@ours.network/fleet 1.0.5 → 1.1.0-nightly.1

package/dist/session/control.d.ts

@@ -1,5 +1,5 @@
 import { type Socket } from 'node:net';
-import type { ControlFailureKind, SessionEvent, SessionHandle, SessionSnapshot } from './types.js';
+import type { AgentSession, ControlFailureKind, SessionEvent, SessionSnapshot } from './types.js';
 import type { OwnerChannelHandle, OwnerChannelManagementRequest } from '../owner-channel/channel.js';
 import type { ScheduledLoopManagerHandle } from '../loops/manager.js';
 import type { SpawnOpts } from '../spawn.js';
@@ -48,7 +48,7 @@ export interface RetainedEventPage {
     truncated: boolean;
 }
 /** The one retained-range projection shared by polling and live-follow admission. */
-export declare function retainedEventPage(session: SessionHandle, since: number): RetainedEventPage;
+export declare function retainedEventPage(session: AgentSession, since: number): RetainedEventPage;
 /**
  * One line saying what a control failure does — and does not — prove about the
  * agent. Only `offline` is evidence that it is gone; every other kind used to
@@ -105,7 +105,7 @@ export declare class RoleControlServer {
     private loopManager?;
     private reloadConfig?;
     private fleetSpawner?;
-    constructor(stateDir: string, session: SessionHandle, log: (line: string) => void);
+    constructor(stateDir: string, session: AgentSession, log: (line: string) => void);
     start(): Promise<void>;
     close(): Promise<void>;
     /** Attach only the already-started supervisor-owned channel client. */

package/dist/session/types.d.ts

@@ -96,7 +96,7 @@ export interface InterruptOutcome {
     reasonCode?: string;
 }
 /**
- * What a `SessionHandle.interrupt` implementation may resolve. Before 0.17.1 the
+ * What an `AgentSession.interrupt` implementation may resolve. Before 0.17.1 the
  * contract was `Promise<void>`, and resolving at all meant the cancellation had
  * taken effect cooperatively — so an implementation written against that
  * contract stays valid and keeps its exact meaning. Only in-tree consumers read
@@ -146,7 +146,7 @@ export interface ExitRecord {
     code?: number;
     /** Signal that killed it, when one did. */
     signal?: string;
-    /** Raw wait status as the pane shell saw it (tmux only). */
+    /** Raw wait status retained when migrating a legacy shell-exit record. */
     status?: number;
     at?: string;
     /** One line an operator can read. */
@@ -194,8 +194,7 @@ export interface SessionSnapshot {
     };
     /**
      * Observed agent activity, independent of turn occupancy: the evidence a
-     * human-facing surface needs before calling a role idle. Absent on backends
-     * that cannot observe the agent at all (tmux), which is itself honest — no
+     * human-facing surface needs before calling a role idle. When absent, no
      * evidence is not evidence of inactivity.
      */
     activity?: SessionActivity;
@@ -259,7 +258,12 @@ export interface ConversationHandlePage {
     hasMore: boolean;
     snapshot: ConversationSnapshot;
 }
-export interface SessionHandle {
+/**
+ * The live, harness-neutral contract between Fleet and one agent session.
+ * Harness adapters construct this handle; orchestration code must not depend
+ * on the ACP transport which currently implements it.
+ */
+export interface AgentSession {
     readonly backend: SessionBackendId;
     readonly pid: number;
     isAlive(): boolean;
@@ -301,3 +305,5 @@ export interface SessionHandle {
     exitResult(): ExitRecord | null;
     close(): Promise<void>;
 }
+/** @deprecated Public compatibility name; use AgentSession. */
+export type SessionHandle = AgentSession;

package/dist/spawn.js

@@ -123,8 +123,10 @@ export function readIsolationFile(path) {
 export function validateSpawnOpts(o) {
     if (o.mission !== undefined && o.missionFile)
         throw new Error('--mission and --mission-file are mutually exclusive');
-    if (o.session && !['tmux', 'acp'].includes(o.session))
-        throw new Error(`invalid --session '${o.session}'; allowed: tmux, acp`);
+    if (o.session === 'tmux')
+        throw new Error("invalid --session 'tmux'; tmux is no longer supported; use --session acp");
+    if (o.session && o.session !== 'acp')
+        throw new Error(`invalid --session '${o.session}'; allowed: acp`);
     if (o.approval && !['ask', 'auto', 'allow', 'deny'].includes(o.approval))
         throw new Error(`invalid --approval '${o.approval}'; allowed: ask, auto, allow (deprecated alias: deny)`);
     if (o.filesystem && !['read-only', 'workspace', 'unrestricted'].includes(o.filesystem))
@@ -203,7 +205,7 @@ export function spawnDryRun(o) {
         ...(authProxy ? { authProxyBaseUrl: authProxy.base_url } : {}),
     });
     const model = modelEnv.model;
-    const session = raw.session ?? cfg.defaults.session ?? 'tmux';
+    const session = raw.session ?? cfg.defaults.session ?? 'acp';
     const resolvedRole = {
         ...raw,
         name: o.name,
@@ -255,7 +257,7 @@ function provenanceSettings(o, defaults) {
     const inheritedModel = resolveRoleModel(undefined, o.harness, defaults);
     return {
         harness: tagged('harness', provenanceOf(o.harness, defaults.harness, 'claude-code')),
-        session: tagged('session', provenanceOf(o.session, defaults.session, 'tmux')),
+        session: tagged('session', provenanceOf(o.session, defaults.session, 'acp')),
         identity: o.identity
             ? { value: o.identity, source: 'cli' }
             : { value: o.name, source: 'built-in' }, // defaults to the role name
@@ -417,7 +419,7 @@ async function spawnTempInner(o, binPath, launch, tx, onStage) {
         ...(tempAuthProxy ? { authProxyBaseUrl: tempAuthProxy.base_url } : {}),
     });
     const model = modelEnv.model;
-    const session = o.session ?? cfg.defaults.session ?? 'tmux';
+    const session = o.session ?? cfg.defaults.session ?? 'acp';
     const role = {
         ...fromOpts, // includes `isolation` when --isolation-file was given
         name: o.name,
@@ -467,10 +469,7 @@ async function spawnTempInner(o, binPath, launch, tx, onStage) {
     if (cfg.startStaggerMs > 0)
         writeFileSync(join(dir, START_STAGGER_FILE), String(cfg.startStaggerMs));
     prepareTempSupervisor(dir, o.name);
-    // Run the supervisor independently — NOT inside a tmux session named <name>.
-    // `_run-temp` -> runOnce() creates AND kills the tmux session <name> for the
-    // agent itself; a supervisor sharing that session name would SIGHUP its own
-    // process before the agent ever launches. On a service-managed host the temp
+    // Run the supervisor independently. On a service-managed host the temp
     // runner gets its own transient unit/job, so stopping the coordinator's unit
     // cannot kill a live worker in the coordinator's cgroup.
     onStage?.('starting_temp');

package/dist/supervisor/none.d.ts

@@ -1,7 +1,7 @@
 import { type Exec } from '../exec.js';
 import type { SupervisorBackend } from './types.js';
 /**
- * No supervision: sessions are plain tmux, nothing survives a reboot and
+ * No service supervision: tmux contains the direct runner process, nothing survives a reboot and
  * nothing restarts on crash. Used for temp agents and CI tests
  * (OURS_FLEET_SUPERVISOR=none).
  */

package/dist/supervisor/none.js

@@ -1,7 +1,7 @@
 import { Tmux, tmuxArgs } from '../tmux.js';
 import { realExec, shq } from '../exec.js';
 /**
- * No supervision: sessions are plain tmux, nothing survives a reboot and
+ * No service supervision: tmux contains the direct runner process, nothing survives a reboot and
  * nothing restarts on crash. Used for temp agents and CI tests
  * (OURS_FLEET_SUPERVISOR=none).
  */
@@ -9,7 +9,7 @@ export function makeNoneBackend(exec = realExec) {
     const tmux = new Tmux(exec);
     return {
         id: 'none',
-        async init() { return ['no supervisor: sessions are plain tmux (no reboot survival)']; },
+        async init() { return ['no service supervisor: direct runner containment only (no reboot survival)']; },
         async install(name, binPath) {
             const existed = await tmux.kill(name); // true when a session was there
             await tmux.newSession(name, process.cwd(), `${shq(binPath)} _run ${shq(name)}`);

package/dist/tmux.d.ts

@@ -20,7 +20,7 @@ export declare const tmuxSocket: (session: string) => string;
  * the shared default server and re-creates #32.
  */
 export declare const tmuxArgs: (session: string, args: string[]) => string[];
-/** Thin tmux wrapper; all session handling in the core goes through this. */
+/** Thin tmux wrapper retained only for supervisor=none process containment. */
 export declare class Tmux {
     private exec;
     constructor(exec?: Exec);
@@ -32,17 +32,4 @@ export declare class Tmux {
      * program inside it exited on its own".
      */
     kill(name: string): Promise<boolean>;
-    capture(name: string, lines?: number): Promise<string>;
-    /** Bounded ANSI/history seed for the browser terminal projection. */
-    captureHistory(name: string, lines?: number): Promise<string>;
-    panePid(name: string): Promise<number | null>;
-    /**
-     * List the live sessions among `names`, asking each server in turn.
-     * There is no fleet-wide `tmux ls` any more: a session per server means the
-     * caller says which sessions to ask about. A server that is not running
-     * answers non-zero and contributes nothing.
-     */
-    list(names: readonly string[]): Promise<string>;
-    sendText(name: string, text: string): Promise<void>;
-    sendKey(name: string, key: string): Promise<void>;
 }

package/dist/tmux.js

@@ -20,7 +20,7 @@ export const tmuxSocket = (session) => `${TMUX_SOCKET_PREFIX}${session}`;
  * the shared default server and re-creates #32.
  */
 export const tmuxArgs = (session, args) => ['-L', tmuxSocket(session), ...args];
-/** Thin tmux wrapper; all session handling in the core goes through this. */
+/** Thin tmux wrapper retained only for supervisor=none process containment. */
 export class Tmux {
     exec;
     constructor(exec = realExec) {
@@ -42,54 +42,4 @@ export class Tmux {
     async kill(name) {
         return (await this.exec('tmux', tmuxArgs(name, ['kill-session', '-t', name]))).code === 0;
     }
-    async capture(name, lines = 40) {
-        const r = await this.exec('tmux', tmuxArgs(name, ['capture-pane', '-t', name, '-p']));
-        if (r.code !== 0)
-            throw new Error(`tmux capture-pane '${name}' failed: ${r.stderr.trim()}`);
-        const all = r.stdout.replace(/\n+$/, '').split('\n');
-        return all.slice(-lines).join('\n');
-    }
-    /** Bounded ANSI/history seed for the browser terminal projection. */
-    async captureHistory(name, lines = 5_000) {
-        const bounded = Math.min(Math.max(Math.trunc(lines), 1), 20_000);
-        const r = await this.exec('tmux', tmuxArgs(name, ['capture-pane', '-t', name, '-p', '-e', '-J', '-S', `-${bounded}`]));
-        if (r.code !== 0)
-            throw new Error(`tmux capture-pane '${name}' failed: ${r.stderr.trim()}`);
-        return Buffer.from(r.stdout).subarray(0, 4 * 1024 * 1024).toString();
-    }
-    async panePid(name) {
-        const r = await this.exec('tmux', tmuxArgs(name, ['list-panes', '-t', name, '-F', '#{pane_pid}']));
-        if (r.code !== 0)
-            return null;
-        const pid = parseInt(r.stdout.trim().split('\n')[0], 10);
-        return Number.isFinite(pid) ? pid : null;
-    }
-    /**
-     * List the live sessions among `names`, asking each server in turn.
-     * There is no fleet-wide `tmux ls` any more: a session per server means the
-     * caller says which sessions to ask about. A server that is not running
-     * answers non-zero and contributes nothing.
-     */
-    async list(names) {
-        const lines = [];
-        for (const name of names) {
-            const r = await this.exec('tmux', tmuxArgs(name, ['ls']));
-            if (r.code === 0 && r.stdout.trim())
-                lines.push(r.stdout.trimEnd());
-        }
-        return lines.join('\n');
-    }
-    async sendText(name, text) {
-        let r = await this.exec('tmux', tmuxArgs(name, ['send-keys', '-t', name, '-l', text]));
-        if (r.code !== 0)
-            throw new Error(`tmux send-keys '${name}' failed: ${r.stderr.trim()}`);
-        r = await this.exec('tmux', tmuxArgs(name, ['send-keys', '-t', name, 'Enter']));
-        if (r.code !== 0)
-            throw new Error(`tmux send-keys Enter '${name}' failed: ${r.stderr.trim()}`);
-    }
-    async sendKey(name, key) {
-        const r = await this.exec('tmux', tmuxArgs(name, ['send-keys', '-t', name, key]));
-        if (r.code !== 0)
-            throw new Error(`tmux send-keys '${name}' failed: ${r.stderr.trim()}`);
-    }
 }

package/dist/watchdog/config.js

@@ -31,7 +31,7 @@ export function resolveWatchdogs(baseDoc, baseFile, roles, vars, defaults) {
     const roleIdentities = new Set(roles.map(r => r.identity));
     // Tracks identity -> owning watchdog name across entries:
     // two watchdogs declaring the same identity would otherwise share a temp
-    // dir, tmux session, and run lock with no error until they collide at
+    // dir, agent session, and run lock with no error until they collide at
     // runtime.
     const watchdogIdentities = new Map();
     const out = [];
@@ -61,9 +61,11 @@ export function resolveWatchdogs(baseDoc, baseFile, roles, vars, defaults) {
             throw new ConfigError(`${where}: identity '${identity}' collides with watchdog '${collidingWatchdog}'`);
         watchdogIdentities.set(identity, name);
         const harness = w.harness ?? defaults.harness ?? 'claude-code';
-        const sessionRaw = w.session ?? defaults.session ?? 'tmux';
-        if (sessionRaw !== 'tmux' && sessionRaw !== 'acp')
-            throw new ConfigError(`${where}: session must be 'tmux' or 'acp'`);
+        const sessionRaw = w.session ?? defaults.session ?? 'acp';
+        if (sessionRaw === 'tmux')
+            throw new ConfigError(`${where}: session 'tmux' is no longer supported; use session: acp`);
+        if (sessionRaw !== 'acp')
+            throw new ConfigError(`${where}: session must be 'acp'`);
         if (w.prompt_file !== undefined) {
             if (typeof w.prompt_file !== 'string' || !isAbsolute(w.prompt_file))
                 throw new ConfigError(`${where}: prompt_file must be an absolute path`);

package/dist/watchdog/run.js

@@ -1,7 +1,6 @@
 import { closeSync, existsSync, openSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync, } from 'node:fs';
-import { spawn as spawnChild, execFile } from 'node:child_process';
+import { spawn as spawnChild } from 'node:child_process';
 import { join } from 'node:path';
-import { promisify } from 'node:util';
 import { stringify } from 'yaml';
 import { errorReport, normalizeWatchdogReport, validateWatchdogReport } from './report.js';
 import { acquireRunLock, formatRunId, pruneReports, releaseRunLock, writeReport } from './store.js';
@@ -15,8 +14,6 @@ import { loadConfig, resolveMonitorConfig, resolveWorklogPolicy, ROLE_NAME_RE, }
 import { getAdapter } from '../harness/registry.js';
 import { redactLogLine } from '../application/log-service.js';
 import { controlRequest, controlSocketPath } from '../session/control.js';
-import { Tmux } from '../tmux.js';
-const execFileAsync = promisify(execFile);
 /** How often the deadline loop polls for a completed report or a dead child. */
 const POLL_MS = 1000;
 /** A `report.json` this old, with no further writes, is treated as finished. */
@@ -56,7 +53,6 @@ async function killIfNeeded(reason, child, roleName, sleep) {
         if (reason === 'stable')
             await sleep(HARVEST_GRACE_MS);
         child.kill();
-        await killTmuxSession(roleName);
     }
 }
 function defaultLaunchChild(binPath, roleName, runDir) {
@@ -77,13 +73,6 @@ function defaultLaunchChild(binPath, roleName, runDir) {
         }),
     };
 }
-/** Best-effort: the tmux session outlives the supervisor child (`runOnce` created it). */
-async function killTmuxSession(roleName) {
-    try {
-        await execFileAsync('tmux', ['kill-session', '-t', roleName]);
-    }
-    catch { /* best effort */ }
-}
 /** Last 4096 chars of run.log, redacted — attached to error reports as diagnostic tail. */
 function readTail(runDir) {
     try {
@@ -121,19 +110,15 @@ async function discoverLiveTemporaryRoles() {
     catch {
         return [];
     }
-    const tmux = new Tmux();
     const live = await Promise.all(names.map(async (name) => {
         const dir = agentDir(name, true);
-        const [acpAlive, tmuxAlive] = await Promise.all([
-            existsSync(controlSocketPath(dir))
-                ? controlRequest(dir, { command: 'status' }, 2_000)
-                    .then(response => response.ok
-                    && response.result?.alive === true)
-                    .catch(() => false)
-                : Promise.resolve(false),
-            tmux.has(name).catch(() => false),
-        ]);
-        return acpAlive || tmuxAlive ? name : undefined;
+        const alive = existsSync(controlSocketPath(dir))
+            ? await controlRequest(dir, { command: 'status' }, 2_000)
+                .then(response => response.ok
+                && response.result?.alive === true)
+                .catch(() => false)
+            : false;
+        return alive ? name : undefined;
     }));
     return live.filter((name) => name !== undefined);
 }

package/dist/web/auth.d.ts

@@ -16,7 +16,7 @@ export interface AuthResult {
 interface Ticket {
     value: string;
     sessionId: string;
-    purpose: 'events' | 'terminal' | 'conversation';
+    purpose: 'events' | 'conversation';
     roleId?: string;
     expiresAt: number;
 }

package/dist/web/runtime.js

@@ -4,14 +4,13 @@ import { resolve } from 'node:path';
 import { loadConfig } from '../config.js';
 import { RoleRepository } from '../application/role-repository.js';
 import { FleetQueryService } from '../application/fleet-query-service.js';
-import { AcpRoleSessionAdapter, TmuxRoleSessionAdapter } from '../application/session-control.js';
+import { AcpRoleSessionAdapter } from '../application/session-control.js';
 import { StructuredLogService } from '../application/log-service.js';
 import { RoleCommandService } from '../application/role-command-service.js';
 import { RoleCreationService } from '../application/role-creation-service.js';
 import { RoleRemovalService } from '../application/role-removal-service.js';
 import { FleetError } from '../application/errors.js';
 import { controlRequest, controlSocketPath } from '../session/control.js';
-import { Tmux } from '../tmux.js';
 import { pickBackend } from '../supervisor/index.js';
 import { realExec } from '../exec.js';
 import { home, stateRoot } from '../paths.js';
@@ -23,7 +22,6 @@ import { mergeTopology } from './topology-model.js';
 import { TopologyDraftStore } from './topology-draft-store.js';
 import { TopologyPromoteService } from './topology-promote.js';
 import { doctor } from '../doctor.js';
-import { TerminalBridgeManager } from './terminal/bridge.js';
 import { acquireWebServerLock } from './lock.js';
 import { TrustedDeviceStore } from './device-store.js';
 import { WebAuth } from './auth.js';
@@ -62,7 +60,6 @@ export async function startWebConsole(options) {
     }
     const access = options.access ?? new WebAccessStore(webDir).read();
     const auth = new WebAuth(publicOrigin?.origin ?? `http://127.0.0.1:${requestedPort}`, publicOrigin?.host ?? `127.0.0.1:${requestedPort}`, Date.now, new TrustedDeviceStore(webDir), access);
-    const tmux = new Tmux();
     const backend = pickBackend();
     const repository = new RoleRepository({
         configPath: options.configPath,
@@ -78,13 +75,11 @@ export async function startWebConsole(options) {
                 }
                 catch { /* stale socket is evidence, not reachability */ }
             }
-            return { acp, tmux: await tmux.has(name).catch(() => false) };
+            return { acp };
         },
     });
     const events = new FleetEventBus();
     const audit = new AuditSink();
-    const terminals = new TerminalBridgeManager({ repository, audit, tmux });
-    const terminalAvailable = await terminals.available();
     const watchdogConfigProvider = cachedConfigProvider(options.configPath);
     const log = options.log ?? (() => { });
     let loggedWatchdogFindingsError = false;
@@ -109,8 +104,8 @@ export async function startWebConsole(options) {
         }
     }, CONFIG_CACHE_TTL_MS);
     const query = new FleetQueryService({
-        repository, supervisor: backend, tmux,
-        capabilityContext: { terminalPtyAvailable: terminalAvailable },
+        repository, supervisor: backend,
+        capabilityContext: {},
         watchdogFindings,
     });
     const ops = { backend, binPath: options.binPath, log };
@@ -162,9 +157,6 @@ export async function startWebConsole(options) {
             query, repository, logs, commands, creation, removal, audit, events, watchdogs, configuration,
             taskRooms: new TaskRoomApplicationService(options.configPath),
             topology: readTopology, topologyDrafts, topologyPromote,
-            terminalUpgrade: terminalAvailable
-                ? async (socket, _request, roleId, _ticket, hello) => terminals.connect(socket, roleId, hello)
-                : undefined,
             async session(roleId) {
                 const role = await repository.get(roleId);
                 if (!role)
@@ -175,8 +167,6 @@ export async function startWebConsole(options) {
                         throw new FleetError('control_unavailable', 'role state directory is unavailable');
                     return new AcpRoleSessionAdapter(dir);
                 }
-                if (role.configuredBackend === 'tmux' || role.detectedBackend === 'tmux')
-                    return new TmuxRoleSessionAdapter(roleId, tmux);
                 throw new FleetError('capability_unavailable', 'role session backend is unavailable');
             },
         }, { origin: `http://127.0.0.1:${requestedPort}`, host: `127.0.0.1:${requestedPort}` }, { auth });
@@ -231,7 +221,6 @@ export async function startWebConsole(options) {
         async close() {
             try {
                 await control.close();
-                await terminals.close();
                 await server.close();
             }
             finally {

package/dist/web/server.d.ts

@@ -1,5 +1,4 @@
-import { type FastifyInstance, type FastifyRequest } from 'fastify';
-import type { WebSocket } from 'ws';
+import { type FastifyInstance } from 'fastify';
 import type { FleetQueryService } from '../application/fleet-query-service.js';
 import type { RoleRepository } from '../application/role-repository.js';
 import type { RoleSessionControl } from '../application/session-control.js';
@@ -32,7 +31,6 @@ export interface WebServices {
     topologyPromote?: TopologyPromoteService;
     removal?: RoleRemovalService;
     taskRooms?: TaskRoomApplicationService;
-    terminalUpgrade?: (socket: WebSocket, request: FastifyRequest, roleId: string, ticket: string, hello: Record<string, unknown>) => Promise<void>;
 }
 export interface WebServer {
     app: FastifyInstance;

package/dist/web/server.js

@@ -101,7 +101,7 @@ export async function buildWebServer(services, boundary, options = {}) {
         return {
             version: VERSION, api: { major: 1, minor: 0 },
             websocketProtocols: [
-                'ours-fleet-events.v1', 'ours-fleet-terminal.v1', 'ours-fleet-conversation.v1',
+                'ours-fleet-events.v1', 'ours-fleet-conversation.v1',
             ],
             auditDegraded: audit.degraded,
         };
@@ -335,7 +335,7 @@ export async function buildWebServer(services, boundary, options = {}) {
         const control = await services.session(request.params.id);
         // The idempotent, durably admitted path — used whenever the caller sends a
         // command id and the role has a conversation ledger. The legacy path stays
-        // for old clients and tmux roles.
+        // for old clients.
         if (control.submitPromptV2) {
             const admittedCommandId = commandId ?? randomBytes(16).toString('hex');
             const receipt = await control.submitPromptV2({
@@ -440,7 +440,7 @@ export async function buildWebServer(services, boundary, options = {}) {
     });
     app.post('/api/v1/ws-tickets', async (request) => {
         const body = request.body;
-        if (!body?.purpose || !['events', 'terminal', 'conversation'].includes(body.purpose))
+        if (!body?.purpose || !['events', 'conversation'].includes(body.purpose))
             throw new FleetError('invalid_request', 'ticket purpose is required');
         if (body.purpose === 'conversation' && !body.roleId)
             throw new FleetError('invalid_request', 'a conversation ticket must be bound to a role');
@@ -534,17 +534,6 @@ export async function buildWebServer(services, boundary, options = {}) {
             socket.on('close', () => { clearInterval(heartbeat); follow.close(); });
         });
     });
-    app.get('/api/v1/roles/:id/terminal', { websocket: true }, (socket, request) => {
-        requireSubprotocol(request, 'ours-fleet-terminal.v1');
-        authorizeSocket(socket, request, async (hello) => {
-            const ticket = String(hello.ticket ?? '');
-            const session = auth.consumeTicket(request, ticket, 'terminal', request.params.id);
-            auth.bindSocket(session.id, socket);
-            if (!services.terminalUpgrade)
-                throw new FleetError('capability_unavailable', 'terminal PTY support is unavailable');
-            await services.terminalUpgrade(socket, request, request.params.id, ticket, hello);
-        });
-    });
     const staticRoot = join(dirname(fileURLToPath(import.meta.url)), '..', 'web-app');
     if (existsSync(staticRoot)) {
         await app.register(fastifyStatic, { root: staticRoot, prefix: '/' });

package/dist/web/topology-promote.js

@@ -126,10 +126,7 @@ function loopEntry(node, merged, model) {
         roles, ...pick(node, LOOP_FIELDS),
     };
     entry.interval ??= DEFAULT_LOOP_INTERVAL;
-    // An enabled loop hard-requires `session: acp` on every target. Adding one to a
-    // tmux agent would make the whole fleet unloadable, so it arrives switched off
-    // and badged instead — the owner turns it on after switching the agent to ACP.
-    if (node.enabled === false || !roles.every(role => sessionOf(model, role) === 'acp'))
+    if (node.enabled === false)
         entry.enabled = false;
     return entry;
 }
@@ -142,7 +139,7 @@ function linked(merged, id, kind) {
 function sessionOf(model, role) {
     const roles = model.roles;
     const defaults = model.defaults;
-    return String(roles?.[role]?.session ?? defaults?.session ?? 'tmux');
+    return String(roles?.[role]?.session ?? defaults?.session ?? 'acp');
 }
 function section(model, key) {
     const existing = model[key];

package/dist/web-app/assets/index-59GF-gsZ.css

@@ -0,0 +1 @@
+:root{font-family:Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif;color:#e9eef0;background:#080b0c;font-synthesis:none;--panel: #111617;--line: #222a2c;--muted: #849093;--mint: #7ce7b0;--amber: #f0c66c;--red: #ff827c}*{box-sizing:border-box}body{margin:0;min-width:0;min-height:100vh;background:radial-gradient(circle at 70% -20%,#183027 0,transparent 35%),#080b0c}button,input,select,textarea{font:inherit}button{color:inherit}button:focus-visible,input:focus-visible,select:focus-visible,textarea:focus-visible{outline:2px solid var(--mint);outline-offset:2px}.auth-screen{display:grid;place-content:center;text-align:center;min-height:100vh;color:var(--muted)}.auth-screen h1{color:#fff;margin-bottom:0}.brand-wordmark{color:var(--mint);font-size:21px;font-weight:820;letter-spacing:-.02em}.auth-screen .brand-wordmark{justify-self:center;font-size:32px}.shell{display:grid;grid-template-columns:224px 1fr;min-height:100vh}aside{position:fixed;inset:0 auto 0 0;width:224px;display:flex;flex-direction:column;padding:24px 14px;border-right:1px solid #1d2425;background:#080b0ceb;-webkit-backdrop-filter:blur(18px);backdrop-filter:blur(18px)}.brand{display:flex;gap:12px;align-items:center;padding:0 8px 30px}.brand div{display:flex;flex-direction:column}.brand small{color:var(--muted);font-size:11px;text-transform:uppercase;letter-spacing:1.4px}nav{display:grid;gap:5px}nav button{display:grid;grid-template-columns:24px 1fr auto;gap:8px;align-items:center;width:100%;border:0;border-radius:8px;padding:10px 12px;text-align:left;color:#98a3a5;background:transparent;text-transform:capitalize;cursor:pointer}nav button:hover,nav button.active{color:#fff;background:#151b1c}nav button.active{box-shadow:inset 2px 0 var(--mint)}nav b{background:#422f22;color:var(--amber);border-radius:10px;font-size:11px;padding:2px 7px}.sidebar-foot{margin-top:auto;display:grid;grid-template-columns:12px 1fr;align-items:center;padding:12px;color:var(--muted);font-size:12px;text-transform:capitalize}.sidebar-foot i{width:7px;height:7px;border-radius:50%;background:var(--amber)}.sidebar-foot i.live{background:var(--mint);box-shadow:0 0 9px var(--mint)}.sidebar-foot small{grid-column:2;opacity:.6;margin-top:3px}.main{grid-column:2;min-width:0}header{display:flex;justify-content:space-between;align-items:flex-end;height:124px;padding:25px 36px 23px;border-bottom:1px solid var(--line);background:#080b0c8c}h1,h2,h3,p{margin-top:0}header h1{margin:4px 0 0;font-size:29px;letter-spacing:-.8px}.eyebrow{color:var(--mint);text-transform:uppercase;font-size:10px;letter-spacing:1.8px;font-weight:700}.header-actions,.actions{display:flex;gap:9px}button.primary,button.secondary,.actions button{border-radius:7px;padding:9px 13px;cursor:pointer}button.primary{border:1px solid #83e9b5;color:#07130d;background:var(--mint);font-weight:700}button.primary:disabled{opacity:.4;cursor:default}button.secondary,.actions button{border:1px solid #30393b;background:#141a1b}button.secondary:hover,.actions button:hover{border-color:#526064}.content,.workspace{padding:28px 36px 60px}.toolbar{display:flex;align-items:center;justify-content:space-between;margin-bottom:16px;color:var(--muted);font-size:12px}.toolbar input{width:340px;padding:10px 13px;color:#fff;background:#101516;border:1px solid var(--line);border-radius:8px}.toolbar>div{display:flex;align-items:center;gap:10px}.toolbar button{padding:7px 10px}.role-row.inactive{opacity:.72}.role-row.active{background:#141a1b;border-left:2px solid var(--mint)}.watchdog-detail-layout{display:grid;gap:18px}.watchdog-report-head{display:flex;align-items:center;gap:12px}.watchdog-report-head h2{flex:1}.watchdog-roles{display:grid;gap:10px;margin-top:12px}.watchdog-role{border:1px solid var(--line);border-radius:8px;padding:12px 14px;background:#0d1213}.watchdog-role-head{display:flex;align-items:center;gap:10px}.watchdog-role-head strong{text-transform:capitalize}.watchdog-role-detail,.watchdog-role-note{margin:8px 0 0;font-size:12px;color:var(--muted)}.watchdog-role-note{color:var(--amber)}.watchdog-role details{margin-top:8px;font-size:12px}.watchdog-role summary{cursor:pointer;color:var(--muted)}.watchdog-role details ul{margin:8px 0 0;padding-left:18px;color:#c9d1d3}.watchdog-role details li{margin-bottom:4px}.status-guide{display:flex;flex-wrap:wrap;gap:7px;align-items:center;margin-bottom:15px;color:var(--muted);font-size:11px}.status-guide>span,.status-chip{display:inline-flex;align-items:center;gap:5px;border:1px solid #30393b;border-radius:12px;padding:3px 7px;white-space:nowrap}.status-guide b{color:#fff;font-size:11px}.status-guide small{flex-basis:100%;color:var(--muted)}.status-guide .ready,.status-chip.ready{border-color:#315e4a}.status-guide .busy,.status-chip.busy{border-color:#315478}.status-guide .attention,.status-chip.attention,.status-chip.unknown{border-color:#66552f}.status-guide .offline,.status-chip.offline{border-color:#693b38}.role-table{border:1px solid var(--line);border-radius:10px;overflow:hidden;background:#0e1213cc}.role-row{display:grid;grid-template-columns:minmax(260px,1.55fr) repeat(4,minmax(125px,1fr));width:100%;align-items:center;gap:15px;padding:14px 18px;border:0;border-bottom:1px solid var(--line);background:transparent;text-align:left;cursor:pointer}button.role-row:hover{background:#141a1b}.role-row.heading{padding-block:10px;color:#6f7b7e;font-size:10px;letter-spacing:1px;text-transform:uppercase;cursor:default}.role-row:last-child{border-bottom:0}.role-row>span{min-width:0;display:flex;flex-direction:column;gap:3px}.role-row strong{font-size:13px;text-transform:capitalize;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.role-row small{color:var(--muted);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.role-name{position:relative;display:grid!important;grid-template-columns:auto 1fr auto;align-items:center}.role-name .mission-summary{display:-webkit-box;max-height:2.5em;line-height:1.25;overflow:hidden;overflow-wrap:anywhere;white-space:normal;-webkit-box-orient:vertical;-webkit-line-clamp:2}.status-chip{color:#c9d1d3;font-size:10px;padding:3px 6px}.status-chip i{width:6px;height:6px;border-radius:50%;background:#667174}.status-chip.ready i{background:var(--mint)}.status-chip.busy i{background:#71b7ff}.status-chip.attention i,.status-chip.unknown i{background:var(--amber)}.status-chip.offline i{background:var(--red)}.state.ready,.hero-state.ready i{background:var(--mint);box-shadow:0 0 7px #69dba0}.state.busy,.hero-state.busy i{background:#71b7ff}.state.attention,.state.unknown,.hero-state.attention i,.hero-state.unknown i{background:var(--amber)}.state.offline,.hero-state.offline i{background:var(--red)}.role-name em{color:#7f8a8d;font-size:10px;font-style:normal;border:1px solid #2e3739;border-radius:10px;padding:3px 6px}.role-pills{display:flex;flex-direction:column;align-items:flex-end;gap:4px}.empty{padding:60px;text-align:center;color:var(--muted)}.banner{margin:16px 36px 0;border:1px solid;border-radius:8px;padding:10px 13px;font-size:13px}.banner.error,.error{border-color:#5c302f;background:#271616;color:#ffaaa5}.banner.warning,.warning{border-color:#5a4726;background:#241e12;color:#f1ce83}.banner.info{border-color:#28463b;background:#10231c;color:#9be4bf}.workspace>.banner{margin-inline:0}.back{border:0;background:none;color:var(--muted);padding:0 0 18px;cursor:pointer}.workspace-summary{display:flex;flex-wrap:wrap;align-items:center;gap:7px;color:var(--muted);font-size:12px}.workspace-summary>span{border:1px solid var(--line);border-radius:12px;padding:4px 8px}.workspace-summary>small{margin-left:auto}.hero-state{display:flex;gap:7px;align-items:center;color:#fff;text-transform:capitalize}.hero-state i{width:7px;height:7px;border-radius:50%;background:#788}.tabs{display:flex;gap:22px;margin:26px 0 22px;border-bottom:1px solid var(--line)}.tabs button{border:0;border-bottom:2px solid transparent;padding:10px 2px;background:none;color:var(--muted);text-transform:capitalize;cursor:pointer}.tabs button.active{color:#fff;border-bottom-color:var(--mint)}.tabs button:disabled{opacity:.35;cursor:not-allowed}.dashboard-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:14px}.panel{border:1px solid var(--line);border-radius:10px;background:#101516db;padding:18px}.panel h2{font-size:15px;letter-spacing:-.2px}.panel.wide{grid-column:1 / -1}.evidence>div:first-child{display:flex;justify-content:space-between}.evidence>div:first-child strong{color:var(--mint);text-transform:capitalize;font-size:12px}dl{margin:0}dl div{display:grid;grid-template-columns:120px 1fr;gap:15px;padding:7px 0;border-top:1px solid #1d2426;font-size:12px}dt{color:var(--muted)}dd{margin:0;word-break:break-word}.danger{color:#ff9e99!important;border-color:#613432!important}.activity-layout{display:grid;grid-template-columns:1fr 290px;gap:14px;align-items:start}.activity{display:grid;gap:9px}.activity-filter{display:flex;align-items:center;justify-content:space-between;gap:12px;color:var(--muted);font-size:11px}.activity-filter button{padding:6px 9px}.event{border-left:2px solid #334044;padding:10px 13px;background:#0d1213}.event.agent_text{border-color:var(--mint)}.event.error,.event.permission{border-color:var(--amber)}.event p{margin:5px 0 0;white-space:pre-wrap}.event small,.muted{color:var(--muted)}.composer{position:sticky;top:16px;display:grid;gap:9px}textarea{min-height:84px;resize:vertical}.composer textarea,fieldset input,fieldset select,fieldset textarea{width:100%;color:#fff;border:1px solid #303a3c;border-radius:6px;background:#0d1112;padding:9px 10px}.composer small{color:var(--muted);line-height:1.45}pre{max-width:100%;overflow:auto;white-space:pre-wrap;word-break:break-word;font:12px/1.55 SFMono-Regular,Consolas,monospace;color:#cbd5d7}.log-panel>pre{margin:0;padding:5px 8px;border-bottom:1px solid #1b2224}.audit-list div{display:grid;grid-template-columns:180px 1fr 120px;padding:10px 0;border-top:1px solid var(--line);font-size:12px}.audit-list time{color:var(--muted)}.modal-backdrop{position:fixed;z-index:10;inset:0;display:grid;place-items:center;padding:30px;background:#000000b8;-webkit-backdrop-filter:blur(8px);backdrop-filter:blur(8px)}.modal{width:min(900px,95vw);max-height:92vh;overflow:auto;border:1px solid #354043;border-radius:13px;background:#0d1112;box-shadow:0 30px 100px #000}.modal-head{position:sticky;z-index:2;top:0;display:flex;justify-content:space-between;align-items:flex-start;padding:22px 26px 18px;border-bottom:1px solid var(--line);background:#0d1112f5}.modal-head h2{margin:4px 0 0}.icon{border:0;background:none;color:var(--muted);font-size:25px;cursor:pointer}.wizard,.progress{padding:22px 26px}fieldset{border:0;border-bottom:1px solid var(--line);padding:0 0 20px;margin:0 0 20px}legend{margin-bottom:13px;color:var(--mint);text-transform:uppercase;font-size:10px;letter-spacing:1.5px;font-weight:700}.form-grid{display:grid;grid-template-columns:repeat(2,1fr);gap:13px}.form-grid.three{grid-template-columns:repeat(3,1fr)}.wake-sources{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:7px 14px}.wake-sources>small{grid-column:1 / -1;color:var(--muted)}.wake-sources label{display:flex;flex-direction:row;align-items:center;gap:7px;color:#c7d0d1;font-size:11px;text-transform:none;letter-spacing:0}.form-grid label{display:grid;gap:6px;color:#b7c0c2;font-size:12px}.form-grid label small{color:var(--muted)}.form-grid .wide{grid-column:1 / -1}.risk{display:flex;align-items:center;gap:8px;margin-top:14px;color:var(--amber);font-size:12px}.review{border:1px solid #2f493f;border-radius:8px;background:#101b17;padding:15px}.review dl{display:grid;grid-template-columns:1fr 1fr;gap:0 20px}.modal-actions{display:flex;justify-content:flex-end;gap:9px;margin-top:20px}.stage{display:flex;gap:12px;min-height:54px;position:relative}.stage:after{position:absolute;left:5px;top:14px;bottom:0;width:1px;background:#34413d;content:""}.stage:last-child:after{display:none}.stage i{z-index:1;width:11px;height:11px;margin-top:2px;border-radius:50%;background:var(--mint);box-shadow:0 0 0 4px #173026}.stage span{display:flex;flex-direction:column;text-transform:capitalize}.stage small{color:var(--muted);margin-top:3px}@media(max-width:1050px){.role-row{grid-template-columns:1.5fr repeat(3,1fr)}.role-row>span:nth-child(4){display:none}}.topology{overflow-x:auto;margin-bottom:16px;border:1px solid var(--line);border-radius:12px;background:radial-gradient(circle at 50% 50%,#13201b 0,#0b1011 58%)}.topology-canvas{position:relative;width:1000px;min-width:100%}.topology svg{position:absolute;inset:0;width:100%;height:100%}.edge line{stroke:#405052;stroke-width:1.5;vector-effect:non-scaling-stroke}.edge.spawned line{stroke:var(--mint);stroke-dasharray:5 4}.edge.watches line{stroke:#d7ad58;stroke-dasharray:2 3}.edge.targets line{stroke:#729ed6;stroke-dasharray:9 3 2 3}.topology-legend{display:grid;gap:8px;margin:0 0 12px;padding:12px 14px;border:1px solid var(--line);border-radius:10px;background:#0c1112}.topology-legend ul{display:grid;grid-template-columns:repeat(4,minmax(140px,1fr));gap:8px;margin:0;padding:0;list-style:none}.topology-legend li{display:flex;gap:9px;align-items:start;padding:7px;border-radius:7px}.topology-legend li:focus{outline:2px solid var(--mint);outline-offset:1px}.topology-legend li>span:last-child{display:grid;gap:2px}.topology-legend small{color:var(--muted);line-height:1.3}.legend-line{width:34px;margin-top:7px;border-top:2px solid #405052;flex:0 0 auto}.legend-line.spawned{border-color:var(--mint);border-top-style:dashed}.legend-line.watches{border-color:#d7ad58;border-top-style:dotted}.legend-line.targets{height:5px;border-color:#729ed6;border-bottom:1px dotted #729ed6}.topology-node{position:absolute;width:150px;min-height:62px;display:grid;gap:3px;z-index:1;padding:0;text-align:left;border:1px solid #344044;border-radius:10px;background:#111718;box-shadow:0 8px 24px #00000047;transform:translateY(-50%)}.topology-open{display:grid;gap:3px;min-width:0;padding:10px 28px 10px 12px;color:inherit;text-align:left;border:0;background:transparent;cursor:pointer}.topology-remove{position:absolute;top:5px;right:5px;width:22px;height:22px;padding:0;color:var(--muted);border:0;background:transparent}.topology-remove:hover,.topology-remove:focus{color:#ff8e85}.topology-node:hover{border-color:var(--mint);transform:translateY(-50%) translateY(-2px)}.topology-open:disabled{cursor:default;opacity:1}.topology-node small{color:var(--muted);text-transform:uppercase;font-size:9px;letter-spacing:1px}.topology-node strong{overflow:hidden;text-overflow:ellipsis}.topology-node span{color:var(--muted);overflow:hidden;white-space:nowrap;text-overflow:ellipsis;font-size:10px}.topology-node.watchdog{border-color:#6a5830}.topology-node.loop{border-color:#385778}.topology-node.temporary{border-style:dashed}.topology-node.attention,.topology-node.unknown{box-shadow:inset 3px 0 var(--amber)}.topology-node.offline{opacity:.65}.lineage-note{color:var(--muted);font-size:11px}.topology-editor{display:grid;gap:12px}.topology-toolbar{display:flex;gap:8px;align-items:center;flex-wrap:wrap}.topology-toolbar .spacer{flex:1 1 auto}.draft-count{color:var(--amber);font-size:11px}.topology-empty{display:grid;gap:10px;justify-items:start;padding:26px;border:1px dashed var(--line);border-radius:12px;background:#0c1112}.topology-empty h3{margin:0}.topology-empty p{margin:0;color:var(--muted)}.topology-tutorial{padding:12px 14px;border:1px solid var(--line);border-radius:10px;background:#0c1112;font-size:12px}.topology-tutorial ol{display:grid;gap:6px;margin:0 0 8px;padding-left:18px;color:var(--muted)}.topology-tutorial li.current{color:#d5dddf}.banner{margin:0;padding:9px 12px;border:1px solid var(--line);border-radius:8px;background:#0c1112;color:var(--muted);font-size:12px}.banner.warning{border-color:#6a5830;color:var(--amber)}.node-badge{display:inline-block;padding:1px 6px;border-radius:999px;font-size:9px;letter-spacing:.3px}.node-badge.draft-incomplete{background:#2a2413;color:var(--amber)}.node-badge.draft-ready{background:#12261f;color:var(--mint)}.node-badge.configured{background:#16202a;color:#9fc0e0}.node-badge.running{background:#12261f;color:var(--mint)}.node-detail{display:block}.topology-node.draft-incomplete,.topology-node.draft-ready{border-style:dashed}.topology-node.selected{border-color:var(--mint);box-shadow:0 0 0 2px #58c7a059}.topology-node[data-node-id]{touch-action:none}.edge.implicit line{stroke-dasharray:1 5;opacity:.75}.edge.dangling line{stroke:var(--red);stroke-dasharray:3 3}.edge.drafted line{opacity:.7}.topology-list{width:100%;border-collapse:collapse;color:#d5dddf;text-align:left;font-size:12px}.topology-list th,.topology-list td{padding:8px;border-top:1px solid var(--line)}.topology-list tr.selected{background:#101718}.node-inspector{display:grid;gap:10px;padding:14px;border:1px solid var(--line);border-radius:12px;background:#0c1112}.node-inspector header{display:flex;align-items:center;justify-content:space-between}.node-inspector h3,.node-inspector h4{margin:0}.node-inspector label{display:grid;gap:4px;font-size:12px}.node-inspector small{color:var(--muted);font-size:10px}.missing-list{display:grid;gap:4px;margin:0;padding-left:18px;color:var(--amber);font-size:12px}.connection-list{display:grid;gap:4px;margin:0;padding-left:18px;color:var(--muted);font-size:11px}.inspector-actions{display:flex;gap:8px;align-items:center;flex-wrap:wrap}.review-panel{display:grid;gap:10px;padding:14px;border:1px solid var(--mint);border-radius:12px;background:#0c1112}.review-panel h3{margin:0}.review-panel .row{display:flex;gap:8px}.topology-fallback{margin:0 0 18px;color:var(--muted);font-size:12px}.topology-fallback summary{cursor:pointer}.topology-fallback table{width:100%;border-collapse:collapse;margin-top:10px;color:#d5dddf;text-align:left}.topology-fallback th,.topology-fallback td{padding:8px;border-top:1px solid var(--line)}.text-button{border:0;padding:0;color:var(--mint);background:transparent;cursor:pointer;text-align:left}.setup-entry{max-width:1180px;margin-inline:auto}.setup-hero{display:grid;grid-template-columns:1fr 300px;gap:30px;align-items:center;padding:12px 0 26px}.setup-hero h2{margin:6px 0 8px;font-size:28px}.setup-hero p{max-width:680px;color:var(--muted)}.setup-safety{display:grid;gap:5px;padding:15px;border:1px solid #315e4a;border-radius:10px;background:#102019}.setup-safety span{color:var(--muted);font-size:12px;line-height:1.45}.setup-steps{display:grid;grid-template-columns:repeat(4,1fr);gap:0;margin:0 0 18px;padding:0;list-style:none}.setup-steps li{display:flex;gap:8px;align-items:center;color:#647174;border-bottom:2px solid #263033;padding:10px;font-size:12px}.setup-steps li.active{color:#fff;border-color:var(--mint)}.setup-steps li.done{color:var(--mint);border-color:#315e4a}.setup-panel{min-height:360px}.setup-panel h3{margin-bottom:6px}.mode-switch{display:flex;gap:8px;align-items:center;margin:0 0 14px;padding:8px;border:1px solid var(--line);border-radius:10px}.mode-switch button.active{color:#07110d;background:var(--mint);border-color:var(--mint)}.mode-switch span{margin-left:6px;color:var(--muted);font-size:12px}.decision-note{display:flex;gap:10px;margin:12px 0;padding:11px;border-left:3px solid var(--mint);background:#102019;color:var(--muted)}.decision-note strong{color:#dce6e2;white-space:nowrap}.setup-actions{display:grid;grid-template-columns:auto 1fr auto;gap:10px;margin-top:22px;padding-top:18px;border-top:1px solid var(--line)}.section-title{display:flex;justify-content:space-between;align-items:start;gap:20px}.entity-list{display:grid;gap:12px}.entity-card{position:relative;padding:15px;border:1px solid var(--line);border-radius:9px;background:#0c1112}.entity-card>.danger{position:absolute;right:14px;bottom:12px}.empty.compact{padding:34px}.preflight{display:grid;gap:4px;margin:12px 0 18px;padding:13px;border:1px solid #315e4a;border-radius:8px;background:#102019}.preflight.failed{border-color:#66552f;background:#211b10}.preflight span{color:var(--muted);font-size:12px}.setup-panel details{margin-top:14px}.setup-panel summary{cursor:pointer;color:#cbd4d6}.config-diff{max-height:360px;padding:14px;border-radius:8px;background:#080b0c}@media(max-width:760px){.topology-legend ul{grid-template-columns:1fr}.mode-switch{align-items:stretch;flex-wrap:wrap}.mode-switch span{flex-basis:100%;margin-left:0}}.check-list{display:grid;gap:7px;padding-left:20px;font-size:12px}.check-list .ok::marker{color:var(--mint)}.check-list .failed::marker{color:var(--red)}@media(max-width:760px){.shell{display:block;padding-bottom:68px}aside{z-index:9;inset:auto 0 0;width:auto;height:64px;padding:7px;border:1px solid var(--line);background:#080b0cf7}aside .brand,.sidebar-foot{display:none}aside nav{grid-template-columns:repeat(5,1fr);gap:2px}aside nav button{display:flex;min-width:0;flex-direction:column;gap:2px;justify-content:center;padding:6px 2px;text-align:center;font-size:9px}aside nav button span{font-size:15px}aside nav b{display:none}.main{width:100%}header{height:auto;min-height:104px;padding:18px;align-items:start;gap:12px}header h1{font-size:23px}.header-actions{flex-wrap:wrap;justify-content:flex-end}.header-actions button{padding:7px 9px;font-size:11px}.content,.workspace{padding:18px 14px 36px}.banner{margin-inline:14px}.toolbar{align-items:stretch;gap:10px;flex-direction:column}.toolbar input{width:100%}.role-table{overflow-x:auto}.role-row{min-width:720px}.setup-hero{grid-template-columns:1fr}.setup-steps li{flex-direction:column;font-size:10px}.form-grid,.form-grid.three{grid-template-columns:1fr}.form-grid .wide{grid-column:auto}.section-title{align-items:stretch;flex-direction:column}}@media(prefers-reduced-motion:reduce){*,*:before,*:after{scroll-behavior:auto!important;transition:none!important;animation:none!important}}.conversation-layout{display:grid;grid-template-rows:1fr auto;gap:14px;min-height:60vh}.conversation{display:flex;flex-direction:column;min-height:0;position:relative}.conversation-header{display:flex;flex-wrap:wrap;gap:12px;align-items:baseline;padding-bottom:10px;border-bottom:1px solid var(--line);font-size:12px}.stream-state{text-transform:uppercase;font-size:10px;letter-spacing:1.4px;font-weight:700;color:var(--amber)}.stream-state.live{color:var(--mint)}.stream-state.offline{color:var(--red)}.conversation-header .warning{color:var(--amber)}.transcript{flex:1;overflow-y:auto;display:grid;gap:14px;padding:16px 4px;max-height:62vh}.turn{display:grid;gap:8px}.bubble{border:1px solid var(--line);border-radius:10px;padding:10px 14px;background:#0d1213}.bubble small{color:var(--muted);display:block;margin-bottom:6px}.bubble.user{border-left:2px solid var(--mint);margin-left:8%;background:#10181a}.bubble.assistant{margin-right:8%}.prompt-text,.assistant-text,.thought-text{margin:0;white-space:pre-wrap;word-break:break-word;font-family:inherit;font-size:14px;line-height:1.5}.assistant-text+.assistant-text{margin-top:10px;padding-top:10px;border-top:1px dashed var(--line)}.thought-text{color:var(--muted);font-size:13px;margin-top:8px}.thoughts{margin-bottom:8px}.streaming-hint{animation:pulse 1.4s ease-in-out infinite}@media(prefers-reduced-motion:reduce){.streaming-hint{animation:none}}@keyframes pulse{50%{opacity:.45}}.tool-card{border:1px solid var(--line);border-radius:8px;padding:7px 11px;margin:6px 0;font-size:13px;background:#101516}.tool-card summary{display:flex;gap:10px;align-items:baseline;cursor:pointer}.tool-detail{display:grid;gap:9px;padding-top:10px}.tool-detail code{display:block;overflow-wrap:anywhere;color:var(--muted);margin-top:4px}.tool-content{border-top:1px dashed var(--line);padding-top:8px;min-width:0}.tool-content pre{max-height:260px;overflow:auto;white-space:pre-wrap;word-break:break-word;margin:5px 0 0;color:#d9e4e2}.diff-old{color:#d99b96!important}.diff-new{color:#9ed8c4!important}.plan-card{border:1px solid var(--line);border-radius:8px;padding:9px 12px;margin:6px 0;font-size:13px}.plan-card ol{list-style:none;margin:7px 0 0;padding:0;display:grid;gap:5px}.plan-entry{display:grid;grid-template-columns:18px 1fr auto;gap:7px;color:var(--muted)}.plan-entry.in_progress{color:var(--amber)}.plan-entry.completed{color:var(--mint)}.usage-badge{margin-top:10px;color:var(--muted)}.tool-status{text-transform:uppercase;font-size:10px;letter-spacing:1px;font-weight:700;color:var(--muted)}.tool-status.in_progress{color:var(--amber)}.tool-status.completed{color:var(--mint)}.tool-status.failed{color:var(--red)}.permission-card{border:1px solid var(--amber);border-radius:8px;padding:10px 12px;margin:8px 0;font-size:13px;display:grid;gap:8px}.permission-card.resolved{border-color:var(--line);color:var(--muted)}.permission-actions{display:flex;gap:8px;flex-wrap:wrap}.jump-latest{position:absolute;right:20px;bottom:16px}.conversation-layout .composer{display:grid;gap:8px}.conversation-layout .composer textarea{min-height:68px;max-height:200px;resize:vertical;color:#fff;background:#101516;border:1px solid var(--line);border-radius:8px;padding:10px 13px}.composer-actions{display:flex;gap:9px;justify-content:space-between}.composer-actions .danger{margin-left:auto}button.danger{border:1px solid #5b322f;color:var(--red);background:#1a1213;border-radius:7px;padding:9px 13px;cursor:pointer}button.danger:disabled{opacity:.4;cursor:default}