@epoch-agent/server 0.2.0 → 0.3.2

package/dist/index.js

@@ -1,12 +1,12 @@
 import { createServer } from 'http';
-import { t, ApprovalRelay, QuestionRelay, serializeStream, withRoleScope, withModelScope, withToolScope, nextRunAt, skillIndexDescription, SANDBOX_EXCLUDES, SANDBOX_COVERS, backgroundTaskOutput, listBackgroundTasks, providerLabel, MAX_REASON_CHARS, MAX_OBJECTIVE_CHARS, MAX_GOAL_MAX_ROUNDS, DEFAULT_GOAL_MAX_ROUNDS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_DEFAULTS, readRecording } from '@epoch-agent/runtime';
+import { t, ApprovalRelay, QuestionRelay, serializeStream, withRoleScope, withModelScope, withToolScope, nextRunAt, skillIndexDescription, SANDBOX_EXCLUDES, SANDBOX_COVERS, isSystemOpenable, backgroundTaskOutput, listBackgroundTasks, providerLabel, MAX_REASON_CHARS, MAX_OBJECTIVE_CHARS, MAX_GOAL_MAX_ROUNDS, DEFAULT_GOAL_MAX_ROUNDS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_DEFAULTS, readRecording } from '@epoch-agent/runtime';
 import { timingSafeEqual, randomBytes } from 'crypto';
-import { PLAN_OUTCOMES, WIRE_AUTH_COOKIE, WIRE_AUTH_COOKIE_ATTRS, WIRE_AUTH_TOKEN_PARAM, extractAllMentions, MAX_ATTACH_FILES, utf8ByteLength, MAX_SESSION_REFS, attachSessionSurface, isWireRewindScope, WIRE_REWIND_SCOPES, MAX_ATTACH_TOTAL_BYTES, MAX_ATTACH_BYTES, WIRE_LANG_PARAM, isLang, isQuestionAnswerMap, isProviderType, WIRE_SETTING_WRITE_LAYERS, isWirePlanAction, WIRE_PLAN_ACTIONS, isPermissionLevel, PERMISSION_LEVELS, collectPendingApprovals, unfixedRules, isWireSettingWriteLayer, parseModelRef, WIRE_GOAL_ACTIONS, OPERATION_TYPES, isOperationType } from '@epoch-agent/protocol';
+import { PLAN_OUTCOMES, WIRE_AUTH_COOKIE, WIRE_AUTH_COOKIE_ATTRS, WIRE_AUTH_TOKEN_PARAM, extractAllMentions, MAX_ATTACH_FILES, utf8ByteLength, MAX_SESSION_REFS, attachSessionSurface, isWireRewindScope, WIRE_REWIND_SCOPES, MAX_ATTACH_TOTAL_BYTES, MAX_ATTACH_BYTES, WIRE_LANG_PARAM, isLang, isQuestionAnswerMap, isProviderType, apiKeyEnvVar, WIRE_FILE_STAT_MAX, WIRE_SETTING_WRITE_LAYERS, isWirePlanAction, WIRE_PLAN_ACTIONS, isPermissionLevel, PERMISSION_LEVELS, collectPendingApprovals, unfixedRules, isWireSettingWriteLayer, parseModelRef, WIRE_GOAL_ACTIONS, OPERATION_TYPES, isOperationType } from '@epoch-agent/protocol';
 import { resolve, join, relative, isAbsolute, sep, dirname, basename, extname } from 'path';
 import { existsSync, realpathSync, statSync, mkdirSync, createReadStream, readdirSync, accessSync, constants } from 'fs';
 import { homedir } from 'os';
+import { execFile, spawn } from 'child_process';
 import { stat, readFile } from 'fs/promises';
-import { execFile } from 'child_process';
 import { fileURLToPath } from 'url';
 
 // src/index.ts
@@ -714,6 +714,10 @@ function sendJson(res, status, body, extra = {}) {
   });
   res.end(payload);
 }
+function sendEmpty(res, status, extra = {}) {
+  res.writeHead(status, { ...BASE_HEADERS, ...extra });
+  res.end();
+}
 function sendError(res, status, code, message, extra = {}) {
   sendJson(res, status, { error: { code, message } }, extra);
 }
@@ -1325,7 +1329,9 @@ function toWireSettingRow(row) {
     layer: row.layer,
     chain: row.chain.map(toWireSettingStep),
     overridable: row.overridable,
-    writes: row.writes.map(toWireSettingWrite)
+    writes: row.writes.map(toWireSettingWrite),
+    ...row.valueKind === void 0 ? {} : { valueKind: row.valueKind },
+    ...row.choices === void 0 ? {} : { choices: [...row.choices] }
   };
 }
 function toWireSettingStep(step) {
@@ -1442,6 +1448,7 @@ function config(ctx, res, lang) {
     compression: runtime.compression,
     ...runtime.config.budget?.maxCostUsd !== void 0 ? { maxCostUsd: runtime.config.budget.maxCostUsd } : {},
     ...runtime.config.brand !== void 0 ? { brand: runtime.config.brand } : {},
+    ...runtime.config.sidebarMenu !== void 0 ? { sidebarMenu: runtime.config.sidebarMenu } : {},
     provider: runtime.providerInfo,
     tools: runtime.tools,
     diagnostics: (lang && runtime.diagnosticsIn?.(lang)) ?? runtime.diagnosticList,
@@ -1453,7 +1460,8 @@ function config(ctx, res, lang) {
       dbPath: runtime.config.dbPath,
       ...runtime.config.profile !== "default" ? { profile: runtime.config.profile } : {}
     },
-    lanExposed: ctx.lanExposed
+    lanExposed: ctx.lanExposed,
+    nativeDirPicker: ctx.nativeDirPicker
   });
 }
 function listSessions(ctx, res, query, _lang) {
@@ -1532,7 +1540,11 @@ function listMessages(ctx, res, sessionId, lang) {
     return sendUnknownSession(res, sessionId, lang);
   }
   const messages = ctx.runtime.sessionStore?.loadMessages(sessionId) ?? [];
-  sendJson(res, 200, { messages });
+  const usage = ctx.runtime.sessionUsage(sessionId);
+  sendJson(res, 200, {
+    messages,
+    ...usage ? { usage } : {}
+  });
 }
 async function postMessage(ctx, req, res, sessionId, lang) {
   if (!ctx.hub.has(sessionId)) {
@@ -1683,13 +1695,13 @@ function getTools(ctx, res, sessionId, lang) {
   sendJson(res, 200, payload);
 }
 function getSettings(ctx, res, sessionId, lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+  if (!ctx.hub.has(sessionId)) {
     return sendUnknownSession(res, sessionId, lang);
   }
   sendJson(res, 200, collectSettings(ctx.runtime, sessionId));
 }
 async function writeSetting(ctx, req, res, sessionId, lang) {
-  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+  if (!ctx.hub.has(sessionId)) {
     return sendUnknownSession(res, sessionId, lang);
   }
   const body = await readJsonBody(req, void 0, lang);
@@ -2382,9 +2394,14 @@ async function setPermission(ctx, req, res, sessionId, lang) {
     );
   }
   const before = perms.level();
-  const result = perms.setLevel(level);
+  const result = perms.setLevel(level, { remember: true });
   const state = permissionState(ctx, sessionId);
-  const payload = result.ok ? { ok: true, changed: state.level !== before, state } : { ok: false, refused: REFUSAL[result.reason], changed: false, state };
+  const payload = result.ok ? {
+    ok: true,
+    changed: state.level !== before,
+    state,
+    ...result.notRemembered ? { notRemembered: result.notRemembered } : {}
+  } : { ok: false, refused: REFUSAL[result.reason], changed: false, state };
   sendJson(res, 200, payload);
 }
 // src/plan.ts
@@ -2440,6 +2457,15 @@ function toWirePluginHit(hit, installedNames) {
     installed: installedNames.has(hit.entry.name)
   };
 }
+function toWireMarketplace(market) {
+  return {
+    name: market.name,
+    source: market.source,
+    entries: market.entries,
+    addedAt: market.addedAt,
+    local: market.local
+  };
+}
 function toWirePreview2(preview) {
   const { manifest, source, inventory } = preview;
   return {
@@ -2492,6 +2518,7 @@ function listPlugins(ctx, res, lang) {
   sendJson(res, 200, {
     installed: installed.map(toWirePluginEntry),
     hits: control.search().map((hit) => toWirePluginHit(hit, installedNames)),
+    marketplaces: control.marketplaces().map(toWireMarketplace),
     pendingRestart: control.pendingRestart
   });
 }
@@ -2521,6 +2548,14 @@ async function previewPluginInstall(ctx, req, res, lang) {
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
   sendPreview(res, await control.preview(fieldOf(asRecord(body.value), "ref"), lang));
 }
+async function previewLocalPluginInstall(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendPreview(res, await control.previewLocal(fieldOf(asRecord(body.value), "path"), lang));
+}
 async function previewPluginUpdate(ctx, req, res, lang) {
   if (refusedByLan(ctx, res, lang)) return;
   const control = controlOf(ctx, res, lang);
@@ -2561,6 +2596,19 @@ async function installPluginFromMarket(ctx, req, res, lang) {
     await control.install(fieldOf(payload, "ref"), fieldOf(payload, "token"), lang)
   );
 }
+async function installLocalPlugin(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  sendAction(
+    res,
+    control,
+    await control.installLocal(fieldOf(payload, "path"), fieldOf(payload, "token"), lang)
+  );
+}
 async function updateInstalledPlugin(ctx, req, res, lang) {
   if (refusedByLan(ctx, res, lang)) return;
   const control = controlOf(ctx, res, lang);
@@ -2582,12 +2630,37 @@ async function uninstallPluginByName(ctx, req, res, lang) {
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
   sendAction(res, control, await control.uninstall(fieldOf(asRecord(body.value), "name"), lang));
 }
+function sendMarket(res, outcome) {
+  sendJson(res, 200, {
+    ok: outcome.ok,
+    marketplace: outcome.ok && outcome.marketplace ? toWireMarketplace(outcome.marketplace) : null,
+    reason: outcome.ok ? null : outcome.reason,
+    detail: outcome.ok ? null : outcome.detail
+  });
+}
+async function addPluginMarketplace(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendMarket(res, await control.addMarketplace(fieldOf(asRecord(body.value), "source"), lang));
+}
+async function removePluginMarketplace(ctx, req, res, lang) {
+  if (refusedByLan(ctx, res, lang)) return;
+  const control = controlOf(ctx, res, lang);
+  if (!control) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  sendMarket(res, await control.removeMarketplace(fieldOf(asRecord(body.value), "name"), lang));
+}
 function toWireProvider(option, lang) {
   return {
     type: option.type,
     label: providerLabel(option, lang),
     envVar: option.envVar,
-    hasKey: option.hasKey
+    hasKey: option.hasKey,
+    keyHint: option.keyHint
   };
 }
 function toWireSuggestions(view) {
@@ -2615,6 +2688,36 @@ async function discoverProviderModels(ctx, req, res, type, lang) {
     suggestions: toWireSuggestions(suggestions)
   });
 }
+async function setProviderKey(ctx, req, res, type, lang) {
+  if (!isProviderType(type)) {
+    return sendError(res, 404, "unknown-provider", t("web.provider_unknown", { name: type }, lang));
+  }
+  const envVar = apiKeyEnvVar(type);
+  if (envVar === null) {
+    return sendError(
+      res,
+      400,
+      "key-not-applicable",
+      t("web.provider_key_not_applicable", { name: type }, lang)
+    );
+  }
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const raw = asRecord(body.value)["apiKey"];
+  const apiKey = typeof raw === "string" ? raw.trim() : "";
+  if (apiKey === "") {
+    return sendError(res, 400, "empty-key", t("web.provider_key_empty", void 0, lang));
+  }
+  const written = await ctx.runtime.modelCatalog.setKey(type, apiKey);
+  sendJson(res, 200, {
+    provider: type,
+    hasKey: true,
+    keyHint: written.keyHint,
+    backend: written.backend,
+    encrypted: written.encrypted,
+    envPath: written.envPath
+  });
+}
 async function addRole(ctx, req, res, lang) {
   if (ctx.lanExposed) {
     return sendError(
@@ -3014,7 +3117,7 @@ async function previewSkillImport(ctx, req, res, lang) {
   const body = await readJsonBody(req);
   if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
   const source = pathOf(asRecord(body.value));
-  const outcome = await ctx.runtime.skillImport.preview(source, lang);
+  const outcome = await ctx.runtime.skillWrite.preview(source, lang);
   if (!outcome.ok) {
     return sendJson(res, 200, {
       ok: false,
@@ -3045,7 +3148,7 @@ async function importSkills(ctx, req, res, lang) {
   const payload = asRecord(body.value);
   const source = pathOf(payload);
   const token = typeof payload["token"] === "string" ? payload["token"] : "";
-  const outcome = await ctx.runtime.skillImport.import(source, token, lang);
+  const outcome = await ctx.runtime.skillWrite.import(source, token, lang);
   if (!outcome.ok) {
     return sendJson(res, 200, {
       ok: false,
@@ -3063,6 +3166,30 @@ async function importSkills(ctx, req, res, lang) {
     reason: null
   });
 }
+// src/skill-remove.ts
+async function removeSkill(ctx, req, res, lang) {
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const name = typeof payload["name"] === "string" ? payload["name"].trim() : "";
+  const outcome = await ctx.runtime.skillWrite.remove(name, lang);
+  if (!outcome.ok) {
+    return sendJson(res, 200, {
+      ok: false,
+      name: "",
+      path: null,
+      detail: outcome.detail,
+      reason: outcome.reason
+    });
+  }
+  sendJson(res, 200, {
+    ok: true,
+    name: outcome.name,
+    path: outcome.path,
+    detail: null,
+    reason: null
+  });
+}
 // src/sse.ts
 var DEFAULT_HEARTBEAT_MS = 15e3;
 function parseLastEventId(req) {
@@ -3134,6 +3261,9 @@ function getTasks(ctx, res, sessionId, _lang, registry = LIVE_TASKS) {
   sendJson(res, 200, collectTasks(sessionId, registry));
 }
 var DIR_PAGE_LIMIT = 1e3;
+function workspaceHome() {
+  return homedir();
+}
 function workspaceAnchors(workspaces) {
   const seen = /* @__PURE__ */ new Set();
   const entries = [];
@@ -3227,10 +3357,127 @@ function parentOf(path) {
 function displayName2(path) {
   return basename(path) || path;
 }
+function present(value) {
+  return value !== void 0 && value !== "";
+}
+function resolveNativeDirPicker(facts) {
+  return isSameMachine(facts);
+}
+function isSameMachine(facts) {
+  if (facts.lanExposed) return false;
+  if (present(facts.env.SSH_CONNECTION) || present(facts.env.SSH_TTY)) return false;
+  return facts.platform === "darwin" || facts.platform === "win32";
+}
+function nativePickerCommands(platform, prompt) {
+  if (platform === "darwin") {
+    return [
+      {
+        command: "osascript",
+        args: [
+          "-e",
+          `set epochChosenFolder to choose folder with prompt ${asAppleScriptString(prompt)}`,
+          "-e",
+          "POSIX path of epochChosenFolder"
+        ]
+      }
+    ];
+  }
+  if (platform === "win32") {
+    const script = win32PickScript(prompt);
+    return [
+      { command: "pwsh", args: ["-NoProfile", "-STA", "-Command", script] },
+      { command: "powershell.exe", args: ["-NoProfile", "-STA", "-Command", script] }
+    ];
+  }
+  return null;
+}
+function win32PickScript(prompt) {
+  return [
+    "Add-Type -AssemblyName System.Windows.Forms",
+    "$d = New-Object System.Windows.Forms.FolderBrowserDialog",
+    `$d.Description = ${asPowerShellString(prompt)}`,
+    "$d.ShowNewFolderButton = $true",
+    "if ($d.ShowDialog() -ne [System.Windows.Forms.DialogResult]::OK) { exit 1 }",
+    "[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($d.SelectedPath))"
+  ].join("; ");
+}
+function asAppleScriptString(text) {
+  return `"${text.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+function asPowerShellString(text) {
+  return `'${text.replace(/'/g, "''")}'`;
+}
+function decodeNativePick(platform, stdout) {
+  const raw = stdout.trim();
+  if (platform !== "win32") return raw;
+  return Buffer.from(raw, "base64").toString("utf-8").trim();
+}
+function isPickCanceled(platform, code, stderr) {
+  if (code !== 1) return false;
+  if (platform === "win32") return true;
+  return /-128|user canceled/i.test(stderr);
+}
+var inFlight = false;
+async function pickNativeDirectory(opts) {
+  const platform = opts.platform ?? process.platform;
+  const candidates = nativePickerCommands(platform, opts.prompt);
+  if (!candidates) {
+    return { ok: false, reason: "unsupported", message: `unsupported platform: ${platform}` };
+  }
+  if (inFlight) {
+    return { ok: false, reason: "busy", message: "a directory picker is already open" };
+  }
+  const run = opts.runner ?? execFileRunner;
+  inFlight = true;
+  try {
+    let last = "";
+    for (const [index, candidate] of candidates.entries()) {
+      const attempt = await run(candidate.command, candidate.args, opts.signal);
+      if (attempt.missing) {
+        last = attempt.message || `${candidate.command} not found`;
+        if (index < candidates.length - 1) continue;
+        return { ok: false, reason: "failed", message: last };
+      }
+      if (!attempt.code) {
+        const path = decodeNativePick(platform, attempt.stdout);
+        return path ? { ok: true, path } : { ok: false, reason: "failed", message: "picker returned an empty path" };
+      }
+      if (isPickCanceled(platform, attempt.code, attempt.stderr)) {
+        return { ok: true, canceled: true };
+      }
+      return { ok: false, reason: "failed", message: attempt.stderr.trim() || attempt.message };
+    }
+    return { ok: false, reason: "failed", message: last };
+  } finally {
+    inFlight = false;
+  }
+}
+var execFileRunner = (command, args, signal) => new Promise((done) => {
+  execFile(
+    command,
+    [...args],
+    {
+      ...signal ? { signal } : {},
+      encoding: "utf-8",
+      windowsHide: true,
+      maxBuffer: 1024 * 1024
+    },
+    (error, stdout, stderr) => {
+      const err = error;
+      done({
+        code: err?.code ?? 0,
+        stdout,
+        stderr,
+        missing: err?.code === "ENOENT",
+        message: err?.message ?? ""
+      });
+    }
+  );
+});
 // src/workspace/dirs.ts
 function browseWorkspaceDirs(ctx, res, rawUrl, lang) {
   const query = new URL(rawUrl ?? "/", "http://127.0.0.1").searchParams;
-  const path = dirsQuery(query);
+  const path = dirsQuery(query) ?? atQuery(query);
   if (path === void 0) {
     return sendJson(res, 200, workspaceAnchors(ctx.runtime.workspaces));
   }
@@ -3260,6 +3507,9 @@ function dirsQuery(query) {
   const value = query.get("path")?.trim();
   return value ? value : void 0;
 }
+function atQuery(query) {
+  return query.get("at")?.trim().toLowerCase() === "home" ? workspaceHome() : void 0;
+}
 function hiddenQuery(query) {
   const value = query.get("hidden")?.trim().toLowerCase();
   return value === "1" || value === "true";
@@ -3297,6 +3547,34 @@ async function createWorkspaceDir(req, res, lang) {
     }
   });
 }
+async function pickWorkspaceDir(ctx, req, res, lang) {
+  if (!ctx.nativeDirPicker) {
+    return sendError(res, 403, "native-picker-unavailable", t("web.pick_unavailable", {}, lang));
+  }
+  const abort = new AbortController();
+  req.on("close", () => abort.abort());
+  const outcome = await pickNativeDirectory({
+    prompt: t("web.pick_prompt", {}, lang),
+    signal: abort.signal
+  });
+  if (res.writableEnded || abort.signal.aborted) return;
+  if (outcome.ok) {
+    return sendJson(
+      res,
+      200,
+      outcome.path === void 0 ? { canceled: true } : { path: outcome.path }
+    );
+  }
+  if (outcome.reason === "busy") {
+    return sendError(res, 409, "native-picker-busy", t("web.pick_busy", {}, lang));
+  }
+  sendError(
+    res,
+    500,
+    "native-picker-failed",
+    t("web.pick_failed", { detail: outcome.message }, lang)
+  );
+}
 function isSingleSegment(name) {
   if (name.length === 0) return false;
   if (name === "." || name === "..") return false;
@@ -3311,6 +3589,195 @@ function mkdirFailure(cause, path, lang) {
   if (code === "ENOENT") return [404, "not-found", t("web.mkdir_parent_missing", { path }, lang)];
   return [500, "internal", t("web.mkdir_failed", { path }, lang)];
 }
+var MAX_TEXT_BYTES = 2 * 1024 * 1024;
+var VIEWABLE = /* @__PURE__ */ new Map([
+  [".png", { kind: "image", mime: "image/png" }],
+  [".jpg", { kind: "image", mime: "image/jpeg" }],
+  [".jpeg", { kind: "image", mime: "image/jpeg" }],
+  [".gif", { kind: "image", mime: "image/gif" }],
+  [".webp", { kind: "image", mime: "image/webp" }],
+  [".bmp", { kind: "image", mime: "image/bmp" }],
+  [".ico", { kind: "image", mime: "image/x-icon" }],
+  [".avif", { kind: "image", mime: "image/avif" }],
+  [".pdf", { kind: "pdf", mime: "application/pdf" }],
+  [".mp3", { kind: "audio", mime: "audio/mpeg" }],
+  [".wav", { kind: "audio", mime: "audio/wav" }],
+  [".ogg", { kind: "audio", mime: "audio/ogg" }],
+  [".m4a", { kind: "audio", mime: "audio/mp4" }],
+  [".flac", { kind: "audio", mime: "audio/flac" }],
+  [".mp4", { kind: "video", mime: "video/mp4" }],
+  [".webm", { kind: "video", mime: "video/webm" }],
+  [".mov", { kind: "video", mime: "video/quicktime" }]
+]);
+function kindOf(stat2) {
+  if (stat2.kind === "text") return "text";
+  return VIEWABLE.get(extname(stat2.rel).toLowerCase())?.kind ?? "opaque";
+}
+function toWireRefusal(reason) {
+  return reason;
+}
+function statusFor(refusal) {
+  if (refusal === "denied") return 403;
+  if (refusal === "missing") return 404;
+  if (refusal === "too-large") return 413;
+  return refusal === "not-a-file" ? 400 : 503;
+}
+function describeRefusal(refusal, lang) {
+  if (refusal === "denied") return t("web.file_view_denied", void 0, lang);
+  if (refusal === "missing") return t("web.file_view_missing", void 0, lang);
+  if (refusal === "not-a-file") return t("web.file_view_not_a_file", void 0, lang);
+  if (refusal === "too-large") {
+    return t("web.file_view_too_large", { max: String(MAX_TEXT_BYTES) }, lang);
+  }
+  return t("web.file_view_unreadable", void 0, lang);
+}
+function resolveViewRoot(ctx, res, sessionId, lang) {
+  if (!ctx.hub.has(sessionId) && !ctx.runtime.sessions?.get(sessionId)) {
+    sendUnknownSession(res, sessionId);
+    return null;
+  }
+  const root = workspaceRootOf(ctx, sessionId);
+  if (!root) {
+    sendError(res, 409, "no-workspace", t("web.file_view_no_workspace", void 0, lang));
+    return null;
+  }
+  return root;
+}
+function singlePath(res, rawUrl, lang) {
+  const params = new URLSearchParams((rawUrl ?? "").split("?")[1] ?? "");
+  const path = params.get("path")?.trim();
+  if (!path) {
+    sendError(res, 400, "missing-path", t("web.file_view_missing_path", void 0, lang));
+    return null;
+  }
+  return path;
+}
+function statFiles(ctx, res, sessionId, rawUrl, lang) {
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
+  const params = new URLSearchParams((rawUrl ?? "").split("?")[1] ?? "");
+  const asked = params.getAll("path").filter((p) => p.trim() !== "");
+  const taken = asked.slice(0, WIRE_FILE_STAT_MAX);
+  const files = taken.map((path) => {
+    const stat2 = ctx.runtime.workspaceFiles.statFile(path, root);
+    if (!stat2.ok) return { path, ok: false, refusal: toWireRefusal(stat2.reason) };
+    return {
+      path,
+      ok: true,
+      kind: kindOf(stat2),
+      bytes: stat2.bytes,
+      mtimeMs: stat2.mtimeMs,
+      openable: ctx.sameMachine && isSystemOpenable(stat2.rel)
+    };
+  });
+  sendJson(res, 200, {
+    files,
+    overLimit: asked.length - taken.length,
+    root
+  });
+}
+function readFileText(ctx, res, sessionId, rawUrl, lang) {
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
+  const path = singlePath(res, rawUrl, lang);
+  if (path === null) return;
+  const stat2 = ctx.runtime.workspaceFiles.statFile(path, root);
+  if (!stat2.ok) {
+    const refusal = toWireRefusal(stat2.reason);
+    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
+  }
+  if (stat2.kind !== "text") {
+    return sendError(res, 415, "not-text", t("web.file_view_not_text", void 0, lang));
+  }
+  if (stat2.bytes > MAX_TEXT_BYTES) {
+    return sendError(res, 413, "too-large", describeRefusal("too-large", lang));
+  }
+  const out = ctx.runtime.workspaceFiles.readFile(stat2.rel, root);
+  if (!out.ok) {
+    const refusal = out.reason === "binary" ? "unreadable" : out.reason;
+    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
+  }
+  sendJson(res, 200, {
+    path,
+    text: out.text,
+    bytes: out.bytes
+  });
+}
+function readFileBytes(ctx, res, sessionId, rawUrl, headOnly, lang) {
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
+  const path = singlePath(res, rawUrl, lang);
+  if (path === null) return;
+  const stat2 = ctx.runtime.workspaceFiles.statFile(path, root);
+  if (!stat2.ok) {
+    const refusal = toWireRefusal(stat2.reason);
+    return sendError(res, statusFor(refusal), refusal, describeRefusal(refusal, lang));
+  }
+  const known = VIEWABLE.get(extname(stat2.rel).toLowerCase());
+  const inline = known !== void 0 && stat2.kind === "binary";
+  const headers = {
+    "Content-Type": inline ? known.mime : "application/octet-stream",
+    "X-Content-Type-Options": "nosniff",
+    "Content-Disposition": inline ? "inline" : `attachment; filename*=UTF-8''${encodeURIComponent(basenameOf(stat2.rel))}`
+  };
+  if (inline && known.kind === "pdf") headers["Content-Security-Policy"] = "sandbox";
+  if (headOnly) {
+    return sendEmpty(res, 200, {
+      ...headers,
+      "Content-Length": String(stat2.bytes)
+    });
+  }
+  sendFile(res, stat2.absPath, headers);
+}
+function basenameOf(rel) {
+  const cut = rel.lastIndexOf("/");
+  return cut < 0 ? rel : rel.slice(cut + 1);
+}
+// src/workspace/file-open.ts
+function describeOpenRefusal(refusal, lang) {
+  if (refusal === "extension-not-allowed") {
+    return t("web.file_open_extension_not_allowed", void 0, lang);
+  }
+  if (refusal === "not-same-machine") return t("web.file_open_not_same_machine", void 0, lang);
+  if (refusal === "launch-failed") return t("web.file_open_launch_failed", void 0, lang);
+  return describeRefusal(refusal, lang);
+}
+function refuse(res, refusal, lang) {
+  sendJson(res, 200, {
+    ok: false,
+    refusal,
+    message: describeOpenRefusal(refusal, lang)
+  });
+}
+async function openFileWithSystemApp(ctx, req, res, sessionId, lang) {
+  if (!ctx.sameMachine) {
+    return sendError(res, 403, "not-same-machine", describeOpenRefusal("not-same-machine", lang));
+  }
+  const root = resolveViewRoot(ctx, res, sessionId, lang);
+  if (root === null) return;
+  const body = await readJsonBody(req);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const payload = asRecord(body.value);
+  const path = typeof payload["path"] === "string" ? payload["path"].trim() : "";
+  if (path === "") {
+    return sendError(res, 400, "missing-path", t("web.file_view_missing_path", void 0, lang));
+  }
+  const plan = ctx.runtime.workspaceFiles.planSystemOpen(path, root);
+  if (!plan.ok) return refuse(res, plan.reason, lang);
+  try {
+    const child = spawn(plan.command, [...plan.args], { stdio: "ignore", detached: true });
+    await new Promise((done, fail) => {
+      child.on("error", fail);
+      child.on("spawn", () => {
+        child.unref();
+        done();
+      });
+    });
+  } catch {
+    return refuse(res, "launch-failed", lang);
+  }
+  sendJson(res, 200, { ok: true });
+}
 var GIT_TIMEOUT_MS = 1e4;
 var GIT_MAX_BUFFER = 16 * 1024 * 1024;
 function runGit(cwd, args) {
@@ -3765,6 +4232,9 @@ async function handleApi(opts, req, res, method, segments, lang) {
   if (resource === "skills" && first === "import" && second === void 0 && method === "POST") {
     return importSkills(ctx, req, res, lang);
   }
+  if (resource === "skills" && first === "remove" && second === void 0 && method === "POST") {
+    return removeSkill(ctx, req, res, lang);
+  }
   if (resource === "plugins" && first === void 0 && isRead(method)) {
     return listPlugins(ctx, res, lang);
   }
@@ -3774,6 +4244,12 @@ async function handleApi(opts, req, res, method, segments, lang) {
   if (resource === "plugins" && first === "install" && second === void 0 && method === "POST") {
     return installPluginFromMarket(ctx, req, res, lang);
   }
+  if (resource === "plugins" && first === "install" && second === "local" && detail === "preview" && method === "POST") {
+    return previewLocalPluginInstall(ctx, req, res, lang);
+  }
+  if (resource === "plugins" && first === "install" && second === "local" && detail === void 0 && method === "POST") {
+    return installLocalPlugin(ctx, req, res, lang);
+  }
   if (resource === "plugins" && first === "update" && second === "preview" && method === "POST") {
     return previewPluginUpdate(ctx, req, res, lang);
   }
@@ -3783,18 +4259,30 @@ async function handleApi(opts, req, res, method, segments, lang) {
   if (resource === "plugins" && first === "uninstall" && second === void 0 && method === "POST") {
     return uninstallPluginByName(ctx, req, res, lang);
   }
+  if (resource === "plugins" && first === "marketplaces" && second === "remove" && method === "POST") {
+    return removePluginMarketplace(ctx, req, res, lang);
+  }
+  if (resource === "plugins" && first === "marketplaces" && second === void 0 && method === "POST") {
+    return addPluginMarketplace(ctx, req, res, lang);
+  }
   if (resource === "providers" && first === void 0 && isRead(method)) {
     return listProviders(ctx, res, lang);
   }
   if (resource === "providers" && first !== void 0 && second === "models" && method === "POST") {
     return discoverProviderModels(ctx, req, res, first, lang);
   }
+  if (resource === "providers" && first !== void 0 && second === "key" && method === "POST") {
+    return setProviderKey(ctx, req, res, first, lang);
+  }
   if (resource === "workspaces" && first === "dirs" && isRead(method)) {
     return browseWorkspaceDirs(ctx, res, req.url, lang);
   }
   if (resource === "workspaces" && first === void 0 && method === "POST") {
     return createWorkspaceDir(req, res, lang);
   }
+  if (resource === "workspaces" && first === "pick" && method === "POST") {
+    return pickWorkspaceDir(ctx, req, res, lang);
+  }
   if (resource === "schedules") {
     return handleSchedules(ctx, req, res, method, first, second, detail, tail, lang);
   }
@@ -3862,6 +4350,18 @@ async function handleSessions(opts, req, res, method, sessionId, action, detail,
   if (action === "file-candidates" && isRead(method)) {
     return listFileCandidates(ctx, res, sessionId, req.url, lang);
   }
+  if (action === "file-stat" && isRead(method)) {
+    return statFiles(ctx, res, sessionId, req.url, lang);
+  }
+  if (action === "file" && isRead(method)) {
+    return readFileText(ctx, res, sessionId, req.url, lang);
+  }
+  if (action === "file-bytes" && isRead(method)) {
+    return readFileBytes(ctx, res, sessionId, req.url, method === "HEAD", lang);
+  }
+  if (action === "file-open" && method === "POST") {
+    return openFileWithSystemApp(ctx, req, res, sessionId, lang);
+  }
   if (action === "approvals" && isRead(method)) return listApprovals(ctx, res, sessionId, lang);
   if (action === "questions" && isRead(method)) return listQuestions(ctx, res, sessionId, lang);
   if (action === "capabilities" && isRead(method))
@@ -4016,13 +4516,20 @@ async function createWebServer(opts) {
   };
 }
 function buildHandler(opts, hub, binding, port, webRoot) {
+  const machineFacts = {
+    lanExposed: binding.lanExposed,
+    platform: process.platform,
+    env: process.env
+  };
   return createRequestHandler({
     ctx: {
       hub,
       runtime: opts.runtime,
       version: opts.version,
       artifactsRoot: opts.artifactsRoot ?? opts.runtime.artifactsRoot,
-      lanExposed: binding.lanExposed
+      lanExposed: binding.lanExposed,
+      nativeDirPicker: resolveNativeDirPicker(machineFacts),
+      sameMachine: isSameMachine(machineFacts)
     },
     guard: createAuthGuard({ token: binding.token, port, lanExposed: binding.lanExposed }),
     ...webRoot === void 0 ? {} : { webRoot },
@@ -4068,4 +4575,4 @@ function makeCloser(server, hub, runtime) {
   };
 }
 
-export { DEFAULT_MAX_ACTIVE_SESSIONS, DEFAULT_MAX_QUEUED_MESSAGES, DEFAULT_RING_CAPACITY, DEFAULT_WEB_HOST, DEFAULT_WEB_PORT, EnvelopeRing, MAX_CANDIDATES, MAX_DIFF_BYTES, MAX_DIFF_FILES, MAX_RECORDING_FRAMES, MAX_SKILL_BODY_BYTES, SessionHub, TASK_TAIL_BYTES, UI_LANG_PARAM, UI_THEME_PARAM, attachMentions, collectCapabilities, collectSecurity, collectSettings, collectTasks, collectWorkspaceDiff, createAuthGuard, createWebServer, decideBinding, defaultWebRoot, expandUserContent, firstScreenUrl, generateToken, listFileCandidates, listReferenceCandidates, readRewindInput, resolveArtifactPath, toWireCheckpoint, toWireCommand, toWirePluginEntry, toWirePreview, toWireRewindResult, toWireRow, toWireSkillBody, toWireTask, unavailableToHttp };
+export { DEFAULT_MAX_ACTIVE_SESSIONS, DEFAULT_MAX_QUEUED_MESSAGES, DEFAULT_RING_CAPACITY, DEFAULT_WEB_HOST, DEFAULT_WEB_PORT, EnvelopeRing, MAX_CANDIDATES, MAX_DIFF_BYTES, MAX_DIFF_FILES, MAX_RECORDING_FRAMES, MAX_SKILL_BODY_BYTES, SessionHub, TASK_TAIL_BYTES, UI_LANG_PARAM, UI_THEME_PARAM, attachMentions, collectCapabilities, collectSecurity, collectSettings, collectTasks, collectWorkspaceDiff, createAuthGuard, createWebServer, decideBinding, defaultWebRoot, expandUserContent, firstScreenUrl, generateToken, isSameMachine, listFileCandidates, listReferenceCandidates, readRewindInput, resolveArtifactPath, resolveNativeDirPicker, toWireCheckpoint, toWireCommand, toWirePluginEntry, toWirePreview, toWireRewindResult, toWireRow, toWireSkillBody, toWireTask, unavailableToHttp };