');
-  var wasAtBottom = isNearBottom(body.scrollHeight, body.scrollTop, body.clientHeight);
-  var savedScrollTop = body.scrollTop;
-  var flags = captureDetailsOpenFlags(body);
-  body.innerHTML = buildTimelineHtml();
-  restoreDetailsOpenFlags(body, flags);
-  body.scrollTop = wasAtBottom ? body.scrollHeight : savedScrollTop;
-  updateHeader();
-}
-
-function buildTimelineHtml() {
-  var rows = timelineState.rows;
-  if (!rows.length) return '<div id="timeline-empty">No events yet.</div>';
-  if (compactMode) {
-    var entries = groupAdjacentToolCalls(rows);
-    var html = '';
-    for (var i = 0; i < entries.length; i++) {
-      var e = entries[i];
-      if (e.kind === 'tool-group') {
-        html += '<details class="tool-group"><summary>\u25B8 ' + e.rows.length + ' tool calls</summary>' +
-          e.rows.map(renderRow).join('') + '</details>';
-      } else {
-        html += renderRow(e.row);
-      }
-    }
-    return html;
-  }
-  return rows.map(renderRow).join('');
-}
-
-// \u2500\u2500 WP1 incremental patch (dense mode) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-// One record, one minimal DOM mutation. The common case (text-delta merged
-// into the LAST rendered row) patches just that row's text node. Anything
-// else appends via insertAdjacentHTML. Only rare in-place replacements
-// (tool-result merge, partial-lookback re-merge) swap ONE element's HTML.
-function applyRecordToDom(prevRows) {
-  var body = document.getElementById('timeline-body');
-  // Capture "stuck to bottom?" BEFORE any mutation (SPEC \xA72).
-  var wasAtBottom = isNearBottom(body.scrollHeight, body.scrollTop, body.clientHeight);
-  var rows = timelineState.rows;
-
-  if (compactMode) {
-    // Inline mode: smaller rows \u2014 full grouped rebuild, preserving
-    // wasAtBottom/scrollTop and <details> open-state. Only touch the DOM
-    // (and the scroll/pill decision) when the rows actually changed \u2014 a
-    // usage_update leaves rows === prevRows, so it must fall through to the
-    // header-only path below, same as the dense-mode branch.
-    if (rows !== prevRows) {
-      var flags = captureDetailsOpenFlags(body);
-      body.innerHTML = buildTimelineHtml();
-      restoreDetailsOpenFlags(body, flags);
-      if (wasAtBottom) body.scrollTop = body.scrollHeight;
-      else showNewPill();
-    }
-    updateHeader();
-    return;
-  }
-
-  var appended = rows.length > prevRows.length;
-  if (prevRows.length === 0 || (appended && !samePrefix(prevRows, rows))) {
-    // First real paint of this session (empty placeholder present) or an
-    // unexpected shape \u2014 full reset is correct/cheapest.
-    body.innerHTML = buildTimelineHtml();
-    body.scrollTop = body.scrollHeight;
-    updateHeader();
-    return;
-  }
-
-  if (appended) {
-    body.insertAdjacentHTML('beforeend', renderRow(rows[rows.length - 1]));
-  } else if (rows.length === prevRows.length && rows.length > 0) {
-    // Exactly one row object replaced (tool-result merge, partial-text
-    // re-merge via the reducer's lookback). Patch that one element only.
-    // Scan from the tail: the hot path (a text-delta merged into the LAST
-    // row, the dominant streaming case) is found in O(1) this way instead
-    // of walking the whole array \u2014 the rare mid-array lookback re-merge
-    // still resolves correctly, just slower.
-    var idx = -1;
-    for (var i = rows.length - 1; i >= 0; i--) {
-      if (rows[i] !== prevRows[i]) { idx = i; break; }
-    }
-    var patched = false;
-    if (idx >= 0) {
-      var row = rows[idx];
-      var el = body.querySelector('[data-row-id="' + escHtml(row.id) + '"]');
-      if (el) {
-        if (row.kind === 'text' && idx === rows.length - 1) {
-          // High-frequency case: patch the existing text node in place.
-          var b = el.querySelector('.body');
-          if (b) { b.textContent = row.text; patched = true; }
-        }
-        if (!patched) { el.outerHTML = renderRow(row); patched = true; }
-      }
-    }
-    if (!patched) {
-      // Multiple rows changed at once (shouldn't happen per-record) \u2014 rebuild.
-      body.innerHTML = buildTimelineHtml();
-      if (wasAtBottom) body.scrollTop = body.scrollHeight;
-      updateHeader();
-      return;
-    }
-  } else {
-    // rows unchanged (usage_update) \u2014 header only.
-    updateHeader();
-    return;
-  }
-
-  // Scroll decision AFTER the mutation: stick or leave the position alone.
-  if (wasAtBottom) body.scrollTop = body.scrollHeight;
-  else showNewPill();
-  updateHeader();
-}
-
-function samePrefix(prevRows, rows) {
-  for (var i = 0; i < prevRows.length; i++) {
-    if (prevRows[i] !== rows[i]) return false;
-  }
-  return true;
-}
-
-function showNewPill() {
-  document.getElementById('new-pill').classList.add('show');
-}
-
-function hideNewPill() {
-  document.getElementById('new-pill').classList.remove('show');
-}
-
-function renderRow(row) {
-  if (row.kind === 'text') {
-    return '<div class="row text" data-row-id="' + escHtml(row.id) + '"><div class="rhead"><span class="kind">text</span></div>' +
-      '<div class="body">' + escHtml(row.text) + '</div></div>';
-  }
-  if (row.kind === 'tool-call') {
-    var badgeCls = row.status === 'pending' ? 'pending' : row.status;
-    var badgeText = row.status === 'pending' ? 'pending' : (row.status === 'ok' ? 'ok' : 'error');
-    var resultHtml = row.status !== 'pending'
-      ? '<details><summary>result</summary><pre>' + escHtml(safeJson(row.result)) + '</pre></details>'
-      : '';
-    return '<div class="row tool-call" data-row-id="' + escHtml(row.id) + '"><div class="rhead"><span class="kind">tool</span>' +
-      '<span class="toolname">' + escHtml(row.toolName) + '</span>' +
-      '<span class="status-badge ' + badgeCls + '">' + badgeText + '</span></div>' +
-      '<details><summary>arguments</summary><pre>' + escHtml(safeJson(row.arguments)) + '</pre></details>' +
-      resultHtml + '</div>';
-  }
-  if (row.kind === 'turn-end') {
-    return '<div class="row turn-end" data-row-id="' + escHtml(row.id) + '"><div class="rhead"><span class="kind">turn end</span>' +
-      '<span class="chip">' + escHtml(row.reason || '\u2014') + '</span></div></div>';
-  }
-  return '';
-}
-
-function teardownTimeline() {
-  if (activeSource) {
-    if (activeSource.type === 'sse' && activeSource.es) {
-      try { activeSource.es.close(); } catch (e) {}
-    }
-    // Both the poll re-arm timer AND the SSE open/first-message fallback
-    // timer must be cleared, or a focus switch within the 2.5s window leaves
-    // a stale timer that fires startPolling for the abandoned session.
-    if (activeSource.timer) clearTimeout(activeSource.timer);
-    if (activeSource.fallbackTimer) clearTimeout(activeSource.fallbackTimer);
-  }
-  activeSource = null;
-}
-
-function attemptSSE(id) {
-  var settled = false;
-  var es;
-  try {
-    es = new EventSource(window.__APP_INIT__.httpBaseUrl + '/sessions/' + encodeURIComponent(id) + '/events/stream');
-  } catch (e) {
-    startPolling(id);
-    return;
-  }
-  var src = { type: 'sse', es: es, fallbackTimer: null };
-  activeSource = src;
-  // Every callback below re-checks focusId===id AND that src is still the
-  // live source: a focus switch tears down src and starts a new one, so a
-  // late open/message/error from this abandoned EventSource must be a no-op
-  // rather than mutating the new focus's timeline or clobbering activeSource.
-  function stale() { return activeSource !== src || focusId !== id; }
-  src.fallbackTimer = setTimeout(function() {
-    if (settled || stale()) return;
-    settled = true;
-    try { es.close(); } catch (e) {}
-    startPolling(id);
-  }, 2500);
-  es.addEventListener('open', function() {
-    if (settled || stale()) return;
-    settled = true;
-    clearTimeout(src.fallbackTimer);
-    setStatus('streaming via SSE');
-  });
-  es.onmessage = function(evt) {
-    if (stale()) return;
-    if (!settled) {
-      settled = true;
-      clearTimeout(src.fallbackTimer);
-      setStatus('streaming via SSE');
-    }
-    var rec;
-    try { rec = JSON.parse(evt.data); } catch (e) { return; }
-    var prev = timelineState;
-    timelineState = reduceEvent(timelineState, rec);
-    if (typeof rec.seq === 'number' && rec.seq > sincePtr) sincePtr = rec.seq;
-    if (timelineState !== prev) applyRecordToDom(prev.rows);
-  };
-  es.onerror = function() {
-    if (stale()) return;
-    if (!settled) {
-      settled = true;
-      clearTimeout(src.fallbackTimer);
-      try { es.close(); } catch (e) {}
-      startPolling(id);
-    } else {
-      // Do not leave EventSource to perform its native reconnect: this
-      // endpoint replays from since=0 when no cursor is provided, so a
-      // transparent reconnect would duplicate every row already reduced.
-      // The bridge poll resumes from sincePtr instead and preserves the
-      // exactly-once cursor contract.
-      try { es.close(); } catch (e) {}
-      startPolling(id);
-    }
-  };
-}
-
-function startPolling(id) {
-  activeSource = { type: 'poll', timer: null };
-  setStatus('polling');
-  function tick() {
-    if (!activeSource || activeSource.type !== 'poll' || focusId !== id) return;
-    callTool('app_session_events', { sessionId: id, since: sincePtr }).then(function(res) {
-      var events = res.events || [];
-      for (var i = 0; i < events.length; i++) {
-        var prev = timelineState;
-        timelineState = reduceEvent(timelineState, events[i]);
-        if (timelineState !== prev) applyRecordToDom(prev.rows);
-      }
-      if (typeof res.nextSeq === 'number') sincePtr = res.nextSeq;
-      setStatus('polling');
-      if (activeSource) activeSource.timer = setTimeout(tick, 1500);
-    }).catch(function() {
-      setStatus('disconnected');
-      if (activeSource) activeSource.timer = setTimeout(tick, 1500);
-    });
-  }
-  tick();
-}
-
-function startTimeline(id) {
-  teardownTimeline();
-  timelineState = initialTimelineState();
-  sincePtr = 0;
-  hideNewPill();
-  renderTimelineFull();
-  setStatus('connecting\u2026');
-  attemptSSE(id);
-}
-
-function setFocus(id) {
-  focusId = id;
-  renderTree();
-  startTimeline(id);
-}
-
-// ============================================================
-// Boot
-// ============================================================
-
-initBridge().then(function() {
-  var init = window.__APP_INIT__ || {};
-  if (init.httpBaseUrl) return init;
-  // Static ui:// resources render once at server-registration time with
-  // EMPTY initData (mcp-apps-adapter.ts registerMcpApps) \u2014 fall back to
-  // calling the tool ourselves over the bridge, same as the other panels.
-  return callTool('live_session', {}).then(function(result) {
-    window.__APP_INIT__ = result;
-    return result;
-  });
-}).then(function(init) {
-  focusId = init.sessionId || null;
-  onHostContext(function() {
-    applyDisplayMode();
-    updateHeader();
-  });
-  document.getElementById('head-selector').addEventListener('change', function(evt) {
-    var id = evt.target.value;
-    if (id && id !== focusId) setFocus(id);
-  });
-  document.getElementById('new-pill').addEventListener('click', function() {
-    var body = document.getElementById('timeline-body');
-    body.scrollTop = body.scrollHeight;
-    hideNewPill();
-  });
-  document.getElementById('timeline-body').addEventListener('scroll', function() {
-    // User scrolled back near the bottom \u2014 the pill is stale, hide it.
-    var el = document.getElementById('timeline-body');
-    if (isNearBottom(el.scrollHeight, el.scrollTop, el.clientHeight)) hideNewPill();
-  });
-  window.addEventListener('resize', function() {
-    var c = isCompact();
-    if (c !== compactMode) { applyDisplayMode(); }
-  });
-  applyDisplayMode();
-  pollTree();
-  treeTimer = setInterval(pollTree, 2000);
-  setInterval(updateHeader, 1000); // keep the WP5 elapsed clock fresh
-  if (focusId) startTimeline(focusId);
-}).catch(function(e) {
-  setStatus('Bridge error: ' + e.message);
-});
-</script>
-</body>
-</html>`;
-}
 init_transcript_writer();
 function readSessionEventsSince(filePath, since, limit) {
   let raw;
@@ -21475,6 +19097,350 @@ function createAppRegistry(opts) {
     }
   };
 }
+var AppPathTraversalError = class extends Error {
+  code = "APP_PATH_TRAVERSAL";
+  constructor(relPath) {
+    super(`app-data: path traversal rejected for "${relPath}" \u2014 must resolve inside the app dir.`);
+    this.name = "AppPathTraversalError";
+  }
+};
+var DEFAULT_APP_DATA_SUBDIR = "data";
+function appDataDir(app) {
+  return app.dataDir ?? join(app.dir, DEFAULT_APP_DATA_SUBDIR);
+}
+function isDefaultAppDataLayout(app) {
+  return resolve(appDataDir(app)) === resolve(app.dir, DEFAULT_APP_DATA_SUBDIR);
+}
+function collapseLegacyDataPrefix(relPath) {
+  const n = normalize(relPath);
+  if (n === DEFAULT_APP_DATA_SUBDIR) return ".";
+  const prefix = DEFAULT_APP_DATA_SUBDIR + sep;
+  if (n.startsWith(prefix)) {
+    const rest = n.slice(prefix.length);
+    return rest === "" ? "." : rest;
+  }
+  return relPath;
+}
+function resolveAppDataPath(appDir, relPath) {
+  if (isAbsolute(relPath)) throw new AppPathTraversalError(relPath);
+  if (/^[A-Za-z]:/.test(relPath)) throw new AppPathTraversalError(relPath);
+  const root = resolve(appDir);
+  const target = resolve(appDir, relPath);
+  const rootWithSep = root.endsWith(sep) ? root : root + sep;
+  if (target !== root && !target.startsWith(rootWithSep)) {
+    throw new AppPathTraversalError(relPath);
+  }
+  return target;
+}
+async function pathExists(p) {
+  try {
+    await stat(p);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function realpathMaybe(p) {
+  try {
+    return await realpath(p);
+  } catch {
+    return void 0;
+  }
+}
+async function resolveAppDataRoots(app, opts) {
+  const dataDir = resolve(appDataDir(app));
+  if (opts?.ensureDataDir) await mkdir(dataDir, { recursive: true });
+  const realData = await realpathMaybe(dataDir);
+  const legacyRoot = await realpathMaybe(app.dir);
+  return {
+    dataRoot: realData ?? dataDir,
+    dataRootExists: realData !== void 0,
+    legacyRoot,
+    defaultLayout: isDefaultAppDataLayout(app)
+  };
+}
+async function assertRealInside(root, target) {
+  let real;
+  try {
+    real = await realpath(target);
+  } catch {
+    return;
+  }
+  const rootWithSep = root.endsWith(sep) ? root : root + sep;
+  if (real !== root && !real.startsWith(rootWithSep)) {
+    throw new AppPathTraversalError(target);
+  }
+}
+function firstSegment(rel) {
+  const n = normalize(rel);
+  const seg = n.split(sep).find((s) => s !== "" && s !== ".");
+  return seg === void 0 || seg === ".." ? void 0 : seg;
+}
+async function locateAppDataPath(roots, relPath) {
+  const rel = roots.defaultLayout ? collapseLegacyDataPrefix(relPath) : relPath;
+  const primary = resolveAppDataPath(roots.dataRoot, rel);
+  await assertRealInside(roots.dataRoot, primary);
+  const primaryExists = await pathExists(primary);
+  let legacyTarget;
+  if (roots.legacyRoot !== void 0) {
+    try {
+      legacyTarget = resolveAppDataPath(roots.legacyRoot, relPath);
+    } catch {
+      legacyTarget = void 0;
+    }
+    if (legacyTarget === primary) legacyTarget = void 0;
+  }
+  let legacyExists = false;
+  if (legacyTarget !== void 0) {
+    await assertRealInside(roots.legacyRoot, legacyTarget);
+    legacyExists = await pathExists(legacyTarget);
+  }
+  if (primaryExists) {
+    return {
+      target: primary,
+      root: roots.dataRoot,
+      legacy: false,
+      ...legacyExists && legacyTarget !== void 0 ? { sibling: legacyTarget } : {}
+    };
+  }
+  if (legacyExists && legacyTarget !== void 0) {
+    return { target: legacyTarget, root: roots.legacyRoot, legacy: true };
+  }
+  const top = firstSegment(relPath);
+  if (top !== void 0 && roots.legacyRoot !== void 0 && legacyTarget !== void 0) {
+    const primaryTop = resolveAppDataPath(roots.dataRoot, roots.defaultLayout ? collapseLegacyDataPrefix(top) : top);
+    const legacyTop = resolveAppDataPath(roots.legacyRoot, top);
+    if (legacyTop !== primaryTop && !await pathExists(primaryTop) && await pathExists(legacyTop)) {
+      return { target: legacyTarget, root: roots.legacyRoot, legacy: true };
+    }
+  }
+  return { target: primary, root: roots.dataRoot, legacy: false };
+}
+function textResult(body) {
+  return { content: [{ type: "text", text: JSON.stringify(body, null, 2) }] };
+}
+function errorResult(text10) {
+  return { content: [{ type: "text", text: JSON.stringify({ error: text10 }) }], isError: true };
+}
+async function atomicWrite(filePath, data) {
+  await mkdir(dirname(filePath), { recursive: true });
+  const tmp = `${filePath}.tmp.${process.pid}`;
+  await writeFile(tmp, data, "utf8");
+  await rename(tmp, filePath);
+}
+async function writeRaw(roots, rel, data) {
+  await atomicWrite((await locateAppDataPath(roots, rel)).target, data);
+}
+async function writeJson(roots, rel, value) {
+  await writeRaw(roots, rel, JSON.stringify(value, null, 2) + "\n");
+}
+async function readTextMaybe(path) {
+  try {
+    return await readFile(path, "utf8");
+  } catch {
+    return void 0;
+  }
+}
+async function readJsonMaybe(path) {
+  const raw = await readTextMaybe(path);
+  if (raw === void 0) return void 0;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return void 0;
+  }
+}
+function normalizeJob(raw) {
+  const jobId = raw.jobId ?? raw.id;
+  const out = { ...raw, id: jobId, jobId };
+  if (out.applyUrl === void 0 || out.applyUrl === null) out.applyUrl = raw.url;
+  return out;
+}
+async function readDossierJobId(dossierDir) {
+  const parsed = await readJsonMaybe(join(dossierDir, "job.json"));
+  if (!parsed || typeof parsed !== "object") return void 0;
+  const jobId = parsed.jobId ?? parsed.id;
+  return typeof jobId === "string" && jobId.length > 0 ? jobId : void 0;
+}
+function registerAppDataTools(server, opts) {
+  const { appRegistry } = opts;
+  server.tool(
+    "app_data_read",
+    "Read an app-scoped data file (app-relative path). JSON paths return the parsed value in `content`; everything else returns the raw text. Paths resolve under the app's data dir (`dataDir`, default `<dir>/data`); under the default layout a leading `data/` is accepted as the legacy spelling, and a file that only exists under the app's source dir (a pre-dataDir install) is still found there. Path traversal outside either root is rejected.",
+    { appId: z.string(), path: z.string().describe("App-relative path under the app's data dir.") },
+    async (input) => {
+      const installed = appRegistry.getApp(input.appId);
+      if (!installed) return errorResult(`app_data_read: no installed app "${input.appId}".`);
+      let target;
+      try {
+        const roots = await resolveAppDataRoots(installed);
+        target = (await locateAppDataPath(roots, input.path)).target;
+      } catch (err) {
+        return errorResult(`app_data_read: ${err instanceof Error ? err.message : String(err)}`);
+      }
+      const raw = await readTextMaybe(target);
+      if (raw === void 0) return textResult({ appId: input.appId, path: input.path, exists: false });
+      if (input.path.endsWith(".json")) {
+        try {
+          return textResult({ appId: input.appId, path: input.path, exists: true, content: JSON.parse(raw) });
+        } catch {
+          return textResult({ appId: input.appId, path: input.path, exists: true, content: raw });
+        }
+      }
+      return textResult({ appId: input.appId, path: input.path, exists: true, content: raw });
+    }
+  );
+  server.tool(
+    "app_data_write",
+    "Write an app-scoped data file (app-relative path), creating parent directories as needed. `.json` paths are JSON-stringified (pretty); other paths write the raw string passed as `content.text` (or a plain string `content`). Atomic write (tmp + rename). New files land under the app's data dir (`dataDir`, default `<dir>/data`); a file (or top-level folder) that already exists under the app's source dir from a pre-dataDir install is updated in place. Path traversal outside either root is rejected.",
+    {
+      appId: z.string(),
+      path: z.string().describe("App-relative path under the app's data dir."),
+      content: z.unknown().describe("JSON value for `.json` paths, or `{ text }` / string for others.")
+    },
+    async (input) => {
+      const installed = appRegistry.getApp(input.appId);
+      if (!installed) return errorResult(`app_data_write: no installed app "${input.appId}".`);
+      let target;
+      try {
+        const roots = await resolveAppDataRoots(installed, { ensureDataDir: true });
+        target = (await locateAppDataPath(roots, input.path)).target;
+      } catch (err) {
+        return errorResult(`app_data_write: ${err instanceof Error ? err.message : String(err)}`);
+      }
+      let payload;
+      if (input.path.endsWith(".json")) {
+        payload = JSON.stringify(input.content, null, 2);
+      } else {
+        const raw = input.content;
+        if (typeof raw === "string") payload = raw;
+        else if (raw !== null && typeof raw === "object" && typeof raw.text === "string") {
+          payload = raw.text;
+        } else {
+          payload = JSON.stringify(raw);
+        }
+      }
+      try {
+        await atomicWrite(target, payload);
+        return textResult({ appId: input.appId, path: input.path, size: Buffer.byteLength(payload, "utf8") });
+      } catch (err) {
+        return errorResult(`app_data_write: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+  );
+  server.tool(
+    "app_data_list",
+    "List entries (name + type + size) under an app-relative directory (default `.`, the app's data dir). A missing directory returns empty entries, not an error. When the same directory also exists under the app's source dir (a pre-dataDir install) both views are merged, data dir entries winning on name clashes; `.` lists the data dir only (or the source dir while no data dir exists yet). Path traversal outside either root is rejected.",
+    {
+      appId: z.string(),
+      dir: z.string().optional().describe("App-relative directory to list. Defaults to `.`.")
+    },
+    async (input) => {
+      const installed = appRegistry.getApp(input.appId);
+      if (!installed) return errorResult(`app_data_list: no installed app "${input.appId}".`);
+      const relDir = input.dir ?? ".";
+      const dirs = [];
+      try {
+        const roots = await resolveAppDataRoots(installed);
+        const located = await locateAppDataPath(roots, relDir);
+        const isRoot = located.target === roots.dataRoot || located.target === roots.legacyRoot;
+        dirs.push(located.target);
+        if (!isRoot && located.sibling !== void 0) dirs.push(located.sibling);
+      } catch (err) {
+        return errorResult(`app_data_list: ${err instanceof Error ? err.message : String(err)}`);
+      }
+      const seen = /* @__PURE__ */ new Map();
+      for (const target of dirs) {
+        let dirents;
+        try {
+          dirents = await readdir(target, { withFileTypes: true });
+        } catch {
+          continue;
+        }
+        for (const d of dirents) {
+          if (seen.has(d.name)) continue;
+          const isDirectory = d.isDirectory();
+          let size = 0;
+          if (!isDirectory) {
+            try {
+              size = (await stat(join(target, d.name))).size;
+            } catch {
+              size = 0;
+            }
+          }
+          seen.set(d.name, { name: d.name, type: isDirectory ? "directory" : "file", size });
+        }
+      }
+      const entries = [...seen.values()].sort((a, b) => a.name.localeCompare(b.name));
+      return textResult({ appId: input.appId, dir: relDir, entries });
+    }
+  );
+  server.tool(
+    "app_data_migrate",
+    "One-time import of legacy job-app data into the durable shape under the app's data dir: `jobs/<jobId>.json` (normalized id/jobId/applyUrl), `rankings/latest.json` (full ranked list) + per-job ranking artifacts, `applications/<jobId>/{job.json,cv.json,cover.md}` from matching `dossiers/*` folders, and `state.json`. The legacy inputs (`ranked-jobs.json`, `dossiers/`) are read from wherever they resolve \u2014 the app's source dir for pre-dataDir installs. Idempotent \u2014 re-running after migration returns `alreadyMigrated` unless `force`.",
+    {
+      appId: z.string(),
+      force: z.boolean().optional().describe("Re-run even if already migrated.")
+    },
+    async (input) => {
+      const installed = appRegistry.getApp(input.appId);
+      if (!installed) return errorResult(`app_data_migrate: no installed app "${input.appId}".`);
+      let roots;
+      try {
+        roots = await resolveAppDataRoots(installed, { ensureDataDir: true });
+      } catch (err) {
+        return errorResult(`app_data_migrate: ${err instanceof Error ? err.message : String(err)}`);
+      }
+      const at = async (rel) => (await locateAppDataPath(roots, rel)).target;
+      const stateRel = "state.json";
+      if (!input.force && await readJsonMaybe(await at(stateRel)) !== void 0) {
+        return textResult({ appId: input.appId, migrated: false, alreadyMigrated: true });
+      }
+      let jobs = [];
+      const rankedRaw = await readJsonMaybe(await at("ranked-jobs.json"));
+      if (Array.isArray(rankedRaw)) jobs = rankedRaw;
+      const normalized = jobs.map(normalizeJob).filter((j) => typeof j.jobId === "string" && j.jobId.length > 0);
+      for (const job of normalized) {
+        const id = job.jobId;
+        await writeJson(roots, `jobs/${id}.json`, job);
+        await writeJson(roots, `rankings/${id}.json`, job);
+      }
+      await writeJson(roots, "rankings/latest.json", normalized);
+      let folderNames = [];
+      try {
+        folderNames = (await readdir(await at("dossiers"), { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
+      } catch {
+        folderNames = [];
+      }
+      const matched = /* @__PURE__ */ new Set();
+      const skippedFolders = [];
+      for (const name of folderNames) {
+        const dossierDir = await at(join("dossiers", name));
+        const jobId = await readDossierJobId(dossierDir);
+        const targetJob = normalized.find((j) => j.jobId === jobId);
+        if (!jobId || !targetJob) {
+          skippedFolders.push(name);
+          continue;
+        }
+        matched.add(jobId);
+        await writeJson(roots, `applications/${jobId}/job.json`, targetJob);
+        const cv = await readJsonMaybe(join(dossierDir, "cv.json"));
+        if (cv !== void 0) await writeJson(roots, `applications/${jobId}/cv.json`, cv);
+        const cover = await readTextMaybe(join(dossierDir, "cover.md"));
+        if (cover !== void 0) await writeRaw(roots, `applications/${jobId}/cover.md`, cover);
+      }
+      const jobCount = normalized.length;
+      const dossierCount = matched.size;
+      await writeJson(roots, stateRel, {
+        migratedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        jobCount,
+        dossierCount,
+        skippedFolders
+      });
+      return textResult({ appId: input.appId, migrated: true, jobCount, dossierCount, skippedFolders });
+    }
+  );
+}
 var EMPTY_CATALOG = { apps: [] };
 function defaultAppCatalogPath() {
   return join(homedir(), ".agentproto", "app-catalog.json");
@@ -21528,25 +19494,40 @@ function resolveAgentRefsForWorkflow(appRegistry, workflowId) {
   }
   return refs;
 }
-function textResult(body) {
+function buildAgentRunSpawnConfig(agent, input) {
+  const model = input.model ?? agent.model;
+  const body = agent.body.trim();
+  const prompt = body ? input.prompt ? `${body}
+
+${input.prompt}` : body : input.prompt;
+  return {
+    ...model !== void 0 ? { model } : {},
+    ...prompt !== void 0 ? { prompt } : {}
+  };
+}
+async function loadAgentPromptDefaults(agentPath) {
+  const { handle, body } = await loadAgent(agentPath);
+  return { ...typeof handle.model === "string" ? { model: handle.model } : {}, body };
+}
+function textResult2(body) {
   return { content: [{ type: "text", text: JSON.stringify(body, null, 2) }] };
 }
-function errorResult(text10) {
+function errorResult2(text10) {
   return { content: [{ type: "text", text: JSON.stringify({ error: text10 }) }], isError: true };
 }
 function notEnabled(tool) {
-  return errorResult(
+  return errorResult2(
     `${tool} is not enabled \u2014 the daemon was started without an adapter resolver. Re-run the daemon with the \`@agentproto/cli\` shim wired (see playground/scripts/gateway.ts).`
   );
 }
 async function performAppToolCall(appRegistry, input, deps2) {
   const installed = appRegistry.getApp(input.appId);
   if (!installed || !installed.ui) {
-    return errorResult(`app_tool_call: app "${input.appId}" is not installed or has no UI.`);
+    return errorResult2(`app_tool_call: app "${input.appId}" is not installed or has no UI.`);
   }
   const allowlist = installed.ui.tools ?? [];
   if (!allowlist.includes(input.tool)) {
-    return errorResult(
+    return errorResult2(
       `app_tool_call: tool "${input.tool}" is not in app "${input.appId}"'s ui.tools allowlist: ${allowlist.length > 0 ? allowlist.join(", ") : "(empty)"}`
     );
   }
@@ -21557,18 +19538,18 @@ async function performAppToolCall(appRegistry, input, deps2) {
       const rest = input.tool.slice("imported:".length);
       const slash = rest.indexOf("/");
       if (slash === -1) {
-        return errorResult(
+        return errorResult2(
           `app_tool_call: malformed imported tool id "${input.tool}" \u2014 expected "imported:<alias>/<toolName>".`
         );
       }
       const result2 = await deps2.callImportedTool(rest.slice(0, slash), rest.slice(slash + 1), args);
-      return textResult(result2);
+      return textResult2(result2);
     }
     if (!deps2.dispatchTool) return notEnabled("app_tool_call");
     const result = await deps2.dispatchTool(input.tool, args);
-    return textResult(result);
+    return textResult2(result);
   } catch (err) {
-    return errorResult(`app_tool_call: ${err instanceof Error ? err.message : String(err)}`);
+    return errorResult2(`app_tool_call: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
 function refIdOf(ref) {
@@ -21630,7 +19611,19 @@ async function normalizeExternalReadRoots(roots) {
   }
   return { ok: true, roots: normalized };
 }
-async function performInstall(dir, appRegistry, listRegisteredToolIds, resolveAgentAdapter) {
+async function resolveInstallDataDir(input) {
+  const raw = input.explicit ?? input.previous ?? input.hint;
+  const dataDir = raw === void 0 ? resolve(input.dir, DEFAULT_APP_DATA_SUBDIR) : resolve(input.dir, expandHome2(raw));
+  try {
+    const st = await stat(dataDir);
+    if (!st.isDirectory()) {
+      return { ok: false, error: `dataDir "${dataDir}" exists but is not a directory.` };
+    }
+  } catch {
+  }
+  return { ok: true, dataDir };
+}
+async function performInstall(dir, appRegistry, listRegisteredToolIds, resolveAgentAdapter, opts) {
   let handle;
   try {
     handle = await loadAppHandle(dir);
@@ -21705,9 +19698,17 @@ async function performInstall(dir, appRegistry, listRegisteredToolIds, resolveAg
     if (!result.ok) return { ok: false, error: `app_install: ${result.error}` };
     externalReadRoots = result.roots;
   }
+  const dataDirResult = await resolveInstallDataDir({
+    dir,
+    ...opts?.dataDir !== void 0 ? { explicit: opts.dataDir } : {},
+    ...appRegistry.getApp(handle.id)?.dataDir !== void 0 ? { previous: appRegistry.getApp(handle.id).dataDir } : {},
+    ...handle.data?.dir !== void 0 ? { hint: handle.data.dir } : {}
+  });
+  if (!dataDirResult.ok) return { ok: false, error: `app_install: ${dataDirResult.error}` };
   const record2 = appRegistry.upsertApp({
     appId: handle.id,
     dir,
+    dataDir: dataDirResult.dataDir,
     ...handle.version ? { version: handle.version } : {},
     ...handle.name ? { name: handle.name } : {},
     ...handle.description ? { description: handle.description } : {},
@@ -21732,12 +19733,19 @@ function registerAppTools(server, opts) {
   });
   server.tool(
     "app_install",
-    "Install an @agentproto/app-kit app from its emitted directory (`<dir>/.agentproto/APP.md` \u2014 see `defineApp().emit(dir)`). Validates every WORKFLOW.md `tool` step's id against the daemon's dispatchable tools (missing ids are reported ALL at once, instead of failing one at a time at STEP-DISPATCH time) and checks the `mastra-agent` adapter resolves. Agent-declared tool refs (workspace tools like `read_file`) are the adapter's own business and are never validated here \u2014 see `unvalidatedAgentTools` on the result. Re-installing the same appId upserts.",
-    { dir: z.string().describe("Absolute path to the app's directory.") },
+    "Install an @agentproto/app-kit app from its emitted directory (`<dir>/.agentproto/APP.md` \u2014 see `defineApp().emit(dir)`). Validates every WORKFLOW.md `tool` step's id against the daemon's dispatchable tools (missing ids are reported ALL at once, instead of failing one at a time at STEP-DISPATCH time) and checks the `mastra-agent` adapter resolves. Agent-declared tool refs (workspace tools like `read_file`) are the adapter's own business and are never validated here \u2014 see `unvalidatedAgentTools` on the result. Re-installing the same appId upserts (and keeps its existing `dataDir` unless a new one is passed).",
+    {
+      dir: z.string().describe("Absolute path to the app's directory."),
+      dataDir: z.string().optional().describe(
+        "Where the app's durable data (`app_data_*`) lives. Absolute or `~`-relative; a relative path is taken relative to `dir`. Defaults to the previously installed dataDir, else the APP.md `data.dir` hint, else `<dir>/data`."
+      )
+    },
     async (input) => {
-      const result = await performInstall(input.dir, appRegistry, listRegisteredToolIds, resolveAgentAdapter);
-      if (!result.ok) return errorResult(`app_install: ${result.error}`);
-      return textResult(result.record);
+      const result = await performInstall(input.dir, appRegistry, listRegisteredToolIds, resolveAgentAdapter, {
+        ...input.dataDir !== void 0 ? { dataDir: input.dataDir } : {}
+      });
+      if (!result.ok) return errorResult2(`app_install: ${result.error}`);
+      return textResult2(result.record);
     }
   );
   server.tool(
@@ -21748,6 +19756,7 @@ function registerAppTools(server, opts) {
       const runs = appRegistry.listRuns();
       const apps = appRegistry.listApps().map((app) => ({
         ...app,
+        dataDir: appDataDir(app),
         runs: runs.filter((r) => r.appId === app.appId).map((r) => ({
           appRunId: r.appRunId,
           status: r.status,
@@ -21759,12 +19768,12 @@ function registerAppTools(server, opts) {
           sessions: r.sessions.length
         }))
       }));
-      return textResult(apps);
+      return textResult2(apps);
     }
   );
   server.tool(
     "app_run",
-    "Run an installed app's agents as live sessions \u2014 one `agent_start`-equivalent spawn per selected agent (default adapter `mastra-agent`, pointed at that agent's emitted AGENT.md via the adapter's `agent` option), grouped under a fresh appRunId. Re-reads the app's directory first, so a stale install record (paths moved, a workflow renamed) is refreshed before spawning \u2014 the same refreshed paths are what make `workflow_run_file` work against this app's WORKFLOW.md files. Poll with `app_status`, kill with `app_stop`.\n\nOrchestration: pass `sequence` to run agents ONE-AT-A-TIME in the given order (each waits for its predecessor's session to reach a terminal state, bounded ~60\xD72s, before the next spawns) \u2014 the scout\u2192tailor workflow. Without `sequence`, `agents` spawn concurrently (legacy behaviour). When `sequence` is set every agent still lives under the SAME appRunId and is awaited; the run is marked `ended` once the last completes.\n\nRunner selection: `adapter`/`harness`/`model` are passed through to every spawn and mirrored onto the run record for observability. `harness` is the canonical slug and defaults `adapter` to itself when `adapter` is absent; a bare `adapter` sets `harness` to itself; both default to `mastra-agent`. An unresolvable adapter is collected as a per-agent error rather than failing the whole run.",
+    "Run an installed app's agents as live sessions \u2014 one `agent_start`-equivalent spawn per selected agent, grouped under a fresh appRunId. Re-reads the app's directory first, so a stale install record (paths moved, a workflow renamed) is refreshed before spawning \u2014 the same refreshed paths are what make `workflow_run_file` work against this app's WORKFLOW.md files. Poll with `app_status`, kill with `app_stop`.\n\nAdapter support: with the default adapter `mastra-agent` (or any other adapter whose manifest declares an `agent` option), each spawn is pointed straight at the agent's emitted AGENT.md via that option. Any OTHER adapter (`claude-code`, `hermes`, `codex`, ...) declares no such option, so its spawn is built FROM the AGENT.md instead: the frontmatter `model` becomes the spawn's default model (an explicit `model` arg here still wins) and the AGENT.md body becomes the system/prefix of the first prompt (a `prompt` arg is appended after it). `cwd` is still the app's dir, and the daemon's own MCP gateway is still mounted for adapters that get it by default (claude-code, hermes) \u2014 see `shouldInjectDaemonSelfMount` \u2014 so the spawned agent still reaches `app_data_*`/`mcp_imported_call` natively.\n\nOrchestration: pass `sequence` to run agents ONE-AT-A-TIME in the given order (each waits for its predecessor's session to reach a terminal state, bounded ~60\xD72s, before the next spawns) \u2014 the scout\u2192tailor workflow. Without `sequence`, `agents` spawn concurrently (legacy behaviour). When `sequence` is set every agent still lives under the SAME appRunId and is awaited; the run is marked `ended` once the last completes.\n\nRunner selection: `adapter`/`harness`/`model` are passed through to every spawn and mirrored onto the run record for observability. `harness` is the canonical slug and defaults `adapter` to itself when `adapter` is absent; a bare `adapter` sets `harness` to itself; both default to `mastra-agent`. `access.profileRef` pins a named auth profile (see `agent_start.access`) on every spawn this run makes \u2014 needed when an adapter's default credential profile is disabled on this host. An unresolvable adapter is collected as a per-agent error rather than failing the whole run.",
     {
       appId: z.string(),
       agents: z.array(z.string()).optional().describe("Agent ids to run concurrently. Omit to run every agent the app bundles. Ignored when `sequence` is set."),
@@ -21774,7 +19783,12 @@ function registerAppTools(server, opts) {
       scopeId: z.string().optional().describe("When passed, refuse to run if the app is not applied to this scope."),
       adapter: z.string().optional().describe("Agent adapter slug (default `mastra-agent`). Used for the spawn; sets `harness` when `harness` is absent."),
       harness: z.string().optional().describe("Canonical harness slug (defaults to `adapter`). Recorded on the run + each session; sets `adapter` when `adapter` is absent."),
-      model: z.string().optional().describe("Model id passed through to each spawned session.")
+      model: z.string().optional().describe(
+        "Model id passed through to each spawned session. For an adapter with no `agent` option, this wins over the AGENT.md frontmatter's own `model`."
+      ),
+      access: z.object({ profileRef: z.string().optional() }).optional().describe(
+        "Named auth-profile pin threaded to every spawn's `agent_start`-equivalent (see `agent_start.access`) \u2014 e.g. `{ profileRef: \"claude-subs-agentik\" }` when the adapter's default credential profile is disabled on this host."
+      )
       // follow-up: no sandbox support in this WP — the e2b image doesn't carry
       // the mastra-agent adapter yet (see output/phase-a-findings.md A3). Thread
       // a `sandbox` field through to `spawnAgentSession` here once an image
@@ -21785,12 +19799,12 @@ function registerAppTools(server, opts) {
       if (!resolveAgentAdapter) return notEnabled("app_run");
       const installed = appRegistry.getApp(input.appId);
       if (!installed) {
-        return errorResult(`app_run: no installed app "${input.appId}" \u2014 call app_install first.`);
+        return errorResult2(`app_run: no installed app "${input.appId}" \u2014 call app_install first.`);
       }
       if (input.scopeId) {
         const applied = appRegistry.listApplied(input.scopeId);
         if (!applied.some((m) => m.appId === input.appId)) {
-          return errorResult(
+          return errorResult2(
             `app_run: app "${input.appId}" is not applied to scope "${input.scopeId}". Call app_apply first.`
           );
         }
@@ -21799,18 +19813,24 @@ function registerAppTools(server, opts) {
       try {
         refs = await readAppRefs(installed.dir);
       } catch (err) {
-        return errorResult(
+        return errorResult2(
           `app_run: could not re-read "${installed.dir}": ${err instanceof Error ? err.message : String(err)}`
         );
       }
       const app = appRegistry.upsertApp({ ...installed, agents: refs.agents, workflows: refs.workflows });
+      if (app.agents.length === 0) {
+        return errorResult2(`app_run: app "${app.appId}" declares no agents; open its UI panel instead.`);
+      }
       const adapter = input.adapter ?? input.harness ?? DEFAULT_AGENT_ADAPTER;
       const harness = input.harness ?? input.adapter ?? DEFAULT_AGENT_ADAPTER;
       const model = input.model;
+      const resolvedAdapter = await resolveAgentAdapter(adapter);
+      const declaredOptionsKnown = resolvedAdapter?.declaredOptions !== void 0;
+      const declaresAgentOption = !declaredOptionsKnown || resolvedAdapter.declaredOptions.some((o) => o.id === "agent");
       const ordered = input.sequence ?? input.agents ?? app.agents.map((a) => a.id);
       const unknown = ordered.filter((id) => !app.agents.some((a) => a.id === id));
       if (unknown.length > 0) {
-        return errorResult(
+        return errorResult2(
           `app_run: unknown agent id(s) for app "${app.appId}": ${unknown.join(", ")}`
         );
       }
@@ -21818,15 +19838,36 @@ function registerAppTools(server, opts) {
       const errors = [];
       const spawnOne = async (agentId) => {
         const agentPath = app.agents.find((a) => a.id === agentId).path;
+        let spawnModel = model;
+        let spawnPrompt = input.prompt;
+        let spawnOptions;
+        if (declaresAgentOption) {
+          spawnOptions = { agent: agentPath };
+        } else {
+          try {
+            const defaults = await loadAgentPromptDefaults(agentPath);
+            const built = buildAgentRunSpawnConfig(defaults, { model, prompt: input.prompt });
+            spawnModel = built.model;
+            spawnPrompt = built.prompt;
+          } catch (err) {
+            errors.push({
+              agentId,
+              error: `could not read AGENT.md "${agentPath}": ${err instanceof Error ? err.message : String(err)}`
+            });
+            return null;
+          }
+        }
         const result = await spawnAgentSession(
           { registry, resolveAgentAdapter },
           {
             adapter,
             ...harness !== adapter ? { harness } : {},
-            ...model !== void 0 ? { model } : {},
+            ...spawnModel !== void 0 ? { model: spawnModel } : {},
             cwd: input.cwd ?? app.dir,
-            ...input.prompt ? { prompt: input.prompt } : {},
-            options: { agent: agentPath },
+            ...spawnPrompt ? { prompt: spawnPrompt } : {},
+            ...spawnOptions ? { options: spawnOptions } : {},
+            ...input.access ? { access: input.access } : {},
+            appId: app.appId,
             label: `app:${app.appId}:${agentId}`
           }
         );
@@ -21859,7 +19900,7 @@ function registerAppTools(server, opts) {
           ...model !== void 0 ? { model } : {}
         });
         appRegistry.endRun(run2.appRunId, { status: "ended" });
-        return textResult({
+        return textResult2({
           appRunId: run2.appRunId,
           status: run2.status,
           ...run2.endedAt ? { endedAt: run2.endedAt } : {},
@@ -21878,7 +19919,7 @@ function registerAppTools(server, opts) {
         harness,
         ...model !== void 0 ? { model } : {}
       });
-      return textResult({
+      return textResult2({
         appRunId: run.appRunId,
         adapter,
         harness,
@@ -21894,7 +19935,7 @@ function registerAppTools(server, opts) {
     { appRunId: z.string() },
     async (input) => {
       const run = appRegistry.getRun(input.appRunId);
-      if (!run) return errorResult(`app_status: no app run "${input.appRunId}".`);
+      if (!run) return errorResult2(`app_status: no app run "${input.appRunId}".`);
       const app = appRegistry.getApp(run.appId);
       const sessions = run.sessions.map((s) => ({
         agentId: s.agentId,
@@ -21905,7 +19946,7 @@ function registerAppTools(server, opts) {
       const storedTerminal = run.status !== "running";
       const reconciledStatus = storedTerminal ? run.status : allSessionsTerminal ? "ended" : "running";
       const workflowRuns = workflowRunner && app ? workflowRunner.list().filter((r) => app.workflows.some((w) => w.id === r.workflowId)) : [];
-      return textResult({
+      return textResult2({
         appRunId: run.appRunId,
         appId: run.appId,
         status: reconciledStatus,
@@ -21925,7 +19966,7 @@ function registerAppTools(server, opts) {
     { appRunId: z.string() },
     async (input) => {
       const run = appRegistry.getRun(input.appRunId);
-      if (!run) return errorResult(`app_stop: no app run "${input.appRunId}".`);
+      if (!run) return errorResult2(`app_stop: no app run "${input.appRunId}".`);
       const killed = [];
       const notFound = [];
       for (const s of run.sessions) {
@@ -21933,7 +19974,7 @@ function registerAppTools(server, opts) {
         else notFound.push(s.sessionId);
       }
       const ended = appRegistry.endRun(input.appRunId);
-      return textResult({
+      return textResult2({
         appRunId: input.appRunId,
         killed,
         ...notFound.length > 0 ? { notFound } : {},
@@ -21947,17 +19988,20 @@ function registerAppTools(server, opts) {
     {
       appId: z.string(),
       scopeId: z.string().optional().describe("Scope to apply to. Defaults to 'root'."),
-      dir: z.string().optional().describe("Absolute path to install from if not already installed.")
+      dir: z.string().optional().describe("Absolute path to install from if not already installed."),
+      dataDir: z.string().optional().describe("Data root to install with (see app_install). Only used when installing.")
     },
     async (input) => {
       const scopeId = input.scopeId ?? "root";
       let installed = appRegistry.getApp(input.appId);
       if (!installed && input.dir) {
-        const installResult = await performInstall(input.dir, appRegistry, listRegisteredToolIds, resolveAgentAdapter);
-        if (!installResult.ok) return errorResult(`app_apply: ${installResult.error}`);
+        const installResult = await performInstall(input.dir, appRegistry, listRegisteredToolIds, resolveAgentAdapter, {
+          ...input.dataDir !== void 0 ? { dataDir: input.dataDir } : {}
+        });
+        if (!installResult.ok) return errorResult2(`app_apply: ${installResult.error}`);
         installed = installResult.record;
       } else if (!installed) {
-        return errorResult(
+        return errorResult2(
           `app_apply: app "${input.appId}" is not installed. Either call app_install first or provide a 'dir' parameter.`
         );
       }
@@ -21966,19 +20010,20 @@ function registerAppTools(server, opts) {
         const appliedIds = new Set(applied.map((m) => m.appId));
         const missing = installed.requires.filter((reqId) => !appliedIds.has(reqId));
         if (missing.length > 0) {
-          return errorResult(
+          return errorResult2(
             `app_apply: app "${input.appId}" requires the following apps to be applied to scope "${scopeId}" first: ${missing.join(", ")}`
           );
         }
       }
       const mount = appRegistry.applyApp({ scopeId, appId: input.appId });
-      return textResult({
+      return textResult2({
         scopeId: mount.scopeId,
         appId: mount.appId,
         appliedAt: mount.appliedAt,
         agents: installed.agents,
         workflows: installed.workflows,
-        unvalidatedAgentTools: installed.unvalidatedAgentTools
+        unvalidatedAgentTools: installed.unvalidatedAgentTools,
+        ...installed.agents.length === 0 ? { note: "app declares no agents \u2014 nothing to activate in this scope; open its UI panel directly." } : {}
       });
     }
   );
@@ -22001,15 +20046,15 @@ function registerAppTools(server, opts) {
         }
       }
       if (dependents.length > 0) {
-        return errorResult(
+        return errorResult2(
           `app_unapply: cannot unapply app "${input.appId}" from scope "${scopeId}" \u2014 the following apps in this scope require it: ${dependents.join(", ")}`
         );
       }
       const removed = appRegistry.unapplyApp({ scopeId, appId: input.appId });
       if (!removed) {
-        return errorResult(`app_unapply: app "${input.appId}" is not applied to scope "${scopeId}".`);
+        return errorResult2(`app_unapply: app "${input.appId}" is not applied to scope "${scopeId}".`);
       }
-      return textResult({ scopeId: removed.scopeId, appId: removed.appId, appliedAt: removed.appliedAt });
+      return textResult2({ scopeId: removed.scopeId, appId: removed.appId, appliedAt: removed.appliedAt });
     }
   );
   server.tool(
@@ -22033,7 +20078,7 @@ function registerAppTools(server, opts) {
           } : {}
         };
       });
-      return textResult(result);
+      return textResult2(result);
     }
   );
   server.tool(
@@ -22056,26 +20101,26 @@ function registerAppTools(server, opts) {
     async (input) => {
       const applied = appRegistry.listApplied().filter((m) => m.appId === input.appId);
       if (applied.length > 0) {
-        return errorResult(
+        return errorResult2(
           `app_uninstall: app "${input.appId}" is applied to scope(s) ${applied.map((m) => m.scopeId).join(", ")} \u2014 unapply from scopes first.`
         );
       }
       const runningRuns = appRegistry.listRuns().filter((r) => r.appId === input.appId && r.status === "running");
       if (runningRuns.length > 0) {
-        return errorResult(
+        return errorResult2(
           `app_uninstall: app "${input.appId}" has running app_run(s) ${runningRuns.map((r) => r.appRunId).join(", ")} \u2014 stop app runs first.`
         );
       }
       const removed = appRegistry.removeApp(input.appId);
       if (!removed) {
-        return errorResult(`app_uninstall: no installed app "${input.appId}".`);
+        return errorResult2(`app_uninstall: no installed app "${input.appId}".`);
       }
-      return textResult({ appId: removed.appId });
+      return textResult2({ appId: removed.appId });
     }
   );
   server.tool(
     "app_catalog",
-    "List browsable apps from the catalog file (default `~/.agentproto/app-catalog.json`, tolerates a missing file), merged with installed-app status \u2014 every entry reports `installed`, `hasUi`, `hasArtifact`, and `hasSkill`. Installed apps absent from the catalog file are included too.",
+    "List browsable apps from the catalog file (default `~/.agentproto/app-catalog.json`, tolerates a missing file), merged with installed-app status \u2014 every entry reports `installed`, `hasUi`, `hasArtifact`, and `hasSkill`. Installed apps absent from the catalog file are included too, as are the five always-on builtin panels (category `builtin`) \u2014 they need no `app_install`.",
     {
       scopeId: z.string().optional().describe("Reserved for future scope-aware filtering. Currently unused.")
     },
@@ -22114,7 +20159,8 @@ function registerAppTools(server, opts) {
           hasSkill: app.skill !== void 0
         });
       }
-      return textResult(entries);
+      entries.push(...builtinPanelCatalogEntries());
+      return textResult2(entries);
     }
   );
   server.tool(
@@ -22124,20 +20170,20 @@ function registerAppTools(server, opts) {
     async (input) => {
       const installed = appRegistry.getApp(input.appId);
       if (!installed) {
-        return errorResult(`app_artifact_get: no installed app "${input.appId}".`);
+        return errorResult2(`app_artifact_get: no installed app "${input.appId}".`);
       }
       if (!installed.artifact) {
-        return errorResult(`app_artifact_get: app "${input.appId}" has no artifact.`);
+        return errorResult2(`app_artifact_get: app "${input.appId}" has no artifact.`);
       }
       let html;
       try {
         html = await readFile(installed.artifact.path, "utf8");
       } catch (err) {
-        return errorResult(
+        return errorResult2(
           `app_artifact_get: could not read artifact "${installed.artifact.path}": ${err instanceof Error ? err.message : String(err)}`
         );
       }
-      return textResult({
+      return textResult2({
         appId: installed.appId,
         ...installed.artifact.title ? { title: installed.artifact.title } : {},
         ...installed.artifact.description ? { description: installed.artifact.description } : {},
@@ -22152,17 +20198,17 @@ function registerAppTools(server, opts) {
     async (input) => {
       const installed = appRegistry.getApp(input.appId);
       if (!installed) {
-        return errorResult(`app_skill_get: no installed app "${input.appId}".`);
+        return errorResult2(`app_skill_get: no installed app "${input.appId}".`);
       }
       if (!installed.skill) {
-        return errorResult(`app_skill_get: app "${input.appId}" has no skill.`);
+        return errorResult2(`app_skill_get: app "${input.appId}" has no skill.`);
       }
       const skillDir = installed.skill.path;
       let skillSource;
       try {
         skillSource = await readFile(join(skillDir, "SKILL.md"), "utf8");
       } catch (err) {
-        return errorResult(
+        return errorResult2(
           `app_skill_get: could not read SKILL.md in "${skillDir}": ${err instanceof Error ? err.message : String(err)}`
         );
       }
@@ -22190,7 +20236,7 @@ function registerAppTools(server, opts) {
           }
         }
       } catch (err) {
-        return errorResult(
+        return errorResult2(
           `app_skill_get: could not read skill directory "${skillDir}": ${err instanceof Error ? err.message : String(err)}`
         );
       }
@@ -22201,7 +20247,7 @@ function registerAppTools(server, opts) {
         files
       };
       if (skipped.length > 0) result.skipped = skipped;
-      return textResult(result);
+      return textResult2(result);
     }
   );
 }
@@ -22421,10 +20467,10 @@ async function assertExternalPathRealInside(root, target) {
     throw new ExternalPathTraversalError(target);
   }
 }
-function textResult2(body) {
+function textResult3(body) {
   return { content: [{ type: "text", text: JSON.stringify(body, null, 2) }] };
 }
-function errorResult2(text10) {
+function errorResult3(text10) {
   return { content: [{ type: "text", text: JSON.stringify({ error: text10 }) }], isError: true };
 }
 function registerAppExternalTools(server, opts) {
@@ -22439,27 +20485,27 @@ function registerAppExternalTools(server, opts) {
     },
     async (input) => {
       const installed = appRegistry.getApp(input.appId);
-      if (!installed) return errorResult2(`app_external_list: no installed app "${input.appId}".`);
+      if (!installed) return errorResult3(`app_external_list: no installed app "${input.appId}".`);
       try {
         assertRootGranted(installed, input.root);
       } catch (err) {
-        return errorResult2(`app_external_list: ${err instanceof Error ? err.message : String(err)}`);
+        return errorResult3(`app_external_list: ${err instanceof Error ? err.message : String(err)}`);
       }
       const root = await realpathExternalRoot(input.root);
-      if (!root) return errorResult2(`app_external_list: root "${input.root}" is not accessible.`);
+      if (!root) return errorResult3(`app_external_list: root "${input.root}" is not accessible.`);
       const relPath = input.path ?? "";
       let target;
       try {
         target = resolveExternalPath(root, relPath);
         await assertExternalPathRealInside(root, target);
       } catch (err) {
-        return errorResult2(`app_external_list: ${err instanceof Error ? err.message : String(err)}`);
+        return errorResult3(`app_external_list: ${err instanceof Error ? err.message : String(err)}`);
       }
       let dirents;
       try {
         dirents = await readdir(target, { withFileTypes: true });
       } catch (err) {
-        return errorResult2(
+        return errorResult3(
           `app_external_list: cannot list "${relPath || "."}": ${err instanceof Error ? err.message : String(err)}`
         );
       }
@@ -22479,7 +20525,7 @@ function registerAppExternalTools(server, opts) {
         entries.push({ name: d.name, isDirectory, size });
       }
       entries.sort((a, b) => a.name.localeCompare(b.name));
-      return textResult2({ appId: input.appId, root: input.root, path: relPath, entries });
+      return textResult3({ appId: input.appId, root: input.root, path: relPath, entries });
     }
   );
   server.tool(
@@ -22492,40 +20538,40 @@ function registerAppExternalTools(server, opts) {
     },
     async (input) => {
       const installed = appRegistry.getApp(input.appId);
-      if (!installed) return errorResult2(`app_external_read: no installed app "${input.appId}".`);
+      if (!installed) return errorResult3(`app_external_read: no installed app "${input.appId}".`);
       try {
         assertRootGranted(installed, input.root);
       } catch (err) {
-        return errorResult2(`app_external_read: ${err instanceof Error ? err.message : String(err)}`);
+        return errorResult3(`app_external_read: ${err instanceof Error ? err.message : String(err)}`);
       }
       const ext = extname(input.path).toLowerCase();
       if (!TEXT_EXTENSIONS.has(ext)) {
-        return errorResult2(
+        return errorResult3(
           `app_external_read: "${input.path}" has extension "${ext || "(none)"}", which is not text-ish (allowed: ${[...TEXT_EXTENSIONS].sort().join(", ")}). Use GET /apps/${input.appId}/external-blob?root=${encodeURIComponent(input.root)}&path=${encodeURIComponent(input.path)} to fetch this file's bytes instead.`
         );
       }
       const root = await realpathExternalRoot(input.root);
-      if (!root) return errorResult2(`app_external_read: root "${input.root}" is not accessible.`);
+      if (!root) return errorResult3(`app_external_read: root "${input.root}" is not accessible.`);
       let target;
       try {
         target = resolveExternalPath(root, input.path);
         await assertExternalPathRealInside(root, target);
       } catch (err) {
-        return errorResult2(`app_external_read: ${err instanceof Error ? err.message : String(err)}`);
+        return errorResult3(`app_external_read: ${err instanceof Error ? err.message : String(err)}`);
       }
       let st;
       try {
         st = await stat(target);
       } catch (err) {
-        return errorResult2(
+        return errorResult3(
           `app_external_read: cannot stat "${input.path}": ${err instanceof Error ? err.message : String(err)}`
         );
       }
       if (st.isDirectory()) {
-        return errorResult2(`app_external_read: "${input.path}" is a directory, not a file.`);
+        return errorResult3(`app_external_read: "${input.path}" is a directory, not a file.`);
       }
       if (st.size > MAX_TEXT_READ_BYTES) {
-        return errorResult2(
+        return errorResult3(
           `app_external_read: "${input.path}" is ${st.size} bytes, over the ${MAX_TEXT_READ_BYTES}-byte text-read cap. Use the external-blob HTTP route instead.`
         );
       }
@@ -22533,18 +20579,18 @@ function registerAppExternalTools(server, opts) {
       try {
         raw = await readFile(target, "utf8");
       } catch (err) {
-        return errorResult2(
+        return errorResult3(
           `app_external_read: cannot read "${input.path}": ${err instanceof Error ? err.message : String(err)}`
         );
       }
       if (ext === ".json") {
         try {
-          return textResult2({ appId: input.appId, root: input.root, path: input.path, content: JSON.parse(raw) });
+          return textResult3({ appId: input.appId, root: input.root, path: input.path, content: JSON.parse(raw) });
         } catch {
-          return textResult2({ appId: input.appId, root: input.root, path: input.path, content: raw });
+          return textResult3({ appId: input.appId, root: input.root, path: input.path, content: raw });
         }
       }
-      return textResult2({ appId: input.appId, root: input.root, path: input.path, content: raw });
+      return textResult3({ appId: input.appId, root: input.root, path: input.path, content: raw });
     }
   );
 }
@@ -29631,15 +27677,15 @@ async function handleAppExternalBlob(req, res, appId, appRegistry) {
     reply(403, { error: `root "${root}" is not granted to app "${appId}".` });
     return;
   }
-  const safeRoot2 = await realpathExternalRoot(root);
-  if (!safeRoot2) {
+  const safeRoot = await realpathExternalRoot(root);
+  if (!safeRoot) {
     reply(404, { error: `root "${root}" is not accessible.` });
     return;
   }
   let target;
   try {
-    target = resolveExternalPath(safeRoot2, relPath);
-    await assertExternalPathRealInside(safeRoot2, target);
+    target = resolveExternalPath(safeRoot, relPath);
+    await assertExternalPathRealInside(safeRoot, target);
   } catch (err) {
     reply(400, { error: err instanceof Error ? err.message : String(err) });
     return;
@@ -29705,7 +27751,9 @@ async function handleApps(req, res, path, appRegistry, performInstall2, listRegi
     const scopeId = body?.scopeId ?? "root";
     let installed = appRegistry.getApp(appId);
     if (!installed && body?.dir) {
-      const installResult = await performInstall2(body.dir, appRegistry, listRegisteredToolIds, resolveAgentAdapter);
+      const installResult = await performInstall2(body.dir, appRegistry, listRegisteredToolIds, resolveAgentAdapter, {
+        ...body.dataDir !== void 0 ? { dataDir: body.dataDir } : {}
+      });
       if (!installResult.ok) {
         res.writeHead(400, { "content-type": "application/json" });
         res.end(JSON.stringify({ error: installResult.error }));
@@ -30976,261 +29024,6 @@ stderr: ${stderrText.slice(-600)}` : msg);
     `import "${entry.alias}" has unsupported transport type "${snap.type}"`
   );
 }
-var AppPathTraversalError = class extends Error {
-  code = "APP_PATH_TRAVERSAL";
-  constructor(relPath) {
-    super(`app-data: path traversal rejected for "${relPath}" \u2014 must resolve inside the app dir.`);
-    this.name = "AppPathTraversalError";
-  }
-};
-function resolveAppDataPath(appDir, relPath) {
-  if (isAbsolute(relPath)) throw new AppPathTraversalError(relPath);
-  if (/^[A-Za-z]:/.test(relPath)) throw new AppPathTraversalError(relPath);
-  const root = resolve(appDir);
-  const target = resolve(appDir, relPath);
-  const rootWithSep = root.endsWith(sep) ? root : root + sep;
-  if (target !== root && !target.startsWith(rootWithSep)) {
-    throw new AppPathTraversalError(relPath);
-  }
-  return target;
-}
-function textResult3(body) {
-  return { content: [{ type: "text", text: JSON.stringify(body, null, 2) }] };
-}
-function errorResult3(text10) {
-  return { content: [{ type: "text", text: JSON.stringify({ error: text10 }) }], isError: true };
-}
-async function safeRoot(appDir) {
-  try {
-    return await realpath(appDir);
-  } catch {
-    return void 0;
-  }
-}
-async function assertRealInside(root, target) {
-  let real;
-  try {
-    real = await realpath(target);
-  } catch {
-    return;
-  }
-  const rootWithSep = root.endsWith(sep) ? root : root + sep;
-  if (real !== root && !real.startsWith(rootWithSep)) {
-    throw new AppPathTraversalError(target);
-  }
-}
-async function atomicWrite(filePath, data) {
-  await mkdir(dirname(filePath), { recursive: true });
-  const tmp = `${filePath}.tmp.${process.pid}`;
-  await writeFile(tmp, data, "utf8");
-  await rename(tmp, filePath);
-}
-async function writeRaw(root, rel, data) {
-  await atomicWrite(resolveAppDataPath(root, rel), data);
-}
-async function writeJson(root, rel, value) {
-  await writeRaw(root, rel, JSON.stringify(value, null, 2) + "\n");
-}
-async function readTextMaybe(path) {
-  try {
-    return await readFile(path, "utf8");
-  } catch {
-    return void 0;
-  }
-}
-async function readJsonMaybe(path) {
-  const raw = await readTextMaybe(path);
-  if (raw === void 0) return void 0;
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return void 0;
-  }
-}
-function normalizeJob(raw) {
-  const jobId = raw.jobId ?? raw.id;
-  const out = { ...raw, id: jobId, jobId };
-  if (out.applyUrl === void 0 || out.applyUrl === null) out.applyUrl = raw.url;
-  return out;
-}
-async function readDossierJobId(dossierDir) {
-  const parsed = await readJsonMaybe(join(dossierDir, "job.json"));
-  if (!parsed || typeof parsed !== "object") return void 0;
-  const jobId = parsed.jobId ?? parsed.id;
-  return typeof jobId === "string" && jobId.length > 0 ? jobId : void 0;
-}
-function registerAppDataTools(server, opts) {
-  const { appRegistry } = opts;
-  server.tool(
-    "app_data_read",
-    "Read an app-scoped data file (app-relative path). JSON paths return the parsed value in `content`; everything else returns the raw text. Path traversal outside the app dir is rejected.",
-    { appId: z.string(), path: z.string().describe("App-relative path under the app's own dir.") },
-    async (input) => {
-      const installed = appRegistry.getApp(input.appId);
-      if (!installed) return errorResult3(`app_data_read: no installed app "${input.appId}".`);
-      const root = await safeRoot(installed.dir);
-      if (!root) return errorResult3(`app_data_read: app dir "${installed.dir}" is not accessible.`);
-      let target;
-      try {
-        target = resolveAppDataPath(root, input.path);
-        await assertRealInside(root, target);
-      } catch (err) {
-        return errorResult3(`app_data_read: ${err instanceof Error ? err.message : String(err)}`);
-      }
-      const raw = await readTextMaybe(target);
-      if (raw === void 0) return textResult3({ appId: input.appId, path: input.path, exists: false });
-      if (input.path.endsWith(".json")) {
-        try {
-          return textResult3({ appId: input.appId, path: input.path, exists: true, content: JSON.parse(raw) });
-        } catch {
-          return textResult3({ appId: input.appId, path: input.path, exists: true, content: raw });
-        }
-      }
-      return textResult3({ appId: input.appId, path: input.path, exists: true, content: raw });
-    }
-  );
-  server.tool(
-    "app_data_write",
-    "Write an app-scoped data file (app-relative path), creating parent directories as needed. `.json` paths are JSON-stringified (pretty); other paths write the raw string passed as `content.text` (or a plain string `content`). Atomic write (tmp + rename). Path traversal outside the app dir is rejected.",
-    {
-      appId: z.string(),
-      path: z.string().describe("App-relative path under the app's own dir."),
-      content: z.unknown().describe("JSON value for `.json` paths, or `{ text }` / string for others.")
-    },
-    async (input) => {
-      const installed = appRegistry.getApp(input.appId);
-      if (!installed) return errorResult3(`app_data_write: no installed app "${input.appId}".`);
-      const root = await safeRoot(installed.dir);
-      if (!root) return errorResult3(`app_data_write: app dir "${installed.dir}" is not accessible.`);
-      let target;
-      try {
-        target = resolveAppDataPath(root, input.path);
-      } catch (err) {
-        return errorResult3(`app_data_write: ${err instanceof Error ? err.message : String(err)}`);
-      }
-      let payload;
-      if (input.path.endsWith(".json")) {
-        payload = JSON.stringify(input.content, null, 2);
-      } else {
-        const raw = input.content;
-        if (typeof raw === "string") payload = raw;
-        else if (raw !== null && typeof raw === "object" && typeof raw.text === "string") {
-          payload = raw.text;
-        } else {
-          payload = JSON.stringify(raw);
-        }
-      }
-      try {
-        await atomicWrite(target, payload);
-        return textResult3({ appId: input.appId, path: input.path, size: Buffer.byteLength(payload, "utf8") });
-      } catch (err) {
-        return errorResult3(`app_data_write: ${err instanceof Error ? err.message : String(err)}`);
-      }
-    }
-  );
-  server.tool(
-    "app_data_list",
-    "List entries (name + type + size) under an app-relative directory (default `.`). A missing directory returns empty entries, not an error. Path traversal outside the app dir is rejected.",
-    {
-      appId: z.string(),
-      dir: z.string().optional().describe("App-relative directory to list. Defaults to `.`.")
-    },
-    async (input) => {
-      const installed = appRegistry.getApp(input.appId);
-      if (!installed) return errorResult3(`app_data_list: no installed app "${input.appId}".`);
-      const root = await safeRoot(installed.dir);
-      if (!root) return errorResult3(`app_data_list: app dir "${installed.dir}" is not accessible.`);
-      const relDir = input.dir ?? ".";
-      let target;
-      try {
-        target = resolveAppDataPath(root, relDir);
-      } catch (err) {
-        return errorResult3(`app_data_list: ${err instanceof Error ? err.message : String(err)}`);
-      }
-      let dirents;
-      try {
-        dirents = await readdir(target, { withFileTypes: true });
-      } catch {
-        return textResult3({ appId: input.appId, dir: relDir, entries: [] });
-      }
-      const entries = [];
-      for (const d of dirents) {
-        const isDirectory = d.isDirectory();
-        let size = 0;
-        if (!isDirectory) {
-          try {
-            size = (await stat(join(target, d.name))).size;
-          } catch {
-            size = 0;
-          }
-        }
-        entries.push({ name: d.name, type: isDirectory ? "directory" : "file", size });
-      }
-      entries.sort((a, b) => a.name.localeCompare(b.name));
-      return textResult3({ appId: input.appId, dir: relDir, entries });
-    }
-  );
-  server.tool(
-    "app_data_migrate",
-    "One-time import of legacy job-app data into the durable shape under the app dir: `data/jobs/<jobId>.json` (normalized id/jobId/applyUrl), `data/rankings/latest.json` (full ranked list) + per-job ranking artifacts, `applications/<jobId>/{job.json,cv.json,cover.md}` from matching `dossiers/*` folders, and `data/state.json`. Idempotent \u2014 re-running after migration returns `alreadyMigrated` unless `force`.",
-    {
-      appId: z.string(),
-      force: z.boolean().optional().describe("Re-run even if already migrated.")
-    },
-    async (input) => {
-      const installed = appRegistry.getApp(input.appId);
-      if (!installed) return errorResult3(`app_data_migrate: no installed app "${input.appId}".`);
-      const root = await safeRoot(installed.dir);
-      if (!root) return errorResult3(`app_data_migrate: app dir "${installed.dir}" is not accessible.`);
-      const stateRel = "data/state.json";
-      if (!input.force && await readJsonMaybe(resolveAppDataPath(root, stateRel)) !== void 0) {
-        return textResult3({ appId: input.appId, migrated: false, alreadyMigrated: true });
-      }
-      let jobs = [];
-      const rankedRaw = await readJsonMaybe(resolveAppDataPath(root, "ranked-jobs.json"));
-      if (Array.isArray(rankedRaw)) jobs = rankedRaw;
-      const normalized = jobs.map(normalizeJob).filter((j) => typeof j.jobId === "string" && j.jobId.length > 0);
-      for (const job of normalized) {
-        const id = job.jobId;
-        await writeJson(root, `data/jobs/${id}.json`, job);
-        await writeJson(root, `data/rankings/${id}.json`, job);
-      }
-      await writeJson(root, "data/rankings/latest.json", normalized);
-      let folderNames = [];
-      try {
-        folderNames = (await readdir(resolveAppDataPath(root, "dossiers"), { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
-      } catch {
-        folderNames = [];
-      }
-      const matched = /* @__PURE__ */ new Set();
-      const skippedFolders = [];
-      for (const name of folderNames) {
-        const dossierDir = resolveAppDataPath(root, join("dossiers", name));
-        const jobId = await readDossierJobId(dossierDir);
-        const targetJob = normalized.find((j) => j.jobId === jobId);
-        if (!jobId || !targetJob) {
-          skippedFolders.push(name);
-          continue;
-        }
-        matched.add(jobId);
-        await writeJson(root, `applications/${jobId}/job.json`, targetJob);
-        const cv = await readJsonMaybe(join(dossierDir, "cv.json"));
-        if (cv !== void 0) await writeJson(root, `applications/${jobId}/cv.json`, cv);
-        const cover = await readTextMaybe(join(dossierDir, "cover.md"));
-        if (cover !== void 0) await writeRaw(root, `applications/${jobId}/cover.md`, cover);
-      }
-      const jobCount = normalized.length;
-      const dossierCount = matched.size;
-      await writeJson(root, stateRel, {
-        migratedAt: (/* @__PURE__ */ new Date()).toISOString(),
-        jobCount,
-        dossierCount,
-        skippedFolders
-      });
-      return textResult3({ appId: input.appId, migrated: true, jobCount, dossierCount, skippedFolders });
-    }
-  );
-}
 function createSessionEventBus() {
   const ee = new EventEmitter();
   ee.setMaxListeners(100);
@@ -32134,9 +29927,14 @@ function withDeferredTools(server, opts) {
 }
 
 // src/pr-provenance-reconciler.ts
+function prNumberFromUrl(url) {
+  const m = /\/pull\/(\d+)(?:[/?#]|$)/.exec(url);
+  return m ? Number(m[1]) : null;
+}
 var POLL_THROTTLE_MS = 15e3;
 function createPrProvenanceReconciler(opts) {
   const stampedPrUrls = /* @__PURE__ */ new Set();
+  const costRefreshedPrUrls = /* @__PURE__ */ new Set();
   const lastPollAt = /* @__PURE__ */ new Map();
   const reconcile = async (sessionId, terminal) => {
     const desc = opts.registry.get(sessionId);
@@ -32177,9 +29975,31 @@ function createPrProvenanceReconciler(opts) {
       await stamp({ number: record2.createdPrNumber, url: record2.createdPrUrl });
     }
     const pr = await opts.resolveOpenPr(cwd);
-    if (!pr) return;
-    if (!shouldStamp(pr.url)) return;
-    await stamp(pr);
+    if (pr && shouldStamp(pr.url)) await stamp(pr);
+    await refreshCost(desc, supervisor, cwd);
+  };
+  const refreshCost = async (desc, supervisor, cwd) => {
+    if (typeof desc.costUsd !== "number") return;
+    for (const opened of desc.openedPrs ?? []) {
+      if (costRefreshedPrUrls.has(opened.url)) continue;
+      const number = opened.number ?? prNumberFromUrl(opened.url);
+      if (number === null) {
+        costRefreshedPrUrls.add(opened.url);
+        continue;
+      }
+      const outcome = await stampFooterOnPr({
+        registry: opts.registry,
+        session: desc,
+        supervisor,
+        prNumber: number,
+        prUrl: opened.url,
+        cwd,
+        refresh: true,
+        ...opts.run ? { run: opts.run } : {},
+        ...opts.host ? { host: opts.host } : {}
+      });
+      if (outcome.stamped) costRefreshedPrUrls.add(opened.url);
+    }
   };
   const safeReconcile = (sessionId, terminal) => {
     void reconcile(sessionId, terminal).catch(() => {
@@ -32198,6 +30018,7 @@ function createPrProvenanceReconciler(opts) {
     dispose() {
       for (const unsubscribe of unsubscribes) unsubscribe();
       stampedPrUrls.clear();
+      costRefreshedPrUrls.clear();
       lastPollAt.clear();
     }
   };
@@ -37012,14 +34833,12 @@ async function createGateway(opts) {
     };
     registerAppPullTools(server, { registry: sessions });
     const builtinPanelApps = [
-      makeSessionsPanelApp({ listSessions: listSessionsFiltered }),
-      makeAgentsOverviewApp({ listSessions: listSessionsFiltered }),
-      makeBureauSessionsApp({ listSessions: listSessionsFiltered }),
-      makeSessionStoryPanelApp({ listSessions: listSessionsFiltered }),
-      // Live-session widget — resource ui://live_session/view, also bound to
-      // `agent_start` via _meta.ui.resourceUri so a launch auto-renders it.
-      // httpBaseUrl = this daemon's own origin (SSE stream + bridge fallback).
-      makeLiveSessionApp({ httpBaseUrl: `http://127.0.0.1:${port}` }),
+      ...makeBuiltinPanelApps({
+        listSessions: listSessionsFiltered,
+        // httpBaseUrl = this daemon's own origin (SSE stream + bridge
+        // fallback for the live-session widget).
+        httpBaseUrl: `http://127.0.0.1:${port}`
+      }),
       // Same ptyEnabled gate as terminal_start/terminal_input/… in
       // session-tools.ts — the panel would be able to open the WS but
       // every spawn/attach would fail once node-pty isn't available, so