@epoch-agent/server 0.17.0 → 0.19.0

package/dist/index.js

@@ -1,13 +1,13 @@
 import { createServer } from 'http';
 import { createLogger, t, ApprovalRelay, QuestionRelay, serializeStream, withRoleScope, withModelScope, withToolScope, nextRunAt, observeBackgroundTasks, skillIndexDescription, SANDBOX_EXCLUDES, SANDBOX_COVERS, canProbeGit, guardSpawn, isSystemOpenable, backgroundTaskOutput, listBackgroundTasks, providerLabel, MAX_REASON_CHARS, MAX_OBJECTIVE_CHARS, MAX_GOAL_MAX_ROUNDS, DEFAULT_GOAL_MAX_ROUNDS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_DEFAULTS, coalesceRecording, readRecording } from '@epoch-agent/runtime';
-import { timingSafeEqual, randomBytes } from 'crypto';
+import { timingSafeEqual, randomBytes, randomUUID } from 'crypto';
 import { PLAN_OUTCOMES, WIRE_AUTH_COOKIE, WIRE_AUTH_COOKIE_ATTRS, WIRE_AUTH_TOKEN_PARAM, extractAllMentions, MAX_ATTACH_FILES, utf8ByteLength, MAX_SESSION_REFS, attachSessionSurface, isWireRewindScope, WIRE_REWIND_SCOPES, mcpConnectorState, MAX_ATTACH_TOTAL_BYTES, MAX_ATTACH_BYTES, truncateToBudget, WIRE_LANG_PARAM, isLang, conformsToWire, WIRE_LAST_SESSION_FIELDS, isQuestionAnswerMap, isProviderType, apiKeyEnvVar, WIRE_FILE_STAT_MAX, WIRE_SETTING_WRITE_LAYERS, isWirePlanAction, WIRE_PLAN_ACTIONS, isPermissionLevel, PERMISSION_LEVELS, WIRE_TRUST_REQUEST_FIELDS, WIRE_FORGET_WORKSPACE_FIELDS, collectPendingApprovals, unfixedRules, isWireSettingWriteLayer, parseModelRef, WIRE_GOAL_ACTIONS, OPERATION_TYPES, isOperationType, WIRE_PLUGIN_UPLOAD_FORM_FIELDS } from '@epoch-agent/protocol';
 import { resolve, join, relative, isAbsolute, sep, dirname, basename, extname } from 'path';
 import { existsSync, realpathSync, statSync, mkdirSync, createReadStream, readdirSync, createWriteStream, accessSync, constants } from 'fs';
 import { stat, readFile, rm } from 'fs/promises';
 import { pipeline } from 'stream/promises';
-import { homedir } from 'os';
 import { execFile, spawn } from 'child_process';
+import { homedir } from 'os';
 import { fileURLToPath } from 'url';
 
 // src/index.ts
@@ -137,6 +137,70 @@ function firstScreenUrl(host, port, token, ui = {}) {
   if (ui.lang) params.push(`${UI_LANG_PARAM}=${encodeURIComponent(ui.lang)}`);
   return `http://${authority}:${port}/?${params.join("&")}`;
 }
+var HOST_COMPOSE_TTL_MS = 10 * 6e4;
+var HostComposeStore = class {
+  items = /* @__PURE__ */ new Map();
+  now;
+  ttlMs;
+  newId;
+  constructor(opts = {}) {
+    this.now = opts.now ?? Date.now;
+    this.ttlMs = opts.ttlMs ?? HOST_COMPOSE_TTL_MS;
+    this.newId = opts.newId ?? (() => `hc_${randomUUID()}`);
+  }
+  record(input) {
+    const now = this.now();
+    this.sweep(now);
+    for (const [id, item2] of this.items) {
+      if (item2.sessionId === input.sessionId && item2.takenAt === void 0) this.items.delete(id);
+    }
+    const item = {
+      id: this.newId(),
+      sessionId: input.sessionId,
+      text: input.text,
+      autoSend: input.autoSend,
+      createdAt: now
+    };
+    this.items.set(item.id, item);
+    return item;
+  }
+  pending() {
+    this.sweep(this.now());
+    let newest = null;
+    for (const item of this.items.values()) {
+      if (item.takenAt !== void 0) continue;
+      if (newest === null || item.createdAt >= newest.createdAt) newest = item;
+    }
+    return newest;
+  }
+  take(id) {
+    const now = this.now();
+    this.sweep(now, id);
+    const item = this.items.get(id);
+    if (item === void 0) return "unknown";
+    if (now - item.createdAt >= this.ttlMs) {
+      this.items.delete(id);
+      return "expired";
+    }
+    if (item.takenAt !== void 0) return "taken";
+    item.takenAt = now;
+    return "ok";
+  }
+  sweep(now, keep) {
+    for (const [id, item] of this.items) {
+      if (id === keep) continue;
+      if (now - item.createdAt >= this.ttlMs) this.items.delete(id);
+    }
+  }
+};
+function toWireHostCompose(item) {
+  return {
+    id: item.id,
+    sessionId: item.sessionId,
+    text: item.text,
+    autoSend: item.autoSend
+  };
+}
 // src/ring.ts
 var DEFAULT_RING_CAPACITY = 512;
 var EnvelopeRing = class {
@@ -597,6 +661,14 @@ var SessionHub = class {
     if (this.closed) return;
     this.publish(sessionId, { type: "sessions-changed" });
   }
+  notifyPluginsChanged() {
+    if (this.closed) return;
+    this.publish(void 0, { type: "plugins-changed" });
+  }
+  notifyHostCompose(sessionId, payload) {
+    if (this.closed) return;
+    this.publish(sessionId, { type: "host-compose", ...payload });
+  }
   shutdown() {
     if (this.closed) return;
     this.closed = true;
@@ -607,10 +679,15 @@ var SessionHub = class {
     this.counted.clear();
   }
   publish(sessionId, event) {
-    const frame = { seq: ++this.seq, sessionId, ts: this.clock(), event };
+    const frame = {
+      seq: ++this.seq,
+      ...sessionId === void 0 ? {} : { sessionId },
+      ts: this.clock(),
+      event
+    };
     this.ring.push(frame);
     for (const sink of this.sinks) sink(frame);
-    for (const sink of this.observers) sink(frame);
+    if (sessionId !== void 0) for (const sink of this.observers) sink(frame);
     return frame;
   }
   connectionFrame(event) {
@@ -1654,12 +1731,19 @@ function lastSessionField(ctx) {
   if (!ctx.hub.has(recorded) && !ctx.runtime.sessions?.get(recorded)) return {};
   return { lastSessionId: recorded };
 }
+function hostComposeField(ctx) {
+  const item = ctx.hostCompose.pending();
+  if (!item) return {};
+  if (!ctx.hub.has(item.sessionId) && !ctx.runtime.sessions?.get(item.sessionId)) return {};
+  return { hostCompose: toWireHostCompose(item) };
+}
 function config(ctx, res, lang) {
   const { runtime } = ctx;
   const bound = runtime.workspaces.of(runtime.sessionId);
   sendJson(res, 200, {
     sessionId: runtime.sessionId,
     ...lastSessionField(ctx),
+    ...hostComposeField(ctx),
     model: runtime.config.model,
     permission: runtime.config.permission,
     workspace: bound ? toWireSessionWorkspace(bound) : null,
@@ -2369,2467 +2453,2555 @@ function listBlockedGoals(ctx, res, _lang) {
   );
   sendJson(res, 200, { items });
 }
-async function putLastSession(ctx, req, res, lang) {
-  const control = ctx.runtime.lastOpenSession;
-  if (!control) {
-    return sendError(
-      res,
-      503,
-      "no-last-session-store",
-      t("web.last_session_unavailable", {}, lang)
-    );
-  }
-  const body = await readJsonBody(req, void 0, lang);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  if (!conformsToWire(body.value, WIRE_LAST_SESSION_FIELDS)) {
-    return sendError(res, 400, "bad-request", t("web.last_session_bad_request", {}, lang));
-  }
-  const { sessionId } = body.value;
-  if (typeof sessionId !== "string" || sessionId.length === 0) {
-    return sendError(res, 400, "bad-request", t("web.last_session_bad_request", {}, lang));
-  }
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId, lang);
-  }
-  const failure = control.set(sessionId);
-  if (failure) return sendError(res, 500, "write-failed", failure(lang));
-  sendJson(res, 200, { ok: true });
-}
-function readConfig(ctx, res, lang) {
-  if (ctx.lanExposed) return sendLanExposed(res, lang);
-  const outcome = ctx.runtime.mcp.readConfig();
-  if (!outcome.ok) {
-    return sendError(
-      res,
-      409,
-      "mcp-config-unreadable",
-      t("web.mcp_config_unreadable", { detail: outcome.detail }, lang)
+var GIT_TIMEOUT_MS = 1e4;
+var GIT_MAX_BUFFER = 16 * 1024 * 1024;
+function runGit(cwd, args) {
+  if (!canProbeGit()) return Promise.resolve({ ok: false, error: "git unavailable" });
+  return new Promise((resolve4) => {
+    guardSpawn(
+      () => execFile(
+        "git",
+        [...args],
+        { cwd, timeout: GIT_TIMEOUT_MS, maxBuffer: GIT_MAX_BUFFER, encoding: "buffer" },
+        (err, stdout) => {
+          if (err) return resolve4({ ok: false, error: err.message });
+          resolve4({ ok: true, stdout });
+        }
+      ),
+      (err) => resolve4({ ok: false, error: `${err.message} (cwd=${cwd})` })
     );
-  }
-  const { snapshot } = outcome;
-  sendJson(res, 200, {
-    configPath: snapshot.configPath,
-    text: snapshot.text,
-    exists: snapshot.exists,
-    revision: snapshot.revision,
-    issues: toWireIssues(snapshot.issues)
   });
 }
-async function saveConfig(ctx, req, res, lang) {
-  if (ctx.lanExposed) return sendLanExposed(res, lang);
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const text = payload["text"];
-  const revision = payload["revision"];
-  if (typeof text !== "string" || typeof revision !== "string") {
-    return sendError(
-      res,
-      400,
-      "bad-mcp-config-body",
-      t("web.mcp_config_bad_body", void 0, lang)
-    );
+async function repoRoot(cwd) {
+  const result = await runGit(cwd, ["rev-parse", "--show-toplevel"]);
+  if (!result.ok) return null;
+  const root = result.stdout.toString("utf-8").trim();
+  return root.length > 0 ? root : null;
+}
+async function hasHead(root) {
+  return (await runGit(root, ["rev-parse", "--verify", "--quiet", "HEAD"])).ok;
+}
+var NULL_SHA = /^0+$/;
+async function rawChanges(root) {
+  const result = await runGit(root, ["diff", "--raw", "-z", "HEAD", "--"]);
+  if (!result.ok) return [];
+  return parseRawZ(result.stdout.toString("utf-8"));
+}
+function parseRawZ(text) {
+  const tokens = text.split("\0");
+  const changes = [];
+  let i = 0;
+  while (i < tokens.length) {
+    const meta = tokens[i];
+    if (meta === void 0 || !meta.startsWith(":")) {
+      i += 1;
+      continue;
+    }
+    const parts = meta.slice(1).split(" ");
+    const oldSha = parts[2] ?? "";
+    const status = (parts[4] ?? "").trim();
+    const renamed = status.startsWith("R") || status.startsWith("C");
+    const first = tokens[i + 1];
+    const second = renamed ? tokens[i + 2] : void 0;
+    i += renamed ? 3 : 2;
+    if (first === void 0 || renamed && second === void 0) break;
+    const path = renamed ? second : first;
+    changes.push({
+      status: status.charAt(0),
+      path,
+      ...renamed ? { oldPath: first } : {},
+      oldSha: NULL_SHA.test(oldSha) ? null : oldSha
+    });
   }
-  const outcome = ctx.runtime.mcp.writeConfig(text, revision, lang);
-  if (!outcome.ok) return sendError(res, ...saveFailure(outcome.reason, outcome.detail, lang));
-  sendJson(res, 200, {
-    configPath: outcome.configPath,
-    revision: outcome.revision,
-    issues: toWireIssues(outcome.issues)
-  });
+  return changes;
 }
-async function applyConfig(ctx, req, res, lang) {
-  if (ctx.lanExposed) return sendLanExposed(res, lang);
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const revision = asRecord(body.value)["revision"];
-  if (typeof revision !== "string") {
-    return sendError(
-      res,
-      400,
-      "bad-mcp-config-body",
-      t("web.mcp_config_bad_body", void 0, lang)
-    );
+async function treeBlobSizes(root) {
+  const sizes = /* @__PURE__ */ new Map();
+  const result = await runGit(root, ["ls-tree", "-r", "-l", "-z", "HEAD"]);
+  if (!result.ok) return sizes;
+  for (const record of splitZ(result.stdout.toString("utf-8"))) {
+    const tab = record.indexOf("	");
+    if (tab < 0) continue;
+    const columns = record.slice(0, tab).split(/\s+/).filter(Boolean);
+    const sha = columns[2];
+    const size = Number(columns[3]);
+    if (columns[1] === "blob" && sha && Number.isFinite(size)) sizes.set(sha, size);
   }
-  const outcome = await ctx.runtime.mcp.applyConfig(revision, lang);
-  if (!outcome.ok) return sendError(res, ...applyFailure(outcome.reason, outcome.detail, lang));
-  sendJson(res, 200, {
-    configPath: outcome.configPath,
-    revision: outcome.revision,
-    issues: toWireIssues(outcome.issues),
-    changes: outcome.changes.map((change) => ({
-      name: change.name,
-      action: change.action,
-      ...change.status === void 0 ? {} : { server: toWireMcp(change.status) },
-      ...change.reason === void 0 ? {} : { reason: change.reason }
-    }))
-  });
+  return sizes;
 }
-function sendLanExposed(res, lang) {
-  sendError(res, 403, "mcp-config-lan-exposed", t("web.mcp_config_lan_exposed", void 0, lang));
+async function untrackedFiles(root) {
+  const result = await runGit(root, ["ls-files", "-z", "--others", "--exclude-standard"]);
+  if (!result.ok) return [];
+  return splitZ(result.stdout.toString("utf-8"));
 }
-function saveFailure(reason, detail, lang) {
-  if (reason === "stale") {
-    return [409, "mcp-config-stale", t("web.mcp_config_stale", void 0, lang)];
+async function trackedFiles(root) {
+  const result = await runGit(root, ["ls-files", "-z"]);
+  if (!result.ok) return [];
+  return splitZ(result.stdout.toString("utf-8"));
+}
+async function catFileBlob(root, sha) {
+  const result = await runGit(root, ["cat-file", "blob", sha]);
+  return result.ok ? result.stdout : null;
+}
+function splitZ(text) {
+  return text.split("\0").filter((s) => s.length > 0);
+}
+// src/workspace/diff.ts
+var MAX_DIFF_BYTES = 512 * 1024;
+var MAX_DIFF_FILES = 200;
+var BINARY_SNIFF_BYTES = 8e3;
+var ABSENT = { kind: "absent" };
+async function collectWorkspaceDiff(opts) {
+  const root = await repoRoot(opts.workDir);
+  return root === null ? await checkpointDiff(opts) : await gitDiff(root);
+}
+async function gitDiff(root) {
+  const wanted = await collectGitPaths(root);
+  const notes = [];
+  const truncated = wanted.length > MAX_DIFF_FILES;
+  const picked = truncated ? wanted.slice(0, MAX_DIFF_FILES) : wanted;
+  if (truncated) notes.push("truncated");
+  if (wanted.length === 0) notes.push("no-changes");
+  const sizes = picked.some((p) => p.oldSha !== null) ? await treeBlobSizes(root) : /* @__PURE__ */ new Map();
+  const files = [];
+  for (const item of picked) {
+    const old = await gitSide(root, item.oldSha, sizes);
+    const fresh = await worktreeSide(join(root, ...item.path.split("/")));
+    files.push(describe3(item.path, old, fresh));
   }
-  if (reason === "invalid-json") return [400, "mcp-config-invalid-json", detail];
-  return [409, "mcp-config-unwritable", t("web.mcp_config_unwritable", { detail }, lang)];
+  return { source: "git", root, files, truncated, notes };
 }
-function applyFailure(reason, detail, lang) {
-  if (reason === "unreadable") {
-    return [409, "mcp-config-unreadable", t("web.mcp_config_unreadable", { detail }, lang)];
+async function collectGitPaths(root) {
+  const byPath = /* @__PURE__ */ new Map();
+  if (await hasHead(root)) {
+    for (const change of await rawChanges(root)) {
+      if (change.oldPath !== void 0) {
+        byPath.set(change.oldPath, { path: change.oldPath, oldSha: change.oldSha });
+      }
+      byPath.set(change.path, {
+        path: change.path,
+        oldSha: change.oldPath === void 0 ? change.oldSha : null
+      });
+    }
+  } else {
+    for (const path of await trackedFiles(root)) byPath.set(path, { path, oldSha: null });
   }
-  if (reason === "stale") {
-    return [409, "mcp-config-stale", t("web.mcp_config_stale", void 0, lang)];
+  for (const path of await untrackedFiles(root)) {
+    if (!byPath.has(path)) byPath.set(path, { path, oldSha: null });
   }
-  if (reason === "invalid-json") return [400, "mcp-config-invalid-json", detail];
-  return [409, "mcp-config-no-servers", t("web.mcp_config_no_servers", { detail }, lang)];
+  return [...byPath.values()].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
 }
-function toWireIssues(issues) {
-  return issues.map((issue) => ({ path: issue.path, message: issue.message }));
+async function gitSide(root, sha, sizes) {
+  if (sha === null) return ABSENT;
+  const known = sizes.get(sha);
+  if (known !== void 0 && known > MAX_DIFF_BYTES) return { kind: "oversize", bytes: known };
+  const data = await catFileBlob(root, sha);
+  if (data === null) return { kind: "oversize", bytes: known ?? -1 };
+  return { kind: "content", data };
 }
-async function reconnectMcp(ctx, res, name, lang) {
-  const outcome = await ctx.runtime.mcp.reconnect(name);
-  if (!outcome.ok) {
-    if (outcome.reason === "unknown") {
-      return sendError(res, 404, "unknown-mcp-server", t("web.mcp_unknown_server", { name }, lang));
-    }
-    const status = {
-      ...outcome.status,
-      ...outcome.detail === void 0 ? {} : { lastError: outcome.detail }
-    };
-    return sendJson(res, 200, {
-      ok: false,
-      server: toWireMcp(status)
-    });
+async function checkpointDiff(opts) {
+  const notes = ["not-a-git-repo"];
+  const paths = await checkpointPaths(opts.checkpoints);
+  if (paths.length === 0) {
+    notes.push(opts.checkpoints === null ? "no-workspace-history" : "no-changes");
+    return { source: "none", root: opts.workDir, files: [], truncated: false, notes };
   }
-  sendJson(res, 200, {
-    ok: true,
-    server: toWireMcp(outcome.status)
-  });
-}
-async function addMcp(ctx, req, res, lang) {
-  if (ctx.lanExposed) {
-    return sendError(
-      res,
-      403,
-      "mcp-add-lan-exposed",
-      t("web.mcp_add_lan_exposed", void 0, lang)
+  const truncated = paths.length > MAX_DIFF_FILES;
+  const picked = truncated ? paths.slice(0, MAX_DIFF_FILES) : paths;
+  if (truncated) notes.push("truncated");
+  const files = [];
+  for (const absolute of picked) {
+    const fresh = await worktreeSide(absolute);
+    files.push(
+      describe3(displayPath(opts.workDir, absolute), ABSENT, fresh, {
+        status: fresh.kind === "absent" ? "deleted" : "modified",
+        omitted: "no-snapshot"
+      })
     );
   }
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
-  const transport = payload["transport"];
-  if (transport !== "stdio" && transport !== "sse" && transport !== "http") {
-    return sendError(res, 400, "bad-mcp-config", t("web.mcp_add_bad_transport", void 0, lang));
-  }
-  const outcome = await ctx.runtime.mcp.add({
-    name,
-    transport,
-    ...typeof payload["command"] === "string" ? { command: payload["command"].trim() } : {},
-    ...Array.isArray(payload["args"]) ? { args: stringList(payload["args"]) } : {},
-    ...typeof payload["url"] === "string" ? { url: payload["url"].trim() } : {},
-    ...payload["env"] === void 0 ? {} : { env: stringMap(payload["env"]) }
-  });
-  if (!outcome.ok) {
-    return sendError(res, ...addFailure(outcome.reason, outcome.detail, name, lang));
-  }
-  sendJson(res, 200, {
-    server: toWireMcp(outcome.status),
-    configPath: outcome.configPath
-  });
+  return { source: "checkpoints", root: opts.workDir, files, truncated, notes };
 }
-function addFailure(reason, detail, name, lang) {
-  if (reason === "invalid-name") {
-    return [400, "bad-mcp-name", t("web.mcp_add_bad_name", { name }, lang)];
+async function checkpointPaths(checkpoints) {
+  if (!checkpoints) return [];
+  const paths = /* @__PURE__ */ new Set();
+  try {
+    for (const summary of await checkpoints.list()) {
+      const preview = await checkpoints.preview(summary.turnIndex);
+      if (!preview) continue;
+      for (const plan of [...preview.files, ...preview.conflicts]) {
+        if (plan.action !== "skip") paths.add(plan.path);
+      }
+    }
+  } catch {
   }
-  if (reason === "invalid-config") return [400, "bad-mcp-config", detail];
-  if (reason === "duplicate")
-    return [409, "mcp-name-taken", t("web.mcp_add_taken", { name }, lang)];
-  return [409, "mcp-config-unwritable", t("web.mcp_add_unwritable", { detail }, lang)];
+  return [...paths].sort();
 }
-function stringList(value) {
-  return value.filter((v) => typeof v === "string");
+function displayPath(workDir, absolute) {
+  const rel = relative(workDir, absolute);
+  if (rel.length === 0 || rel.startsWith("..") || isAbsolute(rel)) return absolute;
+  return rel.split(sep).join("/");
 }
-function stringMap(value) {
-  const out = {};
-  for (const [k, v] of Object.entries(asRecord(value))) {
-    if (typeof v === "string") out[k] = v;
+async function worktreeSide(absolute) {
+  try {
+    const info = await stat(absolute);
+    if (!info.isFile()) return ABSENT;
+    if (info.size > MAX_DIFF_BYTES) return { kind: "oversize", bytes: info.size };
+    return { kind: "content", data: await readFile(absolute) };
+  } catch {
+    return ABSENT;
   }
-  return out;
 }
-function toRef(raw) {
-  return parseModelRef(raw);
+function describe3(path, old, fresh, override = {}) {
+  const status = override.status ?? (old.kind === "absent" ? "added" : fresh.kind === "absent" ? "deleted" : "modified");
+  const oldBytes = bytesOf(old);
+  const newBytes = bytesOf(fresh);
+  const hard = omitReason(old, fresh);
+  if (hard !== void 0) {
+    return { path, status, oldContent: null, newContent: null, oldBytes, newBytes, omitted: hard };
+  }
+  return {
+    path,
+    status,
+    oldContent: textOf(old),
+    newContent: textOf(fresh),
+    oldBytes,
+    newBytes,
+    ...override.omitted === void 0 ? {} : { omitted: override.omitted }
+  };
 }
-function toWireSelection(selection) {
-  return { provider: selection.provider, model: selection.model, origin: selection.origin };
+function bytesOf(side) {
+  if (side.kind === "absent") return null;
+  if (side.kind === "oversize") return side.bytes < 0 ? null : side.bytes;
+  return side.data.byteLength;
 }
-function sessionHasImages(session) {
-  const history = session?.getHistory() ?? [];
-  return history.some((m) => m.parts?.some((p) => p.type === "image"));
+function textOf(side) {
+  return side.kind === "content" ? side.data.toString("utf-8") : null;
 }
-function getModel(ctx, res, sessionId, _lang) {
-  const { runtime } = ctx;
-  const live = runtime.sessionFactory.get(sessionId);
-  const selection = live?.model.get();
-  sendJson(res, 200, {
-    selection: selection ? toWireSelection(selection) : null,
-    configured: (live ? live.model.configured() : runtime.config.model) || null
-  });
+function omitReason(old, fresh) {
+  if (isBinary(old) || isBinary(fresh)) return "binary";
+  if (old.kind === "oversize" || fresh.kind === "oversize") return "too-large";
+  return void 0;
 }
-async function setModel(ctx, req, res, sessionId, lang) {
-  const live = ctx.runtime.sessionFactory.get(sessionId);
-  if (!live) return sendUnknownSession(res, sessionId);
-  const control = live.model;
+function isBinary(side) {
+  return side.kind === "content" && side.data.subarray(0, BINARY_SNIFF_BYTES).includes(0);
+}
+// src/workspace/handlers.ts
+async function createSession(ctx, req, res, lang) {
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const input = readModelSetBody(asRecord(body.value));
-  if (!input.ok)
-    return sendError(res, 400, "bad-model", t("web.model_bad_request", void 0, lang));
-  const ref = input.model === null ? null : toRef(input.model);
-  if (ref === void 0) {
-    return sendError(res, 400, "bad-model", t("web.model_bad_request", void 0, lang));
-  }
-  const selectionCtx = {
-    hasImages: sessionHasImages(live.session),
-    ...input.usedTokens === void 0 ? {} : { usedTokens: input.usedTokens }
-  };
-  const result = ref === null ? control.reset(selectionCtx) : control.set(ref, selectionCtx);
-  const payload = result.ok ? {
-    ok: true,
-    selection: toWireSelection(result.selection),
-    contextLength: result.contextLength,
-    caveats: result.caveats
-  } : { ok: false, rejection: result.rejection };
-  sendJson(res, 200, payload);
+  const outcome = await ensureSession(ctx, asRecord(body.value), lang);
+  if (!outcome.ok) return sendError(res, outcome.status, outcome.code, outcome.message);
+  sendJson(res, 200, {
+    sessionId: outcome.sessionId,
+    created: outcome.created,
+    workspace: outcome.workspace
+  });
 }
-function readModelSetBody(body) {
-  const { model, usedTokens } = body;
-  if (model !== null && (typeof model !== "string" || model.trim() === "")) return { ok: false };
-  const used = typeof usedTokens === "number" && Number.isFinite(usedTokens) && usedTokens >= 0 ? Math.floor(usedTokens) : void 0;
+async function ensureSession(ctx, payload, lang) {
+  const field = readWorkspaceField(payload, lang);
+  if (!field.ok) return { ok: false, status: 400, code: "bad-workspace", message: field.message };
+  const defer = payload["deferWorkspace"] === true;
+  if (defer && field.dir !== null) {
+    return {
+      ok: false,
+      status: 400,
+      code: "bad-request",
+      message: t("web.workspace_defer_with_root", void 0, lang)
+    };
+  }
+  if (defer && payload["create"] !== true) {
+    return {
+      ok: false,
+      status: 400,
+      code: "bad-request",
+      message: t("web.workspace_defer_needs_create", void 0, lang)
+    };
+  }
+  if (field.dir === null && payload["create"] !== true) {
+    const sessionId = ctx.runtime.sessionId;
+    const bound = ctx.runtime.workspaces.of(sessionId);
+    return {
+      ok: true,
+      sessionId,
+      created: false,
+      workspace: bound ? toWireSessionWorkspace(bound) : null
+    };
+  }
+  const role = typeof payload["role"] === "string" ? payload["role"].trim() : "";
+  const made = ctx.runtime.sessionFactory.create({
+    workspace: field.dir,
+    ...lang === void 0 ? {} : { lang },
+    reuse: payload["create"] !== true,
+    ...role === "" ? {} : { role }
+  });
+  if (!made.ok) {
+    if (made.reason === "unavailable") return { ok: false, ...unavailableToHttp(lang) };
+    if (made.reason === "unknown-role") {
+      return { ok: false, ...unknownRoleToHttp(made.detail, lang) };
+    }
+    return { ok: false, ...bindFailureToHttp(made, lang) };
+  }
+  ctx.hub.register(made.live.session);
+  if (defer) ctx.runtime.workspaces.defer(made.live.sessionId);
+  if (made.created) ctx.hub.notifySessionsChanged(made.live.sessionId);
   return {
     ok: true,
-    model: model === null ? null : model.trim(),
-    ...used === void 0 ? {} : { usedTokens: used }
+    sessionId: made.live.sessionId,
+    created: made.created,
+    workspace: made.live.workspace ? toWireSessionWorkspace(made.live.workspace) : null
   };
 }
-function planModeState(ctx, sessionId) {
-  if (!ctx.runtime.plan) return null;
-  const plan = ctx.runtime.sessionFactory.get(sessionId)?.plan;
-  if (!plan) return { active: false, from: null };
-  return { active: plan.active(), from: plan.from() };
+function sessionWorkspace(ctx, res, sessionId, lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId);
+  }
+  const state = ctx.runtime.workspaces.stateOf(sessionId);
+  if (state !== "none") {
+    return sendJson(res, 200, {
+      binding: toWireBinding(state, ctx.runtime.workspaces.of(sessionId))
+    });
+  }
+  if (ctx.hub.has(sessionId) || ctx.hub.isCooled(sessionId)) {
+    return sendJson(res, 200, {
+      binding: { state: "none" }
+    });
+  }
+  sendError(res, 409, "not-live-session", t("web.workspace_not_live", void 0, lang));
 }
-async function setPlanMode(ctx, req, res, sessionId, lang) {
-  const live = ctx.runtime.sessionFactory.get(sessionId);
-  if (!live) return sendUnknownSession(res, sessionId);
-  const plan = live.plan;
-  if (!plan) {
-    return sendError(res, 503, "no-plan-mode", t("web.plan_mode_unavailable", void 0, lang));
+async function bindWorkspace(ctx, req, res, sessionId, lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId);
   }
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const action = asRecord(body.value)["action"];
-  if (typeof action !== "string" || !isWirePlanAction(action)) {
+  const parsed = readBindWorkspaceBody(asRecord(body.value), lang);
+  if (!parsed.ok) return sendError(res, 400, "bad-workspace", parsed.message);
+  const state = ctx.runtime.workspaces.stateOf(sessionId);
+  if (state !== "unbound") {
     return sendError(
       res,
-      400,
-      "bad-action",
-      t("web.plan_mode_bad_action", { actions: WIRE_PLAN_ACTIONS.join("/") }, lang)
+      409,
+      "workspace-locked",
+      t("web.workspace_already_decided", void 0, lang)
     );
   }
-  const changed = action === "enter" ? plan.enter().ok : plan.leave() !== null;
+  const turn = ctx.hub.stateOf(sessionId);
+  if (turn !== "idle") {
+    return sendError(res, 409, "busy", t("web.workspace_turn_running", void 0, lang), {
+      "X-Epoch-Turn-State": turn
+    });
+  }
+  if (parsed.kind === "none") {
+    ctx.runtime.workspaces.decideNone(sessionId);
+    return sendJson(res, 200, {
+      binding: { state: "none" }
+    });
+  }
+  const outcome = ctx.runtime.workspaces.bind(sessionId, parsed.root, lang);
+  if (!outcome.ok) {
+    const mapped = bindFailureToHttp(outcome, lang);
+    return sendError(res, mapped.status, mapped.code, mapped.message);
+  }
   sendJson(res, 200, {
-    mode: { active: plan.active(), from: plan.from() },
-    changed
+    binding: { state: "bound", workspace: toWireSessionWorkspace(outcome.bound) }
   });
 }
-// src/permission.ts
-var REFUSAL = {
-  "managed-bypass-disabled": "managed"
-};
-function blockedLevels(managed) {
-  return managed.bypassDisabled ? [{ level: "bypass", reason: "managed" }] : [];
+async function sessionDiff(ctx, res, sessionId, _lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId);
+  }
+  const bound = ctx.runtime.workspaces.of(sessionId);
+  if (!bound) {
+    return sendJson(res, 200, {
+      source: "none",
+      root: "",
+      files: [],
+      truncated: false,
+      notes: ["no-workspace"]
+    });
+  }
+  sendJson(
+    res,
+    200,
+    await collectWorkspaceDiff({
+      workDir: bound.workspace.root,
+      checkpoints: checkpointsOf(ctx, sessionId)
+    })
+  );
 }
-function permissionState(ctx, sessionId) {
-  const perms = ctx.runtime.sessionFactory.get(sessionId)?.permissions ?? null;
-  return {
-    level: perms?.level() ?? ctx.runtime.config.permission,
-    editable: perms !== null,
-    blocked: perms ? blockedLevels(perms.managed()) : [],
-    planMode: planModeState(ctx, sessionId)
-  };
+// src/host-compose.ts
+async function postHostCompose(ctx, req, res, lang) {
+  const body = await readJsonBody(req, void 0, lang);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const sessionId = payload["sessionId"];
+  if (sessionId !== void 0 && typeof sessionId !== "string") {
+    return sendError(res, 400, "bad-request", t("web.host_compose_bad_request", void 0, lang));
+  }
+  if (sessionId !== void 0 && ["workspace", "create", "role", "deferWorkspace"].some((key) => payload[key] !== void 0)) {
+    return sendError(res, 400, "bad-request", t("web.host_compose_exclusive", void 0, lang));
+  }
+  const rawText = payload["text"];
+  if (rawText !== void 0 && typeof rawText !== "string") {
+    return sendError(res, 400, "bad-request", t("web.host_compose_bad_request", void 0, lang));
+  }
+  const text = rawText?.trim() ?? "";
+  if (rawText !== void 0 && text === "") {
+    return sendError(res, 400, "bad-request", t("web.host_compose_blank_text", void 0, lang));
+  }
+  const autoSend = payload["autoSend"] === true;
+  if (autoSend && text === "") {
+    return sendError(
+      res,
+      400,
+      "bad-request",
+      t("web.host_compose_autosend_needs_text", void 0, lang)
+    );
+  }
+  let target;
+  let created = false;
+  if (typeof sessionId === "string") {
+    if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+      return sendUnknownSession(res, sessionId, lang);
+    }
+    target = sessionId;
+  } else {
+    const outcome = await ensureSession(ctx, payload, lang);
+    if (!outcome.ok) return sendError(res, outcome.status, outcome.code, outcome.message);
+    target = outcome.sessionId;
+    created = outcome.created;
+  }
+  const item = ctx.hostCompose.record({ sessionId: target, text, autoSend });
+  ctx.hub.notifyHostCompose(target, { id: item.id, text, autoSend });
+  sendJson(res, 200, {
+    sessionId: target,
+    created,
+    composeId: item.id,
+    expiresAt: item.createdAt + HOST_COMPOSE_TTL_MS
+  });
 }
-function getPermission(ctx, res, sessionId, _lang) {
-  if (!ctx.hub.has(sessionId)) return sendUnknownSession(res, sessionId);
-  sendJson(res, 200, permissionState(ctx, sessionId));
+function getHostCompose(ctx, res) {
+  const item = ctx.hostCompose.pending();
+  sendJson(res, 200, {
+    compose: item === null ? null : toWireHostCompose(item)
+  });
 }
-async function setPermission(ctx, req, res, sessionId, lang) {
-  const live = ctx.runtime.sessionFactory.get(sessionId);
-  if (!live) return sendUnknownSession(res, sessionId);
-  const perms = live.permissions;
-  if (!perms) {
+function takeHostCompose(ctx, res, id) {
+  const result = ctx.hostCompose.take(id);
+  sendJson(
+    res,
+    200,
+    result === "ok" ? { ok: true } : { ok: false, reason: result }
+  );
+}
+async function putLastSession(ctx, req, res, lang) {
+  const control = ctx.runtime.lastOpenSession;
+  if (!control) {
     return sendError(
       res,
       503,
-      "no-permission-layer",
-      t("web.permission_unavailable", void 0, lang)
+      "no-last-session-store",
+      t("web.last_session_unavailable", {}, lang)
+    );
+  }
+  const body = await readJsonBody(req, void 0, lang);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  if (!conformsToWire(body.value, WIRE_LAST_SESSION_FIELDS)) {
+    return sendError(res, 400, "bad-request", t("web.last_session_bad_request", {}, lang));
+  }
+  const { sessionId } = body.value;
+  if (typeof sessionId !== "string" || sessionId.length === 0) {
+    return sendError(res, 400, "bad-request", t("web.last_session_bad_request", {}, lang));
+  }
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId, lang);
+  }
+  const failure = control.set(sessionId);
+  if (failure) return sendError(res, 500, "write-failed", failure(lang));
+  sendJson(res, 200, { ok: true });
+}
+function readConfig(ctx, res, lang) {
+  if (ctx.lanExposed) return sendLanExposed(res, lang);
+  const outcome = ctx.runtime.mcp.readConfig();
+  if (!outcome.ok) {
+    return sendError(
+      res,
+      409,
+      "mcp-config-unreadable",
+      t("web.mcp_config_unreadable", { detail: outcome.detail }, lang)
     );
   }
+  const { snapshot } = outcome;
+  sendJson(res, 200, {
+    configPath: snapshot.configPath,
+    text: snapshot.text,
+    exists: snapshot.exists,
+    revision: snapshot.revision,
+    issues: toWireIssues(snapshot.issues)
+  });
+}
+async function saveConfig(ctx, req, res, lang) {
+  if (ctx.lanExposed) return sendLanExposed(res, lang);
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const level = asRecord(body.value)["level"];
-  if (typeof level !== "string" || !isPermissionLevel(level)) {
+  const payload = asRecord(body.value);
+  const text = payload["text"];
+  const revision = payload["revision"];
+  if (typeof text !== "string" || typeof revision !== "string") {
     return sendError(
       res,
       400,
-      "bad-level",
-      t("web.permission_bad_level", { levels: PERMISSION_LEVELS.join("/") }, lang)
+      "bad-mcp-config-body",
+      t("web.mcp_config_bad_body", void 0, lang)
     );
   }
-  const before = perms.level();
-  const result = perms.setLevel(level, { remember: true });
-  const state = permissionState(ctx, sessionId);
-  const payload = result.ok ? {
-    ok: true,
-    changed: state.level !== before,
-    state,
-    ...result.notRemembered ? { notRemembered: result.notRemembered } : {}
-  } : { ok: false, refused: REFUSAL[result.reason], changed: false, state };
-  sendJson(res, 200, payload);
+  const outcome = ctx.runtime.mcp.writeConfig(text, revision, lang);
+  if (!outcome.ok) return sendError(res, ...saveFailure(outcome.reason, outcome.detail, lang));
+  sendJson(res, 200, {
+    configPath: outcome.configPath,
+    revision: outcome.revision,
+    issues: toWireIssues(outcome.issues)
+  });
 }
-// src/plan.ts
-function getPlan(ctx, res, sessionId, _lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId);
+async function applyConfig(ctx, req, res, lang) {
+  if (ctx.lanExposed) return sendLanExposed(res, lang);
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const revision = asRecord(body.value)["revision"];
+  if (typeof revision !== "string") {
+    return sendError(
+      res,
+      400,
+      "bad-mcp-config-body",
+      t("web.mcp_config_bad_body", void 0, lang)
+    );
   }
-  const live = ctx.runtime.sessionFactory.get(sessionId);
-  const markdown = live ? live.plan?.approvedPlan() ?? null : ctx.runtime.sessionStore?.loadPlan(sessionId) ?? null;
+  const outcome = await ctx.runtime.mcp.applyConfig(revision, lang);
+  if (!outcome.ok) return sendError(res, ...applyFailure(outcome.reason, outcome.detail, lang));
   sendJson(res, 200, {
-    plan: normalize(markdown),
-    mode: planModeState(ctx, sessionId)
+    configPath: outcome.configPath,
+    revision: outcome.revision,
+    issues: toWireIssues(outcome.issues),
+    changes: outcome.changes.map((change) => ({
+      name: change.name,
+      action: change.action,
+      ...change.status === void 0 ? {} : { server: toWireMcp(change.status) },
+      ...change.reason === void 0 ? {} : { reason: change.reason }
+    }))
   });
 }
-function normalize(markdown) {
-  return markdown?.trim() ? markdown : null;
+function sendLanExposed(res, lang) {
+  sendError(res, 403, "mcp-config-lan-exposed", t("web.mcp_config_lan_exposed", void 0, lang));
 }
-function toWireCounts(counts) {
-  return {
-    commands: counts.commands,
-    roles: counts.roles,
-    skills: counts.skills,
-    hooks: counts.hooks,
-    denyRules: counts.denyRules,
-    mcpServers: counts.mcpServers
-  };
+function saveFailure(reason, detail, lang) {
+  if (reason === "stale") {
+    return [409, "mcp-config-stale", t("web.mcp_config_stale", void 0, lang)];
+  }
+  if (reason === "invalid-json") return [400, "mcp-config-invalid-json", detail];
+  return [409, "mcp-config-unwritable", t("web.mcp_config_unwritable", { detail }, lang)];
 }
-function displayNamesOf(control) {
-  const out = /* @__PURE__ */ new Map();
-  for (const hit of control.search()) {
-    const shown = hit.entry.displayName;
-    if (shown !== void 0 && shown !== "") out.set(`${hit.marketplace}/${hit.entry.name}`, shown);
+function applyFailure(reason, detail, lang) {
+  if (reason === "unreadable") {
+    return [409, "mcp-config-unreadable", t("web.mcp_config_unreadable", { detail }, lang)];
   }
-  return out;
+  if (reason === "stale") {
+    return [409, "mcp-config-stale", t("web.mcp_config_stale", void 0, lang)];
+  }
+  if (reason === "invalid-json") return [400, "mcp-config-invalid-json", detail];
+  return [409, "mcp-config-no-servers", t("web.mcp_config_no_servers", { detail }, lang)];
 }
-function toWirePluginEntry(entry, displayNames) {
-  return {
-    name: entry.name,
-    displayName: displayNames.get(`${entry.marketplace}/${entry.name}`) ?? null,
-    version: entry.version,
-    source: entry.source,
-    sourceType: entry.sourceType,
-    path: entry.path,
-    linked: entry.linked,
-    enabled: entry.enabled,
-    installedAt: entry.installedAt,
-    marketplace: entry.marketplace ?? null,
-    active: entry.active,
-    counts: entry.counts ? toWireCounts(entry.counts) : null
-  };
+function toWireIssues(issues) {
+  return issues.map((issue) => ({ path: issue.path, message: issue.message }));
 }
-function toWirePluginHit(hit, installed) {
-  const mine = installed.get(hit.entry.name);
-  return {
-    marketplace: hit.marketplace,
-    ref: hit.ref,
-    name: hit.entry.name,
-    description: hit.entry.description ?? "",
-    category: hit.entry.category ?? null,
-    keywords: [...hit.entry.keywords ?? []],
-    sourceType: hit.sourceType ?? null,
-    installable: hit.installable,
-    installed: mine !== void 0,
-    author: hit.entry.author?.name ?? null,
-    downloads: hit.entry.downloads ?? null,
-    likes: hit.entry.likes ?? null,
-    displayName: hit.entry.displayName ?? null,
-    icon: hit.entry.icon ?? null,
-    version: hit.entry.version ?? null,
-    changelog: hit.entry.changelog ?? null,
-    size: hit.entry.size ?? null,
-    homepage: hit.entry.homepage ?? null,
-    visibility: hit.entry.visibility ?? null,
-    status: hit.entry.status ?? null,
-    updateAvailable: mine !== void 0 && !mine.linked && hit.entry.version !== void 0 && hit.entry.version !== mine.version
-  };
-}
-function toWireMarketplace(market) {
-  return {
-    name: market.name,
-    source: market.source,
-    entries: market.entries,
-    addedAt: market.addedAt,
-    local: market.local,
-    categories: (market.categories ?? []).map(toWireCategory)
-  };
-}
-function toWireCategory(node) {
-  return {
-    id: node.id,
-    label: node.label ?? node.id,
-    children: (node.children ?? []).map(toWireCategory)
-  };
-}
-function toWirePreview2(preview) {
-  const { manifest, source, inventory } = preview;
-  return {
-    name: manifest.name,
-    version: manifest.version,
-    description: manifest.description ?? "",
-    source: source.raw,
-    sourceType: source.type,
-    checksum: source.sha256 ?? null,
-    author: manifest.author?.name ?? null,
-    homepage: manifest.homepage ?? null,
-    commands: [...inventory.commands],
-    roles: [...inventory.roles],
-    skills: [...inventory.skills],
-    hooks: inventory.hooks.map((h) => ({ type: h.type, count: h.count })),
-    denyRules: inventory.denyRules,
-    mcpServers: [...inventory.mcpServers],
-    ignoredBuckets: [...inventory.ignoredBuckets],
-    hasJsTools: inventory.jsTools,
-    conflict: preview.conflict ? { name: preview.conflict.name, version: preview.conflict.version } : null
-  };
-}
-function controlOf(ctx, res, lang) {
-  const control = ctx.runtime.plugins;
-  if (!control) {
-    sendError(res, 503, "no-plugin-control", t("web.plugin_not_available", void 0, lang));
-    return null;
-  }
-  return control;
-}
-function refusedByLan(ctx, res, lang) {
-  if (!ctx.lanExposed) return false;
-  sendError(
-    res,
-    403,
-    "plugin-write-lan-exposed",
-    t("web.plugin_write_lan_exposed", void 0, lang)
-  );
-  return true;
-}
-function fieldOf(payload, key) {
-  const value = payload[key];
-  return typeof value === "string" ? value.trim() : "";
-}
-function uploadFormOf(payload) {
-  const form = {};
-  for (const name of WIRE_PLUGIN_UPLOAD_FORM_FIELDS) {
-    const raw = fieldOf(payload, name);
-    if (raw === "") continue;
-    if (name === "visibility") {
-      if (raw === "private" || raw === "public") form[name] = raw;
-      continue;
-    }
-    form[name] = raw;
-  }
-  return form;
-}
-function listPlugins(ctx, res, lang) {
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  sendJson(res, 200, pluginsPayload(control));
-}
-function pluginsPayload(control) {
-  const installed = control.list();
-  const installedMap = new Map(
-    installed.map((p) => [p.name, { version: p.version, linked: p.linked }])
-  );
-  const shown = displayNamesOf(control);
-  return {
-    installed: installed.map((p) => toWirePluginEntry(p, shown)),
-    hits: control.search().map((hit) => toWirePluginHit(hit, installedMap)),
-    marketplaces: control.marketplaces().map(toWireMarketplace),
-    pendingRestart: control.pendingRestart,
-    uploadEnabled: control.uploadEnabled,
-    uploadOptions: control.uploadOptions,
-    refreshEnabled: control.refreshEnabled
-  };
-}
-function sendPreview(res, outcome) {
+async function reconnectMcp(ctx, res, name, lang) {
+  const outcome = await ctx.runtime.mcp.reconnect(name);
   if (!outcome.ok) {
+    if (outcome.reason === "unknown") {
+      return sendError(res, 404, "unknown-mcp-server", t("web.mcp_unknown_server", { name }, lang));
+    }
+    const status = {
+      ...outcome.status,
+      ...outcome.detail === void 0 ? {} : { lastError: outcome.detail }
+    };
     return sendJson(res, 200, {
       ok: false,
-      preview: null,
-      token: null,
-      reason: outcome.reason,
-      detail: outcome.detail
+      server: toWireMcp(status)
     });
   }
   sendJson(res, 200, {
     ok: true,
-    preview: toWirePreview2(outcome.preview),
-    token: outcome.token,
-    reason: null,
-    detail: null
+    server: toWireMcp(outcome.status)
   });
 }
-async function previewPluginInstall(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendPreview(res, await control.preview(fieldOf(asRecord(body.value), "ref"), lang));
-}
-async function previewLocalPluginInstall(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendPreview(res, await control.previewLocal(fieldOf(asRecord(body.value), "path"), lang));
-}
-async function previewPluginUpdate(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
+async function addMcp(ctx, req, res, lang) {
+  if (ctx.lanExposed) {
+    return sendError(
+      res,
+      403,
+      "mcp-add-lan-exposed",
+      t("web.mcp_add_lan_exposed", void 0, lang)
+    );
+  }
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendPreview(res, await control.previewUpdate(fieldOf(asRecord(body.value), "name"), lang));
-}
-function sendAction(res, control, outcome) {
+  const payload = asRecord(body.value);
+  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
+  const transport = payload["transport"];
+  if (transport !== "stdio" && transport !== "sse" && transport !== "http") {
+    return sendError(res, 400, "bad-mcp-config", t("web.mcp_add_bad_transport", void 0, lang));
+  }
+  const outcome = await ctx.runtime.mcp.add({
+    name,
+    transport,
+    ...typeof payload["command"] === "string" ? { command: payload["command"].trim() } : {},
+    ...Array.isArray(payload["args"]) ? { args: stringList(payload["args"]) } : {},
+    ...typeof payload["url"] === "string" ? { url: payload["url"].trim() } : {},
+    ...payload["env"] === void 0 ? {} : { env: stringMap(payload["env"]) }
+  });
   if (!outcome.ok) {
-    return sendJson(res, 200, {
-      ok: false,
-      entry: null,
-      pendingRestart: control.pendingRestart,
-      detail: outcome.detail,
-      reason: outcome.reason
-    });
+    return sendError(res, ...addFailure(outcome.reason, outcome.detail, name, lang));
   }
-  const fresh = "record" in outcome ? control.list().find((p) => p.name === outcome.record.name) : void 0;
   sendJson(res, 200, {
-    ok: true,
-    entry: fresh ? toWirePluginEntry(fresh, displayNamesOf(control)) : null,
-    pendingRestart: control.pendingRestart,
-    detail: "detail" in outcome ? outcome.detail : null,
-    reason: null
+    server: toWireMcp(outcome.status),
+    configPath: outcome.configPath
   });
 }
-async function installPluginFromMarket(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  sendAction(
-    res,
-    control,
-    await control.install(fieldOf(payload, "ref"), fieldOf(payload, "token"), lang)
-  );
+function addFailure(reason, detail, name, lang) {
+  if (reason === "invalid-name") {
+    return [400, "bad-mcp-name", t("web.mcp_add_bad_name", { name }, lang)];
+  }
+  if (reason === "invalid-config") return [400, "bad-mcp-config", detail];
+  if (reason === "duplicate")
+    return [409, "mcp-name-taken", t("web.mcp_add_taken", { name }, lang)];
+  return [409, "mcp-config-unwritable", t("web.mcp_add_unwritable", { detail }, lang)];
 }
-async function installLocalPlugin(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  sendAction(
-    res,
-    control,
-    await control.installLocal(fieldOf(payload, "path"), fieldOf(payload, "token"), lang)
-  );
+function stringList(value) {
+  return value.filter((v) => typeof v === "string");
 }
-async function stagePlugin(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const asJson = (req.headers["content-type"] ?? "").toLowerCase().includes("application/json");
-  if (asJson) {
-    const body = await readJsonBody(req, void 0, lang);
-    if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-    return sendStage(
-      res,
-      await control.stage({ kind: "path", path: fieldOf(asRecord(body.value), "path") }, lang)
-    );
+function stringMap(value) {
+  const out = {};
+  for (const [k, v] of Object.entries(asRecord(value))) {
+    if (typeof v === "string") out[k] = v;
   }
-  const raw = await readRawBody(req, PLUGIN_UPLOAD_BODY_LIMIT, lang);
-  if (!raw.ok) return sendError(res, raw.status, "bad-body", raw.message);
-  return sendStage(
-    res,
-    await control.stage({ kind: "bytes", name: nameParam2(req), data: raw.value }, lang)
-  );
+  return out;
 }
-function nameParam2(req) {
-  try {
-    return new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("name") ?? "";
-  } catch {
-    return "";
-  }
+function toRef(raw) {
+  return parseModelRef(raw);
 }
-function sendStage(res, outcome) {
-  const payload = outcome.ok ? {
-    ok: true,
-    path: outcome.path,
-    name: outcome.name,
-    version: outcome.version,
-    detail: null,
-    reason: null
-  } : {
-    ok: false,
-    path: null,
-    name: null,
-    version: null,
-    detail: outcome.detail,
-    reason: outcome.reason
-  };
-  sendJson(res, 200, payload);
-}
-async function updateInstalledPlugin(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  sendAction(
-    res,
-    control,
-    await control.update(fieldOf(payload, "name"), fieldOf(payload, "token"), lang)
-  );
+function toWireSelection(selection) {
+  return { provider: selection.provider, model: selection.model, origin: selection.origin };
 }
-async function uninstallPluginByName(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendAction(res, control, await control.uninstall(fieldOf(asRecord(body.value), "name"), lang));
+function sessionHasImages(session) {
+  const history = session?.getHistory() ?? [];
+  return history.some((m) => m.parts?.some((p) => p.type === "image"));
 }
-function sendMarket(res, outcome) {
+function getModel(ctx, res, sessionId, _lang) {
+  const { runtime } = ctx;
+  const live = runtime.sessionFactory.get(sessionId);
+  const selection = live?.model.get();
   sendJson(res, 200, {
-    ok: outcome.ok,
-    marketplace: outcome.ok && outcome.marketplace ? toWireMarketplace(outcome.marketplace) : null,
-    reason: outcome.ok ? null : outcome.reason,
-    detail: outcome.ok ? null : outcome.detail
-  });
-}
-async function addPluginMarketplace(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendMarket(res, await control.addMarketplace(fieldOf(asRecord(body.value), "source"), lang));
-}
-async function removePluginMarketplace(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendMarket(res, await control.removeMarketplace(fieldOf(asRecord(body.value), "name"), lang));
-}
-function previewPluginUpload(ctx, req, res, lang) {
-  return withUploadBody(ctx, req, res, lang, (control, payload) => {
-    sendUploadPreview(res, control.previewUpload(fieldOf(payload, "path"), lang));
-  });
-}
-function uploadPlugin(ctx, req, res, lang) {
-  return withUploadBody(ctx, req, res, lang, async (control, payload) => {
-    sendUpload(
-      res,
-      await control.upload(
-        fieldOf(payload, "path"),
-        fieldOf(payload, "token"),
-        uploadFormOf(payload),
-        lang
-      )
-    );
+    selection: selection ? toWireSelection(selection) : null,
+    configured: (live ? live.model.configured() : runtime.config.model) || null
   });
 }
-async function withUploadBody(ctx, req, res, lang, run) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
+async function setModel(ctx, req, res, sessionId, lang) {
+  const live = ctx.runtime.sessionFactory.get(sessionId);
+  if (!live) return sendUnknownSession(res, sessionId);
+  const control = live.model;
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  await run(control, asRecord(body.value));
-}
-function sendUploadPreview(res, outcome) {
-  if (!outcome.ok) {
-    return sendJson(res, 200, {
-      ok: false,
-      plan: null,
-      token: null,
-      prefill: null,
-      fromManifest: null,
-      reason: outcome.reason,
-      detail: outcome.detail
-    });
-  }
-  const { manifest, files, totalBytes, suspicious, skippedLinks } = outcome.plan;
-  sendJson(res, 200, {
-    ok: true,
-    plan: {
-      name: manifest.name,
-      version: manifest.version,
-      description: manifest.description ?? "",
-      author: manifest.author?.name ?? null,
-      files: files.map((f) => ({ path: f.path, bytes: f.bytes })),
-      totalBytes,
-      suspicious: [...suspicious],
-      skippedLinks: [...skippedLinks]
-    },
-    token: outcome.token,
-    prefill: outcome.prefill,
-    fromManifest: [...outcome.fromManifest],
-    reason: null,
-    detail: null
-  });
-}
-function sendUpload(res, outcome) {
-  sendJson(res, 200, {
-    ok: outcome.ok,
-    detail: outcome.detail,
-    uploaded: outcome.ok ? { name: outcome.name, version: outcome.version, bytes: outcome.bytes } : null,
-    reason: outcome.ok ? null : outcome.reason
-  });
-}
-async function refreshPlugins(ctx, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const outcome = await control.refresh(lang);
-  if (!outcome.ok) {
-    return sendJson(res, 200, {
-      ok: false,
-      plugins: null,
-      reason: outcome.reason,
-      detail: outcome.detail
-    });
+  const input = readModelSetBody(asRecord(body.value));
+  if (!input.ok)
+    return sendError(res, 400, "bad-model", t("web.model_bad_request", void 0, lang));
+  const ref = input.model === null ? null : toRef(input.model);
+  if (ref === void 0) {
+    return sendError(res, 400, "bad-model", t("web.model_bad_request", void 0, lang));
   }
-  sendJson(res, 200, {
-    ok: true,
-    plugins: pluginsPayload(control),
-    reason: null,
-    detail: outcome.detail === "" ? null : outcome.detail
-  });
-}
-function toWireProvider(option, lang) {
-  return {
-    type: option.type,
-    label: providerLabel(option, lang),
-    envVar: option.envVar,
-    hasKey: option.hasKey,
-    keyHint: option.keyHint,
-    current: option.current
+  const selectionCtx = {
+    hasImages: sessionHasImages(live.session),
+    ...input.usedTokens === void 0 ? {} : { usedTokens: input.usedTokens }
   };
+  const result = ref === null ? control.reset(selectionCtx) : control.set(ref, selectionCtx);
+  const payload = result.ok ? {
+    ok: true,
+    selection: toWireSelection(result.selection),
+    contextLength: result.contextLength,
+    caveats: result.caveats
+  } : { ok: false, rejection: result.rejection };
+  sendJson(res, 200, payload);
 }
-function toWireSuggestions(view) {
+function readModelSetBody(body) {
+  const { model, usedTokens } = body;
+  if (model !== null && (typeof model !== "string" || model.trim() === "")) return { ok: false };
+  const used = typeof usedTokens === "number" && Number.isFinite(usedTokens) && usedTokens >= 0 ? Math.floor(usedTokens) : void 0;
   return {
-    provider: view.provider,
-    models: view.models,
-    source: view.source,
-    status: view.status
+    ok: true,
+    model: model === null ? null : model.trim(),
+    ...used === void 0 ? {} : { usedTokens: used }
   };
 }
-function listProviders(ctx, res, lang) {
-  sendJson(res, 200, {
-    providers: ctx.runtime.modelCatalog.providers().map((o) => toWireProvider(o, lang))
-  });
+function planModeState(ctx, sessionId) {
+  if (!ctx.runtime.plan) return null;
+  const plan = ctx.runtime.sessionFactory.get(sessionId)?.plan;
+  if (!plan) return { active: false, from: null };
+  return { active: plan.active(), from: plan.from() };
 }
-async function discoverProviderModels(ctx, req, res, type, lang) {
-  if (!isProviderType(type)) {
-    return sendError(res, 404, "unknown-provider", t("web.provider_unknown", { name: type }, lang));
+async function setPlanMode(ctx, req, res, sessionId, lang) {
+  const live = ctx.runtime.sessionFactory.get(sessionId);
+  if (!live) return sendUnknownSession(res, sessionId);
+  const plan = live.plan;
+  if (!plan) {
+    return sendError(res, 503, "no-plan-mode", t("web.plan_mode_unavailable", void 0, lang));
   }
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const refresh = asRecord(body.value).refresh === true;
-  const suggestions = await ctx.runtime.modelCatalog.discover(type, { refresh });
-  sendJson(res, 200, {
-    suggestions: toWireSuggestions(suggestions)
-  });
-}
-async function setProviderKey(ctx, req, res, type, lang) {
-  if (!isProviderType(type)) {
-    return sendError(res, 404, "unknown-provider", t("web.provider_unknown", { name: type }, lang));
-  }
-  const envVar = apiKeyEnvVar(type);
-  if (envVar === null) {
+  const action = asRecord(body.value)["action"];
+  if (typeof action !== "string" || !isWirePlanAction(action)) {
     return sendError(
       res,
       400,
-      "key-not-applicable",
-      t("web.provider_key_not_applicable", { name: type }, lang)
+      "bad-action",
+      t("web.plan_mode_bad_action", { actions: WIRE_PLAN_ACTIONS.join("/") }, lang)
     );
   }
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const raw = asRecord(body.value)["apiKey"];
-  const apiKey = typeof raw === "string" ? raw.trim() : "";
-  if (apiKey === "") {
-    return sendError(res, 400, "empty-key", t("web.provider_key_empty", void 0, lang));
-  }
-  const written = await ctx.runtime.modelCatalog.setKey(type, apiKey);
+  const changed = action === "enter" ? plan.enter().ok : plan.leave() !== null;
   sendJson(res, 200, {
-    provider: type,
-    hasKey: true,
-    keyHint: written.keyHint,
-    backend: written.backend,
-    encrypted: written.encrypted,
-    envPath: written.envPath
+    mode: { active: plan.active(), from: plan.from() },
+    changed
   });
 }
-async function setDefaultModel(ctx, req, res, lang) {
-  if (ctx.runtime.providerInfo !== null) {
-    return sendError(
-      res,
-      409,
-      "provider-available",
-      t("web.model_default_has_provider", void 0, lang)
-    );
-  }
-  const body = await readJsonBody(req, void 0, lang);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const raw = asRecord(body.value)["model"];
-  const model = typeof raw === "string" ? raw.trim() : "";
-  if (model === "") {
-    return sendError(res, 400, "bad-request", t("web.model_default_empty", void 0, lang));
-  }
-  const report = ctx.runtime.settings.write({ key: "model", layer: "user", value: model });
-  if (!report.ok) {
-    const failure = settingWriteFailure(report);
-    return sendError(
-      res,
-      failure.status,
-      failure.code,
-      t(failure.key, { path: failure.path }, lang)
-    );
-  }
-  sendJson(res, 200, toWireSettingsWrite(report));
+// src/permission.ts
+var REFUSAL = {
+  "managed-bypass-disabled": "managed"
+};
+function blockedLevels(managed) {
+  return managed.bypassDisabled ? [{ level: "bypass", reason: "managed" }] : [];
 }
-async function addRole(ctx, req, res, lang) {
-  if (ctx.lanExposed) {
+function permissionState(ctx, sessionId) {
+  const perms = ctx.runtime.sessionFactory.get(sessionId)?.permissions ?? null;
+  return {
+    level: perms?.level() ?? ctx.runtime.config.permission,
+    editable: perms !== null,
+    blocked: perms ? blockedLevels(perms.managed()) : [],
+    planMode: planModeState(ctx, sessionId)
+  };
+}
+function getPermission(ctx, res, sessionId, _lang) {
+  if (!ctx.hub.has(sessionId)) return sendUnknownSession(res, sessionId);
+  sendJson(res, 200, permissionState(ctx, sessionId));
+}
+async function setPermission(ctx, req, res, sessionId, lang) {
+  const live = ctx.runtime.sessionFactory.get(sessionId);
+  if (!live) return sendUnknownSession(res, sessionId);
+  const perms = live.permissions;
+  if (!perms) {
     return sendError(
       res,
-      403,
-      "role-add-lan-exposed",
-      t("web.role_add_lan_exposed", void 0, lang)
+      503,
+      "no-permission-layer",
+      t("web.permission_unavailable", void 0, lang)
     );
   }
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const outcome = ctx.runtime.roleWrite.add(
-    {
-      name: typeof payload["name"] === "string" ? payload["name"].trim() : "",
-      description: typeof payload["description"] === "string" ? payload["description"].trim() : "",
-      ...typeof payload["prompt"] === "string" ? { prompt: payload["prompt"] } : {},
-      ...Array.isArray(payload["tools"]) ? { tools: stringList2(payload["tools"]) } : {},
-      ...Array.isArray(payload["skills"]) ? { skills: stringList2(payload["skills"]) } : {},
-      ...typeof payload["maxTurns"] === "number" ? { maxTurns: payload["maxTurns"] } : {}
-    },
-    lang
-  );
-  if (!outcome.ok) return sendError(res, ...addFailure2(outcome.reason, outcome.detail, lang));
-  sendJson(res, 200, {
-    role: toWireRole(outcome.role, ctx.runtime.agentRoleNotices),
-    path: outcome.path
-  });
-}
-function addFailure2(reason, detail, lang) {
-  if (reason === "invalid-name") return [400, "bad-role-name", detail];
-  if (reason === "invalid-field")
-    return [400, "bad-role-field", t("web.role_add_bad_field", { detail }, lang)];
-  if (reason === "unknown-tool") return [400, "bad-role-tools", detail];
-  if (reason === "duplicate") return [409, "role-name-taken", detail];
-  return [409, "role-unwritable", detail];
-}
-function stringList2(value) {
-  return value.filter((v) => typeof v === "string");
-}
-async function removeRole(ctx, req, res, lang) {
-  if (ctx.lanExposed) {
+  const level = asRecord(body.value)["level"];
+  if (typeof level !== "string" || !isPermissionLevel(level)) {
     return sendError(
       res,
-      403,
-      "role-remove-lan-exposed",
-      t("web.role_remove_lan_exposed", void 0, lang)
+      400,
+      "bad-level",
+      t("web.permission_bad_level", { levels: PERMISSION_LEVELS.join("/") }, lang)
     );
   }
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
-  const outcome = ctx.runtime.roleWrite.remove(name, lang);
-  if (!outcome.ok) {
-    return sendJson(res, 200, {
-      ok: false,
-      name: "",
-      path: null,
-      takenOverBy: null,
-      detail: outcome.detail,
-      reason: outcome.reason
-    });
+  const before = perms.level();
+  const result = perms.setLevel(level, { remember: true });
+  const state = permissionState(ctx, sessionId);
+  const payload = result.ok ? {
+    ok: true,
+    changed: state.level !== before,
+    state,
+    ...result.notRemembered ? { notRemembered: result.notRemembered } : {}
+  } : { ok: false, refused: REFUSAL[result.reason], changed: false, state };
+  sendJson(res, 200, payload);
+}
+// src/plan.ts
+function getPlan(ctx, res, sessionId, _lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId);
   }
+  const live = ctx.runtime.sessionFactory.get(sessionId);
+  const markdown = live ? live.plan?.approvedPlan() ?? null : ctx.runtime.sessionStore?.loadPlan(sessionId) ?? null;
   sendJson(res, 200, {
-    ok: true,
-    name: outcome.name,
-    path: outcome.path,
-    takenOverBy: outcome.takenOverBy,
-    detail: null,
-    reason: null
+    plan: normalize(markdown),
+    mode: planModeState(ctx, sessionId)
   });
 }
-function stringList3(value) {
-  if (!Array.isArray(value)) return null;
-  const out = [];
-  for (const item of value) {
-    if (typeof item !== "string" || item.trim().length === 0) return null;
-    out.push(item);
-  }
-  return out;
+function normalize(markdown) {
+  return markdown?.trim() ? markdown : null;
 }
-function operationList(value) {
-  if (!Array.isArray(value)) return null;
-  const out = [];
-  for (const item of value) {
-    if (typeof item !== "string" || !isOperationType(item)) return null;
-    out.push(item);
+function toWireCounts(counts) {
+  return {
+    commands: counts.commands,
+    roles: counts.roles,
+    skills: counts.skills,
+    hooks: counts.hooks,
+    denyRules: counts.denyRules,
+    mcpServers: counts.mcpServers
+  };
+}
+function displayNamesOf(control) {
+  const out = /* @__PURE__ */ new Map();
+  for (const hit of control.search()) {
+    const shown = hit.entry.displayName;
+    if (shown !== void 0 && shown !== "") out.set(`${hit.marketplace}/${hit.entry.name}`, shown);
   }
   return out;
 }
-function finite(value) {
-  return typeof value === "number" && Number.isFinite(value) ? value : null;
+function toWirePluginEntry(entry, displayNames) {
+  return {
+    name: entry.name,
+    displayName: displayNames.get(`${entry.marketplace}/${entry.name}`) ?? null,
+    version: entry.version,
+    source: entry.source,
+    sourceType: entry.sourceType,
+    path: entry.path,
+    linked: entry.linked,
+    enabled: entry.enabled,
+    installedAt: entry.installedAt,
+    marketplace: entry.marketplace ?? null,
+    active: entry.active,
+    counts: entry.counts ? toWireCounts(entry.counts) : null,
+    updateAllowed: entry.updateAllowed,
+    uninstallAllowed: entry.uninstallAllowed
+  };
 }
-function parseTrigger(value) {
-  const raw = asRecord(value);
-  const kind = raw["kind"];
-  const at = raw["at"];
-  if (kind === "interval") {
-    const every = finite(raw["everyMinutes"]);
-    return every === null ? null : { kind: "interval", everyMinutes: every };
-  }
-  if (typeof at !== "string") return null;
-  if (kind === "once") {
-    const date = raw["date"];
-    return typeof date === "string" ? { kind: "once", date, at } : null;
-  }
-  if (kind !== "cron") return null;
-  const cycle = raw["cycle"];
-  if (cycle === "daily") return { kind: "cron", cycle: "daily", at };
-  if (cycle === "weekly") {
-    const days = weekdayList(raw["weekdays"]);
-    return days === null ? null : { kind: "cron", cycle: "weekly", at, weekdays: days };
-  }
-  if (cycle === "monthly") {
-    const days = numberList(raw["days"]);
-    return days === null ? null : { kind: "cron", cycle: "monthly", at, days };
-  }
-  return null;
+function toWirePluginHit(hit, installed) {
+  const mine = installed.get(hit.entry.name);
+  return {
+    marketplace: hit.marketplace,
+    ref: hit.ref,
+    name: hit.entry.name,
+    description: hit.entry.description ?? "",
+    category: hit.entry.category ?? null,
+    keywords: [...hit.entry.keywords ?? []],
+    sourceType: hit.sourceType ?? null,
+    installable: hit.installable,
+    installed: mine !== void 0,
+    author: hit.entry.author?.name ?? null,
+    downloads: hit.entry.downloads ?? null,
+    likes: hit.entry.likes ?? null,
+    displayName: hit.entry.displayName ?? null,
+    icon: hit.entry.icon ?? null,
+    version: hit.entry.version ?? null,
+    changelog: hit.entry.changelog ?? null,
+    size: hit.entry.size ?? null,
+    homepage: hit.entry.homepage ?? null,
+    visibility: hit.entry.visibility ?? null,
+    status: hit.entry.status ?? null,
+    updateAvailable: mine !== void 0 && !mine.linked && hit.entry.version !== void 0 && hit.entry.version !== mine.version,
+    installAllowed: hit.installAllowed,
+    updateAllowed: mine?.updateAllowed ?? false,
+    menu: hit.menu.map((item) => ({
+      id: item.id,
+      label: item.label,
+      danger: item.danger === true
+    }))
+  };
 }
-function weekdayList(value) {
-  if (!Array.isArray(value)) return null;
-  const out = [];
-  for (const item of value) {
-    if (typeof item !== "number" || !Number.isInteger(item) || item < 0 || item > 6) return null;
-    out.push(item);
-  }
-  return out;
+function toWireMarketplace(market) {
+  return {
+    name: market.name,
+    source: market.source,
+    entries: market.entries,
+    addedAt: market.addedAt,
+    local: market.local,
+    categories: (market.categories ?? []).map(toWireCategory)
+  };
 }
-function numberList(value) {
-  if (!Array.isArray(value)) return null;
-  const out = [];
-  for (const item of value) {
-    if (typeof item !== "number" || !Number.isInteger(item)) return null;
-    out.push(item);
-  }
-  return out;
+function toWireCategory(node) {
+  return {
+    id: node.id,
+    label: node.label ?? node.id,
+    children: (node.children ?? []).map(toWireCategory)
+  };
 }
-var CLEARABLE = ["model", "role", "workDir", "startDate", "endDate"];
-function optionals(raw, allowClear, lang) {
-  const out = {};
-  const bad = (field) => ({
-    ok: false,
-    message: t("web.schedule_bad_field", { field }, lang)
-  });
-  for (const key of ["name", "prompt"]) {
-    const value = raw[key];
-    if (value === void 0) continue;
-    if (typeof value !== "string") return bad(key);
-    out[key] = value;
-  }
-  for (const key of CLEARABLE) {
-    const value = raw[key];
-    if (value === void 0) continue;
-    if (value === null) {
-      if (!allowClear) return bad(key);
-      out[key] = null;
-      continue;
-    }
-    if (typeof value !== "string") return bad(key);
-    out[key] = value;
-  }
-  for (const key of ["maxTurns", "maxBudgetUsd", "timeoutMs"]) {
-    const value = raw[key];
-    if (value === void 0) continue;
-    const num = finite(value);
-    if (num === null)
-      return { ok: false, message: t("web.schedule_bad_field", { field: key }, lang) };
-    out[key] = num;
-  }
-  for (const key of ["allowTools", "allowRules"]) {
-    const value = raw[key];
-    if (value === void 0) continue;
-    const list = stringList3(value);
-    if (list === null)
-      return { ok: false, message: t("web.schedule_bad_field", { field: key }, lang) };
-    out[key] = list;
-  }
-  if (raw["allowOperations"] !== void 0) {
-    const ops = operationList(raw["allowOperations"]);
-    if (ops === null) {
-      return {
-        ok: false,
-        message: t("web.schedule_bad_operation", { types: OPERATION_TYPES.join("/") }, lang)
-      };
-    }
-    out.allowOperations = ops;
-  }
-  for (const key of ["enabled", "showInSessionList"]) {
-    const value = raw[key];
-    if (value === void 0) continue;
-    if (typeof value !== "boolean") {
-      return { ok: false, message: t("web.schedule_bad_field", { field: key }, lang) };
-    }
-    out[key] = value;
-  }
-  if (raw["permission"] !== void 0) {
-    const level = raw["permission"];
-    if (typeof level !== "string" || !isPermissionLevel(level)) {
-      return { ok: false, message: t("web.schedule_bad_permission", void 0, lang) };
-    }
-    out.permission = level;
-  }
-  if (raw["trigger"] !== void 0) {
-    const trigger = parseTrigger(raw["trigger"]);
-    if (trigger === null)
-      return { ok: false, message: t("web.schedule_bad_trigger", void 0, lang) };
-    out.trigger = trigger;
-  }
-  return { ok: true, value: out };
-}
-function bypassAcknowledged(body) {
-  return asRecord(body)["bypassAcknowledged"] === true;
-}
-function parseCreate2(body, lang) {
-  const raw = asRecord(body);
-  const name = raw["name"];
-  const prompt = raw["prompt"];
-  const permission = raw["permission"];
-  const budget = finite(raw["maxBudgetUsd"]);
-  if (typeof name !== "string" || typeof prompt !== "string") {
-    return { ok: false, message: t("web.schedule_create_incomplete", void 0, lang) };
-  }
-  if (typeof permission !== "string" || !isPermissionLevel(permission)) {
-    return { ok: false, message: t("web.schedule_bad_permission", void 0, lang) };
-  }
-  const trigger = parseTrigger(raw["trigger"]);
-  if (trigger === null)
-    return { ok: false, message: t("web.schedule_bad_trigger", void 0, lang) };
-  if (budget === null)
-    return { ok: false, message: t("web.schedule_budget_required", void 0, lang) };
-  const rest = optionals(raw, false, lang);
-  if (!rest.ok) return rest;
+function toWirePreview2(preview) {
+  const { manifest, source, inventory } = preview;
   return {
-    ok: true,
-    value: { ...rest.value, name, prompt, permission, trigger, maxBudgetUsd: budget }
+    name: manifest.name,
+    version: manifest.version,
+    description: manifest.description ?? "",
+    source: source.raw,
+    sourceType: source.type,
+    checksum: source.sha256 ?? null,
+    author: manifest.author?.name ?? null,
+    homepage: manifest.homepage ?? null,
+    commands: [...inventory.commands],
+    roles: [...inventory.roles],
+    skills: [...inventory.skills],
+    hooks: inventory.hooks.map((h) => ({ type: h.type, count: h.count })),
+    denyRules: inventory.denyRules,
+    mcpServers: [...inventory.mcpServers],
+    ignoredBuckets: [...inventory.ignoredBuckets],
+    hasJsTools: inventory.jsTools,
+    conflict: preview.conflict ? { name: preview.conflict.name, version: preview.conflict.version } : null
   };
 }
-function parseUpdate2(body, lang) {
-  return optionals(asRecord(body), true, lang);
-}
-function parseFix(body, lang) {
-  const runId = asRecord(body)["runId"];
-  if (typeof runId !== "string" || runId.trim().length === 0) {
-    return { ok: false, message: t("web.schedule_fix_needs_run", void 0, lang) };
-  }
-  return { ok: true, value: runId };
-}
-// src/schedule/handlers.ts
-var RECENT_RUNS_LIMIT = 100;
-var RUNS_LIMIT = 20;
-var MAX_RECORDING_FRAMES = 4e3;
-function schedulesOf(ctx, res, lang) {
-  const control = ctx.runtime.schedules;
-  if (!control.storeAvailable) {
-    sendError(res, 503, "no-schedule-store", t("web.schedule_store_unavailable", void 0, lang));
+function controlOf(ctx, res, lang) {
+  const control = ctx.runtime.plugins;
+  if (!control) {
+    sendError(res, 503, "no-plugin-control", t("web.plugin_not_available", void 0, lang));
     return null;
   }
   return control;
 }
-function toWireRow(control, def) {
-  return {
-    schedule: def,
-    nextRunAt: def.enabled ? nextRunAt(def.trigger, Date.now(), def.startDate, def.endDate) : null,
-    allowlistApplies: control.needsAllowlist(def.permission)
-  };
+function refusedByLan(ctx, res, lang) {
+  if (!ctx.lanExposed) return false;
+  sendError(
+    res,
+    403,
+    "plugin-write-lan-exposed",
+    t("web.plugin_write_lan_exposed", void 0, lang)
+  );
+  return true;
 }
-function defaultsOf(ctx) {
-  return {
-    maxTurns: ctx.runtime.config.maxTurns,
-    timeoutMs: SCHEDULE_DEFAULTS.timeoutMs,
-    maxBudgetUsd: SCHEDULE_FORM_BUDGET_USD,
-    allowTools: SCHEDULE_DEFAULT_ALLOWLIST.allowTools,
-    allowOperations: SCHEDULE_DEFAULT_ALLOWLIST.allowOperations,
-    allowRules: SCHEDULE_DEFAULT_ALLOWLIST.allowRules
-  };
+function fieldOf(payload, key) {
+  const value = payload[key];
+  return typeof value === "string" ? value.trim() : "";
 }
-async function listSchedules(ctx, res, lang) {
-  const control = schedulesOf(ctx, res, lang);
+function uploadFormOf(payload) {
+  const form = {};
+  for (const name of WIRE_PLUGIN_UPLOAD_FORM_FIELDS) {
+    const raw = fieldOf(payload, name);
+    if (raw === "") continue;
+    if (name === "visibility") {
+      if (raw === "private" || raw === "public") form[name] = raw;
+      continue;
+    }
+    form[name] = raw;
+  }
+  return form;
+}
+function listPlugins(ctx, res, lang) {
+  const control = controlOf(ctx, res, lang);
   if (!control) return;
-  const capability = await control.capability();
-  const payload = {
-    schedules: control.list().map((def) => toWireRow(control, def)),
-    capability: { backend: capability.backend, canRegister: capability.canRegister },
-    defaults: defaultsOf(ctx),
-    recentRuns: control.recentRuns(RECENT_RUNS_LIMIT)
+  sendJson(res, 200, pluginsPayload(control));
+}
+function pluginsPayload(control) {
+  const installed = control.list();
+  const installedMap = new Map(
+    installed.map((p) => [
+      p.name,
+      { version: p.version, linked: p.linked, updateAllowed: p.updateAllowed }
+    ])
+  );
+  const shown = displayNamesOf(control);
+  return {
+    installed: installed.map((p) => toWirePluginEntry(p, shown)),
+    hits: control.search().map((hit) => toWirePluginHit(hit, installedMap)),
+    marketplaces: control.marketplaces().map(toWireMarketplace),
+    pendingRestart: control.pendingRestart,
+    uploadEnabled: control.uploadEnabled,
+    uploadOptions: control.uploadOptions,
+    refreshEnabled: control.refreshEnabled,
+    localInstallEnabled: control.localInstallEnabled
   };
-  sendJson(res, 200, payload);
 }
-function listPending(ctx, res, lang) {
-  const control = schedulesOf(ctx, res, lang);
-  if (!control) return;
-  const items = collectPendingApprovals(control.list(), control.recentRuns(RECENT_RUNS_LIMIT));
-  sendJson(res, 200, { items });
+function sendPreview(res, outcome) {
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      preview: null,
+      token: null,
+      reason: outcome.reason,
+      detail: outcome.detail
+    });
+  }
+  sendJson(res, 200, {
+    ok: true,
+    preview: toWirePreview2(outcome.preview),
+    token: outcome.token,
+    reason: null,
+    detail: null
+  });
 }
-function listRunning(ctx, res, lang) {
-  const control = schedulesOf(ctx, res, lang);
+async function previewPluginInstall(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
   if (!control) return;
-  const items = control.running().map(({ scheduleId, startedAt }) => ({ scheduleId, startedAt }));
-  sendJson(res, 200, { items });
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendPreview(res, await control.preview(fieldOf(asRecord(body.value), "ref"), lang));
 }
-function getSchedule(ctx, res, id, lang) {
-  const control = schedulesOf(ctx, res, lang);
+async function previewLocalPluginInstall(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
   if (!control) return;
-  const def = control.get(id);
-  if (!def) return sendNotFound(res, id, lang);
-  sendJson(res, 200, { row: toWireRow(control, def) });
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendPreview(res, await control.previewLocal(fieldOf(asRecord(body.value), "path"), lang));
 }
-function listRuns(ctx, res, id, lang) {
-  const control = schedulesOf(ctx, res, lang);
+async function previewPluginUpdate(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
   if (!control) return;
-  if (!control.get(id)) return sendNotFound(res, id, lang);
-  sendJson(res, 200, { runs: control.runs(id, RUNS_LIMIT) });
-}
-async function createSchedule(ctx, req, res, lang) {
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const parsed = parseCreate2(body.value, lang);
-  if (!parsed.ok) return sendError(res, 400, "bad-schedule", parsed.message);
-  const control = schedulesOf(ctx, res, lang);
-  if (!control) return;
-  const saved = await control.create(parsed.value, {
-    bypassAcknowledged: bypassAcknowledged(body.value)
-  });
-  sendJson(res, 200, toSaveResponse(control, saved));
-}
-async function patchSchedule(ctx, req, res, id, lang) {
-  const control = schedulesOf(ctx, res, lang);
-  if (!control) return;
-  if (!control.get(id)) return sendNotFound(res, id, lang);
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const parsed = parseUpdate2(body.value, lang);
-  if (!parsed.ok) return sendError(res, 400, "bad-schedule", parsed.message);
-  const { enabled, ...rest } = parsed.value;
-  const saved = Object.keys(rest).length > 0 ? await control.update(id, rest, { bypassAcknowledged: bypassAcknowledged(body.value) }) : { issues: [] };
-  if (saved.issues.length > 0) return sendJson(res, 200, toSaveResponse(control, saved));
-  const registration = enabled === void 0 ? saved.registration : await control.setEnabled(id, enabled);
-  const next = control.get(id) ?? saved.schedule;
-  sendJson(
-    res,
-    200,
-    toSaveResponse(control, {
-      ...next ? { schedule: next } : {},
-      issues: [],
-      ...registration ? { registration } : {}
-    })
-  );
-}
-async function deleteSchedule(ctx, res, id, lang) {
-  const control = schedulesOf(ctx, res, lang);
-  if (!control) return;
-  const removed = await control.remove(id);
-  sendJson(res, 200, { removed });
-}
-async function runSchedule(ctx, res, id, lang) {
-  const control = schedulesOf(ctx, res, lang);
-  if (!control) return;
-  if (!control.get(id)) return sendNotFound(res, id, lang);
-  const result = await control.fire(id, { manual: true });
-  const payload = {
-    status: result.status,
-    exitCode: result.exitCode,
-    ...result.run ? { run: result.run } : {},
-    ...result.detail === void 0 ? {} : { detail: result.detail }
-  };
-  sendJson(res, 200, payload);
-}
-async function fixSchedule(ctx, req, res, id, lang) {
-  const control = schedulesOf(ctx, res, lang);
-  if (!control) return;
-  const def = control.get(id);
-  if (!def) return sendNotFound(res, id, lang);
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const parsed = parseFix(body.value, lang);
-  if (!parsed.ok) return sendError(res, 400, "bad-schedule", parsed.message);
-  const run = control.runs(id, RUNS_LIMIT).find((one) => one.id === parsed.value);
-  if (!run) {
-    return sendError(
-      res,
-      404,
-      "not-found",
-      t("web.schedule_run_unknown", { runId: parsed.value }, lang)
-    );
-  }
-  const added = unfixedRules(def.allowRules, run.pendingApprovals);
-  if (added.length === 0) {
-    return sendJson(res, 200, {
-      added: [],
-      row: toWireRow(control, def)
-    });
-  }
-  const saved = await control.update(id, { allowRules: [...def.allowRules, ...added] });
-  const next = saved.schedule ?? def;
-  sendJson(res, 200, {
-    added,
-    row: toWireRow(control, next)
-  });
-}
-function getRecording(ctx, res, id, runId, lang) {
-  const control = schedulesOf(ctx, res, lang);
-  if (!control) return;
-  if (!control.get(id)) return sendNotFound(res, id, lang);
-  const run = control.runs(id, RUNS_LIMIT).find((one) => one.id === runId);
-  if (!run) {
-    return sendError(res, 404, "not-found", t("web.schedule_run_unknown", { runId }, lang));
-  }
-  sendJson(res, 200, toRecording(run));
-}
-function toRecording(run) {
-  if (run.logPath === void 0) {
-    return { runId: run.id, frames: [], missing: true, truncated: false };
-  }
-  const frames = coalesceRecording(readRecording(run.logPath));
-  if (frames.length === 0) {
-    return { runId: run.id, frames: [], missing: true, truncated: false };
-  }
-  const truncated = frames.length > MAX_RECORDING_FRAMES;
-  return {
-    runId: run.id,
-    frames: truncated ? frames.slice(-MAX_RECORDING_FRAMES) : frames,
-    missing: false,
-    truncated
-  };
-}
-function toSaveResponse(control, saved) {
-  return {
-    ok: saved.issues.length === 0,
-    issues: saved.issues,
-    ...saved.schedule ? { row: toWireRow(control, saved.schedule) } : {},
-    ...saved.registration ? { registration: saved.registration } : {}
-  };
-}
-function sendNotFound(res, id, lang) {
-  sendError(res, 404, "unknown-schedule", t("web.schedule_unknown", { id }, lang));
-}
-// src/skill-import.ts
-function pathOf(payload) {
-  return typeof payload["path"] === "string" ? payload["path"].trim() : "";
-}
-function toWireIssues2(issues) {
-  return (issues ?? []).map((i) => ({ path: i.path, message: i.message }));
-}
-function toWireEntry(entry) {
-  return {
-    name: entry.name,
-    category: entry.category,
-    description: entry.description,
-    files: entry.files,
-    bytes: entry.bytes,
-    conflict: entry.conflict ?? null
-  };
+  sendPreview(res, await control.previewUpdate(fieldOf(asRecord(body.value), "name"), lang));
 }
-async function previewSkillImport(ctx, req, res, lang) {
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const source = pathOf(asRecord(body.value));
-  const outcome = await ctx.runtime.skillWrite.preview(source, lang);
+function sendAction(res, control, outcome) {
   if (!outcome.ok) {
     return sendJson(res, 200, {
       ok: false,
-      source,
-      form: null,
-      skills: [],
-      issues: toWireIssues2(outcome.issues),
-      token: "",
+      entry: null,
+      pendingRestart: control.pendingRestart,
       detail: outcome.detail,
       reason: outcome.reason
     });
   }
-  const preview = outcome.preview;
+  const fresh = "record" in outcome ? control.list().find((p) => p.name === outcome.record.name) : void 0;
   sendJson(res, 200, {
     ok: true,
-    source: preview.source,
-    form: preview.form,
-    skills: preview.skills.map(toWireEntry),
-    issues: toWireIssues2(preview.issues),
-    token: preview.token,
-    detail: null,
+    entry: fresh ? toWirePluginEntry(fresh, displayNamesOf(control)) : null,
+    pendingRestart: control.pendingRestart,
+    detail: "detail" in outcome ? outcome.detail : null,
     reason: null
   });
 }
-async function importSkills(ctx, req, res, lang) {
+async function installPluginFromMarket(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
   const payload = asRecord(body.value);
-  const source = pathOf(payload);
-  const token = typeof payload["token"] === "string" ? payload["token"] : "";
-  const outcome = await ctx.runtime.skillWrite.import(source, token, lang);
-  if (!outcome.ok) {
-    return sendJson(res, 200, {
-      ok: false,
-      imported: [],
-      skipped: toWireIssues2(outcome.issues),
-      detail: outcome.detail,
-      reason: outcome.reason
-    });
-  }
-  sendJson(res, 200, {
-    ok: outcome.imported.length > 0,
-    imported: [...outcome.imported],
-    skipped: toWireIssues2(outcome.skipped),
-    detail: null,
-    reason: null
-  });
+  sendAction(
+    res,
+    control,
+    await control.install(fieldOf(payload, "ref"), fieldOf(payload, "token"), lang)
+  );
 }
-// src/skill-remove.ts
-async function removeSkill(ctx, req, res, lang) {
+async function installLocalPlugin(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
   const payload = asRecord(body.value);
-  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
-  const outcome = await ctx.runtime.skillWrite.remove(name, lang);
-  if (!outcome.ok) {
-    return sendJson(res, 200, {
-      ok: false,
-      name: "",
-      path: null,
-      detail: outcome.detail,
-      reason: outcome.reason
-    });
-  }
-  sendJson(res, 200, {
-    ok: true,
-    name: outcome.name,
-    path: outcome.path,
-    detail: null,
-    reason: null
-  });
-}
-function refusedByLan2(ctx, res, lang) {
-  if (!ctx.lanExposed) return false;
-  sendError(res, 403, "skill-stage-lan-exposed", t("web.skill_stage_lan_exposed", void 0, lang));
-  return true;
+  sendAction(
+    res,
+    control,
+    await control.installLocal(fieldOf(payload, "path"), fieldOf(payload, "token"), lang)
+  );
 }
-async function stageSkillDrop(ctx, req, res, lang) {
-  if (refusedByLan2(ctx, res, lang)) return;
+async function stagePlugin(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const asJson = (req.headers["content-type"] ?? "").toLowerCase().includes("application/json");
+  if (asJson) {
+    const body = await readJsonBody(req, void 0, lang);
+    if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+    return sendStage(
+      res,
+      await control.stage({ kind: "path", path: fieldOf(asRecord(body.value), "path") }, lang)
+    );
+  }
   const raw = await readRawBody(req, PLUGIN_UPLOAD_BODY_LIMIT, lang);
   if (!raw.ok) return sendError(res, raw.status, "bad-body", raw.message);
-  const outcome = await ctx.runtime.skillStage.stage(
-    { name: nameParam3(req), data: raw.value },
-    lang
+  return sendStage(
+    res,
+    await control.stage({ kind: "bytes", name: nameParam2(req), data: raw.value }, lang)
   );
-  sendJson(res, 200, {
-    ok: outcome.ok,
-    path: outcome.ok ? outcome.path : null,
-    detail: outcome.ok ? null : outcome.detail,
-    reason: outcome.ok ? null : outcome.reason
-  });
 }
-function nameParam3(req) {
+function nameParam2(req) {
   try {
     return new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("name") ?? "";
   } catch {
     return "";
   }
 }
-// src/sse.ts
-var DEFAULT_HEARTBEAT_MS = 15e3;
-function parseLastEventId(req) {
-  const raw = req.headers["last-event-id"];
-  const value = Array.isArray(raw) ? raw[0] : raw;
-  if (typeof value !== "string" || value.trim().length === 0) return void 0;
-  const parsed = Number(value.trim());
-  return Number.isInteger(parsed) && parsed >= 0 ? parsed : void 0;
+function sendStage(res, outcome) {
+  const payload = outcome.ok ? {
+    ok: true,
+    path: outcome.path,
+    name: outcome.name,
+    version: outcome.version,
+    detail: null,
+    reason: null
+  } : {
+    ok: false,
+    path: null,
+    name: null,
+    version: null,
+    detail: outcome.detail,
+    reason: outcome.reason
+  };
+  sendJson(res, 200, payload);
 }
-var SseConnection = class {
-  constructor(res, heartbeatMs = DEFAULT_HEARTBEAT_MS) {
-    this.res = res;
-    res.writeHead(200, {
-      "Content-Type": "text/event-stream; charset=utf-8",
-      "Cache-Control": "no-cache, no-transform",
-      Connection: "keep-alive",
-      "X-Accel-Buffering": "no",
-      "Referrer-Policy": "no-referrer",
-      "X-Content-Type-Options": "nosniff"
+async function updateInstalledPlugin(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  sendAction(
+    res,
+    control,
+    await control.update(fieldOf(payload, "name"), fieldOf(payload, "token"), lang)
+  );
+}
+async function uninstallPluginByName(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendAction(res, control, await control.uninstall(fieldOf(asRecord(body.value), "name"), lang));
+}
+function sendMarket(res, outcome) {
+  sendJson(res, 200, {
+    ok: outcome.ok,
+    marketplace: outcome.ok && outcome.marketplace ? toWireMarketplace(outcome.marketplace) : null,
+    reason: outcome.ok ? null : outcome.reason,
+    detail: outcome.ok ? null : outcome.detail
+  });
+}
+async function addPluginMarketplace(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendMarket(res, await control.addMarketplace(fieldOf(asRecord(body.value), "source"), lang));
+}
+async function removePluginMarketplace(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendMarket(res, await control.removeMarketplace(fieldOf(asRecord(body.value), "name"), lang));
+}
+function previewPluginUpload(ctx, req, res, lang) {
+  return withUploadBody(ctx, req, res, lang, (control, payload) => {
+    sendUploadPreview(res, control.previewUpload(fieldOf(payload, "path"), lang));
+  });
+}
+function uploadPlugin(ctx, req, res, lang) {
+  return withUploadBody(ctx, req, res, lang, async (control, payload) => {
+    sendUpload(
+      res,
+      await control.upload(
+        fieldOf(payload, "path"),
+        fieldOf(payload, "token"),
+        uploadFormOf(payload),
+        lang
+      )
+    );
+  });
+}
+async function withUploadBody(ctx, req, res, lang, run) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  await run(control, asRecord(body.value));
+}
+function sendUploadPreview(res, outcome) {
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      plan: null,
+      token: null,
+      prefill: null,
+      fromManifest: null,
+      reason: outcome.reason,
+      detail: outcome.detail
     });
-    res.flushHeaders();
-    this.heartbeat = setInterval(() => this.ping(), heartbeatMs);
-    this.heartbeat.unref();
   }
-  res;
-  heartbeat;
-  closed = false;
-  send(frame) {
-    if (this.closed) return;
-    const body = frame.seq > 0 ? `id: ${frame.seq}
-` : "";
-    this.res.write(`${body}data: ${JSON.stringify(frame)}
-
-`);
+  const { manifest, files, totalBytes, suspicious, skippedLinks } = outcome.plan;
+  sendJson(res, 200, {
+    ok: true,
+    plan: {
+      name: manifest.name,
+      version: manifest.version,
+      description: manifest.description ?? "",
+      author: manifest.author?.name ?? null,
+      files: files.map((f) => ({ path: f.path, bytes: f.bytes })),
+      totalBytes,
+      suspicious: [...suspicious],
+      skippedLinks: [...skippedLinks]
+    },
+    token: outcome.token,
+    prefill: outcome.prefill,
+    fromManifest: [...outcome.fromManifest],
+    reason: null,
+    detail: null
+  });
+}
+function sendUpload(res, outcome) {
+  sendJson(res, 200, {
+    ok: outcome.ok,
+    detail: outcome.detail,
+    uploaded: outcome.ok ? { name: outcome.name, version: outcome.version, bytes: outcome.bytes } : null,
+    reason: outcome.ok ? null : outcome.reason
+  });
+}
+async function refreshPlugins(ctx, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const outcome = await control.refresh(lang);
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      plugins: null,
+      reason: outcome.reason,
+      detail: outcome.detail
+    });
   }
-  ping() {
-    if (this.closed) return;
-    this.res.write(": ping\n\n");
+  sendJson(res, 200, {
+    ok: true,
+    plugins: pluginsPayload(control),
+    reason: null,
+    detail: outcome.detail === "" ? null : outcome.detail
+  });
+}
+function toWireProvider(option, lang) {
+  return {
+    type: option.type,
+    label: providerLabel(option, lang),
+    envVar: option.envVar,
+    hasKey: option.hasKey,
+    keyHint: option.keyHint,
+    current: option.current
+  };
+}
+function toWireSuggestions(view) {
+  return {
+    provider: view.provider,
+    models: view.models,
+    source: view.source,
+    status: view.status
+  };
+}
+function listProviders(ctx, res, lang) {
+  sendJson(res, 200, {
+    providers: ctx.runtime.modelCatalog.providers().map((o) => toWireProvider(o, lang))
+  });
+}
+async function discoverProviderModels(ctx, req, res, type, lang) {
+  if (!isProviderType(type)) {
+    return sendError(res, 404, "unknown-provider", t("web.provider_unknown", { name: type }, lang));
+  }
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const refresh = asRecord(body.value).refresh === true;
+  const suggestions = await ctx.runtime.modelCatalog.discover(type, { refresh });
+  sendJson(res, 200, {
+    suggestions: toWireSuggestions(suggestions)
+  });
+}
+async function setProviderKey(ctx, req, res, type, lang) {
+  if (!isProviderType(type)) {
+    return sendError(res, 404, "unknown-provider", t("web.provider_unknown", { name: type }, lang));
+  }
+  const envVar = apiKeyEnvVar(type);
+  if (envVar === null) {
+    return sendError(
+      res,
+      400,
+      "key-not-applicable",
+      t("web.provider_key_not_applicable", { name: type }, lang)
+    );
+  }
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const raw = asRecord(body.value)["apiKey"];
+  const apiKey = typeof raw === "string" ? raw.trim() : "";
+  if (apiKey === "") {
+    return sendError(res, 400, "empty-key", t("web.provider_key_empty", void 0, lang));
+  }
+  const written = await ctx.runtime.modelCatalog.setKey(type, apiKey);
+  sendJson(res, 200, {
+    provider: type,
+    hasKey: true,
+    keyHint: written.keyHint,
+    backend: written.backend,
+    encrypted: written.encrypted,
+    envPath: written.envPath
+  });
+}
+async function setDefaultModel(ctx, req, res, lang) {
+  if (ctx.runtime.providerInfo !== null) {
+    return sendError(
+      res,
+      409,
+      "provider-available",
+      t("web.model_default_has_provider", void 0, lang)
+    );
+  }
+  const body = await readJsonBody(req, void 0, lang);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const raw = asRecord(body.value)["model"];
+  const model = typeof raw === "string" ? raw.trim() : "";
+  if (model === "") {
+    return sendError(res, 400, "bad-request", t("web.model_default_empty", void 0, lang));
+  }
+  const report = ctx.runtime.settings.write({ key: "model", layer: "user", value: model });
+  if (!report.ok) {
+    const failure = settingWriteFailure(report);
+    return sendError(
+      res,
+      failure.status,
+      failure.code,
+      t(failure.key, { path: failure.path }, lang)
+    );
+  }
+  sendJson(res, 200, toWireSettingsWrite(report));
+}
+async function addRole(ctx, req, res, lang) {
+  if (ctx.lanExposed) {
+    return sendError(
+      res,
+      403,
+      "role-add-lan-exposed",
+      t("web.role_add_lan_exposed", void 0, lang)
+    );
+  }
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const outcome = ctx.runtime.roleWrite.add(
+    {
+      name: typeof payload["name"] === "string" ? payload["name"].trim() : "",
+      description: typeof payload["description"] === "string" ? payload["description"].trim() : "",
+      ...typeof payload["prompt"] === "string" ? { prompt: payload["prompt"] } : {},
+      ...Array.isArray(payload["tools"]) ? { tools: stringList2(payload["tools"]) } : {},
+      ...Array.isArray(payload["skills"]) ? { skills: stringList2(payload["skills"]) } : {},
+      ...typeof payload["maxTurns"] === "number" ? { maxTurns: payload["maxTurns"] } : {}
+    },
+    lang
+  );
+  if (!outcome.ok) return sendError(res, ...addFailure2(outcome.reason, outcome.detail, lang));
+  sendJson(res, 200, {
+    role: toWireRole(outcome.role, ctx.runtime.agentRoleNotices),
+    path: outcome.path
+  });
+}
+function addFailure2(reason, detail, lang) {
+  if (reason === "invalid-name") return [400, "bad-role-name", detail];
+  if (reason === "invalid-field")
+    return [400, "bad-role-field", t("web.role_add_bad_field", { detail }, lang)];
+  if (reason === "unknown-tool") return [400, "bad-role-tools", detail];
+  if (reason === "duplicate") return [409, "role-name-taken", detail];
+  return [409, "role-unwritable", detail];
+}
+function stringList2(value) {
+  return value.filter((v) => typeof v === "string");
+}
+async function removeRole(ctx, req, res, lang) {
+  if (ctx.lanExposed) {
+    return sendError(
+      res,
+      403,
+      "role-remove-lan-exposed",
+      t("web.role_remove_lan_exposed", void 0, lang)
+    );
+  }
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
+  const outcome = ctx.runtime.roleWrite.remove(name, lang);
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      name: "",
+      path: null,
+      takenOverBy: null,
+      detail: outcome.detail,
+      reason: outcome.reason
+    });
+  }
+  sendJson(res, 200, {
+    ok: true,
+    name: outcome.name,
+    path: outcome.path,
+    takenOverBy: outcome.takenOverBy,
+    detail: null,
+    reason: null
+  });
+}
+function stringList3(value) {
+  if (!Array.isArray(value)) return null;
+  const out = [];
+  for (const item of value) {
+    if (typeof item !== "string" || item.trim().length === 0) return null;
+    out.push(item);
+  }
+  return out;
+}
+function operationList(value) {
+  if (!Array.isArray(value)) return null;
+  const out = [];
+  for (const item of value) {
+    if (typeof item !== "string" || !isOperationType(item)) return null;
+    out.push(item);
+  }
+  return out;
+}
+function finite(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function parseTrigger(value) {
+  const raw = asRecord(value);
+  const kind = raw["kind"];
+  const at = raw["at"];
+  if (kind === "interval") {
+    const every = finite(raw["everyMinutes"]);
+    return every === null ? null : { kind: "interval", everyMinutes: every };
+  }
+  if (typeof at !== "string") return null;
+  if (kind === "once") {
+    const date = raw["date"];
+    return typeof date === "string" ? { kind: "once", date, at } : null;
+  }
+  if (kind !== "cron") return null;
+  const cycle = raw["cycle"];
+  if (cycle === "daily") return { kind: "cron", cycle: "daily", at };
+  if (cycle === "weekly") {
+    const days = weekdayList(raw["weekdays"]);
+    return days === null ? null : { kind: "cron", cycle: "weekly", at, weekdays: days };
+  }
+  if (cycle === "monthly") {
+    const days = numberList(raw["days"]);
+    return days === null ? null : { kind: "cron", cycle: "monthly", at, days };
+  }
+  return null;
+}
+function weekdayList(value) {
+  if (!Array.isArray(value)) return null;
+  const out = [];
+  for (const item of value) {
+    if (typeof item !== "number" || !Number.isInteger(item) || item < 0 || item > 6) return null;
+    out.push(item);
+  }
+  return out;
+}
+function numberList(value) {
+  if (!Array.isArray(value)) return null;
+  const out = [];
+  for (const item of value) {
+    if (typeof item !== "number" || !Number.isInteger(item)) return null;
+    out.push(item);
+  }
+  return out;
+}
+var CLEARABLE = ["model", "role", "workDir", "startDate", "endDate"];
+function optionals(raw, allowClear, lang) {
+  const out = {};
+  const bad = (field) => ({
+    ok: false,
+    message: t("web.schedule_bad_field", { field }, lang)
+  });
+  for (const key of ["name", "prompt"]) {
+    const value = raw[key];
+    if (value === void 0) continue;
+    if (typeof value !== "string") return bad(key);
+    out[key] = value;
+  }
+  for (const key of CLEARABLE) {
+    const value = raw[key];
+    if (value === void 0) continue;
+    if (value === null) {
+      if (!allowClear) return bad(key);
+      out[key] = null;
+      continue;
+    }
+    if (typeof value !== "string") return bad(key);
+    out[key] = value;
+  }
+  for (const key of ["maxTurns", "maxBudgetUsd", "timeoutMs"]) {
+    const value = raw[key];
+    if (value === void 0) continue;
+    const num = finite(value);
+    if (num === null)
+      return { ok: false, message: t("web.schedule_bad_field", { field: key }, lang) };
+    out[key] = num;
+  }
+  for (const key of ["allowTools", "allowRules"]) {
+    const value = raw[key];
+    if (value === void 0) continue;
+    const list = stringList3(value);
+    if (list === null)
+      return { ok: false, message: t("web.schedule_bad_field", { field: key }, lang) };
+    out[key] = list;
+  }
+  if (raw["allowOperations"] !== void 0) {
+    const ops = operationList(raw["allowOperations"]);
+    if (ops === null) {
+      return {
+        ok: false,
+        message: t("web.schedule_bad_operation", { types: OPERATION_TYPES.join("/") }, lang)
+      };
+    }
+    out.allowOperations = ops;
+  }
+  for (const key of ["enabled", "showInSessionList"]) {
+    const value = raw[key];
+    if (value === void 0) continue;
+    if (typeof value !== "boolean") {
+      return { ok: false, message: t("web.schedule_bad_field", { field: key }, lang) };
+    }
+    out[key] = value;
+  }
+  if (raw["permission"] !== void 0) {
+    const level = raw["permission"];
+    if (typeof level !== "string" || !isPermissionLevel(level)) {
+      return { ok: false, message: t("web.schedule_bad_permission", void 0, lang) };
+    }
+    out.permission = level;
+  }
+  if (raw["trigger"] !== void 0) {
+    const trigger = parseTrigger(raw["trigger"]);
+    if (trigger === null)
+      return { ok: false, message: t("web.schedule_bad_trigger", void 0, lang) };
+    out.trigger = trigger;
+  }
+  return { ok: true, value: out };
+}
+function bypassAcknowledged(body) {
+  return asRecord(body)["bypassAcknowledged"] === true;
+}
+function parseCreate2(body, lang) {
+  const raw = asRecord(body);
+  const name = raw["name"];
+  const prompt = raw["prompt"];
+  const permission = raw["permission"];
+  const budget = finite(raw["maxBudgetUsd"]);
+  if (typeof name !== "string" || typeof prompt !== "string") {
+    return { ok: false, message: t("web.schedule_create_incomplete", void 0, lang) };
   }
-  close() {
-    if (this.closed) return;
-    this.closed = true;
-    clearInterval(this.heartbeat);
-    this.res.end();
+  if (typeof permission !== "string" || !isPermissionLevel(permission)) {
+    return { ok: false, message: t("web.schedule_bad_permission", void 0, lang) };
   }
-};
-var TASK_TAIL_BYTES = 8 * 1024;
-var LIVE_TASKS = {
-  list: (sessionId) => listBackgroundTasks(sessionId),
-  output: (sessionId, id, since) => backgroundTaskOutput(sessionId, id, since)
-};
-function toWireTask(sessionId, info, registry) {
-  const since = Math.max(0, info.outputBytes - TASK_TAIL_BYTES);
-  const chunk = registry.output(sessionId, info.id, since);
-  if (!chunk) return { info, output: "", omittedBytes: info.outputBytes };
+  const trigger = parseTrigger(raw["trigger"]);
+  if (trigger === null)
+    return { ok: false, message: t("web.schedule_bad_trigger", void 0, lang) };
+  if (budget === null)
+    return { ok: false, message: t("web.schedule_budget_required", void 0, lang) };
+  const rest = optionals(raw, false, lang);
+  if (!rest.ok) return rest;
   return {
-    info,
-    output: chunk.output,
-    omittedBytes: Math.max(0, chunk.nextCursor - chunk.output.length)
+    ok: true,
+    value: { ...rest.value, name, prompt, permission, trigger, maxBudgetUsd: budget }
   };
 }
-function collectTasks(sessionId, registry) {
-  return { tasks: registry.list(sessionId).map((info) => toWireTask(sessionId, info, registry)) };
+function parseUpdate2(body, lang) {
+  return optionals(asRecord(body), true, lang);
 }
-function getTasks(ctx, res, sessionId, _lang, registry = LIVE_TASKS) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId);
+function parseFix(body, lang) {
+  const runId = asRecord(body)["runId"];
+  if (typeof runId !== "string" || runId.trim().length === 0) {
+    return { ok: false, message: t("web.schedule_fix_needs_run", void 0, lang) };
   }
-  sendJson(res, 200, collectTasks(sessionId, registry));
+  return { ok: true, value: runId };
 }
-var DIR_PAGE_LIMIT = 1e3;
-function workspaceHome() {
-  return homedir();
+// src/schedule/handlers.ts
+var RECENT_RUNS_LIMIT = 100;
+var RUNS_LIMIT = 20;
+var MAX_RECORDING_FRAMES = 4e3;
+function schedulesOf(ctx, res, lang) {
+  const control = ctx.runtime.schedules;
+  if (!control.storeAvailable) {
+    sendError(res, 503, "no-schedule-store", t("web.schedule_store_unavailable", void 0, lang));
+    return null;
+  }
+  return control;
 }
-function workspaceAnchors(workspaces) {
-  const seen = /* @__PURE__ */ new Set();
-  const entries = [];
-  const known = new Set(workspaces.known().map((one) => resolve(one.root)));
-  const push = (raw, group) => {
-    const path = resolve(raw);
-    if (seen.has(path)) return;
-    seen.add(path);
-    entries.push({
-      name: displayName2(path),
-      path,
-      known: known.has(path),
-      readable: canList(path),
-      group
-    });
+function toWireRow(control, def) {
+  return {
+    schedule: def,
+    nextRunAt: def.enabled ? nextRunAt(def.trigger, Date.now(), def.startDate, def.endDate) : null,
+    allowlistApplies: control.needsAllowlist(def.permission)
   };
-  push(homedir(), "home");
-  push(process.cwd(), "cwd");
-  for (const one of workspaces.known()) push(one.root, "known");
+}
+function defaultsOf(ctx) {
   return {
-    path: null,
-    parent: null,
-    entries,
-    omitted: 0,
-    hidden: 0
+    maxTurns: ctx.runtime.config.maxTurns,
+    timeoutMs: SCHEDULE_DEFAULTS.timeoutMs,
+    maxBudgetUsd: SCHEDULE_FORM_BUDGET_USD,
+    allowTools: SCHEDULE_DEFAULT_ALLOWLIST.allowTools,
+    allowOperations: SCHEDULE_DEFAULT_ALLOWLIST.allowOperations,
+    allowRules: SCHEDULE_DEFAULT_ALLOWLIST.allowRules
   };
 }
-function listWorkspaceDirs(workspaces, raw, opts = {}) {
-  if (raw.length === 0 || !isAbsolute(raw)) {
-    return { ok: false, reason: "not-absolute", path: raw };
-  }
-  const path = resolve(raw);
-  let dirents;
-  try {
-    dirents = readdirSync(path, { withFileTypes: true });
-  } catch (cause) {
-    return { ok: false, reason: readdirFailure(cause), path };
+async function listSchedules(ctx, res, lang) {
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  const capability = await control.capability();
+  const payload = {
+    schedules: control.list().map((def) => toWireRow(control, def)),
+    capability: { backend: capability.backend, canRegister: capability.canRegister },
+    defaults: defaultsOf(ctx),
+    recentRuns: control.recentRuns(RECENT_RUNS_LIMIT)
+  };
+  sendJson(res, 200, payload);
+}
+function listPending(ctx, res, lang) {
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  const items = collectPendingApprovals(control.list(), control.recentRuns(RECENT_RUNS_LIMIT));
+  sendJson(res, 200, { items });
+}
+function listRunning(ctx, res, lang) {
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  const items = control.running().map(({ scheduleId, startedAt }) => ({ scheduleId, startedAt }));
+  sendJson(res, 200, { items });
+}
+function getSchedule(ctx, res, id, lang) {
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  const def = control.get(id);
+  if (!def) return sendNotFound(res, id, lang);
+  sendJson(res, 200, { row: toWireRow(control, def) });
+}
+function listRuns(ctx, res, id, lang) {
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  if (!control.get(id)) return sendNotFound(res, id, lang);
+  sendJson(res, 200, { runs: control.runs(id, RUNS_LIMIT) });
+}
+async function createSchedule(ctx, req, res, lang) {
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const parsed = parseCreate2(body.value, lang);
+  if (!parsed.ok) return sendError(res, 400, "bad-schedule", parsed.message);
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  const saved = await control.create(parsed.value, {
+    bypassAcknowledged: bypassAcknowledged(body.value)
+  });
+  sendJson(res, 200, toSaveResponse(control, saved));
+}
+async function patchSchedule(ctx, req, res, id, lang) {
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  if (!control.get(id)) return sendNotFound(res, id, lang);
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const parsed = parseUpdate2(body.value, lang);
+  if (!parsed.ok) return sendError(res, 400, "bad-schedule", parsed.message);
+  const { enabled, ...rest } = parsed.value;
+  const saved = Object.keys(rest).length > 0 ? await control.update(id, rest, { bypassAcknowledged: bypassAcknowledged(body.value) }) : { issues: [] };
+  if (saved.issues.length > 0) return sendJson(res, 200, toSaveResponse(control, saved));
+  const registration = enabled === void 0 ? saved.registration : await control.setEnabled(id, enabled);
+  const next = control.get(id) ?? saved.schedule;
+  sendJson(
+    res,
+    200,
+    toSaveResponse(control, {
+      ...next ? { schedule: next } : {},
+      issues: [],
+      ...registration ? { registration } : {}
+    })
+  );
+}
+async function deleteSchedule(ctx, res, id, lang) {
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  const removed = await control.remove(id);
+  sendJson(res, 200, { removed });
+}
+async function runSchedule(ctx, res, id, lang) {
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  if (!control.get(id)) return sendNotFound(res, id, lang);
+  const result = await control.fire(id, { manual: true });
+  const payload = {
+    status: result.status,
+    exitCode: result.exitCode,
+    ...result.run ? { run: result.run } : {},
+    ...result.detail === void 0 ? {} : { detail: result.detail }
+  };
+  sendJson(res, 200, payload);
+}
+async function fixSchedule(ctx, req, res, id, lang) {
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  const def = control.get(id);
+  if (!def) return sendNotFound(res, id, lang);
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const parsed = parseFix(body.value, lang);
+  if (!parsed.ok) return sendError(res, 400, "bad-schedule", parsed.message);
+  const run = control.runs(id, RUNS_LIMIT).find((one) => one.id === parsed.value);
+  if (!run) {
+    return sendError(
+      res,
+      404,
+      "not-found",
+      t("web.schedule_run_unknown", { runId: parsed.value }, lang)
+    );
   }
-  const known = new Set(workspaces.known().map((one) => resolve(one.root)));
-  const kept = [];
-  let omitted = 0;
-  let hidden = 0;
-  for (const dirent of dirents) {
-    if (!dirent.isDirectory()) continue;
-    if (!opts.hidden && dirent.name.startsWith(".")) {
-      hidden += 1;
-      continue;
-    }
-    if (kept.length >= DIR_PAGE_LIMIT) {
-      omitted += 1;
-      continue;
-    }
-    const child = resolve(path, dirent.name);
-    kept.push({
-      name: dirent.name,
-      path: child,
-      known: known.has(child),
-      readable: canList(child),
-      group: "child"
+  const added = unfixedRules(def.allowRules, run.pendingApprovals);
+  if (added.length === 0) {
+    return sendJson(res, 200, {
+      added: [],
+      row: toWireRow(control, def)
     });
   }
-  return {
-    ok: true,
-    view: {
-      path,
-      parent: parentOf(path),
-      entries: kept,
-      omitted,
-      hidden
-    }
-  };
+  const saved = await control.update(id, { allowRules: [...def.allowRules, ...added] });
+  const next = saved.schedule ?? def;
+  sendJson(res, 200, {
+    added,
+    row: toWireRow(control, next)
+  });
 }
-function readdirFailure(cause) {
-  const code = cause?.code;
-  if (code === "EACCES" || code === "EPERM") return "denied";
-  if (code === "ENOTDIR") return "not-a-directory";
-  return "missing";
+function getRecording(ctx, res, id, runId, lang) {
+  const control = schedulesOf(ctx, res, lang);
+  if (!control) return;
+  if (!control.get(id)) return sendNotFound(res, id, lang);
+  const run = control.runs(id, RUNS_LIMIT).find((one) => one.id === runId);
+  if (!run) {
+    return sendError(res, 404, "not-found", t("web.schedule_run_unknown", { runId }, lang));
+  }
+  sendJson(res, 200, toRecording(run));
 }
-function canList(path) {
-  try {
-    accessSync(path, constants.R_OK | constants.X_OK);
-    return true;
-  } catch {
-    return false;
+function toRecording(run) {
+  if (run.logPath === void 0) {
+    return { runId: run.id, frames: [], missing: true, truncated: false };
+  }
+  const frames = coalesceRecording(readRecording(run.logPath));
+  if (frames.length === 0) {
+    return { runId: run.id, frames: [], missing: true, truncated: false };
   }
+  const truncated = frames.length > MAX_RECORDING_FRAMES;
+  return {
+    runId: run.id,
+    frames: truncated ? frames.slice(-MAX_RECORDING_FRAMES) : frames,
+    missing: false,
+    truncated
+  };
 }
-function parentOf(path) {
-  const up = dirname(path);
-  return up === path ? null : up;
+function toSaveResponse(control, saved) {
+  return {
+    ok: saved.issues.length === 0,
+    issues: saved.issues,
+    ...saved.schedule ? { row: toWireRow(control, saved.schedule) } : {},
+    ...saved.registration ? { registration: saved.registration } : {}
+  };
 }
-function displayName2(path) {
-  return basename(path) || path;
+function sendNotFound(res, id, lang) {
+  sendError(res, 404, "unknown-schedule", t("web.schedule_unknown", { id }, lang));
 }
-function present(value) {
-  return value !== void 0 && value !== "";
+// src/skill-import.ts
+function pathOf(payload) {
+  return typeof payload["path"] === "string" ? payload["path"].trim() : "";
 }
-function resolveNativeDirPicker(facts) {
-  return isSameMachine(facts);
+function toWireIssues2(issues) {
+  return (issues ?? []).map((i) => ({ path: i.path, message: i.message }));
 }
-function isSameMachine(facts) {
-  if (facts.lanExposed) return false;
-  if (present(facts.env.SSH_CONNECTION) || present(facts.env.SSH_TTY)) return false;
-  return facts.platform === "darwin" || facts.platform === "win32";
+function toWireEntry(entry) {
+  return {
+    name: entry.name,
+    category: entry.category,
+    description: entry.description,
+    files: entry.files,
+    bytes: entry.bytes,
+    conflict: entry.conflict ?? null
+  };
 }
-function nativePickerCommands(platform, prompt) {
-  if (platform === "darwin") {
-    return [
-      {
-        command: "osascript",
-        args: [
-          "-e",
-          `set epochChosenFolder to choose folder with prompt ${asAppleScriptString(prompt)}`,
-          "-e",
-          "POSIX path of epochChosenFolder"
-        ]
-      }
-    ];
-  }
-  if (platform === "win32") {
-    const script = win32PickScript(prompt);
-    return [
-      { command: "pwsh", args: ["-NoProfile", "-STA", "-Command", script] },
-      { command: "powershell.exe", args: ["-NoProfile", "-STA", "-Command", script] }
-    ];
+async function previewSkillImport(ctx, req, res, lang) {
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const source = pathOf(asRecord(body.value));
+  const outcome = await ctx.runtime.skillWrite.preview(source, lang);
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      source,
+      form: null,
+      skills: [],
+      issues: toWireIssues2(outcome.issues),
+      token: "",
+      detail: outcome.detail,
+      reason: outcome.reason
+    });
   }
-  return null;
-}
-function win32PickScript(prompt) {
-  return [
-    "Add-Type -AssemblyName System.Windows.Forms",
-    "Add-Type -AssemblyName System.Drawing",
-    "$epochOwner = New-Object System.Windows.Forms.Form",
-    "$epochOwner.FormBorderStyle = 'None'",
-    "$epochOwner.ShowInTaskbar = $false",
-    "$epochOwner.TopMost = $true",
-    "$epochOwner.StartPosition = 'Manual'",
-    "$epochOwner.Size = New-Object System.Drawing.Size 1, 1",
-    "$epochOwner.Location = New-Object System.Drawing.Point -32000, -32000",
-    "$epochOwner.Show()",
-    "$epochOwner.Activate()",
-    "try {",
-    "Add-Type -Namespace EpochPick -Name Win -MemberDefinition @'",
-    '[DllImport("user32.dll")] public static extern IntPtr GetWindow(IntPtr h, uint cmd);',
-    '[DllImport("user32.dll")] public static extern bool SetWindowPos(IntPtr h, IntPtr after, int x, int y, int cx, int cy, uint flags);',
-    '[DllImport("user32.dll")] public static extern void SwitchToThisWindow(IntPtr h, bool useAltTab);',
-    '[DllImport("user32.dll")] public static extern int GetWindowLong(IntPtr h, int i);',
-    '[DllImport("user32.dll")] public static extern IntPtr GetForegroundWindow();',
-    '[DllImport("user32.dll")] public static extern uint GetWindowThreadProcessId(IntPtr h, IntPtr pid);',
-    '[DllImport("user32.dll")] public static extern bool AttachThreadInput(uint idAttach, uint idAttachTo, bool fAttach);',
-    '[DllImport("user32.dll")] public static extern bool SetForegroundWindow(IntPtr h);',
-    '[DllImport("user32.dll")] public static extern bool BringWindowToTop(IntPtr h);',
-    '[DllImport("kernel32.dll")] public static extern uint GetCurrentThreadId();',
-    "static bool Raise(IntPtr h) {",
-    "  IntPtr fg = GetForegroundWindow();",
-    "  uint fgThread = GetWindowThreadProcessId(fg, IntPtr.Zero);",
-    "  uint me = GetCurrentThreadId();",
-    "  bool attached = false;",
-    "  if (fgThread != 0 && fgThread != me) { attached = AttachThreadInput(me, fgThread, true); }",
-    "  bool okPos = SetWindowPos(h, new IntPtr(-1), 0, 0, 0, 0, 3);",
-    "  BringWindowToTop(h);",
-    "  bool okFg = SetForegroundWindow(h);",
-    "  SwitchToThisWindow(h, true);",
-    "  if (attached) { AttachThreadInput(me, fgThread, false); }",
-    "  return okPos && okFg;",
-    "}",
-    "public static void RaiseSoon(IntPtr owner) {",
-    "  System.Threading.Thread t = new System.Threading.Thread(delegate() {",
-    '    string note = "dialog window never appeared";',
-    "    for (int i = 0; i < 400; i++) {",
-    "      System.Threading.Thread.Sleep(30);",
-    "      IntPtr dlg = GetWindow(owner, 6);",
-    "      if (dlg == IntPtr.Zero) { continue; }",
-    "      bool ok = false;",
-    "      for (int k = 0; k < 4; k++) {",
-    "        Raise(owner);",
-    "        ok = Raise(dlg) || ok;",
-    "        System.Threading.Thread.Sleep(120);",
-    "      }",
-    '      note = "raised hwnd=" + dlg.ToInt64() + " ok=" + ok + " dlgEx=0x" + GetWindowLong(dlg, -20).ToString("X") + " ownerEx=0x" + GetWindowLong(owner, -20).ToString("X") + " isFg=" + (GetForegroundWindow() == dlg);',
-    "      break;",
-    "    }",
-    '    string dbg = System.Environment.GetEnvironmentVariable("EPOCH_PICK_DEBUG");',
-    "    if (!string.IsNullOrEmpty(dbg)) {",
-    '      try { System.IO.File.AppendAllText(System.IO.Path.Combine(System.IO.Path.GetTempPath(), "epoch-pick-debug.log"), System.DateTime.Now.ToString("HH:mm:ss.fff") + " " + note + System.Environment.NewLine); } catch { }',
-    "    }",
-    "  });",
-    "  t.IsBackground = true;",
-    "  t.Start();",
-    "}",
-    "'@",
-    "[EpochPick.Win]::RaiseSoon($epochOwner.Handle)",
-    "} catch { }",
-    "$d = New-Object System.Windows.Forms.FolderBrowserDialog",
-    `$d.Description = ${asPowerShellString(prompt)}`,
-    "$d.ShowNewFolderButton = $true",
-    "$epochResult = $d.ShowDialog($epochOwner)",
-    "$epochOwner.Close()",
-    "if ($epochResult -ne [System.Windows.Forms.DialogResult]::OK) { exit 1 }",
-    "[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($d.SelectedPath))"
-  ].join("\n");
+  const preview = outcome.preview;
+  sendJson(res, 200, {
+    ok: true,
+    source: preview.source,
+    form: preview.form,
+    skills: preview.skills.map(toWireEntry),
+    issues: toWireIssues2(preview.issues),
+    token: preview.token,
+    detail: null,
+    reason: null
+  });
 }
-function asAppleScriptString(text) {
-  return `"${text.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+async function importSkills(ctx, req, res, lang) {
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const source = pathOf(payload);
+  const token = typeof payload["token"] === "string" ? payload["token"] : "";
+  const outcome = await ctx.runtime.skillWrite.import(source, token, lang);
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      imported: [],
+      skipped: toWireIssues2(outcome.issues),
+      detail: outcome.detail,
+      reason: outcome.reason
+    });
+  }
+  sendJson(res, 200, {
+    ok: outcome.imported.length > 0,
+    imported: [...outcome.imported],
+    skipped: toWireIssues2(outcome.skipped),
+    detail: null,
+    reason: null
+  });
 }
-function asPowerShellString(text) {
-  return `'${text.replace(/'/g, "''")}'`;
+// src/skill-remove.ts
+async function removeSkill(ctx, req, res, lang) {
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
+  const outcome = await ctx.runtime.skillWrite.remove(name, lang);
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      name: "",
+      path: null,
+      detail: outcome.detail,
+      reason: outcome.reason
+    });
+  }
+  sendJson(res, 200, {
+    ok: true,
+    name: outcome.name,
+    path: outcome.path,
+    detail: null,
+    reason: null
+  });
 }
-function decodeNativePick(platform, stdout) {
-  const raw = stdout.trim();
-  if (platform !== "win32") return raw;
-  return Buffer.from(raw, "base64").toString("utf-8").trim();
+function refusedByLan2(ctx, res, lang) {
+  if (!ctx.lanExposed) return false;
+  sendError(res, 403, "skill-stage-lan-exposed", t("web.skill_stage_lan_exposed", void 0, lang));
+  return true;
 }
-function isPickCanceled(platform, code, stderr) {
-  if (code !== 1) return false;
-  if (platform === "win32") return true;
-  return /-128|user canceled/i.test(stderr);
+async function stageSkillDrop(ctx, req, res, lang) {
+  if (refusedByLan2(ctx, res, lang)) return;
+  const raw = await readRawBody(req, PLUGIN_UPLOAD_BODY_LIMIT, lang);
+  if (!raw.ok) return sendError(res, raw.status, "bad-body", raw.message);
+  const outcome = await ctx.runtime.skillStage.stage(
+    { name: nameParam3(req), data: raw.value },
+    lang
+  );
+  sendJson(res, 200, {
+    ok: outcome.ok,
+    path: outcome.ok ? outcome.path : null,
+    detail: outcome.ok ? null : outcome.detail,
+    reason: outcome.ok ? null : outcome.reason
+  });
 }
-var inFlight = false;
-async function pickNativeDirectory(opts) {
-  const platform = opts.platform ?? process.platform;
-  const candidates = nativePickerCommands(platform, opts.prompt);
-  if (!candidates) {
-    return { ok: false, reason: "unsupported", message: `unsupported platform: ${platform}` };
-  }
-  if (inFlight) {
-    return { ok: false, reason: "busy", message: "a directory picker is already open" };
-  }
-  const run = opts.runner ?? execFileRunner;
-  inFlight = true;
+function nameParam3(req) {
   try {
-    let last = "";
-    for (const [index, candidate] of candidates.entries()) {
-      const attempt = await run(candidate.command, candidate.args, opts.signal);
-      if (attempt.missing) {
-        last = attempt.message || `${candidate.command} not found`;
-        if (index < candidates.length - 1) continue;
-        return { ok: false, reason: "failed", message: last };
-      }
-      if (!attempt.code) {
-        const path = decodeNativePick(platform, attempt.stdout);
-        return path ? { ok: true, path } : { ok: false, reason: "failed", message: "picker returned an empty path" };
-      }
-      if (isPickCanceled(platform, attempt.code, attempt.stderr)) {
-        return { ok: true, canceled: true };
-      }
-      return { ok: false, reason: "failed", message: attempt.stderr.trim() || attempt.message };
-    }
-    return { ok: false, reason: "failed", message: last };
-  } finally {
-    inFlight = false;
+    return new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("name") ?? "";
+  } catch {
+    return "";
   }
 }
-var execFileRunner = (command, args, signal) => new Promise((done) => {
-  guardSpawn(
-    () => execFile(
-      command,
-      [...args],
-      {
-        ...signal ? { signal } : {},
-        encoding: "utf-8",
-        windowsHide: true,
-        maxBuffer: 1024 * 1024
-      },
-      (error, stdout, stderr) => {
-        const err = error;
-        done({
-          code: err?.code ?? 0,
-          stdout,
-          stderr,
-          missing: err?.code === "ENOENT",
-          message: err?.message ?? ""
-        });
-      }
-    ),
-    (err) => done({
-      code: err.code ?? 1,
-      stdout: "",
-      stderr: "",
-      missing: err.code === "ENOENT" || err.code === "ENOTDIR",
-      message: `${err.message} (command=${command})`
-    })
-  );
-});
-// src/workspace/dirs.ts
-function browseWorkspaceDirs(ctx, res, rawUrl, lang) {
-  const query = new URL(rawUrl ?? "/", "http://127.0.0.1").searchParams;
-  const path = dirsQuery(query) ?? atQuery(query);
-  if (path === void 0) {
-    return sendJson(res, 200, workspaceAnchors(ctx.runtime.workspaces));
+// src/sse.ts
+var DEFAULT_HEARTBEAT_MS = 15e3;
+function parseLastEventId(req) {
+  const raw = req.headers["last-event-id"];
+  const value = Array.isArray(raw) ? raw[0] : raw;
+  if (typeof value !== "string" || value.trim().length === 0) return void 0;
+  const parsed = Number(value.trim());
+  return Number.isInteger(parsed) && parsed >= 0 ? parsed : void 0;
+}
+var SseConnection = class {
+  constructor(res, heartbeatMs = DEFAULT_HEARTBEAT_MS) {
+    this.res = res;
+    res.writeHead(200, {
+      "Content-Type": "text/event-stream; charset=utf-8",
+      "Cache-Control": "no-cache, no-transform",
+      Connection: "keep-alive",
+      "X-Accel-Buffering": "no",
+      "Referrer-Policy": "no-referrer",
+      "X-Content-Type-Options": "nosniff"
+    });
+    res.flushHeaders();
+    this.heartbeat = setInterval(() => this.ping(), heartbeatMs);
+    this.heartbeat.unref();
   }
-  const outcome = listWorkspaceDirs(ctx.runtime.workspaces, path, {
-    hidden: hiddenQuery(query)
-  });
-  if (outcome.ok) return sendJson(res, 200, outcome.view);
-  if (outcome.reason === "denied") {
-    return sendError(
-      res,
-      403,
-      "workspace-denied",
-      t("web.dirs_denied", { path: outcome.path }, lang)
-    );
+  res;
+  heartbeat;
+  closed = false;
+  send(frame) {
+    if (this.closed) return;
+    const body = frame.seq > 0 ? `id: ${frame.seq}
+` : "";
+    this.res.write(`${body}data: ${JSON.stringify(frame)}
+
+`);
   }
-  if (outcome.reason === "missing") {
-    return sendError(res, 404, "not-found", t("web.dirs_missing", { path: outcome.path }, lang));
+  ping() {
+    if (this.closed) return;
+    this.res.write(": ping\n\n");
   }
-  sendError(
-    res,
-    400,
-    "bad-workspace",
-    outcome.reason === "not-absolute" ? t("web.dirs_not_absolute", { path: outcome.path }, lang) : t("web.dirs_not_a_directory", { path: outcome.path }, lang)
-  );
+  close() {
+    if (this.closed) return;
+    this.closed = true;
+    clearInterval(this.heartbeat);
+    this.res.end();
+  }
+};
+var TASK_TAIL_BYTES = 8 * 1024;
+var LIVE_TASKS = {
+  list: (sessionId) => listBackgroundTasks(sessionId),
+  output: (sessionId, id, since) => backgroundTaskOutput(sessionId, id, since)
+};
+function toWireTask(sessionId, info, registry) {
+  const since = Math.max(0, info.outputBytes - TASK_TAIL_BYTES);
+  const chunk = registry.output(sessionId, info.id, since);
+  if (!chunk) return { info, output: "", omittedBytes: info.outputBytes };
+  return {
+    info,
+    output: chunk.output,
+    omittedBytes: Math.max(0, chunk.nextCursor - chunk.output.length)
+  };
 }
-function dirsQuery(query) {
-  const value = query.get("path")?.trim();
-  return value ? value : void 0;
+function collectTasks(sessionId, registry) {
+  return { tasks: registry.list(sessionId).map((info) => toWireTask(sessionId, info, registry)) };
 }
-function atQuery(query) {
-  return query.get("at")?.trim().toLowerCase() === "home" ? workspaceHome() : void 0;
+function getTasks(ctx, res, sessionId, _lang, registry = LIVE_TASKS) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId);
+  }
+  sendJson(res, 200, collectTasks(sessionId, registry));
 }
-function hiddenQuery(query) {
-  const value = query.get("hidden")?.trim().toLowerCase();
-  return value === "1" || value === "true";
+var DIR_PAGE_LIMIT = 1e3;
+function workspaceHome() {
+  return homedir();
 }
-async function createWorkspaceDir(req, res, lang) {
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const parent = typeof payload["parent"] === "string" ? payload["parent"].trim() : "";
-  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
-  if (parent.length === 0 || !isAbsolute(parent)) {
-    return sendError(
-      res,
-      400,
-      "bad-workspace",
-      t("web.mkdir_parent_not_absolute", { parent }, lang)
-    );
-  }
-  if (!isSingleSegment(name)) {
-    return sendError(res, 400, "bad-workspace", t("web.mkdir_bad_name", { name }, lang));
+function workspaceAnchors(workspaces) {
+  const seen = /* @__PURE__ */ new Set();
+  const entries = [];
+  const known = new Set(workspaces.known().map((one) => resolve(one.root)));
+  const push = (raw, group) => {
+    const path = resolve(raw);
+    if (seen.has(path)) return;
+    seen.add(path);
+    entries.push({
+      name: displayName2(path),
+      path,
+      known: known.has(path),
+      readable: canList(path),
+      group
+    });
+  };
+  push(homedir(), "home");
+  push(process.cwd(), "cwd");
+  for (const one of workspaces.known()) push(one.root, "known");
+  return {
+    path: null,
+    parent: null,
+    entries,
+    omitted: 0,
+    hidden: 0
+  };
+}
+function listWorkspaceDirs(workspaces, raw, opts = {}) {
+  if (raw.length === 0 || !isAbsolute(raw)) {
+    return { ok: false, reason: "not-absolute", path: raw };
   }
-  const path = resolve(parent, name);
+  const path = resolve(raw);
+  let dirents;
   try {
-    mkdirSync(path);
+    dirents = readdirSync(path, { withFileTypes: true });
   } catch (cause) {
-    return sendError(res, ...mkdirFailure(cause, path, lang));
+    return { ok: false, reason: readdirFailure(cause), path };
+  }
+  const known = new Set(workspaces.known().map((one) => resolve(one.root)));
+  const kept = [];
+  let omitted = 0;
+  let hidden = 0;
+  for (const dirent of dirents) {
+    if (!dirent.isDirectory()) continue;
+    if (!opts.hidden && dirent.name.startsWith(".")) {
+      hidden += 1;
+      continue;
+    }
+    if (kept.length >= DIR_PAGE_LIMIT) {
+      omitted += 1;
+      continue;
+    }
+    const child = resolve(path, dirent.name);
+    kept.push({
+      name: dirent.name,
+      path: child,
+      known: known.has(child),
+      readable: canList(child),
+      group: "child"
+    });
   }
-  sendJson(res, 200, {
-    entry: {
-      name,
+  return {
+    ok: true,
+    view: {
       path,
-      readable: true,
-      known: false,
-      group: "child"
+      parent: parentOf(path),
+      entries: kept,
+      omitted,
+      hidden
     }
-  });
-}
-async function pickWorkspaceDir(ctx, req, res, lang) {
-  if (!ctx.nativeDirPicker) {
-    return sendError(res, 403, "native-picker-unavailable", t("web.pick_unavailable", {}, lang));
-  }
-  const abort = new AbortController();
-  req.on("close", () => abort.abort());
-  const outcome = await pickNativeDirectory({
-    prompt: t("web.pick_prompt", {}, lang),
-    signal: abort.signal
-  });
-  if (res.writableEnded || abort.signal.aborted) return;
-  if (outcome.ok) {
-    return sendJson(
-      res,
-      200,
-      outcome.path === void 0 ? { canceled: true } : { path: outcome.path }
-    );
-  }
-  if (outcome.reason === "busy") {
-    return sendError(res, 409, "native-picker-busy", t("web.pick_busy", {}, lang));
-  }
-  sendError(
-    res,
-    500,
-    "native-picker-failed",
-    t("web.pick_failed", { detail: outcome.message }, lang)
-  );
-}
-function isSingleSegment(name) {
-  if (name.length === 0) return false;
-  if (name === "." || name === "..") return false;
-  return !name.includes("/") && !name.includes(sep);
+  };
 }
-function mkdirFailure(cause, path, lang) {
+function readdirFailure(cause) {
   const code = cause?.code;
-  if (code === "EEXIST") return [409, "workspace-exists", t("web.mkdir_exists", { path }, lang)];
-  if (code === "EACCES" || code === "EPERM") {
-    return [403, "workspace-denied", t("web.mkdir_denied", { path }, lang)];
-  }
-  if (code === "ENOENT") return [404, "not-found", t("web.mkdir_parent_missing", { path }, lang)];
-  return [500, "internal", t("web.mkdir_failed", { path }, lang)];
-}
-var MAX_TEXT_BYTES = 2 * 1024 * 1024;
-var VIEWABLE = /* @__PURE__ */ new Map([
-  [".png", { kind: "image", mime: "image/png" }],
-  [".jpg", { kind: "image", mime: "image/jpeg" }],
-  [".jpeg", { kind: "image", mime: "image/jpeg" }],
-  [".gif", { kind: "image", mime: "image/gif" }],
-  [".webp", { kind: "image", mime: "image/webp" }],
-  [".bmp", { kind: "image", mime: "image/bmp" }],
-  [".ico", { kind: "image", mime: "image/x-icon" }],
-  [".avif", { kind: "image", mime: "image/avif" }],
-  [".pdf", { kind: "pdf", mime: "application/pdf" }],
-  [".mp3", { kind: "audio", mime: "audio/mpeg" }],
-  [".wav", { kind: "audio", mime: "audio/wav" }],
-  [".ogg", { kind: "audio", mime: "audio/ogg" }],
-  [".m4a", { kind: "audio", mime: "audio/mp4" }],
-  [".flac", { kind: "audio", mime: "audio/flac" }],
-  [".mp4", { kind: "video", mime: "video/mp4" }],
-  [".webm", { kind: "video", mime: "video/webm" }],
-  [".mov", { kind: "video", mime: "video/quicktime" }]
-]);
-function kindOf(stat3) {
-  if (stat3.kind === "text") return "text";
-  return VIEWABLE.get(extname(stat3.rel).toLowerCase())?.kind ?? "opaque";
+  if (code === "EACCES" || code === "EPERM") return "denied";
+  if (code === "ENOTDIR") return "not-a-directory";
+  return "missing";
 }
-function toWireRefusal(reason) {
-  return reason;
+function canList(path) {
+  try {
+    accessSync(path, constants.R_OK | constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
 }
-function statusFor(refusal) {
-  if (refusal === "denied") return 403;
-  if (refusal === "missing") return 404;
-  if (refusal === "too-large") return 413;
-  return refusal === "not-a-file" ? 400 : 503;
+function parentOf(path) {
+  const up = dirname(path);
+  return up === path ? null : up;
 }
-function describeRefusal(refusal, lang) {
-  if (refusal === "denied") return t("web.file_view_denied", void 0, lang);
-  if (refusal === "missing") return t("web.file_view_missing", void 0, lang);
-  if (refusal === "not-a-file") return t("web.file_view_not_a_file", void 0, lang);
-  if (refusal === "too-large") {
-    return t("web.file_view_too_large", { max: String(MAX_TEXT_BYTES) }, lang);
-  }
-  return t("web.file_view_unreadable", void 0, lang);
+function displayName2(path) {
+  return basename(path) || path;
 }
-function resolveViewRoot(ctx, res, sessionId, lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    sendUnknownSession(res, sessionId);
-    return null;
-  }
-  const root = workspaceRootOf(ctx, sessionId);
-  if (!root) {
-    sendError(res, 409, "no-workspace", t("web.file_view_no_workspace", void 0, lang));
-    return null;
-  }
-  return root;
+function present(value) {
+  return value !== void 0 && value !== "";
 }
-function singlePath(res, rawUrl, lang) {
-  const params = new URLSearchParams((rawUrl ?? "").split("?")[1] ?? "");
-  const path = params.get("path")?.trim();
-  if (!path) {
-    sendError(res, 400, "missing-path", t("web.file_view_missing_path", void 0, lang));
-    return null;
-  }
-  return path;
+function resolveNativeDirPicker(facts) {
+  return isSameMachine(facts);
 }
-function statFiles(ctx, res, sessionId, rawUrl, lang) {
-  const root = resolveViewRoot(ctx, res, sessionId, lang);
-  if (root === null) return;
-  const params = new URLSearchParams((rawUrl ?? "").split("?")[1] ?? "");
-  const asked = params.getAll("path").filter((p) => p.trim() !== "");
-  const taken = asked.slice(0, WIRE_FILE_STAT_MAX);
-  const files = taken.map((path) => {
-    const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
-    if (!stat3.ok) return { path, ok: false, refusal: toWireRefusal(stat3.reason) };
-    return {
-      path,
-      ok: true,
-      kind: kindOf(stat3),
-      bytes: stat3.bytes,
-      mtimeMs: stat3.mtimeMs,
-      openable: ctx.sameMachine && isSystemOpenable(stat3.rel)
-    };
-  });
-  sendJson(res, 200, {
-    files,
-    overLimit: asked.length - taken.length,
-    root
-  });
+function isSameMachine(facts) {
+  if (facts.lanExposed) return false;
+  if (present(facts.env.SSH_CONNECTION) || present(facts.env.SSH_TTY)) return false;
+  return facts.platform === "darwin" || facts.platform === "win32";
 }
-function readFileText(ctx, res, sessionId, rawUrl, lang) {
-  const root = resolveViewRoot(ctx, res, sessionId, lang);
-  if (root === null) return;
-  const path = singlePath(res, rawUrl, lang);
-  if (path === null) return;
-  const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
-  if (!stat3.ok) {
-    const refusal = toWireRefusal(stat3.reason);
-    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
-  }
-  if (stat3.kind !== "text") {
-    return sendError(res, 415, "not-text", t("web.file_view_not_text", void 0, lang));
-  }
-  if (stat3.bytes > MAX_TEXT_BYTES) {
-    return sendError(res, 413, "too-large", describeRefusal("too-large", lang));
+function nativePickerCommands(platform, prompt) {
+  if (platform === "darwin") {
+    return [
+      {
+        command: "osascript",
+        args: [
+          "-e",
+          `set epochChosenFolder to choose folder with prompt ${asAppleScriptString(prompt)}`,
+          "-e",
+          "POSIX path of epochChosenFolder"
+        ]
+      }
+    ];
   }
-  const out = ctx.runtime.workspaceFiles.readFile(stat3.rel, root);
-  if (!out.ok) {
-    const refusal = out.reason === "binary" ? "unreadable" : out.reason;
-    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
+  if (platform === "win32") {
+    const script = win32PickScript(prompt);
+    return [
+      { command: "pwsh", args: ["-NoProfile", "-STA", "-Command", script] },
+      { command: "powershell.exe", args: ["-NoProfile", "-STA", "-Command", script] }
+    ];
   }
-  sendJson(res, 200, {
-    path,
-    text: out.text,
-    bytes: out.bytes
-  });
+  return null;
+}
+function win32PickScript(prompt) {
+  return [
+    "Add-Type -AssemblyName System.Windows.Forms",
+    "Add-Type -AssemblyName System.Drawing",
+    "$epochOwner = New-Object System.Windows.Forms.Form",
+    "$epochOwner.FormBorderStyle = 'None'",
+    "$epochOwner.ShowInTaskbar = $false",
+    "$epochOwner.TopMost = $true",
+    "$epochOwner.StartPosition = 'Manual'",
+    "$epochOwner.Size = New-Object System.Drawing.Size 1, 1",
+    "$epochOwner.Location = New-Object System.Drawing.Point -32000, -32000",
+    "$epochOwner.Show()",
+    "$epochOwner.Activate()",
+    "try {",
+    "Add-Type -Namespace EpochPick -Name Win -MemberDefinition @'",
+    '[DllImport("user32.dll")] public static extern IntPtr GetWindow(IntPtr h, uint cmd);',
+    '[DllImport("user32.dll")] public static extern bool SetWindowPos(IntPtr h, IntPtr after, int x, int y, int cx, int cy, uint flags);',
+    '[DllImport("user32.dll")] public static extern void SwitchToThisWindow(IntPtr h, bool useAltTab);',
+    '[DllImport("user32.dll")] public static extern int GetWindowLong(IntPtr h, int i);',
+    '[DllImport("user32.dll")] public static extern IntPtr GetForegroundWindow();',
+    '[DllImport("user32.dll")] public static extern uint GetWindowThreadProcessId(IntPtr h, IntPtr pid);',
+    '[DllImport("user32.dll")] public static extern bool AttachThreadInput(uint idAttach, uint idAttachTo, bool fAttach);',
+    '[DllImport("user32.dll")] public static extern bool SetForegroundWindow(IntPtr h);',
+    '[DllImport("user32.dll")] public static extern bool BringWindowToTop(IntPtr h);',
+    '[DllImport("kernel32.dll")] public static extern uint GetCurrentThreadId();',
+    "static bool Raise(IntPtr h) {",
+    "  IntPtr fg = GetForegroundWindow();",
+    "  uint fgThread = GetWindowThreadProcessId(fg, IntPtr.Zero);",
+    "  uint me = GetCurrentThreadId();",
+    "  bool attached = false;",
+    "  if (fgThread != 0 && fgThread != me) { attached = AttachThreadInput(me, fgThread, true); }",
+    "  bool okPos = SetWindowPos(h, new IntPtr(-1), 0, 0, 0, 0, 3);",
+    "  BringWindowToTop(h);",
+    "  bool okFg = SetForegroundWindow(h);",
+    "  SwitchToThisWindow(h, true);",
+    "  if (attached) { AttachThreadInput(me, fgThread, false); }",
+    "  return okPos && okFg;",
+    "}",
+    "public static void RaiseSoon(IntPtr owner) {",
+    "  System.Threading.Thread t = new System.Threading.Thread(delegate() {",
+    '    string note = "dialog window never appeared";',
+    "    for (int i = 0; i < 400; i++) {",
+    "      System.Threading.Thread.Sleep(30);",
+    "      IntPtr dlg = GetWindow(owner, 6);",
+    "      if (dlg == IntPtr.Zero) { continue; }",
+    "      bool ok = false;",
+    "      for (int k = 0; k < 4; k++) {",
+    "        Raise(owner);",
+    "        ok = Raise(dlg) || ok;",
+    "        System.Threading.Thread.Sleep(120);",
+    "      }",
+    '      note = "raised hwnd=" + dlg.ToInt64() + " ok=" + ok + " dlgEx=0x" + GetWindowLong(dlg, -20).ToString("X") + " ownerEx=0x" + GetWindowLong(owner, -20).ToString("X") + " isFg=" + (GetForegroundWindow() == dlg);',
+    "      break;",
+    "    }",
+    '    string dbg = System.Environment.GetEnvironmentVariable("EPOCH_PICK_DEBUG");',
+    "    if (!string.IsNullOrEmpty(dbg)) {",
+    '      try { System.IO.File.AppendAllText(System.IO.Path.Combine(System.IO.Path.GetTempPath(), "epoch-pick-debug.log"), System.DateTime.Now.ToString("HH:mm:ss.fff") + " " + note + System.Environment.NewLine); } catch { }',
+    "    }",
+    "  });",
+    "  t.IsBackground = true;",
+    "  t.Start();",
+    "}",
+    "'@",
+    "[EpochPick.Win]::RaiseSoon($epochOwner.Handle)",
+    "} catch { }",
+    "$d = New-Object System.Windows.Forms.FolderBrowserDialog",
+    `$d.Description = ${asPowerShellString(prompt)}`,
+    "$d.ShowNewFolderButton = $true",
+    "$epochResult = $d.ShowDialog($epochOwner)",
+    "$epochOwner.Close()",
+    "if ($epochResult -ne [System.Windows.Forms.DialogResult]::OK) { exit 1 }",
+    "[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($d.SelectedPath))"
+  ].join("\n");
 }
-function readFileBytes(ctx, res, sessionId, rawUrl, headOnly, lang) {
-  const root = resolveViewRoot(ctx, res, sessionId, lang);
-  if (root === null) return;
-  const path = singlePath(res, rawUrl, lang);
-  if (path === null) return;
-  const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
-  if (!stat3.ok) {
-    const refusal = toWireRefusal(stat3.reason);
-    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
-  }
-  const known = VIEWABLE.get(extname(stat3.rel).toLowerCase());
-  const inline = known !== void 0 && stat3.kind === "binary";
-  const headers = {
-    "Content-Type": inline ? known.mime : "application/octet-stream",
-    "X-Content-Type-Options": "nosniff",
-    "Content-Disposition": inline ? "inline" : `attachment; filename*=UTF-8''${encodeURIComponent(basenameOf(stat3.rel))}`
-  };
-  if (inline && known.kind === "pdf") headers["Content-Security-Policy"] = "sandbox";
-  if (headOnly) {
-    return sendEmpty(res, 200, {
-      ...headers,
-      "Content-Length": String(stat3.bytes)
-    });
-  }
-  sendFile(res, stat3.absPath, headers);
+function asAppleScriptString(text) {
+  return `"${text.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 }
-function basenameOf(rel) {
-  const cut = rel.lastIndexOf("/");
-  return cut < 0 ? rel : rel.slice(cut + 1);
+function asPowerShellString(text) {
+  return `'${text.replace(/'/g, "''")}'`;
 }
-// src/workspace/file-open.ts
-function describeOpenRefusal(refusal, lang) {
-  if (refusal === "extension-not-allowed") {
-    return t("web.file_open_extension_not_allowed", void 0, lang);
-  }
-  if (refusal === "not-same-machine") return t("web.file_open_not_same_machine", void 0, lang);
-  if (refusal === "launch-failed") return t("web.file_open_launch_failed", void 0, lang);
-  return describeRefusal(refusal, lang);
+function decodeNativePick(platform, stdout) {
+  const raw = stdout.trim();
+  if (platform !== "win32") return raw;
+  return Buffer.from(raw, "base64").toString("utf-8").trim();
 }
-function refuse(res, refusal, lang) {
-  sendJson(res, 200, {
-    ok: false,
-    refusal,
-    message: describeOpenRefusal(refusal, lang)
-  });
+function isPickCanceled(platform, code, stderr) {
+  if (code !== 1) return false;
+  if (platform === "win32") return true;
+  return /-128|user canceled/i.test(stderr);
 }
-async function openFileWithSystemApp(ctx, req, res, sessionId, lang) {
-  if (!ctx.sameMachine) {
-    return sendError(res, 403, "not-same-machine", describeOpenRefusal("not-same-machine", lang));
+var inFlight = false;
+async function pickNativeDirectory(opts) {
+  const platform = opts.platform ?? process.platform;
+  const candidates = nativePickerCommands(platform, opts.prompt);
+  if (!candidates) {
+    return { ok: false, reason: "unsupported", message: `unsupported platform: ${platform}` };
   }
-  const root = resolveViewRoot(ctx, res, sessionId, lang);
-  if (root === null) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const path = typeof payload["path"] === "string" ? payload["path"].trim() : "";
-  if (path === "") {
-    return sendError(res, 400, "missing-path", t("web.file_view_missing_path", void 0, lang));
+  if (inFlight) {
+    return { ok: false, reason: "busy", message: "a directory picker is already open" };
   }
-  const plan = ctx.runtime.workspaceFiles.planSystemOpen(path, root);
-  if (!plan.ok) return refuse(res, plan.reason, lang);
+  const run = opts.runner ?? execFileRunner;
+  inFlight = true;
   try {
-    const child = spawn(plan.command, [...plan.args], { stdio: "ignore", detached: true });
-    await new Promise((done, fail) => {
-      child.on("error", fail);
-      child.on("spawn", () => {
-        child.unref();
-        done();
-      });
-    });
-  } catch {
-    return refuse(res, "launch-failed", lang);
+    let last = "";
+    for (const [index, candidate] of candidates.entries()) {
+      const attempt = await run(candidate.command, candidate.args, opts.signal);
+      if (attempt.missing) {
+        last = attempt.message || `${candidate.command} not found`;
+        if (index < candidates.length - 1) continue;
+        return { ok: false, reason: "failed", message: last };
+      }
+      if (!attempt.code) {
+        const path = decodeNativePick(platform, attempt.stdout);
+        return path ? { ok: true, path } : { ok: false, reason: "failed", message: "picker returned an empty path" };
+      }
+      if (isPickCanceled(platform, attempt.code, attempt.stderr)) {
+        return { ok: true, canceled: true };
+      }
+      return { ok: false, reason: "failed", message: attempt.stderr.trim() || attempt.message };
+    }
+    return { ok: false, reason: "failed", message: last };
+  } finally {
+    inFlight = false;
   }
-  sendJson(res, 200, { ok: true });
 }
-async function forgetWorkspace(ctx, sessionId, req, res, lang) {
-  const body = await readJsonBody(req, void 0, lang);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  if (!conformsToWire(body.value, WIRE_FORGET_WORKSPACE_FIELDS)) {
-    return sendError(res, 400, "bad-request", t("web.forget_bad_request", {}, lang));
-  }
-  const { root } = body.value;
-  const workspaces = ctx.runtime.workspaces;
-  if (!workspaces.known().some((w) => w.root === root)) {
-    return sendError(res, 404, "unknown-workspace", t("web.forget_unknown", {}, lang));
-  }
-  const current = workspaces.of(sessionId)?.workspace.root;
-  if (current !== void 0 && current === root) {
-    return sendError(res, 409, "workspace-in-use", t("web.forget_in_use", {}, lang));
+var execFileRunner = (command, args, signal) => new Promise((done) => {
+  guardSpawn(
+    () => execFile(
+      command,
+      [...args],
+      {
+        ...signal ? { signal } : {},
+        encoding: "utf-8",
+        windowsHide: true,
+        maxBuffer: 1024 * 1024
+      },
+      (error, stdout, stderr) => {
+        const err = error;
+        done({
+          code: err?.code ?? 0,
+          stdout,
+          stderr,
+          missing: err?.code === "ENOENT",
+          message: err?.message ?? ""
+        });
+      }
+    ),
+    (err) => done({
+      code: err.code ?? 1,
+      stdout: "",
+      stderr: "",
+      missing: err.code === "ENOENT" || err.code === "ENOTDIR",
+      message: `${err.message} (command=${command})`
+    })
+  );
+});
+// src/workspace/dirs.ts
+function browseWorkspaceDirs(ctx, res, rawUrl, lang) {
+  const query = new URL(rawUrl ?? "/", "http://127.0.0.1").searchParams;
+  const path = dirsQuery(query) ?? atQuery(query);
+  if (path === void 0) {
+    return sendJson(res, 200, workspaceAnchors(ctx.runtime.workspaces));
   }
-  workspaces.forget(root);
-  sendJson(res, 200, {
-    known: toWireTrustList(workspaces.known(), workspaces, current ?? null)
-  });
-}
-var GIT_TIMEOUT_MS = 1e4;
-var GIT_MAX_BUFFER = 16 * 1024 * 1024;
-function runGit(cwd, args) {
-  if (!canProbeGit()) return Promise.resolve({ ok: false, error: "git unavailable" });
-  return new Promise((resolve4) => {
-    guardSpawn(
-      () => execFile(
-        "git",
-        [...args],
-        { cwd, timeout: GIT_TIMEOUT_MS, maxBuffer: GIT_MAX_BUFFER, encoding: "buffer" },
-        (err, stdout) => {
-          if (err) return resolve4({ ok: false, error: err.message });
-          resolve4({ ok: true, stdout });
-        }
-      ),
-      (err) => resolve4({ ok: false, error: `${err.message} (cwd=${cwd})` })
-    );
+  const outcome = listWorkspaceDirs(ctx.runtime.workspaces, path, {
+    hidden: hiddenQuery(query)
   });
-}
-async function repoRoot(cwd) {
-  const result = await runGit(cwd, ["rev-parse", "--show-toplevel"]);
-  if (!result.ok) return null;
-  const root = result.stdout.toString("utf-8").trim();
-  return root.length > 0 ? root : null;
-}
-async function hasHead(root) {
-  return (await runGit(root, ["rev-parse", "--verify", "--quiet", "HEAD"])).ok;
-}
-var NULL_SHA = /^0+$/;
-async function rawChanges(root) {
-  const result = await runGit(root, ["diff", "--raw", "-z", "HEAD", "--"]);
-  if (!result.ok) return [];
-  return parseRawZ(result.stdout.toString("utf-8"));
-}
-function parseRawZ(text) {
-  const tokens = text.split("\0");
-  const changes = [];
-  let i = 0;
-  while (i < tokens.length) {
-    const meta = tokens[i];
-    if (meta === void 0 || !meta.startsWith(":")) {
-      i += 1;
-      continue;
-    }
-    const parts = meta.slice(1).split(" ");
-    const oldSha = parts[2] ?? "";
-    const status = (parts[4] ?? "").trim();
-    const renamed = status.startsWith("R") || status.startsWith("C");
-    const first = tokens[i + 1];
-    const second = renamed ? tokens[i + 2] : void 0;
-    i += renamed ? 3 : 2;
-    if (first === void 0 || renamed && second === void 0) break;
-    const path = renamed ? second : first;
-    changes.push({
-      status: status.charAt(0),
-      path,
-      ...renamed ? { oldPath: first } : {},
-      oldSha: NULL_SHA.test(oldSha) ? null : oldSha
-    });
+  if (outcome.ok) return sendJson(res, 200, outcome.view);
+  if (outcome.reason === "denied") {
+    return sendError(
+      res,
+      403,
+      "workspace-denied",
+      t("web.dirs_denied", { path: outcome.path }, lang)
+    );
   }
-  return changes;
-}
-async function treeBlobSizes(root) {
-  const sizes = /* @__PURE__ */ new Map();
-  const result = await runGit(root, ["ls-tree", "-r", "-l", "-z", "HEAD"]);
-  if (!result.ok) return sizes;
-  for (const record of splitZ(result.stdout.toString("utf-8"))) {
-    const tab = record.indexOf("	");
-    if (tab < 0) continue;
-    const columns = record.slice(0, tab).split(/\s+/).filter(Boolean);
-    const sha = columns[2];
-    const size = Number(columns[3]);
-    if (columns[1] === "blob" && sha && Number.isFinite(size)) sizes.set(sha, size);
+  if (outcome.reason === "missing") {
+    return sendError(res, 404, "not-found", t("web.dirs_missing", { path: outcome.path }, lang));
   }
-  return sizes;
-}
-async function untrackedFiles(root) {
-  const result = await runGit(root, ["ls-files", "-z", "--others", "--exclude-standard"]);
-  if (!result.ok) return [];
-  return splitZ(result.stdout.toString("utf-8"));
-}
-async function trackedFiles(root) {
-  const result = await runGit(root, ["ls-files", "-z"]);
-  if (!result.ok) return [];
-  return splitZ(result.stdout.toString("utf-8"));
+  sendError(
+    res,
+    400,
+    "bad-workspace",
+    outcome.reason === "not-absolute" ? t("web.dirs_not_absolute", { path: outcome.path }, lang) : t("web.dirs_not_a_directory", { path: outcome.path }, lang)
+  );
 }
-async function catFileBlob(root, sha) {
-  const result = await runGit(root, ["cat-file", "blob", sha]);
-  return result.ok ? result.stdout : null;
+function dirsQuery(query) {
+  const value = query.get("path")?.trim();
+  return value ? value : void 0;
 }
-function splitZ(text) {
-  return text.split("\0").filter((s) => s.length > 0);
+function atQuery(query) {
+  return query.get("at")?.trim().toLowerCase() === "home" ? workspaceHome() : void 0;
 }
-// src/workspace/diff.ts
-var MAX_DIFF_BYTES = 512 * 1024;
-var MAX_DIFF_FILES = 200;
-var BINARY_SNIFF_BYTES = 8e3;
-var ABSENT = { kind: "absent" };
-async function collectWorkspaceDiff(opts) {
-  const root = await repoRoot(opts.workDir);
-  return root === null ? await checkpointDiff(opts) : await gitDiff(root);
+function hiddenQuery(query) {
+  const value = query.get("hidden")?.trim().toLowerCase();
+  return value === "1" || value === "true";
 }
-async function gitDiff(root) {
-  const wanted = await collectGitPaths(root);
-  const notes = [];
-  const truncated = wanted.length > MAX_DIFF_FILES;
-  const picked = truncated ? wanted.slice(0, MAX_DIFF_FILES) : wanted;
-  if (truncated) notes.push("truncated");
-  if (wanted.length === 0) notes.push("no-changes");
-  const sizes = picked.some((p) => p.oldSha !== null) ? await treeBlobSizes(root) : /* @__PURE__ */ new Map();
-  const files = [];
-  for (const item of picked) {
-    const old = await gitSide(root, item.oldSha, sizes);
-    const fresh = await worktreeSide(join(root, ...item.path.split("/")));
-    files.push(describe3(item.path, old, fresh));
+async function createWorkspaceDir(req, res, lang) {
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const parent = typeof payload["parent"] === "string" ? payload["parent"].trim() : "";
+  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
+  if (parent.length === 0 || !isAbsolute(parent)) {
+    return sendError(
+      res,
+      400,
+      "bad-workspace",
+      t("web.mkdir_parent_not_absolute", { parent }, lang)
+    );
   }
-  return { source: "git", root, files, truncated, notes };
-}
-async function collectGitPaths(root) {
-  const byPath = /* @__PURE__ */ new Map();
-  if (await hasHead(root)) {
-    for (const change of await rawChanges(root)) {
-      if (change.oldPath !== void 0) {
-        byPath.set(change.oldPath, { path: change.oldPath, oldSha: change.oldSha });
-      }
-      byPath.set(change.path, {
-        path: change.path,
-        oldSha: change.oldPath === void 0 ? change.oldSha : null
-      });
-    }
-  } else {
-    for (const path of await trackedFiles(root)) byPath.set(path, { path, oldSha: null });
+  if (!isSingleSegment(name)) {
+    return sendError(res, 400, "bad-workspace", t("web.mkdir_bad_name", { name }, lang));
   }
-  for (const path of await untrackedFiles(root)) {
-    if (!byPath.has(path)) byPath.set(path, { path, oldSha: null });
+  const path = resolve(parent, name);
+  try {
+    mkdirSync(path);
+  } catch (cause) {
+    return sendError(res, ...mkdirFailure(cause, path, lang));
   }
-  return [...byPath.values()].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
-}
-async function gitSide(root, sha, sizes) {
-  if (sha === null) return ABSENT;
-  const known = sizes.get(sha);
-  if (known !== void 0 && known > MAX_DIFF_BYTES) return { kind: "oversize", bytes: known };
-  const data = await catFileBlob(root, sha);
-  if (data === null) return { kind: "oversize", bytes: known ?? -1 };
-  return { kind: "content", data };
+  sendJson(res, 200, {
+    entry: {
+      name,
+      path,
+      readable: true,
+      known: false,
+      group: "child"
+    }
+  });
 }
-async function checkpointDiff(opts) {
-  const notes = ["not-a-git-repo"];
-  const paths = await checkpointPaths(opts.checkpoints);
-  if (paths.length === 0) {
-    notes.push(opts.checkpoints === null ? "no-workspace-history" : "no-changes");
-    return { source: "none", root: opts.workDir, files: [], truncated: false, notes };
+async function pickWorkspaceDir(ctx, req, res, lang) {
+  if (!ctx.nativeDirPicker) {
+    return sendError(res, 403, "native-picker-unavailable", t("web.pick_unavailable", {}, lang));
   }
-  const truncated = paths.length > MAX_DIFF_FILES;
-  const picked = truncated ? paths.slice(0, MAX_DIFF_FILES) : paths;
-  if (truncated) notes.push("truncated");
-  const files = [];
-  for (const absolute of picked) {
-    const fresh = await worktreeSide(absolute);
-    files.push(
-      describe3(displayPath(opts.workDir, absolute), ABSENT, fresh, {
-        status: fresh.kind === "absent" ? "deleted" : "modified",
-        omitted: "no-snapshot"
-      })
+  const abort = new AbortController();
+  req.on("close", () => abort.abort());
+  const outcome = await pickNativeDirectory({
+    prompt: t("web.pick_prompt", {}, lang),
+    signal: abort.signal
+  });
+  if (res.writableEnded || abort.signal.aborted) return;
+  if (outcome.ok) {
+    return sendJson(
+      res,
+      200,
+      outcome.path === void 0 ? { canceled: true } : { path: outcome.path }
     );
   }
-  return { source: "checkpoints", root: opts.workDir, files, truncated, notes };
-}
-async function checkpointPaths(checkpoints) {
-  if (!checkpoints) return [];
-  const paths = /* @__PURE__ */ new Set();
-  try {
-    for (const summary of await checkpoints.list()) {
-      const preview = await checkpoints.preview(summary.turnIndex);
-      if (!preview) continue;
-      for (const plan of [...preview.files, ...preview.conflicts]) {
-        if (plan.action !== "skip") paths.add(plan.path);
-      }
-    }
-  } catch {
+  if (outcome.reason === "busy") {
+    return sendError(res, 409, "native-picker-busy", t("web.pick_busy", {}, lang));
   }
-  return [...paths].sort();
+  sendError(
+    res,
+    500,
+    "native-picker-failed",
+    t("web.pick_failed", { detail: outcome.message }, lang)
+  );
 }
-function displayPath(workDir, absolute) {
-  const rel = relative(workDir, absolute);
-  if (rel.length === 0 || rel.startsWith("..") || isAbsolute(rel)) return absolute;
-  return rel.split(sep).join("/");
+function isSingleSegment(name) {
+  if (name.length === 0) return false;
+  if (name === "." || name === "..") return false;
+  return !name.includes("/") && !name.includes(sep);
 }
-async function worktreeSide(absolute) {
-  try {
-    const info = await stat(absolute);
-    if (!info.isFile()) return ABSENT;
-    if (info.size > MAX_DIFF_BYTES) return { kind: "oversize", bytes: info.size };
-    return { kind: "content", data: await readFile(absolute) };
-  } catch {
-    return ABSENT;
+function mkdirFailure(cause, path, lang) {
+  const code = cause?.code;
+  if (code === "EEXIST") return [409, "workspace-exists", t("web.mkdir_exists", { path }, lang)];
+  if (code === "EACCES" || code === "EPERM") {
+    return [403, "workspace-denied", t("web.mkdir_denied", { path }, lang)];
   }
+  if (code === "ENOENT") return [404, "not-found", t("web.mkdir_parent_missing", { path }, lang)];
+  return [500, "internal", t("web.mkdir_failed", { path }, lang)];
 }
-function describe3(path, old, fresh, override = {}) {
-  const status = override.status ?? (old.kind === "absent" ? "added" : fresh.kind === "absent" ? "deleted" : "modified");
-  const oldBytes = bytesOf(old);
-  const newBytes = bytesOf(fresh);
-  const hard = omitReason(old, fresh);
-  if (hard !== void 0) {
-    return { path, status, oldContent: null, newContent: null, oldBytes, newBytes, omitted: hard };
-  }
-  return {
-    path,
-    status,
-    oldContent: textOf(old),
-    newContent: textOf(fresh),
-    oldBytes,
-    newBytes,
-    ...override.omitted === void 0 ? {} : { omitted: override.omitted }
-  };
+var MAX_TEXT_BYTES = 2 * 1024 * 1024;
+var VIEWABLE = /* @__PURE__ */ new Map([
+  [".png", { kind: "image", mime: "image/png" }],
+  [".jpg", { kind: "image", mime: "image/jpeg" }],
+  [".jpeg", { kind: "image", mime: "image/jpeg" }],
+  [".gif", { kind: "image", mime: "image/gif" }],
+  [".webp", { kind: "image", mime: "image/webp" }],
+  [".bmp", { kind: "image", mime: "image/bmp" }],
+  [".ico", { kind: "image", mime: "image/x-icon" }],
+  [".avif", { kind: "image", mime: "image/avif" }],
+  [".pdf", { kind: "pdf", mime: "application/pdf" }],
+  [".mp3", { kind: "audio", mime: "audio/mpeg" }],
+  [".wav", { kind: "audio", mime: "audio/wav" }],
+  [".ogg", { kind: "audio", mime: "audio/ogg" }],
+  [".m4a", { kind: "audio", mime: "audio/mp4" }],
+  [".flac", { kind: "audio", mime: "audio/flac" }],
+  [".mp4", { kind: "video", mime: "video/mp4" }],
+  [".webm", { kind: "video", mime: "video/webm" }],
+  [".mov", { kind: "video", mime: "video/quicktime" }]
+]);
+function kindOf(stat3) {
+  if (stat3.kind === "text") return "text";
+  return VIEWABLE.get(extname(stat3.rel).toLowerCase())?.kind ?? "opaque";
 }
-function bytesOf(side) {
-  if (side.kind === "absent") return null;
-  if (side.kind === "oversize") return side.bytes < 0 ? null : side.bytes;
-  return side.data.byteLength;
+function toWireRefusal(reason) {
+  return reason;
+}
+function statusFor(refusal) {
+  if (refusal === "denied") return 403;
+  if (refusal === "missing") return 404;
+  if (refusal === "too-large") return 413;
+  return refusal === "not-a-file" ? 400 : 503;
+}
+function describeRefusal(refusal, lang) {
+  if (refusal === "denied") return t("web.file_view_denied", void 0, lang);
+  if (refusal === "missing") return t("web.file_view_missing", void 0, lang);
+  if (refusal === "not-a-file") return t("web.file_view_not_a_file", void 0, lang);
+  if (refusal === "too-large") {
+    return t("web.file_view_too_large", { max: String(MAX_TEXT_BYTES) }, lang);
+  }
+  return t("web.file_view_unreadable", void 0, lang);
 }
-function textOf(side) {
-  return side.kind === "content" ? side.data.toString("utf-8") : null;
+function resolveViewRoot(ctx, res, sessionId, lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    sendUnknownSession(res, sessionId);
+    return null;
+  }
+  const root = workspaceRootOf(ctx, sessionId);
+  if (!root) {
+    sendError(res, 409, "no-workspace", t("web.file_view_no_workspace", void 0, lang));
+    return null;
+  }
+  return root;
 }
-function omitReason(old, fresh) {
-  if (isBinary(old) || isBinary(fresh)) return "binary";
-  if (old.kind === "oversize" || fresh.kind === "oversize") return "too-large";
-  return void 0;
+function singlePath(res, rawUrl, lang) {
+  const params = new URLSearchParams((rawUrl ?? "").split("?")[1] ?? "");
+  const path = params.get("path")?.trim();
+  if (!path) {
+    sendError(res, 400, "missing-path", t("web.file_view_missing_path", void 0, lang));
+    return null;
+  }
+  return path;
 }
-function isBinary(side) {
-  return side.kind === "content" && side.data.subarray(0, BINARY_SNIFF_BYTES).includes(0);
+function statFiles(ctx, res, sessionId, rawUrl, lang) {
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
+  const params = new URLSearchParams((rawUrl ?? "").split("?")[1] ?? "");
+  const asked = params.getAll("path").filter((p) => p.trim() !== "");
+  const taken = asked.slice(0, WIRE_FILE_STAT_MAX);
+  const files = taken.map((path) => {
+    const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
+    if (!stat3.ok) return { path, ok: false, refusal: toWireRefusal(stat3.reason) };
+    return {
+      path,
+      ok: true,
+      kind: kindOf(stat3),
+      bytes: stat3.bytes,
+      mtimeMs: stat3.mtimeMs,
+      openable: ctx.sameMachine && isSystemOpenable(stat3.rel)
+    };
+  });
+  sendJson(res, 200, {
+    files,
+    overLimit: asked.length - taken.length,
+    root
+  });
 }
-// src/workspace/handlers.ts
-async function createSession(ctx, req, res, lang) {
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const field = readWorkspaceField(payload, lang);
-  if (!field.ok) return sendError(res, 400, "bad-workspace", field.message);
-  const defer = payload["deferWorkspace"] === true;
-  if (defer && field.dir !== null) {
-    return sendError(res, 400, "bad-request", t("web.workspace_defer_with_root", void 0, lang));
+function readFileText(ctx, res, sessionId, rawUrl, lang) {
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
+  const path = singlePath(res, rawUrl, lang);
+  if (path === null) return;
+  const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
+  if (!stat3.ok) {
+    const refusal = toWireRefusal(stat3.reason);
+    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
   }
-  if (defer && payload["create"] !== true) {
-    return sendError(
-      res,
-      400,
-      "bad-request",
-      t("web.workspace_defer_needs_create", void 0, lang)
-    );
+  if (stat3.kind !== "text") {
+    return sendError(res, 415, "not-text", t("web.file_view_not_text", void 0, lang));
   }
-  if (field.dir === null && payload["create"] !== true) {
-    const sessionId = ctx.runtime.sessionId;
-    const bound = ctx.runtime.workspaces.of(sessionId);
-    return sendJson(res, 200, {
-      sessionId,
-      created: false,
-      workspace: bound ? toWireSessionWorkspace(bound) : null
-    });
+  if (stat3.bytes > MAX_TEXT_BYTES) {
+    return sendError(res, 413, "too-large", describeRefusal("too-large", lang));
   }
-  const role = typeof payload["role"] === "string" ? payload["role"].trim() : "";
-  const outcome = ctx.runtime.sessionFactory.create({
-    workspace: field.dir,
-    ...lang === void 0 ? {} : { lang },
-    reuse: payload["create"] !== true,
-    ...role === "" ? {} : { role }
-  });
-  if (!outcome.ok) {
-    if (outcome.reason === "unavailable") {
-      const mapped2 = unavailableToHttp(lang);
-      return sendError(res, mapped2.status, mapped2.code, mapped2.message);
-    }
-    if (outcome.reason === "unknown-role") {
-      const mapped2 = unknownRoleToHttp(outcome.detail, lang);
-      return sendError(res, mapped2.status, mapped2.code, mapped2.message);
-    }
-    const mapped = bindFailureToHttp(outcome, lang);
-    return sendError(res, mapped.status, mapped.code, mapped.message);
+  const out = ctx.runtime.workspaceFiles.readFile(stat3.rel, root);
+  if (!out.ok) {
+    const refusal = out.reason === "binary" ? "unreadable" : out.reason;
+    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
   }
-  ctx.hub.register(outcome.live.session);
-  if (defer) ctx.runtime.workspaces.defer(outcome.live.sessionId);
-  if (outcome.created) ctx.hub.notifySessionsChanged(outcome.live.sessionId);
   sendJson(res, 200, {
-    sessionId: outcome.live.sessionId,
-    created: outcome.created,
-    workspace: outcome.live.workspace ? toWireSessionWorkspace(outcome.live.workspace) : null
+    path,
+    text: out.text,
+    bytes: out.bytes
   });
 }
-function sessionWorkspace(ctx, res, sessionId, lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId);
+function readFileBytes(ctx, res, sessionId, rawUrl, headOnly, lang) {
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
+  const path = singlePath(res, rawUrl, lang);
+  if (path === null) return;
+  const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
+  if (!stat3.ok) {
+    const refusal = toWireRefusal(stat3.reason);
+    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
   }
-  const state = ctx.runtime.workspaces.stateOf(sessionId);
-  if (state !== "none") {
-    return sendJson(res, 200, {
-      binding: toWireBinding(state, ctx.runtime.workspaces.of(sessionId))
+  const known = VIEWABLE.get(extname(stat3.rel).toLowerCase());
+  const inline = known !== void 0 && stat3.kind === "binary";
+  const headers = {
+    "Content-Type": inline ? known.mime : "application/octet-stream",
+    "X-Content-Type-Options": "nosniff",
+    "Content-Disposition": inline ? "inline" : `attachment; filename*=UTF-8''${encodeURIComponent(basenameOf(stat3.rel))}`
+  };
+  if (inline && known.kind === "pdf") headers["Content-Security-Policy"] = "sandbox";
+  if (headOnly) {
+    return sendEmpty(res, 200, {
+      ...headers,
+      "Content-Length": String(stat3.bytes)
     });
   }
-  if (ctx.hub.has(sessionId) || ctx.hub.isCooled(sessionId)) {
-    return sendJson(res, 200, {
-      binding: { state: "none" }
-    });
+  sendFile(res, stat3.absPath, headers);
+}
+function basenameOf(rel) {
+  const cut = rel.lastIndexOf("/");
+  return cut < 0 ? rel : rel.slice(cut + 1);
+}
+// src/workspace/file-open.ts
+function describeOpenRefusal(refusal, lang) {
+  if (refusal === "extension-not-allowed") {
+    return t("web.file_open_extension_not_allowed", void 0, lang);
   }
-  sendError(res, 409, "not-live-session", t("web.workspace_not_live", void 0, lang));
+  if (refusal === "not-same-machine") return t("web.file_open_not_same_machine", void 0, lang);
+  if (refusal === "launch-failed") return t("web.file_open_launch_failed", void 0, lang);
+  return describeRefusal(refusal, lang);
 }
-async function bindWorkspace(ctx, req, res, sessionId, lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId);
+function refuse(res, refusal, lang) {
+  sendJson(res, 200, {
+    ok: false,
+    refusal,
+    message: describeOpenRefusal(refusal, lang)
+  });
+}
+async function openFileWithSystemApp(ctx, req, res, sessionId, lang) {
+  if (!ctx.sameMachine) {
+    return sendError(res, 403, "not-same-machine", describeOpenRefusal("not-same-machine", lang));
   }
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const parsed = readBindWorkspaceBody(asRecord(body.value), lang);
-  if (!parsed.ok) return sendError(res, 400, "bad-workspace", parsed.message);
-  const state = ctx.runtime.workspaces.stateOf(sessionId);
-  if (state !== "unbound") {
-    return sendError(
-      res,
-      409,
-      "workspace-locked",
-      t("web.workspace_already_decided", void 0, lang)
-    );
+  const payload = asRecord(body.value);
+  const path = typeof payload["path"] === "string" ? payload["path"].trim() : "";
+  if (path === "") {
+    return sendError(res, 400, "missing-path", t("web.file_view_missing_path", void 0, lang));
   }
-  const turn = ctx.hub.stateOf(sessionId);
-  if (turn !== "idle") {
-    return sendError(res, 409, "busy", t("web.workspace_turn_running", void 0, lang), {
-      "X-Epoch-Turn-State": turn
+  const plan = ctx.runtime.workspaceFiles.planSystemOpen(path, root);
+  if (!plan.ok) return refuse(res, plan.reason, lang);
+  try {
+    const child = spawn(plan.command, [...plan.args], { stdio: "ignore", detached: true });
+    await new Promise((done, fail) => {
+      child.on("error", fail);
+      child.on("spawn", () => {
+        child.unref();
+        done();
+      });
     });
+  } catch {
+    return refuse(res, "launch-failed", lang);
   }
-  if (parsed.kind === "none") {
-    ctx.runtime.workspaces.decideNone(sessionId);
-    return sendJson(res, 200, {
-      binding: { state: "none" }
-    });
+  sendJson(res, 200, { ok: true });
+}
+async function forgetWorkspace(ctx, sessionId, req, res, lang) {
+  const body = await readJsonBody(req, void 0, lang);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  if (!conformsToWire(body.value, WIRE_FORGET_WORKSPACE_FIELDS)) {
+    return sendError(res, 400, "bad-request", t("web.forget_bad_request", {}, lang));
   }
-  const outcome = ctx.runtime.workspaces.bind(sessionId, parsed.root, lang);
-  if (!outcome.ok) {
-    const mapped = bindFailureToHttp(outcome, lang);
-    return sendError(res, mapped.status, mapped.code, mapped.message);
+  const { root } = body.value;
+  const workspaces = ctx.runtime.workspaces;
+  if (!workspaces.known().some((w) => w.root === root)) {
+    return sendError(res, 404, "unknown-workspace", t("web.forget_unknown", {}, lang));
+  }
+  const current = workspaces.of(sessionId)?.workspace.root;
+  if (current !== void 0 && current === root) {
+    return sendError(res, 409, "workspace-in-use", t("web.forget_in_use", {}, lang));
   }
+  workspaces.forget(root);
   sendJson(res, 200, {
-    binding: { state: "bound", workspace: toWireSessionWorkspace(outcome.bound) }
+    known: toWireTrustList(workspaces.known(), workspaces, current ?? null)
   });
 }
-async function sessionDiff(ctx, res, sessionId, _lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId);
-  }
-  const bound = ctx.runtime.workspaces.of(sessionId);
-  if (!bound) {
-    return sendJson(res, 200, {
-      source: "none",
-      root: "",
-      files: [],
-      truncated: false,
-      notes: ["no-workspace"]
-    });
-  }
-  sendJson(
-    res,
-    200,
-    await collectWorkspaceDiff({
-      workDir: bound.workspace.root,
-      checkpoints: checkpointsOf(ctx, sessionId)
-    })
-  );
-}
 function isKnownRoot(ctx, sessionId, root) {
   if (ctx.runtime.workspaces.of(sessionId)?.workspace.root === root) return true;
   return ctx.runtime.workspaces.known().some((w) => w.root === root);
@@ -4929,6 +5101,15 @@ async function handleApi(opts, req, res, method, segments, lang) {
   if (resource === "last-session" && first === void 0 && method === "PUT") {
     return putLastSession(ctx, req, res, lang);
   }
+  if (resource === "host" && first === "compose" && second === void 0 && method === "POST") {
+    return postHostCompose(ctx, req, res, lang);
+  }
+  if (resource === "host" && first === "compose" && second === void 0 && isRead(method)) {
+    return getHostCompose(ctx, res);
+  }
+  if (resource === "host" && first === "compose" && second !== void 0 && detail === "take" && method === "POST") {
+    return takeHostCompose(ctx, res, second);
+  }
   if (resource === "sessions") {
     return handleSessions(opts, req, res, method, first, second, detail, lang);
   }
@@ -5270,6 +5451,7 @@ async function createWebServer(opts) {
   const unsubscribeTasks = observeBackgroundTasks((sessionId) => {
     hub.notifyTasksChanged(sessionId);
   });
+  const unsubscribePlugins = opts.runtime.plugins?.onChange(() => hub.notifyPluginsChanged()) ?? (() => void 0);
   let handle = null;
   const server = createServer((req, res) => {
     if (handle) return handle(req, res);
@@ -5280,6 +5462,7 @@ async function createWebServer(opts) {
   const listened = await listen(server, binding.host, binding.port);
   if (!listened.ok) {
     unsubscribeTasks();
+    unsubscribePlugins();
     return listened;
   }
   handle = buildHandler(opts, hub, binding, listened.port, webRoot);
@@ -5293,7 +5476,7 @@ async function createWebServer(opts) {
       ...webRoot === void 0 ? {} : { webRoot },
       observe: (sink, opts2) => hub.observe(sink, opts2 ?? {}),
       snapshot: () => hub.listSessions(),
-      close: makeCloser(server, hub, opts.runtime, unsubscribeTasks)
+      close: makeCloser(server, hub, opts.runtime, unsubscribeTasks, unsubscribePlugins)
     }
   };
 }
@@ -5306,6 +5489,7 @@ function buildHandler(opts, hub, binding, port, webRoot) {
   return createRequestHandler({
     ctx: {
       hub,
+      hostCompose: new HostComposeStore(),
       runtime: opts.runtime,
       version: opts.version,
       artifactsRoot: opts.artifactsRoot ?? opts.runtime.artifactsRoot,
@@ -5345,11 +5529,12 @@ function describeListenError(err, host, port) {
   }
   return t("web.listen_failed", { host, port, reason: err.message }, void 0);
 }
-function makeCloser(server, hub, runtime, unsubscribeTasks) {
+function makeCloser(server, hub, runtime, unsubscribeTasks, unsubscribePlugins) {
   let closing = null;
   return () => {
     closing ??= (async () => {
       unsubscribeTasks();
+      unsubscribePlugins();
       hub.shutdown();
       server.closeAllConnections();
       await new Promise((resolve4) => server.close(() => resolve4()));