@epoch-agent/server 0.18.0 → 0.20.0

package/dist/index.js

@@ -1,13 +1,13 @@
 import { createServer } from 'http';
 import { createLogger, t, ApprovalRelay, QuestionRelay, serializeStream, withRoleScope, withModelScope, withToolScope, nextRunAt, observeBackgroundTasks, skillIndexDescription, SANDBOX_EXCLUDES, SANDBOX_COVERS, canProbeGit, guardSpawn, isSystemOpenable, backgroundTaskOutput, listBackgroundTasks, providerLabel, MAX_REASON_CHARS, MAX_OBJECTIVE_CHARS, MAX_GOAL_MAX_ROUNDS, DEFAULT_GOAL_MAX_ROUNDS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_DEFAULTS, coalesceRecording, readRecording } from '@epoch-agent/runtime';
-import { timingSafeEqual, randomBytes } from 'crypto';
+import { timingSafeEqual, randomBytes, randomUUID } from 'crypto';
 import { PLAN_OUTCOMES, WIRE_AUTH_COOKIE, WIRE_AUTH_COOKIE_ATTRS, WIRE_AUTH_TOKEN_PARAM, extractAllMentions, MAX_ATTACH_FILES, utf8ByteLength, MAX_SESSION_REFS, attachSessionSurface, isWireRewindScope, WIRE_REWIND_SCOPES, mcpConnectorState, MAX_ATTACH_TOTAL_BYTES, MAX_ATTACH_BYTES, truncateToBudget, WIRE_LANG_PARAM, isLang, conformsToWire, WIRE_LAST_SESSION_FIELDS, isQuestionAnswerMap, isProviderType, apiKeyEnvVar, WIRE_FILE_STAT_MAX, WIRE_SETTING_WRITE_LAYERS, isWirePlanAction, WIRE_PLAN_ACTIONS, isPermissionLevel, PERMISSION_LEVELS, WIRE_TRUST_REQUEST_FIELDS, WIRE_FORGET_WORKSPACE_FIELDS, collectPendingApprovals, unfixedRules, isWireSettingWriteLayer, parseModelRef, WIRE_GOAL_ACTIONS, OPERATION_TYPES, isOperationType, WIRE_PLUGIN_UPLOAD_FORM_FIELDS } from '@epoch-agent/protocol';
 import { resolve, join, relative, isAbsolute, sep, dirname, basename, extname } from 'path';
 import { existsSync, realpathSync, statSync, mkdirSync, createReadStream, readdirSync, createWriteStream, accessSync, constants } from 'fs';
 import { stat, readFile, rm } from 'fs/promises';
 import { pipeline } from 'stream/promises';
-import { homedir } from 'os';
 import { execFile, spawn } from 'child_process';
+import { homedir } from 'os';
 import { fileURLToPath } from 'url';
 
 // src/index.ts
@@ -137,6 +137,70 @@ function firstScreenUrl(host, port, token, ui = {}) {
   if (ui.lang) params.push(`${UI_LANG_PARAM}=${encodeURIComponent(ui.lang)}`);
   return `http://${authority}:${port}/?${params.join("&")}`;
 }
+var HOST_COMPOSE_TTL_MS = 10 * 6e4;
+var HostComposeStore = class {
+  items = /* @__PURE__ */ new Map();
+  now;
+  ttlMs;
+  newId;
+  constructor(opts = {}) {
+    this.now = opts.now ?? Date.now;
+    this.ttlMs = opts.ttlMs ?? HOST_COMPOSE_TTL_MS;
+    this.newId = opts.newId ?? (() => `hc_${randomUUID()}`);
+  }
+  record(input) {
+    const now = this.now();
+    this.sweep(now);
+    for (const [id, item2] of this.items) {
+      if (item2.sessionId === input.sessionId && item2.takenAt === void 0) this.items.delete(id);
+    }
+    const item = {
+      id: this.newId(),
+      sessionId: input.sessionId,
+      text: input.text,
+      autoSend: input.autoSend,
+      createdAt: now
+    };
+    this.items.set(item.id, item);
+    return item;
+  }
+  pending() {
+    this.sweep(this.now());
+    let newest = null;
+    for (const item of this.items.values()) {
+      if (item.takenAt !== void 0) continue;
+      if (newest === null || item.createdAt >= newest.createdAt) newest = item;
+    }
+    return newest;
+  }
+  take(id) {
+    const now = this.now();
+    this.sweep(now, id);
+    const item = this.items.get(id);
+    if (item === void 0) return "unknown";
+    if (now - item.createdAt >= this.ttlMs) {
+      this.items.delete(id);
+      return "expired";
+    }
+    if (item.takenAt !== void 0) return "taken";
+    item.takenAt = now;
+    return "ok";
+  }
+  sweep(now, keep) {
+    for (const [id, item] of this.items) {
+      if (id === keep) continue;
+      if (now - item.createdAt >= this.ttlMs) this.items.delete(id);
+    }
+  }
+};
+function toWireHostCompose(item) {
+  return {
+    id: item.id,
+    sessionId: item.sessionId,
+    text: item.text,
+    autoSend: item.autoSend
+  };
+}
 // src/ring.ts
 var DEFAULT_RING_CAPACITY = 512;
 var EnvelopeRing = class {
@@ -601,6 +665,10 @@ var SessionHub = class {
     if (this.closed) return;
     this.publish(void 0, { type: "plugins-changed" });
   }
+  notifyHostCompose(sessionId, payload) {
+    if (this.closed) return;
+    this.publish(sessionId, { type: "host-compose", ...payload });
+  }
   shutdown() {
     if (this.closed) return;
     this.closed = true;
@@ -1663,12 +1731,19 @@ function lastSessionField(ctx) {
   if (!ctx.hub.has(recorded) && !ctx.runtime.sessions?.get(recorded)) return {};
   return { lastSessionId: recorded };
 }
+function hostComposeField(ctx) {
+  const item = ctx.hostCompose.pending();
+  if (!item) return {};
+  if (!ctx.hub.has(item.sessionId) && !ctx.runtime.sessions?.get(item.sessionId)) return {};
+  return { hostCompose: toWireHostCompose(item) };
+}
 function config(ctx, res, lang) {
   const { runtime } = ctx;
   const bound = runtime.workspaces.of(runtime.sessionId);
   sendJson(res, 200, {
     sessionId: runtime.sessionId,
     ...lastSessionField(ctx),
+    ...hostComposeField(ctx),
     model: runtime.config.model,
     permission: runtime.config.permission,
     workspace: bound ? toWireSessionWorkspace(bound) : null,
@@ -2378,970 +2453,1411 @@ function listBlockedGoals(ctx, res, _lang) {
   );
   sendJson(res, 200, { items });
 }
-async function putLastSession(ctx, req, res, lang) {
-  const control = ctx.runtime.lastOpenSession;
-  if (!control) {
-    return sendError(
-      res,
-      503,
-      "no-last-session-store",
-      t("web.last_session_unavailable", {}, lang)
-    );
-  }
-  const body = await readJsonBody(req, void 0, lang);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  if (!conformsToWire(body.value, WIRE_LAST_SESSION_FIELDS)) {
-    return sendError(res, 400, "bad-request", t("web.last_session_bad_request", {}, lang));
-  }
-  const { sessionId } = body.value;
-  if (typeof sessionId !== "string" || sessionId.length === 0) {
-    return sendError(res, 400, "bad-request", t("web.last_session_bad_request", {}, lang));
-  }
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId, lang);
-  }
-  const failure = control.set(sessionId);
-  if (failure) return sendError(res, 500, "write-failed", failure(lang));
-  sendJson(res, 200, { ok: true });
-}
-function readConfig(ctx, res, lang) {
-  if (ctx.lanExposed) return sendLanExposed(res, lang);
-  const outcome = ctx.runtime.mcp.readConfig();
-  if (!outcome.ok) {
-    return sendError(
-      res,
-      409,
-      "mcp-config-unreadable",
-      t("web.mcp_config_unreadable", { detail: outcome.detail }, lang)
+var GIT_TIMEOUT_MS = 1e4;
+var GIT_MAX_BUFFER = 16 * 1024 * 1024;
+function runGit(cwd, args) {
+  if (!canProbeGit()) return Promise.resolve({ ok: false, error: "git unavailable" });
+  return new Promise((resolve4) => {
+    guardSpawn(
+      () => execFile(
+        "git",
+        [...args],
+        { cwd, timeout: GIT_TIMEOUT_MS, maxBuffer: GIT_MAX_BUFFER, encoding: "buffer" },
+        (err, stdout) => {
+          if (err) return resolve4({ ok: false, error: err.message });
+          resolve4({ ok: true, stdout });
+        }
+      ),
+      (err) => resolve4({ ok: false, error: `${err.message} (cwd=${cwd})` })
     );
-  }
-  const { snapshot } = outcome;
-  sendJson(res, 200, {
-    configPath: snapshot.configPath,
-    text: snapshot.text,
-    exists: snapshot.exists,
-    revision: snapshot.revision,
-    issues: toWireIssues(snapshot.issues)
   });
 }
-async function saveConfig(ctx, req, res, lang) {
-  if (ctx.lanExposed) return sendLanExposed(res, lang);
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const text = payload["text"];
-  const revision = payload["revision"];
-  if (typeof text !== "string" || typeof revision !== "string") {
-    return sendError(
-      res,
-      400,
-      "bad-mcp-config-body",
-      t("web.mcp_config_bad_body", void 0, lang)
-    );
+async function repoRoot(cwd) {
+  const result = await runGit(cwd, ["rev-parse", "--show-toplevel"]);
+  if (!result.ok) return null;
+  const root = result.stdout.toString("utf-8").trim();
+  return root.length > 0 ? root : null;
+}
+async function hasHead(root) {
+  return (await runGit(root, ["rev-parse", "--verify", "--quiet", "HEAD"])).ok;
+}
+var NULL_SHA = /^0+$/;
+async function rawChanges(root) {
+  const result = await runGit(root, ["diff", "--raw", "-z", "HEAD", "--"]);
+  if (!result.ok) return [];
+  return parseRawZ(result.stdout.toString("utf-8"));
+}
+function parseRawZ(text) {
+  const tokens = text.split("\0");
+  const changes = [];
+  let i = 0;
+  while (i < tokens.length) {
+    const meta = tokens[i];
+    if (meta === void 0 || !meta.startsWith(":")) {
+      i += 1;
+      continue;
+    }
+    const parts = meta.slice(1).split(" ");
+    const oldSha = parts[2] ?? "";
+    const status = (parts[4] ?? "").trim();
+    const renamed = status.startsWith("R") || status.startsWith("C");
+    const first = tokens[i + 1];
+    const second = renamed ? tokens[i + 2] : void 0;
+    i += renamed ? 3 : 2;
+    if (first === void 0 || renamed && second === void 0) break;
+    const path = renamed ? second : first;
+    changes.push({
+      status: status.charAt(0),
+      path,
+      ...renamed ? { oldPath: first } : {},
+      oldSha: NULL_SHA.test(oldSha) ? null : oldSha
+    });
   }
-  const outcome = ctx.runtime.mcp.writeConfig(text, revision, lang);
-  if (!outcome.ok) return sendError(res, ...saveFailure(outcome.reason, outcome.detail, lang));
-  sendJson(res, 200, {
-    configPath: outcome.configPath,
-    revision: outcome.revision,
-    issues: toWireIssues(outcome.issues)
-  });
+  return changes;
 }
-async function applyConfig(ctx, req, res, lang) {
-  if (ctx.lanExposed) return sendLanExposed(res, lang);
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const revision = asRecord(body.value)["revision"];
-  if (typeof revision !== "string") {
-    return sendError(
-      res,
-      400,
-      "bad-mcp-config-body",
-      t("web.mcp_config_bad_body", void 0, lang)
-    );
+async function treeBlobSizes(root) {
+  const sizes = /* @__PURE__ */ new Map();
+  const result = await runGit(root, ["ls-tree", "-r", "-l", "-z", "HEAD"]);
+  if (!result.ok) return sizes;
+  for (const record of splitZ(result.stdout.toString("utf-8"))) {
+    const tab = record.indexOf("	");
+    if (tab < 0) continue;
+    const columns = record.slice(0, tab).split(/\s+/).filter(Boolean);
+    const sha = columns[2];
+    const size = Number(columns[3]);
+    if (columns[1] === "blob" && sha && Number.isFinite(size)) sizes.set(sha, size);
   }
-  const outcome = await ctx.runtime.mcp.applyConfig(revision, lang);
-  if (!outcome.ok) return sendError(res, ...applyFailure(outcome.reason, outcome.detail, lang));
-  sendJson(res, 200, {
-    configPath: outcome.configPath,
-    revision: outcome.revision,
-    issues: toWireIssues(outcome.issues),
-    changes: outcome.changes.map((change) => ({
-      name: change.name,
-      action: change.action,
-      ...change.status === void 0 ? {} : { server: toWireMcp(change.status) },
-      ...change.reason === void 0 ? {} : { reason: change.reason }
-    }))
-  });
+  return sizes;
 }
-function sendLanExposed(res, lang) {
-  sendError(res, 403, "mcp-config-lan-exposed", t("web.mcp_config_lan_exposed", void 0, lang));
+async function untrackedFiles(root) {
+  const result = await runGit(root, ["ls-files", "-z", "--others", "--exclude-standard"]);
+  if (!result.ok) return [];
+  return splitZ(result.stdout.toString("utf-8"));
 }
-function saveFailure(reason, detail, lang) {
-  if (reason === "stale") {
-    return [409, "mcp-config-stale", t("web.mcp_config_stale", void 0, lang)];
+async function trackedFiles(root) {
+  const result = await runGit(root, ["ls-files", "-z"]);
+  if (!result.ok) return [];
+  return splitZ(result.stdout.toString("utf-8"));
+}
+async function catFileBlob(root, sha) {
+  const result = await runGit(root, ["cat-file", "blob", sha]);
+  return result.ok ? result.stdout : null;
+}
+function splitZ(text) {
+  return text.split("\0").filter((s) => s.length > 0);
+}
+// src/workspace/diff.ts
+var MAX_DIFF_BYTES = 512 * 1024;
+var MAX_DIFF_FILES = 200;
+var BINARY_SNIFF_BYTES = 8e3;
+var ABSENT = { kind: "absent" };
+async function collectWorkspaceDiff(opts) {
+  const root = await repoRoot(opts.workDir);
+  return root === null ? await checkpointDiff(opts) : await gitDiff(root);
+}
+async function gitDiff(root) {
+  const wanted = await collectGitPaths(root);
+  const notes = [];
+  const truncated = wanted.length > MAX_DIFF_FILES;
+  const picked = truncated ? wanted.slice(0, MAX_DIFF_FILES) : wanted;
+  if (truncated) notes.push("truncated");
+  if (wanted.length === 0) notes.push("no-changes");
+  const sizes = picked.some((p) => p.oldSha !== null) ? await treeBlobSizes(root) : /* @__PURE__ */ new Map();
+  const files = [];
+  for (const item of picked) {
+    const old = await gitSide(root, item.oldSha, sizes);
+    const fresh = await worktreeSide(join(root, ...item.path.split("/")));
+    files.push(describe3(item.path, old, fresh));
   }
-  if (reason === "invalid-json") return [400, "mcp-config-invalid-json", detail];
-  return [409, "mcp-config-unwritable", t("web.mcp_config_unwritable", { detail }, lang)];
+  return { source: "git", root, files, truncated, notes };
 }
-function applyFailure(reason, detail, lang) {
-  if (reason === "unreadable") {
-    return [409, "mcp-config-unreadable", t("web.mcp_config_unreadable", { detail }, lang)];
+async function collectGitPaths(root) {
+  const byPath = /* @__PURE__ */ new Map();
+  if (await hasHead(root)) {
+    for (const change of await rawChanges(root)) {
+      if (change.oldPath !== void 0) {
+        byPath.set(change.oldPath, { path: change.oldPath, oldSha: change.oldSha });
+      }
+      byPath.set(change.path, {
+        path: change.path,
+        oldSha: change.oldPath === void 0 ? change.oldSha : null
+      });
+    }
+  } else {
+    for (const path of await trackedFiles(root)) byPath.set(path, { path, oldSha: null });
   }
-  if (reason === "stale") {
-    return [409, "mcp-config-stale", t("web.mcp_config_stale", void 0, lang)];
+  for (const path of await untrackedFiles(root)) {
+    if (!byPath.has(path)) byPath.set(path, { path, oldSha: null });
   }
-  if (reason === "invalid-json") return [400, "mcp-config-invalid-json", detail];
-  return [409, "mcp-config-no-servers", t("web.mcp_config_no_servers", { detail }, lang)];
+  return [...byPath.values()].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
 }
-function toWireIssues(issues) {
-  return issues.map((issue) => ({ path: issue.path, message: issue.message }));
+async function gitSide(root, sha, sizes) {
+  if (sha === null) return ABSENT;
+  const known = sizes.get(sha);
+  if (known !== void 0 && known > MAX_DIFF_BYTES) return { kind: "oversize", bytes: known };
+  const data = await catFileBlob(root, sha);
+  if (data === null) return { kind: "oversize", bytes: known ?? -1 };
+  return { kind: "content", data };
 }
-async function reconnectMcp(ctx, res, name, lang) {
-  const outcome = await ctx.runtime.mcp.reconnect(name);
-  if (!outcome.ok) {
-    if (outcome.reason === "unknown") {
-      return sendError(res, 404, "unknown-mcp-server", t("web.mcp_unknown_server", { name }, lang));
-    }
-    const status = {
-      ...outcome.status,
-      ...outcome.detail === void 0 ? {} : { lastError: outcome.detail }
-    };
-    return sendJson(res, 200, {
-      ok: false,
-      server: toWireMcp(status)
-    });
+async function checkpointDiff(opts) {
+  const notes = ["not-a-git-repo"];
+  const paths = await checkpointPaths(opts.checkpoints);
+  if (paths.length === 0) {
+    notes.push(opts.checkpoints === null ? "no-workspace-history" : "no-changes");
+    return { source: "none", root: opts.workDir, files: [], truncated: false, notes };
   }
-  sendJson(res, 200, {
-    ok: true,
-    server: toWireMcp(outcome.status)
-  });
-}
-async function addMcp(ctx, req, res, lang) {
-  if (ctx.lanExposed) {
-    return sendError(
-      res,
-      403,
-      "mcp-add-lan-exposed",
-      t("web.mcp_add_lan_exposed", void 0, lang)
+  const truncated = paths.length > MAX_DIFF_FILES;
+  const picked = truncated ? paths.slice(0, MAX_DIFF_FILES) : paths;
+  if (truncated) notes.push("truncated");
+  const files = [];
+  for (const absolute of picked) {
+    const fresh = await worktreeSide(absolute);
+    files.push(
+      describe3(displayPath(opts.workDir, absolute), ABSENT, fresh, {
+        status: fresh.kind === "absent" ? "deleted" : "modified",
+        omitted: "no-snapshot"
+      })
     );
   }
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
-  const transport = payload["transport"];
-  if (transport !== "stdio" && transport !== "sse" && transport !== "http") {
-    return sendError(res, 400, "bad-mcp-config", t("web.mcp_add_bad_transport", void 0, lang));
-  }
-  const outcome = await ctx.runtime.mcp.add({
-    name,
-    transport,
-    ...typeof payload["command"] === "string" ? { command: payload["command"].trim() } : {},
-    ...Array.isArray(payload["args"]) ? { args: stringList(payload["args"]) } : {},
-    ...typeof payload["url"] === "string" ? { url: payload["url"].trim() } : {},
-    ...payload["env"] === void 0 ? {} : { env: stringMap(payload["env"]) }
-  });
-  if (!outcome.ok) {
-    return sendError(res, ...addFailure(outcome.reason, outcome.detail, name, lang));
-  }
-  sendJson(res, 200, {
-    server: toWireMcp(outcome.status),
-    configPath: outcome.configPath
-  });
+  return { source: "checkpoints", root: opts.workDir, files, truncated, notes };
 }
-function addFailure(reason, detail, name, lang) {
-  if (reason === "invalid-name") {
-    return [400, "bad-mcp-name", t("web.mcp_add_bad_name", { name }, lang)];
+async function checkpointPaths(checkpoints) {
+  if (!checkpoints) return [];
+  const paths = /* @__PURE__ */ new Set();
+  try {
+    for (const summary of await checkpoints.list()) {
+      const preview = await checkpoints.preview(summary.turnIndex);
+      if (!preview) continue;
+      for (const plan of [...preview.files, ...preview.conflicts]) {
+        if (plan.action !== "skip") paths.add(plan.path);
+      }
+    }
+  } catch {
   }
-  if (reason === "invalid-config") return [400, "bad-mcp-config", detail];
-  if (reason === "duplicate")
-    return [409, "mcp-name-taken", t("web.mcp_add_taken", { name }, lang)];
-  return [409, "mcp-config-unwritable", t("web.mcp_add_unwritable", { detail }, lang)];
+  return [...paths].sort();
 }
-function stringList(value) {
-  return value.filter((v) => typeof v === "string");
+function displayPath(workDir, absolute) {
+  const rel = relative(workDir, absolute);
+  if (rel.length === 0 || rel.startsWith("..") || isAbsolute(rel)) return absolute;
+  return rel.split(sep).join("/");
 }
-function stringMap(value) {
-  const out = {};
-  for (const [k, v] of Object.entries(asRecord(value))) {
-    if (typeof v === "string") out[k] = v;
+async function worktreeSide(absolute) {
+  try {
+    const info = await stat(absolute);
+    if (!info.isFile()) return ABSENT;
+    if (info.size > MAX_DIFF_BYTES) return { kind: "oversize", bytes: info.size };
+    return { kind: "content", data: await readFile(absolute) };
+  } catch {
+    return ABSENT;
   }
-  return out;
 }
-function toRef(raw) {
-  return parseModelRef(raw);
+function describe3(path, old, fresh, override = {}) {
+  const status = override.status ?? (old.kind === "absent" ? "added" : fresh.kind === "absent" ? "deleted" : "modified");
+  const oldBytes = bytesOf(old);
+  const newBytes = bytesOf(fresh);
+  const hard = omitReason(old, fresh);
+  if (hard !== void 0) {
+    return { path, status, oldContent: null, newContent: null, oldBytes, newBytes, omitted: hard };
+  }
+  return {
+    path,
+    status,
+    oldContent: textOf(old),
+    newContent: textOf(fresh),
+    oldBytes,
+    newBytes,
+    ...override.omitted === void 0 ? {} : { omitted: override.omitted }
+  };
 }
-function toWireSelection(selection) {
-  return { provider: selection.provider, model: selection.model, origin: selection.origin };
+function bytesOf(side) {
+  if (side.kind === "absent") return null;
+  if (side.kind === "oversize") return side.bytes < 0 ? null : side.bytes;
+  return side.data.byteLength;
 }
-function sessionHasImages(session) {
-  const history = session?.getHistory() ?? [];
-  return history.some((m) => m.parts?.some((p) => p.type === "image"));
+function textOf(side) {
+  return side.kind === "content" ? side.data.toString("utf-8") : null;
 }
-function getModel(ctx, res, sessionId, _lang) {
-  const { runtime } = ctx;
-  const live = runtime.sessionFactory.get(sessionId);
-  const selection = live?.model.get();
-  sendJson(res, 200, {
-    selection: selection ? toWireSelection(selection) : null,
-    configured: (live ? live.model.configured() : runtime.config.model) || null
-  });
+function omitReason(old, fresh) {
+  if (isBinary(old) || isBinary(fresh)) return "binary";
+  if (old.kind === "oversize" || fresh.kind === "oversize") return "too-large";
+  return void 0;
 }
-async function setModel(ctx, req, res, sessionId, lang) {
-  const live = ctx.runtime.sessionFactory.get(sessionId);
-  if (!live) return sendUnknownSession(res, sessionId);
-  const control = live.model;
+function isBinary(side) {
+  return side.kind === "content" && side.data.subarray(0, BINARY_SNIFF_BYTES).includes(0);
+}
+// src/workspace/handlers.ts
+async function createSession(ctx, req, res, lang) {
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const input = readModelSetBody(asRecord(body.value));
-  if (!input.ok)
-    return sendError(res, 400, "bad-model", t("web.model_bad_request", void 0, lang));
-  const ref = input.model === null ? null : toRef(input.model);
-  if (ref === void 0) {
-    return sendError(res, 400, "bad-model", t("web.model_bad_request", void 0, lang));
-  }
-  const selectionCtx = {
-    hasImages: sessionHasImages(live.session),
-    ...input.usedTokens === void 0 ? {} : { usedTokens: input.usedTokens }
-  };
-  const result = ref === null ? control.reset(selectionCtx) : control.set(ref, selectionCtx);
-  const payload = result.ok ? {
-    ok: true,
-    selection: toWireSelection(result.selection),
-    contextLength: result.contextLength,
-    caveats: result.caveats
-  } : { ok: false, rejection: result.rejection };
-  sendJson(res, 200, payload);
+  const outcome = await ensureSession(ctx, asRecord(body.value), lang);
+  if (!outcome.ok) return sendError(res, outcome.status, outcome.code, outcome.message);
+  sendJson(res, 200, {
+    sessionId: outcome.sessionId,
+    created: outcome.created,
+    workspace: outcome.workspace
+  });
 }
-function readModelSetBody(body) {
-  const { model, usedTokens } = body;
-  if (model !== null && (typeof model !== "string" || model.trim() === "")) return { ok: false };
-  const used = typeof usedTokens === "number" && Number.isFinite(usedTokens) && usedTokens >= 0 ? Math.floor(usedTokens) : void 0;
+async function ensureSession(ctx, payload, lang) {
+  const field = readWorkspaceField(payload, lang);
+  if (!field.ok) return { ok: false, status: 400, code: "bad-workspace", message: field.message };
+  const defer = payload["deferWorkspace"] === true;
+  if (defer && field.dir !== null) {
+    return {
+      ok: false,
+      status: 400,
+      code: "bad-request",
+      message: t("web.workspace_defer_with_root", void 0, lang)
+    };
+  }
+  if (defer && payload["create"] !== true) {
+    return {
+      ok: false,
+      status: 400,
+      code: "bad-request",
+      message: t("web.workspace_defer_needs_create", void 0, lang)
+    };
+  }
+  if (field.dir === null && payload["create"] !== true) {
+    const sessionId = ctx.runtime.sessionId;
+    const bound = ctx.runtime.workspaces.of(sessionId);
+    return {
+      ok: true,
+      sessionId,
+      created: false,
+      workspace: bound ? toWireSessionWorkspace(bound) : null
+    };
+  }
+  const role = typeof payload["role"] === "string" ? payload["role"].trim() : "";
+  const made = ctx.runtime.sessionFactory.create({
+    workspace: field.dir,
+    ...lang === void 0 ? {} : { lang },
+    reuse: payload["create"] !== true,
+    ...role === "" ? {} : { role }
+  });
+  if (!made.ok) {
+    if (made.reason === "unavailable") return { ok: false, ...unavailableToHttp(lang) };
+    if (made.reason === "unknown-role") {
+      return { ok: false, ...unknownRoleToHttp(made.detail, lang) };
+    }
+    return { ok: false, ...bindFailureToHttp(made, lang) };
+  }
+  ctx.hub.register(made.live.session);
+  if (defer) ctx.runtime.workspaces.defer(made.live.sessionId);
+  if (made.created) ctx.hub.notifySessionsChanged(made.live.sessionId);
   return {
     ok: true,
-    model: model === null ? null : model.trim(),
-    ...used === void 0 ? {} : { usedTokens: used }
+    sessionId: made.live.sessionId,
+    created: made.created,
+    workspace: made.live.workspace ? toWireSessionWorkspace(made.live.workspace) : null
   };
 }
-function planModeState(ctx, sessionId) {
-  if (!ctx.runtime.plan) return null;
-  const plan = ctx.runtime.sessionFactory.get(sessionId)?.plan;
-  if (!plan) return { active: false, from: null };
-  return { active: plan.active(), from: plan.from() };
+function sessionWorkspace(ctx, res, sessionId, lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId);
+  }
+  const state = ctx.runtime.workspaces.stateOf(sessionId);
+  if (state !== "none") {
+    return sendJson(res, 200, {
+      binding: toWireBinding(state, ctx.runtime.workspaces.of(sessionId))
+    });
+  }
+  if (ctx.hub.has(sessionId) || ctx.hub.isCooled(sessionId)) {
+    return sendJson(res, 200, {
+      binding: { state: "none" }
+    });
+  }
+  sendError(res, 409, "not-live-session", t("web.workspace_not_live", void 0, lang));
 }
-async function setPlanMode(ctx, req, res, sessionId, lang) {
-  const live = ctx.runtime.sessionFactory.get(sessionId);
-  if (!live) return sendUnknownSession(res, sessionId);
-  const plan = live.plan;
-  if (!plan) {
-    return sendError(res, 503, "no-plan-mode", t("web.plan_mode_unavailable", void 0, lang));
+async function bindWorkspace(ctx, req, res, sessionId, lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId);
   }
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const action = asRecord(body.value)["action"];
-  if (typeof action !== "string" || !isWirePlanAction(action)) {
+  const parsed = readBindWorkspaceBody(asRecord(body.value), lang);
+  if (!parsed.ok) return sendError(res, 400, "bad-workspace", parsed.message);
+  const state = ctx.runtime.workspaces.stateOf(sessionId);
+  if (state !== "unbound") {
     return sendError(
       res,
-      400,
-      "bad-action",
-      t("web.plan_mode_bad_action", { actions: WIRE_PLAN_ACTIONS.join("/") }, lang)
+      409,
+      "workspace-locked",
+      t("web.workspace_already_decided", void 0, lang)
     );
   }
-  const changed = action === "enter" ? plan.enter().ok : plan.leave() !== null;
+  const turn = ctx.hub.stateOf(sessionId);
+  if (turn !== "idle") {
+    return sendError(res, 409, "busy", t("web.workspace_turn_running", void 0, lang), {
+      "X-Epoch-Turn-State": turn
+    });
+  }
+  if (parsed.kind === "none") {
+    ctx.runtime.workspaces.decideNone(sessionId);
+    return sendJson(res, 200, {
+      binding: { state: "none" }
+    });
+  }
+  const outcome = ctx.runtime.workspaces.bind(sessionId, parsed.root, lang);
+  if (!outcome.ok) {
+    const mapped = bindFailureToHttp(outcome, lang);
+    return sendError(res, mapped.status, mapped.code, mapped.message);
+  }
   sendJson(res, 200, {
-    mode: { active: plan.active(), from: plan.from() },
-    changed
+    binding: { state: "bound", workspace: toWireSessionWorkspace(outcome.bound) }
   });
 }
-// src/permission.ts
-var REFUSAL = {
-  "managed-bypass-disabled": "managed"
-};
-function blockedLevels(managed) {
-  return managed.bypassDisabled ? [{ level: "bypass", reason: "managed" }] : [];
+async function sessionDiff(ctx, res, sessionId, _lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId);
+  }
+  const bound = ctx.runtime.workspaces.of(sessionId);
+  if (!bound) {
+    return sendJson(res, 200, {
+      source: "none",
+      root: "",
+      files: [],
+      truncated: false,
+      notes: ["no-workspace"]
+    });
+  }
+  sendJson(
+    res,
+    200,
+    await collectWorkspaceDiff({
+      workDir: bound.workspace.root,
+      checkpoints: checkpointsOf(ctx, sessionId)
+    })
+  );
 }
-function permissionState(ctx, sessionId) {
-  const perms = ctx.runtime.sessionFactory.get(sessionId)?.permissions ?? null;
-  return {
-    level: perms?.level() ?? ctx.runtime.config.permission,
-    editable: perms !== null,
-    blocked: perms ? blockedLevels(perms.managed()) : [],
-    planMode: planModeState(ctx, sessionId)
-  };
+// src/host-compose.ts
+async function postHostCompose(ctx, req, res, lang) {
+  const body = await readJsonBody(req, void 0, lang);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const sessionId = payload["sessionId"];
+  if (sessionId !== void 0 && typeof sessionId !== "string") {
+    return sendError(res, 400, "bad-request", t("web.host_compose_bad_request", void 0, lang));
+  }
+  if (sessionId !== void 0 && ["workspace", "create", "role", "deferWorkspace"].some((key) => payload[key] !== void 0)) {
+    return sendError(res, 400, "bad-request", t("web.host_compose_exclusive", void 0, lang));
+  }
+  const rawText = payload["text"];
+  if (rawText !== void 0 && typeof rawText !== "string") {
+    return sendError(res, 400, "bad-request", t("web.host_compose_bad_request", void 0, lang));
+  }
+  const text = rawText?.trim() ?? "";
+  if (rawText !== void 0 && text === "") {
+    return sendError(res, 400, "bad-request", t("web.host_compose_blank_text", void 0, lang));
+  }
+  const autoSend = payload["autoSend"] === true;
+  if (autoSend && text === "") {
+    return sendError(
+      res,
+      400,
+      "bad-request",
+      t("web.host_compose_autosend_needs_text", void 0, lang)
+    );
+  }
+  let target;
+  let created = false;
+  if (typeof sessionId === "string") {
+    if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+      return sendUnknownSession(res, sessionId, lang);
+    }
+    target = sessionId;
+  } else {
+    const outcome = await ensureSession(ctx, payload, lang);
+    if (!outcome.ok) return sendError(res, outcome.status, outcome.code, outcome.message);
+    target = outcome.sessionId;
+    created = outcome.created;
+  }
+  const item = ctx.hostCompose.record({ sessionId: target, text, autoSend });
+  ctx.hub.notifyHostCompose(target, { id: item.id, text, autoSend });
+  sendJson(res, 200, {
+    sessionId: target,
+    created,
+    composeId: item.id,
+    expiresAt: item.createdAt + HOST_COMPOSE_TTL_MS
+  });
 }
-function getPermission(ctx, res, sessionId, _lang) {
-  if (!ctx.hub.has(sessionId)) return sendUnknownSession(res, sessionId);
-  sendJson(res, 200, permissionState(ctx, sessionId));
+function getHostCompose(ctx, res) {
+  const item = ctx.hostCompose.pending();
+  sendJson(res, 200, {
+    compose: item === null ? null : toWireHostCompose(item)
+  });
 }
-async function setPermission(ctx, req, res, sessionId, lang) {
-  const live = ctx.runtime.sessionFactory.get(sessionId);
-  if (!live) return sendUnknownSession(res, sessionId);
-  const perms = live.permissions;
-  if (!perms) {
+function takeHostCompose(ctx, res, id) {
+  const result = ctx.hostCompose.take(id);
+  sendJson(
+    res,
+    200,
+    result === "ok" ? { ok: true } : { ok: false, reason: result }
+  );
+}
+async function putLastSession(ctx, req, res, lang) {
+  const control = ctx.runtime.lastOpenSession;
+  if (!control) {
     return sendError(
       res,
       503,
-      "no-permission-layer",
-      t("web.permission_unavailable", void 0, lang)
+      "no-last-session-store",
+      t("web.last_session_unavailable", {}, lang)
+    );
+  }
+  const body = await readJsonBody(req, void 0, lang);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  if (!conformsToWire(body.value, WIRE_LAST_SESSION_FIELDS)) {
+    return sendError(res, 400, "bad-request", t("web.last_session_bad_request", {}, lang));
+  }
+  const { sessionId } = body.value;
+  if (typeof sessionId !== "string" || sessionId.length === 0) {
+    return sendError(res, 400, "bad-request", t("web.last_session_bad_request", {}, lang));
+  }
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId, lang);
+  }
+  const failure = control.set(sessionId);
+  if (failure) return sendError(res, 500, "write-failed", failure(lang));
+  sendJson(res, 200, { ok: true });
+}
+function readConfig(ctx, res, lang) {
+  if (ctx.lanExposed) return sendLanExposed(res, lang);
+  const outcome = ctx.runtime.mcp.readConfig();
+  if (!outcome.ok) {
+    return sendError(
+      res,
+      409,
+      "mcp-config-unreadable",
+      t("web.mcp_config_unreadable", { detail: outcome.detail }, lang)
     );
   }
+  const { snapshot } = outcome;
+  sendJson(res, 200, {
+    configPath: snapshot.configPath,
+    text: snapshot.text,
+    exists: snapshot.exists,
+    revision: snapshot.revision,
+    issues: toWireIssues(snapshot.issues)
+  });
+}
+async function saveConfig(ctx, req, res, lang) {
+  if (ctx.lanExposed) return sendLanExposed(res, lang);
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const level = asRecord(body.value)["level"];
-  if (typeof level !== "string" || !isPermissionLevel(level)) {
+  const payload = asRecord(body.value);
+  const text = payload["text"];
+  const revision = payload["revision"];
+  if (typeof text !== "string" || typeof revision !== "string") {
     return sendError(
       res,
       400,
-      "bad-level",
-      t("web.permission_bad_level", { levels: PERMISSION_LEVELS.join("/") }, lang)
+      "bad-mcp-config-body",
+      t("web.mcp_config_bad_body", void 0, lang)
     );
   }
-  const before = perms.level();
-  const result = perms.setLevel(level, { remember: true });
-  const state = permissionState(ctx, sessionId);
-  const payload = result.ok ? {
-    ok: true,
-    changed: state.level !== before,
-    state,
-    ...result.notRemembered ? { notRemembered: result.notRemembered } : {}
-  } : { ok: false, refused: REFUSAL[result.reason], changed: false, state };
-  sendJson(res, 200, payload);
+  const outcome = ctx.runtime.mcp.writeConfig(text, revision, lang);
+  if (!outcome.ok) return sendError(res, ...saveFailure(outcome.reason, outcome.detail, lang));
+  sendJson(res, 200, {
+    configPath: outcome.configPath,
+    revision: outcome.revision,
+    issues: toWireIssues(outcome.issues)
+  });
 }
-// src/plan.ts
-function getPlan(ctx, res, sessionId, _lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId);
+async function applyConfig(ctx, req, res, lang) {
+  if (ctx.lanExposed) return sendLanExposed(res, lang);
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const revision = asRecord(body.value)["revision"];
+  if (typeof revision !== "string") {
+    return sendError(
+      res,
+      400,
+      "bad-mcp-config-body",
+      t("web.mcp_config_bad_body", void 0, lang)
+    );
   }
-  const live = ctx.runtime.sessionFactory.get(sessionId);
-  const markdown = live ? live.plan?.approvedPlan() ?? null : ctx.runtime.sessionStore?.loadPlan(sessionId) ?? null;
+  const outcome = await ctx.runtime.mcp.applyConfig(revision, lang);
+  if (!outcome.ok) return sendError(res, ...applyFailure(outcome.reason, outcome.detail, lang));
   sendJson(res, 200, {
-    plan: normalize(markdown),
-    mode: planModeState(ctx, sessionId)
+    configPath: outcome.configPath,
+    revision: outcome.revision,
+    issues: toWireIssues(outcome.issues),
+    changes: outcome.changes.map((change) => ({
+      name: change.name,
+      action: change.action,
+      ...change.status === void 0 ? {} : { server: toWireMcp(change.status) },
+      ...change.reason === void 0 ? {} : { reason: change.reason }
+    }))
   });
 }
-function normalize(markdown) {
-  return markdown?.trim() ? markdown : null;
+function sendLanExposed(res, lang) {
+  sendError(res, 403, "mcp-config-lan-exposed", t("web.mcp_config_lan_exposed", void 0, lang));
 }
-function toWireCounts(counts) {
-  return {
-    commands: counts.commands,
-    roles: counts.roles,
-    skills: counts.skills,
-    hooks: counts.hooks,
-    denyRules: counts.denyRules,
-    mcpServers: counts.mcpServers
-  };
+function saveFailure(reason, detail, lang) {
+  if (reason === "stale") {
+    return [409, "mcp-config-stale", t("web.mcp_config_stale", void 0, lang)];
+  }
+  if (reason === "invalid-json") return [400, "mcp-config-invalid-json", detail];
+  return [409, "mcp-config-unwritable", t("web.mcp_config_unwritable", { detail }, lang)];
 }
-function displayNamesOf(control) {
-  const out = /* @__PURE__ */ new Map();
-  for (const hit of control.search()) {
-    const shown = hit.entry.displayName;
-    if (shown !== void 0 && shown !== "") out.set(`${hit.marketplace}/${hit.entry.name}`, shown);
+function applyFailure(reason, detail, lang) {
+  if (reason === "unreadable") {
+    return [409, "mcp-config-unreadable", t("web.mcp_config_unreadable", { detail }, lang)];
   }
-  return out;
+  if (reason === "stale") {
+    return [409, "mcp-config-stale", t("web.mcp_config_stale", void 0, lang)];
+  }
+  if (reason === "invalid-json") return [400, "mcp-config-invalid-json", detail];
+  return [409, "mcp-config-no-servers", t("web.mcp_config_no_servers", { detail }, lang)];
 }
-function toWirePluginEntry(entry, displayNames) {
-  return {
-    name: entry.name,
-    displayName: displayNames.get(`${entry.marketplace}/${entry.name}`) ?? null,
-    version: entry.version,
-    source: entry.source,
-    sourceType: entry.sourceType,
-    path: entry.path,
-    linked: entry.linked,
-    enabled: entry.enabled,
-    installedAt: entry.installedAt,
-    marketplace: entry.marketplace ?? null,
-    active: entry.active,
-    counts: entry.counts ? toWireCounts(entry.counts) : null,
-    updateAllowed: entry.updateAllowed,
-    uninstallAllowed: entry.uninstallAllowed
-  };
+function toWireIssues(issues) {
+  return issues.map((issue) => ({ path: issue.path, message: issue.message }));
 }
-function toWirePluginHit(hit, installed) {
-  const mine = installed.get(hit.entry.name);
-  return {
-    marketplace: hit.marketplace,
-    ref: hit.ref,
-    name: hit.entry.name,
-    description: hit.entry.description ?? "",
-    category: hit.entry.category ?? null,
-    keywords: [...hit.entry.keywords ?? []],
-    sourceType: hit.sourceType ?? null,
-    installable: hit.installable,
-    installed: mine !== void 0,
-    author: hit.entry.author?.name ?? null,
-    downloads: hit.entry.downloads ?? null,
-    likes: hit.entry.likes ?? null,
-    displayName: hit.entry.displayName ?? null,
-    icon: hit.entry.icon ?? null,
-    version: hit.entry.version ?? null,
-    changelog: hit.entry.changelog ?? null,
-    size: hit.entry.size ?? null,
-    homepage: hit.entry.homepage ?? null,
-    visibility: hit.entry.visibility ?? null,
-    status: hit.entry.status ?? null,
-    updateAvailable: mine !== void 0 && !mine.linked && hit.entry.version !== void 0 && hit.entry.version !== mine.version,
-    installAllowed: hit.installAllowed,
-    updateAllowed: mine?.updateAllowed ?? false,
-    menu: hit.menu.map((item) => ({
-      id: item.id,
-      label: item.label,
-      danger: item.danger === true
-    }))
-  };
-}
-function toWireMarketplace(market) {
-  return {
-    name: market.name,
-    source: market.source,
-    entries: market.entries,
-    addedAt: market.addedAt,
-    local: market.local,
-    categories: (market.categories ?? []).map(toWireCategory)
-  };
-}
-function toWireCategory(node) {
-  return {
-    id: node.id,
-    label: node.label ?? node.id,
-    children: (node.children ?? []).map(toWireCategory)
-  };
-}
-function toWirePreview2(preview) {
-  const { manifest, source, inventory } = preview;
-  return {
-    name: manifest.name,
-    version: manifest.version,
-    description: manifest.description ?? "",
-    source: source.raw,
-    sourceType: source.type,
-    checksum: source.sha256 ?? null,
-    author: manifest.author?.name ?? null,
-    homepage: manifest.homepage ?? null,
-    commands: [...inventory.commands],
-    roles: [...inventory.roles],
-    skills: [...inventory.skills],
-    hooks: inventory.hooks.map((h) => ({ type: h.type, count: h.count })),
-    denyRules: inventory.denyRules,
-    mcpServers: [...inventory.mcpServers],
-    ignoredBuckets: [...inventory.ignoredBuckets],
-    hasJsTools: inventory.jsTools,
-    conflict: preview.conflict ? { name: preview.conflict.name, version: preview.conflict.version } : null
-  };
-}
-function controlOf(ctx, res, lang) {
-  const control = ctx.runtime.plugins;
-  if (!control) {
-    sendError(res, 503, "no-plugin-control", t("web.plugin_not_available", void 0, lang));
-    return null;
-  }
-  return control;
-}
-function refusedByLan(ctx, res, lang) {
-  if (!ctx.lanExposed) return false;
-  sendError(
-    res,
-    403,
-    "plugin-write-lan-exposed",
-    t("web.plugin_write_lan_exposed", void 0, lang)
-  );
-  return true;
-}
-function fieldOf(payload, key) {
-  const value = payload[key];
-  return typeof value === "string" ? value.trim() : "";
-}
-function uploadFormOf(payload) {
-  const form = {};
-  for (const name of WIRE_PLUGIN_UPLOAD_FORM_FIELDS) {
-    const raw = fieldOf(payload, name);
-    if (raw === "") continue;
-    if (name === "visibility") {
-      if (raw === "private" || raw === "public") form[name] = raw;
-      continue;
-    }
-    form[name] = raw;
-  }
-  return form;
-}
-function listPlugins(ctx, res, lang) {
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  sendJson(res, 200, pluginsPayload(control));
-}
-function pluginsPayload(control) {
-  const installed = control.list();
-  const installedMap = new Map(
-    installed.map((p) => [
-      p.name,
-      { version: p.version, linked: p.linked, updateAllowed: p.updateAllowed }
-    ])
-  );
-  const shown = displayNamesOf(control);
-  return {
-    installed: installed.map((p) => toWirePluginEntry(p, shown)),
-    hits: control.search().map((hit) => toWirePluginHit(hit, installedMap)),
-    marketplaces: control.marketplaces().map(toWireMarketplace),
-    pendingRestart: control.pendingRestart,
-    uploadEnabled: control.uploadEnabled,
-    uploadOptions: control.uploadOptions,
-    refreshEnabled: control.refreshEnabled,
-    localInstallEnabled: control.localInstallEnabled
-  };
-}
-function sendPreview(res, outcome) {
+async function reconnectMcp(ctx, res, name, lang) {
+  const outcome = await ctx.runtime.mcp.reconnect(name);
   if (!outcome.ok) {
+    if (outcome.reason === "unknown") {
+      return sendError(res, 404, "unknown-mcp-server", t("web.mcp_unknown_server", { name }, lang));
+    }
+    const status = {
+      ...outcome.status,
+      ...outcome.detail === void 0 ? {} : { lastError: outcome.detail }
+    };
     return sendJson(res, 200, {
       ok: false,
-      preview: null,
-      token: null,
-      reason: outcome.reason,
-      detail: outcome.detail
+      server: toWireMcp(status)
     });
   }
   sendJson(res, 200, {
     ok: true,
-    preview: toWirePreview2(outcome.preview),
-    token: outcome.token,
-    reason: null,
-    detail: null
+    server: toWireMcp(outcome.status)
   });
 }
-async function previewPluginInstall(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
+async function addMcp(ctx, req, res, lang) {
+  if (ctx.lanExposed) {
+    return sendError(
+      res,
+      403,
+      "mcp-add-lan-exposed",
+      t("web.mcp_add_lan_exposed", void 0, lang)
+    );
+  }
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendPreview(res, await control.preview(fieldOf(asRecord(body.value), "ref"), lang));
+  const payload = asRecord(body.value);
+  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
+  const transport = payload["transport"];
+  if (transport !== "stdio" && transport !== "sse" && transport !== "http") {
+    return sendError(res, 400, "bad-mcp-config", t("web.mcp_add_bad_transport", void 0, lang));
+  }
+  const outcome = await ctx.runtime.mcp.add({
+    name,
+    transport,
+    ...typeof payload["command"] === "string" ? { command: payload["command"].trim() } : {},
+    ...Array.isArray(payload["args"]) ? { args: stringList(payload["args"]) } : {},
+    ...typeof payload["url"] === "string" ? { url: payload["url"].trim() } : {},
+    ...payload["env"] === void 0 ? {} : { env: stringMap(payload["env"]) }
+  });
+  if (!outcome.ok) {
+    return sendError(res, ...addFailure(outcome.reason, outcome.detail, name, lang));
+  }
+  sendJson(res, 200, {
+    server: toWireMcp(outcome.status),
+    configPath: outcome.configPath
+  });
 }
-async function previewLocalPluginInstall(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendPreview(res, await control.previewLocal(fieldOf(asRecord(body.value), "path"), lang));
+function addFailure(reason, detail, name, lang) {
+  if (reason === "invalid-name") {
+    return [400, "bad-mcp-name", t("web.mcp_add_bad_name", { name }, lang)];
+  }
+  if (reason === "invalid-config") return [400, "bad-mcp-config", detail];
+  if (reason === "duplicate")
+    return [409, "mcp-name-taken", t("web.mcp_add_taken", { name }, lang)];
+  return [409, "mcp-config-unwritable", t("web.mcp_add_unwritable", { detail }, lang)];
 }
-async function previewPluginUpdate(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendPreview(res, await control.previewUpdate(fieldOf(asRecord(body.value), "name"), lang));
+function stringList(value) {
+  return value.filter((v) => typeof v === "string");
 }
-function sendAction(res, control, outcome) {
-  if (!outcome.ok) {
-    return sendJson(res, 200, {
-      ok: false,
-      entry: null,
-      pendingRestart: control.pendingRestart,
-      detail: outcome.detail,
-      reason: outcome.reason
-    });
+function stringMap(value) {
+  const out = {};
+  for (const [k, v] of Object.entries(asRecord(value))) {
+    if (typeof v === "string") out[k] = v;
   }
-  const fresh = "record" in outcome ? control.list().find((p) => p.name === outcome.record.name) : void 0;
+  return out;
+}
+function toRef(raw) {
+  return parseModelRef(raw);
+}
+function toWireSelection(selection) {
+  return { provider: selection.provider, model: selection.model, origin: selection.origin };
+}
+function sessionHasImages(session) {
+  const history = session?.getHistory() ?? [];
+  return history.some((m) => m.parts?.some((p) => p.type === "image"));
+}
+function getModel(ctx, res, sessionId, _lang) {
+  const { runtime } = ctx;
+  const live = runtime.sessionFactory.get(sessionId);
+  const selection = live?.model.get();
   sendJson(res, 200, {
-    ok: true,
-    entry: fresh ? toWirePluginEntry(fresh, displayNamesOf(control)) : null,
-    pendingRestart: control.pendingRestart,
-    detail: "detail" in outcome ? outcome.detail : null,
-    reason: null
+    selection: selection ? toWireSelection(selection) : null,
+    configured: (live ? live.model.configured() : runtime.config.model) || null
   });
 }
-async function installPluginFromMarket(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
+async function setModel(ctx, req, res, sessionId, lang) {
+  const live = ctx.runtime.sessionFactory.get(sessionId);
+  if (!live) return sendUnknownSession(res, sessionId);
+  const control = live.model;
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  sendAction(
-    res,
-    control,
-    await control.install(fieldOf(payload, "ref"), fieldOf(payload, "token"), lang)
-  );
-}
-async function installLocalPlugin(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  sendAction(
-    res,
-    control,
-    await control.installLocal(fieldOf(payload, "path"), fieldOf(payload, "token"), lang)
-  );
-}
-async function stagePlugin(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const asJson = (req.headers["content-type"] ?? "").toLowerCase().includes("application/json");
-  if (asJson) {
-    const body = await readJsonBody(req, void 0, lang);
-    if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-    return sendStage(
-      res,
-      await control.stage({ kind: "path", path: fieldOf(asRecord(body.value), "path") }, lang)
-    );
-  }
-  const raw = await readRawBody(req, PLUGIN_UPLOAD_BODY_LIMIT, lang);
-  if (!raw.ok) return sendError(res, raw.status, "bad-body", raw.message);
-  return sendStage(
-    res,
-    await control.stage({ kind: "bytes", name: nameParam2(req), data: raw.value }, lang)
-  );
-}
-function nameParam2(req) {
-  try {
-    return new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("name") ?? "";
-  } catch {
-    return "";
+  const input = readModelSetBody(asRecord(body.value));
+  if (!input.ok)
+    return sendError(res, 400, "bad-model", t("web.model_bad_request", void 0, lang));
+  const ref = input.model === null ? null : toRef(input.model);
+  if (ref === void 0) {
+    return sendError(res, 400, "bad-model", t("web.model_bad_request", void 0, lang));
   }
+  const selectionCtx = {
+    hasImages: sessionHasImages(live.session),
+    ...input.usedTokens === void 0 ? {} : { usedTokens: input.usedTokens }
+  };
+  const result = ref === null ? control.reset(selectionCtx) : control.set(ref, selectionCtx);
+  const payload = result.ok ? {
+    ok: true,
+    selection: toWireSelection(result.selection),
+    contextLength: result.contextLength,
+    caveats: result.caveats
+  } : { ok: false, rejection: result.rejection };
+  sendJson(res, 200, payload);
 }
-function sendStage(res, outcome) {
-  const payload = outcome.ok ? {
+function readModelSetBody(body) {
+  const { model, usedTokens } = body;
+  if (model !== null && (typeof model !== "string" || model.trim() === "")) return { ok: false };
+  const used = typeof usedTokens === "number" && Number.isFinite(usedTokens) && usedTokens >= 0 ? Math.floor(usedTokens) : void 0;
+  return {
     ok: true,
-    path: outcome.path,
-    name: outcome.name,
-    version: outcome.version,
-    detail: null,
-    reason: null
-  } : {
-    ok: false,
-    path: null,
-    name: null,
-    version: null,
-    detail: outcome.detail,
-    reason: outcome.reason
+    model: model === null ? null : model.trim(),
+    ...used === void 0 ? {} : { usedTokens: used }
   };
-  sendJson(res, 200, payload);
 }
-async function updateInstalledPlugin(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  sendAction(
-    res,
-    control,
-    await control.update(fieldOf(payload, "name"), fieldOf(payload, "token"), lang)
-  );
+function planModeState(ctx, sessionId) {
+  if (!ctx.runtime.plan) return null;
+  const plan = ctx.runtime.sessionFactory.get(sessionId)?.plan;
+  if (!plan) return { active: false, from: null };
+  return { active: plan.active(), from: plan.from() };
 }
-async function uninstallPluginByName(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
+async function setPlanMode(ctx, req, res, sessionId, lang) {
+  const live = ctx.runtime.sessionFactory.get(sessionId);
+  if (!live) return sendUnknownSession(res, sessionId);
+  const plan = live.plan;
+  if (!plan) {
+    return sendError(res, 503, "no-plan-mode", t("web.plan_mode_unavailable", void 0, lang));
+  }
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendAction(res, control, await control.uninstall(fieldOf(asRecord(body.value), "name"), lang));
-}
-function sendMarket(res, outcome) {
+  const action = asRecord(body.value)["action"];
+  if (typeof action !== "string" || !isWirePlanAction(action)) {
+    return sendError(
+      res,
+      400,
+      "bad-action",
+      t("web.plan_mode_bad_action", { actions: WIRE_PLAN_ACTIONS.join("/") }, lang)
+    );
+  }
+  const changed = action === "enter" ? plan.enter().ok : plan.leave() !== null;
   sendJson(res, 200, {
-    ok: outcome.ok,
-    marketplace: outcome.ok && outcome.marketplace ? toWireMarketplace(outcome.marketplace) : null,
-    reason: outcome.ok ? null : outcome.reason,
-    detail: outcome.ok ? null : outcome.detail
+    mode: { active: plan.active(), from: plan.from() },
+    changed
   });
 }
-async function addPluginMarketplace(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendMarket(res, await control.addMarketplace(fieldOf(asRecord(body.value), "source"), lang));
+// src/permission.ts
+var REFUSAL = {
+  "managed-bypass-disabled": "managed"
+};
+function blockedLevels(managed) {
+  return managed.bypassDisabled ? [{ level: "bypass", reason: "managed" }] : [];
 }
-async function removePluginMarketplace(ctx, req, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  sendMarket(res, await control.removeMarketplace(fieldOf(asRecord(body.value), "name"), lang));
+function permissionState(ctx, sessionId) {
+  const perms = ctx.runtime.sessionFactory.get(sessionId)?.permissions ?? null;
+  return {
+    level: perms?.level() ?? ctx.runtime.config.permission,
+    editable: perms !== null,
+    blocked: perms ? blockedLevels(perms.managed()) : [],
+    planMode: planModeState(ctx, sessionId)
+  };
 }
-function previewPluginUpload(ctx, req, res, lang) {
-  return withUploadBody(ctx, req, res, lang, (control, payload) => {
-    sendUploadPreview(res, control.previewUpload(fieldOf(payload, "path"), lang));
-  });
+function getPermission(ctx, res, sessionId, _lang) {
+  if (!ctx.hub.has(sessionId)) return sendUnknownSession(res, sessionId);
+  sendJson(res, 200, permissionState(ctx, sessionId));
 }
-function uploadPlugin(ctx, req, res, lang) {
-  return withUploadBody(ctx, req, res, lang, async (control, payload) => {
-    sendUpload(
+async function setPermission(ctx, req, res, sessionId, lang) {
+  const live = ctx.runtime.sessionFactory.get(sessionId);
+  if (!live) return sendUnknownSession(res, sessionId);
+  const perms = live.permissions;
+  if (!perms) {
+    return sendError(
       res,
-      await control.upload(
-        fieldOf(payload, "path"),
-        fieldOf(payload, "token"),
-        uploadFormOf(payload),
-        lang
-      )
+      503,
+      "no-permission-layer",
+      t("web.permission_unavailable", void 0, lang)
     );
-  });
-}
-async function withUploadBody(ctx, req, res, lang, run) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
+  }
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  await run(control, asRecord(body.value));
-}
-function sendUploadPreview(res, outcome) {
-  if (!outcome.ok) {
-    return sendJson(res, 200, {
-      ok: false,
-      plan: null,
-      token: null,
-      prefill: null,
-      fromManifest: null,
-      reason: outcome.reason,
-      detail: outcome.detail
-    });
+  const level = asRecord(body.value)["level"];
+  if (typeof level !== "string" || !isPermissionLevel(level)) {
+    return sendError(
+      res,
+      400,
+      "bad-level",
+      t("web.permission_bad_level", { levels: PERMISSION_LEVELS.join("/") }, lang)
+    );
   }
-  const { manifest, files, totalBytes, suspicious, skippedLinks } = outcome.plan;
-  sendJson(res, 200, {
+  const before = perms.level();
+  const result = perms.setLevel(level, { remember: true });
+  const state = permissionState(ctx, sessionId);
+  const payload = result.ok ? {
     ok: true,
-    plan: {
-      name: manifest.name,
-      version: manifest.version,
-      description: manifest.description ?? "",
-      author: manifest.author?.name ?? null,
-      files: files.map((f) => ({ path: f.path, bytes: f.bytes })),
-      totalBytes,
-      suspicious: [...suspicious],
-      skippedLinks: [...skippedLinks]
-    },
-    token: outcome.token,
-    prefill: outcome.prefill,
-    fromManifest: [...outcome.fromManifest],
-    reason: null,
-    detail: null
-  });
+    changed: state.level !== before,
+    state,
+    ...result.notRemembered ? { notRemembered: result.notRemembered } : {}
+  } : { ok: false, refused: REFUSAL[result.reason], changed: false, state };
+  sendJson(res, 200, payload);
 }
-function sendUpload(res, outcome) {
+// src/plan.ts
+function getPlan(ctx, res, sessionId, _lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    return sendUnknownSession(res, sessionId);
+  }
+  const live = ctx.runtime.sessionFactory.get(sessionId);
+  const markdown = live ? live.plan?.approvedPlan() ?? null : ctx.runtime.sessionStore?.loadPlan(sessionId) ?? null;
   sendJson(res, 200, {
-    ok: outcome.ok,
-    detail: outcome.detail,
-    uploaded: outcome.ok ? { name: outcome.name, version: outcome.version, bytes: outcome.bytes } : null,
-    reason: outcome.ok ? null : outcome.reason
+    plan: normalize(markdown),
+    mode: planModeState(ctx, sessionId)
   });
 }
-async function refreshPlugins(ctx, res, lang) {
-  if (refusedByLan(ctx, res, lang)) return;
-  const control = controlOf(ctx, res, lang);
-  if (!control) return;
-  const outcome = await control.refresh(lang);
-  if (!outcome.ok) {
-    return sendJson(res, 200, {
-      ok: false,
-      plugins: null,
-      reason: outcome.reason,
-      detail: outcome.detail
-    });
-  }
-  sendJson(res, 200, {
-    ok: true,
-    plugins: pluginsPayload(control),
-    reason: null,
-    detail: outcome.detail === "" ? null : outcome.detail
-  });
+function normalize(markdown) {
+  return markdown?.trim() ? markdown : null;
 }
-function toWireProvider(option, lang) {
+function toWireCounts(counts) {
   return {
-    type: option.type,
-    label: providerLabel(option, lang),
-    envVar: option.envVar,
-    hasKey: option.hasKey,
-    keyHint: option.keyHint,
-    current: option.current
+    commands: counts.commands,
+    roles: counts.roles,
+    skills: counts.skills,
+    hooks: counts.hooks,
+    denyRules: counts.denyRules,
+    mcpServers: counts.mcpServers
   };
 }
-function toWireSuggestions(view) {
+function displayNamesOf(control) {
+  const out = /* @__PURE__ */ new Map();
+  for (const hit of control.search()) {
+    const shown = hit.entry.displayName;
+    if (shown !== void 0 && shown !== "") out.set(`${hit.marketplace}/${hit.entry.name}`, shown);
+  }
+  return out;
+}
+function toWirePluginEntry(entry, displayNames) {
   return {
-    provider: view.provider,
-    models: view.models,
-    source: view.source,
-    status: view.status
+    name: entry.name,
+    displayName: displayNames.get(`${entry.marketplace}/${entry.name}`) ?? null,
+    version: entry.version,
+    source: entry.source,
+    sourceType: entry.sourceType,
+    path: entry.path,
+    linked: entry.linked,
+    enabled: entry.enabled,
+    installedAt: entry.installedAt,
+    marketplace: entry.marketplace ?? null,
+    active: entry.active,
+    counts: entry.counts ? toWireCounts(entry.counts) : null,
+    updateAllowed: entry.updateAllowed,
+    uninstallAllowed: entry.uninstallAllowed
   };
 }
-function listProviders(ctx, res, lang) {
+function toWirePluginHit(hit, installed) {
+  const mine = installed.get(hit.entry.name);
+  return {
+    marketplace: hit.marketplace,
+    ref: hit.ref,
+    name: hit.entry.name,
+    description: hit.entry.description ?? "",
+    categories: hit.entry.category ?? null,
+    keywords: [...hit.entry.keywords ?? []],
+    sourceType: hit.sourceType ?? null,
+    installable: hit.installable,
+    installed: mine !== void 0,
+    author: hit.entry.author?.name ?? null,
+    downloads: hit.entry.downloads ?? null,
+    likes: hit.entry.likes ?? null,
+    displayName: hit.entry.displayName ?? null,
+    icon: hit.entry.icon ?? null,
+    version: hit.entry.version ?? null,
+    changelog: hit.entry.changelog ?? null,
+    size: hit.entry.size ?? null,
+    homepage: hit.entry.homepage ?? null,
+    visibility: hit.entry.visibility ?? null,
+    status: hit.entry.status ?? null,
+    updateAvailable: mine !== void 0 && !mine.linked && hit.entry.version !== void 0 && hit.entry.version !== mine.version,
+    installAllowed: hit.installAllowed,
+    updateAllowed: mine?.updateAllowed ?? false,
+    menu: hit.menu.map((item) => ({
+      id: item.id,
+      label: item.label,
+      danger: item.danger === true
+    }))
+  };
+}
+function toWireMarketplace(market) {
+  return {
+    name: market.name,
+    source: market.source,
+    entries: market.entries,
+    addedAt: market.addedAt,
+    local: market.local,
+    categories: (market.categories ?? []).map(toWireCategory)
+  };
+}
+function toWireCategory(node) {
+  return {
+    id: node.id,
+    label: node.label ?? node.id,
+    children: (node.children ?? []).map(toWireCategory)
+  };
+}
+function toWirePreview2(preview) {
+  const { manifest, source, inventory } = preview;
+  return {
+    name: manifest.name,
+    version: manifest.version,
+    description: manifest.description ?? "",
+    source: source.raw,
+    sourceType: source.type,
+    checksum: source.sha256 ?? null,
+    author: manifest.author?.name ?? null,
+    homepage: manifest.homepage ?? null,
+    commands: [...inventory.commands],
+    roles: [...inventory.roles],
+    skills: [...inventory.skills],
+    hooks: inventory.hooks.map((h) => ({ type: h.type, count: h.count })),
+    denyRules: inventory.denyRules,
+    mcpServers: [...inventory.mcpServers],
+    ignoredBuckets: [...inventory.ignoredBuckets],
+    hasJsTools: inventory.jsTools,
+    conflict: preview.conflict ? { name: preview.conflict.name, version: preview.conflict.version } : null
+  };
+}
+function controlOf(ctx, res, lang) {
+  const control = ctx.runtime.plugins;
+  if (!control) {
+    sendError(res, 503, "no-plugin-control", t("web.plugin_not_available", void 0, lang));
+    return null;
+  }
+  return control;
+}
+function refusedByLan(ctx, res, lang) {
+  if (!ctx.lanExposed) return false;
+  sendError(
+    res,
+    403,
+    "plugin-write-lan-exposed",
+    t("web.plugin_write_lan_exposed", void 0, lang)
+  );
+  return true;
+}
+function fieldOf(payload, key) {
+  const value = payload[key];
+  return typeof value === "string" ? value.trim() : "";
+}
+function uploadFormOf(payload) {
+  const form = {};
+  for (const name of WIRE_PLUGIN_UPLOAD_FORM_FIELDS) {
+    const raw = fieldOf(payload, name);
+    if (raw === "") continue;
+    if (name === "visibility") {
+      if (raw === "private" || raw === "public") form[name] = raw;
+      continue;
+    }
+    form[name] = raw;
+  }
+  return form;
+}
+function listPlugins(ctx, res, lang) {
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  sendJson(res, 200, pluginsPayload(control));
+}
+function pluginsPayload(control) {
+  const installed = control.list();
+  const installedMap = new Map(
+    installed.map((p) => [
+      p.name,
+      { version: p.version, linked: p.linked, updateAllowed: p.updateAllowed }
+    ])
+  );
+  const shown = displayNamesOf(control);
+  return {
+    installed: installed.map((p) => toWirePluginEntry(p, shown)),
+    hits: control.search().map((hit) => toWirePluginHit(hit, installedMap)),
+    marketplaces: control.marketplaces().map(toWireMarketplace),
+    pendingRestart: control.pendingRestart,
+    uploadEnabled: control.uploadEnabled,
+    uploadOptions: control.uploadOptions,
+    refreshEnabled: control.refreshEnabled,
+    localInstallEnabled: control.localInstallEnabled
+  };
+}
+function sendPreview(res, outcome) {
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      preview: null,
+      token: null,
+      reason: outcome.reason,
+      detail: outcome.detail
+    });
+  }
   sendJson(res, 200, {
-    providers: ctx.runtime.modelCatalog.providers().map((o) => toWireProvider(o, lang))
+    ok: true,
+    preview: toWirePreview2(outcome.preview),
+    token: outcome.token,
+    reason: null,
+    detail: null
   });
 }
-async function discoverProviderModels(ctx, req, res, type, lang) {
-  if (!isProviderType(type)) {
-    return sendError(res, 404, "unknown-provider", t("web.provider_unknown", { name: type }, lang));
-  }
+async function previewPluginInstall(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const refresh = asRecord(body.value).refresh === true;
-  const suggestions = await ctx.runtime.modelCatalog.discover(type, { refresh });
-  sendJson(res, 200, {
-    suggestions: toWireSuggestions(suggestions)
-  });
+  sendPreview(res, await control.preview(fieldOf(asRecord(body.value), "ref"), lang));
 }
-async function setProviderKey(ctx, req, res, type, lang) {
-  if (!isProviderType(type)) {
-    return sendError(res, 404, "unknown-provider", t("web.provider_unknown", { name: type }, lang));
-  }
-  const envVar = apiKeyEnvVar(type);
-  if (envVar === null) {
-    return sendError(
-      res,
-      400,
-      "key-not-applicable",
-      t("web.provider_key_not_applicable", { name: type }, lang)
-    );
-  }
+async function previewLocalPluginInstall(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const raw = asRecord(body.value)["apiKey"];
-  const apiKey = typeof raw === "string" ? raw.trim() : "";
-  if (apiKey === "") {
-    return sendError(res, 400, "empty-key", t("web.provider_key_empty", void 0, lang));
+  sendPreview(res, await control.previewLocal(fieldOf(asRecord(body.value), "path"), lang));
+}
+async function previewPluginUpdate(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendPreview(res, await control.previewUpdate(fieldOf(asRecord(body.value), "name"), lang));
+}
+function sendAction(res, control, outcome) {
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      entry: null,
+      pendingRestart: control.pendingRestart,
+      detail: outcome.detail,
+      reason: outcome.reason
+    });
   }
-  const written = await ctx.runtime.modelCatalog.setKey(type, apiKey);
+  const fresh = "record" in outcome ? control.list().find((p) => p.name === outcome.record.name) : void 0;
   sendJson(res, 200, {
-    provider: type,
-    hasKey: true,
-    keyHint: written.keyHint,
-    backend: written.backend,
-    encrypted: written.encrypted,
-    envPath: written.envPath
+    ok: true,
+    entry: fresh ? toWirePluginEntry(fresh, displayNamesOf(control)) : null,
+    pendingRestart: control.pendingRestart,
+    detail: "detail" in outcome ? outcome.detail : null,
+    reason: null
   });
 }
-async function setDefaultModel(ctx, req, res, lang) {
-  if (ctx.runtime.providerInfo !== null) {
-    return sendError(
-      res,
-      409,
-      "provider-available",
-      t("web.model_default_has_provider", void 0, lang)
-    );
-  }
-  const body = await readJsonBody(req, void 0, lang);
+async function installPluginFromMarket(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const raw = asRecord(body.value)["model"];
-  const model = typeof raw === "string" ? raw.trim() : "";
-  if (model === "") {
-    return sendError(res, 400, "bad-request", t("web.model_default_empty", void 0, lang));
-  }
-  const report = ctx.runtime.settings.write({ key: "model", layer: "user", value: model });
-  if (!report.ok) {
-    const failure = settingWriteFailure(report);
-    return sendError(
+  const payload = asRecord(body.value);
+  sendAction(
+    res,
+    control,
+    await control.install(fieldOf(payload, "ref"), fieldOf(payload, "token"), lang)
+  );
+}
+async function installLocalPlugin(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  sendAction(
+    res,
+    control,
+    await control.installLocal(fieldOf(payload, "path"), fieldOf(payload, "token"), lang)
+  );
+}
+async function stagePlugin(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const asJson = (req.headers["content-type"] ?? "").toLowerCase().includes("application/json");
+  if (asJson) {
+    const body = await readJsonBody(req, void 0, lang);
+    if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+    return sendStage(
       res,
-      failure.status,
-      failure.code,
-      t(failure.key, { path: failure.path }, lang)
+      await control.stage({ kind: "path", path: fieldOf(asRecord(body.value), "path") }, lang)
     );
   }
-  sendJson(res, 200, toWireSettingsWrite(report));
+  const raw = await readRawBody(req, PLUGIN_UPLOAD_BODY_LIMIT, lang);
+  if (!raw.ok) return sendError(res, raw.status, "bad-body", raw.message);
+  return sendStage(
+    res,
+    await control.stage({ kind: "bytes", name: nameParam2(req), data: raw.value }, lang)
+  );
 }
-async function addRole(ctx, req, res, lang) {
-  if (ctx.lanExposed) {
-    return sendError(
-      res,
-      403,
-      "role-add-lan-exposed",
-      t("web.role_add_lan_exposed", void 0, lang)
-    );
+function nameParam2(req) {
+  try {
+    return new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("name") ?? "";
+  } catch {
+    return "";
   }
+}
+function sendStage(res, outcome) {
+  const payload = outcome.ok ? {
+    ok: true,
+    path: outcome.path,
+    name: outcome.name,
+    version: outcome.version,
+    detail: null,
+    reason: null
+  } : {
+    ok: false,
+    path: null,
+    name: null,
+    version: null,
+    detail: outcome.detail,
+    reason: outcome.reason
+  };
+  sendJson(res, 200, payload);
+}
+async function updateInstalledPlugin(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
   const payload = asRecord(body.value);
-  const outcome = ctx.runtime.roleWrite.add(
-    {
-      name: typeof payload["name"] === "string" ? payload["name"].trim() : "",
-      description: typeof payload["description"] === "string" ? payload["description"].trim() : "",
-      ...typeof payload["prompt"] === "string" ? { prompt: payload["prompt"] } : {},
-      ...Array.isArray(payload["tools"]) ? { tools: stringList2(payload["tools"]) } : {},
-      ...Array.isArray(payload["skills"]) ? { skills: stringList2(payload["skills"]) } : {},
-      ...typeof payload["maxTurns"] === "number" ? { maxTurns: payload["maxTurns"] } : {}
-    },
-    lang
+  sendAction(
+    res,
+    control,
+    await control.update(fieldOf(payload, "name"), fieldOf(payload, "token"), lang)
   );
-  if (!outcome.ok) return sendError(res, ...addFailure2(outcome.reason, outcome.detail, lang));
+}
+async function uninstallPluginByName(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendAction(res, control, await control.uninstall(fieldOf(asRecord(body.value), "name"), lang));
+}
+function sendMarket(res, outcome) {
   sendJson(res, 200, {
-    role: toWireRole(outcome.role, ctx.runtime.agentRoleNotices),
-    path: outcome.path
+    ok: outcome.ok,
+    marketplace: outcome.ok && outcome.marketplace ? toWireMarketplace(outcome.marketplace) : null,
+    reason: outcome.ok ? null : outcome.reason,
+    detail: outcome.ok ? null : outcome.detail
   });
 }
-function addFailure2(reason, detail, lang) {
-  if (reason === "invalid-name") return [400, "bad-role-name", detail];
-  if (reason === "invalid-field")
-    return [400, "bad-role-field", t("web.role_add_bad_field", { detail }, lang)];
-  if (reason === "unknown-tool") return [400, "bad-role-tools", detail];
-  if (reason === "duplicate") return [409, "role-name-taken", detail];
-  return [409, "role-unwritable", detail];
+async function addPluginMarketplace(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendMarket(res, await control.addMarketplace(fieldOf(asRecord(body.value), "source"), lang));
 }
-function stringList2(value) {
-  return value.filter((v) => typeof v === "string");
+async function removePluginMarketplace(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendMarket(res, await control.removeMarketplace(fieldOf(asRecord(body.value), "name"), lang));
 }
-async function removeRole(ctx, req, res, lang) {
-  if (ctx.lanExposed) {
-    return sendError(
+function previewPluginUpload(ctx, req, res, lang) {
+  return withUploadBody(ctx, req, res, lang, (control, payload) => {
+    sendUploadPreview(res, control.previewUpload(fieldOf(payload, "path"), lang));
+  });
+}
+function uploadPlugin(ctx, req, res, lang) {
+  return withUploadBody(ctx, req, res, lang, async (control, payload) => {
+    sendUpload(
       res,
-      403,
-      "role-remove-lan-exposed",
-      t("web.role_remove_lan_exposed", void 0, lang)
+      await control.upload(
+        fieldOf(payload, "path"),
+        fieldOf(payload, "token"),
+        uploadFormOf(payload),
+        lang
+      )
     );
-  }
+  });
+}
+async function withUploadBody(ctx, req, res, lang, run) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
-  const outcome = ctx.runtime.roleWrite.remove(name, lang);
+  await run(control, asRecord(body.value));
+}
+function sendUploadPreview(res, outcome) {
   if (!outcome.ok) {
     return sendJson(res, 200, {
       ok: false,
-      name: "",
-      path: null,
-      takenOverBy: null,
-      detail: outcome.detail,
-      reason: outcome.reason
+      plan: null,
+      token: null,
+      prefill: null,
+      fromManifest: null,
+      reason: outcome.reason,
+      detail: outcome.detail
     });
   }
+  const { manifest, files, totalBytes, suspicious, skippedLinks } = outcome.plan;
   sendJson(res, 200, {
     ok: true,
-    name: outcome.name,
-    path: outcome.path,
-    takenOverBy: outcome.takenOverBy,
-    detail: null,
-    reason: null
+    plan: {
+      name: manifest.name,
+      version: manifest.version,
+      description: manifest.description ?? "",
+      author: manifest.author?.name ?? null,
+      files: files.map((f) => ({ path: f.path, bytes: f.bytes })),
+      totalBytes,
+      suspicious: [...suspicious],
+      skippedLinks: [...skippedLinks]
+    },
+    token: outcome.token,
+    prefill: outcome.prefill,
+    fromManifest: [...outcome.fromManifest],
+    reason: null,
+    detail: null
   });
 }
-function stringList3(value) {
-  if (!Array.isArray(value)) return null;
-  const out = [];
-  for (const item of value) {
-    if (typeof item !== "string" || item.trim().length === 0) return null;
-    out.push(item);
-  }
-  return out;
-}
-function operationList(value) {
-  if (!Array.isArray(value)) return null;
-  const out = [];
-  for (const item of value) {
-    if (typeof item !== "string" || !isOperationType(item)) return null;
-    out.push(item);
-  }
-  return out;
-}
-function finite(value) {
-  return typeof value === "number" && Number.isFinite(value) ? value : null;
+function sendUpload(res, outcome) {
+  sendJson(res, 200, {
+    ok: outcome.ok,
+    detail: outcome.detail,
+    uploaded: outcome.ok ? { name: outcome.name, version: outcome.version, bytes: outcome.bytes } : null,
+    reason: outcome.ok ? null : outcome.reason
+  });
 }
-function parseTrigger(value) {
+async function refreshPlugins(ctx, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const outcome = await control.refresh(lang);
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      plugins: null,
+      reason: outcome.reason,
+      detail: outcome.detail
+    });
+  }
+  sendJson(res, 200, {
+    ok: true,
+    plugins: pluginsPayload(control),
+    reason: null,
+    detail: outcome.detail === "" ? null : outcome.detail
+  });
+}
+function toWireProvider(option, lang) {
+  return {
+    type: option.type,
+    label: providerLabel(option, lang),
+    envVar: option.envVar,
+    hasKey: option.hasKey,
+    keyHint: option.keyHint,
+    current: option.current
+  };
+}
+function toWireSuggestions(view) {
+  return {
+    provider: view.provider,
+    models: view.models,
+    source: view.source,
+    status: view.status
+  };
+}
+function listProviders(ctx, res, lang) {
+  sendJson(res, 200, {
+    providers: ctx.runtime.modelCatalog.providers().map((o) => toWireProvider(o, lang))
+  });
+}
+async function discoverProviderModels(ctx, req, res, type, lang) {
+  if (!isProviderType(type)) {
+    return sendError(res, 404, "unknown-provider", t("web.provider_unknown", { name: type }, lang));
+  }
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const refresh = asRecord(body.value).refresh === true;
+  const suggestions = await ctx.runtime.modelCatalog.discover(type, { refresh });
+  sendJson(res, 200, {
+    suggestions: toWireSuggestions(suggestions)
+  });
+}
+async function setProviderKey(ctx, req, res, type, lang) {
+  if (!isProviderType(type)) {
+    return sendError(res, 404, "unknown-provider", t("web.provider_unknown", { name: type }, lang));
+  }
+  const envVar = apiKeyEnvVar(type);
+  if (envVar === null) {
+    return sendError(
+      res,
+      400,
+      "key-not-applicable",
+      t("web.provider_key_not_applicable", { name: type }, lang)
+    );
+  }
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const raw = asRecord(body.value)["apiKey"];
+  const apiKey = typeof raw === "string" ? raw.trim() : "";
+  if (apiKey === "") {
+    return sendError(res, 400, "empty-key", t("web.provider_key_empty", void 0, lang));
+  }
+  const written = await ctx.runtime.modelCatalog.setKey(type, apiKey);
+  sendJson(res, 200, {
+    provider: type,
+    hasKey: true,
+    keyHint: written.keyHint,
+    backend: written.backend,
+    encrypted: written.encrypted,
+    envPath: written.envPath
+  });
+}
+async function setDefaultModel(ctx, req, res, lang) {
+  if (ctx.runtime.providerInfo !== null) {
+    return sendError(
+      res,
+      409,
+      "provider-available",
+      t("web.model_default_has_provider", void 0, lang)
+    );
+  }
+  const body = await readJsonBody(req, void 0, lang);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const raw = asRecord(body.value)["model"];
+  const model = typeof raw === "string" ? raw.trim() : "";
+  if (model === "") {
+    return sendError(res, 400, "bad-request", t("web.model_default_empty", void 0, lang));
+  }
+  const report = ctx.runtime.settings.write({ key: "model", layer: "user", value: model });
+  if (!report.ok) {
+    const failure = settingWriteFailure(report);
+    return sendError(
+      res,
+      failure.status,
+      failure.code,
+      t(failure.key, { path: failure.path }, lang)
+    );
+  }
+  sendJson(res, 200, toWireSettingsWrite(report));
+}
+async function addRole(ctx, req, res, lang) {
+  if (ctx.lanExposed) {
+    return sendError(
+      res,
+      403,
+      "role-add-lan-exposed",
+      t("web.role_add_lan_exposed", void 0, lang)
+    );
+  }
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const outcome = ctx.runtime.roleWrite.add(
+    {
+      name: typeof payload["name"] === "string" ? payload["name"].trim() : "",
+      description: typeof payload["description"] === "string" ? payload["description"].trim() : "",
+      ...typeof payload["prompt"] === "string" ? { prompt: payload["prompt"] } : {},
+      ...Array.isArray(payload["tools"]) ? { tools: stringList2(payload["tools"]) } : {},
+      ...Array.isArray(payload["skills"]) ? { skills: stringList2(payload["skills"]) } : {},
+      ...typeof payload["maxTurns"] === "number" ? { maxTurns: payload["maxTurns"] } : {}
+    },
+    lang
+  );
+  if (!outcome.ok) return sendError(res, ...addFailure2(outcome.reason, outcome.detail, lang));
+  sendJson(res, 200, {
+    role: toWireRole(outcome.role, ctx.runtime.agentRoleNotices),
+    path: outcome.path
+  });
+}
+function addFailure2(reason, detail, lang) {
+  if (reason === "invalid-name") return [400, "bad-role-name", detail];
+  if (reason === "invalid-field")
+    return [400, "bad-role-field", t("web.role_add_bad_field", { detail }, lang)];
+  if (reason === "unknown-tool") return [400, "bad-role-tools", detail];
+  if (reason === "duplicate") return [409, "role-name-taken", detail];
+  return [409, "role-unwritable", detail];
+}
+function stringList2(value) {
+  return value.filter((v) => typeof v === "string");
+}
+async function removeRole(ctx, req, res, lang) {
+  if (ctx.lanExposed) {
+    return sendError(
+      res,
+      403,
+      "role-remove-lan-exposed",
+      t("web.role_remove_lan_exposed", void 0, lang)
+    );
+  }
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
+  const outcome = ctx.runtime.roleWrite.remove(name, lang);
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      name: "",
+      path: null,
+      takenOverBy: null,
+      detail: outcome.detail,
+      reason: outcome.reason
+    });
+  }
+  sendJson(res, 200, {
+    ok: true,
+    name: outcome.name,
+    path: outcome.path,
+    takenOverBy: outcome.takenOverBy,
+    detail: null,
+    reason: null
+  });
+}
+function stringList3(value) {
+  if (!Array.isArray(value)) return null;
+  const out = [];
+  for (const item of value) {
+    if (typeof item !== "string" || item.trim().length === 0) return null;
+    out.push(item);
+  }
+  return out;
+}
+function operationList(value) {
+  if (!Array.isArray(value)) return null;
+  const out = [];
+  for (const item of value) {
+    if (typeof item !== "string" || !isOperationType(item)) return null;
+    out.push(item);
+  }
+  return out;
+}
+function finite(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function parseTrigger(value) {
   const raw = asRecord(value);
   const kind = raw["kind"];
   const at = raw["at"];
@@ -4177,681 +4693,315 @@ function browseWorkspaceDirs(ctx, res, rawUrl, lang) {
     return sendError(
       res,
       403,
-      "workspace-denied",
-      t("web.dirs_denied", { path: outcome.path }, lang)
-    );
-  }
-  if (outcome.reason === "missing") {
-    return sendError(res, 404, "not-found", t("web.dirs_missing", { path: outcome.path }, lang));
-  }
-  sendError(
-    res,
-    400,
-    "bad-workspace",
-    outcome.reason === "not-absolute" ? t("web.dirs_not_absolute", { path: outcome.path }, lang) : t("web.dirs_not_a_directory", { path: outcome.path }, lang)
-  );
-}
-function dirsQuery(query) {
-  const value = query.get("path")?.trim();
-  return value ? value : void 0;
-}
-function atQuery(query) {
-  return query.get("at")?.trim().toLowerCase() === "home" ? workspaceHome() : void 0;
-}
-function hiddenQuery(query) {
-  const value = query.get("hidden")?.trim().toLowerCase();
-  return value === "1" || value === "true";
-}
-async function createWorkspaceDir(req, res, lang) {
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const parent = typeof payload["parent"] === "string" ? payload["parent"].trim() : "";
-  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
-  if (parent.length === 0 || !isAbsolute(parent)) {
-    return sendError(
-      res,
-      400,
-      "bad-workspace",
-      t("web.mkdir_parent_not_absolute", { parent }, lang)
-    );
-  }
-  if (!isSingleSegment(name)) {
-    return sendError(res, 400, "bad-workspace", t("web.mkdir_bad_name", { name }, lang));
-  }
-  const path = resolve(parent, name);
-  try {
-    mkdirSync(path);
-  } catch (cause) {
-    return sendError(res, ...mkdirFailure(cause, path, lang));
-  }
-  sendJson(res, 200, {
-    entry: {
-      name,
-      path,
-      readable: true,
-      known: false,
-      group: "child"
-    }
-  });
-}
-async function pickWorkspaceDir(ctx, req, res, lang) {
-  if (!ctx.nativeDirPicker) {
-    return sendError(res, 403, "native-picker-unavailable", t("web.pick_unavailable", {}, lang));
-  }
-  const abort = new AbortController();
-  req.on("close", () => abort.abort());
-  const outcome = await pickNativeDirectory({
-    prompt: t("web.pick_prompt", {}, lang),
-    signal: abort.signal
-  });
-  if (res.writableEnded || abort.signal.aborted) return;
-  if (outcome.ok) {
-    return sendJson(
-      res,
-      200,
-      outcome.path === void 0 ? { canceled: true } : { path: outcome.path }
-    );
-  }
-  if (outcome.reason === "busy") {
-    return sendError(res, 409, "native-picker-busy", t("web.pick_busy", {}, lang));
-  }
-  sendError(
-    res,
-    500,
-    "native-picker-failed",
-    t("web.pick_failed", { detail: outcome.message }, lang)
-  );
-}
-function isSingleSegment(name) {
-  if (name.length === 0) return false;
-  if (name === "." || name === "..") return false;
-  return !name.includes("/") && !name.includes(sep);
-}
-function mkdirFailure(cause, path, lang) {
-  const code = cause?.code;
-  if (code === "EEXIST") return [409, "workspace-exists", t("web.mkdir_exists", { path }, lang)];
-  if (code === "EACCES" || code === "EPERM") {
-    return [403, "workspace-denied", t("web.mkdir_denied", { path }, lang)];
-  }
-  if (code === "ENOENT") return [404, "not-found", t("web.mkdir_parent_missing", { path }, lang)];
-  return [500, "internal", t("web.mkdir_failed", { path }, lang)];
-}
-var MAX_TEXT_BYTES = 2 * 1024 * 1024;
-var VIEWABLE = /* @__PURE__ */ new Map([
-  [".png", { kind: "image", mime: "image/png" }],
-  [".jpg", { kind: "image", mime: "image/jpeg" }],
-  [".jpeg", { kind: "image", mime: "image/jpeg" }],
-  [".gif", { kind: "image", mime: "image/gif" }],
-  [".webp", { kind: "image", mime: "image/webp" }],
-  [".bmp", { kind: "image", mime: "image/bmp" }],
-  [".ico", { kind: "image", mime: "image/x-icon" }],
-  [".avif", { kind: "image", mime: "image/avif" }],
-  [".pdf", { kind: "pdf", mime: "application/pdf" }],
-  [".mp3", { kind: "audio", mime: "audio/mpeg" }],
-  [".wav", { kind: "audio", mime: "audio/wav" }],
-  [".ogg", { kind: "audio", mime: "audio/ogg" }],
-  [".m4a", { kind: "audio", mime: "audio/mp4" }],
-  [".flac", { kind: "audio", mime: "audio/flac" }],
-  [".mp4", { kind: "video", mime: "video/mp4" }],
-  [".webm", { kind: "video", mime: "video/webm" }],
-  [".mov", { kind: "video", mime: "video/quicktime" }]
-]);
-function kindOf(stat3) {
-  if (stat3.kind === "text") return "text";
-  return VIEWABLE.get(extname(stat3.rel).toLowerCase())?.kind ?? "opaque";
-}
-function toWireRefusal(reason) {
-  return reason;
-}
-function statusFor(refusal) {
-  if (refusal === "denied") return 403;
-  if (refusal === "missing") return 404;
-  if (refusal === "too-large") return 413;
-  return refusal === "not-a-file" ? 400 : 503;
-}
-function describeRefusal(refusal, lang) {
-  if (refusal === "denied") return t("web.file_view_denied", void 0, lang);
-  if (refusal === "missing") return t("web.file_view_missing", void 0, lang);
-  if (refusal === "not-a-file") return t("web.file_view_not_a_file", void 0, lang);
-  if (refusal === "too-large") {
-    return t("web.file_view_too_large", { max: String(MAX_TEXT_BYTES) }, lang);
-  }
-  return t("web.file_view_unreadable", void 0, lang);
-}
-function resolveViewRoot(ctx, res, sessionId, lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    sendUnknownSession(res, sessionId);
-    return null;
-  }
-  const root = workspaceRootOf(ctx, sessionId);
-  if (!root) {
-    sendError(res, 409, "no-workspace", t("web.file_view_no_workspace", void 0, lang));
-    return null;
-  }
-  return root;
-}
-function singlePath(res, rawUrl, lang) {
-  const params = new URLSearchParams((rawUrl ?? "").split("?")[1] ?? "");
-  const path = params.get("path")?.trim();
-  if (!path) {
-    sendError(res, 400, "missing-path", t("web.file_view_missing_path", void 0, lang));
-    return null;
-  }
-  return path;
-}
-function statFiles(ctx, res, sessionId, rawUrl, lang) {
-  const root = resolveViewRoot(ctx, res, sessionId, lang);
-  if (root === null) return;
-  const params = new URLSearchParams((rawUrl ?? "").split("?")[1] ?? "");
-  const asked = params.getAll("path").filter((p) => p.trim() !== "");
-  const taken = asked.slice(0, WIRE_FILE_STAT_MAX);
-  const files = taken.map((path) => {
-    const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
-    if (!stat3.ok) return { path, ok: false, refusal: toWireRefusal(stat3.reason) };
-    return {
-      path,
-      ok: true,
-      kind: kindOf(stat3),
-      bytes: stat3.bytes,
-      mtimeMs: stat3.mtimeMs,
-      openable: ctx.sameMachine && isSystemOpenable(stat3.rel)
-    };
-  });
-  sendJson(res, 200, {
-    files,
-    overLimit: asked.length - taken.length,
-    root
-  });
-}
-function readFileText(ctx, res, sessionId, rawUrl, lang) {
-  const root = resolveViewRoot(ctx, res, sessionId, lang);
-  if (root === null) return;
-  const path = singlePath(res, rawUrl, lang);
-  if (path === null) return;
-  const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
-  if (!stat3.ok) {
-    const refusal = toWireRefusal(stat3.reason);
-    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
-  }
-  if (stat3.kind !== "text") {
-    return sendError(res, 415, "not-text", t("web.file_view_not_text", void 0, lang));
-  }
-  if (stat3.bytes > MAX_TEXT_BYTES) {
-    return sendError(res, 413, "too-large", describeRefusal("too-large", lang));
-  }
-  const out = ctx.runtime.workspaceFiles.readFile(stat3.rel, root);
-  if (!out.ok) {
-    const refusal = out.reason === "binary" ? "unreadable" : out.reason;
-    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
-  }
-  sendJson(res, 200, {
-    path,
-    text: out.text,
-    bytes: out.bytes
-  });
-}
-function readFileBytes(ctx, res, sessionId, rawUrl, headOnly, lang) {
-  const root = resolveViewRoot(ctx, res, sessionId, lang);
-  if (root === null) return;
-  const path = singlePath(res, rawUrl, lang);
-  if (path === null) return;
-  const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
-  if (!stat3.ok) {
-    const refusal = toWireRefusal(stat3.reason);
-    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
-  }
-  const known = VIEWABLE.get(extname(stat3.rel).toLowerCase());
-  const inline = known !== void 0 && stat3.kind === "binary";
-  const headers = {
-    "Content-Type": inline ? known.mime : "application/octet-stream",
-    "X-Content-Type-Options": "nosniff",
-    "Content-Disposition": inline ? "inline" : `attachment; filename*=UTF-8''${encodeURIComponent(basenameOf(stat3.rel))}`
-  };
-  if (inline && known.kind === "pdf") headers["Content-Security-Policy"] = "sandbox";
-  if (headOnly) {
-    return sendEmpty(res, 200, {
-      ...headers,
-      "Content-Length": String(stat3.bytes)
-    });
-  }
-  sendFile(res, stat3.absPath, headers);
-}
-function basenameOf(rel) {
-  const cut = rel.lastIndexOf("/");
-  return cut < 0 ? rel : rel.slice(cut + 1);
-}
-// src/workspace/file-open.ts
-function describeOpenRefusal(refusal, lang) {
-  if (refusal === "extension-not-allowed") {
-    return t("web.file_open_extension_not_allowed", void 0, lang);
-  }
-  if (refusal === "not-same-machine") return t("web.file_open_not_same_machine", void 0, lang);
-  if (refusal === "launch-failed") return t("web.file_open_launch_failed", void 0, lang);
-  return describeRefusal(refusal, lang);
-}
-function refuse(res, refusal, lang) {
-  sendJson(res, 200, {
-    ok: false,
-    refusal,
-    message: describeOpenRefusal(refusal, lang)
-  });
-}
-async function openFileWithSystemApp(ctx, req, res, sessionId, lang) {
-  if (!ctx.sameMachine) {
-    return sendError(res, 403, "not-same-machine", describeOpenRefusal("not-same-machine", lang));
-  }
-  const root = resolveViewRoot(ctx, res, sessionId, lang);
-  if (root === null) return;
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const path = typeof payload["path"] === "string" ? payload["path"].trim() : "";
-  if (path === "") {
-    return sendError(res, 400, "missing-path", t("web.file_view_missing_path", void 0, lang));
-  }
-  const plan = ctx.runtime.workspaceFiles.planSystemOpen(path, root);
-  if (!plan.ok) return refuse(res, plan.reason, lang);
-  try {
-    const child = spawn(plan.command, [...plan.args], { stdio: "ignore", detached: true });
-    await new Promise((done, fail) => {
-      child.on("error", fail);
-      child.on("spawn", () => {
-        child.unref();
-        done();
-      });
-    });
-  } catch {
-    return refuse(res, "launch-failed", lang);
-  }
-  sendJson(res, 200, { ok: true });
-}
-async function forgetWorkspace(ctx, sessionId, req, res, lang) {
-  const body = await readJsonBody(req, void 0, lang);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  if (!conformsToWire(body.value, WIRE_FORGET_WORKSPACE_FIELDS)) {
-    return sendError(res, 400, "bad-request", t("web.forget_bad_request", {}, lang));
-  }
-  const { root } = body.value;
-  const workspaces = ctx.runtime.workspaces;
-  if (!workspaces.known().some((w) => w.root === root)) {
-    return sendError(res, 404, "unknown-workspace", t("web.forget_unknown", {}, lang));
-  }
-  const current = workspaces.of(sessionId)?.workspace.root;
-  if (current !== void 0 && current === root) {
-    return sendError(res, 409, "workspace-in-use", t("web.forget_in_use", {}, lang));
-  }
-  workspaces.forget(root);
-  sendJson(res, 200, {
-    known: toWireTrustList(workspaces.known(), workspaces, current ?? null)
-  });
-}
-var GIT_TIMEOUT_MS = 1e4;
-var GIT_MAX_BUFFER = 16 * 1024 * 1024;
-function runGit(cwd, args) {
-  if (!canProbeGit()) return Promise.resolve({ ok: false, error: "git unavailable" });
-  return new Promise((resolve4) => {
-    guardSpawn(
-      () => execFile(
-        "git",
-        [...args],
-        { cwd, timeout: GIT_TIMEOUT_MS, maxBuffer: GIT_MAX_BUFFER, encoding: "buffer" },
-        (err, stdout) => {
-          if (err) return resolve4({ ok: false, error: err.message });
-          resolve4({ ok: true, stdout });
-        }
-      ),
-      (err) => resolve4({ ok: false, error: `${err.message} (cwd=${cwd})` })
-    );
-  });
-}
-async function repoRoot(cwd) {
-  const result = await runGit(cwd, ["rev-parse", "--show-toplevel"]);
-  if (!result.ok) return null;
-  const root = result.stdout.toString("utf-8").trim();
-  return root.length > 0 ? root : null;
-}
-async function hasHead(root) {
-  return (await runGit(root, ["rev-parse", "--verify", "--quiet", "HEAD"])).ok;
-}
-var NULL_SHA = /^0+$/;
-async function rawChanges(root) {
-  const result = await runGit(root, ["diff", "--raw", "-z", "HEAD", "--"]);
-  if (!result.ok) return [];
-  return parseRawZ(result.stdout.toString("utf-8"));
-}
-function parseRawZ(text) {
-  const tokens = text.split("\0");
-  const changes = [];
-  let i = 0;
-  while (i < tokens.length) {
-    const meta = tokens[i];
-    if (meta === void 0 || !meta.startsWith(":")) {
-      i += 1;
-      continue;
-    }
-    const parts = meta.slice(1).split(" ");
-    const oldSha = parts[2] ?? "";
-    const status = (parts[4] ?? "").trim();
-    const renamed = status.startsWith("R") || status.startsWith("C");
-    const first = tokens[i + 1];
-    const second = renamed ? tokens[i + 2] : void 0;
-    i += renamed ? 3 : 2;
-    if (first === void 0 || renamed && second === void 0) break;
-    const path = renamed ? second : first;
-    changes.push({
-      status: status.charAt(0),
-      path,
-      ...renamed ? { oldPath: first } : {},
-      oldSha: NULL_SHA.test(oldSha) ? null : oldSha
-    });
+      "workspace-denied",
+      t("web.dirs_denied", { path: outcome.path }, lang)
+    );
   }
-  return changes;
-}
-async function treeBlobSizes(root) {
-  const sizes = /* @__PURE__ */ new Map();
-  const result = await runGit(root, ["ls-tree", "-r", "-l", "-z", "HEAD"]);
-  if (!result.ok) return sizes;
-  for (const record of splitZ(result.stdout.toString("utf-8"))) {
-    const tab = record.indexOf("	");
-    if (tab < 0) continue;
-    const columns = record.slice(0, tab).split(/\s+/).filter(Boolean);
-    const sha = columns[2];
-    const size = Number(columns[3]);
-    if (columns[1] === "blob" && sha && Number.isFinite(size)) sizes.set(sha, size);
+  if (outcome.reason === "missing") {
+    return sendError(res, 404, "not-found", t("web.dirs_missing", { path: outcome.path }, lang));
   }
-  return sizes;
-}
-async function untrackedFiles(root) {
-  const result = await runGit(root, ["ls-files", "-z", "--others", "--exclude-standard"]);
-  if (!result.ok) return [];
-  return splitZ(result.stdout.toString("utf-8"));
-}
-async function trackedFiles(root) {
-  const result = await runGit(root, ["ls-files", "-z"]);
-  if (!result.ok) return [];
-  return splitZ(result.stdout.toString("utf-8"));
+  sendError(
+    res,
+    400,
+    "bad-workspace",
+    outcome.reason === "not-absolute" ? t("web.dirs_not_absolute", { path: outcome.path }, lang) : t("web.dirs_not_a_directory", { path: outcome.path }, lang)
+  );
 }
-async function catFileBlob(root, sha) {
-  const result = await runGit(root, ["cat-file", "blob", sha]);
-  return result.ok ? result.stdout : null;
+function dirsQuery(query) {
+  const value = query.get("path")?.trim();
+  return value ? value : void 0;
 }
-function splitZ(text) {
-  return text.split("\0").filter((s) => s.length > 0);
+function atQuery(query) {
+  return query.get("at")?.trim().toLowerCase() === "home" ? workspaceHome() : void 0;
 }
-// src/workspace/diff.ts
-var MAX_DIFF_BYTES = 512 * 1024;
-var MAX_DIFF_FILES = 200;
-var BINARY_SNIFF_BYTES = 8e3;
-var ABSENT = { kind: "absent" };
-async function collectWorkspaceDiff(opts) {
-  const root = await repoRoot(opts.workDir);
-  return root === null ? await checkpointDiff(opts) : await gitDiff(root);
+function hiddenQuery(query) {
+  const value = query.get("hidden")?.trim().toLowerCase();
+  return value === "1" || value === "true";
 }
-async function gitDiff(root) {
-  const wanted = await collectGitPaths(root);
-  const notes = [];
-  const truncated = wanted.length > MAX_DIFF_FILES;
-  const picked = truncated ? wanted.slice(0, MAX_DIFF_FILES) : wanted;
-  if (truncated) notes.push("truncated");
-  if (wanted.length === 0) notes.push("no-changes");
-  const sizes = picked.some((p) => p.oldSha !== null) ? await treeBlobSizes(root) : /* @__PURE__ */ new Map();
-  const files = [];
-  for (const item of picked) {
-    const old = await gitSide(root, item.oldSha, sizes);
-    const fresh = await worktreeSide(join(root, ...item.path.split("/")));
-    files.push(describe3(item.path, old, fresh));
+async function createWorkspaceDir(req, res, lang) {
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const parent = typeof payload["parent"] === "string" ? payload["parent"].trim() : "";
+  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
+  if (parent.length === 0 || !isAbsolute(parent)) {
+    return sendError(
+      res,
+      400,
+      "bad-workspace",
+      t("web.mkdir_parent_not_absolute", { parent }, lang)
+    );
   }
-  return { source: "git", root, files, truncated, notes };
-}
-async function collectGitPaths(root) {
-  const byPath = /* @__PURE__ */ new Map();
-  if (await hasHead(root)) {
-    for (const change of await rawChanges(root)) {
-      if (change.oldPath !== void 0) {
-        byPath.set(change.oldPath, { path: change.oldPath, oldSha: change.oldSha });
-      }
-      byPath.set(change.path, {
-        path: change.path,
-        oldSha: change.oldPath === void 0 ? change.oldSha : null
-      });
-    }
-  } else {
-    for (const path of await trackedFiles(root)) byPath.set(path, { path, oldSha: null });
+  if (!isSingleSegment(name)) {
+    return sendError(res, 400, "bad-workspace", t("web.mkdir_bad_name", { name }, lang));
   }
-  for (const path of await untrackedFiles(root)) {
-    if (!byPath.has(path)) byPath.set(path, { path, oldSha: null });
+  const path = resolve(parent, name);
+  try {
+    mkdirSync(path);
+  } catch (cause) {
+    return sendError(res, ...mkdirFailure(cause, path, lang));
   }
-  return [...byPath.values()].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
-}
-async function gitSide(root, sha, sizes) {
-  if (sha === null) return ABSENT;
-  const known = sizes.get(sha);
-  if (known !== void 0 && known > MAX_DIFF_BYTES) return { kind: "oversize", bytes: known };
-  const data = await catFileBlob(root, sha);
-  if (data === null) return { kind: "oversize", bytes: known ?? -1 };
-  return { kind: "content", data };
+  sendJson(res, 200, {
+    entry: {
+      name,
+      path,
+      readable: true,
+      known: false,
+      group: "child"
+    }
+  });
 }
-async function checkpointDiff(opts) {
-  const notes = ["not-a-git-repo"];
-  const paths = await checkpointPaths(opts.checkpoints);
-  if (paths.length === 0) {
-    notes.push(opts.checkpoints === null ? "no-workspace-history" : "no-changes");
-    return { source: "none", root: opts.workDir, files: [], truncated: false, notes };
+async function pickWorkspaceDir(ctx, req, res, lang) {
+  if (!ctx.nativeDirPicker) {
+    return sendError(res, 403, "native-picker-unavailable", t("web.pick_unavailable", {}, lang));
   }
-  const truncated = paths.length > MAX_DIFF_FILES;
-  const picked = truncated ? paths.slice(0, MAX_DIFF_FILES) : paths;
-  if (truncated) notes.push("truncated");
-  const files = [];
-  for (const absolute of picked) {
-    const fresh = await worktreeSide(absolute);
-    files.push(
-      describe3(displayPath(opts.workDir, absolute), ABSENT, fresh, {
-        status: fresh.kind === "absent" ? "deleted" : "modified",
-        omitted: "no-snapshot"
-      })
+  const abort = new AbortController();
+  req.on("close", () => abort.abort());
+  const outcome = await pickNativeDirectory({
+    prompt: t("web.pick_prompt", {}, lang),
+    signal: abort.signal
+  });
+  if (res.writableEnded || abort.signal.aborted) return;
+  if (outcome.ok) {
+    return sendJson(
+      res,
+      200,
+      outcome.path === void 0 ? { canceled: true } : { path: outcome.path }
     );
   }
-  return { source: "checkpoints", root: opts.workDir, files, truncated, notes };
-}
-async function checkpointPaths(checkpoints) {
-  if (!checkpoints) return [];
-  const paths = /* @__PURE__ */ new Set();
-  try {
-    for (const summary of await checkpoints.list()) {
-      const preview = await checkpoints.preview(summary.turnIndex);
-      if (!preview) continue;
-      for (const plan of [...preview.files, ...preview.conflicts]) {
-        if (plan.action !== "skip") paths.add(plan.path);
-      }
-    }
-  } catch {
+  if (outcome.reason === "busy") {
+    return sendError(res, 409, "native-picker-busy", t("web.pick_busy", {}, lang));
   }
-  return [...paths].sort();
+  sendError(
+    res,
+    500,
+    "native-picker-failed",
+    t("web.pick_failed", { detail: outcome.message }, lang)
+  );
 }
-function displayPath(workDir, absolute) {
-  const rel = relative(workDir, absolute);
-  if (rel.length === 0 || rel.startsWith("..") || isAbsolute(rel)) return absolute;
-  return rel.split(sep).join("/");
+function isSingleSegment(name) {
+  if (name.length === 0) return false;
+  if (name === "." || name === "..") return false;
+  return !name.includes("/") && !name.includes(sep);
 }
-async function worktreeSide(absolute) {
-  try {
-    const info = await stat(absolute);
-    if (!info.isFile()) return ABSENT;
-    if (info.size > MAX_DIFF_BYTES) return { kind: "oversize", bytes: info.size };
-    return { kind: "content", data: await readFile(absolute) };
-  } catch {
-    return ABSENT;
+function mkdirFailure(cause, path, lang) {
+  const code = cause?.code;
+  if (code === "EEXIST") return [409, "workspace-exists", t("web.mkdir_exists", { path }, lang)];
+  if (code === "EACCES" || code === "EPERM") {
+    return [403, "workspace-denied", t("web.mkdir_denied", { path }, lang)];
   }
+  if (code === "ENOENT") return [404, "not-found", t("web.mkdir_parent_missing", { path }, lang)];
+  return [500, "internal", t("web.mkdir_failed", { path }, lang)];
 }
-function describe3(path, old, fresh, override = {}) {
-  const status = override.status ?? (old.kind === "absent" ? "added" : fresh.kind === "absent" ? "deleted" : "modified");
-  const oldBytes = bytesOf(old);
-  const newBytes = bytesOf(fresh);
-  const hard = omitReason(old, fresh);
-  if (hard !== void 0) {
-    return { path, status, oldContent: null, newContent: null, oldBytes, newBytes, omitted: hard };
-  }
-  return {
-    path,
-    status,
-    oldContent: textOf(old),
-    newContent: textOf(fresh),
-    oldBytes,
-    newBytes,
-    ...override.omitted === void 0 ? {} : { omitted: override.omitted }
-  };
+var MAX_TEXT_BYTES = 2 * 1024 * 1024;
+var VIEWABLE = /* @__PURE__ */ new Map([
+  [".png", { kind: "image", mime: "image/png" }],
+  [".jpg", { kind: "image", mime: "image/jpeg" }],
+  [".jpeg", { kind: "image", mime: "image/jpeg" }],
+  [".gif", { kind: "image", mime: "image/gif" }],
+  [".webp", { kind: "image", mime: "image/webp" }],
+  [".bmp", { kind: "image", mime: "image/bmp" }],
+  [".ico", { kind: "image", mime: "image/x-icon" }],
+  [".avif", { kind: "image", mime: "image/avif" }],
+  [".pdf", { kind: "pdf", mime: "application/pdf" }],
+  [".mp3", { kind: "audio", mime: "audio/mpeg" }],
+  [".wav", { kind: "audio", mime: "audio/wav" }],
+  [".ogg", { kind: "audio", mime: "audio/ogg" }],
+  [".m4a", { kind: "audio", mime: "audio/mp4" }],
+  [".flac", { kind: "audio", mime: "audio/flac" }],
+  [".mp4", { kind: "video", mime: "video/mp4" }],
+  [".webm", { kind: "video", mime: "video/webm" }],
+  [".mov", { kind: "video", mime: "video/quicktime" }]
+]);
+function kindOf(stat3) {
+  if (stat3.kind === "text") return "text";
+  return VIEWABLE.get(extname(stat3.rel).toLowerCase())?.kind ?? "opaque";
 }
-function bytesOf(side) {
-  if (side.kind === "absent") return null;
-  if (side.kind === "oversize") return side.bytes < 0 ? null : side.bytes;
-  return side.data.byteLength;
+function toWireRefusal(reason) {
+  return reason;
+}
+function statusFor(refusal) {
+  if (refusal === "denied") return 403;
+  if (refusal === "missing") return 404;
+  if (refusal === "too-large") return 413;
+  return refusal === "not-a-file" ? 400 : 503;
+}
+function describeRefusal(refusal, lang) {
+  if (refusal === "denied") return t("web.file_view_denied", void 0, lang);
+  if (refusal === "missing") return t("web.file_view_missing", void 0, lang);
+  if (refusal === "not-a-file") return t("web.file_view_not_a_file", void 0, lang);
+  if (refusal === "too-large") {
+    return t("web.file_view_too_large", { max: String(MAX_TEXT_BYTES) }, lang);
+  }
+  return t("web.file_view_unreadable", void 0, lang);
 }
-function textOf(side) {
-  return side.kind === "content" ? side.data.toString("utf-8") : null;
+function resolveViewRoot(ctx, res, sessionId, lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    sendUnknownSession(res, sessionId);
+    return null;
+  }
+  const root = workspaceRootOf(ctx, sessionId);
+  if (!root) {
+    sendError(res, 409, "no-workspace", t("web.file_view_no_workspace", void 0, lang));
+    return null;
+  }
+  return root;
 }
-function omitReason(old, fresh) {
-  if (isBinary(old) || isBinary(fresh)) return "binary";
-  if (old.kind === "oversize" || fresh.kind === "oversize") return "too-large";
-  return void 0;
+function singlePath(res, rawUrl, lang) {
+  const params = new URLSearchParams((rawUrl ?? "").split("?")[1] ?? "");
+  const path = params.get("path")?.trim();
+  if (!path) {
+    sendError(res, 400, "missing-path", t("web.file_view_missing_path", void 0, lang));
+    return null;
+  }
+  return path;
 }
-function isBinary(side) {
-  return side.kind === "content" && side.data.subarray(0, BINARY_SNIFF_BYTES).includes(0);
+function statFiles(ctx, res, sessionId, rawUrl, lang) {
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
+  const params = new URLSearchParams((rawUrl ?? "").split("?")[1] ?? "");
+  const asked = params.getAll("path").filter((p) => p.trim() !== "");
+  const taken = asked.slice(0, WIRE_FILE_STAT_MAX);
+  const files = taken.map((path) => {
+    const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
+    if (!stat3.ok) return { path, ok: false, refusal: toWireRefusal(stat3.reason) };
+    return {
+      path,
+      ok: true,
+      kind: kindOf(stat3),
+      bytes: stat3.bytes,
+      mtimeMs: stat3.mtimeMs,
+      openable: ctx.sameMachine && isSystemOpenable(stat3.rel)
+    };
+  });
+  sendJson(res, 200, {
+    files,
+    overLimit: asked.length - taken.length,
+    root
+  });
 }
-// src/workspace/handlers.ts
-async function createSession(ctx, req, res, lang) {
-  const body = await readJsonBody(req);
-  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const payload = asRecord(body.value);
-  const field = readWorkspaceField(payload, lang);
-  if (!field.ok) return sendError(res, 400, "bad-workspace", field.message);
-  const defer = payload["deferWorkspace"] === true;
-  if (defer && field.dir !== null) {
-    return sendError(res, 400, "bad-request", t("web.workspace_defer_with_root", void 0, lang));
+function readFileText(ctx, res, sessionId, rawUrl, lang) {
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
+  const path = singlePath(res, rawUrl, lang);
+  if (path === null) return;
+  const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
+  if (!stat3.ok) {
+    const refusal = toWireRefusal(stat3.reason);
+    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
   }
-  if (defer && payload["create"] !== true) {
-    return sendError(
-      res,
-      400,
-      "bad-request",
-      t("web.workspace_defer_needs_create", void 0, lang)
-    );
+  if (stat3.kind !== "text") {
+    return sendError(res, 415, "not-text", t("web.file_view_not_text", void 0, lang));
   }
-  if (field.dir === null && payload["create"] !== true) {
-    const sessionId = ctx.runtime.sessionId;
-    const bound = ctx.runtime.workspaces.of(sessionId);
-    return sendJson(res, 200, {
-      sessionId,
-      created: false,
-      workspace: bound ? toWireSessionWorkspace(bound) : null
-    });
+  if (stat3.bytes > MAX_TEXT_BYTES) {
+    return sendError(res, 413, "too-large", describeRefusal("too-large", lang));
   }
-  const role = typeof payload["role"] === "string" ? payload["role"].trim() : "";
-  const outcome = ctx.runtime.sessionFactory.create({
-    workspace: field.dir,
-    ...lang === void 0 ? {} : { lang },
-    reuse: payload["create"] !== true,
-    ...role === "" ? {} : { role }
-  });
-  if (!outcome.ok) {
-    if (outcome.reason === "unavailable") {
-      const mapped2 = unavailableToHttp(lang);
-      return sendError(res, mapped2.status, mapped2.code, mapped2.message);
-    }
-    if (outcome.reason === "unknown-role") {
-      const mapped2 = unknownRoleToHttp(outcome.detail, lang);
-      return sendError(res, mapped2.status, mapped2.code, mapped2.message);
-    }
-    const mapped = bindFailureToHttp(outcome, lang);
-    return sendError(res, mapped.status, mapped.code, mapped.message);
+  const out = ctx.runtime.workspaceFiles.readFile(stat3.rel, root);
+  if (!out.ok) {
+    const refusal = out.reason === "binary" ? "unreadable" : out.reason;
+    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
   }
-  ctx.hub.register(outcome.live.session);
-  if (defer) ctx.runtime.workspaces.defer(outcome.live.sessionId);
-  if (outcome.created) ctx.hub.notifySessionsChanged(outcome.live.sessionId);
   sendJson(res, 200, {
-    sessionId: outcome.live.sessionId,
-    created: outcome.created,
-    workspace: outcome.live.workspace ? toWireSessionWorkspace(outcome.live.workspace) : null
+    path,
+    text: out.text,
+    bytes: out.bytes
   });
 }
-function sessionWorkspace(ctx, res, sessionId, lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId);
+function readFileBytes(ctx, res, sessionId, rawUrl, headOnly, lang) {
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
+  const path = singlePath(res, rawUrl, lang);
+  if (path === null) return;
+  const stat3 = ctx.runtime.workspaceFiles.statFile(path, root);
+  if (!stat3.ok) {
+    const refusal = toWireRefusal(stat3.reason);
+    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
   }
-  const state = ctx.runtime.workspaces.stateOf(sessionId);
-  if (state !== "none") {
-    return sendJson(res, 200, {
-      binding: toWireBinding(state, ctx.runtime.workspaces.of(sessionId))
+  const known = VIEWABLE.get(extname(stat3.rel).toLowerCase());
+  const inline = known !== void 0 && stat3.kind === "binary";
+  const headers = {
+    "Content-Type": inline ? known.mime : "application/octet-stream",
+    "X-Content-Type-Options": "nosniff",
+    "Content-Disposition": inline ? "inline" : `attachment; filename*=UTF-8''${encodeURIComponent(basenameOf(stat3.rel))}`
+  };
+  if (inline && known.kind === "pdf") headers["Content-Security-Policy"] = "sandbox";
+  if (headOnly) {
+    return sendEmpty(res, 200, {
+      ...headers,
+      "Content-Length": String(stat3.bytes)
     });
   }
-  if (ctx.hub.has(sessionId) || ctx.hub.isCooled(sessionId)) {
-    return sendJson(res, 200, {
-      binding: { state: "none" }
-    });
+  sendFile(res, stat3.absPath, headers);
+}
+function basenameOf(rel) {
+  const cut = rel.lastIndexOf("/");
+  return cut < 0 ? rel : rel.slice(cut + 1);
+}
+// src/workspace/file-open.ts
+function describeOpenRefusal(refusal, lang) {
+  if (refusal === "extension-not-allowed") {
+    return t("web.file_open_extension_not_allowed", void 0, lang);
   }
-  sendError(res, 409, "not-live-session", t("web.workspace_not_live", void 0, lang));
+  if (refusal === "not-same-machine") return t("web.file_open_not_same_machine", void 0, lang);
+  if (refusal === "launch-failed") return t("web.file_open_launch_failed", void 0, lang);
+  return describeRefusal(refusal, lang);
 }
-async function bindWorkspace(ctx, req, res, sessionId, lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId);
+function refuse(res, refusal, lang) {
+  sendJson(res, 200, {
+    ok: false,
+    refusal,
+    message: describeOpenRefusal(refusal, lang)
+  });
+}
+async function openFileWithSystemApp(ctx, req, res, sessionId, lang) {
+  if (!ctx.sameMachine) {
+    return sendError(res, 403, "not-same-machine", describeOpenRefusal("not-same-machine", lang));
   }
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
-  const parsed = readBindWorkspaceBody(asRecord(body.value), lang);
-  if (!parsed.ok) return sendError(res, 400, "bad-workspace", parsed.message);
-  const state = ctx.runtime.workspaces.stateOf(sessionId);
-  if (state !== "unbound") {
-    return sendError(
-      res,
-      409,
-      "workspace-locked",
-      t("web.workspace_already_decided", void 0, lang)
-    );
+  const payload = asRecord(body.value);
+  const path = typeof payload["path"] === "string" ? payload["path"].trim() : "";
+  if (path === "") {
+    return sendError(res, 400, "missing-path", t("web.file_view_missing_path", void 0, lang));
   }
-  const turn = ctx.hub.stateOf(sessionId);
-  if (turn !== "idle") {
-    return sendError(res, 409, "busy", t("web.workspace_turn_running", void 0, lang), {
-      "X-Epoch-Turn-State": turn
+  const plan = ctx.runtime.workspaceFiles.planSystemOpen(path, root);
+  if (!plan.ok) return refuse(res, plan.reason, lang);
+  try {
+    const child = spawn(plan.command, [...plan.args], { stdio: "ignore", detached: true });
+    await new Promise((done, fail) => {
+      child.on("error", fail);
+      child.on("spawn", () => {
+        child.unref();
+        done();
+      });
     });
+  } catch {
+    return refuse(res, "launch-failed", lang);
   }
-  if (parsed.kind === "none") {
-    ctx.runtime.workspaces.decideNone(sessionId);
-    return sendJson(res, 200, {
-      binding: { state: "none" }
-    });
+  sendJson(res, 200, { ok: true });
+}
+async function forgetWorkspace(ctx, sessionId, req, res, lang) {
+  const body = await readJsonBody(req, void 0, lang);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  if (!conformsToWire(body.value, WIRE_FORGET_WORKSPACE_FIELDS)) {
+    return sendError(res, 400, "bad-request", t("web.forget_bad_request", {}, lang));
   }
-  const outcome = ctx.runtime.workspaces.bind(sessionId, parsed.root, lang);
-  if (!outcome.ok) {
-    const mapped = bindFailureToHttp(outcome, lang);
-    return sendError(res, mapped.status, mapped.code, mapped.message);
+  const { root } = body.value;
+  const workspaces = ctx.runtime.workspaces;
+  if (!workspaces.known().some((w) => w.root === root)) {
+    return sendError(res, 404, "unknown-workspace", t("web.forget_unknown", {}, lang));
+  }
+  const current = workspaces.of(sessionId)?.workspace.root;
+  if (current !== void 0 && current === root) {
+    return sendError(res, 409, "workspace-in-use", t("web.forget_in_use", {}, lang));
   }
+  workspaces.forget(root);
   sendJson(res, 200, {
-    binding: { state: "bound", workspace: toWireSessionWorkspace(outcome.bound) }
+    known: toWireTrustList(workspaces.known(), workspaces, current ?? null)
   });
 }
-async function sessionDiff(ctx, res, sessionId, _lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
-    return sendUnknownSession(res, sessionId);
-  }
-  const bound = ctx.runtime.workspaces.of(sessionId);
-  if (!bound) {
-    return sendJson(res, 200, {
-      source: "none",
-      root: "",
-      files: [],
-      truncated: false,
-      notes: ["no-workspace"]
-    });
-  }
-  sendJson(
-    res,
-    200,
-    await collectWorkspaceDiff({
-      workDir: bound.workspace.root,
-      checkpoints: checkpointsOf(ctx, sessionId)
-    })
-  );
-}
 function isKnownRoot(ctx, sessionId, root) {
   if (ctx.runtime.workspaces.of(sessionId)?.workspace.root === root) return true;
   return ctx.runtime.workspaces.known().some((w) => w.root === root);
@@ -4951,6 +5101,15 @@ async function handleApi(opts, req, res, method, segments, lang) {
   if (resource === "last-session" && first === void 0 && method === "PUT") {
     return putLastSession(ctx, req, res, lang);
   }
+  if (resource === "host" && first === "compose" && second === void 0 && method === "POST") {
+    return postHostCompose(ctx, req, res, lang);
+  }
+  if (resource === "host" && first === "compose" && second === void 0 && isRead(method)) {
+    return getHostCompose(ctx, res);
+  }
+  if (resource === "host" && first === "compose" && second !== void 0 && detail === "take" && method === "POST") {
+    return takeHostCompose(ctx, res, second);
+  }
   if (resource === "sessions") {
     return handleSessions(opts, req, res, method, first, second, detail, lang);
   }
@@ -5330,6 +5489,7 @@ function buildHandler(opts, hub, binding, port, webRoot) {
   return createRequestHandler({
     ctx: {
       hub,
+      hostCompose: new HostComposeStore(),
       runtime: opts.runtime,
       version: opts.version,
       artifactsRoot: opts.artifactsRoot ?? opts.runtime.artifactsRoot,