@open-mercato/cezar 0.9.0-pr646.708 → 0.9.0

package/dist/server/capabilities.d.ts

@@ -14,16 +14,10 @@
  * `todos.json` (they get `HANDOFF_ONLY_INSTRUCTIONS` and an empty
  * `CEZ_TODOS_FILE`), the Inbox nav item is gone and the inbox endpoints refuse.
  * The per-task handoff journal is independent and runs either way.
- *
- * `singleProject` (spec 2026-07-21-cez-single-project): the workspace is
- * deliberately constrained to the launch project when `CEZ_SINGLE_PROJECT=1`.
- * Like the other opt-in capabilities, activation is strict: no other spelling
- * enables it.
  */
 export interface Capabilities {
     localHandoff: boolean;
     followups: boolean;
-    singleProject: boolean;
 }
 /** Canonical hostname of an authority: port and IPv6 brackets removed, IPv6
  *  expanded, zone id and FQDN trailing dot dropped, lowercased.

package/dist/server/capabilities.js

@@ -14,11 +14,6 @@
  * `todos.json` (they get `HANDOFF_ONLY_INSTRUCTIONS` and an empty
  * `CEZ_TODOS_FILE`), the Inbox nav item is gone and the inbox endpoints refuse.
  * The per-task handoff journal is independent and runs either way.
- *
- * `singleProject` (spec 2026-07-21-cez-single-project): the workspace is
- * deliberately constrained to the launch project when `CEZ_SINGLE_PROJECT=1`.
- * Like the other opt-in capabilities, activation is strict: no other spelling
- * enables it.
  */
 import { followupsEnabled } from '../handoff.js';
 /** Every IPv4 address in 127.0.0.0/8, anchored. Anchoring is load-bearing: a
@@ -120,7 +115,6 @@ export function resolveCapabilities(env = process.env, bindHost) {
         // Deliberately not re-derived here: RunManager enforces the same predicate,
         // and two spellings of "is the inbox on" would eventually disagree.
         followups: followupsEnabled(env),
-        singleProject: env.CEZ_SINGLE_PROJECT === '1',
     };
 }
 //# sourceMappingURL=capabilities.js.map

package/dist/server/capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/server/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAQjD;;;0CAG0C;AAC1C,MAAM,WAAW,GAAG,4CAA4C,CAAC;AAEjE,kEAAkE;AAClE,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC;;;;;;YAMY;AACZ,SAAS,UAAU,CAAC,CAAS;IAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAgB,CAAC;IACrB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;oFAOoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACxD,IAAI,SAAS;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/E,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvF,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE7D,OAAO,EAAE,CAAC,CAAC,qCAAqC;AAClD,CAAC;AAED;0EAC0E;AAC1E,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;+CAC+C;AAC/C,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,QAAQ,KAAK,WAAW,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,WAAW,CAAC;AAC5F,CAAC;AAED;;;wEAGwE;AACxE,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;6DAG6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,IAA+B;IAClE,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;+FAO+F;AAC/F,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAE,QAAiB;IACzF,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC;QAChE,4EAA4E;QAC5E,oEAAoE;QACpE,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAChC,aAAa,EAAE,GAAG,CAAC,kBAAkB,KAAK,GAAG;KAC9C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/server/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAOjD;;;0CAG0C;AAC1C,MAAM,WAAW,GAAG,4CAA4C,CAAC;AAEjE,kEAAkE;AAClE,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC;;;;;;YAMY;AACZ,SAAS,UAAU,CAAC,CAAS;IAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAgB,CAAC;IACrB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;oFAOoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACxD,IAAI,SAAS;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/E,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvF,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE7D,OAAO,EAAE,CAAC,CAAC,qCAAqC;AAClD,CAAC;AAED;0EAC0E;AAC1E,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;+CAC+C;AAC/C,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,QAAQ,KAAK,WAAW,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,WAAW,CAAC;AAC5F,CAAC;AAED;;;wEAGwE;AACxE,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;6DAG6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,IAA+B;IAClE,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;+FAO+F;AAC/F,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAE,QAAiB;IACzF,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC;QAChE,4EAA4E;QAC5E,oEAAoE;QACpE,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC;KACjC,CAAC;AACJ,CAAC"}

package/dist/server/server.d.ts

@@ -114,14 +114,6 @@ export interface RemoveProjectResponse {
     removed: true;
     id: string;
 }
-/** `PATCH /api/projects/:projectId` (spec 2026-07-22-per-project-concurrency)
- *  — sets or clears a project's per-project `maxParallel`. The entry carries
- *  the same `status`/`branch` probe `GET /api/projects` attaches, so the
- *  cockpit sees one project shape. `null` in the request clears the override
- *  back to "inherit the workspace cap". */
-export interface UpdateProjectResponse {
-    project: ProjectListEntry;
-}
 /** `GET/PUT /api/workspace/config` (multi-project spec, step 2.7) — the
  *  settings slice of `~/.cezar/config.json`: global knobs ONLY, never the
  *  project registry (that is `GET /api/projects`' job). */

package/dist/server/server.js

@@ -16,7 +16,7 @@ import { WORKFLOWS_DIR, loadWorkflows } from '../workflows/load.js';
 import { QUICK_TASK_WORKFLOW, normalizeWorkflowDoc, skillStackOf, skillsToSteps, stepsIssue, workflowFileSchema, workflowStepSchema, } from '../workflows/types.js';
 import { planChain, slugify } from '../planner.js';
 import { discoverSkills } from '../skills.js';
-import { getTeamSkillsCached, refreshTeamSkills, waitForTeamSkills } from '../skills-remote.js';
+import { refreshTeamSkills, waitForTeamSkills } from '../skills-remote.js';
 import { appendHandoffHeartbeat, handoffProgressExcerpt, readHandoff } from '../handoff.js';
 import { markStarted, onTodosChanged, readTodos, removeTodo, todoTaskText } from '../todos.js';
 import { isV2WireEventType } from '../runs/ui-event-sink.js';
@@ -24,7 +24,7 @@ import { removeWorktree, worktreeDiff, worktreeDiffStat, worktreeSizeBytes } fro
 import { isReclaimable, reclaimWorktrees } from '../runs/retention.js';
 import { getBranches, getCommit, getDiff, getLog, getRepoInfo, getStatus } from './git.js';
 import { collectChanges, collectCommitChanges, collectRunCommits, commitAll, createOrSwitchBranch, imageMimeType, isOsOpenableImage, pushCurrentBranch, readWorktreePath, } from './git-changes.js';
-import { gatedSkillsRepos, loadConfig, resolveWorktreeRetention } from '../config.js';
+import { loadConfig, resolveWorktreeRetention } from '../config.js';
 import { findConfigFile } from '../agent-config/catalog.js';
 import { readConfigFile, writeConfigFile } from '../agent-config/files.js';
 import { listAgentConfig } from '../agent-config/service.js';
@@ -236,18 +236,6 @@ const workspaceUiStateSchema = z
     })
         .passthrough()
         .optional(),
-    // The user's curated selection of default (vendor) skills — `open-mercato/skills` — so the
-    // catalog is no longer forced in full. GLOBAL (here, not per-repo) because "which skills I
-    // want" describes the person, not a checkout, and must not depend on where cezar was launched
-    // (multi-project workspace). Tri-state, enforced in `discoverSkills`: an ABSENT key means "not
-    // curated" and every default skill still shows (opt-out default — no silent break on upgrade);
-    // a PRESENT array (even `[]`) shows only those names. Bounded like the `skillUsage` map: the
-    // file is GET/PUT wholesale, so an unbounded array is an unbounded write. Names match
-    // `lastTask.ref` (`.min(1).max(200)`). The client PUTs the whole array (shallow top-level merge).
-    importedSkills: z
-        .array(z.string().min(1).max(200))
-        .max(SKILL_USAGE_MAX_ENTRIES)
-        .optional(),
 })
     .passthrough();
 const uiStateSchema = z
@@ -315,9 +303,6 @@ const uiStateSchema = z
         .optional(),
     // Skills promo banner (#391): set once the cockpit banner is dismissed, never unset.
     // Server-persisted (not a cookie) so the "shown once" promise holds across browsers.
-    // Retained for backward compatibility — the banner is gone, replaced by the workspace-level
-    // `importedSkills` curation (see `workspaceUiStateSchema`); `.passthrough()` would preserve
-    // the key regardless, but keep it typed.
     dismissedSkillsBanner: z.boolean().optional(),
 })
     .passthrough();
@@ -382,12 +367,9 @@ function foldedLength(task, stack) {
 // "Continue"/"Send back" body (spec 003 / #401): every field optional, so an empty POST reopens
 // the last session on the run's current backend (backward compat). A runner/model override lets
 // the follow-up composer choose which engine handles the continuation. `text` stays bounded like
-// the live-session message `text` (#429), and `images` like a live-session message's — the
-// follow-up composer is a full composer, so a screenshot pasted into it must reach the reopened
-// session rather than being silently dropped.
+// the live-session message `text` (#429).
 const continueSchema = z.object({
     text: z.string().max(100_000, 'text must be at most 100000 characters').optional(),
-    images: z.array(imageInputSchema).max(4).optional(),
     runner: z.enum(['claude', 'codex', 'opencode']).optional(),
     model: z.string().max(200).optional(),
 });
@@ -511,18 +493,14 @@ export function createApp(deps) {
     const workspaceSummary = async () => {
         try {
             const registry = (await loadWorkspaceConfig()).projects;
-            const bootProject = await resolveBootProject(registry);
-            const visible = capabilities().singleProject
-                ? registry.filter((project) => project.id === bootProject)
-                : registry;
             return {
                 // Explicit picks, not a spread: the registry schema passes unknown
                 // keys through, and `root` must never ride along onto health.
-                projects: visible.map((p) => ({
+                projects: registry.map((p) => ({
                     id: p.id,
                     name: p.name || basename(p.root),
                 })),
-                bootProject,
+                bootProject: await resolveBootProject(registry),
             };
         }
         catch {
@@ -532,7 +510,6 @@ export function createApp(deps) {
     // Hosted-mode gate (spec §"Deployment modes") — read per request so
     // CEZ_REMOTE flips take effect live (and tests can toggle it).
     const capabilities = () => resolveCapabilities(process.env, bindHost);
-    const singleProjectRefusal = (action) => ({ error: `single-project mode is enabled; ${action} is disabled` });
     // Inbox live updates (spec 007). Opt-in (#471): no capability, no watcher —
     // and since step 2.3 the per-dataDir watch is created lazily by the first
     // SSE subscription (and torn down with the last), nothing to start here.
@@ -553,15 +530,7 @@ export function createApp(deps) {
     };
     // Non-boot projects build lazily on first scoped request; their managers
     // count against the same workspace semaphore as the boot manager (step 2.5).
-    const contexts = deps.contexts ?? new ProjectContexts({
-        listProjects: async () => {
-            const selector = capabilities().singleProject
-                ? { projectId: await resolveBootProject() }
-                : undefined;
-            return listProjects(selector);
-        },
-        semaphore: deps.semaphore,
-    });
+    const contexts = deps.contexts ?? new ProjectContexts({ listProjects, semaphore: deps.semaphore });
     // Workspace-level SSE bus (step 2.8) — the registry mutators and the
     // checkout flow (Phase 4) emit here; /api/workspace/events relays.
     const workspaceEvents = deps.workspaceEvents ?? new WorkspaceEventBus();
@@ -843,10 +812,7 @@ export function createApp(deps) {
         let projectsDir = defaultWorkspaceConfig().projectsDir;
         try {
             projectsDir = (await loadWorkspaceConfig()).projectsDir;
-            const selector = capabilities().singleProject
-                ? { projectId: await resolveBootProject() }
-                : undefined;
-            projects = await listProjects(selector);
+            projects = await listProjects();
         }
         catch {
             // unreadable workspace — degrade to the empty registry + defaults
@@ -872,9 +838,6 @@ export function createApp(deps) {
      * Returns the status + body for the caller to answer with.
      */
     const registerFolder = async (spelled, source) => {
-        if (capabilities().singleProject) {
-            return { status: 409, body: singleProjectRefusal('adding projects') };
-        }
         // `~` is expanded for the same reason `/api/fs/browse` expands it: the
         // dialog hands back absolute paths, but a hand-written body (curl, a
         // future CLI) spells home the way a shell does.
@@ -1020,9 +983,6 @@ export function createApp(deps) {
         return ctx.store.listRuns().filter((run) => ACTIVE_RUN_STATUSES.has(run.status)).length;
     };
     app.delete('/api/projects/:projectId', async (c) => {
-        if (capabilities().singleProject) {
-            return c.json(singleProjectRefusal('removing projects'), 409);
-        }
         const raw = c.req.param('projectId');
         // Same gate the scoped-route resolver applies, and the same 404 wording —
         // a malformed id is an unknown project, not a validation essay.
@@ -1078,78 +1038,6 @@ export function createApp(deps) {
         const body = { removed: true, id };
         return c.json(body);
     });
-    // Edit one field of an existing registry entry (spec
-    // 2026-07-22-per-project-concurrency): the per-project concurrency ceiling.
-    // A PATCH (not PUT) because it touches a single field, and a distinct route
-    // from POST (register-a-folder) to keep register vs. edit semantics clear.
-    // `maxParallel: null` clears the override back to "inherit the workspace
-    // cap". Bounds mirror `workspaceProjectSchema` (config.ts) exactly, so a
-    // value this route accepts can never be degraded away by the next load's
-    // `.catch`.
-    const updateProjectSchema = z.object({
-        maxParallel: z.number().int().min(1).max(16).nullable(),
-    });
-    app.patch('/api/projects/:projectId', async (c) => {
-        if (capabilities().singleProject) {
-            return c.json(singleProjectRefusal('editing projects'), 409);
-        }
-        const raw = c.req.param('projectId');
-        // Same gate + 404 wording as DELETE: a malformed id is an unknown project.
-        if (!projectIdSchema.safeParse(raw).success) {
-            return c.json({ error: `unknown project: ${raw}` }, 404);
-        }
-        const parsed = updateProjectSchema.safeParse(await c.req.json().catch(() => null));
-        if (!parsed.success) {
-            return c.json({ error: parsed.error.issues.map((i) => i.message).join('; ') }, 400);
-        }
-        // `default` is the boot alias the cockpit is allowed to use everywhere else.
-        const id = raw === 'default' ? await resolveBootProject() : raw;
-        const { maxParallel } = parsed.data;
-        // Read-first (mirroring DELETE, server.ts:1252-1258): a well-formed but
-        // unknown id must 404 WITHOUT rewriting the config — otherwise it would both
-        // do a needless full-config tmp+rename and, on a read-only home, surface the
-        // write failure as a 500 where the honest answer is 404.
-        let known = false;
-        try {
-            known = (await loadWorkspaceConfig()).projects.some((p) => p.id === id);
-        }
-        catch {
-            // unreadable workspace — treat as unknown; the read-only case answers 404,
-            // not a 500 the caller cannot act on (same reasoning as DELETE).
-        }
-        if (!known)
-            return c.json({ error: `unknown project: ${id}` }, 404);
-        let updated;
-        try {
-            await mergeWriteWorkspaceConfig((config) => {
-                const entry = config.projects.find((p) => p.id === id);
-                if (!entry)
-                    return; // lost a race with a concurrent remove — answered below
-                // null clears the override; a number sets it. Mutated in place so
-                // `.passthrough()` keys on the entry survive.
-                if (maxParallel === null)
-                    delete entry.maxParallel;
-                else
-                    entry.maxParallel = maxParallel;
-                updated = entry;
-            });
-        }
-        catch (err) {
-            // e.g. a read-only home — nothing was persisted (atomic tmp+rename).
-            return c.json({ error: err instanceof Error ? err.message : String(err) }, 500);
-        }
-        // Raced with a concurrent removal between the read and the write.
-        if (!updated)
-            return c.json({ error: `unknown project: ${id}` }, 404);
-        // The new ceiling takes effect WITHOUT a restart: refresh the shared
-        // semaphore's snapshot and pump every manager — the same live-apply hook
-        // `PUT /api/workspace/config` fires for a workspace-cap change.
-        await deps.semaphore?.refresh();
-        const body = {
-            project: { ...updated, ...(await probeProjectStatus(updated.root)) },
-        };
-        return c.json(body);
-    });
     // ---- GUI clone (multi-project spec, step 4.3) ----------------------------
     // "Add project → Clone from GitHub": clone into the checkout root, then
     // register the result through `registerFolder` above (same guards, same
@@ -1167,9 +1055,6 @@ export function createApp(deps) {
         checkoutId: z.string().trim().max(128).optional(),
     });
     app.post('/api/projects/checkout', async (c) => {
-        if (capabilities().singleProject) {
-            return c.json(singleProjectRefusal('adding projects'), 409);
-        }
         const parsed = checkoutSchema.safeParse(await c.req.json().catch(() => null));
         if (!parsed.success)
             return c.json({ error: 'url must be a GitHub repository' }, 400);
@@ -1320,9 +1205,6 @@ export function createApp(deps) {
     // it is realpath-based. The independently configured browse root is read per
     // request, so a successful settings save applies without a restart.
     app.get('/api/fs/browse', async (c) => {
-        if (capabilities().singleProject) {
-            return c.json(singleProjectRefusal('folder browsing'), 409);
-        }
         const root = resolveBrowseRoot(await workspaceBrowseRoot());
         const result = await browseDirectory({
             root,
@@ -1345,23 +1227,6 @@ export function createApp(deps) {
             await waitForTeamSkills(repoRoot);
         return c.json(await discoverSkills(repoRoot));
     });
-    // The opt-in catalog for the "Import skills" panel: every skill a default
-    // (vendor) repo offers — `open-mercato/skills` — regardless of import state,
-    // so the panel can present them all with a per-skill toggle. Empty once a repo
-    // configures its own `skillsRepos` (nothing is gated then). `wait=1` lets the
-    // panel wait out a cold team-skill cache, same as `GET /skills` (spec 005).
-    api.get('/skills/importable', async (c) => {
-        const repoRoot = c.get('project').root;
-        const gated = await gatedSkillsRepos(repoRoot);
-        if (gated.size === 0)
-            return c.json([]);
-        if (c.req.query('wait') === '1')
-            await waitForTeamSkills(repoRoot);
-        const importable = getTeamSkillsCached(repoRoot)
-            .filter((skill) => skill.team && gated.has(skill.team.repo))
-            .map((skill) => ({ name: skill.name, description: skill.description }));
-        return c.json(importable);
-    });
     // ---- GUI prefs (ui-state.json) --------------------------------------------
     // The read path is shared with the CLI (`src/ui-state.ts`) so `cezar serve` can honour a
     // preference set here — #391's dismissed skills banner — from one notion of the file.
@@ -1883,10 +1748,6 @@ export function createApp(deps) {
         }
         const result = manager.continueRun(id, {
             text: parsed.data.text,
-            images: parsed.data.images?.map((img) => ({
-                type: 'image',
-                source: { type: 'base64', media_type: img.mediaType, data: img.data },
-            })),
             runner: parsed.data.runner,
             model: parsed.data.model,
         });