@particle-academy/agent-integrations 0.28.2 → 0.30.0

package/dist/index.cjs

@@ -112,7 +112,7 @@ var MicroMcpServer = class extends ToolRegistry {
     }
     const request = message;
     try {
-      const result = await this.handle(request);
+      const result = await this.handle(request, transport);
       transport.send({ jsonrpc: "2.0", id: request.id, result });
     } catch (err) {
       transport.send({
@@ -122,7 +122,7 @@ var MicroMcpServer = class extends ToolRegistry {
       });
     }
   }
-  async handle(request) {
+  async handle(request, transport) {
     const { method, params } = request;
     switch (method) {
       case "initialize":
@@ -144,7 +144,7 @@ var MicroMcpServer = class extends ToolRegistry {
         if (!tool) {
           throw rpcError(JSONRPC_METHOD_NOT_FOUND, `Unknown tool: ${name}`);
         }
-        const result = await tool.handler(args);
+        const result = await tool.handler(args, { transport });
         return result;
       }
       case "ping":
@@ -161,6 +161,11 @@ var MicroMcpServer = class extends ToolRegistry {
       this.broadcast({ jsonrpc: "2.0", method: "notifications/tools/list_changed" });
     });
   }
+  /** Send an application notification to every client, or one attached transport. */
+  notify(message, transport) {
+    if (transport) transport.send(message);
+    else this.broadcast(message);
+  }
   broadcast(message) {
     for (const t of this.transports) t.send(message);
   }
@@ -252,6 +257,50 @@ function attachRelay(server, channel) {
   return transport;
 }
 
+// src/human-plus/events.ts
+var MemoryHumanPlusEventStore = class {
+  constructor() {
+    this.events = [];
+    this.acknowledgements = /* @__PURE__ */ new Map();
+    this.listeners = /* @__PURE__ */ new Set();
+    this.nextSequence = 1;
+  }
+  async append(input) {
+    const event = { ...input, id: input.id ?? globalThis.crypto.randomUUID(), timestamp: input.timestamp ?? Date.now(), sequence: this.nextSequence++ };
+    this.events.push(event);
+    this.listeners.forEach((listener) => listener(event));
+    return event;
+  }
+  async list(query) {
+    const acknowledged = this.acknowledgements.get(query.consumerId);
+    const events = this.events.filter((event) => event.sequence > (query.after ?? 0) && (!query.unacknowledgedOnly || !acknowledged?.has(event.id)) && (!query.types?.length || query.types.includes(event.type)) && (!query.surfaces?.length || query.surfaces.includes(event.surfaceId))).slice(0, Math.max(1, Math.min(500, query.limit ?? 50)));
+    return { events, nextCursor: events.at(-1)?.sequence ?? query.after ?? 0 };
+  }
+  async acknowledge(consumerId, eventIds, disposition) {
+    let values = this.acknowledgements.get(consumerId);
+    if (!values) {
+      values = /* @__PURE__ */ new Map();
+      this.acknowledgements.set(consumerId, values);
+    }
+    eventIds.forEach((id) => values.set(id, disposition));
+  }
+  subscribe(listener) {
+    this.listeners.add(listener);
+    return () => this.listeners.delete(listener);
+  }
+  async compact(options = {}) {
+    const cutoff = options.before ?? Number.POSITIVE_INFINITY;
+    const keep = options.keepLast ?? 1e3;
+    const removable = Math.max(0, this.events.length - keep);
+    this.events = this.events.filter((event, index) => index >= removable || event.timestamp >= cutoff);
+    const ids = new Set(this.events.map((event) => event.id));
+    for (const values of this.acknowledgements.values()) for (const id of values.keys()) if (!ids.has(id)) values.delete(id);
+  }
+};
+
+// src/presence/index.ts
+init_registry();
+
 // src/presence/wrap-tool-with-activity.ts
 init_registry();
 function wrapToolWithActivity(handler, options) {
@@ -272,7 +321,7 @@ function wrapToolWithActivity(handler, options) {
       target: { ...target, kind: target.kind ?? options.kind, screenId: target.screenId ?? options.screenId },
       action: options.toolName,
       timestamp: Date.now(),
-      meta: extractMeta(result),
+      meta: options.buildMeta ? options.buildMeta(result) : extractMeta(result),
       ttlMs: options.ttlMs
     });
     return result;
@@ -286,6 +335,133 @@ function extractMeta(result) {
   return void 0;
 }
 
+// src/presence/use-agent-activity.ts
+init_registry();
+function useAgentActivity(filter, options = {}) {
+  const cap = options.capacity ?? 50;
+  const [events, setEvents] = react.useState(() => fancyAutoCommon.readActivityHistory(filter).slice(-cap));
+  react.useEffect(() => {
+    setEvents(fancyAutoCommon.readActivityHistory(filter).slice(-cap));
+    return fancyAutoCommon.onActivity((event) => {
+      setEvents((prev) => {
+        const next = prev.length >= cap ? prev.slice(prev.length - cap + 1) : prev.slice();
+        next.push(event);
+        return next;
+      });
+    }, filter);
+  }, [filter?.agentId, filter?.screenId, filter?.kind, cap]);
+  return { events, latest: events.length > 0 ? events[events.length - 1] : null };
+}
+function useAgentActivityForScreen(screenId, options = {}) {
+  const { events, latest } = useAgentActivity({ screenId }, options);
+  const fadeAfter = latest?.ttlMs ?? 1500;
+  const [isAgentActive, setActive] = react.useState(false);
+  react.useEffect(() => {
+    if (!latest) {
+      setActive(false);
+      return;
+    }
+    setActive(true);
+    const timer = setTimeout(() => setActive(false), fadeAfter);
+    return () => clearTimeout(timer);
+  }, [latest, fadeAfter]);
+  return { events, latest, isAgentActive };
+}
+
+// src/bridges/tui.ts
+function registerTuiBridge(host, options) {
+  const disposers = [];
+  const subscriptions = /* @__PURE__ */ new Map();
+  const pending = /* @__PURE__ */ new Map();
+  const defaultActor = options.actor ?? { kind: "agent", id: "agent", name: "Agent" };
+  const serverCapabilities = host.capabilities;
+  if (serverCapabilities) serverCapabilities.experimental = { ...serverCapabilities.experimental, "io.particle-academy/human-plus": { version: "1", push: true, durableCursor: true, stagedActions: true, wakesAgent: false } };
+  const register = (name, description, properties, required, handler) => {
+    disposers.push(host.registerTool({ name, description, inputSchema: { type: "object", properties, required } }, async (args, context) => {
+      try {
+        const result = await handler(args, context);
+        return textResult(typeof result === "string" ? result : JSON.stringify(result), result);
+      } catch (error) {
+        return errorResult(error instanceof Error ? error.message : String(error));
+      }
+    }));
+  };
+  const publish = async (surfaceId, type, payload, actor = defaultActor, priority = "normal") => options.eventStore.append({ appId: options.appId, sessionId: options.sessionId, surfaceId, type, payload, actor, priority });
+  register("tui_surfaces_list", "List addressable Fancy TUI surfaces and commands.", {}, [], () => options.registry.list().map((surface) => ({ id: surface.id, kind: surface.kind, label: surface.label, commands: surface.commands?.map((command) => ({ name: command.name, description: command.description, policy: command.policy ?? "execute", inputSchema: command.inputSchema })) ?? [] })));
+  register("tui_surface_read", "Read a Fancy TUI surface by stable id.", { id: { type: "string" } }, ["id"], (args) => {
+    const surface = options.registry.get(String(args.id));
+    if (!surface) throw new Error(`Unknown TUI surface: ${String(args.id)}`);
+    return { id: surface.id, kind: surface.kind, state: surface.read() };
+  });
+  register("tui_action_invoke", "Invoke or propose an action on a Fancy TUI surface.", { surfaceId: { type: "string" }, command: { type: "string" }, input: { type: "object" } }, ["surfaceId", "command"], async (args) => {
+    const surfaceId = String(args.surfaceId);
+    const commandName = String(args.command);
+    const surface = options.registry.get(surfaceId);
+    if (!surface) throw new Error(`Unknown TUI surface: ${surfaceId}`);
+    const command = surface.commands?.find((value) => value.name === commandName);
+    if (!command) throw new Error(`Unknown command '${commandName}' on ${surfaceId}`);
+    const policy = command.policy ?? "execute";
+    if (policy === "observe" || policy === "human-only") throw new Error(`Action ${surfaceId}.${commandName} is ${policy}`);
+    const input = args.input && typeof args.input === "object" && !Array.isArray(args.input) ? args.input : {};
+    if (policy === "propose" || policy === "confirm") {
+      const id = globalThis.crypto.randomUUID();
+      pending.set(id, { id, surfaceId, command: commandName, input, actor: defaultActor });
+      await publish(surfaceId, "action.proposed", { id, command: commandName, input }, defaultActor, "attention");
+      return { pending: true, id };
+    }
+    const result = await command.invoke(input);
+    await publish(surfaceId, "action.executed", { command: commandName, input, result });
+    fancyAutoCommon.emitActivity({ agentId: defaultActor.id, agentName: defaultActor.name, target: { kind: "custom", elementId: surfaceId }, action: `tui_${commandName}`, timestamp: Date.now(), meta: { surfaceId } });
+    return { executed: true, result };
+  });
+  register("tui_action_confirm", "Confirm and execute a pending TUI action.", { id: { type: "string" } }, ["id"], async (args) => {
+    const id = String(args.id);
+    const value = pending.get(id);
+    if (!value) throw new Error(`Unknown pending action: ${id}`);
+    const surface = options.registry.get(value.surfaceId);
+    const command = surface?.commands?.find((x) => x.name === value.command);
+    if (!command) throw new Error("Pending action target is no longer available");
+    pending.delete(id);
+    const result = await command.invoke(value.input);
+    await publish(value.surfaceId, "action.confirmed", { id, command: value.command, result }, { kind: "human", id: "human" });
+    return { executed: true, result };
+  });
+  register("tui_action_reject", "Reject a pending TUI action.", { id: { type: "string" } }, ["id"], async (args) => {
+    const id = String(args.id);
+    const value = pending.get(id);
+    if (!value) throw new Error(`Unknown pending action: ${id}`);
+    pending.delete(id);
+    await publish(value.surfaceId, "action.rejected", { id, command: value.command }, { kind: "human", id: "human" });
+    return { rejected: true };
+  });
+  register("human_plus_events_list", "Pull durable Human+ events for a consumer.", { consumerId: { type: "string" }, after: { type: "number" }, limit: { type: "number" }, unacknowledgedOnly: { type: "boolean" } }, ["consumerId"], (args) => options.eventStore.list({ consumerId: String(args.consumerId), after: typeof args.after === "number" ? args.after : void 0, limit: typeof args.limit === "number" ? args.limit : void 0, unacknowledgedOnly: args.unacknowledgedOnly === true }));
+  register("human_plus_events_ack", "Acknowledge durable Human+ events.", { consumerId: { type: "string" }, eventIds: { type: "array", items: { type: "string" } }, disposition: { type: "string" } }, ["consumerId", "eventIds"], async (args) => {
+    const ids = Array.isArray(args.eventIds) ? args.eventIds.map(String) : [];
+    await options.eventStore.acknowledge(String(args.consumerId), ids, ["seen", "handled", "rejected", "ignored"].includes(String(args.disposition)) ? String(args.disposition) : "handled");
+    return { acknowledged: ids.length };
+  });
+  register("human_plus_events_subscribe", "Push matching Human+ events on this MCP transport while retaining them in the inbox.", { consumerId: { type: "string" }, types: { type: "array" }, surfaces: { type: "array" } }, ["consumerId"], (args, context) => {
+    if (!context?.transport) throw new Error("Subscriptions require an attached MCP transport");
+    subscriptions.set(context.transport, { consumerId: String(args.consumerId), types: Array.isArray(args.types) ? args.types.map(String) : void 0, surfaces: Array.isArray(args.surfaces) ? args.surfaces.map(String) : void 0 });
+    return { subscribed: true, delivery: "at-least-once", wakesAgent: false };
+  });
+  const unsubscribeStore = options.eventStore.subscribe((event) => {
+    const server = host;
+    if (typeof server.notify !== "function") return;
+    for (const [transport, subscription] of subscriptions) {
+      if (subscription.types?.length && !subscription.types.includes(event.type)) continue;
+      if (subscription.surfaces?.length && !subscription.surfaces.includes(event.surfaceId)) continue;
+      server.notify({ jsonrpc: "2.0", method: "notifications/human_plus/event", params: event }, transport);
+    }
+  });
+  return { id: "tui", title: "Fancy TUI", pending: () => [...pending.values()], dispose: () => {
+    disposers.forEach((dispose) => dispose());
+    unsubscribeStore();
+    subscriptions.clear();
+    pending.clear();
+  } };
+}
+
 // src/undo/undo-tools.ts
 var installedHosts = /* @__PURE__ */ new WeakSet();
 function ensureUndoToolsRegistered(host, options = {}) {
@@ -367,6 +543,7 @@ var DEFAULT_AGENT = { id: "agent", name: "Agent", color: "#a855f7" };
 function registerFormBridge(host, options) {
   const { adapter } = options;
   const agent = { ...DEFAULT_AGENT, ...options.agent ?? {} };
+  const pendingMode = options.pendingMode ?? true;
   const disposers = [];
   ensureUndoToolsRegistered(host, { defaultAgentId: agent.id });
   const formId = adapter.id;
@@ -495,11 +672,20 @@ function registerFormBridge(host, options) {
   );
   reg(
     "form_submit",
-    "Submit the form. Host returns ok + values (or an error).",
+    "Submit the form. Host returns ok + values (or an error). In pendingMode this is staged for the human to confirm first.",
     {},
     [],
     async () => {
       if (!adapter.submit) return errorResult("Host did not provide a submit implementation.");
+      if (pendingMode && adapter.confirm) {
+        const ok = await adapter.confirm({
+          action: "submit",
+          form: formId,
+          title: adapter.title,
+          values: adapter.getValues()
+        });
+        if (!ok) return errorResult("Declined by user");
+      }
       const result = await adapter.submit();
       if (!result.ok) return errorResult(result.error ?? "Submit failed");
       return textResult("Submitted", { values: result.values });
@@ -863,6 +1049,7 @@ function useSheetsActivityHighlights(options = {}) {
 }
 
 // src/bridges/code.ts
+var MAX_STREAM_CHARS = 1e4;
 var DEFAULT_AGENT3 = { id: "agent", name: "Agent", color: "#a855f7" };
 function registerCodeBridge(host, options) {
   const { adapter } = options;
@@ -875,6 +1062,16 @@ function registerCodeBridge(host, options) {
     elementId: adapter.id,
     label: adapter.title ?? adapter.id
   };
+  const recordUndo = (action, label, prevValue, nextValue) => {
+    fancyAutoCommon.pushUndoEntry(agent.id, {
+      timestamp: Date.now(),
+      bridgeId: "code",
+      action,
+      label,
+      undo: () => adapter.setValue(prevValue),
+      redo: () => adapter.setValue(nextValue)
+    });
+  };
   const reg = (name, description, properties, required, handler, isMutation) => {
     const wrapped = async (args) => {
       try {
@@ -944,7 +1141,9 @@ function registerCodeBridge(host, options) {
     ["value"],
     (args) => {
       const value = String(args.value ?? "");
+      const prev = adapter.getValue();
       adapter.setValue(value);
+      recordUndo("code_set_value", "Replace document", prev, value);
       return textResult(`Replaced document (${value.length} chars)`, { length: value.length });
     },
     true
@@ -956,8 +1155,10 @@ function registerCodeBridge(host, options) {
     ["text"],
     (args) => {
       const text = String(args.text ?? "");
-      const next = adapter.getValue() + text;
+      const prev = adapter.getValue();
+      const next = prev + text;
       adapter.setValue(next);
+      recordUndo("code_append", `Append ${text.length} chars`, prev, next);
       return textResult(`Appended ${text.length} chars`, { length: next.length });
     },
     true
@@ -972,6 +1173,11 @@ function registerCodeBridge(host, options) {
     ["text"],
     async (args) => {
       const text = String(args.text ?? "");
+      if (text.length > MAX_STREAM_CHARS) {
+        return errorResult(
+          `Text too long to stream (${text.length} > ${MAX_STREAM_CHARS}). Use code_set_value / code_append for large content.`
+        );
+      }
       const cps = Math.max(1, Number(args.cps ?? 25));
       const interval = Math.max(8, Math.round(1e3 / cps));
       const start = adapter.getValue();
@@ -979,6 +1185,7 @@ function registerCodeBridge(host, options) {
         adapter.setValue(start + text.slice(0, i));
         if (i < text.length) await new Promise((r) => setTimeout(r, interval));
       }
+      recordUndo("code_stream_append", `Append ${text.length} chars`, start, start + text);
       return textResult(`Streamed ${text.length} chars`, { length: text.length });
     },
     true
@@ -990,7 +1197,9 @@ function registerCodeBridge(host, options) {
     ["text"],
     (args) => {
       if (!adapter.replaceSelection) return errorResult("Host did not provide replaceSelection.");
+      const prev = adapter.getValue();
       adapter.replaceSelection(String(args.text ?? ""));
+      recordUndo("code_replace_selection", "Replace selection", prev, adapter.getValue());
       return textResult("Selection replaced", {});
     },
     true
@@ -1003,7 +1212,18 @@ function registerCodeBridge(host, options) {
     (args) => {
       if (!adapter.setLanguage) return errorResult("Host did not provide setLanguage.");
       const lang = String(args.language ?? "");
+      const prevLang = adapter.getLanguage?.();
       adapter.setLanguage(lang);
+      if (prevLang !== void 0) {
+        fancyAutoCommon.pushUndoEntry(agent.id, {
+          timestamp: Date.now(),
+          bridgeId: "code",
+          action: "code_set_language",
+          label: `Language \u2192 ${lang}`,
+          undo: () => adapter.setLanguage?.(prevLang),
+          redo: () => adapter.setLanguage?.(lang)
+        });
+      }
       return textResult(`Language \u2192 ${lang}`, { language: lang });
     },
     true
@@ -1018,7 +1238,8 @@ function registerCodeBridge(host, options) {
       adapter.focus();
       return textResult("Focused", {});
     },
-    true
+    // Focus is not a document mutation — don't broadcast it as one or log undo.
+    false
   );
   return {
     id: `code:${adapter.id}`,
@@ -2289,6 +2510,22 @@ function registerMapBridge(host, options) {
 
 // src/bridges/files.ts
 var DEFAULT_AGENT9 = { id: "agent", name: "Agent", color: "#a855f7" };
+var MAX_SNAPSHOT_DEPTH = 8;
+function assertPathWithinRoot(root, path) {
+  const segments = path.replace(/[\\/]+/g, "/").split("/");
+  if (segments.includes("..")) {
+    throw new Error(`Path may not contain '..': ${path}`);
+  }
+  const isAbsolute = /^([A-Za-z]:)?[\\/]/.test(path) || /^[A-Za-z]:/.test(path);
+  if (isAbsolute) {
+    const norm = (p2) => p2.replace(/[\\/]+/g, "/").replace(/\/+$/, "").toLowerCase();
+    const r = norm(root);
+    const p = norm(path);
+    if (p !== r && !p.startsWith(r + "/")) {
+      throw new Error(`Path escapes the configured root: ${path}`);
+    }
+  }
+}
 var str3 = (v, fallback = "") => typeof v === "string" ? v : fallback;
 var num3 = (v, fallback) => typeof v === "number" && Number.isFinite(v) ? v : 0;
 var asPaths = (v) => {
@@ -2304,6 +2541,10 @@ function registerFilesBridge(host, options) {
   const { adapter } = options;
   const agent = { ...DEFAULT_AGENT9, ...options.agent ?? {} };
   const disposers = [];
+  const guard = (path) => {
+    if (options.root !== void 0) assertPathWithinRoot(options.root, path);
+    return path;
+  };
   ensureUndoToolsRegistered(host, { defaultAgentId: agent.id });
   const fTarget = (args, _result) => ({
     kind: "files",
@@ -2359,7 +2600,7 @@ function registerFilesBridge(host, options) {
     { path: { type: "string", description: "Folder path to list; defaults to the current directory." } },
     [],
     async (args) => {
-      const path = args.path !== void 0 ? str3(args.path) : adapter.getPath();
+      const path = guard(args.path !== void 0 ? str3(args.path) : adapter.getPath());
       const entries = await adapter.listChildren(path);
       const summary = entries.map((e) => ({
         path: e.path,
@@ -2378,7 +2619,7 @@ function registerFilesBridge(host, options) {
     { path: { type: "string" } },
     ["path"],
     (args) => {
-      const path = str3(args.path);
+      const path = guard(str3(args.path));
       const prev = adapter.getPath();
       adapter.setPath(path);
       fancyAutoCommon.pushUndoEntry(agent.id, {
@@ -2399,7 +2640,7 @@ function registerFilesBridge(host, options) {
     { path: { type: "string" } },
     ["path"],
     (args) => {
-      const path = str3(args.path);
+      const path = guard(str3(args.path));
       if (adapter.getExpanded().includes(path)) {
         return textResult(`${path} already expanded`, { path, expanded: true });
       }
@@ -2422,7 +2663,7 @@ function registerFilesBridge(host, options) {
     { path: { type: "string" } },
     ["path"],
     (args) => {
-      const path = str3(args.path);
+      const path = guard(str3(args.path));
       if (!adapter.getExpanded().includes(path)) {
         return textResult(`${path} already collapsed`, { path, expanded: false });
       }
@@ -2448,7 +2689,7 @@ function registerFilesBridge(host, options) {
     },
     [],
     (args) => {
-      const next = args.paths !== void 0 ? asPaths(args.paths) : asPaths(args.path);
+      const next = (args.paths !== void 0 ? asPaths(args.paths) : asPaths(args.path)).map(guard);
       const prev = adapter.getSelection();
       adapter.setSelection(next);
       fancyAutoCommon.pushUndoEntry(agent.id, {
@@ -2477,8 +2718,8 @@ function registerFilesBridge(host, options) {
       if (!adapter.requestSnapshot) {
         return errorResult("Host did not wire requestSnapshot (snapshot mode not enabled).");
       }
-      const path = args.path !== void 0 ? str3(args.path) : adapter.getPath();
-      const depth = args.depth !== void 0 ? num3(args.depth) : void 0;
+      const path = guard(args.path !== void 0 ? str3(args.path) : adapter.getPath());
+      const depth = args.depth !== void 0 ? Math.max(0, Math.min(MAX_SNAPSHOT_DEPTH, num3(args.depth))) : void 0;
       const tree = await adapter.requestSnapshot(path, depth);
       const count = Array.isArray(tree) ? tree.length : 0;
       return textResult(`Snapshot of ${path}: ${count} top-level entr${count === 1 ? "y" : "ies"}.`, {
@@ -2502,16 +2743,15 @@ var DEFAULT_AGENT10 = { id: "agent", name: "Agent", color: "#a855f7" };
 var truncate = (s, n = 60) => s.length > n ? s.slice(0, n) + "\u2026" : s;
 function registerTerminalBridge(host, options) {
   const agent = { ...DEFAULT_AGENT10, ...options.agent ?? {} };
-  const pendingMode = options.pendingMode ?? false;
+  const pendingMode = options.pendingMode ?? true;
   const screenId = options.screenId ?? options.adapter?.screenId;
   const disposers = [];
   const staged = /* @__PURE__ */ new Map();
   let seq = 0;
   ensureUndoToolsRegistered(host);
   const listTerminals = () => {
-    if (options.terminals) return options.terminals();
-    if (options.adapter) return [{ id: "terminal", label: "Terminal", active: true, ...options.adapter }];
-    return [];
+    const all = options.terminals ? options.terminals() : options.adapter ? [{ id: "terminal", label: "Terminal", active: true, ...options.adapter }] : [];
+    return options.canAccess ? all.filter((t) => options.canAccess(t.id)) : all;
   };
   const resolve = (id) => {
     const list = listTerminals();
@@ -2528,6 +2768,17 @@ function registerTerminalBridge(host, options) {
     elementId: terminalId ?? screenId ?? "terminal",
     label: label ?? "terminal"
   });
+  const redactMeta = (result) => {
+    const sc = result.structuredContent;
+    if (!sc || typeof sc !== "object") return void 0;
+    return {
+      terminal: sc.terminal,
+      kind: sc.kind,
+      length: typeof sc.data === "string" ? sc.data.length : void 0,
+      executed: sc.executed,
+      pending: sc.pending
+    };
+  };
   const TERMINAL_ARG = {
     terminal: {
       type: "string",
@@ -2547,7 +2798,12 @@ function registerTerminalBridge(host, options) {
       agent,
       kind: "terminal",
       screenId,
-      resolveTarget: ({ args, result }) => resolveTarget?.(args, result) ?? target()
+      // A per-call resolver may return null to SKIP the broadcast (e.g. a
+      // merely-staged command); only fall back to the default target when no
+      // resolver was supplied.
+      resolveTarget: ({ args, result }) => resolveTarget ? resolveTarget(args, result) : target(),
+      // Never fan raw command/keystroke bytes to peers — broadcast shape only.
+      buildMeta: redactMeta
     }) : wrapped;
     disposers.push(
       host.registerTool(
@@ -2584,6 +2840,7 @@ function registerTerminalBridge(host, options) {
       return textResult(`${kind === "run" ? "ran" : "wrote"} on ${t.id}: ${truncate(data)}`, {
         kind,
         data,
+        length: data.length,
         terminal: t.id,
         executed: true
       });
@@ -2594,7 +2851,7 @@ function registerTerminalBridge(host, options) {
     options.onPending?.(entry);
     return textResult(
       `Staged ${kind} on ${t.id} (id ${id}) \u2014 awaiting human confirmation: ${truncate(data)}`,
-      { ...entry, pending: true }
+      { ...entry, length: data.length, pending: true }
     );
   }
   reg(
@@ -2639,12 +2896,13 @@ function registerTerminalBridge(host, options) {
   );
   reg(
     "terminal_write",
-    "Write raw data / keystrokes to a terminal (input, control chars, ANSI). Pass `terminal` to target a specific one. In pendingMode this stages instead of executing.",
+    "Write raw data / keystrokes to a terminal (input, control chars, ANSI). Pass `terminal` to target a specific one. In pendingMode this stages instead of executing. NOTE: bytes are written verbatim \u2014 an embedded CR runs a command, and ANSI/OSC sequences reach the terminal; treat this exactly like terminal_run for gating.",
     { ...TERMINAL_ARG, data: { type: "string", description: "Raw bytes to write." } },
     ["data"],
     (args) => stageOrExec(need(args), "write", String(args.data)),
     true,
-    (args) => target(`write:${String(args.terminal ?? "")}`, resolve(args.terminal)?.id)
+    // Skip the peer broadcast while only staged; emit once it actually executes.
+    (args, result) => result?.structuredContent?.pending ? null : target(`write:${String(args.terminal ?? "")}`, resolve(args.terminal)?.id)
   );
   reg(
     "terminal_run",
@@ -2653,41 +2911,47 @@ function registerTerminalBridge(host, options) {
     ["command"],
     (args) => stageOrExec(need(args), "run", String(args.command)),
     true,
-    (args) => target(truncate(String(args.command ?? "")), resolve(args.terminal)?.id)
-  );
-  reg(
-    "terminal_confirm",
-    "Confirm + execute a staged command by id (pendingMode).",
-    { id: { type: "string" } },
-    ["id"],
-    async (args) => {
-      const id = String(args.id);
-      const entry = staged.get(id);
-      if (!entry) return errorResult(`No staged command ${id}`);
-      const t = resolve(entry.terminalId);
-      if (!t) return errorResult(`Terminal '${entry.terminalId}' is gone \u2014 cannot run ${id}`);
-      staged.delete(id);
-      await exec(t, entry.kind, entry.data);
-      return textResult(`Confirmed ${id}: ${entry.kind} on ${t.id} ${truncate(entry.data)}`, { ...entry, executed: true });
-    },
-    true,
-    (args) => {
-      const e = staged.get(String(args.id));
-      return target(`confirm:${String(args.id ?? "")}`, e?.terminalId);
-    }
-  );
-  reg(
-    "terminal_reject",
-    "Drop a staged command by id without executing it.",
-    { id: { type: "string" } },
-    ["id"],
-    (args) => {
-      const id = String(args.id);
-      if (!staged.delete(id)) return errorResult(`No staged command ${id}`);
-      return textResult(`Rejected ${id}`, { id, rejected: true });
-    },
-    false
+    (args, result) => result?.structuredContent?.pending ? null : target(truncate(String(args.command ?? "")), resolve(args.terminal)?.id)
   );
+  if (options.allowAgentConfirm) {
+    reg(
+      "terminal_confirm",
+      "Confirm + execute a staged command by id (pendingMode).",
+      { id: { type: "string" } },
+      ["id"],
+      async (args) => {
+        const id = String(args.id);
+        const entry = staged.get(id);
+        if (!entry) return errorResult(`No staged command ${id}`);
+        const t = resolve(entry.terminalId);
+        if (!t) return errorResult(`Terminal '${entry.terminalId}' is gone \u2014 cannot run ${id}`);
+        staged.delete(id);
+        await exec(t, entry.kind, entry.data);
+        return textResult(`Confirmed ${id}: ${entry.kind} on ${t.id} ${truncate(entry.data)}`, {
+          ...entry,
+          length: entry.data.length,
+          executed: true
+        });
+      },
+      true,
+      (args) => {
+        const e = staged.get(String(args.id));
+        return target(`confirm:${String(args.id ?? "")}`, e?.terminalId);
+      }
+    );
+    reg(
+      "terminal_reject",
+      "Drop a staged command by id without executing it.",
+      { id: { type: "string" } },
+      ["id"],
+      (args) => {
+        const id = String(args.id);
+        if (!staged.delete(id)) return errorResult(`No staged command ${id}`);
+        return textResult(`Rejected ${id}`, { id, rejected: true });
+      },
+      false
+    );
+  }
   if (canClear) {
     reg(
       "terminal_clear",
@@ -2732,8 +2996,10 @@ function registerTerminalBridge(host, options) {
         if (!t.setShell) return errorResult(`Terminal '${t.id}' can't switch shells.`);
         const id = String(args.id);
         const shells = t.listShells?.();
-        if (shells && shells.length && !shells.some((s) => s.id === id)) {
-          return errorResult(`Unknown shell '${id}' for ${t.id}. Use terminal_list_shells for valid ids.`);
+        if (!shells || !shells.some((s) => s.id === id)) {
+          return errorResult(
+            `Unknown or unlisted shell '${id}' for ${t.id}. Call terminal_list_shells for valid ids.`
+          );
         }
         await t.setShell(id);
         return textResult(`Switched ${t.id} shell to ${id}`, { shell: id, terminal: t.id });
@@ -2874,6 +3140,12 @@ function registerNavigationBridge(host, options) {
       if (stale) return stale;
       const url = String(args.url ?? "");
       if (!url) return errorResult("url is required");
+      const scheme = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(url)?.[1]?.toLowerCase();
+      if (scheme && scheme !== "http" && scheme !== "https") {
+        return errorResult(
+          `Refusing to navigate to a '${scheme}:' URL. Only http(s) URLs or same-site paths are allowed.`
+        );
+      }
       const from = adapter.getLocation().url;
       await adapter.visit(url);
       fancyAutoCommon.pushUndoEntry(agent.id, {
@@ -3858,8 +4130,7 @@ function describeSession(id, token) {
 }
 function buildShareUrl(descriptor, baseUrl = typeof window !== "undefined" ? window.location.href.split("?")[0] : "") {
   const u = new URL(baseUrl);
-  u.searchParams.set("session", descriptor.id);
-  u.searchParams.set("token", descriptor.token);
+  u.hash = new URLSearchParams({ session: descriptor.id, token: descriptor.token }).toString();
   return u.toString();
 }
 function buildShareConfig(descriptor, transport = "broadcast-channel") {
@@ -3874,9 +4145,10 @@ function buildShareConfig(descriptor, transport = "broadcast-channel") {
 }
 function readSessionFromUrl() {
   if (typeof window === "undefined") return null;
-  const params = new URL(window.location.href).searchParams;
-  const id = params.get("session");
-  const token = params.get("token");
+  const url = new URL(window.location.href);
+  const frag = new URLSearchParams(url.hash.replace(/^#/, ""));
+  const id = frag.get("session") ?? url.searchParams.get("session");
+  const token = frag.get("token") ?? url.searchParams.get("token");
   if (!id || !token) return null;
   return describeSession(id, token);
 }
@@ -4568,39 +4840,6 @@ function buildCurlRecipe(session) {
   ].join("\n");
 }
 
-// src/presence/use-agent-activity.ts
-init_registry();
-function useAgentActivity(filter, options = {}) {
-  const cap = options.capacity ?? 50;
-  const [events, setEvents] = react.useState(() => fancyAutoCommon.readActivityHistory(filter).slice(-cap));
-  react.useEffect(() => {
-    setEvents(fancyAutoCommon.readActivityHistory(filter).slice(-cap));
-    return fancyAutoCommon.onActivity((event) => {
-      setEvents((prev) => {
-        const next = prev.length >= cap ? prev.slice(prev.length - cap + 1) : prev.slice();
-        next.push(event);
-        return next;
-      });
-    }, filter);
-  }, [filter?.agentId, filter?.screenId, filter?.kind, cap]);
-  return { events, latest: events.length > 0 ? events[events.length - 1] : null };
-}
-function useAgentActivityForScreen(screenId, options = {}) {
-  const { events, latest } = useAgentActivity({ screenId }, options);
-  const fadeAfter = latest?.ttlMs ?? 1500;
-  const [isAgentActive, setActive] = react.useState(false);
-  react.useEffect(() => {
-    if (!latest) {
-      setActive(false);
-      return;
-    }
-    setActive(true);
-    const timer = setTimeout(() => setActive(false), fadeAfter);
-    return () => clearTimeout(timer);
-  }, [latest, fadeAfter]);
-  return { events, latest, isAgentActive };
-}
-
 // src/connectors/targets.ts
 var CLAUDE_CONNECTORS_URL = "https://claude.ai/settings/connectors";
 function encodeBase64Json(value) {
@@ -5059,9 +5298,6 @@ function SimulateUsersButton({
   );
 }
 
-// src/presence/index.ts
-init_registry();
-
 // src/heuristics/sink.ts
 function numericMeta(meta, key) {
   const v = meta?.[key];
@@ -5302,6 +5538,7 @@ exports.InProcessTransport = InProcessTransport;
 exports.MCPB_MANIFEST_VERSION = MCPB_MANIFEST_VERSION;
 exports.MCPB_MIN_NODE = MCPB_MIN_NODE;
 exports.MCP_PROTOCOL_VERSION = MCP_PROTOCOL_VERSION;
+exports.MemoryHumanPlusEventStore = MemoryHumanPlusEventStore;
 exports.MicroMcpServer = MicroMcpServer;
 exports.RelayTransport = RelayTransport;
 exports.ScreensActivityBridge = ScreensActivityBridge;
@@ -5348,6 +5585,7 @@ exports.registerScreensBridge = registerScreensBridge;
 exports.registerSheetsBridge = registerSheetsBridge;
 exports.registerSlidesBridge = registerSlidesBridge;
 exports.registerTerminalBridge = registerTerminalBridge;
+exports.registerTuiBridge = registerTuiBridge;
 exports.registerUndoTools = registerUndoTools;
 exports.rpcError = rpcError;
 exports.slugifyServerName = slugifyServerName;