@amd-gaia/agent-ui 0.24.1 → 0.25.0-rc.8

package/dist/assets/jsx-runtime-DVeaULmT.js

@@ -0,0 +1 @@
+import{r as e,t}from"./rolldown-runtime-hePW80VL.js";var n=t((e=>{var t=Symbol.for(`react.transitional.element`),n=Symbol.for(`react.portal`),r=Symbol.for(`react.fragment`),i=Symbol.for(`react.strict_mode`),a=Symbol.for(`react.profiler`),o=Symbol.for(`react.consumer`),s=Symbol.for(`react.context`),c=Symbol.for(`react.forward_ref`),l=Symbol.for(`react.suspense`),u=Symbol.for(`react.memo`),d=Symbol.for(`react.lazy`),f=Symbol.for(`react.activity`),p=Symbol.for(`react.view_transition`),m=Symbol.iterator;function h(e){return typeof e!=`object`||!e?null:(e=m&&e[m]||e[`@@iterator`],typeof e==`function`?e:null)}var g={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},_=Object.assign,v={};function y(e,t,n){this.props=e,this.context=t,this.refs=v,this.updater=n||g}y.prototype.isReactComponent={},y.prototype.setState=function(e,t){if(typeof e!=`object`&&typeof e!=`function`&&e!=null)throw Error(`takes an object of state variables to update or a function which returns an object of state variables.`);this.updater.enqueueSetState(this,e,t,`setState`)},y.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,`forceUpdate`)};function b(){}b.prototype=y.prototype;function x(e,t,n){this.props=e,this.context=t,this.refs=v,this.updater=n||g}var S=x.prototype=new b;S.constructor=x,_(S,y.prototype),S.isPureReactComponent=!0;var C=Array.isArray;function w(){}var T={H:null,A:null,T:null,S:null},E=Object.prototype.hasOwnProperty;function D(e,n,r){var i=r.ref;return{$$typeof:t,type:e,key:n,ref:i===void 0?null:i,props:r}}function O(e,t){return D(e.type,t,e.props)}function k(e){return typeof e==`object`&&!!e&&e.$$typeof===t}function A(e){var t={"=":`=0`,":":`=2`};return`$`+e.replace(/[=:]/g,function(e){return t[e]})}var j=/\/+/g;function M(e,t){return typeof e==`object`&&e&&e.key!=null?A(``+e.key):t.toString(36)}function N(e){switch(e.status){case`fulfilled`:return e.value;case`rejected`:throw e.reason;default:switch(typeof e.status==`string`?e.then(w,w):(e.status=`pending`,e.then(function(t){e.status===`pending`&&(e.status=`fulfilled`,e.value=t)},function(t){e.status===`pending`&&(e.status=`rejected`,e.reason=t)})),e.status){case`fulfilled`:return e.value;case`rejected`:throw e.reason}}throw e}function P(e,r,i,a,o){var s=typeof e;(s===`undefined`||s===`boolean`)&&(e=null);var c=!1;if(e===null)c=!0;else switch(s){case`bigint`:case`string`:case`number`:c=!0;break;case`object`:switch(e.$$typeof){case t:case n:c=!0;break;case d:return c=e._init,P(c(e._payload),r,i,a,o)}}if(c)return o=o(e),c=a===``?`.`+M(e,0):a,C(o)?(i=``,c!=null&&(i=c.replace(j,`$&/`)+`/`),P(o,r,i,``,function(e){return e})):o!=null&&(k(o)&&(o=O(o,i+(o.key==null||e&&e.key===o.key?``:(``+o.key).replace(j,`$&/`)+`/`)+c)),r.push(o)),1;c=0;var l=a===``?`.`:a+`:`;if(C(e))for(var u=0;u<e.length;u++)a=e[u],s=l+M(a,u),c+=P(a,r,i,s,o);else if(u=h(e),typeof u==`function`)for(e=u.call(e),u=0;!(a=e.next()).done;)a=a.value,s=l+M(a,u++),c+=P(a,r,i,s,o);else if(s===`object`){if(typeof e.then==`function`)return P(N(e),r,i,a,o);throw r=String(e),Error(`Objects are not valid as a React child (found: `+(r===`[object Object]`?`object with keys {`+Object.keys(e).join(`, `)+`}`:r)+`). If you meant to render a collection of children, use an array instead.`)}return c}function F(e,t,n){if(e==null)return e;var r=[],i=0;return P(e,r,``,``,function(e){return t.call(n,e,i++)}),r}function I(e){if(e._status===-1){var t=e._result,n=t();n.then(function(t){(e._status===0||e._status===-1)&&(e._status=1,e._result=t,n.status===void 0&&(n.status=`fulfilled`,n.value=t))},function(t){(e._status===0||e._status===-1)&&(e._status=2,e._result=t,n.status===void 0&&(n.status=`rejected`,n.reason=t))}),e._status===-1&&(e._status=0,e._result=n)}if(e._status===1)return e._result.default;throw e._result}var L=typeof reportError==`function`?reportError:function(e){if(typeof window==`object`&&typeof window.ErrorEvent==`function`){var t=new window.ErrorEvent(`error`,{bubbles:!0,cancelable:!0,message:typeof e==`object`&&e&&typeof e.message==`string`?String(e.message):String(e),error:e});if(!window.dispatchEvent(t))return}else if(typeof process==`object`&&typeof process.emit==`function`){process.emit(`uncaughtException`,e);return}console.error(e)};function R(e){var t=T.T,n={};n.types=t===null?null:t.types,T.T=n;try{var r=e(),i=T.S;i!==null&&i(n,r),typeof r==`object`&&r&&typeof r.then==`function`&&r.then(w,L)}catch(e){L(e)}finally{t!==null&&n.types!==null&&(t.types=n.types),T.T=t}}function z(e){var t=T.T;if(t!==null){var n=t.types;n===null?t.types=[e]:n.indexOf(e)===-1&&n.push(e)}else R(z.bind(null,e))}var B={map:F,forEach:function(e,t,n){F(e,function(){t.apply(this,arguments)},n)},count:function(e){var t=0;return F(e,function(){t++}),t},toArray:function(e){return F(e,function(e){return e})||[]},only:function(e){if(!k(e))throw Error(`React.Children.only expected to receive a single React element child.`);return e}};e.Activity=f,e.Children=B,e.Component=y,e.Fragment=r,e.Profiler=a,e.PureComponent=x,e.StrictMode=i,e.Suspense=l,e.ViewTransition=p,e.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE=T,e.__COMPILER_RUNTIME={__proto__:null,c:function(e){return T.H.useMemoCache(e)}},e.addTransitionType=z,e.cache=function(e){return function(){return e.apply(null,arguments)}},e.cacheSignal=function(){return null},e.cloneElement=function(e,t,n){if(e==null)throw Error(`The argument must be a React element, but you passed `+e+`.`);var r=_({},e.props),i=e.key;if(t!=null)for(a in t.key!==void 0&&(i=``+t.key),t)!E.call(t,a)||a===`key`||a===`__self`||a===`__source`||a===`ref`&&t.ref===void 0||(r[a]=t[a]);var a=arguments.length-2;if(a===1)r.children=n;else if(1<a){for(var o=Array(a),s=0;s<a;s++)o[s]=arguments[s+2];r.children=o}return D(e.type,i,r)},e.createContext=function(e){return e={$$typeof:s,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null},e.Provider=e,e.Consumer={$$typeof:o,_context:e},e},e.createElement=function(e,t,n){var r,i={},a=null;if(t!=null)for(r in t.key!==void 0&&(a=``+t.key),t)E.call(t,r)&&r!==`key`&&r!==`__self`&&r!==`__source`&&(i[r]=t[r]);var o=arguments.length-2;if(o===1)i.children=n;else if(1<o){for(var s=Array(o),c=0;c<o;c++)s[c]=arguments[c+2];i.children=s}if(e&&e.defaultProps)for(r in o=e.defaultProps,o)i[r]===void 0&&(i[r]=o[r]);return D(e,a,i)},e.createRef=function(){return{current:null}},e.forwardRef=function(e){return{$$typeof:c,render:e}},e.isValidElement=k,e.lazy=function(e){return{$$typeof:d,_payload:{_status:-1,_result:e},_init:I}},e.memo=function(e,t){return{$$typeof:u,type:e,compare:t===void 0?null:t}},e.startTransition=R,e.unstable_useCacheRefresh=function(){return T.H.useCacheRefresh()},e.use=function(e){return T.H.use(e)},e.useActionState=function(e,t,n){return T.H.useActionState(e,t,n)},e.useCallback=function(e,t){return T.H.useCallback(e,t)},e.useContext=function(e){return T.H.useContext(e)},e.useDebugValue=function(){},e.useDeferredValue=function(e,t){return T.H.useDeferredValue(e,t)},e.useEffect=function(e,t){return T.H.useEffect(e,t)},e.useEffectEvent=function(e){return T.H.useEffectEvent(e)},e.useId=function(){return T.H.useId()},e.useImperativeHandle=function(e,t,n){return T.H.useImperativeHandle(e,t,n)},e.useInsertionEffect=function(e,t){return T.H.useInsertionEffect(e,t)},e.useLayoutEffect=function(e,t){return T.H.useLayoutEffect(e,t)},e.useMemo=function(e,t){return T.H.useMemo(e,t)},e.useOptimistic=function(e,t){return T.H.useOptimistic(e,t)},e.useReducer=function(e,t,n){return T.H.useReducer(e,t,n)},e.useRef=function(e){return T.H.useRef(e)},e.useState=function(e){return T.H.useState(e)},e.useSyncExternalStore=function(e,t,n){return T.H.useSyncExternalStore(e,t,n)},e.useTransition=function(){return T.H.useTransition()},e.version=`19.3.0`})),r=t(((e,t)=>{t.exports=n()})),i=e(r(),1),a=e=>e?.replace(/([a-z0-9])([A-Z])/g,`$1-$2`).toLowerCase();function o(e,t,n=[]){if(t==null)throw Error(`[lucide]: iconNode is required when icon name is used`);return{name:a(e),size:24,node:t,...n.length>0?{aliases:n}:{}}}var s=e=>{let t=``,n=!1;for(let r of e){if(r===`-`||r===`_`||r<=` `){n=t.length>0;continue}t.length===0?t+=r.toLowerCase():t+=n?r.toUpperCase():r,n=!1}return t},c=e=>{let t=s(e);return t.charAt(0).toUpperCase()+t.slice(1)},l=(...e)=>e.filter((e,t,n)=>!!e&&e.trim()!==``&&n.indexOf(e)===t).join(` `).trim(),u={xmlns:`http://www.w3.org/2000/svg`,width:24,height:24,viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,"stroke-width":2,"stroke-linecap":`round`,"stroke-linejoin":`round`};function d(e){return e!=null}function f(e,t={}){let n=t.attributeNames??{},r=e=>n[e]??e,i=e.size??e.width??u.width,a=e.size??e.height??u.height,o=e.aliases?.filter(e=>typeof e==`string`&&e.trim()!==``).map(e=>`lucide-${e}`)??[],s=[...e.name?[`lucide-${e.name}`]:[],...o],c=t.className?.split(` `).filter(Boolean)??[],f=t.includeDefaultClasses===!1?l(...c):l(`lucide`,...s,...c),p=t.absoluteStrokeWidth?Number(t.strokeWidth??u[`stroke-width`])*Number(e.size??e.width??u.width)/Number(t.size??t.width??u.width):t.strokeWidth??u[`stroke-width`];return[`svg`,{...Object.entries(u).reduce((e,[t,n])=>(e[r(t)]=n,e),{}),...`color`in t&&t.color&&{[r(`stroke`)]:t.color},...`size`in t&&d(t.size)&&{[r(`width`)]:t.size,[r(`height`)]:t.size},...`width`in t&&d(t.width)&&{[r(`width`)]:t.width},...`height`in t&&d(t.height)&&{[r(`height`)]:t.height},[r(`stroke-width`)]:p,...f&&{[r(`class`)]:f},[r(`viewBox`)]:`0 0 ${i} ${a}`,...t.hasA11yProp===!1?{[r(`aria-hidden`)]:`true`}:{},...`attributes`in t&&t.attributes},e.node.map(e=>{let[n,i,a]=e,o=t.nonScalingStroke?{[r(`vector-effect`)]:`non-scaling-stroke`,...i}:i;return a?[n,o,a]:[n,o]})]}function p(e,t={}){return f(e,{...t,attributeNames:{...t.attributeNames,class:`className`,"stroke-width":`strokeWidth`,"stroke-linecap":`strokeLinecap`,"stroke-linejoin":`strokeLinejoin`,"vector-effect":`vectorEffect`}})}var m=e=>{for(let t in e)if(t.startsWith(`aria-`)||t===`role`||t===`title`)return!0;return!1},h=(0,i.createContext)({}),g=()=>(0,i.useContext)(h),_=(0,i.forwardRef)(({color:e,size:t,width:n,height:r,strokeWidth:a,absoluteStrokeWidth:o,nonScalingStroke:s,className:c=``,children:u,iconNode:d=[],icon:f={node:d,aliases:[],size:24},...h},_)=>{let{size:v=24,strokeWidth:y=2,absoluteStrokeWidth:b=!1,nonScalingStroke:x=!1,color:S=`currentColor`,className:C=``}=g()??{},w=!!u||m(h),[T,E,D=[]]=p(f,{color:e??S,width:n??t??v,height:r??t??v,strokeWidth:a??y,absoluteStrokeWidth:o??b,nonScalingStroke:s??x,className:l(C,c),hasA11yProp:w,attributes:h});return(0,i.createElement)(T,{ref:_,...E},[...D.map(([e,t])=>(0,i.createElement)(e,t)),...Array.isArray(u)?u:[u]])});function v(e,t=[],n=[]){let r=typeof e==`string`?o(e,t,n):e,a=(0,i.forwardRef)(({className:e,...t},n)=>(0,i.createElement)(_,{ref:n,icon:r,className:e,...t}));return r.name&&(a.displayName=c(r.name)),a}var y={api:`#4fc3f7`,store:`#ce93d8`,chat:`#81c784`,stream:`#ffb74d`,ui:`#90a4ae`,doc:`#a1887f`,system:`#e57373`,nav:`#fff176`},b={api:`fetch`,store:`state`,chat:`chat`,stream:`stream`,ui:`ui`,doc:`docs`,system:`sys`,nav:`nav`},x=(()=>{try{if(localStorage.getItem(`gaia-debug`)===`true`)return!0;if(typeof location<`u`){let e=new URLSearchParams(location.search);if(e.has(`debug`)||e.has(`verbose`))return!0}}catch{}return!1})();function S(){let e=new Date;return e.toLocaleTimeString(`en-US`,{hour12:!1})+`.`+String(e.getMilliseconds()).padStart(3,`0`)}function C(e){let t=y[e]||`#ccc`,n=`%c[${b[e]||e}]`,r=`color: ${t}; font-weight: bold;`,i=`color: #888; font-weight: normal;`;return{info:(e,...t)=>{if(!x)return;let a=S();t.length>0?console.log(`${n} %c${a} %c${e}`,r,i,`color: inherit;`,...t):console.log(`${n} %c${a} %c${e}`,r,i,`color: inherit;`)},warn:(e,...t)=>{let a=S();console.warn(`${n} %c${a} %c${e}`,r,i,`color: inherit;`,...t)},error:(e,...t)=>{let a=S();console.error(`${n} %c${a} %c${e}`,r,i,`color: inherit;`,...t)},debug:(e,...t)=>{if(!x)return;let a=S();console.debug(`${n} %c${a} %c${e}`,r,i,`color: #999;`,...t)},timed:(e,t,...a)=>{if(!x)return;let o=Math.round(performance.now()-t),s=S(),c=o>2e3?`color: #e57373;`:o>500?`color: #ffb74d;`:`color: #81c784;`;a.length>0?console.log(`${n} %c${s} %c${e} %c(${o}ms)`,r,i,`color: inherit;`,c,...a):console.log(`${n} %c${s} %c${e} %c(${o}ms)`,r,i,`color: inherit;`,c)},time:()=>performance.now()}}var w={api:C(`api`),store:C(`store`),chat:C(`chat`),stream:C(`stream`),ui:C(`ui`),doc:C(`doc`),system:C(`system`),nav:C(`nav`)};function T(e){console.log(`%c GAIA %c v`+e+` %c Local AI Desktop`,`background: #9A4930; color: white; font-weight: bold; padding: 4px 8px; border-radius: 4px 0 0 4px;`,`background: #333; color: #fff; padding: 4px 8px;`,`background: #1a1a1a; color: #888; padding: 4px 8px; border-radius: 0 4px 4px 0;`),console.log(x?`%cVerbose logging enabled. Categories: [fetch] [state] [chat] [stream] [ui] [docs] [sys] [nav]`:`%cVerbose logging: add ?debug to URL or run localStorage.setItem("gaia-debug","true")`,`color: #666; font-style: italic;`)}var E=/^https?:\/\/(127\.0\.0\.1|localhost):\d+\/api$/,D=`http://localhost:4200/api`;function O(){if(typeof window>`u`)return`/api`;if(window.location.protocol===`file:`){let e=new URLSearchParams(window.location.search).get(`api`);return e&&E.test(e)?e:D}return`/api`}var k=t((e=>{var t=Symbol.for(`react.transitional.element`),n=Symbol.for(`react.fragment`);function r(e,n,r){var i=null;if(r!==void 0&&(i=``+r),n.key!==void 0&&(i=``+n.key),`key`in n)for(var a in r={},n)a!==`key`&&(r[a]=n[a]);else r=n;return n=r.ref,{$$typeof:t,type:e,key:i,ref:n===void 0?null:n,props:r}}e.Fragment=n,e.jsx=r,e.jsxs=r})),A=t(((e,t)=>{t.exports=k()}));export{v as a,T as i,O as n,r as o,w as r,A as t};

package/dist/assets/message-square-Ccmbk96j.js

@@ -0,0 +1 @@
+import{a as e}from"./jsx-runtime-DVeaULmT.js";var t={name:`message-square`,size:24,node:[[`path`,{d:`M22 17a2 2 0 0 1-2 2H6.828a2 2 0 0 0-1.414.586l-2.202 2.202A.71.71 0 0 1 2 21.286V5a2 2 0 0 1 2-2h16a2 2 0 0 1 2 2z`,key:`18887p`}]]};t.node;var n=e(t);export{n as t};

package/dist/assets/rolldown-runtime-hePW80VL.js

@@ -0,0 +1 @@
+var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,t)=>()=>(t||(e((t={exports:{}}).exports,t),e=null),t.exports),s=(e,n)=>{let r={};for(var i in e)t(r,i,{get:e[i],enumerable:!0});return n||t(r,Symbol.toStringTag,{value:`Module`}),r},c=(e,i,o,s)=>{if(i&&typeof i==`object`||typeof i==`function`)for(var c=r(i),l=0,u=c.length,d;l<u;l++)d=c[l],!a.call(e,d)&&d!==o&&t(e,d,{get:(e=>i[e]).bind(null,d),enumerable:!(s=n(i,d))||s.enumerable});return e},l=(n,r,o)=>(o=n==null?{}:e(i(n)),c(r||!n||!n.__esModule||!a.call(n,`default`)?t(o,`default`,{value:n,enumerable:!0}):o,n));export{s as n,l as r,o as t};

package/dist/index.html

@@ -3,10 +3,15 @@
 <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <!-- Graphite canvas; rewritten per theme by applyTheme(). Dark is the
+         designed default, so an unset preference stays dark. -->
+    <meta name="theme-color" content="#17161C" />
     <link rel="icon" type="image/png" href="./favicon.png" />
     <title>GAIA Agent UI</title>
-  <script type="module" crossorigin src="./assets/index-0fRr8P_5.js"></script>
-  <link rel="stylesheet" crossorigin href="./assets/index-D1S2dWYe.css">
+  <script type="module" crossorigin src="./assets/index-D00FJoXi.js"></script>
+  <link rel="modulepreload" crossorigin href="./assets/rolldown-runtime-hePW80VL.js">
+  <link rel="modulepreload" crossorigin href="./assets/jsx-runtime-DVeaULmT.js">
+  <link rel="stylesheet" crossorigin href="./assets/index-B8E7IBmc.css">
 </head>
 <body>
     <div id="root"></div>

package/main.cjs

@@ -70,6 +70,12 @@ const {
   dispatchDeepLink,
   buildInstallPrompt,
 } = require("./services/deep-link.cjs");
+const {
+  isAllowedExternalUrl,
+  isInAppNavigation,
+  describeBlockedUrl,
+} = require("./services/link-policy.cjs");
+const { createStartupDeepLinkQueue } = require("./services/deep-link-queue.cjs");
 
 // ── F7: Ozone hint (issue #782) ─────────────────────────────────────────────
 // Electron-recommended switch for distro-agnostic Linux behaviour: picks
@@ -306,10 +312,12 @@ async function startBackend() {
   try {
     backendPort = await portManager.findFreePort();
   } catch (err) {
-    console.warn(
-      `[main] findFreePort failed (${err.message}); falling back to ${DEFAULT_BACKEND_PORT}`
+    throw new Error(
+      `Could not reserve a local port for the GAIA backend: ${err.message}. ` +
+        "Check that security software isn't blocking 127.0.0.1, then relaunch GAIA. " +
+        `Logs: ${_MAIN_LOG_PATH}`,
+      { cause: err }
     );
-    backendPort = DEFAULT_BACKEND_PORT;
   }
   healthCheckUrl = `http://localhost:${backendPort}/api/health`;
   // Defensively clean up any orphaned backend in case bootstrap was skipped
@@ -492,6 +500,27 @@ function findDistPath() {
   return null;
 }
 
+/** Refuse a link loudly — the user clicked it, so they get told why nothing happened. */
+function reportBlockedLink(url) {
+  const message = describeBlockedUrl(url);
+  console.error(`[main] ${message}`);
+  // Non-blocking and parented: showErrorBox would freeze the main process.
+  dialog
+    .showMessageBox(mainWindow && !mainWindow.isDestroyed() ? mainWindow : null, {
+      type: "warning",
+      title: "Link blocked",
+      message: "Link blocked",
+      detail: message,
+      buttons: ["OK"],
+      noLink: true,
+    })
+    .catch((err) =>
+      console.error(
+        `[main] Could not show the link-blocked dialog: ${err && err.message ? err.message : err}`
+      )
+    );
+}
+
 function createWindow() {
   mainWindow = new BrowserWindow({
     width: windowConfig.width,
@@ -511,12 +540,31 @@ function createWindow() {
   // Remove default menu bar
   mainWindow.setMenuBarVisibility(false);
 
-  // Open external links in the default browser
+  // Open external links in the default browser. The URL here is already
+  // RESOLVED against the file:// document, so a scheme-less markdown link
+  // arrives as file:///C:/… — check the scheme before handing it to the OS.
   mainWindow.webContents.setWindowOpenHandler(({ url }) => {
-    shell.openExternal(url);
+    if (isAllowedExternalUrl(url)) {
+      shell.openExternal(url);
+    } else {
+      reportBlockedLink(url);
+    }
     return { action: "deny" };
   });
 
+  // Nothing may navigate the app window away from its own document. In-page
+  // anchors pass; web links open in the browser; everything else is refused.
+  mainWindow.webContents.on("will-navigate", (event, url) => {
+    const currentUrl = mainWindow.webContents.getURL();
+    if (isInAppNavigation(url, currentUrl)) return;
+    event.preventDefault();
+    if (isAllowedExternalUrl(url)) {
+      shell.openExternal(url);
+      return;
+    }
+    reportBlockedLink(url);
+  });
+
   // ── Minimize-to-tray on close (C4 fix) ──────────────────────────────
   // Intercept window close — hide instead of closing when tray mode is active
   mainWindow.on("close", (event) => {
@@ -570,19 +618,44 @@ async function loadApp() {
     fileUrl.search = new URLSearchParams(indexQuery).toString();
     await mainWindow.loadURL(fileUrl.href);
   } else {
-    // Show a simple loading/error page
-    mainWindow.loadURL(
-      `data:text/html,
-      <html>
-        <head><title>${APP_NAME}</title></head>
-        <body style="font-family: -apple-system, BlinkMacSystemFont, sans-serif; display:flex; align-items:center; justify-content:center; height:100vh; margin:0; background:#1a1a2e; color:#eee;">
+    // Show a simple loading/error page. Percent-encoded: an unescaped `#`
+    // in a data: URL starts the fragment and truncates the document there.
+    const waitingHtml = `<!DOCTYPE html>
+      <html lang="en">
+        <head>
+          <title>${APP_NAME}</title>
+          <style>
+            /* Standalone page: it loads from a data: URL and never sees
+             * src/styles/index.css, so the dark theme's role values are
+             * mirrored here. Keep them in step with that file. */
+            :root {
+              --bg-primary: #17161C;
+              --text-primary: #F0EDE7;
+              --text-secondary: #AAA5B0;
+            }
+            body {
+              font-family: -apple-system, BlinkMacSystemFont, sans-serif;
+              display: flex;
+              align-items: center;
+              justify-content: center;
+              height: 100vh;
+              margin: 0;
+              background: var(--bg-primary);
+              color: var(--text-primary);
+            }
+            .hint { color: var(--text-secondary); font-size: 12px; }
+          </style>
+        </head>
+        <body>
           <div style="text-align:center;">
             <h1>${APP_NAME}</h1>
             <p>Waiting for backend to start...</p>
-            <p style="color:#888; font-size:12px;">Backend: http://localhost:${backendPort}</p>
+            <p class="hint">Backend: http://localhost:${backendPort}</p>
           </div>
         </body>
-      </html>`
+      </html>`;
+    mainWindow.loadURL(
+      "data:text/html;charset=utf-8," + encodeURIComponent(waitingHtml)
     );
   }
 }
@@ -751,8 +824,15 @@ async function bootstrapBackend() {
 // A malformed/unsupported link surfaces a loud error dialog — never a silent
 // no-op (deep-link.cjs throws with an actionable message).
 
-/** Holds a deep link that arrived before services were ready. */
-let pendingDeepLinkUrl = null;
+// Holds gaia:// links until startup has waited for the backend (the install
+// gate verifies the agent through its catalog API), then dispatches each once.
+const startupDeepLinks = createStartupDeepLinkQueue({
+  dispatch: (rawUrl) => {
+    void runDeepLink(parseDeepLink(rawUrl));
+  },
+  reportNotReady: reportDeepLinksNotReady,
+  logger: console,
+});
 
 /**
  * Register this app as the handler for the gaia:// scheme. In dev (`electron .`)
@@ -785,13 +865,13 @@ function registerProtocolHandler() {
 }
 
 /**
- * Entry point for any inbound deep link. Queues the URL if services aren't up
- * yet, otherwise dispatches immediately. Parse failures are surfaced loudly.
+ * Entry point for any inbound deep link. Validates it now (a bad link is
+ * refused loudly and immediately), then hands it to the startup queue, which
+ * holds it until the backend is ready and dispatches it immediately after.
  */
 function handleDeepLink(rawUrl) {
-  let command;
   try {
-    command = parseDeepLink(rawUrl);
+    parseDeepLink(rawUrl);
   } catch (err) {
     const message = err && err.message ? err.message : String(err);
     console.error(`[main] Rejected deep link: ${message}`);
@@ -803,14 +883,7 @@ function handleDeepLink(rawUrl) {
     return;
   }
 
-  // If services aren't wired yet (cold start still bootstrapping), stash it.
-  if (!agentProcessManager) {
-    console.log("[main] Deep link received before services ready — queuing");
-    pendingDeepLinkUrl = rawUrl;
-    return;
-  }
-
-  void runDeepLink(command);
+  startupDeepLinks.accept(rawUrl);
 }
 
 /**
@@ -889,16 +962,32 @@ async function runDeepLink(command) {
   }
 }
 
-/** Drain a queued deep link, plus any gaia:// URL present in the cold-start argv. */
-function processStartupDeepLinks() {
-  if (pendingDeepLinkUrl) {
-    const url = pendingDeepLinkUrl;
-    pendingDeepLinkUrl = null;
-    handleDeepLink(url);
-    return;
+/**
+ * Release queued deep links, plus any gaia:// URL in the cold-start argv. Call
+ * once, after startup has waited for the backend.
+ *
+ * @param {boolean} backendReady Whether the backend API answered its health check.
+ */
+function processStartupDeepLinks(backendReady) {
+  startupDeepLinks.drain({ backendReady, argvUrl: extractDeepLinkFromArgv(process.argv) });
+}
+
+/** The backend never came up: tell the user instead of dispatching blind. */
+function reportDeepLinksNotReady(urls) {
+  const why = backendProcess
+    ? `did not answer within ${Math.round(STARTUP_TIMEOUT / 1000)}s`
+    : "could not be started";
+  const message =
+    `GAIA could not open ${urls.map((u) => `"${u}"`).join(", ")} because ` +
+    `its backend ${why}, so the agent cannot be verified before install. ` +
+    `Check ${_MAIN_LOG_PATH} for the startup error, then click the link ` +
+    "again once GAIA is running.";
+  console.error(`[main] ${message}`);
+  try {
+    dialog.showErrorBox("GAIA is not ready yet", message);
+  } catch {
+    /* best-effort */
   }
-  const fromArgv = extractDeepLinkFromArgv(process.argv);
-  if (fromArgv) handleDeepLink(fromArgv);
 }
 
 // macOS delivers deep links via this event; it can fire before whenReady, so
@@ -1029,10 +1118,6 @@ app.whenReady().then(async () => {
   // Setup Windows Jump List (T11)
   setupJumpList();
 
-  // Act on any gaia:// deep link that arrived during bootstrap or via the
-  // cold-start command line (issue #1725). Services are now wired.
-  processStartupDeepLinks();
-
   // Show loading state
   await loadApp();
 
@@ -1041,16 +1126,22 @@ app.whenReady().then(async () => {
   // API becomes available and dismisses its "Cannot connect" banner.
   // We do NOT reload the window with http://localhost:4200/ because
   // the pip-installed backend has no frontend files — only the API.
+  let backendReady = false;
   if (backendProcess) {
     console.log("Waiting for backend to start...");
-    const ready = await waitForBackend(STARTUP_TIMEOUT);
-    if (ready) {
+    backendReady = await waitForBackend(STARTUP_TIMEOUT);
+    if (backendReady) {
       console.log("Backend API is ready on port", backendPort);
     } else {
       console.warn("Backend did not respond within timeout.");
     }
   }
 
+  // Act on any gaia:// deep link that arrived during bootstrap or via the
+  // cold-start command line (issue #1725) — after the backend is listening,
+  // because the install gate queries its catalog API.
+  processStartupDeepLinks(backendReady);
+
   // Auto-start enabled agents (T2)
   if (agentProcessManager) {
     try {

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@amd-gaia/agent-ui",
-  "version": "0.24.1",
+  "version": "0.25.0-rc.8",
   "type": "module",
   "productName": "GAIA Agent UI",
-  "description": "Privacy-first agentic AI interface with document Q&A - runs 100% locally on AMD Ryzen AI",
+  "description": "Chat with the GAIA agent - local and private by default on AMD Ryzen AI, cloud models when you choose them",
   "author": "AMD AI Group",
   "license": "MIT",
   "repository": {
@@ -58,7 +58,8 @@
     "package:linux": "npm run build && electron-builder --linux --config electron-builder.yml",
     "prepublishOnly": "npm run build",
     "test": "vitest run",
-    "test:watch": "vitest"
+    "test:watch": "vitest",
+    "gen:api-types": "node scripts/gen-api-types.mjs"
   },
   "dependencies": {
     "electron-updater": "^6.8.3"
@@ -70,20 +71,19 @@
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^6.0.2",
-    "electron": "^44.0.0",
+    "electron": "^44.5.1",
     "electron-builder": "^26.8.1",
     "jsdom": "^30.0.1",
-    "lucide-react": "^1.17.0",
-    "msw": "^2.7.0",
+    "json-schema-to-typescript": "16.0.0",
+    "lucide-react": "^1.50.0",
     "qrcode": "^1.5.4",
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
     "react-markdown": "^10.1.0",
-    "rehype-sanitize": "^6.0.0",
     "remark-gfm": "^4.0.1",
     "typescript": "^7.0.2",
-    "vite": "^8.0.16",
-    "vitest": "^5.0.0",
+    "vite": "^8.3.2",
+    "vitest": "^5.0.3",
     "zustand": "^5.0.14"
   }
 }

package/services/backend-installer-progress-dialog.cjs

@@ -86,12 +86,24 @@ function buildProgressHtml({ logPath }) {
 <meta charset="UTF-8" />
 <title>Installing GAIA</title>
 <style>
+  /* Standalone window: it loads from a data: URL and never sees
+   * src/styles/index.css, so the dark theme's role values are mirrored
+   * here. Keep them in step with that file; nothing below names a hex. */
+  :root {
+    --bg-primary: #17161C;
+    --bg-tertiary: #2A2831;
+    --border: #3A3842;
+    --text-primary: #F0EDE7;
+    --text-secondary: #AAA5B0;
+    --text-muted: #8C8794;
+    --accent-fill: #9A4930;
+  }
   html, body {
     margin: 0;
     padding: 0;
     font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
-    background: #1a1a2e;
-    color: #eee;
+    background: var(--bg-primary);
+    color: var(--text-primary);
     user-select: none;
     -webkit-user-select: none;
     overflow: hidden;
@@ -110,35 +122,38 @@ function buildProgressHtml({ logPath }) {
     font-size: 18px;
     font-weight: 600;
     margin: 0 0 8px 0;
-    color: #fff;
+    color: var(--text-primary);
   }
   .subtitle {
     font-size: 13px;
-    color: #9aa0c8;
+    color: var(--text-secondary);
     margin: 0 0 24px 0;
   }
   .stage {
     font-size: 12px;
-    color: #7a7f9f;
+    color: var(--text-secondary);
     text-transform: uppercase;
     letter-spacing: 0.5px;
     margin-bottom: 6px;
     min-height: 15px;
   }
+  /* The rule carries the track's edge: no fill clears the 1.5:1 chrome
+   * floor against the canvas, but --border does at 1.56:1. */
   .bar {
     width: 360px;
     max-width: 100%;
     height: 10px;
-    background: #2a2a47;
-    border-radius: 5px;
+    box-sizing: border-box;
+    background: var(--bg-tertiary);
+    border: 1px solid var(--border);
+    border-radius: 9999px;
     overflow: hidden;
     margin-bottom: 12px;
-    box-shadow: inset 0 1px 2px rgba(0,0,0,0.3);
   }
   .fill {
     height: 100%;
-    background: linear-gradient(90deg, #4a7dff 0%, #6b9aff 100%);
-    border-radius: 5px;
+    background: var(--accent-fill);
+    border-radius: 9999px;
     transition: width 300ms ease-out;
     width: 0%;
   }
@@ -151,15 +166,19 @@ function buildProgressHtml({ logPath }) {
     50%  { margin-left: 70%;  }
     100% { margin-left: 0%;   }
   }
+  @media (prefers-reduced-motion: reduce) {
+    .fill { transition: none; }
+    .fill.indeterminate { animation: none; margin-left: 35%; }
+  }
   .percent {
     font-size: 12px;
-    color: #9aa0c8;
+    color: var(--text-secondary);
     margin-bottom: 16px;
     min-height: 14px;
   }
   .message {
     font-size: 13px;
-    color: #c6cae4;
+    color: var(--text-primary);
     max-width: 420px;
     min-height: 36px;
     line-height: 1.4;
@@ -171,12 +190,12 @@ function buildProgressHtml({ logPath }) {
     right: 0;
     text-align: center;
     font-size: 10px;
-    color: #5a5f7a;
+    color: var(--text-muted);
   }
   code {
     font-family: "SF Mono", Monaco, Consolas, monospace;
     font-size: 10px;
-    color: #7a7f9f;
+    color: var(--text-muted);
   }
 </style>
 </head>
@@ -249,7 +268,7 @@ function createProgressWindow() {
     frame: false,
     transparent: false,
     show: false,
-    backgroundColor: "#1a1a2e",
+    backgroundColor: "#17161C", // --bg-primary, dark theme (see the :root block above)
     title: "Installing GAIA",
     webPreferences: {
       nodeIntegration: false,

package/services/backend-installer.cjs

@@ -493,7 +493,7 @@ function isFileLockedError(output) {
 /**
  * Detect a transient network failure in `uv pip install` output so the
  * install stage can retry instead of failing the whole bootstrap. The
- * install stage downloads heavy transitive deps (scipy, numpy, torch) from
+ * install stage downloads transitive deps (numpy, faiss, pymupdf, …) from
  * PyPI; a single mid-stream hiccup ("stream closed because of a broken pipe")
  * otherwise fails the entire backend install — and, in the release pipeline,
  * the whole AppImage smoke test that gates publishing.
@@ -1366,6 +1366,15 @@ function resolveBackendVersion(opts = {}) {
   }
 }
 
+/**
+ * The PEP 440 spelling of the app's npm version: `0.25.0-rc.1` -> `0.25.0rc1`.
+ * pip pins and `gaia --version` use this form; a final version is unchanged.
+ */
+function toPep440(version) {
+  if (!version) return version;
+  return version.replace(/^(\d+\.\d+\.\d+)-rc\.(\d+)$/, "$1rc$2");
+}
+
 /**
  * Install the GAIA Python backend from scratch.
  *
@@ -1389,7 +1398,7 @@ async function installBackend(opts = {}) {
   const localWheel = process.env.GAIA_LOCAL_WHEEL || null;
   const pipPackage = localWheel
     ? `${localWheel}[ui]`
-    : `amd-gaia[ui]==${version}`;
+    : `amd-gaia[ui]==${toPep440(version)}`;
   const skipGaiaInit =
     Boolean(opts.skipGaiaInit) || isTruthyEnv(process.env.GAIA_SKIP_GAIA_INIT);
 
@@ -1424,18 +1433,42 @@ async function installBackend(opts = {}) {
       }
     }
 
-    const venvResult = await runCommand(
-      "uv",
-      ["venv", GAIA_VENV, "--python", "3.12"],
-      { stageLabel: "venv" }
-    );
+    const venvArgs = ["venv", GAIA_VENV, "--python", "3.12"];
+    let venvResult = await runCommand("uv", venvArgs, { stageLabel: "venv" });
+    // uv downloads Python 3.12 when none is installed; behind a corporate
+    // proxy that fails on uv's bundled roots exactly like the pip step below.
+    let venvNativeTls = false;
+    if (
+      venvResult.code !== 0 &&
+      isTlsCertError(`${venvResult.stdout || ""}\n${venvResult.stderr || ""}`)
+    ) {
+      venvNativeTls = true;
+      log(
+        "TLS trust failure downloading Python — retrying with --native-tls " +
+          "to use the OS certificate store"
+      );
+      report(
+        STAGES.CREATE_VENV,
+        0,
+        "Certificate trust issue — retrying with the system certificate store"
+      );
+      if (fs.existsSync(GAIA_VENV)) {
+        fs.rmSync(GAIA_VENV, { recursive: true, force: true });
+      }
+      venvResult = await runCommand("uv", [...venvArgs, "--native-tls"], {
+        stageLabel: "venv",
+      });
+    }
     if (venvResult.code !== 0) {
+      const manual = `uv venv ${GAIA_VENV_DISPLAY} --python 3.12${
+        venvNativeTls ? " --native-tls" : ""
+      }`;
       throw new InstallError(
         `Failed to create Python environment (uv venv exit ${venvResult.code}).`,
         {
           stage: STAGES.CREATE_VENV,
           code: venvResult.code,
-          suggestion: `Try creating it manually:\n  uv venv ${GAIA_VENV_DISPLAY} --python 3.12\nThen restart GAIA.`,
+          suggestion: `Try creating it manually:\n  ${manual}\nThen restart GAIA.`,
         }
       );
     }
@@ -1453,17 +1486,13 @@ async function installBackend(opts = {}) {
     "install",
     pipPackage,
     "--refresh",
+    // uv skips this by default, leaving the first daemon start to compile GAIA.
+    "--compile-bytecode",
     "--python",
     GAIA_PYTHON_BIN,
   ];
-  // Linux/macOS: use CPU-only PyTorch to avoid huge CUDA wheels.
-  // Skip when installing from a local wheel — PyPI index not needed.
-  if (!IS_WINDOWS && !localWheel) {
-    pipArgs.push("--extra-index-url", "https://download.pytorch.org/whl/cpu");
-  }
-
-  // Retry the install on transient PyPI/network failures. The heavy
-  // transitive deps (scipy, numpy, torch) are fetched live from PyPI even
+  // Retry the install on transient PyPI/network failures. The transitive
+  // deps (numpy, faiss, pymupdf, …) are fetched live from PyPI even
   // when the gaia wheel itself is local, so a single broken-pipe mid-download
   // would otherwise fail the whole bootstrap (and block a release). File-lock
   // failures (Windows os-error-32) are NOT retried — they need user action.
@@ -1540,8 +1569,18 @@ async function installBackend(opts = {}) {
         IS_WINDOWS ? `${GAIA_VENV_DISPLAY}/Scripts/python.exe` : `${GAIA_VENV_DISPLAY}/bin/python`
       }\nThen restart GAIA. See https://amd-gaia.ai/docs/quickstart#cli-install`;
     }
+    // Carry pip's own last words. Without them the only record of a failed
+    // install is an exit code, which is not something a user or a CI log can
+    // act on.
+    const tail = output
+      .split("\n")
+      .map((line) => line.trimEnd())
+      .filter(Boolean)
+      .slice(-20)
+      .join("\n");
     throw new InstallError(
-      `Failed to install ${pipPackage} (pip exit ${installResult.code}).`,
+      `Failed to install ${pipPackage} (pip exit ${installResult.code}).` +
+        (tail ? `\npip said:\n${tail}` : ""),
       {
         stage: STAGES.INSTALL_PACKAGE,
         code: installResult.code,
@@ -1664,7 +1703,9 @@ function getInstalledVersion(gaiaBin) {
       windowsHide: true,
     });
     if (result.status === 0 && result.stdout) {
-      const match = result.stdout.toString().trim().match(/(\d+\.\d+\.\d+)/);
+      // Keep an rcN suffix: truncating it would let a release candidate's
+      // backend pass for the final's and never be upgraded.
+      const match = result.stdout.toString().trim().match(/(\d+\.\d+\.\d+(?:rc\d+)?)/);
       return match ? match[1] : null;
     }
   } catch {
@@ -1764,7 +1805,7 @@ async function ensureBackend(opts = {}) {
     const existingBin = findGaiaBin();
     if (existingBin) {
       const installedVersion = getInstalledVersion(existingBin);
-      if (expectedVersion !== null && installedVersion === expectedVersion) {
+      if (expectedVersion !== null && installedVersion === toPep440(expectedVersion)) {
         log(
           `GAIA backend already installed at version ${installedVersion} — nothing to do`
         );
@@ -1831,6 +1872,7 @@ module.exports = {
   ensureBackend,
   getInstalledVersion,
   findGaiaBin,
+  toPep440,
 
   // Pre-checks
   runPreChecks,