@aliceshimada/mica 1.0.5 → 1.1.1

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 1.1.1 - 2026-06-16
+
+- Fix `RestartKernelRequest`: kill kernel via `Quit[]` before restarting.
+- Fix `realpathSync` crash when `process.argv[1]` doesn't resolve.
+- Fix `$BridgeNotebookPermissions` memory leak: prune on notebook close.
+
+## 1.1.0 - 2026-06-09
+
+- Add `mma_kill_kernel` tool: quit a notebook's Wolfram kernel (control agent kernel is protected).
+- Add `mma_restart_kernel` tool: restart a notebook's Wolfram kernel so it can evaluate cells again.
+
 ## 1.0.5 - 2026-06-09
 
 - Fix abort disconnection: give control evaluator a separate kernel via `LinkLaunch` instead of cloning `"Local"`.

package/dist/src/bun/httpServer.js

@@ -3,7 +3,7 @@ import http from "node:http";
 import { executeBackendMcpTool } from "../mcp/backendTools.js";
 import { renderDashboard } from "./dashboard.js";
 const JSON_BODY_LIMIT_BYTES = 1024 * 1024;
-const DEFAULT_VERSION = "1.0.5";
+const DEFAULT_VERSION = "1.1.1";
 export async function createBunHttpApp({ state, host = "127.0.0.1", port, authToken, version = DEFAULT_VERSION }) {
     const runtimeInfo = {
         host,

package/dist/src/bun/index.js

@@ -8,7 +8,7 @@ import { loadRuntimeConfig } from "../runtime/config.js";
 import { writeSessionFile } from "../runtime/session.js";
 import { createBunHttpApp } from "./httpServer.js";
 const MCP_SERVER_NAME = "mica-bun";
-const MICA_PACKAGE_VERSION = "1.0.5";
+const MICA_PACKAGE_VERSION = "1.1.1";
 export async function startBunRuntime(deps = {}) {
     const config = deps.runtimeConfig ?? loadRuntimeConfig();
     const bridgeOnly = deps.bridgeOnly ?? config.bridgeOnly;

package/dist/src/cli/doctor.js

@@ -83,7 +83,7 @@ export async function runDoctor(deps = {}) {
     let sessionBaseUrl;
     if (!_exists(sessionFile)) {
         fail("Session file", `${sessionFile} (not found)`);
-        fix("Run: mica start");
+        fix("Run: mica mcp");
     }
     else {
         try {
@@ -97,7 +97,7 @@ export async function runDoctor(deps = {}) {
         }
         catch (e) {
             fail("Session file", `${sessionFile} (${e instanceof Error ? e.message : String(e)})`);
-            fix("Run: mica start");
+            fix("Run: mica mcp");
         }
     }
     // -----------------------------------------------------------------------
@@ -173,7 +173,7 @@ export async function runDoctor(deps = {}) {
         catch (e) {
             fail("Auth token", "server not reachable");
             fail("Server /status reachable", e instanceof Error ? e.message : String(e));
-            fix("Run: mica start");
+            fix("Run: mica mcp");
             fail("Live agent count", "server not reachable");
             fail("Live notebook count", "server not reachable");
         }

package/dist/src/cli/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, readFileSync, realpathSync } from "node:fs";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -222,10 +222,19 @@ async function main() {
     });
     process.exitCode = exitCode;
 }
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
-    main().catch((error) => {
-        const message = error instanceof Error ? error.stack ?? error.message : String(error);
-        process.stderr.write(`${message}\n`);
-        process.exitCode = 1;
-    });
+if (process.argv[1]) {
+    try {
+        const scriptReal = realpathSync(fileURLToPath(import.meta.url));
+        const argReal = realpathSync(process.argv[1]);
+        if (scriptReal === argReal) {
+            main().catch((error) => {
+                const message = error instanceof Error ? error.stack ?? error.message : String(error);
+                process.stderr.write(`${message}\n`);
+                process.exitCode = 1;
+            });
+        }
+    }
+    catch {
+        // process.argv[1] may not resolve (e.g. node -e, shebang edge cases)
+    }
 }

package/dist/src/mcp/backendTools.js

@@ -1,6 +1,6 @@
 import { randomUUID } from "node:crypto";
 import { DEFAULT_TIMEOUTS_MS } from "../backend/protocol.js";
-import { abortEvaluationSchema, deleteCellSchema, getCellOutputSchema, insertCellSchema, listCellsSchema, modifyCellSchema, noArgsSchema, readArtifactSchema, readCellSchema, runCellSchema, selectNotebookSchema, saveNotebookSchema, symbolLookupSchema, } from "./toolSchemas.js";
+import { abortEvaluationSchema, deleteCellSchema, getCellOutputSchema, insertCellSchema, killKernelSchema, listCellsSchema, modifyCellSchema, noArgsSchema, readArtifactSchema, readCellSchema, restartKernelSchema, runCellSchema, selectNotebookSchema, saveNotebookSchema, symbolLookupSchema, } from "./toolSchemas.js";
 import { INSERT_ANCHOR_GUIDANCE, notebookToolDescription } from "./descriptions.js";
 import { toolFailure, toolSuccess, withToolErrors } from "./toolResults.js";
 function assertLiveAgent(state) {
@@ -141,6 +141,22 @@ const queuedNotebookTools = [
         timeoutMs: () => DEFAULT_TIMEOUTS_MS.mutation,
         requiresExplicitTarget: true,
     },
+    {
+        name: "mma_kill_kernel",
+        summary: "Quit the Wolfram kernel for a notebook. The control agent kernel is protected and cannot be killed.",
+        schema: killKernelSchema.shape,
+        permission: "RunCell",
+        timeoutMs: () => DEFAULT_TIMEOUTS_MS.mutation,
+        requiresExplicitTarget: true,
+    },
+    {
+        name: "mma_restart_kernel",
+        summary: "Restart the Wolfram kernel for a notebook so it can evaluate cells again.",
+        schema: restartKernelSchema.shape,
+        permission: "RunCell",
+        timeoutMs: () => DEFAULT_TIMEOUTS_MS.mutation,
+        requiresExplicitTarget: true,
+    },
     {
         name: "mma_get_cell_output",
         summary: "Read output and messages for one Mathematica notebook cell, refreshing completed run status when observed.",

package/dist/src/mcp/prompts.js

@@ -12,6 +12,8 @@ const TOOL_GUIDE = [
     ["mma_delete_cell", "Delete an existing cell."],
     ["mma_run_cell", "Evaluate one cell and wait for completion or timeout."],
     ["mma_abort_evaluation", "Abort a running notebook evaluation."],
+    ["mma_kill_kernel", "Quit the Wolfram kernel for a notebook (control agent kernel is protected)."],
+    ["mma_restart_kernel", "Restart the Wolfram kernel for a notebook so it can evaluate cells again."],
     ["mma_get_cell_output", "Read output and messages produced by one cell; this may refresh completed run status."],
     ["mma_read_artifact", "Read large output or message artifacts by byte page; ids may become stale after notebook edits or reruns."],
     ["mma_save_notebook", "Save the selected notebook when SaveNotebook permission is granted."],
@@ -33,7 +35,7 @@ export const MICA_AGENT_INSTRUCTIONS = [
     "Tools:",
     ...TOOL_GUIDE.map(([name, description]) => `- ${name}: ${description}`),
 ].join("\n");
-export function createMicaMcpServer(name, version = "1.0.5") {
+export function createMicaMcpServer(name, version = "1.1.1") {
     return new McpServer({ name, version }, { instructions: MICA_AGENT_INSTRUCTIONS });
 }
 export function registerMicaPrompts(server) {

package/dist/src/mcp/toolSchemas.js

@@ -38,6 +38,12 @@ export const runCellSchema = z.object({
 export const abortEvaluationSchema = z.object({
     ...notebookSelectorFields
 }).strict();
+export const killKernelSchema = z.object({
+    ...notebookSelectorFields
+}).strict();
+export const restartKernelSchema = z.object({
+    ...notebookSelectorFields
+}).strict();
 export const getCellOutputSchema = z.object({
     ...notebookSelectorFields,
     cellId: z.string().min(1),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aliceshimada/mica",
-  "version": "1.0.5",
+  "version": "1.1.1",
   "description": "Local MCP bridge for controlling live Wolfram Desktop / Mathematica notebooks.",
   "type": "module",
   "repository": {

package/paclet/Kernel/MMAAgentBridge.wl

@@ -122,11 +122,31 @@ If[!AssociationQ[Quiet @ Check[$BridgePermissions, None]],
   $BridgePermissions = $DefaultBridgePermissions
 ];
 
-PalettePermissionRow[label_String, key_String] := Row[{
-  Checkbox[Dynamic[$BridgePermissions[key], ($BridgePermissions[key] = #; Quiet @ Check[PostPermissions[], Null]) &]],
-  Spacer[8],
-  Style[label, 11]
-}];
+If[!AssociationQ[Quiet @ Check[$BridgeNotebookPermissions, None]],
+  $BridgeNotebookPermissions = <||>
+];
+
+NotebookPermissions[notebookId_String] := Lookup[$BridgeNotebookPermissions, notebookId, $DefaultBridgePermissions];
+
+SetNotebookPermissions[notebookId_String, perms_Association] := (
+  $BridgeNotebookPermissions[notebookId] = perms
+);
+
+PalettePermissionRow[label_String, key_String, notebookId_:None] := Module[{perms, setter},
+  perms = If[StringQ[notebookId] && StringLength[notebookId] > 0,
+    NotebookPermissions[notebookId],
+    $BridgePermissions
+  ];
+  setter = If[StringQ[notebookId] && StringLength[notebookId] > 0,
+    Function[val, SetNotebookPermissions[notebookId, Join[perms, <|key -> val|>]]],
+    Function[val, $BridgePermissions[key] = val; Quiet @ Check[PostPermissions[], Null]]
+  ];
+  Row[{
+    Checkbox[Dynamic[perms[key], (setter[#]) &]],
+    Spacer[8],
+    Style[label, 11]
+  }]
+];
 
 PaletteStatusSummary[] := Module[{server, paletteConnected, notebookAttached, pendingRequests, attachedNotebook, error},
   server = Lookup[$LastStatus, "server", "unknown"];
@@ -332,14 +352,14 @@ PermissionsPanel[] := Panel[
   Column[
     {
       Style["Permissions", Bold],
-      Grid[
+      Dynamic @ Grid[
         {
-          {PalettePermissionRow["Read notebook", "ReadNotebook"]},
-          {PalettePermissionRow["Insert cell", "InsertCell"]},
-          {PalettePermissionRow["Modify cell", "ModifyCell"]},
-          {PalettePermissionRow["Delete cell", "DeleteCell"]},
-          {PalettePermissionRow["Run cell", "RunCell"]},
-          {PalettePermissionRow["Save notebook", "SaveNotebook"]}
+          {PalettePermissionRow["Read notebook", "ReadNotebook", $ActiveNotebookId]},
+          {PalettePermissionRow["Insert cell", "InsertCell", $ActiveNotebookId]},
+          {PalettePermissionRow["Modify cell", "ModifyCell", $ActiveNotebookId]},
+          {PalettePermissionRow["Delete cell", "DeleteCell", $ActiveNotebookId]},
+          {PalettePermissionRow["Run cell", "RunCell", $ActiveNotebookId]},
+          {PalettePermissionRow["Save notebook", "SaveNotebook", $ActiveNotebookId]}
         },
         Alignment -> Left,
         Spacings -> {1, 0.35}
@@ -590,10 +610,16 @@ PostPermissions[] := Module[{payload = <|"permissions" -> $BridgePermissions|>},
   Quiet @ Check[BridgePost["/permissions", payload], $Failed]
 ];
 
-NeedsConfirmationQ[action_String] := Not @ TrueQ[$BridgePermissions[action]];
+NeedsConfirmationQ[action_String, notebookId_:None] := Module[{perms},
+  perms = If[StringQ[notebookId] && StringLength[notebookId] > 0,
+    NotebookPermissions[notebookId],
+    $BridgePermissions
+  ];
+  Not @ TrueQ[perms[action]]
+];
 
-ConfirmAction[action_String, message_String] := If[
-  NeedsConfirmationQ[action],
+ConfirmAction[action_String, message_String, notebookId_:None] := If[
+  NeedsConfirmationQ[action, notebookId],
   ChoiceDialog[message, {"Allow" -> True, "Deny" -> False}],
   True
 ];
@@ -606,8 +632,8 @@ FailedRequestCode[failure_Failure] := Module[{code = failure[[1]]},
 
 FailedRequestMessage[failure_Failure] := Lookup[failure[[2]], "Message", Lookup[failure[[2]], "message", "The Wolfram bridge rejected the request."]];
 
-RequireReadPermission[] := If[
-  Not @ ConfirmAction["ReadNotebook", "AI requests reading the notebook. Allow?"],
+RequireReadPermission[notebookId_:None] := If[
+  Not @ ConfirmAction["ReadNotebook", "AI requests reading the notebook. Allow?", notebookId],
   $Canceled,
   True
 ];
@@ -628,7 +654,7 @@ NotebookInfo[nb_NotebookObject, notebookId_String] := <|
   "wolframVersion" -> ToString @ $VersionNumber,
   "platform" -> $OperatingSystem,
   "paletteId" -> $PaletteId,
-  "permissions" -> $BridgePermissions
+  "permissions" -> NotebookPermissions[notebookId]
 |>;
 
 NotebookRecord[notebookId_String] := Lookup[$BridgeNotebooks, notebookId, <||>];
@@ -1137,9 +1163,9 @@ RefreshCellMap[notebookId_String] := Module[{record, nb, cells, idByCell, previo
   payload
 ];
 
-ReadCellById[args_Association] := Module[{notebookId, record, cellId, cell, maxBytes, payload},
-  If[RequireReadPermission[] === $Canceled, Return[$Canceled]];
-  notebookId = TargetNotebookId[args];
+ReadCellById[args_Association] := Module[{notebookId, record, cellId, cell, maxBytes, payload},
+  notebookId = TargetNotebookId[args];
+  If[RequireReadPermission[notebookId] === $Canceled, Return[$Canceled]];
   If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
   record = NotebookRecord[notebookId];
   If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
@@ -1158,9 +1184,9 @@ ReadCellById[args_Association] := Module[{notebookId, record, cellId, cell, maxB
   ]
 ];
 
-GetCellOutputById[args_Association] := Module[{notebookId, record, cellId, cell, artifacts, maxBytes, payload},
-  If[RequireReadPermission[] === $Canceled, Return[$Canceled]];
-  notebookId = TargetNotebookId[args];
+GetCellOutputById[args_Association] := Module[{notebookId, record, cellId, cell, artifacts, maxBytes, payload},
+  notebookId = TargetNotebookId[args];
+  If[RequireReadPermission[notebookId] === $Canceled, Return[$Canceled]];
   If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
   record = NotebookRecord[notebookId];
   If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
@@ -1178,9 +1204,9 @@ GetCellOutputById[args_Association] := Module[{notebookId, record, cellId, cell,
   ]
 ];
 
-ReadArtifactById[args_Association] := Module[{notebookId, record, artifactId, parts, cellId, kind, indexText, index, cell, artifacts, artifactList, text, offset, limit, page, nextOffset, done},
-  If[RequireReadPermission[] === $Canceled, Return[$Canceled]];
-  notebookId = TargetNotebookId[args];
+ReadArtifactById[args_Association] := Module[{notebookId, record, artifactId, parts, cellId, kind, indexText, index, cell, artifacts, artifactList, text, offset, limit, page, nextOffset, done},
+  notebookId = TargetNotebookId[args];
+  If[RequireReadPermission[notebookId] === $Canceled, Return[$Canceled]];
   If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
   record = NotebookRecord[notebookId];
   If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
@@ -1255,8 +1281,8 @@ InsertCellAtBeginning[notebook_NotebookObject, newCell_] := Module[{beforeCount,
 ];
 
 InsertCellRequest[args_Association] := Module[{notebookId, record, afterId, style, content, newCell, notebook, anchor, cells, inserted, refreshed},
-  If[Not @ ConfirmAction["InsertCell", "AI requests inserting 1 cell. Allow?"], Return[$Canceled]];
   notebookId = TargetNotebookId[args];
+  If[Not @ ConfirmAction["InsertCell", "AI requests inserting 1 cell. Allow?", notebookId], Return[$Canceled]];
   If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
   record = NotebookRecord[notebookId];
   If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
@@ -1291,8 +1317,8 @@ InsertCellRequest[args_Association] := Module[{notebookId, record, afterId, styl
 ];
 
 ModifyCellRequest[args_Association] := Module[{notebookId, record, notebook, cellId, cellMap, cell, content, style, newCell, cells, cellIndex, updatedCells, updatedCell, writeResult},
-  If[Not @ ConfirmAction["ModifyCell", "AI requests modifying 1 cell. Allow?"], Return[$Canceled]];
   notebookId = TargetNotebookId[args];
+  If[Not @ ConfirmAction["ModifyCell", "AI requests modifying 1 cell. Allow?", notebookId], Return[$Canceled]];
   If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
   record = NotebookRecord[notebookId];
   If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
@@ -1322,8 +1348,8 @@ ModifyCellRequest[args_Association] := Module[{notebookId, record, notebook, cel
 ];
 
 DeleteCellRequest[args_Association] := Module[{notebookId, record, notebook, cellId, cell, cellMap, artifacts, artifactIds, newCellMap},
-  If[Not @ ConfirmAction["DeleteCell", "AI requests deleting 1 cell. Allow?"], Return[$Canceled]];
   notebookId = TargetNotebookId[args];
+  If[Not @ ConfirmAction["DeleteCell", "AI requests deleting 1 cell. Allow?", notebookId], Return[$Canceled]];
   If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
   record = NotebookRecord[notebookId];
   If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
@@ -1345,8 +1371,8 @@ DeleteCellRequest[args_Association] := Module[{notebookId, record, notebook, cel
 ];
 
 RunCellRequest[args_Association] := Module[{notebookId, record, notebook, cellId, cell, timeoutSec = Lookup[args, "timeoutSec", 120], installedEpilog, evaluateResult},
-  If[Not @ ConfirmAction["RunCell", "AI requests running 1 cell. Allow?"], Return[$Canceled]];
   notebookId = TargetNotebookId[args];
+  If[Not @ ConfirmAction["RunCell", "AI requests running 1 cell. Allow?", notebookId], Return[$Canceled]];
   If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
   record = NotebookRecord[notebookId];
   If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
@@ -1384,8 +1410,8 @@ RunCellRequest[args_Association] := Module[{notebookId, record, notebook, cellId
 ];
 
 AbortEvaluationRequest[args_Association] := Module[{notebookId, record, notebook, runningCellId, runningRequestId, wasRunning},
-  If[Not @ ConfirmAction["RunCell", "AI requests aborting the running evaluation. Allow?"], Return[$Canceled]];
   notebookId = TargetNotebookId[args];
+  If[Not @ ConfirmAction["RunCell", "AI requests aborting the running evaluation. Allow?", notebookId], Return[$Canceled]];
   If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
   record = NotebookRecord[notebookId];
   If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
@@ -1407,11 +1433,43 @@ AbortEvaluationRequest[args_Association] := Module[{notebookId, record, notebook
     <|"status" -> "abort_requested", "cellId" -> runningCellId, "requestId" -> runningRequestId|>,
     <|"status" -> "idle"|>
   ]
-];
+];
+
+KillKernelRequest[args_Association] := Module[{notebookId, record, notebook, evaluatorName},
+  notebookId = TargetNotebookId[args];
+  If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
+  record = NotebookRecord[notebookId];
+  If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
+  notebook = Lookup[record, "notebook", None];
+  If[Head[notebook] =!= NotebookObject, Return[Failure["BAD_REQUEST", <|"message" -> "Notebook is unavailable."|>]]];
+  evaluatorName = Quiet @ Check[CurrentValue[notebook, Evaluator], $ControlAgentEvaluatorName];
+  If[evaluatorName === $ControlAgentEvaluatorName,
+    Return[Failure["PROTECTED_EVALUATOR", <|"message" -> "Cannot kill the MICA control agent evaluator."|>]]
+  ];
+  Quiet @ Check[NotebookEvaluate[notebook, "Quit[]", InsertResults -> False], Null];
+  <|"status" -> "killed", "notebookId" -> notebookId|>
+];
+
+RestartKernelRequest[args_Association] := Module[{notebookId, record, notebook, evaluatorName},
+  notebookId = TargetNotebookId[args];
+  If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
+  record = NotebookRecord[notebookId];
+  If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
+  notebook = Lookup[record, "notebook", None];
+  If[Head[notebook] =!= NotebookObject, Return[Failure["BAD_REQUEST", <|"message" -> "Notebook is unavailable."|>]]];
+  evaluatorName = Quiet @ Check[CurrentValue[notebook, Evaluator], $ControlAgentEvaluatorName];
+  If[evaluatorName === $ControlAgentEvaluatorName,
+    Return[Failure["PROTECTED_EVALUATOR", <|"message" -> "Cannot restart the MICA control agent evaluator."|>]]
+  ];
+  Quiet @ Check[NotebookEvaluate[notebook, "Quit[]", InsertResults -> False], Null];
+  Pause[0.5];
+  Quiet @ Check[NotebookEvaluate[notebook, "Null", InsertResults -> False], Null];
+  <|"status" -> "restarted", "notebookId" -> notebookId|>
+];
 
 SaveNotebookRequest[args_Association] := Module[{notebookId, record, notebook},
-  If[Not @ ConfirmAction["SaveNotebook", "AI requests saving the notebook. Allow?"], Return[$Canceled]];
   notebookId = TargetNotebookId[args];
+  If[Not @ ConfirmAction["SaveNotebook", "AI requests saving the notebook. Allow?", notebookId], Return[$Canceled]];
   If[!StringQ[notebookId] || StringLength[notebookId] == 0, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
   record = NotebookRecord[notebookId];
   If[!AssociationQ[record] || record === <||>, Return[Failure["BAD_REQUEST", <|"message" -> "No notebook is selected."|>]]];
@@ -1466,11 +1524,15 @@ AgentHeartbeat[] := BridgePost[
   |>
 ];
 
-NotebookHeartbeatPayload[nb_NotebookObject] := Module[{savedPath, windowTitle, displayName, frontendObjectKey},
+NotebookHeartbeatPayload[nb_NotebookObject, notebookId_:None] := Module[{savedPath, windowTitle, displayName, frontendObjectKey, perms},
   savedPath = Quiet @ Check[ToString[Replace[NotebookFileName[nb], $Failed -> ""]], ""];
   frontendObjectKey = FrontendObjectKey[nb];
   windowTitle = NotebookWindowTitle[nb];
   displayName = NotebookDisplayNameForHeartbeat[nb, savedPath, frontendObjectKey];
+  perms = If[StringQ[notebookId] && StringLength[notebookId] > 0,
+    NotebookPermissions[notebookId],
+    $DefaultBridgePermissions
+  ];
   <|
     "agentSessionId" -> $AgentSessionId,
     "frontendObjectKey" -> frontendObjectKey,
@@ -1480,7 +1542,7 @@ NotebookHeartbeatPayload[nb_NotebookObject] := Module[{savedPath, windowTitle, d
     "savedPath" -> savedPath,
     "wolframVersion" -> ToString[$VersionNumber],
     "platform" -> $OperatingSystem,
-    "permissions" -> $BridgePermissions,
+    "permissions" -> perms,
     "seenAt" -> UnixTimeMilliseconds[]
   |>
 ];
@@ -1514,7 +1576,8 @@ AgentHeartbeatNotebookClosure[notebookId_String] := Module[{record = Lookup[$Bri
   response = Quiet @ Check[BridgePost["/notebooks/" <> URLComponentEncodeString[notebookId] <> "/closed", <|"agentSessionId" -> $AgentSessionId|>], $Failed];
   If[AssociationQ[record] && AssociationQ[response] && TrueQ[Lookup[response, "ok", False]],
     If[!TrueQ[Lookup[record, "closed", False]],
-      $BridgeNotebooks[notebookId] = Join[record, <|"closed" -> True|>]
+      $BridgeNotebooks[notebookId] = Join[record, <|"closed" -> True|>];
+      KeyDropFrom[$BridgeNotebookPermissions, notebookId]
     ]
   ];
   response
@@ -1538,7 +1601,7 @@ HeartbeatNotebooks[] := Module[{notebooks = AgentVisibleNotebooks[], visibleNote
             None
           ];
           If[StringQ[localNotebookId] && StringLength[localNotebookId] > 0, AppendTo[visibleNotebookIds, localNotebookId]];
-          payload = NotebookHeartbeatPayload[nb];
+          payload = NotebookHeartbeatPayload[nb, localNotebookId];
           response = Quiet @ Check[BridgePost["/notebooks/heartbeat", payload], $Failed];
           If[AssociationQ[response],
             notebookId = Lookup[Lookup[response, "notebook", <||>], "notebookId", Lookup[response, "notebookId", None]];
@@ -1771,13 +1834,15 @@ ExecuteRequest[request_Association] := Module[{requestId, tool, args, result},
         !AssociationQ[args], Failure["BAD_REQUEST", <|"Message" -> "Request arguments must be an association."|>],
         True,
         Switch[tool,
-          "mma_list_cells", If[RequireReadPermission[] === $Canceled, $Canceled, Module[{notebookId = TargetNotebookId[args], refresh}, If[!StringQ[notebookId] || StringLength[notebookId] == 0, Failure["BAD_REQUEST", <|"Message" -> "No notebook is selected."|>], refresh = RefreshCellMap[notebookId]; If[MatchQ[refresh, _Failure], refresh, <|"cells" -> refresh|>]]]],
+          "mma_list_cells", If[RequireReadPermission[TargetNotebookId[args]] === $Canceled, $Canceled, Module[{notebookId = TargetNotebookId[args], refresh}, If[!StringQ[notebookId] || StringLength[notebookId] == 0, Failure["BAD_REQUEST", <|"Message" -> "No notebook is selected."|>], refresh = RefreshCellMap[notebookId]; If[MatchQ[refresh, _Failure], refresh, <|"cells" -> refresh|>]]]],
           "mma_read_cell", ReadCellById[args],
           "mma_insert_cell", InsertCellRequest[args],
           "mma_modify_cell", ModifyCellRequest[args],
           "mma_delete_cell", DeleteCellRequest[args],
           "mma_run_cell", RunCellRequest[args],
-          "mma_abort_evaluation", AbortEvaluationRequest[args],
+          "mma_abort_evaluation", AbortEvaluationRequest[args],
+          "mma_kill_kernel", KillKernelRequest[args],
+          "mma_restart_kernel", RestartKernelRequest[args],
           "mma_get_cell_output", GetCellOutputById[args],
           "mma_read_artifact", ReadArtifactById[args],
           "mma_save_notebook", SaveNotebookRequest[args],