@loicngr/kobo 1.11.26 → 1.11.28

package/dist/server/services/wakeup-service.js

@@ -20,6 +20,18 @@ function rowToPending(row) {
         return null;
     return { targetAt: row.target_at, reason: row.reason ?? undefined };
 }
+/**
+ * How many times a wakeup may be re-armed after `startAgent` failed before we
+ * conclude the failure is permanent. `startAgent` throws for good on an
+ * archived or purged workspace, and on a session id that no longer resolves;
+ * without a bound that is a 15 s loop writing to SQLite forever. Deferring
+ * because a session is *running* is a different case and stays unbounded — the
+ * wakeup is meant to land once that session ends, however long it takes.
+ */
+const MAX_FAILED_RETRIES = 5;
+/** Consecutive `startAgent` failures per workspace. In memory on purpose: a
+ *  restart is a legitimate fresh attempt. */
+const failedRetries = new Map();
 /** Keep a claimed wakeup durable while the session is still unavailable. */
 function defer(workspaceId, row) {
     const targetAt = new Date(Date.now() + ACTIVE_SESSION_RETRY_MS).toISOString();
@@ -59,6 +71,7 @@ export function cancel(workspaceId, reason) {
             clearTimeout(existing);
             timers.delete(workspaceId);
         }
+        failedRetries.delete(workspaceId);
         const db = getDb();
         const result = db.prepare('DELETE FROM pending_wakeups WHERE workspace_id = ?').run(workspaceId);
         if (result.changes > 0) {
@@ -156,12 +169,22 @@ function fire(workspaceId) {
         const agentPermissionMode = stored === 'plan' || stored === 'strict' || stored === 'interactive' ? stored : 'bypass';
         try {
             orchestrator.startAgent(workspaceId, worktreePath, row.prompt, wsRow.model, true, agentPermissionMode, row.agent_session_id ?? undefined, wsRow.reasoning_effort);
+            failedRetries.delete(workspaceId);
             db.prepare('DELETE FROM pending_wakeups WHERE workspace_id = ?').run(workspaceId);
             emitEphemeral(workspaceId, 'wakeup:fired', {});
         }
         catch (err) {
             const message = err instanceof Error ? err.message : String(err);
             console.error(`[wakeup-service] startAgent at fire time failed for '${workspaceId}':`, message);
+            const attempts = (failedRetries.get(workspaceId) ?? 0) + 1;
+            if (attempts > MAX_FAILED_RETRIES) {
+                failedRetries.delete(workspaceId);
+                db.prepare('DELETE FROM pending_wakeups WHERE workspace_id = ?').run(workspaceId);
+                console.error(`[wakeup-service] giving up on the wakeup for '${workspaceId}' after ${MAX_FAILED_RETRIES} failed attempts`);
+                emitEphemeral(workspaceId, 'wakeup:skipped', { reason: message });
+                return;
+            }
+            failedRetries.set(workspaceId, attempts);
             defer(workspaceId, row);
         }
     }

package/dist/server/services/websocket-service.js

@@ -78,7 +78,18 @@ export function handleConnection(ws) {
             case 'devserver:start':
             case 'devserver:stop': {
                 if (messageHandler) {
-                    messageHandler(type, payload);
+                    // The handler does DB work before its own try/catch, so it can fail
+                    // both ways: a rejection if it is async, a plain throw if it is not.
+                    // The process treats either as fatal, which would turn one bad frame
+                    // into "Kōbō died and took every running agent with it". Calling it
+                    // inside the async wrapper funnels both into the same catch.
+                    void (async () => messageHandler?.(type, payload))().catch((err) => {
+                        console.error(`[ws] Message handler failed for '${type}':`, err);
+                        // Every other branch of this switch answers on failure; a routed
+                        // message that vanishes silently leaves the user waiting forever.
+                        const message = err instanceof Error ? err.message : String(err);
+                        ws.send(JSON.stringify({ type: 'error', payload: { message: `Failed to handle '${type}': ${message}` } }));
+                    });
                 }
                 break;
             }
@@ -124,14 +135,31 @@ export function handleConnection(ws) {
  * Persists the event to the ws_events table.
  * Returns the event id.
  */
+/**
+ * The insert is on the busiest write path in the process: one row per agent
+ * event, hundreds per turn once token deltas are batched. Compiling the
+ * statement once and reusing it is better-sqlite3's documented fast path.
+ * Keyed on the database handle so a `resetDb()` between tests cannot hand back
+ * a statement bound to a closed connection.
+ */
+let cachedInsert = null;
+function insertEventStatement() {
+    const db = getDb();
+    if (!cachedInsert || cachedInsert.db !== db) {
+        cachedInsert = {
+            db,
+            statement: db.prepare('INSERT INTO ws_events (id, workspace_id, type, payload, session_id, created_at) VALUES (?, ?, ?, ?, ?, ?)'),
+        };
+    }
+    return cachedInsert.statement;
+}
 export function emit(workspaceId, type, payload, sessionId) {
     const id = nanoid();
     const createdAt = new Date().toISOString();
     let replayable = false;
     // Best-effort persist — don't let FK violation (deleted workspace) break the broadcast
     try {
-        const db = getDb();
-        db.prepare('INSERT INTO ws_events (id, workspace_id, type, payload, session_id, created_at) VALUES (?, ?, ?, ?, ?, ?)').run(id, workspaceId, type, JSON.stringify(payload), sessionId ?? null, createdAt);
+        insertEventStatement().run(id, workspaceId, type, JSON.stringify(payload), sessionId ?? null, createdAt);
         replayable = true;
     }
     catch (err) {

package/dist/server/services/workspace-service.js

@@ -1,5 +1,6 @@
 import { nanoid } from 'nanoid';
 import { getDb } from '../db/index.js';
+import { isValidBranchName } from '../utils/git-ops.js';
 import { resolveWorkspaceWorktreePath } from '../utils/worktree-paths.js';
 import * as orchestrator from './agent/orchestrator.js';
 import * as autoLoopService from './auto-loop-service.js';
@@ -26,7 +27,11 @@ const VALID_TRANSITIONS = {
     // session can hit an interactive tool-approval/question before its status
     // flips to `executing` — the same reasoning as the entering-quota comment
     // above, just for the other direction.
-    quota: ['idle', 'executing', 'awaiting-user'],
+    // `error` is the escape hatch when the retry machinery itself fails: the
+    // status is moved to `quota` before the backoff is armed, so a failure in
+    // between would otherwise strand the workspace there — no timer, and no
+    // banner either, since QuotaBackoffBanner needs a backoff row to render.
+    quota: ['idle', 'executing', 'awaiting-user', 'error'],
 };
 // NOTE: `engine` is stored as a plain TEXT column and returned as a `string` on
 // the `Workspace` interface rather than the stricter `EngineId` union. The DB
@@ -73,6 +78,7 @@ function mapWorkspace(row) {
         prCiFailureDismissedAt: row.pr_ci_failure_dismissed_at,
         worktreePurgedAt: row.worktree_purged_at,
         worktreePurgeRestoreData: row.worktree_purge_restore_data,
+        comparisonId: row.comparison_id ?? null,
         engine: row.engine ?? 'claude-code',
         autoLoop: row.auto_loop === 1,
         autoLoopReady: row.auto_loop_ready === 1,
@@ -125,9 +131,12 @@ export function createWorkspace(data) {
     INSERT INTO workspaces (
       id, name, project_path, source_branch, working_branch, status,
       notion_url, notion_page_id, sentry_url, pr_url, worktree_path, worktree_owned,
-      model, brainstorm_model, reasoning_effort, permission_mode, permission_profile, agent_permission_mode, engine, created_at, updated_at
-    ) VALUES (?, ?, ?, ?, ?, 'created', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-  `).run(id, data.name, data.projectPath, data.sourceBranch, data.workingBranch, data.notionUrl ?? null, data.notionPageId ?? null, data.sentryUrl ?? null, data.prUrl ?? null, computedWorktreePath, owned ? 1 : 0, data.model ?? 'claude-opus-4-8', data.brainstormModel ?? null, data.reasoningEffort ?? 'auto', legacyMode, legacyProfile, unifiedMode, data.engine ?? 'claude-code', now, now);
+      model, brainstorm_model, reasoning_effort, permission_mode, permission_profile, agent_permission_mode, engine, comparison_id, created_at, updated_at
+    ) VALUES (?, ?, ?, ?, ?, 'created', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  `).run(id, data.name, data.projectPath, data.sourceBranch, data.workingBranch, data.notionUrl ?? null, data.notionPageId ?? null, data.sentryUrl ?? null, data.prUrl ?? null, computedWorktreePath, owned ? 1 : 0, data.model ?? 'claude-opus-4-8', data.brainstormModel ?? null, data.reasoningEffort ?? 'auto', legacyMode, legacyProfile, unifiedMode, data.engine ?? 'claude-code', 
+    // Empty string is not a group: it would silently gather every workspace
+    // created with a blank id into one comparison.
+    data.comparisonId?.trim() ? data.comparisonId : null, now, now);
     return getWorkspace(id);
 }
 /** Fetch a single workspace by ID, or null if not found. */
@@ -136,6 +145,21 @@ export function getWorkspace(id) {
     const row = db.prepare('SELECT * FROM workspaces WHERE id = ?').get(id);
     return row ? mapWorkspace(row) : null;
 }
+/**
+ * Every workspace sharing a comparison id, oldest first — the order they were
+ * created in, which is the order the engines were picked.
+ *
+ * An empty or missing id matches nothing: `comparison_id` is NULL for the vast
+ * majority of workspaces, and returning them all here would be a footgun.
+ */
+export function listComparisonMembers(comparisonId) {
+    if (!comparisonId.trim())
+        return [];
+    const rows = getDb()
+        .prepare('SELECT * FROM workspaces WHERE comparison_id = ? ORDER BY created_at, id')
+        .all(comparisonId);
+    return rows.map(mapWorkspace);
+}
 /** List all workspaces, optionally including archived ones. Ordered by most recently updated. */
 export function listWorkspaces(includeArchived = false) {
     const db = getDb();
@@ -275,6 +299,14 @@ export function updateWorkspaceSourceBranch(id, sourceBranch) {
     if (!sanitized) {
         throw new Error('Source branch cannot be empty');
     }
+    // The stored value reaches `git fetch origin <sourceBranch>` as a bare
+    // argument, from paths as ordinary as opening the Diff tab, so a name git
+    // would read as an option must never land here. Guarding the writer rather
+    // than each route covers the pr-watcher too, which takes the base the forge
+    // reports — and a leading dash is a perfectly valid ref name upstream.
+    if (!isValidBranchName(sanitized)) {
+        throw new Error(`Invalid source branch name: ${sanitized}`);
+    }
     const db = getDb();
     const now = new Date().toISOString();
     const result = db

package/dist/server/services/worktree-purge-service.js

@@ -20,7 +20,7 @@ export async function purgeWorktree(workspaceId) {
     // `removeWorktree` runs later in this same function — the agent must be dead
     // by then, not merely asked to stop.
     try {
-        await agentManager.stopAgentAndWait(workspaceId);
+        await agentManager.stopAgentAndWait(workspaceId, undefined, 'purge');
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);

package/dist/server/utils/git-ops.js

@@ -67,6 +67,28 @@ async function gitAsync(repoPath, args, timeout = READ_ONLY_GIT_TIMEOUT_MS) {
     });
     return stdout.trimEnd();
 }
+/**
+ * Async counterpart of `git()` for the operations that talk to a remote.
+ *
+ * Same 60 s budget and, crucially, the same non-interactive environment: a
+ * credential or passphrase prompt on a background process would hang for the
+ * whole timeout with nobody to answer it. `gitAsync` above omits that env
+ * because it was written for local read-only commands.
+ *
+ * These run on HTTP handlers, and `execFileSync` there blocks the single
+ * thread that also serves the WebSocket streams and the agent events: one push
+ * over a slow link froze the entire app for up to a minute, heartbeat included.
+ */
+async function gitNetworkAsync(repoPath, args) {
+    const { stdout } = await execFileAsync('git', args, {
+        cwd: repoPath,
+        encoding: 'utf-8',
+        timeout: SYNC_GIT_TIMEOUT_MS,
+        maxBuffer: GIT_MAX_BUFFER_BYTES,
+        env: NON_INTERACTIVE_GIT_ENV,
+    });
+    return stdout.trimEnd();
+}
 /** Raised when a stale `index.lock` blocks every write on a worktree. */
 export class GitIndexLockError extends Error {
     lockPath;
@@ -385,6 +407,114 @@ export function mergeBranch(repoPath, baseBranch, opts) {
         throw new Error(`Merge of 'origin/${baseBranch}' failed: ${message}`);
     }
 }
+/**
+ * Async variants of the network operations, for the HTTP handlers.
+ *
+ * They mirror their synchronous twins one for one — same arguments, same
+ * errors, same conflict and dirty-tree detection — so a caller only swaps the
+ * name and adds `await`. Only the remote round-trip is async: the error paths
+ * below read local state (conflicted files, ongoing operation, working tree),
+ * which is fast and stays synchronous.
+ */
+export async function pushBranchAsync(repoPath, branchName, options = {}) {
+    const remote = options.remote ?? 'origin';
+    const args = ['push', '-u'];
+    if (options.force)
+        args.push('--force-with-lease');
+    args.push(remote, branchName);
+    try {
+        await gitNetworkAsync(repoPath, args);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to push branch '${branchName}' to '${remote}': ${message}`);
+    }
+}
+export async function fetchAllBranchesAsync(repoPath, remote = 'origin') {
+    try {
+        await gitNetworkAsync(repoPath, ['fetch', remote]);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to fetch from '${remote}': ${message}`);
+    }
+}
+export async function pullBranchAsync(repoPath, branchName, remote = 'origin', opts) {
+    if (!opts?.autostash) {
+        const status = getWorkingTreeStatus(repoPath);
+        if (status.staged > 0 || status.modified > 0) {
+            throw new DirtyWorktreeError('pull', status);
+        }
+    }
+    try {
+        const args = ['pull', '--ff-only'];
+        if (opts?.autostash)
+            args.push('--autostash');
+        args.push(remote, branchName);
+        await gitNetworkAsync(repoPath, args);
+    }
+    catch (err) {
+        if (err instanceof DirtyWorktreeError)
+            throw err;
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to pull branch '${branchName}' from '${remote}': ${message}`);
+    }
+}
+export async function rebaseBranchAsync(repoPath, baseBranch, opts) {
+    try {
+        await gitNetworkAsync(repoPath, ['fetch', 'origin', baseBranch]);
+    }
+    catch {
+        // fetch may fail if offline — continue with local ref
+    }
+    try {
+        const args = ['rebase'];
+        if (opts?.autostash)
+            args.push('--autostash');
+        args.push(`origin/${baseBranch}`);
+        await gitNetworkAsync(repoPath, args);
+    }
+    catch (err) {
+        const conflicted = getConflictedFiles(repoPath);
+        if (conflicted.length > 0 || getOngoingGitOperation(repoPath) === 'rebase') {
+            // Leave the rebase in progress so the caller can abort or request agent-assisted resolution.
+            throw new GitConflictError('rebase', conflicted);
+        }
+        const status = getWorkingTreeStatus(repoPath);
+        if (status.staged > 0 || status.modified > 0) {
+            throw new DirtyWorktreeError('rebase', status);
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Rebase onto '${baseBranch}' failed: ${message}`);
+    }
+}
+export async function mergeBranchAsync(repoPath, baseBranch, opts) {
+    try {
+        await gitNetworkAsync(repoPath, ['fetch', 'origin', baseBranch]);
+    }
+    catch {
+        // offline — continue with local ref
+    }
+    try {
+        const args = ['merge', '--no-ff', '--no-edit'];
+        if (opts?.autostash)
+            args.push('--autostash');
+        args.push(`origin/${baseBranch}`);
+        await gitNetworkAsync(repoPath, args);
+    }
+    catch (err) {
+        const conflicted = getConflictedFiles(repoPath);
+        if (conflicted.length > 0 || getOngoingGitOperation(repoPath) === 'merge') {
+            throw new GitConflictError('merge', conflicted);
+        }
+        const status = getWorkingTreeStatus(repoPath);
+        if (status.staged > 0 || status.modified > 0) {
+            throw new DirtyWorktreeError('merge', status);
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Merge of 'origin/${baseBranch}' failed: ${message}`);
+    }
+}
 /** Abort an in-progress merge, rebase or cherry-pick. No-op if nothing is in progress. */
 export function abortOngoingGitOperation(repoPath) {
     const op = getOngoingGitOperation(repoPath);
@@ -1130,6 +1260,10 @@ export function isGitWorktree(repoPath) {
  * The remaining rules mirror `git check-ref-format`.
  */
 export function isValidBranchName(name) {
+    // Guard the type too: a non-string would otherwise be coerced, and the
+    // string "undefined" happens to satisfy the pattern below.
+    if (typeof name !== 'string')
+        return false;
     if (!/^[A-Za-z0-9][A-Za-z0-9/_.-]*$/.test(name))
         return false;
     if (name.includes('..') || name.includes('//'))
@@ -1303,9 +1437,33 @@ export async function getUnpushedCountAsync(repoPath, workingBranch) {
  * Mirrors the sync `fetchSourceBranch` sibling, including the optional `remote`
  * parameter (defaults to `'origin'`).
  */
+/**
+ * Async twin of `fetchSourceBranch`: it PROPAGATES the failure.
+ *
+ * Distinct from `fetchSourceBranchAsync` right below, which swallows it — that
+ * one is the pr-watcher's best-effort refresh, where a missing remote is not
+ * worth interrupting a background sweep. Workspace creation needs the opposite:
+ * a source branch that cannot be fetched is a 422, not a workspace built on a
+ * stale ref.
+ */
+export async function fetchSourceBranchOrThrowAsync(repoPath, sourceBranch, remote = 'origin') {
+    try {
+        await gitNetworkAsync(repoPath, ['fetch', remote, sourceBranch]);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to fetch '${sourceBranch}' from '${remote}': ${message}`);
+    }
+}
 export async function fetchSourceBranchAsync(repoPath, branch, remote = 'origin') {
     try {
-        await execFileAsync('git', ['fetch', remote, branch], { cwd: repoPath, timeout: 30_000 });
+        // Non-interactive env like every other network call: without it a
+        // credential or passphrase prompt hangs this fetch for its whole timeout.
+        await execFileAsync('git', ['fetch', remote, branch], {
+            cwd: repoPath,
+            timeout: 30_000,
+            env: NON_INTERACTIVE_GIT_ENV,
+        });
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);

package/dist/server/utils/paths.js

@@ -2,6 +2,7 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { isPathInside } from './safe-path.js';
 // Package root resolved from this file's location via pure path arithmetic
 // (no filesystem calls, so this stays robust when tests mock `node:fs`).
 // This file lives at `<root>/src/server/utils/paths.ts` in dev (tsx) and at
@@ -144,3 +145,21 @@ export function getClientSpaPath() {
     const pwa = getPackageAssetPath('src', 'client', 'dist', 'pwa');
     return fs.existsSync(pwa) ? pwa : null;
 }
+/**
+ * The file to serve for a SPA request, or null for "404".
+ *
+ * Kept pure (dist path in, file path out) because the traversal guard that
+ * used to live inline in index.ts once rejected `/` itself: the root resolves
+ * to the dist directory exactly, which a `startsWith(dist + sep)` check does
+ * not accept. `isPathInside` treats the root as inside, and this function has
+ * a test for the one URL every install opens first.
+ */
+export function resolveSpaFile(clientDistPath, pathname) {
+    const root = path.resolve(clientDistPath);
+    const candidate = path.resolve(root, `.${pathname}`);
+    if (!isPathInside(root, candidate))
+        return null;
+    // Client-side routes and directories fall back to the shell.
+    const file = fs.existsSync(candidate) && !fs.statSync(candidate).isDirectory() ? candidate : path.join(root, 'index.html');
+    return fs.existsSync(file) ? file : null;
+}

package/dist/server/utils/safe-path.js

@@ -41,8 +41,28 @@ export function resolvePathInside(rootPath, relativePath) {
         return resolveExistingPathInside(root, resolved);
     }
     catch (err) {
+        if (err.code !== 'ENOENT')
+            throw err;
+        // The leaf does not exist. That is legitimate — this is how a new file gets
+        // created — unless the leaf is itself a symlink whose target is missing:
+        // realpath gives up with ENOENT on those too, and returning the unresolved
+        // path lets `writeFileSync` follow the link on O_CREAT and write outside the
+        // root. A repository that ships `notes.md -> ~/.bashrc.d/x.sh` would get a
+        // write there the next time the user saves.
+        assertLeafIsNotSymlink(resolved);
+        return resolved;
+    }
+}
+/** Reject a leaf that is a symlink, dangling or not. */
+function assertLeafIsNotSymlink(candidate) {
+    try {
+        if (fs.lstatSync(candidate).isSymbolicLink())
+            throw new Error('Path escapes allowed root');
+    }
+    catch (err) {
+        // Genuinely absent: nothing to follow, nothing to reject.
         if (err.code === 'ENOENT')
-            return resolved;
+            return;
         throw err;
     }
 }

package/dist/server/utils/script-runner.js

@@ -11,7 +11,7 @@ export const SCRIPT_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
  * Shared mechanism behind the setup and cleanup script services.
  */
 export function runScript(opts) {
-    const { workspaceId, worktreePath, script, eventPrefix, tmpFileName, env } = opts;
+    const { workspaceId, worktreePath, script, eventPrefix, tmpFileName, env, extraEnv } = opts;
     const timeoutMs = opts.timeoutMs ?? SCRIPT_TIMEOUT_MS;
     return new Promise((resolve) => {
         const scriptPath = path.join(worktreePath, '.ai', tmpFileName);
@@ -21,6 +21,7 @@ export function runScript(opts) {
             cwd: worktreePath,
             env: {
                 ...process.env,
+                ...Object.fromEntries(Object.entries(extraEnv ?? {}).filter(([key]) => key.startsWith('KOBO_'))),
                 WORKSPACE_ID: workspaceId,
                 WORKSPACE_NAME: env?.workspaceName ?? '',
                 BRANCH_NAME: env?.branchName ?? '',

package/dist/server/utils/workspace-name.js

@@ -0,0 +1,37 @@
+/**
+ * Mirrors the private `WORKSPACE_NAME_MAX_LENGTH` in workspace-service.ts.
+ * Duplicated rather than exported to avoid coupling this helper to that
+ * module's internals and to the many `vi.mock(workspace-service.js, factory)`
+ * test files that would otherwise need updating.
+ */
+const WORKSPACE_NAME_MAX_LENGTH = 200;
+/**
+ * Cap an auto-derived title (Notion page title, Sentry issue title, PR/MR
+ * title) before handing it to `updateWorkspaceName`, which throws on anything
+ * longer. Right for a name the user typed; a long exception message pulled
+ * from Sentry is not user input, and truncating it is the sane default.
+ */
+export function truncateWorkspaceName(name) {
+    if (name.length <= WORKSPACE_NAME_MAX_LENGTH)
+        return name;
+    return `${name.slice(0, WORKSPACE_NAME_MAX_LENGTH - 1)}…`;
+}
+/**
+ * The create page sends `workspace` when the user typed no name, and an engine
+ * comparison sends `workspace (Claude Code)` / `workspace (OpenAI Codex)`. Both
+ * are placeholders the extracted title should replace; the suffix is what
+ * tells the two halves apart and must survive the rename.
+ */
+const PLACEHOLDER = /^workspace( \([^()]+\))?$/;
+/**
+ * The name a workspace should take once a title was extracted for it, or
+ * `null` when the current name is the user's own and must be left alone.
+ */
+export function resolveExtractedName(currentName, extractedTitle) {
+    const match = PLACEHOLDER.exec(currentName);
+    if (!match)
+        return null;
+    const suffix = match[1] ?? '';
+    // Truncate the title alone so the engine suffix is never what gets cut.
+    return `${truncateWorkspaceName(extractedTitle)}${suffix}`;
+}

package/dist/shared/consts.js

@@ -1 +1,23 @@
 export const WORKTREES_PATH = '.worktrees';
+/**
+ * Global settings holding a live credential. They must never leave the server
+ * in a payload a third party can read: they are blanked out of the config
+ * bundle, of the settings the HTTP API returns, and of what the MCP tools hand
+ * to the agent. Add any new credential here rather than filtering it at one
+ * call site.
+ *
+ * Lives in `shared` on purpose: the MCP server and the HTTP layer both need it,
+ * and a test that mocks `settings-service` must not be able to mock the list of
+ * secrets away.
+ */
+export const SECRET_GLOBAL_KEYS = ['notionMcpKey', 'sentryMcpKey', 'networkAccessToken', 'bitbucketToken'];
+/**
+ * Stand-in the API sends instead of a stored credential. A client never
+ * receives the real value, so the settings form round-trips this mask on save
+ * and the write path reads it as "leave the stored one alone". Typing a new
+ * value still replaces the secret, and clearing the field still erases it —
+ * only an untouched field is preserved.
+ */
+export const MASKED_SECRET = '••••••••';
+/** The single character `MASKED_SECRET` is made of. */
+export const MASK_CHARACTER = '•';

package/dist/shared/models.js

@@ -6,10 +6,10 @@ export const CLAUDE_MODELS = [
         i18nDescriptionKey: 'model.autoDescription',
     },
     {
-        id: 'claude-fable-5',
-        label: 'Fable 5',
-        i18nLabelKey: 'model.fable5',
-        i18nDescriptionKey: 'model.fable5Description',
+        id: 'claude-fable-5-1',
+        label: 'Fable 5.1',
+        i18nLabelKey: 'model.fable51',
+        i18nDescriptionKey: 'model.fable51Description',
     },
     {
         id: 'claude-mythos-5',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loicngr/kobo",
-  "version": "1.11.26",
+  "version": "1.11.28",
   "description": "Kōbō — multi-workspace agent manager for Claude Code. Orchestrates isolated git worktrees with dev servers, Notion integration, and MCP tools.",
   "type": "module",
   "license": "GPL-3.0-or-later",
@@ -48,7 +48,7 @@
     "node": ">=24.15.0"
   },
   "scripts": {
-    "dev": "KOBO_ENFORCE_LOCAL_HOME=1 KOBO_HOME=./data PORT=3300 tsx watch src/server/index.ts",
+    "dev": "KOBO_ENFORCE_LOCAL_HOME=1 KOBO_HOME=./data PORT=3300 KOBO_DEV_CLIENT_ORIGIN=http://localhost:8080 tsx watch src/server/index.ts",
     "dev:client": "cd src/client && KOBO_BACKEND_PORT=3300 npx quasar dev",
     "dev:all": "concurrently \"npm run dev\" \"npm run dev:client\"",
     "build:client": "cd src/client && npx quasar build -m pwa",
@@ -60,6 +60,7 @@
     "test:watch": "vitest --config vitest.config.ts --root .",
     "test:client": "cd src/client && npm test",
     "test:all": "npm test && npm run test:client",
+    "typecheck:tests": "tsc -p tsconfig.test.json",
     "lint": "biome check .",
     "lint:fix": "biome check --write .",
     "format": "biome format --write .",

package/src/client/dist/pwa/assets/{ActivityFeed-DUjY6lCm.css → ActivityFeed-C6XSxdJ0.css}

@@ -1 +1 @@
-.agent-error-item[data-v-e98c3c02]{gap:var(--kobo-space-sm);padding:var(--kobo-space-sm) var(--kobo-space-md);border-left:2px solid var(--kobo-danger);background:var(--kobo-surface-2);border-radius:var(--kobo-radius-sm);align-items:flex-start;display:flex}.agent-error-item__icon[data-v-e98c3c02]{color:var(--kobo-danger);flex:none;margin-top:2px}.agent-error-item__body[data-v-e98c3c02]{min-width:0}.agent-error-item__title[data-v-e98c3c02]{color:var(--kobo-text);font-weight:600}.agent-error-item__message[data-v-e98c3c02]{color:var(--kobo-text-2);font-family:var(--kobo-font-mono);white-space:pre-wrap;word-break:break-word;font-size:12px}.markdown-message[data-v-539815f6]{color:var(--kobo-text-2);word-break:break-word;overflow-wrap:anywhere;min-width:0;max-width:100%;font-size:13px;line-height:1.55}.markdown-message[data-v-539815f6] *{max-width:100%}.markdown-message[data-v-539815f6] p{margin:0 0 .5em}.markdown-message[data-v-539815f6] p:last-child{margin-bottom:0}.markdown-message[data-v-539815f6] pre{background:#00000059;border-radius:4px;margin:.5em 0;padding:.5em .75em;overflow-x:auto}.markdown-message[data-v-539815f6] code{word-break:break-all;background:#0000004d;border-radius:3px;padding:.1em .3em;font-size:.9em}.markdown-message[data-v-539815f6] pre code{background:0 0;padding:0}.markdown-message[data-v-539815f6] ul,.markdown-message[data-v-539815f6] ol{margin:.25em 0 .5em;padding-left:1.5em}.markdown-message[data-v-539815f6] li{margin:.15em 0}.markdown-message[data-v-539815f6] a{color:var(--kobo-text-2);text-decoration:underline}.markdown-message[data-v-539815f6] .document-link{color:var(--kobo-text-2);cursor:pointer;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}.markdown-message[data-v-539815f6] .document-link:hover{color:var(--kobo-text);-webkit-text-decoration:underline;text-decoration:underline}.markdown-message[data-v-539815f6] h1,.markdown-message[data-v-539815f6] h2,.markdown-message[data-v-539815f6] h3,.markdown-message[data-v-539815f6] h4,.markdown-message[data-v-539815f6] h5,.markdown-message[data-v-539815f6] h6{margin:.5em 0 .3em;font-weight:600;line-height:1.3}.markdown-message[data-v-539815f6] h1{font-size:1.25em}.markdown-message[data-v-539815f6] h2{font-size:1.15em}.markdown-message[data-v-539815f6] h3{font-size:1.08em}.markdown-message[data-v-539815f6] h4,.markdown-message[data-v-539815f6] h5,.markdown-message[data-v-539815f6] h6{font-size:1em}.markdown-message[data-v-539815f6] blockquote{color:#ffffffb3;border-left:3px solid #fff3;margin:.5em 0;padding-left:.75em}.markdown-message[data-v-539815f6] table{border-collapse:collapse;margin:.5em 0}.markdown-message[data-v-539815f6] th,.markdown-message[data-v-539815f6] td{border:1px solid #ffffff26;padding:.25em .5em}.tool-row[data-v-2482adfe]{border-radius:4px;margin:0;font-size:12px}.tool-header[data-v-2482adfe]{color:var(--kobo-text-2);cursor:default;align-items:center;gap:10px;min-width:0;padding:5px 10px;display:flex}.tool-row:not(.tool-row-generic) .tool-header[data-v-2482adfe],.tool-row--toggleable .tool-header[data-v-2482adfe]{cursor:pointer}.tool-row:has(.tool-diff) .tool-header[data-v-2482adfe]{cursor:pointer}.tool-row:not(.tool-row-generic) .tool-header[data-v-2482adfe]:hover,.tool-row--toggleable .tool-header[data-v-2482adfe]:hover{background:#ffffff08}.tool-icon[data-v-2482adfe]{color:var(--kobo-text-2);flex-shrink:0}.tool-name[data-v-2482adfe]{color:var(--kobo-text-2);flex-shrink:0;font-weight:600}.tool-arg[data-v-2482adfe],.tool-path[data-v-2482adfe]{color:var(--kobo-text-3);text-overflow:ellipsis;white-space:nowrap;min-width:0;max-width:100%;font-family:var(--kobo-font-mono);font-size:11.5px;overflow:hidden}.tool-open-diff[data-v-2482adfe]{flex-shrink:0}.tool-path[data-v-2482adfe],.tool-arg[data-v-2482adfe]{flex:1}.tool-stat-add[data-v-2482adfe]{color:var(--kobo-success);flex-shrink:0;font-size:11px;font-weight:600}.tool-stat-del[data-v-2482adfe]{color:var(--kobo-danger);flex-shrink:0;font-size:11px;font-weight:600}.tool-diff[data-v-2482adfe]{max-height:400px;font-family:var(--kobo-font-mono);background:#0003;border-radius:4px;margin-top:4px;padding:8px 0;font-size:11px;line-height:1.5;overflow:auto}.diff-line[data-v-2482adfe]{white-space:pre;color:var(--kobo-text-2);padding:0 12px}.diff-sign[data-v-2482adfe]{width:14px;color:var(--kobo-text-disabled);-webkit-user-select:none;user-select:none;display:inline-block}.diff-add[data-v-2482adfe]{color:var(--kobo-success);background:#66bb6a1a}.diff-add .diff-sign[data-v-2482adfe]{color:var(--kobo-success)}.diff-del[data-v-2482adfe]{color:var(--kobo-danger);background:#ef53501a}.diff-del .diff-sign[data-v-2482adfe]{color:var(--kobo-danger)}.tool-output[data-v-2482adfe]{color:var(--kobo-text-2);font-family:var(--kobo-font-mono);white-space:pre-wrap;background:#00000026;border-radius:4px;max-height:8em;margin-top:4px;padding:6px 10px;font-size:11px;overflow:auto}.markdown-message[data-v-7687eb7e]{color:var(--kobo-text-2);word-break:break-word;overflow-wrap:anywhere;min-width:0;max-width:100%;font-size:13px;line-height:1.55}.markdown-message[data-v-7687eb7e] *{max-width:100%}.markdown-message[data-v-7687eb7e] img{-o-object-fit:contain;object-fit:contain;cursor:zoom-in;background:#0003;border-radius:4px;max-width:180px;max-height:100px;margin:.3em 0;display:block}.markdown-message[data-v-7687eb7e] code{word-break:break-all}.markdown-message[data-v-7687eb7e] p{margin:0 0 .4em}.markdown-message[data-v-7687eb7e] p:last-child{margin-bottom:0}.markdown-message[data-v-7687eb7e] code{background:#00000040;border-radius:3px;padding:.1em .3em}.markdown-message[data-v-7687eb7e] h1,.markdown-message[data-v-7687eb7e] h2,.markdown-message[data-v-7687eb7e] h3,.markdown-message[data-v-7687eb7e] h4,.markdown-message[data-v-7687eb7e] h5,.markdown-message[data-v-7687eb7e] h6{margin:.4em 0 .25em;font-weight:600;line-height:1.3}.markdown-message[data-v-7687eb7e] h1{font-size:1.25em}.markdown-message[data-v-7687eb7e] h2{font-size:1.15em}.markdown-message[data-v-7687eb7e] h3{font-size:1.08em}.markdown-message[data-v-7687eb7e] h4,.markdown-message[data-v-7687eb7e] h5,.markdown-message[data-v-7687eb7e] h6{font-size:1em}.markdown-user-prompt[data-v-7687eb7e]{color:var(--kobo-text-2);font-size:12px;font-style:italic}.markdown-user-prompt[data-v-7687eb7e] p{margin:0 0 .4em}.markdown-user-prompt[data-v-7687eb7e] code{background:#ffffff14;border-radius:3px;padding:.1em .3em;font-style:normal}.image-lightbox-img{-o-object-fit:contain;object-fit:contain;cursor:zoom-out;background:#0000004d;border-radius:4px;max-width:92vw;max-height:92vh;display:block}.turn-card[data-v-59df7154]{border:1px solid #ffffff14;border-left:3px solid var(--turn-accent);background:#ffffff05;border-radius:6px;min-width:0;max-width:100%;margin:14px 0;overflow:hidden}.turn-card--highlighted[data-v-59df7154]{animation:1.8s ease-out search-highlight-59df7154}@keyframes search-highlight-59df7154{0%,45%{box-shadow:0 0 0 2px #818cf8f2,0 0 22px #818cf873}to{box-shadow:none}}.turn-header[data-v-59df7154]{color:var(--kobo-text-3);background:#ffffff08;border-bottom:1px solid #ffffff0d;align-items:center;gap:8px;padding:8px 14px;font-size:11px;display:flex}.turn-badge[data-v-59df7154]{letter-spacing:.3px;border-radius:3px;padding:2px 8px;font-size:11px;font-weight:700}.turn-badge-user[data-v-59df7154]{color:var(--kobo-turn-user);background:#ce93d826}.turn-badge-agent[data-v-59df7154]{color:var(--kobo-turn-agent);background:#7986cb26}.turn-badge-system[data-v-59df7154]{color:var(--kobo-text-2);background:#75757533;font-style:italic}.turn-badge-session[data-v-59df7154]{color:var(--kobo-text-3);background:#61616133}.turn-badge-script[data-v-59df7154]{color:var(--kobo-success);background:#4db6ac26}.turn-time[data-v-59df7154]{color:var(--kobo-text-disabled);font-family:var(--kobo-font-mono);font-size:11px}.turn-time-arrow[data-v-59df7154]{opacity:.7;margin:0 -2px}.turn-time-updated[data-v-59df7154]{color:var(--kobo-text-3)}.turn-actions[data-v-59df7154]{color:var(--kobo-text-3);font-size:11px}.turn-body[data-v-59df7154]{flex-direction:column;gap:12px;min-width:0;padding:14px 18px;display:flex}.turn-body[data-v-59df7154]>*{min-width:0;max-width:100%}.turn-body[data-v-59df7154] .tool-row+.tool-row{margin-top:-8px}.turn-scroll-top[data-v-59df7154]{justify-content:flex-start;padding:0 8px 6px;display:flex}.turn-scroll-top-btn[data-v-59df7154]{opacity:.5;transition:opacity .15s}.turn-scroll-top-btn[data-v-59df7154]:hover{opacity:1}.activity-feed-wrap[data-v-03fed8f2]{width:100%;height:100%;position:relative}.activity-feed-scroll[data-v-03fed8f2]{width:100%;height:100%}.activity-feed-nav-cluster[data-v-03fed8f2]{z-index:2;align-items:center;gap:8px;display:flex;position:absolute;bottom:14px;right:14px}.activity-feed-compacting[data-v-03fed8f2]{z-index:3;background:var(--kobo-surface);border:1px solid var(--kobo-border);border-radius:6px;align-items:center;gap:8px;padding:6px 14px;display:flex;position:absolute;top:12px;left:50%;transform:translate(-50%);box-shadow:0 4px 16px #00000059}.fade-enter-active[data-v-03fed8f2],.fade-leave-active[data-v-03fed8f2]{transition:opacity .16s}.fade-enter-from[data-v-03fed8f2],.fade-leave-to[data-v-03fed8f2]{opacity:0}.activity-feed-nav-btn[data-v-03fed8f2]{opacity:.8;transition:opacity .12s}.activity-feed-nav-btn[data-v-03fed8f2]:hover{opacity:1}.activity-feed-scroll[data-v-03fed8f2] .q-scrollarea__content{max-width:100%;overflow-x:hidden}.activity-feed-switching[data-v-03fed8f2]{justify-content:center;align-items:center;width:100%;height:100%;display:flex}.activity-feed-empty[data-v-03fed8f2]{align-items:center;gap:var(--kobo-space-sm);padding:var(--kobo-space-4xl) var(--kobo-space-xl);color:var(--kobo-text-3);text-align:center;flex-direction:column;display:flex}.activity-feed-empty__title[data-v-03fed8f2]{font-family:var(--kobo-font-sans);color:var(--kobo-text-2);font-size:14px;font-weight:500}.activity-feed-empty__hint[data-v-03fed8f2]{font-family:var(--kobo-font-sans);color:var(--kobo-text-3);max-width:380px;font-size:13px}
+.agent-error-item[data-v-e98c3c02]{gap:var(--kobo-space-sm);padding:var(--kobo-space-sm) var(--kobo-space-md);border-left:2px solid var(--kobo-danger);background:var(--kobo-surface-2);border-radius:var(--kobo-radius-sm);align-items:flex-start;display:flex}.agent-error-item__icon[data-v-e98c3c02]{color:var(--kobo-danger);flex:none;margin-top:2px}.agent-error-item__body[data-v-e98c3c02]{min-width:0}.agent-error-item__title[data-v-e98c3c02]{color:var(--kobo-text);font-weight:600}.agent-error-item__message[data-v-e98c3c02]{color:var(--kobo-text-2);font-family:var(--kobo-font-mono);white-space:pre-wrap;word-break:break-word;font-size:12px}.markdown-message[data-v-99371035]{color:var(--kobo-text-2);word-break:break-word;overflow-wrap:anywhere;min-width:0;max-width:100%;font-size:13px;line-height:1.55}.markdown-message[data-v-99371035] *{max-width:100%}.markdown-message[data-v-99371035] p{margin:0 0 .5em}.markdown-message[data-v-99371035] p:last-child{margin-bottom:0}.markdown-message[data-v-99371035] pre{background:#00000059;border-radius:4px;margin:.5em 0;padding:.5em .75em;overflow-x:auto}.markdown-message[data-v-99371035] code{word-break:break-all;background:#0000004d;border-radius:3px;padding:.1em .3em;font-size:.9em}.markdown-message[data-v-99371035] pre code{background:0 0;padding:0}.markdown-message[data-v-99371035] ul,.markdown-message[data-v-99371035] ol{margin:.25em 0 .5em;padding-left:1.5em}.markdown-message[data-v-99371035] li{margin:.15em 0}.markdown-message[data-v-99371035] a{color:var(--kobo-text-2);text-decoration:underline}.markdown-message[data-v-99371035] .document-link{color:var(--kobo-text-2);cursor:pointer;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}.markdown-message[data-v-99371035] .document-link:hover{color:var(--kobo-text);-webkit-text-decoration:underline;text-decoration:underline}.markdown-message[data-v-99371035] h1,.markdown-message[data-v-99371035] h2,.markdown-message[data-v-99371035] h3,.markdown-message[data-v-99371035] h4,.markdown-message[data-v-99371035] h5,.markdown-message[data-v-99371035] h6{margin:.5em 0 .3em;font-weight:600;line-height:1.3}.markdown-message[data-v-99371035] h1{font-size:1.25em}.markdown-message[data-v-99371035] h2{font-size:1.15em}.markdown-message[data-v-99371035] h3{font-size:1.08em}.markdown-message[data-v-99371035] h4,.markdown-message[data-v-99371035] h5,.markdown-message[data-v-99371035] h6{font-size:1em}.markdown-message[data-v-99371035] blockquote{color:#ffffffb3;border-left:3px solid #fff3;margin:.5em 0;padding-left:.75em}.markdown-message[data-v-99371035] table{border-collapse:collapse;margin:.5em 0}.markdown-message[data-v-99371035] th,.markdown-message[data-v-99371035] td{border:1px solid #ffffff26;padding:.25em .5em}.tool-row[data-v-2482adfe]{border-radius:4px;margin:0;font-size:12px}.tool-header[data-v-2482adfe]{color:var(--kobo-text-2);cursor:default;align-items:center;gap:10px;min-width:0;padding:5px 10px;display:flex}.tool-row:not(.tool-row-generic) .tool-header[data-v-2482adfe],.tool-row--toggleable .tool-header[data-v-2482adfe]{cursor:pointer}.tool-row:has(.tool-diff) .tool-header[data-v-2482adfe]{cursor:pointer}.tool-row:not(.tool-row-generic) .tool-header[data-v-2482adfe]:hover,.tool-row--toggleable .tool-header[data-v-2482adfe]:hover{background:#ffffff08}.tool-icon[data-v-2482adfe]{color:var(--kobo-text-2);flex-shrink:0}.tool-name[data-v-2482adfe]{color:var(--kobo-text-2);flex-shrink:0;font-weight:600}.tool-arg[data-v-2482adfe],.tool-path[data-v-2482adfe]{color:var(--kobo-text-3);text-overflow:ellipsis;white-space:nowrap;min-width:0;max-width:100%;font-family:var(--kobo-font-mono);font-size:11.5px;overflow:hidden}.tool-open-diff[data-v-2482adfe]{flex-shrink:0}.tool-path[data-v-2482adfe],.tool-arg[data-v-2482adfe]{flex:1}.tool-stat-add[data-v-2482adfe]{color:var(--kobo-success);flex-shrink:0;font-size:11px;font-weight:600}.tool-stat-del[data-v-2482adfe]{color:var(--kobo-danger);flex-shrink:0;font-size:11px;font-weight:600}.tool-diff[data-v-2482adfe]{max-height:400px;font-family:var(--kobo-font-mono);background:#0003;border-radius:4px;margin-top:4px;padding:8px 0;font-size:11px;line-height:1.5;overflow:auto}.diff-line[data-v-2482adfe]{white-space:pre;color:var(--kobo-text-2);padding:0 12px}.diff-sign[data-v-2482adfe]{width:14px;color:var(--kobo-text-disabled);-webkit-user-select:none;user-select:none;display:inline-block}.diff-add[data-v-2482adfe]{color:var(--kobo-success);background:#66bb6a1a}.diff-add .diff-sign[data-v-2482adfe]{color:var(--kobo-success)}.diff-del[data-v-2482adfe]{color:var(--kobo-danger);background:#ef53501a}.diff-del .diff-sign[data-v-2482adfe]{color:var(--kobo-danger)}.tool-output[data-v-2482adfe]{color:var(--kobo-text-2);font-family:var(--kobo-font-mono);white-space:pre-wrap;background:#00000026;border-radius:4px;max-height:8em;margin-top:4px;padding:6px 10px;font-size:11px;overflow:auto}.markdown-message[data-v-7687eb7e]{color:var(--kobo-text-2);word-break:break-word;overflow-wrap:anywhere;min-width:0;max-width:100%;font-size:13px;line-height:1.55}.markdown-message[data-v-7687eb7e] *{max-width:100%}.markdown-message[data-v-7687eb7e] img{-o-object-fit:contain;object-fit:contain;cursor:zoom-in;background:#0003;border-radius:4px;max-width:180px;max-height:100px;margin:.3em 0;display:block}.markdown-message[data-v-7687eb7e] code{word-break:break-all}.markdown-message[data-v-7687eb7e] p{margin:0 0 .4em}.markdown-message[data-v-7687eb7e] p:last-child{margin-bottom:0}.markdown-message[data-v-7687eb7e] code{background:#00000040;border-radius:3px;padding:.1em .3em}.markdown-message[data-v-7687eb7e] h1,.markdown-message[data-v-7687eb7e] h2,.markdown-message[data-v-7687eb7e] h3,.markdown-message[data-v-7687eb7e] h4,.markdown-message[data-v-7687eb7e] h5,.markdown-message[data-v-7687eb7e] h6{margin:.4em 0 .25em;font-weight:600;line-height:1.3}.markdown-message[data-v-7687eb7e] h1{font-size:1.25em}.markdown-message[data-v-7687eb7e] h2{font-size:1.15em}.markdown-message[data-v-7687eb7e] h3{font-size:1.08em}.markdown-message[data-v-7687eb7e] h4,.markdown-message[data-v-7687eb7e] h5,.markdown-message[data-v-7687eb7e] h6{font-size:1em}.markdown-user-prompt[data-v-7687eb7e]{color:var(--kobo-text-2);font-size:12px;font-style:italic}.markdown-user-prompt[data-v-7687eb7e] p{margin:0 0 .4em}.markdown-user-prompt[data-v-7687eb7e] code{background:#ffffff14;border-radius:3px;padding:.1em .3em;font-style:normal}.image-lightbox-img{-o-object-fit:contain;object-fit:contain;cursor:zoom-out;background:#0000004d;border-radius:4px;max-width:92vw;max-height:92vh;display:block}.turn-card[data-v-6e61835e]{border:1px solid #ffffff14;border-left:3px solid var(--turn-accent);background:#ffffff05;border-radius:6px;min-width:0;max-width:100%;margin:14px 0;overflow:hidden}.turn-card--highlighted[data-v-6e61835e]{animation:1.8s ease-out search-highlight-6e61835e}@keyframes search-highlight-6e61835e{0%,45%{box-shadow:0 0 0 2px #818cf8f2,0 0 22px #818cf873}to{box-shadow:none}}.turn-header[data-v-6e61835e]{color:var(--kobo-text-3);background:#ffffff08;border-bottom:1px solid #ffffff0d;align-items:center;gap:8px;padding:8px 14px;font-size:11px;display:flex}.turn-badge[data-v-6e61835e]{letter-spacing:.3px;border-radius:3px;padding:2px 8px;font-size:11px;font-weight:700}.turn-badge-user[data-v-6e61835e]{color:var(--kobo-turn-user);background:#ce93d826}.turn-badge-agent[data-v-6e61835e]{color:var(--kobo-turn-agent);background:#7986cb26}.turn-badge-system[data-v-6e61835e]{color:var(--kobo-text-2);background:#75757533;font-style:italic}.turn-badge-session[data-v-6e61835e]{color:var(--kobo-text-3);background:#61616133}.turn-badge-script[data-v-6e61835e]{color:var(--kobo-success);background:#4db6ac26}.turn-time[data-v-6e61835e]{color:var(--kobo-text-disabled);font-family:var(--kobo-font-mono);font-size:11px}.turn-time-arrow[data-v-6e61835e]{opacity:.7;margin:0 -2px}.turn-time-updated[data-v-6e61835e]{color:var(--kobo-text-3)}.turn-actions[data-v-6e61835e]{color:var(--kobo-text-3);font-size:11px}.turn-body[data-v-6e61835e]{flex-direction:column;gap:12px;min-width:0;padding:14px 18px;display:flex}.turn-body[data-v-6e61835e]>*{min-width:0;max-width:100%}.turn-body[data-v-6e61835e] .tool-row+.tool-row{margin-top:-8px}.turn-scroll-top[data-v-6e61835e]{justify-content:flex-start;padding:0 8px 6px;display:flex}.turn-scroll-top-btn[data-v-6e61835e]{opacity:.5;transition:opacity .15s}.turn-scroll-top-btn[data-v-6e61835e]:hover{opacity:1}.activity-feed-wrap[data-v-03fed8f2]{width:100%;height:100%;position:relative}.activity-feed-scroll[data-v-03fed8f2]{width:100%;height:100%}.activity-feed-nav-cluster[data-v-03fed8f2]{z-index:2;align-items:center;gap:8px;display:flex;position:absolute;bottom:14px;right:14px}.activity-feed-compacting[data-v-03fed8f2]{z-index:3;background:var(--kobo-surface);border:1px solid var(--kobo-border);border-radius:6px;align-items:center;gap:8px;padding:6px 14px;display:flex;position:absolute;top:12px;left:50%;transform:translate(-50%);box-shadow:0 4px 16px #00000059}.fade-enter-active[data-v-03fed8f2],.fade-leave-active[data-v-03fed8f2]{transition:opacity .16s}.fade-enter-from[data-v-03fed8f2],.fade-leave-to[data-v-03fed8f2]{opacity:0}.activity-feed-nav-btn[data-v-03fed8f2]{opacity:.8;transition:opacity .12s}.activity-feed-nav-btn[data-v-03fed8f2]:hover{opacity:1}.activity-feed-scroll[data-v-03fed8f2] .q-scrollarea__content{max-width:100%;overflow-x:hidden}.activity-feed-switching[data-v-03fed8f2]{justify-content:center;align-items:center;width:100%;height:100%;display:flex}.activity-feed-empty[data-v-03fed8f2]{align-items:center;gap:var(--kobo-space-sm);padding:var(--kobo-space-4xl) var(--kobo-space-xl);color:var(--kobo-text-3);text-align:center;flex-direction:column;display:flex}.activity-feed-empty__title[data-v-03fed8f2]{font-family:var(--kobo-font-sans);color:var(--kobo-text-2);font-size:14px;font-weight:500}.activity-feed-empty__hint[data-v-03fed8f2]{font-family:var(--kobo-font-sans);color:var(--kobo-text-3);max-width:380px;font-size:13px}