@openscout/scout 0.2.56 → 0.2.58

package/dist/scout-control-plane-web.mjs

@@ -5703,6 +5703,20 @@ var init_support_paths = () => {};
 import { existsSync as existsSync4, statSync as statSync2 } from "fs";
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
 import { dirname as dirname3, join as join5 } from "path";
+function buildHarnessResumeCommand(entry, sessionId, cwd) {
+  if (!entry.resume)
+    return null;
+  const parts = [entry.resume.command, entry.resume.sessionFlag, sessionId];
+  if (cwd && entry.resume.cwdFlag) {
+    parts.push(entry.resume.cwdFlag, cwd);
+  }
+  return parts.join(" ");
+}
+function findHarnessEntry(harness) {
+  if (!harness)
+    return null;
+  return BUILT_IN_HARNESS_CATALOG.find((e) => e.harness === harness || e.name === harness) ?? null;
+}
 async function writeHarnessCatalogOverrides(overrides, overridePath = resolveOpenScoutSupportPaths().harnessCatalogPath) {
   await mkdir2(dirname3(overridePath), { recursive: true });
   const payload = {
@@ -5761,6 +5775,11 @@ var init_harness_catalog = __esm(() => {
         loginCommand: "claude login",
         notReadyMessage: "Claude is installed but not authenticated yet."
       },
+      resume: {
+        command: "claude",
+        sessionFlag: "--resume",
+        cwdFlag: "--cwd"
+      },
       capabilities: ["chat", "invoke", "deliver", "summarize", "review"]
     },
     {
@@ -5792,6 +5811,11 @@ var init_harness_catalog = __esm(() => {
         loginCommand: "codex login",
         notReadyMessage: "Codex is installed but not authenticated yet."
       },
+      resume: {
+        command: "codex",
+        sessionFlag: "--thread",
+        cwdFlag: "--cwd"
+      },
       capabilities: ["chat", "invoke", "deliver", "review", "execute"]
     }
   ];
@@ -8056,7 +8080,8 @@ function buildManagedAgentShellExports(options) {
 // packages/runtime/src/claude-stream-json.ts
 import { randomUUID } from "crypto";
 import { spawn as spawn3 } from "child_process";
-import { appendFile as appendFile2, mkdir as mkdir4, readFile as readFile5, rm as rm3, writeFile as writeFile4 } from "fs/promises";
+import { appendFile as appendFile2, mkdir as mkdir4, readFile as readFile5, writeFile as writeFile4 } from "fs/promises";
+import { existsSync as existsSync9, readFileSync as readFileSync5 } from "fs";
 import { join as join13 } from "path";
 function resolveClaudeStreamJsonOutput(result, fallbackParts) {
   const trimmedResult = result?.trim();
@@ -8092,6 +8117,53 @@ function parseJsonObject(value) {
     return {};
   }
 }
+function readSessionCatalogSync(runtimeDirectory) {
+  const catalogPath = join13(runtimeDirectory, SESSION_CATALOG_FILENAME);
+  try {
+    if (!existsSync9(catalogPath)) {
+      const legacyPath = join13(runtimeDirectory, "claude-session-id.txt");
+      if (existsSync9(legacyPath)) {
+        const legacyId = readFileSync5(legacyPath, "utf8").trim();
+        if (legacyId) {
+          return {
+            activeSessionId: legacyId,
+            sessions: [{ id: legacyId, startedAt: Date.now(), cwd: "" }]
+          };
+        }
+      }
+      return { activeSessionId: null, sessions: [] };
+    }
+    const raw2 = readFileSync5(catalogPath, "utf8").trim();
+    if (!raw2)
+      return { activeSessionId: null, sessions: [] };
+    const parsed = JSON.parse(raw2);
+    return {
+      activeSessionId: parsed.activeSessionId ?? null,
+      sessions: Array.isArray(parsed.sessions) ? parsed.sessions : []
+    };
+  } catch {
+    return { activeSessionId: null, sessions: [] };
+  }
+}
+async function readSessionCatalog(runtimeDirectory) {
+  return readSessionCatalogSync(runtimeDirectory);
+}
+async function writeSessionCatalog(runtimeDirectory, catalog) {
+  const catalogPath = join13(runtimeDirectory, SESSION_CATALOG_FILENAME);
+  await writeFile4(catalogPath, JSON.stringify(catalog, null, 2) + `
+`);
+}
+function catalogRecordSession(catalog, sessionId, cwd) {
+  const now = Date.now();
+  const sessions = catalog.sessions.map((s) => s.id === catalog.activeSessionId && !s.endedAt ? { ...s, endedAt: now } : s);
+  if (!sessions.some((s) => s.id === sessionId)) {
+    sessions.push({ id: sessionId, startedAt: now, cwd });
+  }
+  while (sessions.length > SESSION_CATALOG_MAX_ENTRIES) {
+    sessions.shift();
+  }
+  return { activeSessionId: sessionId, sessions };
+}
 function appendActionOutput(blockState, output) {
   if (!blockState || blockState.block.type !== "action" || !output) {
     return;
@@ -8495,7 +8567,7 @@ function buildClaudeStreamJsonSessionSnapshot(raw2, options, targetClaudeSession
 
 class ClaudeStreamJsonSession {
   options;
-  sessionStatePath;
+  catalogDirectory;
   stdoutLogPath;
   stderrLogPath;
   process = null;
@@ -8506,7 +8578,7 @@ class ClaudeStreamJsonSession {
   lastConfigSignature;
   constructor(options) {
     this.options = options;
-    this.sessionStatePath = join13(options.runtimeDirectory, "claude-session-id.txt");
+    this.catalogDirectory = options.runtimeDirectory;
     this.stdoutLogPath = join13(options.logsDirectory, "stdout.log");
     this.stderrLogPath = join13(options.logsDirectory, "stderr.log");
     this.lastConfigSignature = this.configSignature(options);
@@ -8612,7 +8684,9 @@ class ClaudeStreamJsonSession {
     }
     if (options.resetSession) {
       this.claudeSessionId = null;
-      await rm3(this.sessionStatePath, { force: true });
+      const catalog = await readSessionCatalog(this.catalogDirectory);
+      catalog.activeSessionId = null;
+      await writeSessionCatalog(this.catalogDirectory, catalog);
     }
   }
   configSignature(options) {
@@ -8641,7 +8715,8 @@ class ClaudeStreamJsonSession {
     await mkdir4(this.options.runtimeDirectory, { recursive: true });
     await mkdir4(this.options.logsDirectory, { recursive: true });
     await writeFile4(join13(this.options.runtimeDirectory, "prompt.txt"), this.options.systemPrompt);
-    this.claudeSessionId = await readOptionalFile2(this.sessionStatePath);
+    const catalog = await readSessionCatalog(this.catalogDirectory);
+    this.claudeSessionId = catalog.activeSessionId;
     const args = [
       "--verbose",
       "--print",
@@ -8720,8 +8795,11 @@ class ClaudeStreamJsonSession {
       const nextSessionId = event.session_id ?? event.sessionId ?? null;
       if (nextSessionId && nextSessionId !== this.claudeSessionId) {
         this.claudeSessionId = nextSessionId;
-        writeFile4(this.sessionStatePath, `${nextSessionId}
-`);
+        (async () => {
+          const catalog = await readSessionCatalog(this.catalogDirectory);
+          const updated = catalogRecordSession(catalog, nextSessionId, this.options.cwd);
+          await writeSessionCatalog(this.catalogDirectory, updated);
+        })();
       }
       return;
     }
@@ -8794,29 +8872,30 @@ async function answerClaudeStreamJsonQuestion(options, input) {
 }
 async function getClaudeStreamJsonAgentSnapshot(options) {
   const stdoutLogPath = join13(options.logsDirectory, "stdout.log");
-  const sessionStatePath = join13(options.runtimeDirectory, "claude-session-id.txt");
-  const [rawLog, persistedSessionId] = await Promise.all([
+  const [rawLog, catalog] = await Promise.all([
     readOptionalFile2(stdoutLogPath),
-    readOptionalFile2(sessionStatePath)
+    readSessionCatalog(options.runtimeDirectory)
   ]);
   if (!rawLog) {
     return null;
   }
-  return buildClaudeStreamJsonSessionSnapshot(rawLog, options, persistedSessionId);
+  return buildClaudeStreamJsonSessionSnapshot(rawLog, options, catalog.activeSessionId);
 }
 async function shutdownClaudeStreamJsonAgent(options, shutdownOptions = {}) {
   const key = sessionKey(options);
   const session = sessions.get(key);
   if (!session) {
     if (shutdownOptions.resetSession) {
-      await rm3(join13(options.runtimeDirectory, "claude-session-id.txt"), { force: true });
+      const catalog = await readSessionCatalog(options.runtimeDirectory);
+      catalog.activeSessionId = null;
+      await writeSessionCatalog(options.runtimeDirectory, catalog);
     }
     return;
   }
   sessions.delete(key);
   await session.shutdown(shutdownOptions);
 }
-var sessions;
+var SESSION_CATALOG_FILENAME = "session-catalog.json", SESSION_CATALOG_MAX_ENTRIES = 64, sessions;
 var init_claude_stream_json = __esm(() => {
   sessions = new Map;
 });
@@ -10435,7 +10514,7 @@ function buildInvocationCollaborationContextPrompt(invocation) {
 
 // packages/runtime/src/broker-service.ts
 import { spawnSync } from "child_process";
-import { existsSync as existsSync9, mkdirSync as mkdirSync5, readFileSync as readFileSync5, rmSync as rmSync2, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync5, readFileSync as readFileSync6, rmSync as rmSync2, writeFileSync as writeFileSync5 } from "fs";
 import { homedir as homedir11 } from "os";
 import { basename as basename4, dirname as dirname10, join as join15, resolve as resolve5 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
@@ -10474,7 +10553,7 @@ function runtimePackageDir() {
   return resolve5(moduleDir, "..");
 }
 function isInstalledRuntimePackageDir(candidate) {
-  return existsSync9(join15(candidate, "package.json")) && existsSync9(join15(candidate, "bin", "openscout-runtime.mjs"));
+  return existsSync10(join15(candidate, "package.json")) && existsSync10(join15(candidate, "bin", "openscout-runtime.mjs"));
 }
 function findGlobalRuntimeDir() {
   const candidates = [
@@ -10505,7 +10584,7 @@ function findWorkspaceRuntimeDir(startDir) {
   let current = resolve5(startDir);
   while (true) {
     const candidate = join15(current, "packages", "runtime");
-    if (existsSync9(join15(candidate, "package.json")) && existsSync9(join15(candidate, "src"))) {
+    if (existsSync10(join15(candidate, "package.json")) && existsSync10(join15(candidate, "src"))) {
       return candidate;
     }
     const parent = dirname10(current);
@@ -10519,18 +10598,18 @@ function resolveBunExecutable2() {
   if (explicit && explicit.trim().length > 0) {
     return explicit;
   }
-  if (basename4(process.execPath).startsWith("bun") && existsSync9(process.execPath)) {
+  if (basename4(process.execPath).startsWith("bun") && existsSync10(process.execPath)) {
     return process.execPath;
   }
   const pathEntries = (process.env.PATH ?? "").split(":").filter(Boolean);
   for (const entry of pathEntries) {
     const candidate = join15(entry, "bun");
-    if (existsSync9(candidate)) {
+    if (existsSync10(candidate)) {
       return candidate;
     }
   }
   const homeBun = join15(homedir11(), ".bun", "bin", "bun");
-  if (existsSync9(homeBun)) {
+  if (existsSync10(homeBun)) {
     return homeBun;
   }
   return "bun";
@@ -10720,10 +10799,10 @@ function launchctlPath() {
   return "/bin/launchctl";
 }
 function readLogLines(path) {
-  if (!existsSync9(path)) {
+  if (!existsSync10(path)) {
     return [];
   }
-  return readFileSync5(path, "utf8").split(`
+  return readFileSync6(path, "utf8").split(`
 `).map((line) => line.trim()).filter(Boolean);
 }
 function isPackageScriptBanner(line) {
@@ -10820,7 +10899,7 @@ async function brokerServiceStatus(config = resolveBrokerServiceConfig()) {
   ensureServiceDirectories(config);
   const launchctl = inspectLaunchctl(config);
   const health = await fetchHealthSnapshot(config);
-  const installed = existsSync9(config.launchAgentPath);
+  const installed = existsSync10(config.launchAgentPath);
   const lastLogLine = health.reachable ? readLastLogLine([config.stdoutLogPath, config.stderrLogPath]) : readLastLogLine([config.stderrLogPath, config.stdoutLogPath]);
   return {
     label: config.label,
@@ -10882,7 +10961,7 @@ async function restartBrokerService(config = resolveBrokerServiceConfig()) {
 }
 async function uninstallBrokerService(config = resolveBrokerServiceConfig()) {
   await stopBrokerService(config);
-  if (existsSync9(config.launchAgentPath)) {
+  if (existsSync10(config.launchAgentPath)) {
     rmSync2(config.launchAgentPath, { force: true });
   }
   return brokerServiceStatus(config);
@@ -10975,6 +11054,7 @@ __export(exports_local_agents, {
   resolveLocalAgentIdentity: () => resolveLocalAgentIdentity,
   resolveLocalAgentByName: () => resolveLocalAgentByName,
   renderLocalAgentSystemPromptTemplate: () => renderLocalAgentSystemPromptTemplate,
+  normalizeLocalAgentSystemPrompt: () => normalizeLocalAgentSystemPrompt,
   loadRegisteredLocalAgentBindings: () => loadRegisteredLocalAgentBindings,
   listLocalAgents: () => listLocalAgents,
   isLocalAgentSessionAlive: () => isLocalAgentSessionAlive,
@@ -10998,7 +11078,7 @@ __export(exports_local_agents, {
 });
 import { randomUUID as randomUUID2 } from "crypto";
 import { execFileSync as execFileSync2, execSync } from "child_process";
-import { existsSync as existsSync10, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync7 } from "fs";
 import { mkdir as mkdir6, rm as rm5, stat as stat4, writeFile as writeFile6 } from "fs/promises";
 import { basename as basename5, dirname as dirname11, join as join16, resolve as resolve6 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
@@ -11011,10 +11091,10 @@ function resolveProjectsRoot(projectPath) {
   }
   try {
     const supportPaths = resolveOpenScoutSupportPaths();
-    if (!existsSync10(supportPaths.settingsPath)) {
+    if (!existsSync11(supportPaths.settingsPath)) {
       return dirname11(projectPath);
     }
-    const raw2 = JSON.parse(readFileSync6(supportPaths.settingsPath, "utf8"));
+    const raw2 = JSON.parse(readFileSync7(supportPaths.settingsPath, "utf8"));
     const workspaceRoot = raw2.discovery?.workspaceRoots?.find((entry) => typeof entry === "string" && entry.trim().length > 0);
     return workspaceRoot ? resolve6(workspaceRoot) : dirname11(projectPath);
   } catch {
@@ -11030,8 +11110,14 @@ function nowSeconds2() {
 function normalizeBrokerTimestamp(value) {
   return value > 10000000000 ? Math.floor(value / 1000) : value;
 }
+function scoutCliPath() {
+  return join16(OPENSCOUT_REPO_ROOT, "packages", "cli", "bin", "scout.mjs");
+}
+function legacyNodeBrokerRelayCommand() {
+  return `node ${JSON.stringify(scoutCliPath())}`;
+}
 function brokerRelayCommand() {
-  return `node ${JSON.stringify(join16(OPENSCOUT_REPO_ROOT, "packages", "cli", "bin", "scout.mjs"))}`;
+  return `bun ${JSON.stringify(scoutCliPath())}`;
 }
 function sleep3(ms) {
   return new Promise((resolve7) => setTimeout(resolve7, ms));
@@ -11053,7 +11139,7 @@ function resolveScoutSkillPath() {
     join16(process.env.HOME ?? "", ".agents", "skills", "relay-agent-comms", "SKILL.md")
   ];
   for (const path of candidatePaths) {
-    if (existsSync10(path)) {
+    if (existsSync11(path)) {
       return path;
     }
   }
@@ -11249,7 +11335,7 @@ function buildLegacyBrokerBackedRelayPrompt(agentId, projectName, projectPath, r
 function legacyLocalAgentSystemPromptCandidates(agentId, projectName, projectPath) {
   const relayHub = resolveRelayHub();
   const brokerUrl = resolveBrokerUrl();
-  const relayCommandBases = ["openscout relay", brokerRelayCommand()];
+  const relayCommandBases = ["openscout relay", brokerRelayCommand(), legacyNodeBrokerRelayCommand()];
   const projectPathCandidates = projectPath.endsWith("/") ? [projectPath, projectPath.slice(0, -1)] : [projectPath, `${projectPath}/`];
   const candidates = new Set;
   for (const pathCandidate of projectPathCandidates) {
@@ -11260,12 +11346,28 @@ function legacyLocalAgentSystemPromptCandidates(agentId, projectName, projectPat
   }
   return Array.from(candidates);
 }
+function generatedLocalAgentSystemPromptCandidates(agentId, projectName, projectPath) {
+  const baseContext = buildLocalAgentTemplateContext(agentId, projectName, projectPath);
+  const relayCommands = [brokerRelayCommand(), legacyNodeBrokerRelayCommand()];
+  const transportModes = [undefined, "codex_app_server", "claude_stream_json"];
+  const candidates = new Set;
+  for (const relayCommand of relayCommands) {
+    const context = {
+      ...baseContext,
+      relayCommand
+    };
+    for (const transport of transportModes) {
+      candidates.add(renderLocalAgentSystemPromptTemplate(buildLocalAgentSystemPromptTemplate(), context, transport ? { transport } : {}));
+    }
+  }
+  return Array.from(candidates);
+}
 function normalizeLocalAgentSystemPrompt(agentId, projectName, projectPath, systemPrompt) {
   const trimmed = systemPrompt?.trim();
   if (!trimmed) {
     return;
   }
-  if (legacyLocalAgentSystemPromptCandidates(agentId, projectName, projectPath).includes(trimmed)) {
+  if (legacyLocalAgentSystemPromptCandidates(agentId, projectName, projectPath).includes(trimmed) || generatedLocalAgentSystemPromptCandidates(agentId, projectName, projectPath).includes(trimmed)) {
     return;
   }
   return trimmed;
@@ -11617,11 +11719,13 @@ async function getLocalAgentEndpointSessionSnapshot(endpoint) {
 async function ensureLocalSessionEndpointOnline(endpoint) {
   if (endpoint.transport === "codex_app_server") {
     await ensureCodexAppServerAgentOnline(buildCodexEndpointSessionOptions(endpoint));
-    return;
+    return {};
   }
   if (endpoint.transport === "claude_stream_json") {
-    await ensureClaudeStreamJsonAgentOnline(buildClaudeEndpointSessionOptions(endpoint));
+    const result = await ensureClaudeStreamJsonAgentOnline(buildClaudeEndpointSessionOptions(endpoint));
+    return { externalSessionId: result.sessionId };
   }
+  return {};
 }
 async function shutdownLocalSessionEndpoint(endpoint) {
   if (endpoint.transport === "codex_app_server") {
@@ -12059,7 +12163,7 @@ async function ensureLocalAgentOnline(agentName, record) {
     await new Promise((resolve7) => setTimeout(resolve7, 100));
   }
   if (!isLocalAgentSessionAlive(normalizedRecord.tmuxSession)) {
-    const stderrTail = existsSync10(stderrLogFile) ? readFileSync6(stderrLogFile, "utf8").trim().split(/\r?\n/).slice(-10).join(`
+    const stderrTail = existsSync11(stderrLogFile) ? readFileSync7(stderrLogFile, "utf8").trim().split(/\r?\n/).slice(-10).join(`
 `).trim() : "";
     throw new Error(stderrTail ? `Relay agent ${agentName} failed to stay online:
 ${stderrTail}` : `Relay agent ${agentName} failed to stay online.`);
@@ -12427,6 +12531,29 @@ async function restartAllLocalAgents(options = {}) {
   }));
   return restarted.filter((agent) => Boolean(agent));
 }
+function readPersistedClaudeSessionId(agentName) {
+  try {
+    const runtimeDir = relayAgentRuntimeDirectory(agentName);
+    const catalogPath = join16(runtimeDir, "session-catalog.json");
+    if (existsSync11(catalogPath)) {
+      const raw2 = readFileSync7(catalogPath, "utf8").trim();
+      if (raw2) {
+        const catalog = JSON.parse(raw2);
+        if (typeof catalog.activeSessionId === "string" && catalog.activeSessionId.trim()) {
+          return catalog.activeSessionId.trim();
+        }
+      }
+    }
+    const legacyPath = join16(runtimeDir, "claude-session-id.txt");
+    if (existsSync11(legacyPath)) {
+      const value = readFileSync7(legacyPath, "utf8").trim();
+      return value || null;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
 function buildLocalAgentBinding(agentId, record, alive, nodeId, source) {
   const normalizedRecord = normalizeLocalAgentRecord(agentId, record);
   const definitionId = normalizedRecord.definitionId ?? agentId;
@@ -12434,6 +12561,7 @@ function buildLocalAgentBinding(agentId, record, alive, nodeId, source) {
   const projectRoot = normalizedRecord.projectRoot ?? normalizedRecord.cwd;
   const instance = buildRelayAgentInstance(definitionId, projectRoot);
   const actorId = instance.id;
+  const externalSessionId = normalizedRecord.transport === "claude_stream_json" ? readPersistedClaudeSessionId(definitionId) : null;
   return {
     actor: {
       id: actorId,
@@ -12511,7 +12639,8 @@ function buildLocalAgentBinding(agentId, record, alive, nodeId, source) {
         selector: instance.selector,
         nodeQualifier: instance.nodeQualifier,
         workspaceQualifier: instance.workspaceQualifier,
-        branch: instance.branch
+        branch: instance.branch,
+        ...externalSessionId ? { externalSessionId } : {}
       }
     }
   };
@@ -12711,12 +12840,12 @@ var init_local_agents = __esm(async () => {
 });
 
 // packages/web/server/index.ts
-import { existsSync as existsSync14 } from "fs";
+import { existsSync as existsSync15 } from "fs";
 import { dirname as dirname13, join as join21, resolve as resolve10 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
 
 // packages/web/server/create-openscout-web-server.ts
-import { existsSync as existsSync12, rmSync as rmSync3 } from "fs";
+import { existsSync as existsSync14, rmSync as rmSync3 } from "fs";
 import { dirname as dirname12, resolve as resolve9 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 
@@ -14987,94 +15116,6 @@ async function controlScoutWebPairingService(action, currentDirectory) {
   });
 }
 
-// node_modules/.bun/hono@4.12.10/node_modules/hono/dist/middleware/cors/index.js
-var cors = (options) => {
-  const defaults = {
-    origin: "*",
-    allowMethods: ["GET", "HEAD", "PUT", "POST", "DELETE", "PATCH"],
-    allowHeaders: [],
-    exposeHeaders: []
-  };
-  const opts = {
-    ...defaults,
-    ...options
-  };
-  const findAllowOrigin = ((optsOrigin) => {
-    if (typeof optsOrigin === "string") {
-      if (optsOrigin === "*") {
-        if (opts.credentials) {
-          return (origin) => origin || null;
-        }
-        return () => optsOrigin;
-      } else {
-        return (origin) => optsOrigin === origin ? origin : null;
-      }
-    } else if (typeof optsOrigin === "function") {
-      return optsOrigin;
-    } else {
-      return (origin) => optsOrigin.includes(origin) ? origin : null;
-    }
-  })(opts.origin);
-  const findAllowMethods = ((optsAllowMethods) => {
-    if (typeof optsAllowMethods === "function") {
-      return optsAllowMethods;
-    } else if (Array.isArray(optsAllowMethods)) {
-      return () => optsAllowMethods;
-    } else {
-      return () => [];
-    }
-  })(opts.allowMethods);
-  return async function cors2(c, next) {
-    function set(key, value) {
-      c.res.headers.set(key, value);
-    }
-    const allowOrigin = await findAllowOrigin(c.req.header("origin") || "", c);
-    if (allowOrigin) {
-      set("Access-Control-Allow-Origin", allowOrigin);
-    }
-    if (opts.credentials) {
-      set("Access-Control-Allow-Credentials", "true");
-    }
-    if (opts.exposeHeaders?.length) {
-      set("Access-Control-Expose-Headers", opts.exposeHeaders.join(","));
-    }
-    if (c.req.method === "OPTIONS") {
-      if (opts.origin !== "*" || opts.credentials) {
-        set("Vary", "Origin");
-      }
-      if (opts.maxAge != null) {
-        set("Access-Control-Max-Age", opts.maxAge.toString());
-      }
-      const allowMethods = await findAllowMethods(c.req.header("origin") || "", c);
-      if (allowMethods.length) {
-        set("Access-Control-Allow-Methods", allowMethods.join(","));
-      }
-      let headers = opts.allowHeaders;
-      if (!headers?.length) {
-        const requestHeaders = c.req.header("Access-Control-Request-Headers");
-        if (requestHeaders) {
-          headers = requestHeaders.split(/\s*,\s*/);
-        }
-      }
-      if (headers?.length) {
-        set("Access-Control-Allow-Headers", headers.join(","));
-        c.res.headers.append("Vary", "Access-Control-Request-Headers");
-      }
-      c.res.headers.delete("Content-Length");
-      c.res.headers.delete("Content-Type");
-      return new Response(null, {
-        headers: c.res.headers,
-        status: 204,
-        statusText: "No Content"
-      });
-    }
-    await next();
-    if (opts.origin !== "*" || opts.credentials) {
-      c.header("Vary", "Origin", { append: true });
-    }
-  };
-};
-
 // node_modules/.bun/hono@4.12.10/node_modules/hono/dist/adapter/bun/serve-static.js
 import { stat as stat3 } from "fs/promises";
 import { join as join10 } from "path";
@@ -15347,6 +15388,40 @@ var upgradeWebSocket = defineWebSocketHelper((c, events2) => {
 });
 
 // packages/web/server/server-core.ts
+var LOOPBACK_IPV4_HOST_PATTERN = /^127(?:\.\d{1,3}){3}$/;
+function normalizeHostname(hostname2) {
+  const trimmed = hostname2.trim().toLowerCase();
+  if (trimmed.startsWith("[") && trimmed.endsWith("]")) {
+    return trimmed.slice(1, -1);
+  }
+  return trimmed;
+}
+function isTrustedLoopbackHostname(hostname2) {
+  const normalized = normalizeHostname(hostname2);
+  return normalized === "localhost" || normalized.endsWith(".localhost") || normalized === "::1" || LOOPBACK_IPV4_HOST_PATTERN.test(normalized);
+}
+function isTrustedApiRequest(c) {
+  const requestUrl = new URL(c.req.url);
+  if (!isTrustedLoopbackHostname(requestUrl.hostname)) {
+    return false;
+  }
+  const origin = c.req.header("origin");
+  if (origin) {
+    try {
+      const originUrl = new URL(origin);
+      if (!isTrustedLoopbackHostname(originUrl.hostname) || originUrl.origin !== requestUrl.origin) {
+        return false;
+      }
+    } catch {
+      return false;
+    }
+  }
+  const fetchSite = c.req.header("sec-fetch-site")?.trim().toLowerCase();
+  if (fetchSite && fetchSite !== "same-origin" && fetchSite !== "same-site" && fetchSite !== "none") {
+    return false;
+  }
+  return true;
+}
 function createCachedSnapshot(load, ttlMs) {
   let inflight = null;
   let cached = null;
@@ -15388,8 +15463,12 @@ function createCachedSnapshot(load, ttlMs) {
   };
 }
 function installScoutApiMiddleware(app, label = "api") {
-  app.use("/*", cors());
   app.use("/api/*", async (c, next) => {
+    if (!isTrustedApiRequest(c)) {
+      return c.json({ error: "forbidden" }, 403);
+    }
+    c.header("Cross-Origin-Resource-Policy", "same-origin");
+    c.header("X-Content-Type-Options", "nosniff");
     try {
       await next();
     } catch (error) {
@@ -15537,19 +15616,15 @@ function resolveDbPath() {
   return join12(controlHome, "control-plane.sqlite");
 }
 var _db = null;
-var _dbOpenedAt = 0;
-var DB_REOPEN_MS = 2000;
+var DB_BUSY_TIMEOUT_MS = 250;
+function configureReadonlyDb(db) {
+  db.exec(`PRAGMA busy_timeout = ${DB_BUSY_TIMEOUT_MS}`);
+  db.exec("PRAGMA query_only = ON");
+}
 function db() {
-  const now = Date.now();
-  if (_db && now - _dbOpenedAt > DB_REOPEN_MS) {
-    _db.close();
-    _db = null;
-  }
   if (!_db) {
     _db = new Database(resolveDbPath(), { readonly: true });
-    _db.exec("PRAGMA busy_timeout = 5000");
-    _db.exec("PRAGMA journal_mode = WAL");
-    _dbOpenedAt = now;
+    configureReadonlyDb(_db);
   }
   return _db;
 }
@@ -15586,7 +15661,7 @@ function resolveHarnessSessionId(transport, endpointSessionId, metadata) {
     return metadataString(metadata, "threadId") ?? endpointSessionId;
   }
   if (transport === "claude_stream_json") {
-    return endpointSessionId ?? metadataString(metadata, "externalSessionId");
+    return metadataString(metadata, "externalSessionId") ?? endpointSessionId;
   }
   return null;
 }
@@ -15612,6 +15687,22 @@ function coerceNumber(value) {
   }
   return null;
 }
+function sqlJoinClauses(clauses, operator = "AND") {
+  return clauses.filter((clause) => Boolean(clause)).join(` ${operator} `);
+}
+function sqlWhereClause(clauses, operator = "AND") {
+  const joined = sqlJoinClauses(clauses, operator);
+  return joined ? `WHERE ${joined}` : "";
+}
+function sqlPlaceholders(count) {
+  return Array.from({ length: count }, () => "?").join(", ");
+}
+function sqlQuoteLiteral(value) {
+  return `'${value.replaceAll("'", "''")}'`;
+}
+function sqlStringList(values) {
+  return `(${values.map(sqlQuoteLiteral).join(",")})`;
+}
 var LATEST_AGENT_ENDPOINT_JOIN = `LEFT JOIN agent_endpoints ep ON ep.id = (
   SELECT ep2.id
   FROM agent_endpoints ep2
@@ -15639,6 +15730,8 @@ function normalizeTimestampMs(value) {
   }
   return numeric < 1000000000000 ? numeric * 1000 : numeric;
 }
+var ACTIVE_FLIGHT_STATES_SQL = sqlStringList(["running", "waking", "waiting", "queued"]);
+var ACTIVE_WORK_STATES_SQL = sqlStringList(["open", "working", "waiting", "review"]);
 function isDuplicateActivityFeedItem(previous, next) {
   if (!previous) {
     return false;
@@ -15835,10 +15928,10 @@ function queryActivity(limit = 60) {
 }
 function queryRecentMessages(limit = 80, opts) {
   const conversationIds = opts?.conversationId ? conversationIdAliases(opts.conversationId) : [];
-  const where = [
+  const where = sqlJoinClauses([
     transientBrokerWorkingStatusPredicate("m"),
-    conversationIds.length > 0 ? `m.conversation_id IN (${conversationIds.map(() => "?").join(", ")})` : null
-  ].filter(Boolean).join(" AND ");
+    conversationIds.length > 0 ? `m.conversation_id IN (${sqlPlaceholders(conversationIds.length)})` : null
+  ]);
   const rows = db().prepare(`SELECT
          m.id,
          m.conversation_id,
@@ -15873,14 +15966,13 @@ function queryRecentMessages(limit = 80, opts) {
   });
 }
 function queryFlights(opts) {
-  const activeStates = "('running','waking','waiting','queued')";
   const conversationIds = opts?.conversationId ? conversationIdAliases(opts.conversationId) : [];
-  const where = [
-    opts?.activeOnly ? `f.state IN ${activeStates}` : null,
+  const where = sqlJoinClauses([
+    opts?.activeOnly ? `f.state IN ${ACTIVE_FLIGHT_STATES_SQL}` : null,
     opts?.agentId ? `f.target_agent_id = ?` : null,
-    conversationIds.length > 0 ? `inv.conversation_id IN (${conversationIds.map(() => "?").join(", ")})` : null,
+    conversationIds.length > 0 ? `inv.conversation_id IN (${sqlPlaceholders(conversationIds.length)})` : null,
     opts?.collaborationRecordId ? `inv.collaboration_record_id = ?` : null
-  ].filter(Boolean).join(" AND ");
+  ]);
   const sql = `SELECT
     f.id,
     f.invocation_id,
@@ -15895,7 +15987,7 @@ function queryFlights(opts) {
   FROM flights f
   JOIN invocations inv ON inv.id = f.invocation_id
   LEFT JOIN actors ac ON ac.id = f.target_agent_id
-  ${where ? `WHERE ${where}` : ""}
+  ${sqlWhereClause([where])}
   ORDER BY f.started_at DESC NULLS LAST
   LIMIT 100`;
   const params = [];
@@ -15920,7 +16012,6 @@ function queryFlights(opts) {
   }));
 }
 function queryWorkItemById(id) {
-  const activeStates = "('open','working','waiting','review')";
   const sql = `SELECT
     cr.id,
     cr.title,
@@ -15943,7 +16034,7 @@ function queryWorkItemById(id) {
       FROM collaboration_records child
       WHERE child.parent_id = cr.id
         AND child.kind = 'work_item'
-        AND child.state IN ${activeStates}
+        AND child.state IN ${ACTIVE_WORK_STATES_SQL}
     ) AS active_child_work_count,
     (
       SELECT COUNT(*)
@@ -16131,12 +16222,11 @@ function queryWorkTimeline(workId) {
   return items.slice(0, 80);
 }
 function queryWorkItems(opts) {
-  const activeStates = "('open','working','waiting','review')";
-  const where = [
+  const where = sqlJoinClauses([
     "cr.kind = 'work_item'",
-    opts?.activeOnly !== false ? `cr.state IN ${activeStates}` : null,
+    opts?.activeOnly !== false ? `cr.state IN ${ACTIVE_WORK_STATES_SQL}` : null,
     opts?.agentId ? "(cr.owner_id = ? OR cr.next_move_owner_id = ?)" : null
-  ].filter(Boolean).join(" AND ");
+  ]);
   const sql = `SELECT
     cr.id,
     cr.title,
@@ -16156,7 +16246,7 @@ function queryWorkItems(opts) {
       FROM collaboration_records child
       WHERE child.parent_id = cr.id
         AND child.kind = 'work_item'
-        AND child.state IN ${activeStates}
+        AND child.state IN ${ACTIVE_WORK_STATES_SQL}
     ) AS active_child_work_count,
     (
       SELECT COUNT(*)
@@ -16234,7 +16324,7 @@ function queryWorkItems(opts) {
   FROM collaboration_records cr
   LEFT JOIN actors owner ON owner.id = cr.owner_id
   LEFT JOIN actors next ON next.id = cr.next_move_owner_id
-  ${where ? `WHERE ${where}` : ""}
+  ${sqlWhereClause([where])}
   ORDER BY sort_ts DESC, cr.updated_at DESC
   LIMIT ?`;
   const limit = opts?.limit ?? 50;
@@ -16565,7 +16655,7 @@ function queryFleetActivity(opts) {
     ai.session_id
   FROM activity_items ai
   LEFT JOIN actors ac ON ac.id = ai.actor_id
-  ${filters.length ? `WHERE ${filters.join(" OR ")}` : ""}
+  ${sqlWhereClause(filters, "OR")}
   ORDER BY ai.ts DESC
   LIMIT ?`;
   const rows = db().prepare(sql).all(...params, opts?.limit ?? 80);
@@ -16592,7 +16682,7 @@ function fleetStatusLabel(status) {
   }
 }
 function queryFleetAskRows(requesterIds, limit) {
-  const requesterClause = requesterIds.map(() => "?").join(", ");
+  const requesterClause = sqlPlaceholders(requesterIds.length);
   return db().prepare(`SELECT
        inv.id AS invocation_id,
        inv.requester_id,
@@ -16689,7 +16779,7 @@ function projectFleetAsk(row, requesterIdSet) {
   };
 }
 function queryFleetAttentionRows(requesterIds, limit) {
-  const requesterClause = requesterIds.map(() => "?").join(", ");
+  const requesterClause = sqlPlaceholders(requesterIds.length);
   return db().prepare(`SELECT
        cr.kind AS record_kind,
        cr.id AS record_id,
@@ -16749,125 +16839,67 @@ function queryFleet(opts) {
     activity
   };
 }
-var WINDOW_TIERS = [
-  { ms: 30 * 60000, label: "30m" },
-  { ms: 60 * 60000, label: "1h" },
-  { ms: 6 * 60 * 60000, label: "6h" },
-  { ms: 24 * 60 * 60000, label: "24h" },
-  { ms: 7 * 24 * 60 * 60000, label: "7d" }
-];
-var MIN_FILLED_BUCKETS = 3;
-var _sealedCounts = new Map;
-var _cachedTier = null;
-function queryHeartrate(numBuckets = 48) {
-  const nowMs = Date.now();
-  let chosenTier = WINDOW_TIERS[WINDOW_TIERS.length - 1];
-  for (const tier of WINDOW_TIERS) {
-    const bucketMs2 = tier.ms / numBuckets;
-    const currentBucketStart2 = Math.floor(nowMs / bucketMs2) * bucketMs2;
-    const alignedStart2 = currentBucketStart2 - (numBuckets - 1) * bucketMs2;
-    if (_cachedTier === tier.label) {
-      let sealedHits = 0;
-      let filledSealed = 0;
-      for (let i = 0;i < numBuckets - 1; i++) {
-        const key = String(alignedStart2 + i * bucketMs2);
-        if (_sealedCounts.has(key)) {
-          sealedHits++;
-          if (_sealedCounts.get(key) > 0)
-            filledSealed++;
-        }
-      }
-      if (sealedHits === numBuckets - 1 && filledSealed >= MIN_FILLED_BUCKETS) {
-        chosenTier = tier;
-        break;
-      }
-    }
-    const rows2 = db().prepare(`SELECT ts FROM activity_items WHERE ts >= ? ORDER BY ts ASC`).all(alignedStart2);
-    const counts2 = new Array(numBuckets).fill(0);
-    for (const row of rows2) {
-      const ms = row.ts < 1000000000000 ? row.ts * 1000 : row.ts;
-      if (ms < alignedStart2)
+var HEARTRATE_WINDOW_MS = 7 * 24 * 60 * 60000;
+var DEFAULT_HEARTRATE_BUCKETS = 56;
+var SQLITE_MILLISECONDS_THRESHOLD = 1000000000000;
+function normalizeActivityTimestampMs(ts) {
+  return ts < SQLITE_MILLISECONDS_THRESHOLD ? ts * 1000 : ts;
+}
+function smoothHeartrateCounts(counts) {
+  const energy = counts.map((count) => Math.sqrt(count));
+  const weights = [0.56, 0.28, 0.11, 0.05];
+  return energy.map((_, index) => {
+    let total = 0;
+    let weightTotal = 0;
+    for (let offset = -3;offset <= 3; offset++) {
+      const nextIndex = index + offset;
+      if (nextIndex < 0 || nextIndex >= energy.length)
         continue;
-      const idx = Math.min(numBuckets - 1, Math.floor((ms - alignedStart2) / bucketMs2));
-      if (idx >= 0)
-        counts2[idx]++;
-    }
-    const filled = counts2.filter((c) => c > 0).length;
-    if (filled >= MIN_FILLED_BUCKETS) {
-      if (_cachedTier !== tier.label) {
-        _sealedCounts.clear();
-        _cachedTier = tier.label;
-      }
-      for (let i = 0;i < numBuckets - 1; i++) {
-        _sealedCounts.set(String(alignedStart2 + i * bucketMs2), counts2[i]);
-      }
-      const peak2 = Math.max(1, ...counts2);
-      return {
-        windowLabel: tier.label,
-        buckets: counts2.map((count, i) => ({
-          ts: Math.round(alignedStart2 + i * bucketMs2),
-          count,
-          value: count / peak2
-        }))
-      };
+      const weight = weights[Math.abs(offset)] ?? 0;
+      total += energy[nextIndex] * weight;
+      weightTotal += weight;
     }
+    return weightTotal > 0 ? total / weightTotal : 0;
+  });
+}
+function formatHeartrateBucketLabel(bucketMs) {
+  const minutes = Math.round(bucketMs / 60000);
+  if (minutes % (24 * 60) === 0) {
+    return `${minutes / (24 * 60)}d buckets`;
+  }
+  if (minutes % 60 === 0) {
+    return `${minutes / 60}h buckets`;
   }
-  const bucketMs = chosenTier.ms / numBuckets;
+  return `${minutes}m buckets`;
+}
+function queryHeartrate(numBuckets = DEFAULT_HEARTRATE_BUCKETS, nowMs = Date.now()) {
+  const bucketMs = HEARTRATE_WINDOW_MS / numBuckets;
   const currentBucketStart = Math.floor(nowMs / bucketMs) * bucketMs;
   const alignedStart = currentBucketStart - (numBuckets - 1) * bucketMs;
-  if (_cachedTier === chosenTier.label) {
-    const counts2 = new Array(numBuckets).fill(0);
-    let allSealed = true;
-    for (let i = 0;i < numBuckets - 1; i++) {
-      const key = String(alignedStart + i * bucketMs);
-      if (_sealedCounts.has(key)) {
-        counts2[i] = _sealedCounts.get(key);
-      } else {
-        allSealed = false;
-        break;
-      }
-    }
-    if (allSealed) {
-      const liveStart = alignedStart + (numBuckets - 1) * bucketMs;
-      const row = db().prepare(`SELECT COUNT(*) AS c FROM activity_items WHERE ts >= ?`).get(liveStart);
-      counts2[numBuckets - 1] = row.c;
-      const peak2 = Math.max(1, ...counts2);
-      return {
-        windowLabel: chosenTier.label,
-        buckets: counts2.map((count, i) => ({
-          ts: Math.round(alignedStart + i * bucketMs),
-          count,
-          value: count / peak2
-        }))
-      };
-    }
-  }
-  _sealedCounts.clear();
-  _cachedTier = chosenTier.label;
-  const rows = db().prepare(`SELECT ts FROM activity_items WHERE ts >= ? ORDER BY ts ASC`).all(alignedStart);
+  const alignedStartSeconds = Math.floor(alignedStart / 1000);
+  const rows = db().prepare(`SELECT ts
+       FROM activity_items
+       WHERE ts >= ?1
+          OR (ts < ?2 AND ts >= ?3)
+       ORDER BY ts ASC`).all(alignedStart, SQLITE_MILLISECONDS_THRESHOLD, alignedStartSeconds);
   const counts = new Array(numBuckets).fill(0);
   for (const row of rows) {
-    const ms = row.ts < 1000000000000 ? row.ts * 1000 : row.ts;
-    if (ms < alignedStart)
+    const ms = normalizeActivityTimestampMs(row.ts);
+    if (ms < alignedStart || ms > nowMs)
       continue;
     const idx = Math.min(numBuckets - 1, Math.floor((ms - alignedStart) / bucketMs));
     if (idx >= 0)
       counts[idx]++;
   }
-  for (let i = 0;i < numBuckets - 1; i++) {
-    _sealedCounts.set(String(alignedStart + i * bucketMs), counts[i]);
-  }
-  for (const key of _sealedCounts.keys()) {
-    if (Number(key) < alignedStart)
-      _sealedCounts.delete(key);
-  }
-  const peak = Math.max(1, ...counts);
+  const smoothed = smoothHeartrateCounts(counts);
+  const peak = Math.max(1, ...smoothed);
   return {
-    windowLabel: chosenTier.label,
+    windowLabel: "trailing 7d",
+    bucketLabel: formatHeartrateBucketLabel(bucketMs),
     buckets: counts.map((count, i) => ({
       ts: Math.round(alignedStart + i * bucketMs),
       count,
-      value: count / peak
+      value: smoothed[i] / peak
     }))
   };
 }
@@ -17796,7 +17828,7 @@ function whoEntryState(endpoints, registrationKind) {
 
 // packages/web/server/core/observe/service.ts
 init_src();
-import { existsSync as existsSync11, readFileSync as readFileSync7, statSync as statSync4 } from "fs";
+import { existsSync as existsSync12, readdirSync as readdirSync2, readFileSync as readFileSync8, statSync as statSync4 } from "fs";
 import { homedir as homedir12 } from "os";
 import { join as join18, resolve as resolve8 } from "path";
 
@@ -19784,6 +19816,9 @@ function parseSelf(status) {
     magicDnsSuffix: status.CurrentTailnet?.MagicDNSSuffix
   };
 }
+function isBackendRunning(status) {
+  return (status.BackendState ?? "").trim().toLowerCase() === "running";
+}
 async function readStatusJsonFromFile(filePath) {
   const raw2 = await readFile7(filePath, "utf8");
   return parseStatusJson(raw2);
@@ -19801,19 +19836,25 @@ async function readStatusJson() {
     return null;
   }
 }
-async function readTailscalePeers() {
-  const status = await readStatusJson();
-  if (!status) {
-    return [];
+async function readTailscaleSelf() {
+  const summary = await readTailscaleStatusSummary();
+  if (!summary) {
+    return null;
   }
-  return parsePeers(status);
+  return summary.self;
 }
-async function readTailscaleSelf() {
+async function readTailscaleStatusSummary() {
   const status = await readStatusJson();
   if (!status) {
     return null;
   }
-  return parseSelf(status);
+  return {
+    backendState: status.BackendState ?? null,
+    running: isBackendRunning(status),
+    health: status.Health ?? [],
+    peers: parsePeers(status),
+    self: parseSelf(status)
+  };
 }
 
 // packages/runtime/src/index.ts
@@ -20071,6 +20112,9 @@ class ThreadEventPlane {
 // packages/runtime/src/mobile-push.ts
 init_support_paths();
 // packages/web/server/core/observe/service.ts
+var HISTORY_SNAPSHOT_CACHE_LIMIT = 128;
+var historySnapshotCache = new Map;
+var OBSERVE_SUMMARY_TAIL_SIZE = 8;
 function activeEndpoint(snapshot, agentId) {
   const candidates = Object.values(snapshot.endpoints ?? {}).filter((endpoint) => endpoint.agentId === agentId);
   const rank = (state) => {
@@ -20107,11 +20151,37 @@ function encodeClaudeProjectsSlug2(absolutePath) {
 }
 function resolveClaudeHistoryPath(cwd, sessionId) {
   const normalizedCwd = expandHome(cwd)?.trim();
+  if (!normalizedCwd) {
+    return null;
+  }
+  const projectDir = join18(homedir12(), ".claude", "projects", encodeClaudeProjectsSlug2(normalizedCwd));
   const normalizedSessionId = sessionId?.trim().replace(/\.jsonl$/u, "") || "";
-  if (!normalizedCwd || !normalizedSessionId) {
+  if (normalizedSessionId) {
+    const exactPath = join18(projectDir, `${normalizedSessionId}.jsonl`);
+    if (existsSync12(exactPath)) {
+      return exactPath;
+    }
+  }
+  return findMostRecentJsonl(projectDir);
+}
+function findMostRecentJsonl(dir) {
+  if (!existsSync12(dir))
+    return null;
+  try {
+    let best = null;
+    for (const entry of readdirSync2(dir)) {
+      if (!entry.endsWith(".jsonl"))
+        continue;
+      const full = join18(dir, entry);
+      const st = statSync4(full);
+      if (!best || st.mtimeMs > best.mtime) {
+        best = { path: full, mtime: st.mtimeMs };
+      }
+    }
+    return best?.path ?? null;
+  } catch {
     return null;
   }
-  return join18(homedir12(), ".claude", "projects", encodeClaudeProjectsSlug2(normalizedCwd), `${normalizedSessionId}.jsonl`);
 }
 function historyAdapterAlias(value) {
   const normalized = value?.trim().toLowerCase();
@@ -20175,20 +20245,43 @@ function readHistorySnapshot(candidate) {
   if (!supportsHistorySessionSnapshotForPath(candidate.path, candidate.adapterType)) {
     return null;
   }
-  if (!existsSync11(candidate.path)) {
+  if (!existsSync12(candidate.path)) {
     return null;
   }
   const stat5 = statSync4(candidate.path);
+  const cached = historySnapshotCache.get(candidate.path);
+  if (cached && cached.adapterType === candidate.adapterType && cached.mtimeMs === stat5.mtimeMs && cached.size === stat5.size) {
+    return {
+      historyPath: cached.historyPath,
+      snapshot: cached.snapshot,
+      timedEvents: cached.timedEvents
+    };
+  }
   const replay = createHistorySessionSnapshot({
     path: candidate.path,
-    content: readFileSync7(candidate.path, "utf8"),
+    content: readFileSync8(candidate.path, "utf8"),
     adapterType: candidate.adapterType,
     baseTimestampMs: stat5.mtimeMs
   });
-  return {
+  const nextEntry = {
     historyPath: candidate.path,
     snapshot: replay.snapshot,
-    timedEvents: normalizeTimedEvents(replay.events)
+    timedEvents: normalizeTimedEvents(replay.events),
+    adapterType: candidate.adapterType,
+    mtimeMs: stat5.mtimeMs,
+    size: stat5.size
+  };
+  historySnapshotCache.set(candidate.path, nextEntry);
+  if (historySnapshotCache.size > HISTORY_SNAPSHOT_CACHE_LIMIT) {
+    const oldestKey = historySnapshotCache.keys().next().value;
+    if (typeof oldestKey === "string") {
+      historySnapshotCache.delete(oldestKey);
+    }
+  }
+  return {
+    historyPath: nextEntry.historyPath,
+    snapshot: nextEntry.snapshot,
+    timedEvents: nextEntry.timedEvents
   };
 }
 async function readLiveSnapshot(endpoint) {
@@ -20570,8 +20663,7 @@ function unavailableObserveData(agent) {
     live: false
   };
 }
-async function resolveSnapshotSource(agent) {
-  const broker2 = await loadScoutBrokerContext();
+async function resolveSnapshotSource(agent, broker2) {
   const endpoint = broker2 ? activeEndpoint(broker2.snapshot, agent.id) : null;
   const liveSnapshot = await readLiveSnapshot(endpoint);
   const live = Boolean(liveSnapshot && (liveSnapshot.currentTurnId || liveSnapshot.session.status === "active"));
@@ -20615,15 +20707,11 @@ async function resolveSnapshotSource(agent) {
     sessionId: null
   };
 }
-async function loadAgentObservePayload(agentId) {
-  const agent = queryAgents(200).find((entry) => entry.id === agentId) ?? null;
-  if (!agent) {
-    return null;
-  }
-  const source = await resolveSnapshotSource(agent);
+async function buildAgentObservePayload(agent, broker2) {
+  const source = await resolveSnapshotSource(agent, broker2);
   if (source.source === "unavailable") {
     return {
-      agentId,
+      agentId: agent.id,
       source: "unavailable",
       fidelity: "synthetic",
       historyPath: null,
@@ -20634,7 +20722,7 @@ async function loadAgentObservePayload(agentId) {
   }
   const fidelity = source.timedEvents.length > 0 ? "timestamped" : "synthetic";
   return {
-    agentId,
+    agentId: agent.id,
     source: source.source,
     fidelity,
     historyPath: source.historyPath,
@@ -20643,9 +20731,39 @@ async function loadAgentObservePayload(agentId) {
     data: buildObserveDataFromSnapshot(source.snapshot, source.timedEvents, source.live)
   };
 }
+async function loadAgentObservePayloadsInternal(agentIds) {
+  const agents = queryAgents(200);
+  const filteredAgents = agentIds && agentIds.length > 0 ? agents.filter((agent) => agentIds.includes(agent.id)) : agents;
+  if (filteredAgents.length === 0) {
+    return [];
+  }
+  const broker2 = await loadScoutBrokerContext();
+  return await Promise.all(filteredAgents.map((agent) => buildAgentObservePayload(agent, broker2)));
+}
+function summarizeAgentObservePayload(payload) {
+  return {
+    ...payload,
+    data: {
+      ...payload.data,
+      events: payload.data.events.slice(-OBSERVE_SUMMARY_TAIL_SIZE),
+      files: []
+    }
+  };
+}
+async function loadAgentObserveSummaries(agentIds) {
+  const payloads = await loadAgentObservePayloadsInternal(agentIds);
+  return payloads.map(summarizeAgentObservePayload);
+}
+async function loadAgentObservePayload(agentId) {
+  const payloads = await loadAgentObservePayloadsInternal([agentId]);
+  return payloads[0] ?? null;
+}
 
 // packages/web/server/core/mesh/service.ts
 await init_broker_service();
+import { execFile as execFile2 } from "child_process";
+import { promisify as promisify2 } from "util";
+var execFileAsync2 = promisify2(execFile2);
 function normalizeHost(host) {
   return host.trim().replace(/^\[/, "").replace(/\]$/, "").toLowerCase();
 }
@@ -20676,9 +20794,13 @@ function stripTrailingDot(value) {
   return trimmed.replace(/\.$/, "");
 }
 async function readTailscaleStatus() {
-  const peers = await readTailscalePeers();
+  const summary = await readTailscaleStatusSummary();
+  const peers = summary?.peers ?? [];
   return {
-    available: peers.length > 0,
+    available: summary !== null,
+    running: summary?.running ?? false,
+    backendState: summary?.backendState ?? null,
+    health: summary?.health ?? [],
     peers,
     onlineCount: peers.filter((p) => p.online).length
   };
@@ -20699,6 +20821,16 @@ function computeIssues(health, localNode, nodes, tailscale2) {
     });
     return issues;
   }
+  if (tailscale2.available && !tailscale2.running) {
+    issues.push({
+      code: "tailscale_stopped",
+      severity: "warning",
+      title: "Tailscale is stopped",
+      summary: "This machine can still show cached Tailnet peers, but the local Tailscale backend is not running, so the broker cannot reach them.",
+      action: "Start Tailscale on this machine, then refresh mesh discovery.",
+      actionCommand: null
+    });
+  }
   if (localNode?.advertiseScope === "local") {
     issues.push({
       code: "local_only",
@@ -20866,6 +20998,24 @@ async function announceMeshVisibility() {
   } catch {}
   return loadMeshStatus();
 }
+async function openTailscaleApp() {
+  if (process.platform !== "darwin") {
+    throw new Error("Opening Tailscale from Scout is only supported on macOS right now.");
+  }
+  try {
+    await execFileAsync2("open", ["-a", "Tailscale"]);
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    throw new Error(`Scout could not open Tailscale.app on this machine. ${detail}`);
+  }
+}
+async function controlTailscale(action) {
+  if (action === "open_app") {
+    await openTailscaleApp();
+    return loadMeshStatus();
+  }
+  throw new Error(`Unsupported Tailscale action: ${action}`);
+}
 
 // packages/web/server/runtime-summary.ts
 async function loadOpenScoutWebShellState() {
@@ -20902,598 +21052,266 @@ async function loadOpenScoutWebShellState() {
 
 // packages/web/server/create-openscout-web-server.ts
 init_setup();
-function parseOptionalPositiveInt(value, fallback) {
-  if (typeof value !== "string" || value.trim().length === 0) {
-    return fallback;
-  }
-  const parsed = Number.parseInt(value, 10);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+init_support_paths();
+init_claude_stream_json();
+init_harness_catalog();
+
+// ../hudson/packages/hudson-relay/src/relay/session.ts
+import { createRequire } from "module";
+import { execSync as execSync2 } from "child_process";
+import { existsSync as existsSync13, mkdirSync as mkdirSync6, writeFileSync as writeFileSync6 } from "fs";
+import { join as join19, dirname as pathDirname } from "path";
+var require2 = createRequire(import.meta.url);
+var pty = require2("node-pty");
+var DEFAULT_ORPHAN_TTL_MS = 30 * 60 * 1000;
+var MAX_BUFFER_SIZE = 512 * 1024;
+var sessions3 = new Map;
+function generateId() {
+  return Math.random().toString(36).slice(2, 10);
 }
-function inferDirectTargetAgentId(conversationId, session, senderId) {
-  if (session?.kind === "direct") {
-    if (session.agentId) {
-      return session.agentId;
-    }
-    const participants = session.participantIds.filter((participantId) => participantId.trim().length > 0);
-    if (participants.length === 2) {
-      const operatorCandidates = new Set([senderId.trim(), "operator"]);
-      const nonOperatorParticipants = participants.filter((participantId) => !operatorCandidates.has(participantId));
-      if (nonOperatorParticipants.length === 1) {
-        return nonOperatorParticipants[0] ?? null;
-      }
-      const localSessionParticipant = nonOperatorParticipants.find((participantId) => participantId.startsWith("local-session-agent-")) ?? participants.find((participantId) => participantId.startsWith("local-session-agent-"));
-      if (localSessionParticipant) {
-        return localSessionParticipant;
-      }
-      return participants[0] ?? null;
-    }
-  }
-  if (conversationId?.startsWith("dm.operator.")) {
-    const legacyAgentId = conversationId.slice("dm.operator.".length);
-    return legacyAgentId || null;
+function send(ws, data) {
+  if (ws.readyState === 1) {
+    ws.send(JSON.stringify(data));
   }
-  return null;
 }
-function inferDirectSenderId(_session, _fallbackSenderId, _directTargetAgentId) {
-  return "operator";
+function resolveCwd(raw2) {
+  const home = process.env.HOME || "/tmp";
+  const expanded = (raw2 || home).replace(/^~/, home);
+  if (existsSync13(expanded))
+    return expanded;
+  try {
+    mkdirSync6(expanded, { recursive: true });
+    console.log(`[relay] Created missing cwd: ${expanded}`);
+    return expanded;
+  } catch {
+    console.warn(`[relay] Could not create cwd ${expanded}, falling back to ${home}`);
+    return home;
+  }
 }
-function resolveConversationRouting(conversationId) {
-  const fallbackSenderId = "operator";
-  const session = conversationId ? querySessionById(conversationId) : null;
-  const directAgentId = inferDirectTargetAgentId(conversationId, session, fallbackSenderId);
-  const senderId = inferDirectSenderId(session, fallbackSenderId, directAgentId);
-  return { directAgentId, senderId };
+function findBin(name, envOverride) {
+  if (envOverride && process.env[envOverride])
+    return process.env[envOverride];
+  try {
+    return execSync2(`which ${name}`, { encoding: "utf8" }).trim() || null;
+  } catch {
+    return null;
+  }
 }
-function resolveBundledStaticClientRoot(moduleUrl = import.meta.url) {
-  return resolve9(dirname12(fileURLToPath7(moduleUrl)), "client");
+function findClaudeBin() {
+  return findBin("claude", "CLAUDE_BIN");
 }
-function resolveSourceStaticClientRoot(moduleUrl = import.meta.url) {
-  return resolve9(dirname12(fileURLToPath7(moduleUrl)), "../dist/client");
+function findPiBin() {
+  return findBin("pi", "PI_BIN");
 }
-function resolveStaticRoot(staticRoot) {
-  const configured = staticRoot?.trim();
-  if (configured) {
-    return configured;
-  }
-  const bundled = resolveBundledStaticClientRoot(import.meta.url);
-  if (existsSync12(resolve9(bundled, "index.html"))) {
-    return bundled;
+function tmuxSessionExists2(name) {
+  try {
+    execSync2(`tmux has-session -t ${name} 2>/dev/null`, { encoding: "utf8" });
+    return true;
+  } catch {
+    return false;
   }
-  return resolveSourceStaticClientRoot(import.meta.url);
 }
-async function loadPairingState(currentDirectory, refresh) {
-  return refresh ? refreshScoutWebPairingState(currentDirectory) : getScoutWebPairingState(currentDirectory);
+function bootstrapFiles(cwd, files, sessionId) {
+  for (const [relPath, content] of Object.entries(files)) {
+    const absPath = join19(cwd, relPath);
+    if (!existsSync13(absPath)) {
+      try {
+        const dir = pathDirname(absPath);
+        if (!existsSync13(dir))
+          mkdirSync6(dir, { recursive: true });
+        writeFileSync6(absPath, content, "utf-8");
+        console.log(`[relay] Session ${sessionId}: bootstrapped ${relPath}`);
+      } catch (err) {
+        console.warn(`[relay] Session ${sessionId}: failed to bootstrap ${relPath}:`, err);
+      }
+    }
+  }
 }
-async function createOpenScoutWebServer(options) {
-  const shellTtl = options.shellStateCacheTtlMs ?? 15000;
-  const currentDirectory = options.currentDirectory;
-  const app = new Hono2;
-  const shellStateCache = createCachedSnapshot(loadOpenScoutWebShellState, shellTtl);
-  installScoutApiMiddleware(app, "openscout-web api");
-  app.get("/api/health", (c) => c.json({
-    ok: true,
-    surface: "openscout-web",
-    currentDirectory
-  }));
-  app.get("/api/pairing-state", async (c) => c.json(await loadPairingState(currentDirectory, false)));
-  app.get("/api/pairing-state/refresh", async (c) => c.json(await loadPairingState(currentDirectory, true)));
-  app.post("/api/pairing/control", async (c) => {
-    const { action } = await c.req.json();
-    const result = await controlScoutWebPairingService(action, currentDirectory);
-    shellStateCache.invalidate();
-    return c.json(result);
+function spawnTmuxSession(tmuxName, cols, rows, cwd, claudeBin, claudeArgs, env) {
+  const exists = tmuxSessionExists2(tmuxName);
+  if (!exists) {
+    const shellCmd = [claudeBin, ...claudeArgs].map((a) => a.includes(" ") ? `'${a}'` : a).join(" ");
+    execSync2(`tmux new-session -d -s ${tmuxName} -x ${cols} -y ${rows} -c '${cwd}' '${shellCmd}'`, { env });
+    console.log(`[relay] Created tmux session: ${tmuxName}`);
+  } else {
+    try {
+      execSync2(`tmux resize-window -t ${tmuxName} -x ${cols} -y ${rows} 2>/dev/null`);
+    } catch {}
+    console.log(`[relay] Attaching to existing tmux session: ${tmuxName}`);
+  }
+  return pty.spawn("tmux", ["attach", "-t", tmuxName], {
+    name: "xterm-256color",
+    cols,
+    rows,
+    cwd,
+    env
   });
-  app.delete("/api/pairing/peers/:fingerprint", async (c) => {
-    const fingerprint = c.req.param("fingerprint");
-    const removed = removeScoutPairingTrustedPeer(fingerprint);
-    if (!removed) {
-      return c.json({ error: "Peer not found" }, 404);
+}
+function createSession(ws, msg) {
+  const id = generateId();
+  const cols = Math.max(msg.cols || 80, 20);
+  const rows = Math.max(msg.rows || 24, 4);
+  const backend = msg.backend || "pty";
+  const tmuxName = msg.tmuxSession || `hudson-${id}`;
+  const agent = msg.agent || "claude";
+  let agentBin;
+  if (agent === "pi") {
+    agentBin = findPiBin();
+    if (!agentBin) {
+      const reason = "pi CLI not found. Install it with: npm install -g @mariozechner/pi-coding-agent";
+      console.error(`[relay] Session ${id} failed: ${reason}`);
+      send(ws, { type: "session:error", error: reason });
+      return null;
     }
-    return c.json({ ok: true });
-  });
-  app.get("/api/shell-state", async (c) => c.json(await shellStateCache.get()));
-  app.get("/api/shell-state/refresh", async (c) => c.json(await shellStateCache.refresh()));
-  app.get("/api/agents", (c) => c.json(queryAgents()));
-  app.get("/api/agents/:id/observe", async (c) => {
-    const payload = await loadAgentObservePayload(c.req.param("id"));
-    return payload ? c.json(payload) : c.json({ error: "not found" }, 404);
-  });
-  app.get("/api/activity", (c) => c.json(queryActivity()));
-  app.get("/api/heartrate", (c) => c.json(queryHeartrate()));
-  app.get("/api/fleet", (c) => c.json(queryFleet({
-    limit: parseOptionalPositiveInt(c.req.query("limit")),
-    activityLimit: parseOptionalPositiveInt(c.req.query("activityLimit"))
-  })));
-  app.get("/api/messages", (c) => c.json(queryRecentMessages(parseOptionalPositiveInt(c.req.query("limit"), 80) ?? 80, { conversationId: c.req.query("conversationId") || undefined })));
-  const handleListWork = (c) => {
-    const agentId = c.req.query("agentId");
-    const activeOnly = c.req.query("active") !== "false";
-    return c.json(queryWorkItems({
-      agentId: agentId || undefined,
-      activeOnly
-    }));
-  };
-  const handleWorkDetail = (c) => {
-    const workId = c.req.param("id");
-    if (!workId) {
-      return c.json({ error: "id is required" }, 400);
+  } else {
+    agentBin = findClaudeBin();
+    if (!agentBin) {
+      const reason = "Claude CLI not found. Install it with: npm install -g @anthropic-ai/claude-code";
+      console.error(`[relay] Session ${id} failed: ${reason}`);
+      send(ws, { type: "session:error", error: reason });
+      return null;
     }
-    const detail = queryWorkItemById(workId);
-    return detail ? c.json(detail) : c.json({ error: "not found" }, 404);
+  }
+  if (!existsSync13(agentBin)) {
+    const reason = `${agent} binary not found at ${agentBin}`;
+    console.error(`[relay] Session ${id} failed: ${reason}`);
+    send(ws, { type: "session:error", error: reason });
+    return null;
+  }
+  if (backend === "tmux" && !findBin("tmux")) {
+    const reason = "tmux not found. Install it with: brew install tmux";
+    console.error(`[relay] Session ${id} failed: ${reason}`);
+    send(ws, { type: "session:error", error: reason });
+    return null;
+  }
+  const cwd = resolveCwd(msg.cwd);
+  if (msg.workspaceFiles) {
+    bootstrapFiles(cwd, msg.workspaceFiles, id);
+  }
+  let agentArgs;
+  if (agent === "pi") {
+    agentArgs = ["--verbose"];
+    if (msg.provider)
+      agentArgs.push("--provider", msg.provider);
+    if (msg.model)
+      agentArgs.push("--model", msg.model);
+    if (msg.systemPrompt)
+      agentArgs.push("--system-prompt", msg.systemPrompt);
+  } else {
+    agentArgs = ["--verbose"];
+    if (msg.systemPrompt)
+      agentArgs.push("--system-prompt", msg.systemPrompt);
+  }
+  const env = { ...process.env, TERM: "xterm-256color", FORCE_COLOR: "1" };
+  delete env.CLAUDECODE;
+  let ptyProcess;
+  try {
+    if (backend === "tmux") {
+      console.log(`[relay] Session ${id}: tmux backend (session: ${tmuxName}) in ${cwd} [agent: ${agent}]`);
+      ptyProcess = spawnTmuxSession(tmuxName, cols, rows, cwd, agentBin, agentArgs, env);
+    } else {
+      console.log(`[relay] Session ${id}: pty backend, spawning ${agentBin} in ${cwd} [agent: ${agent}]`);
+      ptyProcess = pty.spawn(agentBin, agentArgs, {
+        name: "xterm-256color",
+        cols,
+        rows,
+        cwd,
+        env
+      });
+    }
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(`[relay] Session ${id}: failed to spawn PTY \u2014 ${message}`);
+    send(ws, { type: "session:error", error: `Failed to spawn terminal: ${message}` });
+    return null;
+  }
+  const orphanTTL = msg.orphanTTL && msg.orphanTTL > 0 ? msg.orphanTTL : DEFAULT_ORPHAN_TTL_MS;
+  const session = {
+    id,
+    pty: ptyProcess,
+    ws,
+    outputBuffer: "",
+    cols,
+    rows,
+    reapTimer: null,
+    orphanTTL,
+    backend,
+    ...backend === "tmux" ? { tmuxSession: tmuxName } : {},
+    exited: false,
+    exitCode: null
   };
-  app.get("/api/work", handleListWork);
-  app.get("/api/tasks", handleListWork);
-  app.get("/api/work/:id", handleWorkDetail);
-  app.get("/api/tasks/:id", handleWorkDetail);
-  app.get("/api/flights", (c) => {
-    const agentId = c.req.query("agentId");
-    const conversationId = c.req.query("conversationId");
-    const collaborationRecordId = c.req.query("collaborationRecordId");
-    const activeOnly = c.req.query("active") !== "false";
-    return c.json(queryFlights({
-      agentId: agentId || undefined,
-      conversationId: conversationId || undefined,
-      collaborationRecordId: collaborationRecordId || undefined,
-      activeOnly
-    }));
-  });
-  app.get("/api/sessions", (c) => c.json(querySessions()));
-  app.get("/api/session/:id", (c) => {
-    const session = querySessionById(c.req.param("id"));
-    return session ? c.json(session) : c.json({ error: "not found" }, 404);
-  });
-  app.get("/api/mesh", async (c) => {
-    try {
-      return c.json(await loadMeshStatus());
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      return c.json({ error: message }, 500);
+  const startTime = Date.now();
+  ptyProcess.onData((data) => {
+    session.outputBuffer += data;
+    if (session.outputBuffer.length > MAX_BUFFER_SIZE) {
+      session.outputBuffer = session.outputBuffer.slice(-MAX_BUFFER_SIZE);
     }
-  });
-  app.post("/api/mesh/announce", async (c) => {
-    try {
-      return c.json(await announceMeshVisibility());
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      return c.json({ error: message }, 500);
+    if (session.ws && session.ws.readyState === 1) {
+      send(session.ws, { type: "terminal:data", data });
     }
   });
-  app.get("/api/user", (c) => {
-    return c.json({ name: resolveOperatorName() });
-  });
-  app.get("/api/onboarding/state", async (c) => {
-    const hasLocalConfig = localConfigExists();
-    const settings = await readOpenScoutSettings({ currentDirectory }).catch(() => null);
-    const configuredContextRoot = settings?.discovery.contextRoot ?? null;
-    const discoveryStart = configuredContextRoot ?? currentDirectory;
-    const projectRoot = await findNearestProjectRoot(discoveryStart).catch(() => null);
-    const hasProjectConfig = projectRoot !== null;
-    const userName = loadUserConfig().name?.trim() ?? "";
-    return c.json({
-      hasLocalConfig,
-      hasProjectConfig,
-      hasOperatorName: userName.length > 0,
-      localConfigPath: localConfigPath(),
-      localConfig: hasLocalConfig ? loadLocalConfig() : null,
-      projectRoot,
-      currentDirectory,
-      contextRoot: configuredContextRoot,
-      operatorName: userName || null,
-      operatorNameSuggestion: resolveOperatorName()
-    });
-  });
-  app.delete("/api/onboarding/state", (c) => {
-    try {
-      rmSync3(localConfigPath(), { force: true });
-    } catch {}
-    return c.json({ ok: true, localConfigPath: localConfigPath() });
-  });
-  app.post("/api/onboarding/project", async (c) => {
-    const body = await c.req.json().catch(() => ({}));
-    const contextRoot = body.contextRoot?.trim();
-    if (!contextRoot) {
-      return c.json({ error: "contextRoot is required" }, 400);
-    }
-    const sourceRoots = (body.sourceRoots ?? []).map((entry) => entry?.trim()).filter((entry) => Boolean(entry && entry.length > 0));
-    const harness = body.defaultHarness === "codex" ? "codex" : "claude";
-    try {
-      await writeOpenScoutSettings({
-        discovery: {
-          contextRoot,
-          workspaceRoots: sourceRoots
-        },
-        agents: { defaultHarness: harness }
-      });
-      const result = await initializeOpenScoutSetup({
-        currentDirectory: contextRoot
-      });
-      return c.json({
-        ok: true,
-        projectConfigPath: result.currentProjectConfigPath
-      });
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      console.error("[onboarding/project]", message);
-      return c.json({ error: message }, 500);
-    }
-  });
-  app.post("/api/onboarding/init", async (c) => {
-    const body = await c.req.json().catch(() => ({}));
-    writeLocalConfig({
-      version: 1,
-      host: body.host ?? DEFAULT_LOCAL_CONFIG.host,
-      ports: {
-        broker: body.ports?.broker ?? DEFAULT_LOCAL_CONFIG.ports.broker,
-        web: body.ports?.web ?? DEFAULT_LOCAL_CONFIG.ports.web,
-        pairing: body.ports?.pairing ?? DEFAULT_LOCAL_CONFIG.ports.pairing
-      }
-    });
-    return c.json({
-      ok: true,
-      localConfig: loadLocalConfig(),
-      localConfigPath: localConfigPath()
-    });
-  });
-  app.post("/api/user", async (c) => {
-    const { name } = await c.req.json();
-    const config = loadUserConfig();
-    if (name?.trim()) {
-      config.name = name.trim();
-    } else {
-      delete config.name;
-    }
-    saveUserConfig(config);
-    return c.json({ name: resolveOperatorName() });
-  });
-  app.post("/api/agents/:agentId/interrupt", async (c) => {
-    const agentId = c.req.param("agentId");
-    const { interruptLocalAgent: interruptLocalAgent2 } = await init_local_agents().then(() => exports_local_agents);
-    const result = await interruptLocalAgent2(agentId);
-    if (!result.ok)
-      return c.json({ error: "Agent not found or not interruptible" }, 404);
-    return c.json({ ok: true });
-  });
-  app.post("/api/send", async (c) => {
-    const { body, conversationId } = await c.req.json();
-    if (!body?.trim()) {
-      return c.json({ error: "body is required" }, 400);
-    }
-    const { directAgentId, senderId } = resolveConversationRouting(conversationId);
-    if (directAgentId) {
-      const result2 = await sendScoutDirectMessage({
-        agentId: directAgentId,
-        body: body.trim(),
-        currentDirectory,
-        source: "scout-web"
-      });
-      return c.json(result2);
-    }
-    const result = await sendScoutMessage({
-      senderId,
-      body: body.trim(),
-      currentDirectory
-    });
-    if (!result.usedBroker) {
-      return c.json({ error: "broker unreachable" }, 502);
-    }
-    return c.json(result);
-  });
-  app.post("/api/ask", async (c) => {
-    const { body, conversationId } = await c.req.json();
-    if (!body?.trim()) {
-      return c.json({ error: "body is required" }, 400);
-    }
-    const { directAgentId, senderId } = resolveConversationRouting(conversationId);
-    if (!directAgentId) {
-      return c.json({
-        error: "ask is only available in a direct conversation with one agent"
-      }, 400);
-    }
-    const result = await askScoutQuestion({
-      senderId,
-      targetLabel: directAgentId,
-      body: body.trim(),
-      currentDirectory
-    });
-    if (!result.usedBroker) {
-      return c.json({ error: "broker unreachable" }, 502);
-    }
-    if (result.unresolvedTarget) {
-      return c.json({
-        error: `could not route ask to ${result.unresolvedTarget}`,
-        targetDiagnostic: result.targetDiagnostic ?? null
-      }, 409);
-    }
-    return c.json(result);
-  });
-  app.get("/api/events", async (c) => {
-    const brokerHost = process.env.OPENSCOUT_BROKER_HOST ?? "127.0.0.1";
-    const brokerPort = process.env.OPENSCOUT_BROKER_PORT ?? "65535";
-    const brokerUrl = process.env.OPENSCOUT_BROKER_URL ?? `http://${brokerHost}:${brokerPort}`;
-    try {
-      return await relayEventStream(`${brokerUrl}/v1/events/stream`, {
-        signal: c.req.raw.signal
-      });
-    } catch {
-      return c.text("Broker unreachable", 502);
+  ptyProcess.onExit(({ exitCode }) => {
+    session.exited = true;
+    session.exitCode = exitCode;
+    const uptime = Date.now() - startTime;
+    const crashed = exitCode !== 0 && uptime < 5000;
+    let reason;
+    if (crashed) {
+      const clean = session.outputBuffer.replace(/\x1b\[[0-9;]*[a-zA-Z]/g, "").trim();
+      const lines = clean.split(`
+`).filter((l) => l.trim()).slice(-5);
+      reason = lines.join(`
+`) || `Process exited with code ${exitCode}`;
+      console.error(`[relay] Session ${id} crashed after ${uptime}ms (code ${exitCode}): ${reason}`);
     }
-  });
-  await registerScoutWebAssets(app, {
-    assetMode: options.assetMode,
-    staticRoot: resolveStaticRoot(options.staticRoot),
-    viteDevUrl: options.viteDevUrl,
-    defaultViteUrl: "http://127.0.0.1:5180"
-  });
-  const warmupCaches = () => Promise.allSettled([
-    shellStateCache.refresh(),
-    loadPairingState(currentDirectory, true)
-  ]).then((results) => {
-    for (const result of results) {
-      if (result.status === "rejected") {
-        const message = result.reason instanceof Error ? result.reason.message : String(result.reason);
-        console.error("[openscout-web api] initial cache warmup failed:", message);
-      }
+    if (session.ws) {
+      send(session.ws, { type: "session:exit", exitCode, ...reason ? { reason } : {} });
     }
+    scheduleReap(session, 1e4);
   });
-  return { app, warmupCaches };
-}
-
-// ../hudson/packages/hudson-relay/src/relay/session.ts
-import { createRequire } from "module";
-import { execSync as execSync2 } from "child_process";
-import { existsSync as existsSync13, mkdirSync as mkdirSync6, writeFileSync as writeFileSync6 } from "fs";
-import { join as join19, dirname as pathDirname } from "path";
-var require2 = createRequire(import.meta.url);
-var pty = require2("node-pty");
-var DEFAULT_ORPHAN_TTL_MS = 30 * 60 * 1000;
-var MAX_BUFFER_SIZE = 512 * 1024;
-var sessions3 = new Map;
-function generateId() {
-  return Math.random().toString(36).slice(2, 10);
+  sessions3.set(id, session);
+  console.log(`[relay] Session ${id} created (${cols}x${rows})`);
+  return session;
 }
-function send(ws, data) {
-  if (ws.readyState === 1) {
-    ws.send(JSON.stringify(data));
+function attachSession(session, ws, cols, rows) {
+  if (session.reapTimer) {
+    clearTimeout(session.reapTimer);
+    session.reapTimer = null;
   }
-}
-function resolveCwd(raw2) {
-  const home = process.env.HOME || "/tmp";
-  const expanded = (raw2 || home).replace(/^~/, home);
-  if (existsSync13(expanded))
-    return expanded;
-  try {
-    mkdirSync6(expanded, { recursive: true });
-    console.log(`[relay] Created missing cwd: ${expanded}`);
-    return expanded;
-  } catch {
-    console.warn(`[relay] Could not create cwd ${expanded}, falling back to ${home}`);
-    return home;
+  session.ws = ws;
+  if (cols && rows) {
+    const c = Math.max(cols, 20);
+    const r = Math.max(rows, 4);
+    if (c !== session.cols || r !== session.rows) {
+      session.pty.resize(c, r);
+      session.cols = c;
+      session.rows = r;
+    }
+  }
+  if (session.exited) {
+    send(ws, { type: "session:exit", exitCode: session.exitCode });
+  } else if (session.outputBuffer.length > 0) {
+    send(ws, { type: "terminal:data", data: session.outputBuffer });
   }
+  console.log(`[relay] Session ${session.id} reconnected`);
 }
-function findBin(name, envOverride) {
-  if (envOverride && process.env[envOverride])
-    return process.env[envOverride];
-  try {
-    return execSync2(`which ${name}`, { encoding: "utf8" }).trim() || null;
-  } catch {
-    return null;
+function detachSession(session) {
+  session.ws = null;
+  if (session.exited) {
+    scheduleReap(session, 5000);
+  } else {
+    scheduleReap(session, session.orphanTTL);
+    console.log(`[relay] Session ${session.id} detached (orphaned for ${session.orphanTTL / 1000}s)`);
   }
 }
-function findClaudeBin() {
-  return findBin("claude", "CLAUDE_BIN");
-}
-function findPiBin() {
-  return findBin("pi", "PI_BIN");
-}
-function tmuxSessionExists2(name) {
-  try {
-    execSync2(`tmux has-session -t ${name} 2>/dev/null`, { encoding: "utf8" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function bootstrapFiles(cwd, files, sessionId) {
-  for (const [relPath, content] of Object.entries(files)) {
-    const absPath = join19(cwd, relPath);
-    if (!existsSync13(absPath)) {
-      try {
-        const dir = pathDirname(absPath);
-        if (!existsSync13(dir))
-          mkdirSync6(dir, { recursive: true });
-        writeFileSync6(absPath, content, "utf-8");
-        console.log(`[relay] Session ${sessionId}: bootstrapped ${relPath}`);
-      } catch (err) {
-        console.warn(`[relay] Session ${sessionId}: failed to bootstrap ${relPath}:`, err);
-      }
-    }
-  }
-}
-function spawnTmuxSession(tmuxName, cols, rows, cwd, claudeBin, claudeArgs, env) {
-  const exists = tmuxSessionExists2(tmuxName);
-  if (!exists) {
-    const shellCmd = [claudeBin, ...claudeArgs].map((a) => a.includes(" ") ? `'${a}'` : a).join(" ");
-    execSync2(`tmux new-session -d -s ${tmuxName} -x ${cols} -y ${rows} -c '${cwd}' '${shellCmd}'`, { env });
-    console.log(`[relay] Created tmux session: ${tmuxName}`);
-  } else {
-    try {
-      execSync2(`tmux resize-window -t ${tmuxName} -x ${cols} -y ${rows} 2>/dev/null`);
-    } catch {}
-    console.log(`[relay] Attaching to existing tmux session: ${tmuxName}`);
-  }
-  return pty.spawn("tmux", ["attach", "-t", tmuxName], {
-    name: "xterm-256color",
-    cols,
-    rows,
-    cwd,
-    env
-  });
-}
-function createSession(ws, msg) {
-  const id = generateId();
-  const cols = Math.max(msg.cols || 80, 20);
-  const rows = Math.max(msg.rows || 24, 4);
-  const backend = msg.backend || "pty";
-  const tmuxName = msg.tmuxSession || `hudson-${id}`;
-  const agent = msg.agent || "claude";
-  let agentBin;
-  if (agent === "pi") {
-    agentBin = findPiBin();
-    if (!agentBin) {
-      const reason = "pi CLI not found. Install it with: npm install -g @mariozechner/pi-coding-agent";
-      console.error(`[relay] Session ${id} failed: ${reason}`);
-      send(ws, { type: "session:error", error: reason });
-      return null;
-    }
-  } else {
-    agentBin = findClaudeBin();
-    if (!agentBin) {
-      const reason = "Claude CLI not found. Install it with: npm install -g @anthropic-ai/claude-code";
-      console.error(`[relay] Session ${id} failed: ${reason}`);
-      send(ws, { type: "session:error", error: reason });
-      return null;
-    }
-  }
-  if (!existsSync13(agentBin)) {
-    const reason = `${agent} binary not found at ${agentBin}`;
-    console.error(`[relay] Session ${id} failed: ${reason}`);
-    send(ws, { type: "session:error", error: reason });
-    return null;
-  }
-  if (backend === "tmux" && !findBin("tmux")) {
-    const reason = "tmux not found. Install it with: brew install tmux";
-    console.error(`[relay] Session ${id} failed: ${reason}`);
-    send(ws, { type: "session:error", error: reason });
-    return null;
-  }
-  const cwd = resolveCwd(msg.cwd);
-  if (msg.workspaceFiles) {
-    bootstrapFiles(cwd, msg.workspaceFiles, id);
-  }
-  let agentArgs;
-  if (agent === "pi") {
-    agentArgs = ["--verbose"];
-    if (msg.provider)
-      agentArgs.push("--provider", msg.provider);
-    if (msg.model)
-      agentArgs.push("--model", msg.model);
-    if (msg.systemPrompt)
-      agentArgs.push("--system-prompt", msg.systemPrompt);
-  } else {
-    agentArgs = ["--verbose"];
-    if (msg.systemPrompt)
-      agentArgs.push("--system-prompt", msg.systemPrompt);
-  }
-  const env = { ...process.env, TERM: "xterm-256color", FORCE_COLOR: "1" };
-  delete env.CLAUDECODE;
-  let ptyProcess;
-  try {
-    if (backend === "tmux") {
-      console.log(`[relay] Session ${id}: tmux backend (session: ${tmuxName}) in ${cwd} [agent: ${agent}]`);
-      ptyProcess = spawnTmuxSession(tmuxName, cols, rows, cwd, agentBin, agentArgs, env);
-    } else {
-      console.log(`[relay] Session ${id}: pty backend, spawning ${agentBin} in ${cwd} [agent: ${agent}]`);
-      ptyProcess = pty.spawn(agentBin, agentArgs, {
-        name: "xterm-256color",
-        cols,
-        rows,
-        cwd,
-        env
-      });
-    }
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    console.error(`[relay] Session ${id}: failed to spawn PTY \u2014 ${message}`);
-    send(ws, { type: "session:error", error: `Failed to spawn terminal: ${message}` });
-    return null;
-  }
-  const orphanTTL = msg.orphanTTL && msg.orphanTTL > 0 ? msg.orphanTTL : DEFAULT_ORPHAN_TTL_MS;
-  const session = {
-    id,
-    pty: ptyProcess,
-    ws,
-    outputBuffer: "",
-    cols,
-    rows,
-    reapTimer: null,
-    orphanTTL,
-    backend,
-    ...backend === "tmux" ? { tmuxSession: tmuxName } : {},
-    exited: false,
-    exitCode: null
-  };
-  const startTime = Date.now();
-  ptyProcess.onData((data) => {
-    session.outputBuffer += data;
-    if (session.outputBuffer.length > MAX_BUFFER_SIZE) {
-      session.outputBuffer = session.outputBuffer.slice(-MAX_BUFFER_SIZE);
-    }
-    if (session.ws && session.ws.readyState === 1) {
-      send(session.ws, { type: "terminal:data", data });
-    }
-  });
-  ptyProcess.onExit(({ exitCode }) => {
-    session.exited = true;
-    session.exitCode = exitCode;
-    const uptime = Date.now() - startTime;
-    const crashed = exitCode !== 0 && uptime < 5000;
-    let reason;
-    if (crashed) {
-      const clean = session.outputBuffer.replace(/\x1b\[[0-9;]*[a-zA-Z]/g, "").trim();
-      const lines = clean.split(`
-`).filter((l) => l.trim()).slice(-5);
-      reason = lines.join(`
-`) || `Process exited with code ${exitCode}`;
-      console.error(`[relay] Session ${id} crashed after ${uptime}ms (code ${exitCode}): ${reason}`);
-    }
-    if (session.ws) {
-      send(session.ws, { type: "session:exit", exitCode, ...reason ? { reason } : {} });
-    }
-    scheduleReap(session, 1e4);
-  });
-  sessions3.set(id, session);
-  console.log(`[relay] Session ${id} created (${cols}x${rows})`);
-  return session;
-}
-function attachSession(session, ws, cols, rows) {
-  if (session.reapTimer) {
-    clearTimeout(session.reapTimer);
-    session.reapTimer = null;
-  }
-  session.ws = ws;
-  if (cols && rows) {
-    const c = Math.max(cols, 20);
-    const r = Math.max(rows, 4);
-    if (c !== session.cols || r !== session.rows) {
-      session.pty.resize(c, r);
-      session.cols = c;
-      session.rows = r;
-    }
-  }
-  if (session.exited) {
-    send(ws, { type: "session:exit", exitCode: session.exitCode });
-  } else if (session.outputBuffer.length > 0) {
-    send(ws, { type: "terminal:data", data: session.outputBuffer });
-  }
-  console.log(`[relay] Session ${session.id} reconnected`);
-}
-function detachSession(session) {
-  session.ws = null;
-  if (session.exited) {
-    scheduleReap(session, 5000);
-  } else {
-    scheduleReap(session, session.orphanTTL);
-    console.log(`[relay] Session ${session.id} detached (orphaned for ${session.orphanTTL / 1000}s)`);
-  }
-}
-function scheduleReap(session, delay) {
-  if (session.reapTimer)
-    clearTimeout(session.reapTimer);
-  session.reapTimer = setTimeout(() => {
-    if (!session.ws) {
-      destroy(session.id);
-    }
-  }, delay);
+function scheduleReap(session, delay) {
+  if (session.reapTimer)
+    clearTimeout(session.reapTimer);
+  session.reapTimer = setTimeout(() => {
+    if (!session.ws) {
+      destroy(session.id);
+    }
+  }, delay);
 }
 function destroy(sessionId) {
   const session = sessions3.get(sessionId);
@@ -21528,6 +21346,22 @@ async function handleRelayUpload(req) {
   await Bun.write(filepath, Buffer.from(data, "base64"));
   return Response.json({ path: filepath });
 }
+var _pendingCommand = null;
+function queueTerminalCommand(cmd) {
+  for (const [, session] of sessions3) {
+    if (!session.exited) {
+      session.pty.write(cmd + `
+`);
+      return;
+    }
+  }
+  _pendingCommand = cmd;
+}
+function drainPendingCommand() {
+  const cmd = _pendingCommand;
+  _pendingCommand = null;
+  return cmd;
+}
 function asRelay(ws) {
   return ws;
 }
@@ -21558,6 +21392,10 @@ var relayWebSocket = {
           break;
         ws.data.sessionId = session.id;
         send(rws, { type: "session:ready", sessionId: session.id });
+        const pending = drainPendingCommand();
+        if (pending)
+          setTimeout(() => session.pty.write(pending + `
+`), 400);
         break;
       }
       case "session:reconnect": {
@@ -21578,6 +21416,10 @@ var relayWebSocket = {
             sessionId: existing.id,
             reconnected: true
           });
+          const pending = drainPendingCommand();
+          if (pending)
+            setTimeout(() => existing.pty.write(pending + `
+`), 400);
         } else {
           send(rws, { type: "session:expired", sessionId: msg.sessionId });
         }
@@ -21621,8 +21463,433 @@ function destroyAllRelaySessions() {
     destroy(id);
 }
 
+// packages/web/server/create-openscout-web-server.ts
+function parseOptionalPositiveInt(value, fallback) {
+  if (typeof value !== "string" || value.trim().length === 0) {
+    return fallback;
+  }
+  const parsed = Number.parseInt(value, 10);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+function inferDirectTargetAgentId(conversationId, session, senderId) {
+  if (session?.kind === "direct") {
+    if (session.agentId) {
+      return session.agentId;
+    }
+    const participants = session.participantIds.filter((participantId) => participantId.trim().length > 0);
+    if (participants.length === 2) {
+      const operatorCandidates = new Set([senderId.trim(), "operator"]);
+      const nonOperatorParticipants = participants.filter((participantId) => !operatorCandidates.has(participantId));
+      if (nonOperatorParticipants.length === 1) {
+        return nonOperatorParticipants[0] ?? null;
+      }
+      const localSessionParticipant = nonOperatorParticipants.find((participantId) => participantId.startsWith("local-session-agent-")) ?? participants.find((participantId) => participantId.startsWith("local-session-agent-"));
+      if (localSessionParticipant) {
+        return localSessionParticipant;
+      }
+      return participants[0] ?? null;
+    }
+  }
+  if (conversationId?.startsWith("dm.operator.")) {
+    const legacyAgentId = conversationId.slice("dm.operator.".length);
+    return legacyAgentId || null;
+  }
+  return null;
+}
+function inferDirectSenderId(_session, _fallbackSenderId, _directTargetAgentId) {
+  return "operator";
+}
+function resolveConversationRouting(conversationId) {
+  const fallbackSenderId = "operator";
+  const session = conversationId ? querySessionById(conversationId) : null;
+  const directAgentId = inferDirectTargetAgentId(conversationId, session, fallbackSenderId);
+  const senderId = inferDirectSenderId(session, fallbackSenderId, directAgentId);
+  return { directAgentId, senderId };
+}
+function resolveBundledStaticClientRoot(moduleUrl = import.meta.url) {
+  return resolve9(dirname12(fileURLToPath7(moduleUrl.toString())), "client");
+}
+function resolveSourceStaticClientRoot(moduleUrl = import.meta.url) {
+  return resolve9(dirname12(fileURLToPath7(moduleUrl.toString())), "../dist/client");
+}
+function resolveStaticRoot(staticRoot) {
+  const configured = staticRoot?.trim();
+  if (configured) {
+    return configured;
+  }
+  const bundled = resolveBundledStaticClientRoot(import.meta.url);
+  if (existsSync14(resolve9(bundled, "index.html"))) {
+    return bundled;
+  }
+  return resolveSourceStaticClientRoot(import.meta.url);
+}
+async function loadPairingState(currentDirectory, refresh) {
+  return refresh ? refreshScoutWebPairingState(currentDirectory) : getScoutWebPairingState(currentDirectory);
+}
+async function createOpenScoutWebServer(options) {
+  const shellTtl = options.shellStateCacheTtlMs ?? 15000;
+  const currentDirectory = options.currentDirectory;
+  const app = new Hono2;
+  const shellStateCache = createCachedSnapshot(loadOpenScoutWebShellState, shellTtl);
+  installScoutApiMiddleware(app, "openscout-web api");
+  app.get("/api/health", (c) => c.json({
+    ok: true,
+    surface: "openscout-web",
+    currentDirectory
+  }));
+  app.get("/api/pairing-state", async (c) => c.json(await loadPairingState(currentDirectory, false)));
+  app.get("/api/pairing-state/refresh", async (c) => c.json(await loadPairingState(currentDirectory, true)));
+  app.post("/api/pairing/control", async (c) => {
+    const { action } = await c.req.json();
+    const result = await controlScoutWebPairingService(action, currentDirectory);
+    shellStateCache.invalidate();
+    return c.json(result);
+  });
+  app.delete("/api/pairing/peers/:fingerprint", async (c) => {
+    const fingerprint = c.req.param("fingerprint");
+    const removed = removeScoutPairingTrustedPeer(fingerprint);
+    if (!removed) {
+      return c.json({ error: "Peer not found" }, 404);
+    }
+    return c.json({ ok: true });
+  });
+  app.get("/api/shell-state", async (c) => c.json(await shellStateCache.get()));
+  app.get("/api/shell-state/refresh", async (c) => c.json(await shellStateCache.refresh()));
+  app.get("/api/agents", (c) => c.json(queryAgents()));
+  app.get("/api/observe/agents", async (c) => {
+    const ids = c.req.query("ids")?.split(",").map((value) => value.trim()).filter((value) => value.length > 0);
+    return c.json(await loadAgentObserveSummaries(ids));
+  });
+  app.get("/api/agents/:id/observe", async (c) => {
+    const payload = await loadAgentObservePayload(c.req.param("id"));
+    return payload ? c.json(payload) : c.json({ error: "not found" }, 404);
+  });
+  app.get("/api/agents/:id/session-catalog", (c) => {
+    const agentId = c.req.param("id");
+    const agents = queryAgents();
+    const agent = agents.find((a) => a.id === agentId);
+    if (!agent)
+      return c.json({ error: "agent not found" }, 404);
+    const runtimeDir = relayAgentRuntimeDirectory(agent.id);
+    const catalog = readSessionCatalogSync(runtimeDir);
+    const cwd = agent.cwd ?? agent.projectRoot ?? ".";
+    const sessionId = catalog.activeSessionId;
+    const harnessEntry = findHarnessEntry(agent.harness);
+    const resumeCommand = sessionId && harnessEntry ? buildHarnessResumeCommand(harnessEntry, sessionId, cwd) : null;
+    return c.json({ ...catalog, agentId, harness: agent.harness, resumeCommand });
+  });
+  app.get("/api/activity", (c) => c.json(queryActivity()));
+  app.get("/api/heartrate", (c) => c.json(queryHeartrate()));
+  app.get("/api/fleet", (c) => c.json(queryFleet({
+    limit: parseOptionalPositiveInt(c.req.query("limit")),
+    activityLimit: parseOptionalPositiveInt(c.req.query("activityLimit"))
+  })));
+  app.get("/api/messages", (c) => c.json(queryRecentMessages(parseOptionalPositiveInt(c.req.query("limit"), 80) ?? 80, { conversationId: c.req.query("conversationId") || undefined })));
+  const handleListWork = (c) => {
+    const agentId = c.req.query("agentId");
+    const activeOnly = c.req.query("active") !== "false";
+    return c.json(queryWorkItems({
+      agentId: agentId || undefined,
+      activeOnly
+    }));
+  };
+  const handleWorkDetail = (c) => {
+    const workId = c.req.param("id");
+    if (!workId) {
+      return c.json({ error: "id is required" }, 400);
+    }
+    const detail = queryWorkItemById(workId);
+    return detail ? c.json(detail) : c.json({ error: "not found" }, 404);
+  };
+  app.get("/api/work", handleListWork);
+  app.get("/api/tasks", handleListWork);
+  app.get("/api/work/:id", handleWorkDetail);
+  app.get("/api/tasks/:id", handleWorkDetail);
+  app.get("/api/flights", (c) => {
+    const agentId = c.req.query("agentId");
+    const conversationId = c.req.query("conversationId");
+    const collaborationRecordId = c.req.query("collaborationRecordId");
+    const activeOnly = c.req.query("active") !== "false";
+    return c.json(queryFlights({
+      agentId: agentId || undefined,
+      conversationId: conversationId || undefined,
+      collaborationRecordId: collaborationRecordId || undefined,
+      activeOnly
+    }));
+  });
+  app.get("/api/sessions", (c) => c.json(querySessions()));
+  app.get("/api/session/:id", (c) => {
+    const session = querySessionById(c.req.param("id"));
+    return session ? c.json(session) : c.json({ error: "not found" }, 404);
+  });
+  app.get("/api/mesh", async (c) => {
+    try {
+      return c.json(await loadMeshStatus());
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      return c.json({ error: message }, 500);
+    }
+  });
+  app.post("/api/mesh/announce", async (c) => {
+    try {
+      return c.json(await announceMeshVisibility());
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      return c.json({ error: message }, 500);
+    }
+  });
+  app.post("/api/mesh/tailscale", async (c) => {
+    try {
+      const { action } = await c.req.json();
+      return c.json(await controlTailscale(action));
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      return c.json({ error: message }, 500);
+    }
+  });
+  app.get("/api/user", (c) => {
+    const config = loadUserConfig();
+    return c.json({
+      name: resolveOperatorName(),
+      handle: config.handle ?? "",
+      pronouns: config.pronouns ?? "",
+      hue: config.hue ?? 195,
+      bio: config.bio ?? "",
+      timezone: config.timezone ?? Intl.DateTimeFormat().resolvedOptions().timeZone,
+      workingHours: config.workingHours ?? "08:00 \u2013 18:00",
+      interruptThreshold: config.interruptThreshold ?? "blocking-only",
+      batchWindow: config.batchWindow ?? 15,
+      channel: config.channel ?? "here+mobile",
+      verbosity: config.verbosity ?? "terse",
+      tone: config.tone ?? "direct",
+      quietHours: config.quietHours ?? "22:00 \u2013 07:00"
+    });
+  });
+  app.get("/api/onboarding/state", async (c) => {
+    const hasLocalConfig = localConfigExists();
+    const settings = await readOpenScoutSettings({ currentDirectory }).catch(() => null);
+    const configuredContextRoot = settings?.discovery.contextRoot ?? null;
+    const discoveryStart = configuredContextRoot ?? currentDirectory;
+    const projectRoot = await findNearestProjectRoot(discoveryStart).catch(() => null);
+    const hasProjectConfig = projectRoot !== null;
+    const userName = loadUserConfig().name?.trim() ?? "";
+    return c.json({
+      hasLocalConfig,
+      hasProjectConfig,
+      hasOperatorName: userName.length > 0,
+      localConfigPath: localConfigPath(),
+      localConfig: hasLocalConfig ? loadLocalConfig() : null,
+      projectRoot,
+      currentDirectory,
+      contextRoot: configuredContextRoot,
+      operatorName: userName || null,
+      operatorNameSuggestion: resolveOperatorName()
+    });
+  });
+  app.delete("/api/onboarding/state", (c) => {
+    try {
+      rmSync3(localConfigPath(), { force: true });
+    } catch {}
+    return c.json({ ok: true, localConfigPath: localConfigPath() });
+  });
+  app.post("/api/onboarding/project", async (c) => {
+    const body = await c.req.json().catch(() => ({}));
+    const contextRoot = body.contextRoot?.trim();
+    if (!contextRoot) {
+      return c.json({ error: "contextRoot is required" }, 400);
+    }
+    const sourceRoots = (body.sourceRoots ?? []).map((entry) => entry?.trim()).filter((entry) => Boolean(entry && entry.length > 0));
+    const harness = body.defaultHarness === "codex" ? "codex" : "claude";
+    try {
+      await writeOpenScoutSettings({
+        discovery: {
+          contextRoot,
+          workspaceRoots: sourceRoots
+        },
+        agents: { defaultHarness: harness }
+      });
+      const result = await initializeOpenScoutSetup({
+        currentDirectory: contextRoot
+      });
+      return c.json({
+        ok: true,
+        projectConfigPath: result.currentProjectConfigPath
+      });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      console.error("[onboarding/project]", message);
+      return c.json({ error: message }, 500);
+    }
+  });
+  app.post("/api/onboarding/init", async (c) => {
+    const body = await c.req.json().catch(() => ({}));
+    writeLocalConfig({
+      version: 1,
+      host: body.host ?? DEFAULT_LOCAL_CONFIG.host,
+      ports: {
+        broker: body.ports?.broker ?? DEFAULT_LOCAL_CONFIG.ports.broker,
+        web: body.ports?.web ?? DEFAULT_LOCAL_CONFIG.ports.web,
+        pairing: body.ports?.pairing ?? DEFAULT_LOCAL_CONFIG.ports.pairing
+      }
+    });
+    return c.json({
+      ok: true,
+      localConfig: loadLocalConfig(),
+      localConfigPath: localConfigPath()
+    });
+  });
+  app.post("/api/user", async (c) => {
+    const body = await c.req.json();
+    const config = loadUserConfig();
+    const stringFields = [
+      "name",
+      "handle",
+      "pronouns",
+      "bio",
+      "timezone",
+      "workingHours",
+      "interruptThreshold",
+      "channel",
+      "verbosity",
+      "tone",
+      "quietHours"
+    ];
+    for (const key of stringFields) {
+      if (key in body) {
+        const val = body[key];
+        if (typeof val === "string" && val.trim()) {
+          config[key] = val.trim();
+        } else {
+          delete config[key];
+        }
+      }
+    }
+    if ("hue" in body && typeof body.hue === "number") {
+      config.hue = body.hue;
+    }
+    if ("batchWindow" in body && typeof body.batchWindow === "number") {
+      config.batchWindow = body.batchWindow;
+    }
+    saveUserConfig(config);
+    return c.json({
+      name: resolveOperatorName(),
+      handle: config.handle ?? "",
+      pronouns: config.pronouns ?? "",
+      hue: config.hue ?? 195,
+      bio: config.bio ?? "",
+      timezone: config.timezone ?? Intl.DateTimeFormat().resolvedOptions().timeZone,
+      workingHours: config.workingHours ?? "08:00 \u2013 18:00",
+      interruptThreshold: config.interruptThreshold ?? "blocking-only",
+      batchWindow: config.batchWindow ?? 15,
+      channel: config.channel ?? "here+mobile",
+      verbosity: config.verbosity ?? "terse",
+      tone: config.tone ?? "direct",
+      quietHours: config.quietHours ?? "22:00 \u2013 07:00"
+    });
+  });
+  app.post("/api/terminal/run", async (c) => {
+    const body = await c.req.json();
+    if (!body.command)
+      return c.json({ error: "missing command" }, 400);
+    queueTerminalCommand(body.command);
+    return c.json({ ok: true });
+  });
+  app.post("/api/agents/:agentId/interrupt", async (c) => {
+    const agentId = c.req.param("agentId");
+    const { interruptLocalAgent: interruptLocalAgent2 } = await init_local_agents().then(() => exports_local_agents);
+    const result = await interruptLocalAgent2(agentId);
+    if (!result.ok)
+      return c.json({ error: "Agent not found or not interruptible" }, 404);
+    return c.json({ ok: true });
+  });
+  app.post("/api/send", async (c) => {
+    const { body, conversationId } = await c.req.json();
+    if (!body?.trim()) {
+      return c.json({ error: "body is required" }, 400);
+    }
+    const { directAgentId, senderId } = resolveConversationRouting(conversationId);
+    if (directAgentId) {
+      const result2 = await sendScoutDirectMessage({
+        agentId: directAgentId,
+        body: body.trim(),
+        currentDirectory,
+        source: "scout-web"
+      });
+      return c.json(result2);
+    }
+    const result = await sendScoutMessage({
+      senderId,
+      body: body.trim(),
+      currentDirectory
+    });
+    if (!result.usedBroker) {
+      return c.json({ error: "broker unreachable" }, 502);
+    }
+    return c.json(result);
+  });
+  app.post("/api/ask", async (c) => {
+    const { body, conversationId } = await c.req.json();
+    if (!body?.trim()) {
+      return c.json({ error: "body is required" }, 400);
+    }
+    const { directAgentId, senderId } = resolveConversationRouting(conversationId);
+    if (!directAgentId) {
+      return c.json({
+        error: "ask is only available in a direct conversation with one agent"
+      }, 400);
+    }
+    const result = await askScoutQuestion({
+      senderId,
+      targetLabel: directAgentId,
+      body: body.trim(),
+      currentDirectory
+    });
+    if (!result.usedBroker) {
+      return c.json({ error: "broker unreachable" }, 502);
+    }
+    if (result.unresolvedTarget) {
+      return c.json({
+        error: `could not route ask to ${result.unresolvedTarget}`,
+        targetDiagnostic: result.targetDiagnostic ?? null
+      }, 409);
+    }
+    return c.json(result);
+  });
+  app.get("/api/events", async (c) => {
+    const brokerHost = process.env.OPENSCOUT_BROKER_HOST ?? "127.0.0.1";
+    const brokerPort = process.env.OPENSCOUT_BROKER_PORT ?? "65535";
+    const brokerUrl = process.env.OPENSCOUT_BROKER_URL ?? `http://${brokerHost}:${brokerPort}`;
+    try {
+      return await relayEventStream(`${brokerUrl}/v1/events/stream`, {
+        signal: c.req.raw.signal
+      });
+    } catch {
+      return c.text("Broker unreachable", 502);
+    }
+  });
+  await registerScoutWebAssets(app, {
+    assetMode: options.assetMode,
+    staticRoot: resolveStaticRoot(options.staticRoot),
+    viteDevUrl: options.viteDevUrl,
+    defaultViteUrl: "http://127.0.0.1:5180"
+  });
+  const warmupCaches = () => Promise.allSettled([
+    shellStateCache.refresh(),
+    loadPairingState(currentDirectory, true)
+  ]).then((results) => {
+    for (const result of results) {
+      if (result.status === "rejected") {
+        const message = result.reason instanceof Error ? result.reason.message : String(result.reason);
+        console.error("[openscout-web api] initial cache warmup failed:", message);
+      }
+    }
+  });
+  return { app, warmupCaches };
+}
+
 // packages/web/server/index.ts
 var port = Number(process.env.OPENSCOUT_WEB_PORT ?? process.env.SCOUT_WEB_PORT ?? "3200");
+var hostname2 = process.env.OPENSCOUT_WEB_HOST?.trim() || process.env.SCOUT_WEB_HOST?.trim() || "127.0.0.1";
 var currentDirectory = process.env.OPENSCOUT_SETUP_CWD?.trim() || process.cwd();
 var shellStateCacheTtlMs = Number.parseInt(process.env.OPENSCOUT_WEB_SHELL_CACHE_TTL_MS ?? "15000", 10);
 function resolveStaticRoot2() {
@@ -21631,11 +21898,11 @@ function resolveStaticRoot2() {
   }
   const selfDir = dirname13(fileURLToPath8(import.meta.url));
   const siblingClientRoot = join21(selfDir, "client");
-  if (existsSync14(join21(siblingClientRoot, "index.html"))) {
+  if (existsSync15(join21(siblingClientRoot, "index.html"))) {
     return siblingClientRoot;
   }
   const sourceDistClientRoot = resolve10(selfDir, "../dist/client");
-  if (existsSync14(join21(sourceDistClientRoot, "index.html"))) {
+  if (existsSync15(join21(sourceDistClientRoot, "index.html"))) {
     return sourceDistClientRoot;
   }
   return;
@@ -21654,6 +21921,7 @@ var { app, warmupCaches } = await createOpenScoutWebServer({
 var honoFetch = app.fetch;
 var server = Bun.serve({
   port,
+  hostname: hostname2,
   idleTimeout: idleTimeoutSeconds,
   fetch(req, server2) {
     const url = new URL(req.url);
@@ -21680,6 +21948,6 @@ var shutdown = () => {
 };
 process.on("SIGINT", shutdown);
 process.on("SIGTERM", shutdown);
-console.log(`OpenScout Web -> http://localhost:${server.port}`);
-console.log(`Relay WebSocket -> ws://localhost:${server.port}`);
+console.log(`OpenScout Web -> http://${hostname2}:${server.port}`);
+console.log(`Relay WebSocket -> ws://${hostname2}:${server.port}`);
 warmupCaches();