@bahulam/code 0.1.10 → 0.1.11

package/src/local-service/agent-relay.mjs

@@ -6,6 +6,7 @@
  */
 
 import * as fs from 'node:fs';
+import * as path from 'node:path';
 import { createRequire } from 'node:module';
 import { BahulamAuth } from '../auth/bahulam-auth.mjs';
 import { AgentHistoryTurnBuilder } from '../core/agent-history.mjs';
@@ -23,6 +24,66 @@ import { BrowserApprovalManager } from './approval-bridge.mjs';
 const __require = createRequire(import.meta.url);
 const VERSION = __require('../../package.json').version;
 
+function envList(name) {
+  return String(process.env[name] || '')
+    .split(',')
+    .map(item => item.trim())
+    .filter(Boolean);
+}
+
+function activePluginNamesFromSession(session = {}) {
+  const names = [];
+  if (session.plugin?.name) names.push(session.plugin.name);
+  if (session.plugin?.metadata_name) names.push(session.plugin.metadata_name);
+  const plugins = Array.isArray(session.plugins)
+    ? session.plugins
+    : (Array.isArray(session.active_plugins) ? session.active_plugins : []);
+  for (const plugin of plugins) {
+    if (typeof plugin === 'string') names.push(plugin);
+    else if (plugin?.name) names.push(plugin.name);
+    else if (plugin?.metadata_name) names.push(plugin.metadata_name);
+  }
+  return [...new Set(names.map(name => String(name).trim()).filter(Boolean))];
+}
+
+function pluginScanDirsFromSession(session = {}) {
+  const dirs = [];
+  const addPluginParent = (plugin) => {
+    const pluginDir = String(plugin?.plugin_dir || plugin?.dir || '').trim();
+    if (pluginDir) dirs.push(path.dirname(pluginDir));
+  };
+  if (session.plugin) addPluginParent(session.plugin);
+  const plugins = Array.isArray(session.plugins)
+    ? session.plugins
+    : (Array.isArray(session.active_plugins) ? session.active_plugins : []);
+  for (const plugin of plugins) {
+    if (plugin && typeof plugin === 'object') addPluginParent(plugin);
+  }
+  return [...new Set(dirs.filter(Boolean))];
+}
+
+/**
+ * ${VAR} expansion for MCP server configs — args, env values, headers.
+ * Matches how the existing ~/.bahulam/config.json mcpServers block is
+ * handled so a plugin author with a working Claude Desktop MCP config
+ * gets the same env-var behavior after drop-in.
+ */
+function _expandEnvInMcpConfig(config) {
+  const sub = (v) => typeof v === 'string'
+    ? v.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_, name) => process.env[name] ?? '')
+    : v;
+  const walk = (v) => {
+    if (Array.isArray(v)) return v.map(walk);
+    if (v && typeof v === 'object') {
+      const out = {};
+      for (const [k, val] of Object.entries(v)) out[k] = walk(val);
+      return out;
+    }
+    return sub(v);
+  };
+  return walk(config);
+}
+
 export class LocalAgentRelay {
   constructor({ session, emit } = {}) {
     if (!session?.id) throw new Error('LocalAgentRelay requires a session');
@@ -69,17 +130,16 @@ export class LocalAgentRelay {
       err.code = 'CONFLICT';
       throw err;
     }
-    if (this.turnCount > 0) {
-      const err = new Error('Start a new local workspace session to switch history after a turn has run');
-      err.code = 'CONFLICT';
-      throw err;
-    }
     this.resumeLoaded = true;
     this.resumeSessionId = null;
+    this.turnCount = 0;
     this.displayHistory = [];
     this.agentHistory = [];
     this.jsonlWriter = null;
-    if (this.client) this.client.sessionId = null;
+    if (this.client) {
+      this.client.sessionId = null;
+      this.client.currentTaskId = null;
+    }
     this.emit('agent_history_new', {
       root_path: this.session.root_path,
     });
@@ -104,11 +164,6 @@ export class LocalAgentRelay {
       err.code = 'CONFLICT';
       throw err;
     }
-    if (this.turnCount > 0 && this.resumeSessionId !== requestedSessionId) {
-      const err = new Error('Start a new local workspace session to switch history after a turn has run');
-      err.code = 'CONFLICT';
-      throw err;
-    }
     if (this.resumeLoaded && this.resumeSessionId === requestedSessionId) return this._historySnapshot();
 
     try {
@@ -131,6 +186,7 @@ export class LocalAgentRelay {
       this.displayHistory = history.displayHistory || [];
       this.agentHistory = history.agentHistory || [];
       this.resumeLoaded = true;
+      this.turnCount = 0;
       if (this.client) this.client.sessionId = this.resumeSessionId;
       if (this.jsonlWriter?.sessionId && this.jsonlWriter.sessionId !== this.resumeSessionId) {
         this.jsonlWriter = null;
@@ -344,6 +400,14 @@ export class LocalAgentRelay {
 
   async close() {
     this.approvalManager?.rejectAll?.();
+    // Tear down plugin-owned MCP clients — the executor's registered
+    // <server>.<tool> entries are removed here so a rerun in the same
+    // process picks up any manifest edits cleanly.
+    for (const { plugin, name, client } of (this._mcpClients || [])) {
+      try { this.toolExecutor?.unregisterMcpServer?.(plugin, name); } catch { /* ignore */ }
+      try { await client.disconnect(); } catch { /* ignore */ }
+    }
+    this._mcpClients = [];
     try {
       await this.jsonlWriter?.close?.();
     } catch {}
@@ -501,6 +565,14 @@ export class LocalAgentRelay {
     return payload;
   }
 
+  async executeTool(name, args = {}) {
+    await this._ensureReady();
+    if (!this.toolExecutor) {
+      throw new Error('Tool executor is not initialized');
+    }
+    return this.toolExecutor.execute(name, args);
+  }
+
   async _ensureReady() {
     if (this.ready) return this.ready;
     this.ready = this._initialize().catch((err) => {
@@ -526,10 +598,63 @@ export class LocalAgentRelay {
       process.chdir(this.session.root_path);
     }
 
-    const toolExecutor = createToolExecutor();
+    const { PluginRegistry } = await import('../plugins/registry.mjs');
+    const activePlugins = activePluginNamesFromSession(this.session);
+    const pluginDirs = pluginScanDirsFromSession(this.session);
+    const pluginRegistry = new PluginRegistry({
+      disabled: envList('BAHULAM_DISABLE_PLUGINS'),
+      enabled: activePlugins,
+      ...(pluginDirs.length ? { pluginDirs } : {}),
+    });
+    pluginRegistry.scan();
+
+    // Reactive pulse: every plugin state write bubbles up here and lands
+    // on the shared SSE bus as `plugin_state_changed`. Views subscribed
+    // to /api/events re-render as the agent works — the Shared
+    // Blackboard's live-update moment. `this.emit` is the same event
+    // sink server.mjs uses for tool_call / tool_done / agent events.
+    const stateEmit = (evt) => {
+      try { this.emit('plugin_state_changed', evt); }
+      catch { /* never let SSE failure break a tool call */ }
+    };
+    const toolExecutor = createToolExecutor({ pluginRegistry, stateEmit });
     await toolExecutor.waitForAutoRegister?.();
     await toolExecutor.registerProjectRoots?.([this.session.root_path], { forceRefresh: false });
 
+    // Plugin=MCP+UX: every plugin can declare mcpServers in its
+    // plugin.yaml (or a sibling mcp.json). Spawn each, discover its
+    // tools, and register them as `<server>.<tool>` in the shared
+    // executor. Failure of one server never blocks the workspace —
+    // its tools drop out, everything else keeps running.
+    this._mcpClients = [];   // {plugin, name, client} — for teardown on close()
+    for (const entry of pluginRegistry.listMcpServers?.() || []) {
+      try {
+        const { McpClient } = await import('../mcp/client.mjs');
+        const client = new McpClient(_expandEnvInMcpConfig(entry.config));
+        await client.connect();
+        const tools = await client.listTools();
+        let registered = 0;
+        for (const t of tools) {
+          if (toolExecutor.registerMcpTool?.(entry.plugin, entry.name, t.name, client, t.inputSchema)) {
+            registered++;
+          }
+        }
+        this._mcpClients.push({ plugin: entry.plugin, name: entry.name, client });
+        this.emit('plugin_mcp_ready', {
+          plugin: entry.plugin,
+          server: entry.name,
+          tools: registered,
+        });
+      } catch (err) {
+        // Never fatal: the plugin's JS tools + views still work.
+        this.emit('plugin_mcp_failed', {
+          plugin: entry.plugin,
+          server: entry.name,
+          error: String(err.message || err),
+        });
+      }
+    }
+
     const approval = new BrowserApprovalManager({
       emit: this.emit,
       cwd: this.session.root_path,
@@ -545,6 +670,7 @@ export class LocalAgentRelay {
       toolExecutor,
       approvalManager: approval,
       mode: 'remote',
+      pluginRegistry,
     });
     if (this.resumeSessionId) this.client.sessionId = this.resumeSessionId;
     this._ensureJsonlWriter();
@@ -553,6 +679,7 @@ export class LocalAgentRelay {
       backend_url: creds.backendUrl,
       root_path: this.session.root_path,
       tools: toolExecutor.listTools?.().length || 0,
+      plugins: pluginRegistry.list?.().map(plugin => plugin.metadata?.name).filter(Boolean) || [],
       backend_session_id: this.client.sessionId || null,
       approval_mode: this.approvalAutoMode ? 'auto' : 'ask',
     });

package/src/local-service/server.mjs

@@ -8,11 +8,13 @@
 import * as crypto from 'node:crypto';
 import * as fs from 'node:fs';
 import * as http from 'node:http';
+import * as os from 'node:os';
 import * as path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { BahulamAuth } from '../auth/bahulam-auth.mjs';
 import { resolveWebUrl } from '../core/backend-url.mjs';
 import { LocalAgentRelay } from './agent-relay.mjs';
+import { PluginRegistry } from '../plugins/registry.mjs';
 import {
   DEFAULT_MAX_RAW_BYTES,
   contentTypeForPath,
@@ -420,18 +422,193 @@ async function routeRequest({ req, res, sessionId, token, events, sseClients, em
 
   if (req.method === 'POST' && url.pathname === '/api/tools/execute') {
     const body = await readJsonBody(req);
-    emit('tool_execution_requested', { name: body.name || null });
-    sendJson(res, 501, {
-      ok: false,
-      error: 'local_tool_bridge_not_wired',
-      message: 'Tool execution will be routed through the local service permission layer in the next slice.',
-    });
+    const name = String(body.name || '').trim();
+    const args = body.args || {};
+    if (!name) {
+      sendJson(res, 400, { ok: false, error: 'tool name is required' });
+      return;
+    }
+    emit('tool_execution_requested', { name });
+    try {
+      const relay = getAgentRelay(session);
+      const result = await relay.executeTool(name, args);
+      sendJson(res, 200, { ok: true, result });
+    } catch (err) {
+      sendJson(res, 500, { ok: false, error: err.message || String(err) });
+    }
+    return;
+  }
+
+  // Plugin workspace views (PRD-101 §4.6): panels declared under
+  // spec.workspace.views in plugin.yaml, rendered as sandboxed iframes.
+  // Generic infra — ANY installed plugin (project-local or ~/.bahulam)
+  // contributes tabs; its whole directory is served statically so views
+  // can ship css/js/assets with relative paths.
+  if (req.method === 'GET' && url.pathname === '/api/plugin-views') {
+    const views = getPluginViews(session).map(v => ({
+      plugin: v.plugin,
+      name: v.name,
+      url: `/plugin-view/${encodeURIComponent(v.plugin)}/${v.source.split('/').map(encodeURIComponent).join('/')}`,
+    }));
+    sendJson(res, 200, { ok: true, views });
+    return;
+  }
+
+  // Shared-blackboard direct-access API for plugin views. The tool
+  // executor already injects `options.state` for agent-driven writes;
+  // this endpoint gives browser-side views the same surface so a human
+  // clicking a button hits the exact same store the agent uses.
+  //
+  // POST /api/plugin-state/<plugin>  body: {op, ...args}
+  //   ops: get|set|patch|append|list|keys|delete|query
+  //
+  // Writes emit a `plugin_state_changed` SSE event on the shared bus,
+  // so any view watching /api/events re-renders live.
+  const pluginStateMatch = req.method === 'POST'
+    ? url.pathname.match(/^\/api\/plugin-state\/([^/]+)$/)
+    : null;
+  if (pluginStateMatch) {
+    const pluginName = decodeURIComponent(pluginStateMatch[1]);
+    // Scope guard: `bahulam plugin <name>` sessions are pinned to one
+    // plugin. Refuse cross-plugin state access so a hostile view can't
+    // read another plugin's DB via a hand-crafted URL.
+    const scoped = session?.plugin?.name;
+    if (scoped && String(scoped).toLowerCase() !== pluginName.toLowerCase()) {
+      sendJson(res, 403, { ok: false, error: 'plugin_scope_mismatch' });
+      return;
+    }
+    if (!getPluginDirs(session).has(pluginName)) {
+      sendJson(res, 404, { ok: false, error: 'plugin_not_found' });
+      return;
+    }
+    let body;
+    try { body = await readJsonBody(req); }
+    catch (err) { sendJson(res, 400, { ok: false, error: 'bad_body', message: err.message }); return; }
+    const op = String(body.op || '').trim();
+    if (!op) { sendJson(res, 400, { ok: false, error: 'op_required' }); return; }
+    try {
+      const { makePluginState } = await import('../plugins/state.mjs');
+      const state = makePluginState(pluginName, {
+        emit: (evt) => { try { emit('plugin_state_changed', evt); } catch { /* ignore */ } },
+      });
+      const result = runStateOp(state, op, body);
+      sendJson(res, 200, { ok: true, result });
+    } catch (err) {
+      sendJson(res, 500, { ok: false, error: 'state_op_failed', message: err.message });
+    }
+    return;
+  }
+
+  const pluginViewMatch = req.method === 'GET'
+    ? url.pathname.match(/^\/plugin-view\/([^/]+)\/(.+)$/)
+    : null;
+  if (pluginViewMatch) {
+    const pluginName = decodeURIComponent(pluginViewMatch[1]);
+    const relPath = pluginViewMatch[2].split('/').map(decodeURIComponent).join('/');
+    const dir = getPluginDirs(session).get(pluginName);
+    if (!dir) {
+      sendJson(res, 404, { ok: false, error: 'plugin_not_found' });
+      return;
+    }
+    const root = path.resolve(dir);
+    const abs = path.resolve(root, relPath);
+    if (abs !== root && !abs.startsWith(root + path.sep)) {
+      sendJson(res, 403, { ok: false, error: 'forbidden' });
+      return;
+    }
+    try {
+      const content = fs.readFileSync(abs);
+      res.writeHead(200, { 'Content-Type': pluginViewContentType(abs) });
+      res.end(content);
+    } catch {
+      sendJson(res, 404, { ok: false, error: 'plugin_view_file_missing' });
+    }
     return;
   }
 
   sendJson(res, 404, { ok: false, error: 'not_found' });
 }
 
+// Short-TTL registry cache, keyed by session so `bahulam plugin <name>`
+// only surfaces the scoped plugin's views. A generic `workspace open`
+// session (no session.plugin) sees every installed plugin — that's the
+// developer/multi-plugin experience.
+const _pluginScan = new Map();
+function scanPlugins(session) {
+  const scope = session?.plugin?.name ? String(session.plugin.name).toLowerCase() : '__all__';
+  const cached = _pluginScan.get(scope);
+  if (cached && Date.now() - cached.at < 5000) return cached;
+  const views = [];
+  const dirs = new Map();
+  try {
+    const registry = new PluginRegistry({
+      pluginDirs: [
+        path.join(session.root_path || process.cwd(), '.bahulam', 'plugins'),
+        path.join(os.homedir(), '.bahulam', 'plugins'),
+      ],
+    }).scan();
+    for (const manifest of registry.list()) {
+      const pluginName = manifest.metadata?.name || '';
+      if (!pluginName || !manifest._dir) continue;
+      if (scope !== '__all__' && pluginName.toLowerCase() !== scope) continue;
+      dirs.set(pluginName, manifest._dir);
+      (manifest.spec?.workspace?.views || []).forEach((view) => {
+        const source = String(view?.source || '').trim().replace(/^\.\//, '');
+        if (!source) return;
+        views.push({
+          plugin: pluginName,
+          name: String(view?.name || '').trim() || pluginName,
+          source,
+        });
+      });
+    }
+  } catch {
+    // plugin scan failures must never break the workspace
+  }
+  const entry = { at: Date.now(), views, dirs };
+  _pluginScan.set(scope, entry);
+  return entry;
+}
+function getPluginViews(session) { return scanPlugins(session).views; }
+function getPluginDirs(session) { return scanPlugins(session).dirs; }
+
+/**
+ * Dispatch a POST /api/plugin-state op onto the plugin's state proxy.
+ * Kept as a plain switch so failures are per-op and the router surfaces
+ * a clean 500 with the offending op name rather than a stack trace.
+ */
+function runStateOp(state, op, body) {
+  switch (op) {
+    case 'get':    return state.get(body.key, body.fallback ?? null);
+    case 'set':    return state.set(body.key, body.value);
+    case 'patch':  return state.patch(body.key, body.partial ?? body.value);
+    case 'delete': return state.delete(body.key);
+    case 'keys':   return state.keys();
+    case 'append': return state.append(body.stream, body.payload);
+    case 'list':   return state.list(body.stream, { limit: body.limit, order: body.order });
+    case 'query':  return state.query(body.sql, body.params || []);
+    default:       throw new Error(`unknown state op: ${op}`);
+  }
+}
+
+// Real mime types for plugin views — unlike contentTypeForPath (file
+// viewer), views MUST execute, so html/css/js keep their native types.
+// Plugin code runs client-side by user consent (same trust as shell).
+const PLUGIN_VIEW_MIME = {
+  html: 'text/html; charset=utf-8', htm: 'text/html; charset=utf-8',
+  css: 'text/css; charset=utf-8',
+  js: 'text/javascript; charset=utf-8', mjs: 'text/javascript; charset=utf-8',
+  json: 'application/json', map: 'application/json',
+  png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', gif: 'image/gif',
+  webp: 'image/webp', svg: 'image/svg+xml', ico: 'image/x-icon',
+  woff: 'font/woff', woff2: 'font/woff2', ttf: 'font/ttf',
+  wasm: 'application/wasm',
+};
+function pluginViewContentType(filePath) {
+  const ext = path.extname(String(filePath || '')).slice(1).toLowerCase();
+  return PLUGIN_VIEW_MIME[ext] || 'application/octet-stream';
+}
+
 function requireAuthorizedSession(sessionId, token, req, url) {
   const session = loadLocalWorkspaceSession(sessionId);
   if (!session) {
@@ -807,7 +984,7 @@ main.hide-files{grid-template-columns:0 0 minmax(360px,1fr) 6px var(--right-w)}m
 .tabbar{height:36px;display:flex;align-items:center;border-bottom:1px solid var(--ws-border-subtle);background:var(--ws-tab);flex:0 0 auto;overflow-x:auto}.tab{height:100%;display:flex;align-items:center;gap:7px;border:0;border-right:1px solid var(--ws-border-subtle);padding:0 9px;background:transparent;color:rgba(27,27,27,.45);font-size:11px;cursor:pointer;max-width:220px;min-width:90px}.tab.active{background:#fff;color:var(--ws-foreground);box-shadow:inset 0 -1.5px 0 var(--ws-foreground)}.tab:hover{background:rgba(27,27,27,.03);color:rgba(27,27,27,.75)}.tab-name{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.tab-close{border:0;background:transparent;border-radius:4px;color:rgba(27,27,27,.28);cursor:pointer;padding:0 2px}.tab-close:hover{background:rgba(27,27,27,.07);color:rgba(27,27,27,.70)}.tab-muted{flex:1;height:100%;border-left:1px solid var(--ws-border-subtle);min-width:24px}
 .viewer{flex:1;min-height:0;overflow:hidden;background:#fff;display:flex;flex-direction:column}.file-header{min-height:34px;flex:0 0 auto;border-bottom:1px solid var(--ws-border-subtle);display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding:5px 12px;background:rgba(27,27,27,.015);font:12px var(--mono);color:rgba(27,27,27,.50)}.path{min-width:120px;flex:1;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.file-chip{display:inline-flex;align-items:center;gap:5px;border:1px solid rgba(27,27,27,.08);border-radius:999px;background:#fff;padding:1px 7px;font:10px var(--sans);color:rgba(27,27,27,.48);white-space:nowrap}.file-chip.warn{border-color:#FDE68A;background:#FFFBEB;color:#92400E}.file-actions{margin-left:auto;display:flex;align-items:center;gap:6px;min-width:0;flex-wrap:wrap}.file-action{font:11px var(--sans);color:rgba(27,27,27,.50);text-decoration:none;border:1px solid var(--ws-border);border-radius:6px;padding:2px 7px;background:#fff;cursor:pointer}.file-action:hover{color:var(--ws-foreground);background:var(--ws-surface)}.file-icon-action{width:24px;height:24px;min-width:24px;padding:0;display:inline-flex;align-items:center;justify-content:center}.file-icon-action svg{width:13px;height:13px;display:block}select.file-action{height:23px;max-width:190px;padding:1px 24px 1px 7px}.empty{color:var(--ws-faint);padding:24px;font-size:12px}.error{color:var(--ws-error)}
 .monaco-host{flex:1;min-height:0}.code-fallback{flex:1;min-height:0;overflow:auto}.code-wrap{display:grid;grid-template-columns:auto minmax(0,1fr);align-items:start;min-height:100%;font:12px/1.55 var(--mono)}.line-nums{user-select:none;text-align:right;padding:14px 10px 14px 14px;color:rgba(27,27,27,.25);background:#FAF9F5;border-right:1px solid var(--ws-border-subtle);white-space:pre}.code-pre{margin:0;padding:14px;white-space:pre;overflow:auto;color:#1F2937;background:#fff;min-height:100%}.markdown-preview{flex:1;min-height:0;overflow:auto;max-width:920px;padding:24px 28px;color:rgba(27,27,27,.86);font-size:14px;line-height:1.65}.markdown-preview h1,.markdown-preview h2,.markdown-preview h3{line-height:1.2;margin:18px 0 8px}.markdown-preview p{margin:0 0 12px}.markdown-preview code,.message-content code{font-family:var(--mono);font-size:.92em;background:rgba(27,27,27,.06);border-radius:4px;padding:1px 4px}.markdown-preview pre,.message-content pre{overflow:auto;background:#0D1117;color:#E5E7EB;border-radius:7px;padding:12px}.image-stage{flex:1;min-height:0;display:flex;flex-direction:column;background:#F8F7F2}.image-toolbar{height:34px;flex:0 0 auto;display:flex;align-items:center;justify-content:flex-end;gap:6px;padding:0 10px;border-bottom:1px solid var(--ws-border-subtle);background:#fff}.image-preview{flex:1;min-height:0;display:flex;align-items:center;justify-content:center;padding:18px;overflow:auto}.image-preview img{max-width:100%;max-height:100%;object-fit:contain;border:1px solid var(--ws-border);background:#fff;box-shadow:0 10px 30px rgba(27,27,27,.10);transform-origin:center center}.frame-preview{flex:1;min-height:0;background:#F8F7F2}.frame-preview iframe{width:100%;height:100%;border:0;background:#fff}.table-preview{flex:1;min-height:0;padding:18px;overflow:auto}.table-preview .table-meta{margin:0 0 10px;color:rgba(27,27,27,.42);font:11px var(--mono)}.table-preview table{border-collapse:collapse;font-size:12px;background:#fff}.table-preview th,.table-preview td{border:1px solid var(--ws-border);padding:5px 7px;max-width:320px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.table-preview th{background:#F7F5EF;text-align:left;color:rgba(27,27,27,.65);position:sticky;top:0}.table-preview td.formula-cell{background:#F0F9FF;color:#075985}.diagram-preview{flex:1;min-height:0;padding:18px;display:grid;gap:14px;max-width:none;overflow:auto}.mermaid-card{border:1px solid var(--ws-border);border-radius:8px;background:#fff;overflow:hidden;display:flex;flex-direction:column}.mermaid-output{padding:18px;overflow:auto;min-height:220px;display:flex;align-items:center;justify-content:center}.mermaid-output svg{width:100%;max-width:100%;height:auto;display:block}.mermaid-source{margin:0;border-top:1px solid var(--ws-border-subtle);border-radius:0;background:#FAF9F5;color:rgba(27,27,27,.68);font:11px/1.45 var(--mono);max-height:220px;overflow:auto;padding:10px 12px;white-space:pre}.viewer-note{flex:1;min-height:0;overflow:auto;display:flex;align-items:center;justify-content:center;padding:24px;background:#FAF9F5}.viewer-note-card{width:min(520px,100%);max-height:100%;overflow:auto;border:1px solid var(--ws-border);border-radius:8px;background:#fff;padding:18px;box-shadow:0 10px 34px rgba(27,27,27,.05)}.viewer-note-title{font-size:14px;font-weight:750;color:rgba(27,27,27,.84)}.viewer-note-body{margin-top:8px;color:rgba(27,27,27,.56);font-size:12px;line-height:1.55}.viewer-note-actions{margin-top:14px;display:flex;gap:8px;flex-wrap:wrap}.binary-preview{flex:1;min-height:0;display:flex;align-items:center;justify-content:center;padding:24px;color:rgba(27,27,27,.50);text-align:center}
-.chat-head{height:36px;border-bottom:1px solid var(--ws-border-subtle);display:flex;align-items:center;gap:8px;padding:0 12px;background:rgba(255,255,255,.55)}.chat-title{font-size:10px;font-weight:800;text-transform:uppercase;letter-spacing:.08em;color:rgba(27,27,27,.35)}.chat-subtitle{min-width:0;flex:1;font-size:10px;color:rgba(27,27,27,.28);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.agent-tabs{height:32px;display:flex;align-items:center;border-bottom:1px solid var(--ws-border-subtle);background:#F7F5EF;padding:0 8px;gap:3px}.agent-tab{height:24px;border:0;border-radius:6px;background:transparent;color:rgba(27,27,27,.45);font-size:11px;font-weight:650;padding:0 9px;cursor:pointer}.agent-tab:hover{background:var(--ws-hover);color:rgba(27,27,27,.76)}.agent-tab.active{background:#fff;color:var(--ws-foreground);box-shadow:0 0 0 1px rgba(27,27,27,.06)}.chat-body{display:flex;flex-direction:column;flex:1;min-height:0}.chat-pane{display:none;flex-direction:column;flex:1;min-height:0}.chat-pane.active{display:flex}.thread{flex:1;min-height:0;overflow:auto;padding:16px 14px 10px;background:rgba(255,255,255,.40)}.thread-inner{display:flex;flex-direction:column;gap:12px}.empty-chat{display:flex;height:100%;align-items:center;justify-content:center;text-align:center;color:rgba(27,27,27,.35);font-size:12px}.session-list{display:flex;flex-direction:column;gap:2px}.session-row{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:10px;align-items:center;border-radius:6px;padding:8px}.session-row:hover{background:rgba(27,27,27,.035)}.session-main{min-width:0}.session-prompt{font-size:12px;color:rgba(27,27,27,.82);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.session-meta{margin-top:3px;font:10px/1.4 var(--mono);color:rgba(27,27,27,.38);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.session-tools{margin-top:5px;display:flex;gap:4px;flex-wrap:wrap}.session-chip{border-radius:999px;border:1px solid rgba(27,27,27,.07);background:#F7F5EF;padding:1px 6px;font:10px var(--mono);color:rgba(27,27,27,.48)}.msg{display:flex}.msg.user{justify-content:flex-end}.msg.assistant{justify-content:flex-start}.bubble{max-width:86%;border-radius:16px;padding:10px 12px;font-size:13px;line-height:1.55;word-break:break-word}.user .bubble{background:#1B1B1B;color:#FFFDF7}.message-attachments{display:flex;flex-wrap:wrap;gap:5px;margin-top:8px}.message-attachment{max-width:100%;display:inline-flex;align-items:center;gap:5px;border:1px solid rgba(255,255,255,.20);border-radius:999px;background:rgba(255,255,255,.10);color:#FFFDF7;padding:2px 7px;cursor:pointer}.message-attachment span{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:180px}.message-attachment small{font:10px var(--mono);opacity:.68}.message-attachment:hover{background:rgba(255,255,255,.17)}.assistant-stack{width:100%;max-width:960px;display:flex;flex-direction:column;gap:8px}.assistant-bubble{display:none;max-width:94%;border-radius:16px;background:#F7F5EF;padding:11px 13px;color:rgba(27,27,27,.86);font-size:13px;line-height:1.6}.assistant-bubble:not(:empty){display:block}.message-content p{margin:0 0 10px}.message-content p:last-child{margin-bottom:0}.message-content ul{margin:0 0 10px 18px;padding:0}.message-content li{margin:2px 0}
+.chat-head{height:36px;border-bottom:1px solid var(--ws-border-subtle);display:flex;align-items:center;gap:8px;padding:0 12px;background:rgba(255,255,255,.55)}.chat-title{font-size:10px;font-weight:800;text-transform:uppercase;letter-spacing:.08em;color:rgba(27,27,27,.35)}.chat-subtitle{min-width:0;flex:1;font-size:10px;color:rgba(27,27,27,.28);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.agent-tabs{height:32px;display:flex;align-items:center;border-bottom:1px solid var(--ws-border-subtle);background:#F7F5EF;padding:0 8px;gap:3px}.agent-tab{height:24px;border:0;border-radius:6px;background:transparent;color:rgba(27,27,27,.45);font-size:11px;font-weight:650;padding:0 9px;cursor:pointer}.agent-tab:hover{background:var(--ws-hover);color:rgba(27,27,27,.76)}.agent-tab.active{background:#fff;color:var(--ws-foreground);box-shadow:0 0 0 1px rgba(27,27,27,.06)}.chat-body{display:flex;flex-direction:column;flex:1;min-height:0}.chat-pane{display:none;flex-direction:column;flex:1;min-height:0}.chat-pane.active{display:flex}.plugins-menu-wrap{position:relative}.plugins-menu-wrap[hidden]{display:none}.plugins-dropdown{position:absolute;top:26px;left:0;z-index:60;min-width:210px;background:#fff;border:1px solid var(--ws-border);border-radius:8px;box-shadow:0 12px 34px rgba(27,27,27,.14);padding:4px;display:flex;flex-direction:column}.plugins-dropdown[hidden]{display:none}.plugins-dropdown button{border:0;background:transparent;text-align:left;font:12px var(--sans);color:rgba(27,27,27,.78);padding:6px 9px;border-radius:5px;cursor:pointer;display:flex;align-items:center;justify-content:space-between;gap:10px}.plugins-dropdown button:hover{background:var(--ws-hover)}.plugins-dropdown .plugin-origin{color:var(--ws-faint);font:10px var(--mono)}.thread{flex:1;min-height:0;overflow:auto;padding:16px 14px 10px;background:rgba(255,255,255,.40)}.thread-inner{display:flex;flex-direction:column;gap:12px}.empty-chat{display:flex;height:100%;align-items:center;justify-content:center;text-align:center;color:rgba(27,27,27,.35);font-size:12px}.session-list{display:flex;flex-direction:column;gap:2px}.session-row{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:10px;align-items:center;border-radius:6px;padding:8px}.session-row:hover{background:rgba(27,27,27,.035)}.session-main{min-width:0}.session-prompt{font-size:12px;color:rgba(27,27,27,.82);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.session-meta{margin-top:3px;font:10px/1.4 var(--mono);color:rgba(27,27,27,.38);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.session-tools{margin-top:5px;display:flex;gap:4px;flex-wrap:wrap}.session-chip{border-radius:999px;border:1px solid rgba(27,27,27,.07);background:#F7F5EF;padding:1px 6px;font:10px var(--mono);color:rgba(27,27,27,.48)}.msg{display:flex}.msg.user{justify-content:flex-end}.msg.assistant{justify-content:flex-start}.bubble{max-width:86%;border-radius:16px;padding:10px 12px;font-size:13px;line-height:1.55;word-break:break-word}.user .bubble{background:#1B1B1B;color:#FFFDF7}.message-attachments{display:flex;flex-wrap:wrap;gap:5px;margin-top:8px}.message-attachment{max-width:100%;display:inline-flex;align-items:center;gap:5px;border:1px solid rgba(255,255,255,.20);border-radius:999px;background:rgba(255,255,255,.10);color:#FFFDF7;padding:2px 7px;cursor:pointer}.message-attachment span{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:180px}.message-attachment small{font:10px var(--mono);opacity:.68}.message-attachment:hover{background:rgba(255,255,255,.17)}.assistant-stack{width:100%;max-width:960px;display:flex;flex-direction:column;gap:8px}.assistant-bubble{display:none;max-width:94%;border-radius:16px;background:#F7F5EF;padding:11px 13px;color:rgba(27,27,27,.86);font-size:13px;line-height:1.6}.assistant-bubble:not(:empty){display:block}.message-content p{margin:0 0 10px}.message-content p:last-child{margin-bottom:0}.message-content ul{margin:0 0 10px 18px;padding:0}.message-content li{margin:2px 0}
 .activity-card{display:none;overflow:hidden;border:1px solid var(--ws-border);border-radius:8px;background:#FFFDF7;font-size:12px}.activity-card.active{display:block}.activity-head{height:28px;width:100%;border:0;background:transparent;display:flex;align-items:center;gap:8px;padding:0 9px;cursor:pointer;color:rgba(27,27,27,.68)}.activity-head:hover{background:#F7F5EF}.activity-label{min-width:0;flex:1;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;text-align:left;font-size:11px;font-weight:650}.activity-rollup{font-size:10px;color:rgba(27,27,27,.38)}.activity-rows{border-top:1px solid rgba(27,27,27,.05);padding:7px 9px;max-height:96px;overflow:auto;display:flex;flex-direction:column;gap:5px}.activity-card.expanded .activity-rows{max-height:360px}.activity-row{display:flex;align-items:flex-start;gap:7px;color:rgba(27,27,27,.65);font-size:11px;line-height:1.35}.activity-row .status-dot{width:8px;height:8px;border-radius:999px;background:rgba(27,27,27,.18);margin-top:4px;flex:0 0 auto}.activity-row.running .status-dot{background:#0891B2}.activity-row.done .status-dot{background:#059669}.activity-row.error .status-dot{background:#DC2626}.activity-row.approval .status-dot{background:#D97706}.activity-row.thinking{font-style:italic;color:rgba(27,27,27,.48)}.activity-main{display:block;min-width:0;flex:1}.activity-message{display:block}.activity-row pre{display:none;margin:4px 0 0;max-height:120px;overflow:auto;border-radius:6px;background:rgba(27,27,27,.04);padding:6px;font:10px/1.4 var(--mono);color:rgba(27,27,27,.62);white-space:pre-wrap}.activity-card.expanded .activity-row pre{display:block}.activity-approval{margin-top:7px;border:1px solid rgba(217,119,6,.20);border-radius:7px;background:#FFFBEB;overflow:hidden;transition:opacity .85s ease,transform .85s ease,max-height .85s ease,margin .85s ease}.activity-approval.fading{opacity:0;transform:translateY(-4px);max-height:0;margin:0;pointer-events:none}.activity-approval-head{display:flex;align-items:center;justify-content:space-between;gap:8px;border-bottom:1px solid rgba(217,119,6,.12);padding:6px 8px}.activity-approval-title{font-size:11px;font-weight:800;color:#92400E}.activity-approval-meta{font:10px var(--mono);color:rgba(146,64,14,.58);white-space:nowrap}.activity-approval-subject{margin:7px 8px 0;border:1px solid rgba(217,119,6,.14);border-radius:5px;background:#fff;padding:7px;font:10px/1.45 var(--mono);color:rgba(27,27,27,.72);white-space:pre-wrap;overflow-wrap:anywhere;max-height:130px;overflow:auto}.activity-approval-reason{padding:6px 8px 8px;color:rgba(27,27,27,.56);font-size:11px;line-height:1.45}.activity-approval-actions{display:flex;justify-content:flex-end;gap:6px;flex-wrap:wrap;border-top:1px solid rgba(217,119,6,.12);background:rgba(255,255,255,.58);padding:7px 8px}.activity-result{margin-top:6px}.trace{display:block;flex:1;min-height:0;overflow:auto;background:#fff;padding:8px}.trace-row{font:11px/1.45 var(--mono);border-bottom:1px solid rgba(27,27,27,.05);padding:7px 4px;color:rgba(27,27,27,.52);white-space:pre-wrap;overflow-wrap:anywhere}.trace-row b{color:var(--ws-primary)}
 .notebook-preview{flex:1;min-height:0;overflow:auto;background:#F7F5EF;padding:14px 14px 40px;display:flex;flex-direction:column;gap:10px}.notebook-meta{font:11px var(--mono);color:rgba(27,27,27,.42);padding:0 6px}.notebook-cell{border:1px solid var(--ws-border-subtle);border-radius:8px;background:#fff;overflow:hidden;box-shadow:0 1px 0 rgba(27,27,27,.02)}.notebook-cell.code{display:grid;grid-template-columns:64px minmax(0,1fr);padding:0;align-items:stretch}.notebook-cell.markdown{padding:16px 20px}.notebook-cell.raw{background:#F7F5EF;padding:12px 16px}.notebook-cell.raw .notebook-cell-body{padding:0}.notebook-cell.raw pre{margin:0;white-space:pre-wrap;font:12px/1.5 var(--mono);color:rgba(27,27,27,.72)}.notebook-cell-body{padding:0}.notebook-markdown{font-size:14px;line-height:1.65;color:rgba(27,27,27,.86)}.notebook-markdown h1,.notebook-markdown h2,.notebook-markdown h3{line-height:1.2;margin:14px 0 8px;color:rgba(27,27,27,.92)}.notebook-markdown h1{font-size:22px;border-bottom:1px solid var(--ws-border-subtle);padding-bottom:4px}.notebook-markdown p{margin:0 0 10px}.notebook-markdown code{font-family:var(--mono);font-size:.92em;background:rgba(27,27,27,.06);border-radius:4px;padding:1px 4px}.notebook-markdown pre{overflow:auto;background:#0D1117;color:#E5E7EB;border-radius:6px;padding:10px}.notebook-prompt{padding:12px 10px 12px 10px;font:11px/1.4 var(--mono);text-align:right;user-select:none;color:#4B6BFB;background:transparent;border-right:1px solid var(--ws-border-subtle);white-space:nowrap;display:flex;align-items:flex-start;justify-content:flex-end}.notebook-prompt.out{color:#A21818}.notebook-prompt.empty{color:transparent;pointer-events:none}.notebook-prompt.in::before{content:"In "}.notebook-prompt.out::before{content:"Out "}.notebook-cell-monaco{background:#FAFBFC;min-height:52px;position:relative;overflow:hidden;padding:6px 0}.notebook-cell-monaco .monaco-editor,.notebook-cell-monaco .monaco-editor .overflow-guard,.notebook-cell-monaco .monaco-editor-background,.notebook-cell-monaco .margin{background:#FAFBFC!important}.notebook-code-fallback{margin:0;padding:8px 12px;background:transparent;color:#1F2937;font:12px/1.5 var(--mono);white-space:pre;overflow:auto}.notebook-cell-outputs{grid-column:1 / -1;display:grid;grid-template-columns:64px minmax(0,1fr);background:#fff;border-top:1px solid var(--ws-border-subtle)}.notebook-output-item{display:contents}.notebook-output-item+.notebook-output-item>.notebook-prompt,.notebook-output-item+.notebook-output-item>.notebook-output-body{border-top:1px solid var(--ws-border-subtle)}.notebook-output-body{padding:8px 12px;overflow:auto;min-width:0;background:#fff}.notebook-stream{margin:0;font:12px/1.5 var(--mono);color:#1F2937;white-space:pre-wrap;word-break:break-word;background:transparent;padding:0}.notebook-stream.stderr{color:#7F1D1D;background:#FEF2F2;padding:6px 8px;border-radius:5px}.notebook-error{margin:0;font:12px/1.5 var(--mono);color:#7F1D1D;background:#FEF2F2;padding:8px 10px;border-radius:5px;white-space:pre-wrap;word-break:break-word;overflow:auto}.notebook-plain{margin:0;font:12px/1.5 var(--mono);color:#1F2937;white-space:pre-wrap;word-break:break-word;background:transparent;padding:0}.notebook-json{margin:0;font:12px/1.5 var(--mono);color:#0F172A;background:#F8FAFC;padding:8px 10px;border-radius:5px;white-space:pre;overflow:auto}.notebook-output-body img{max-width:100%;height:auto;display:block;background:#fff;border-radius:4px}.notebook-output-body iframe{width:100%;min-height:220px;border:1px solid var(--ws-border-subtle);border-radius:5px;background:#fff}.notebook-latex{font-size:14px;color:rgba(27,27,27,.90);padding:6px 0;overflow:auto}.katex-display{margin:6px 0!important}.viewer.maximized{position:fixed;inset:12px;z-index:70;border:1px solid rgba(27,27,27,.12);border-radius:8px;box-shadow:0 24px 80px rgba(27,27,27,.28);background:#fff}.viewer.maximized .diagram-preview,.viewer.maximized .markdown-preview{max-width:none}.viewer.maximized .mermaid-output{min-height:calc(100vh - 220px)}.composer{border-top:1px solid var(--ws-border-subtle);background:#FFFDF7;padding:10px 12px}.composer-box{border:1px solid var(--ws-border);border-radius:10px;background:#fff;overflow:hidden}.upload-tray{display:flex;gap:6px;flex-wrap:wrap;padding:8px 9px 0}.upload-tray[hidden]{display:none}.upload-chip{height:24px;display:inline-flex;align-items:center;gap:6px;max-width:100%;border:1px solid rgba(8,145,178,.18);border-radius:999px;background:#F0F9FF;color:#075985;padding:0 4px 0 8px;font-size:11px}.upload-chip-name{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:210px}.upload-chip-meta{font:10px var(--mono);color:rgba(7,89,133,.58)}.upload-chip button{width:18px;height:18px;border:0;border-radius:999px;background:transparent;color:rgba(7,89,133,.52);cursor:pointer;padding:0}.upload-chip button:hover{background:rgba(8,145,178,.12);color:#075985}textarea{display:block;width:100%;min-height:84px;max-height:240px;resize:vertical;border:0;padding:10px 11px;background:#fff;color:var(--ws-foreground);outline:none}.composer-actions{height:34px;border-top:1px solid var(--ws-border-subtle);display:flex;align-items:center;justify-content:space-between;padding:0 8px}.composer-left,.composer-right{display:flex;align-items:center;gap:6px;min-width:0}.composer-right{margin-left:auto}.status{font-size:11px;color:var(--ws-muted);overflow:hidden;text-overflow:ellipsis;white-space:nowrap;padding-right:8px}.stop-button{height:24px;border:1px solid rgba(185,28,28,.20);border-radius:6px;background:#FEF2F2;color:#B91C1C;font-size:11px;font-weight:750;padding:0 8px;display:inline-flex;align-items:center;gap:5px;cursor:pointer}.stop-button svg{width:12px;height:12px}.stop-button:hover{background:#FEE2E2;border-color:rgba(185,28,28,.30)}.stop-button:disabled{opacity:.55;cursor:not-allowed}.stop-button[hidden]{display:none}button.primary{height:24px;border:0;border-radius:6px;background:var(--ws-foreground);color:#fff;font-size:11px;font-weight:750;padding:0 10px;cursor:pointer}button.primary:hover{background:#2B2B2B}button.primary:disabled{opacity:.45;cursor:not-allowed}
 .approval-inline{transition:opacity .85s ease,transform .85s ease,max-height .85s ease,margin .85s ease}.approval-inline.fading{opacity:0;transform:translateY(-4px);max-height:0;margin:0;pointer-events:none}.approval-inline-actions .approval-approve{background:#ECFDF5;border-color:#A7F3D0;color:#047857}.approval-inline-actions .approval-approve:hover{background:#D1FAE5;color:#065F46}.approval-inline-actions .approval-reject{background:#FEF2F2;border-color:#FECACA;color:#B91C1C}.approval-inline-actions .approval-reject:hover{background:#FEE2E2;color:#991B1B}.approval-inline-actions .approval-secondary{background:#EFF6FF;border-color:#BFDBFE;color:#1D4ED8}.approval-inline-actions .approval-secondary:hover{background:#DBEAFE;color:#1E40AF}.approval-result-line{display:inline-flex;max-width:100%;align-items:center;gap:7px;border:1px solid rgba(27,27,27,.08);border-radius:999px;background:#F7F5EF;color:rgba(27,27,27,.58);padding:5px 9px;font:11px/1.2 var(--mono);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.approval-result-line.approved{background:#ECFDF5;border-color:#A7F3D0;color:#047857}.approval-result-line.denied{background:#FEF2F2;border-color:#FECACA;color:#B91C1C}.approval-result-tool{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:420px}
@@ -857,6 +1034,10 @@ main.hide-files{grid-template-columns:0 0 minmax(360px,1fr) 6px var(--right-w)}m
     <button class="menu-item" type="button">Edit</button>
     <button class="menu-item" type="button">Run</button>
     <button class="menu-item" type="button">Tools</button>
+    <div class="plugins-menu-wrap" id="pluginsMenuWrap" hidden>
+      <button class="menu-item" id="pluginsMenuButton" type="button" aria-haspopup="menu" aria-expanded="false">Plugins</button>
+      <div class="plugins-dropdown" id="pluginsDropdown" hidden role="menu"></div>
+    </div>
     <div class="menubar-spacer"></div>
     <div class="session-menu-wrap">
       <button class="menu-item session-menu-button" id="sessionMenuButton" type="button" aria-haspopup="dialog" aria-expanded="false">Chat: New</button>
@@ -1387,6 +1568,7 @@ async function loadDir(path){
   }
 }
 async function openFile(path, knownData){
+  if(path&&path.startsWith('plugin://')){openPluginView(path);return;}
   currentPath=path;
   if(!openTabs.some(t=>t.path===path))openTabs.push({path,name:basename(path)});
   activePath=path;
@@ -2280,6 +2462,46 @@ function setAgentTab(tab){
     btn.setAttribute('aria-selected', String(active));
   });
 }
+// Plugin views render as CENTRAL panel tabs (like files), keyed plugin://
+// Discoverable via the top "Plugins" menu; tabs are also opened at boot.
+const pluginViews=new Map();
+async function loadPluginViews(){
+  try{
+    const data=await api('/api/plugin-views');
+    const views=data.views||[];
+    if(!views.length)return;
+    const wrap=document.getElementById('pluginsMenuWrap');
+    const dropdown=document.getElementById('pluginsDropdown');
+    const button=document.getElementById('pluginsMenuButton');
+    views.forEach(view=>{
+      const key='plugin://'+view.plugin+'/'+(view.name||'view');
+      pluginViews.set(key,view);
+      if(!openTabs.some(t=>t.path===key))openTabs.push({path:key,name:view.name||view.plugin});
+      const item=document.createElement('button');
+      item.type='button';item.setAttribute('role','menuitem');
+      item.innerHTML='<span>'+esc(view.name||view.plugin)+'</span><span class="plugin-origin">'+esc(view.plugin)+'</span>';
+      item.addEventListener('click',()=>{dropdown.hidden=true;button.setAttribute('aria-expanded','false');openPluginView(key);});
+      dropdown.appendChild(item);
+    });
+    if(wrap)wrap.hidden=false;
+    if(button&&dropdown){
+      button.addEventListener('click',(e)=>{e.stopPropagation();const open=dropdown.hidden;dropdown.hidden=!open;button.setAttribute('aria-expanded',String(open));});
+      document.addEventListener('click',()=>{if(!dropdown.hidden){dropdown.hidden=true;button.setAttribute('aria-expanded','false');}});
+    }
+    renderTabs();
+  }catch{}
+}
+function openPluginView(key){
+  const view=pluginViews.get(key);
+  if(!view)return;
+  currentPath=key;
+  activePath=key;
+  if(!openTabs.some(t=>t.path===key))openTabs.push({path:key,name:view.name||view.plugin});
+  renderTabs();
+  renderExplorer();
+  renderViewer('<div class="file-header"><span>⚙</span><span class="path">'+esc(view.plugin)+' · '+esc(view.name)+'</span></div>'+
+    '<div class="frame-preview"><iframe sandbox="allow-scripts allow-same-origin allow-forms" src="'+esc(view.url)+'?token='+encodeURIComponent(token)+'"></iframe></div>');
+}
 function setTurnRunning(running){
   turnRunning=Boolean(running);
   if(!turnRunning)turnCancelling=false;
@@ -2627,6 +2849,7 @@ renderTabs();
 renderEmptyViewer();
 loadApprovalMode();
 loadSessionChoices();
+loadPluginViews();
 loadDir('.').then(()=>{if(currentPath&&currentPath!=='.')openFile(currentPath).catch(()=>{});});
 </script>
 </body>