@pasko70/pibo 3.2.7 → 3.4.0

package/dist/apps/chat/web-app.js

@@ -1,5 +1,6 @@
 import { createHash, randomUUID } from "node:crypto";
 import os from "node:os";
+import { dirname, join } from "node:path";
 import { monitorEventLoopDelay } from "node:perf_hooks";
 import { PiboSteeringUnavailableError } from "../../core/events.js";
 import { OutputRenderSequencer, validRenderSequence } from "../../core/output-render-sequence.js";
@@ -12,12 +13,12 @@ import { summarizeSessionSignalStatus } from "../../signals/status.js";
 import { PiboWebHttpError, readJsonBody, responseJson } from "../../web/http.js";
 import { OutputCompactor } from "./output-compactor.js";
 import { isLiveOnlyOutputEvent, isPersistableOutputEvent, isPiboOutputEvent } from "./output-event-policy.js";
-import { chatRoomIdFromMetadata, isDefaultPiboRoom, isPiboRoomArchived, roomWorkspaceFromMetadata, withChatRoomId, withPiboRoomWorkspace, } from "./types/rooms.js";
+import { chatRoomIdFromMetadata, comparePiboRoomsBySidebarOrder, isDefaultPiboRoom, isPiboRoomArchived, isPiboRoomPinned, piboRoomSidebarOrder, roomWorkspaceFromMetadata, withChatRoomId, withPiboRoomPinned, withPiboRoomSidebarOrder, withPiboRoomWorkspace, } from "./types/rooms.js";
 import { chatStreamFramesFromOutputEvent, createChatStreamState, nextTransientChatStreamFrameId } from "./stream.js";
 import { buildSessionNodes, buildTraceView, TRACE_PROJECTION_VERSION } from "./trace.js";
 import { DEFAULT_TRACE_EVENTS_PAGE_SIZE, annotateTracePage, etagForVersion, estimateTraceViewBytes, traceCacheEstimatedBytes, liveSnapshotVersion, requestMatchesVersion, setTraceCache, traceProjectionStatus, traceCacheKey, withLiveSnapshots, withRawTraceTail, } from "./chat-trace-helpers.js";
 import { TRACE_V2_DEFAULT_TIMELINE_LIMIT, TRACE_V2_MAX_TIMELINE_LIMIT, TRACE_V2_PAYLOAD_DEFAULT_LIMIT_BYTES, TRACE_V2_PAYLOAD_MAX_LIMIT_BYTES, TRACE_V2_RAW_EVENTS_DEFAULT_LIMIT, TRACE_V2_RAW_EVENTS_MAX_LIMIT, TRACE_V2_TIMELINE_HARD_BYTES, TRACE_IMAGE_MAX_COUNT, parseTracePayloadRef, readTraceImagePayload, readTracePayloadChunk, traceRawEventsPageFromEvents, traceTimelinePageFromView, } from "./trace-v2.js";
-import { isChatWebSessionArchived } from "./session-metadata.js";
+import { chatWebSessionSidebarOrder, compareChatWebSessionsBySidebarOrder, isChatWebSessionArchived, isChatWebSessionPinned, withChatWebSessionPinned, withChatWebSessionSidebarOrder, } from "./session-metadata.js";
 import { withWorkflowSessionKind } from "../../sessions/workflow-session-kind.js";
 import { CustomAgentTargetReferenceError, CustomAgentStore, createDefaultCustomAgentStore, previewCustomAgentCreate, previewCustomAgentUpdate, } from "./agent-store.js";
 import { loadPiboModelDefaults, } from "../../core/model-defaults.js";
@@ -39,7 +40,8 @@ import { ChatRoomService, PiboRoomHierarchyCycleError } from "./data/room-servic
 import { ChatSessionQueryService } from "./data/session-query-service.js";
 import { ChatTimelineQueryService } from "./data/timeline-query-service.js";
 import { ChatHistoryQueryService } from "./data/history-query-service.js";
-import { ChatProjectService } from "./data/project-service.js";
+import { ChatWorkflowSessionService, } from "./data/workflow-session-service.js";
+import { migrateLegacyProjects } from "./data/legacy-project-migration.js";
 import { PiboDataStore } from "../../data/pibo-store.js";
 import { createDefaultPiboCronStore } from "../../cron/store.js";
 import { createDefaultPiboLoopStore } from "../../loops/store.js";
@@ -56,12 +58,12 @@ import { responseChatSpeechProviders, responseChatSpeechSessionSpeak, responseCh
 import { chatSettingsRoute, chatSettingsRouteInvalidatesBootstrapCatalog, chatSettingsRouteRequiresSameOrigin, handleChatSettingsRoute, } from "./chat-settings-routes.js";
 import { chatCapabilityRoute, chatCapabilityRouteRequiresSameOrigin, handleChatCapabilityRoute, } from "./chat-capability-routes.js";
 import { chatUserSkillRoute, chatUserSkillRouteRequiresSameOrigin, handleChatUserSkillRoute, syncChatUserSkills, } from "./chat-user-skill-routes.js";
-import { CHAT_WEB_API_PREFIX, agentFolderResourceId, agentResourceId, projectResourcePath, projectSessionResourceId, projectWorkflowHumanActionsResource, projectWorkflowSessionStartResource, roomResourcePath, sessionActionResource, sessionResourceId, signalResource, workflowArchiveResourceId, workflowCatalogResourceId, workflowDraftActionResource, workflowDraftManualTriggerRunResource, workflowDraftResourceId, workflowDuplicateResourceId, workflowNextDraftResourceId, workflowPickerKind, workflowPromptAssetResourceId, workflowVersionResource, } from "./chat-api-routes.js";
-import { assertProjectSessionPatchFields, buildStreamingFixtureSchedule, createAgentInput, createAgentUpdate, createRoomUpdate, createSessionUpdate, normalizeAgentArchived, normalizeAgentFolderName, normalizeClientTxnId, normalizeMessageDelivery, normalizeMessageText, normalizeParentRoomId, normalizeProjectArchived, normalizeProjectDescription, normalizeProjectPath, normalizeProjectSessionArchived, normalizeRoomDeleteConfirmation, normalizeRoomName, normalizeRoomTopic, normalizeRoomType, normalizeRoomWorkspace, normalizeSessionDeleteConfirmation, normalizeSessionTitle, normalizeStreamingFixtureCadenceMs, normalizeStreamingFixtureDeltas, normalizeStreamingFixtureMix, normalizeStreamingFixturePreludeMessages, normalizeStreamingFixturePreludeOnly, normalizeStreamingFixtureProfile, normalizeStreamingFixtureSuppressLiveDeltas, normalizeStreamingFixtureTraceSnapshots, normalizeStreamingFixtureToolInterleaving, resolveCreateSessionProfile, } from "./chat-request-normalizers.js";
+import { CHAT_WEB_API_PREFIX, agentFolderResourceId, agentResourceId, roomResourcePath, sessionActionResource, sessionResourceId, sessionWorkflowResource, signalResource, workflowArchiveResourceId, workflowCatalogResourceId, workflowDraftActionResource, workflowDraftManualTriggerRunResource, workflowDraftResourceId, workflowDuplicateResourceId, workflowNextDraftResourceId, workflowPickerKind, workflowPromptAssetResourceId, workflowVersionResource, } from "./chat-api-routes.js";
+import { buildStreamingFixtureSchedule, createAgentInput, createAgentUpdate, createRoomUpdate, createSessionUpdate, normalizeAgentArchived, normalizeAgentFolderName, normalizeClientTxnId, normalizeMessageDelivery, normalizeMessageText, normalizeParentRoomId, normalizeRoomDeleteConfirmation, normalizeRoomName, normalizeRoomTopic, normalizeRoomType, normalizeRoomWorkspace, normalizeSessionDeleteConfirmation, normalizeSessionTitle, normalizeStreamingFixtureCadenceMs, normalizeStreamingFixtureDeltas, normalizeStreamingFixtureMix, normalizeStreamingFixturePreludeMessages, normalizeStreamingFixturePreludeOnly, normalizeStreamingFixtureProfile, normalizeStreamingFixtureSuppressLiveDeltas, normalizeStreamingFixtureTraceSnapshots, normalizeStreamingFixtureToolInterleaving, resolveCreateSessionProfile, } from "./chat-request-normalizers.js";
 import { ChatWorkflowArchiveStore, ChatWorkflowDraftStore, ChatWorkflowLifecycleEventStore, ChatWorkflowPromptAssetStore, ChatWorkflowPublishedVersionStore, ChatWorkflowTombstoneStore, hashWorkflowDefinitionJson, normalizeWorkflowPromptAssetLabel, sanitizeWorkflowDiagnostics, } from "./workflow-persistence.js";
-import { normalizeProjectWorkflowHumanActionBody, projectWorkflowHumanActionDiagnosticResponse, projectWorkflowHumanActionLifecyclePayload, projectWorkflowHumanActionRuntimeDiagnostic, projectWorkflowHumanActionSubmittedLifecyclePayload, projectWorkflowPendingHumanActionFromToken, validateProjectWorkflowHumanActionRequest, } from "./project-workflow-human-actions.js";
-import { createProjectWorkflowRunCurrent, createProjectWorkflowSessionSnapshot, normalizeProjectWorkflowSessionConfiguration, workflowVersionFromSnapshot, } from "./project-workflow-sessions.js";
-import { STATIC_WORKFLOW_VERSION_CATALOG, buildProjectWorkflowVersionCatalog, buildProjectWorkflowVersionOptions, buildWorkflowCatalogInspect as buildWorkflowCatalogInspectWithServices, buildWorkflowCatalogList as buildWorkflowCatalogListWithServices, buildWorkflowVersionHistory, buildWorkflowVersionInspect as buildWorkflowVersionInspectWithServices, buildWorkflowVersionList as buildWorkflowVersionListWithServices, buildWorkflowVersionPicker, createPublishedWorkflowDefinition, selectWorkflowCatalogDisplayVersion, workflowDefinitionTags, workflowVersionPickerOptionFromCatalogRecord, } from "./workflow-catalog.js";
+import { normalizeWorkflowHumanActionBody, workflowHumanActionDiagnosticResponse, workflowHumanActionLifecyclePayload, workflowHumanActionRuntimeDiagnostic, workflowHumanActionSubmittedLifecyclePayload, workflowPendingHumanActionFromToken, validateWorkflowHumanActionRequest, } from "./workflow-human-actions.js";
+import { createWorkflowRunCurrent, createWorkflowSessionSnapshot, normalizeWorkflowSessionConfiguration, workflowVersionFromSnapshot, } from "./workflow-sessions.js";
+import { STATIC_WORKFLOW_VERSION_CATALOG, buildWorkflowVersionCatalog, buildWorkflowVersionOptions, buildWorkflowCatalogInspect as buildWorkflowCatalogInspectWithServices, buildWorkflowCatalogList as buildWorkflowCatalogListWithServices, buildWorkflowVersionHistory, buildWorkflowVersionInspect as buildWorkflowVersionInspectWithServices, buildWorkflowVersionList as buildWorkflowVersionListWithServices, buildWorkflowVersionPicker, createPublishedWorkflowDefinition, selectWorkflowCatalogDisplayVersion, workflowDefinitionTags, workflowVersionPickerOptionFromCatalogRecord, } from "./workflow-catalog.js";
 import { cloneJsonObject, isWorkflowValidationPipelineDiagnostic, normalizeWorkflowValidationTrigger, normalizeWorkflowVersionIntent, parseWorkflowDraftDefinitionFromPatch, summarizeWorkflowDiagnostics, withoutRawWorkflowIrParseDiagnostic, } from "./workflow-validation-helpers.js";
 import { validateWorkflowEdgeAdapterOutputCompatibilityLike, validateWorkflowEdgeDirectCompatibilityLike, } from "./workflow-edge-compatibility.js";
 import { runWorkflowManualTextTrigger, } from "./workflow-manual-trigger-runtime.js";
@@ -236,6 +238,13 @@ function createReliabilityStore(path) {
 function createDataStore(options) {
     return new PiboDataStore(options.dataStorePath, { payloadRootDir: options.dataPayloadRootDir });
 }
+function workflowStorePath(options, dataStore) {
+    if (options.workflowStorePath)
+        return options.workflowStorePath;
+    if (dataStore.path === ":memory:")
+        return ":memory:";
+    return join(dirname(dataStore.path), "pibo-workflows.sqlite");
+}
 function resolveVscodeWebUrl(value) {
     const trimmed = value?.trim();
     if (!trimmed)
@@ -750,7 +759,7 @@ function listSharedSessions(context) {
     const profiles = context.channelContext.getProfiles?.();
     return sessions
         .map((session) => canonicalizeSessionProfile(context, session, profiles))
-        .sort((left, right) => right.updatedAt.localeCompare(left.updatedAt));
+        .sort(compareChatWebSessionsBySidebarOrder);
 }
 function canonicalizeSessionProfile(context, session, profiles = context.channelContext.getProfiles?.()) {
     const canonicalProfile = canonicalProfileName(profiles, session.profile);
@@ -818,7 +827,7 @@ function paginateSessionNodes(nodes, input) {
 }
 function sessionTreeVersion(nodes) {
     return nodes
-        .map((node) => `${node.piboSessionId}:${node.lastActivityAt ?? ""}:${node.status}:${node.archived ? "1" : "0"}`)
+        .map((node) => `${node.piboSessionId}:${node.lastActivityAt ?? ""}:${node.status}:${node.archived ? "1" : "0"}:${node.pinned ? "1" : "0"}:${node.sidebarOrder ?? ""}`)
         .join("|");
 }
 function selectedRoomIdForSession(state, context, session) {
@@ -875,92 +884,67 @@ function requireRoom(state, roomId, webSession, action = "read") {
     }
     return room;
 }
-function listSharedProjects(state, _webSession, options = {}) {
-    return state.projectService.listProjects(options);
-}
-function requireSharedProject(state, _webSession, projectId, options = {}) {
-    try {
-        return state.projectService.requireProject(projectId, options);
-    }
-    catch {
-        throw new PiboWebHttpError("Project not found", 404);
-    }
-}
 function createSharedChatSession(context, webSession, profile, room) {
+    const normalSessions = sessionsInRoom(listSharedSessions(context), room.id)
+        .filter((session) => !session.parentId && !isChatWebSessionArchived(session) && !isChatWebSessionPinned(session));
     return context.channelContext.createSession({
         channel: CHAT_WEB_CHANNEL,
         kind: "chat",
         profile,
         workspace: roomWorkspaceFromMetadata(room.metadata) ?? getDefaultPiboWorkspace(),
-        metadata: withChatRoomId(undefined, room.id),
+        metadata: withChatWebSessionSidebarOrder(withChatRoomId(undefined, room.id), nextChatWebSessionSidebarOrder(normalSessions)),
     });
 }
-function createProjectChatSession(input) {
-    const workflowSelection = resolveProjectWorkflowSelection(input.state, input.workflowId, input.workflowVersion);
+function createWorkflowSession(input) {
+    const normalSessions = sessionsInRoom(listSharedSessions(input.context), input.room.id)
+        .filter((session) => !session.parentId && !isChatWebSessionArchived(session) && !isChatWebSessionPinned(session));
     const session = input.context.channelContext.createSession({
         channel: CHAT_WEB_CHANNEL,
         kind: "chat",
         profile: input.profile,
-        workspace: input.project.projectFolder,
+        workspace: input.workspace ?? roomWorkspaceFromMetadata(input.room.metadata) ?? getDefaultPiboWorkspace(),
         ...(input.title ? { title: input.title } : {}),
-        ...(input.configuration?.model ? { activeModel: input.configuration.model } : {}),
-        metadata: withWorkflowSessionKind({
-            projectId: input.project.id,
-            projectSessionKind: "main",
-            projectWorkflowId: workflowSelection.id,
-            projectWorkflowVersion: workflowSelection.version,
-            ...(input.configuration ? { projectWorkflowConfiguration: input.configuration } : {}),
-        }, "main_workflow"),
+        ...(input.configuration.model ? { activeModel: input.configuration.model } : {}),
+        metadata: withWorkflowSessionKind(withChatWebSessionSidebarOrder({
+            ...withChatRoomId(undefined, input.room.id),
+            workflowId: input.workflow.id,
+            workflowVersion: input.workflow.version,
+        }, nextChatWebSessionSidebarOrder(normalSessions)), "main_workflow"),
     });
-    input.state.projectService.addProjectSession({
-        projectId: input.project.id,
+    const workflowSession = input.state.workflowService.addWorkflowSession({
         piboSessionId: session.id,
-        kind: "main",
-        workflowId: workflowSelection.id,
-        workflowVersion: workflowSelection.version,
-        title: session.title,
-        state: input.configuredWorkflow ? "configured" : undefined,
+        workflowId: input.workflow.id,
+        workflowVersion: input.workflow.version,
+        state: "configured",
         configuration: input.configuration,
     });
     input.state.sessionQuery.upsertSession(session);
-    return session;
+    return { session, workflowSession };
 }
-function resolveProjectWorkflowSelection(state, workflowIdValue, workflowVersionValue, options = {}) {
+function resolveWorkflowSelection(state, workflowIdValue, workflowVersionValue, options = {}) {
     if (options.requireExplicitWorkflowId && (workflowIdValue === undefined || workflowIdValue === null || workflowIdValue === "")) {
         throw new PiboWebHttpError("Workflow id is required", 400);
     }
-    const workflowId = normalizeProjectWorkflowId(workflowIdValue);
-    const workflowVersion = normalizeProjectWorkflowVersion(workflowVersionValue);
-    if (options.requireExplicitVersion && !workflowVersion) {
+    const workflowId = normalizeWorkflowId(workflowIdValue);
+    const workflowVersion = normalizeWorkflowVersion(workflowVersionValue);
+    if (options.requireExplicitVersion && !workflowVersion)
         throw new PiboWebHttpError("Workflow version is required", 400);
-    }
-    const candidates = buildProjectWorkflowVersionCatalog(state).filter((option) => option.id === workflowId);
+    const candidates = buildWorkflowVersionCatalog(state).filter((option) => option.id === workflowId);
     const selected = candidates.find((option) => workflowVersion === undefined || option.version === workflowVersion);
-    if (!selected) {
+    if (!selected)
         throw new PiboWebHttpError(`Unknown workflow version: ${workflowId}${workflowVersion ? `@${workflowVersion}` : ""}`, 400);
-    }
-    if (selected.status === "archived") {
-        throw new PiboWebHttpError(`Workflow version '${selected.id}@${selected.version}' is archived and cannot create a Project session by default`, 400);
-    }
-    if (selected.status !== "published") {
+    if (selected.status === "archived")
+        throw new PiboWebHttpError(`Workflow version '${selected.id}@${selected.version}' is archived and cannot create a Workflow Session`, 400);
+    if (selected.status !== "published")
         throw new PiboWebHttpError(`Workflow version '${selected.id}@${selected.version}' is not published`, 400);
-    }
     return workflowVersionPickerOptionFromCatalogRecord({ ...selected, status: "published" });
 }
-function normalizeLegacyProjectWorkflowId(value) {
-    const workflowId = normalizeProjectWorkflowId(value);
-    if (workflowId !== "simple-chat")
-        throw new PiboWebHttpError("Only the simple-chat workflow is available in V1", 400);
-    return workflowId;
-}
-function normalizeProjectWorkflowId(value) {
-    if (value === undefined || value === null || value === "")
-        return "simple-chat";
+function normalizeWorkflowId(value) {
     if (typeof value !== "string" || !value.trim())
-        throw new PiboWebHttpError("Workflow id must be a string", 400);
+        throw new PiboWebHttpError("Workflow id is required", 400);
     return value.trim();
 }
-function normalizeProjectWorkflowVersion(value) {
+function normalizeWorkflowVersion(value) {
     if (value === undefined || value === null || value === "")
         return undefined;
     if (typeof value !== "string" || !value.trim())
@@ -1032,18 +1016,14 @@ function requireWorkflowDeleteConfirmation(value, workflowId) {
         throw new PiboWebHttpError(`Type "${workflowId}" to delete this workflow.`, 400);
     }
 }
-const PROJECT_SESSION_PATCH_FIELDS = new Set([
-    "title",
-    "archived",
-]);
-function validateProjectWorkflowSnapshotForStart(snapshot, input) {
+function validateWorkflowSnapshotForStart(snapshot, input) {
     const diagnostics = sanitizeWorkflowDiagnostics(validateWorkflowDefinitionForV2(snapshot.effectiveDefinition, input));
     return {
         diagnostics,
         validation: summarizeWorkflowDiagnostics(diagnostics, "before_workflow_start"),
     };
 }
-function updateProjectWorkflowRunSessionMetadata(input) {
+function updateWorkflowRunSessionMetadata(input) {
     if (input.session.metadata?.workflowRunId === input.workflowRunId)
         return;
     const updateSession = input.context.channelContext.updateSession;
@@ -1574,8 +1554,8 @@ function requireValidatedWorkflowDraft(state, context, webSession, draftId, trig
     return serializeWorkflowDraft(record);
 }
 function duplicateWorkflowIntoDraft(state, webSession, workflowIdValue, workflowVersionValue) {
-    const workflowId = normalizeProjectWorkflowId(workflowIdValue);
-    const workflowVersion = normalizeProjectWorkflowVersion(workflowVersionValue);
+    const workflowId = normalizeWorkflowId(workflowIdValue);
+    const workflowVersion = normalizeWorkflowVersion(workflowVersionValue);
     const published = selectPublishedWorkflowVersion(state, workflowId, workflowVersion);
     if (!published)
         throw new PiboWebHttpError("Published workflow version not found", 404);
@@ -1626,8 +1606,8 @@ function duplicateWorkflowIntoDraft(state, webSession, workflowIdValue, workflow
     return serializeWorkflowDraft(draft);
 }
 function createNextVersionDraftFromPublishedWorkflow(state, webSession, workflowIdValue, workflowVersionValue) {
-    const workflowId = normalizeProjectWorkflowId(workflowIdValue);
-    const workflowVersion = normalizeProjectWorkflowVersion(workflowVersionValue);
+    const workflowId = normalizeWorkflowId(workflowIdValue);
+    const workflowVersion = normalizeWorkflowVersion(workflowVersionValue);
     const published = selectPublishedWorkflowVersion(state, workflowId, workflowVersion);
     if (!published)
         throw new PiboWebHttpError("Published workflow version not found", 404);
@@ -1684,7 +1664,7 @@ function createNextVersionDraftFromPublishedWorkflow(state, webSession, workflow
     return { draft: serializeWorkflowDraft(draft), reused: false };
 }
 function archiveWorkflowIdentity(state, context, webSession, workflowIdValue, reasonValue) {
-    const workflowId = normalizeProjectWorkflowId(workflowIdValue);
+    const workflowId = normalizeWorkflowId(workflowIdValue);
     const catalog = buildWorkflowCatalogList(state, context, webSession, { includeArchived: true });
     const workflow = catalog.workflows.find((record) => record.id === workflowId);
     if (!workflow)
@@ -1714,7 +1694,7 @@ function archiveWorkflowIdentity(state, context, webSession, workflowIdValue, re
     return { workflow: archivedWorkflow, archiveState };
 }
 function deleteWorkflowIdentity(state, context, webSession, workflowIdValue, body) {
-    const workflowId = normalizeProjectWorkflowId(workflowIdValue);
+    const workflowId = normalizeWorkflowId(workflowIdValue);
     const catalog = buildWorkflowCatalogList(state, context, webSession, { includeArchived: true });
     const workflow = catalog.workflows.find((record) => record.id === workflowId);
     if (!workflow)
@@ -1747,7 +1727,7 @@ function deleteWorkflowIdentity(state, context, webSession, workflowIdValue, bod
     return { workflowId, deleted: true, tombstone };
 }
 function selectPublishedWorkflowVersion(state, workflowId, version) {
-    const options = buildProjectWorkflowVersionOptions(state).filter((option) => option.id === workflowId);
+    const options = buildWorkflowVersionOptions(state).filter((option) => option.id === workflowId);
     const selected = version ? options.find((option) => option.version === version) : options[0];
     if (!selected)
         return undefined;
@@ -1915,7 +1895,9 @@ function normalizeWorkflowDraftManualTriggerRunBody(body) {
         throw new PiboWebHttpError("Manual trigger node id is required", 400);
     if (typeof body.input !== "string")
         throw new PiboWebHttpError("Manual trigger input must be text", 400);
-    return { triggerNodeId, input: body.input };
+    if (body.roomId !== undefined && typeof body.roomId !== "string")
+        throw new PiboWebHttpError("Room id must be a string", 400);
+    return { triggerNodeId, input: body.input, roomId: typeof body.roomId === "string" ? body.roomId.trim() || undefined : undefined, workspace: body.workspace === undefined ? undefined : normalizeRoomWorkspace(body.workspace) };
 }
 function resolveWorkflowRuntimeProfile(input) {
     const profile = input.context.channelContext.getProfiles?.().find((candidate) => candidate.name === input.requestedId || candidate.aliases.includes(input.requestedId));
@@ -2202,7 +2184,7 @@ function validateWorkflowNestedNodeLike(nodeId, node, input, diagnostics) {
     const workflowId = typeof node.workflowId === "string" ? node.workflowId.trim() : undefined;
     const workflowVersion = typeof node.workflowVersion === "string" ? node.workflowVersion.trim() : undefined;
     const selected = workflowId
-        ? buildProjectWorkflowVersionOptions(input.state).find((option) => option.id === workflowId && (!workflowVersion || option.version === workflowVersion))
+        ? buildWorkflowVersionOptions(input.state).find((option) => option.id === workflowId && (!workflowVersion || option.version === workflowVersion))
         : undefined;
     if (!selected) {
         const registryRef = workflowId ? `${workflowId}${workflowVersion ? `@${workflowVersion}` : ""}` : undefined;
@@ -2422,7 +2404,7 @@ async function deleteSessionsForAgentProfile(state, context, webSession, profile
     }
     const orderedIds = [...ids].sort((left, right) => sessionDepth(sessionsById.get(right), sessionsById) - sessionDepth(sessionsById.get(left), sessionsById));
     for (const id of orderedIds) {
-        await state.projectService.deleteProjectSessionWithCanonicalDelete(id, () => deleteSession(id));
+        await deleteSession(id);
         state.sessionQuery.deleteSessions([id]);
         state.eventCommands.deleteSessions([id]);
     }
@@ -2449,7 +2431,7 @@ async function deleteSessionSubtree(state, context, webSession, rootSession) {
     }
     const orderedIds = [...ids].sort((left, right) => sessionDepth(sessionsById.get(right), sessionsById) - sessionDepth(sessionsById.get(left), sessionsById));
     for (const id of orderedIds) {
-        await state.projectService.deleteProjectSessionWithCanonicalDelete(id, () => deleteSession(id));
+        await deleteSession(id);
         state.sessionQuery.deleteSessions([id]);
         state.eventCommands.deleteSessions([id]);
     }
@@ -2490,7 +2472,7 @@ async function deleteRoomTree(state, context, webSession, room, confirmName) {
     }
     const orderedSessionIds = [...ids].sort((left, right) => sessionDepth(sessionsById.get(right), sessionsById) - sessionDepth(sessionsById.get(left), sessionsById));
     for (const id of orderedSessionIds) {
-        await state.projectService.deleteProjectSessionWithCanonicalDelete(id, () => deleteSession(id));
+        await deleteSession(id);
         state.sessionQuery.deleteSessions([id]);
         state.eventCommands.deleteSessions([id]);
     }
@@ -2703,6 +2685,95 @@ async function resolveContextBuildRuntime(context, runtimeInstanceId) {
 function indexSharedSessions(sessionQuery, sessions) {
     sessionQuery.upsertSessionsIfChanged(sessions);
 }
+function nextChatWebRoomSidebarOrder(rooms) {
+    return rooms.reduce((maximum, room) => {
+        const createdOrder = Date.parse(room.createdAt) || 0;
+        return Math.max(maximum, piboRoomSidebarOrder(room) ?? createdOrder);
+    }, 0) + 1;
+}
+function reorderChatWebRoom(input) {
+    if (input.room.parentRoomId || input.targetRoom.parentRoomId) {
+        throw new PiboWebHttpError("Only top-level rooms can be reordered", 400);
+    }
+    if (isDefaultPiboRoom(input.room) || isDefaultPiboRoom(input.targetRoom)) {
+        throw new PiboWebHttpError("Shared Chat cannot be reordered", 400);
+    }
+    if (isPiboRoomArchived(input.room) || isPiboRoomArchived(input.targetRoom)) {
+        throw new PiboWebHttpError("Archived rooms cannot be reordered", 400);
+    }
+    const pinned = isPiboRoomPinned(input.room);
+    if (pinned !== isPiboRoomPinned(input.targetRoom)) {
+        throw new PiboWebHttpError("Pinned and unpinned rooms cannot be reordered together", 400);
+    }
+    const ordered = input.state.roomService.listRooms()
+        .filter((room) => !room.parentRoomId && !isDefaultPiboRoom(room) && !isPiboRoomArchived(room) && isPiboRoomPinned(room) === pinned)
+        .sort(comparePiboRoomsBySidebarOrder);
+    const movedIndex = ordered.findIndex((room) => room.id === input.room.id);
+    const targetIndex = ordered.findIndex((room) => room.id === input.targetRoom.id);
+    if (movedIndex < 0 || targetIndex < 0)
+        throw new PiboWebHttpError("Room ordering target not found", 404);
+    if (movedIndex === targetIndex)
+        return ordered.map((room) => room.id);
+    const [moved] = ordered.splice(movedIndex, 1);
+    const remainingTargetIndex = ordered.findIndex((room) => room.id === input.targetRoom.id);
+    ordered.splice(input.position === "before" ? remainingTargetIndex : remainingTargetIndex + 1, 0, moved);
+    const orderBase = nextChatWebRoomSidebarOrder(ordered) + ordered.length - 1;
+    for (const [index, room] of ordered.entries()) {
+        const updated = input.state.roomService.updateRoom(room.id, {
+            metadata: withPiboRoomSidebarOrder(room.metadata, orderBase - index),
+        });
+        if (!updated)
+            throw new PiboWebHttpError("Room not found", 404);
+    }
+    return ordered.map((room) => room.id);
+}
+function nextChatWebSessionSidebarOrder(sessions) {
+    return sessions.reduce((maximum, session) => {
+        const createdOrder = Date.parse(session.createdAt) || 0;
+        return Math.max(maximum, chatWebSessionSidebarOrder(session) ?? createdOrder);
+    }, 0) + 1;
+}
+function reorderChatWebSession(input) {
+    if (input.session.parentId || input.targetSession.parentId) {
+        throw new PiboWebHttpError("Only top-level sessions can be reordered", 400);
+    }
+    if (isChatWebSessionArchived(input.session) || isChatWebSessionArchived(input.targetSession)) {
+        throw new PiboWebHttpError("Archived sessions cannot be reordered", 400);
+    }
+    const roomId = chatRoomIdFromMetadata(input.session.metadata);
+    const targetRoomId = chatRoomIdFromMetadata(input.targetSession.metadata);
+    if (!roomId || roomId !== targetRoomId)
+        throw new PiboWebHttpError("Sessions must belong to the same room", 400);
+    const pinned = isChatWebSessionPinned(input.session);
+    if (pinned !== isChatWebSessionPinned(input.targetSession)) {
+        throw new PiboWebHttpError("Pinned and unpinned sessions cannot be reordered together", 400);
+    }
+    const updateSession = input.context.channelContext.updateSession;
+    if (!updateSession)
+        throw new PiboWebHttpError("Session updates are not available", 501);
+    const ordered = sessionsInRoom(listSharedSessions(input.context), roomId)
+        .filter((session) => !session.parentId && !isChatWebSessionArchived(session) && isChatWebSessionPinned(session) === pinned)
+        .sort(compareChatWebSessionsBySidebarOrder);
+    const movedIndex = ordered.findIndex((session) => session.id === input.session.id);
+    const targetIndex = ordered.findIndex((session) => session.id === input.targetSession.id);
+    if (movedIndex < 0 || targetIndex < 0)
+        throw new PiboWebHttpError("Session ordering target not found", 404);
+    if (movedIndex === targetIndex)
+        return ordered.map((session) => session.id);
+    const [moved] = ordered.splice(movedIndex, 1);
+    const remainingTargetIndex = ordered.findIndex((session) => session.id === input.targetSession.id);
+    ordered.splice(input.position === "before" ? remainingTargetIndex : remainingTargetIndex + 1, 0, moved);
+    const orderBase = nextChatWebSessionSidebarOrder(ordered) + ordered.length - 1;
+    for (const [index, session] of ordered.entries()) {
+        const updated = updateSession(session.id, {
+            metadata: withChatWebSessionSidebarOrder(session.metadata, orderBase - index),
+        });
+        if (!updated)
+            throw new PiboWebHttpError("Session not found", 404);
+        input.state.sessionQuery.upsertSession(updated);
+    }
+    return ordered.map((session) => session.id);
+}
 function markSessionsRead(state, sessions) {
     for (const session of sessions) {
         const latestStreamId = state.timelineQuery.getLatestStreamId({ piboSessionId: session.id });
@@ -3172,284 +3243,75 @@ function createEventStream(input) {
         },
     });
 }
-async function buildProjectsBootstrap(input) {
-    const sharedDefaultProject = input.state.projectService.ensureSharedDefaultProject();
-    const selectedProject = input.projectId ? requireSharedProject(input.state, input.webSession, input.projectId, { includeArchived: true }) : sharedDefaultProject;
-    let storedProjectSessions = input.state.projectService
-        .listProjectSessions(selectedProject.id, { includeArchived: input.includeArchived })
-        .filter((projectSession) => projectSession.workflowId === "simple-chat");
-    if (selectedProject.id === sharedDefaultProject.id && storedProjectSessions.length === 0) {
-        const session = createProjectChatSession({
-            state: input.state,
-            context: input.context,
-            webSession: input.webSession,
-            project: sharedDefaultProject,
-            profile: input.defaultProfile,
-            workflowId: "simple-chat",
-        });
-        storedProjectSessions = [input.state.projectService.getProjectSession(session.id)];
-    }
-    const projectSessions = storedProjectSessions;
-    const rootSessions = projectSessions
-        .map((projectSession) => input.context.channelContext.getSession(projectSession.piboSessionId))
-        .filter((session) => Boolean(session));
-    const sessions = collectProjectSessionTreeSessions(rootSessions, listSharedSessions(input.context));
-    const requestedSession = input.piboSessionId ? sessions.find((session) => session.id === input.piboSessionId) : undefined;
-    const selectedSession = requestedSession ?? sessions.find((session) => session.id === selectedProject.currentMainSessionId) ?? sessions[0];
-    indexSharedSessions(input.state.sessionQuery, sessions);
-    const nodes = await buildSessionNodes(sessions, input.state.sessionQuery.listSessions(), selectedProject.projectFolder, new Map(), { skipPiMetadataFallback: true });
-    applyProjectSessionArchiveState(nodes, new Map(projectSessions.map((projectSession) => [projectSession.piboSessionId, Boolean(projectSession.archived)])));
-    return {
-        identity: input.webSession.authSession.identity,
-        sharedDefaultProject,
-        project: selectedProject,
-        projects: listSharedProjects(input.state, input.webSession, { includeArchived: input.includeArchived }),
-        projectSessions,
-        workflowLifecycleEvents: [],
-        ...(selectedSession ? { session: selectedSession, selectedPiboSessionId: selectedSession.id } : {}),
-        selectedProjectId: selectedProject.id,
-        sessions: nodes,
-        ...(await loadBootstrapCatalog(input.state, input.context, input.webSession)),
-    };
-}
-function collectProjectSessionTreeSessions(rootSessions, candidateSessions) {
-    const sessionsById = new Map(rootSessions.map((session) => [session.id, session]));
-    let changed = true;
-    while (changed) {
-        changed = false;
-        for (const session of candidateSessions) {
-            if (sessionsById.has(session.id))
-                continue;
-            if (!session.parentId || !sessionsById.has(session.parentId))
-                continue;
-            sessionsById.set(session.id, session);
-            changed = true;
-        }
-    }
-    return [...sessionsById.values()].sort((left, right) => right.updatedAt.localeCompare(left.updatedAt));
-}
-function enrichProjectSessionWorkflowDefinitionLink(state, projectSession) {
-    if (!isProjectWorkflowBackedSession(projectSession))
-        return projectSession;
-    const snapshot = state.projectService.getWorkflowSessionSnapshotForSession(projectSession.piboSessionId);
-    const workflowId = projectSession.workflowId;
-    const workflowVersion = projectSession.workflowVersion ?? snapshot?.workflow.version;
+function enrichWorkflowSession(state, workflowSession) {
+    const snapshot = state.workflowService.getWorkflowSessionSnapshotForSession(workflowSession.piboSessionId);
+    const workflowVersion = workflowSession.workflowVersion ?? snapshot?.workflow.version;
     const catalogRecord = workflowVersion
-        ? buildProjectWorkflowVersionCatalog(state).find((record) => record.id === workflowId && record.version === workflowVersion)
+        ? buildWorkflowVersionCatalog(state).find((record) => record.id === workflowSession.workflowId && record.version === workflowVersion)
         : undefined;
     const snapshotHash = snapshot?.workflow.effectiveDefinitionHash ?? snapshot?.deletedDefinitionFallback.effectiveDefinitionHash;
-    if (catalogRecord && catalogRecord.status !== "deleted") {
-        return {
-            ...projectSession,
-            workflowDefinitionLink: {
-                status: "live",
-                workflowId,
-                workflowVersion: catalogRecord.version,
-                title: catalogRecord.title,
-                ...(snapshotHash ? { definitionHash: snapshotHash } : {}),
-                href: workflowDefinitionViewerPath(catalogRecord.id, catalogRecord.version),
-            },
-        };
-    }
-    const fallback = snapshot?.deletedDefinitionFallback;
-    const definitionHash = fallback?.effectiveDefinitionHash ?? snapshotHash;
+    const workflowDefinitionLink = catalogRecord && catalogRecord.status !== "deleted"
+        ? { status: "live", workflowId: workflowSession.workflowId, workflowVersion: catalogRecord.version, title: catalogRecord.title, ...(snapshotHash ? { definitionHash: snapshotHash } : {}), href: workflowDefinitionViewerPath(catalogRecord.id, catalogRecord.version) }
+        : { status: "snapshot_only_definition_deleted", workflowId: workflowSession.workflowId, ...(workflowVersion ? { workflowVersion } : {}), title: snapshot?.deletedDefinitionFallback.title ?? snapshot?.workflow.title ?? workflowSession.workflowId, ...(snapshotHash ? { definitionHash: snapshotHash } : {}), tombstoneLabel: snapshot?.deletedDefinitionFallback.tombstoneLabel ?? "No published catalog version is available. Inspection uses the immutable Workflow snapshot." };
+    const waitTokens = workflowSession.workflowRunId ? state.workflowService.listWorkflowWaitTokens({ piboSessionId: workflowSession.piboSessionId, workflowRunId: workflowSession.workflowRunId, status: "pending", limit: 20 }) : [];
+    return { ...workflowSession, workflowDefinitionLink, ...(waitTokens.length ? { pendingHumanActions: waitTokens.map((token) => workflowPendingHumanActionFromToken(token, WORKFLOW_HUMAN_ACTION_REF_OPTIONS)) } : {}) };
+}
+function inspectWorkflowSession(state, context, piboSessionId) {
+    requireSharedSession(context, piboSessionId);
+    const link = state.workflowService.getWorkflowSession(piboSessionId);
+    if (!link)
+        throw new PiboWebHttpError("Workflow session not found", 404);
+    const workflowSession = enrichWorkflowSession(state, link);
+    const snapshot = state.workflowService.getWorkflowSessionSnapshotForSession(piboSessionId);
+    const run = state.workflowService.getWorkflowRunForSession(piboSessionId);
+    const workflowRunId = run?.id ?? workflowSession.workflowRunId;
+    const definitionSnapshot = run?.definitionSnapshotId ? state.workflowService.runtimeStore.getDefinitionSnapshot(run.definitionSnapshotId) : undefined;
     return {
-        ...projectSession,
-        workflowDefinitionLink: {
-            status: "snapshot_only_definition_deleted",
-            workflowId,
-            ...(workflowVersion ? { workflowVersion } : {}),
-            title: fallback?.title ?? snapshot?.workflow.title ?? projectSession.title ?? workflowId,
-            ...(definitionHash ? { definitionHash } : {}),
-            tombstoneLabel: fallback?.tombstoneLabel ?? "Definition deleted or no longer available in the live Workflow catalog.",
-        },
+        workflowSession,
+        ...(definitionSnapshot ? { definitionSnapshot } : {}),
+        ...(snapshot ? { snapshot } : {}),
+        ...(run ? { run } : {}),
+        waitTokens: state.workflowService.listWorkflowWaitTokens({ piboSessionId, ...(workflowRunId ? { workflowRunId } : {}), limit: 200 }),
+        humanActions: state.workflowService.listWorkflowHumanActions({ piboSessionId, ...(workflowRunId ? { workflowRunId } : {}), limit: 200 }),
+        nodeAttempts: workflowRunId ? state.workflowService.runtimeStore.listNodeAttempts({ workflowRunId, limit: 200 }) : [],
+        edgeTransfers: workflowRunId ? state.workflowService.runtimeStore.listEdgeTransfers({ workflowRunId, limit: 200 }) : [],
+        lifecycleEvents: [...new Map([
+                ...state.workflowLifecycleEventStore.listEvents({ piboSessionId, limit: 200 }),
+                ...(workflowRunId ? state.workflowLifecycleEventStore.listEvents({ workflowRunId, limit: 200 }) : []),
+            ].map((event) => [event.id, event])).values()].sort((left, right) => right.createdAt.localeCompare(left.createdAt) || right.id.localeCompare(left.id)),
     };
 }
-function enrichProjectSessionWorkflowWaitTokens(state, projectSession) {
-    if (!projectSession.workflowRunId)
-        return projectSession;
-    const waitTokens = state.projectService.listProjectWorkflowWaitTokens({
-        projectId: projectSession.projectId,
-        piboSessionId: projectSession.piboSessionId,
-        workflowRunId: projectSession.workflowRunId,
-        status: "pending",
-        limit: 20,
-    });
-    if (!waitTokens.length)
-        return projectSession;
-    return {
-        ...projectSession,
-        pendingHumanActions: waitTokens.map((token) => projectWorkflowPendingHumanActionFromToken(token, WORKFLOW_HUMAN_ACTION_REF_OPTIONS)),
-    };
-}
-function submitProjectWorkflowHumanAction(input) {
-    const project = requireSharedProject(input.state, input.webSession, input.projectId);
-    const session = requireSharedSession(input.context, input.piboSessionId);
-    const projectSession = input.state.projectService.getProjectSession(session.id);
-    if (!projectSession || projectSession.projectId !== project.id)
-        throw new PiboWebHttpError("Project workflow session not found", 404);
-    if (!projectSession.workflowRunId) {
-        return projectWorkflowHumanActionDiagnosticResponse("Project workflow session has no workflow run to resolve", [{
-                code: "WorkflowRuntimeError.workflowRunMissing",
-                message: "This Project workflow session has not started a workflow run, so no human wait token can be resolved.",
-                severity: "error",
-                path: "$.workflowRunId",
-                hint: "Start the configured workflow session before submitting human actions.",
-            }], 409, undefined, WORKFLOW_HUMAN_ACTION_REF_OPTIONS);
-    }
-    const normalized = normalizeProjectWorkflowHumanActionBody(input.body);
-    if (normalized.diagnostics.length) {
-        return projectWorkflowHumanActionDiagnosticResponse("Human action request is invalid", normalized.diagnostics, 400, undefined, WORKFLOW_HUMAN_ACTION_REF_OPTIONS);
-    }
+function submitWorkflowHumanAction(input) {
+    requireSharedSession(input.context, input.piboSessionId);
+    const workflowSession = input.state.workflowService.getWorkflowSession(input.piboSessionId);
+    if (!workflowSession)
+        throw new PiboWebHttpError("Workflow session not found", 404);
+    if (!workflowSession.workflowRunId)
+        return workflowHumanActionDiagnosticResponse("Workflow session has no workflow run to resolve", [{ code: "WorkflowRuntimeError.workflowRunMissing", message: "This Workflow session has not started a run.", severity: "error", path: "$.workflowRunId", hint: "Start the configured Workflow session before submitting human actions." }], 409, undefined, WORKFLOW_HUMAN_ACTION_REF_OPTIONS);
+    const normalized = normalizeWorkflowHumanActionBody(input.body);
+    if (normalized.diagnostics.length)
+        return workflowHumanActionDiagnosticResponse("Human action request is invalid", normalized.diagnostics, 400, undefined, WORKFLOW_HUMAN_ACTION_REF_OPTIONS);
     const request = normalized.request;
-    const waitToken = input.state.projectService.getProjectWorkflowWaitToken(request.waitTokenId);
-    const validation = validateProjectWorkflowHumanActionRequest({
-        projectSession,
-        waitToken,
-        request,
-        humanActionOptions: WORKFLOW_HUMAN_ACTION_REF_OPTIONS,
-    });
+    const waitToken = input.state.workflowService.getWorkflowWaitToken(request.waitTokenId);
+    const validation = validateWorkflowHumanActionRequest({ workflowSession, waitToken, request, humanActionOptions: WORKFLOW_HUMAN_ACTION_REF_OPTIONS });
     if (validation.diagnostics.length) {
-        const responseWaitToken = waitToken && validation.expiredAt
-            ? input.state.projectService.expireProjectWorkflowWaitToken({
-                projectId: project.id,
-                piboSessionId: session.id,
-                workflowRunId: projectSession.workflowRunId,
-                waitTokenId: waitToken.id,
-                resolvedAt: validation.checkedAt,
-            }).waitToken
-            : waitToken;
-        recordWorkflowLifecycleEvent(input.state, input.webSession, {
-            type: "workflow.human_action.submitted",
-            workflowId: projectSession.workflowId,
-            ...(projectSession.workflowVersion ? { workflowVersion: projectSession.workflowVersion } : {}),
-            projectId: project.id,
-            piboSessionId: session.id,
-            workflowRunId: projectSession.workflowRunId,
-            status: "blocked",
-            diagnostics: validation.diagnostics,
-            payload: projectWorkflowHumanActionLifecyclePayload(request),
-        });
-        return projectWorkflowHumanActionDiagnosticResponse("Human action was rejected by wait-token validation", validation.diagnostics, validation.httpStatus, responseWaitToken, WORKFLOW_HUMAN_ACTION_REF_OPTIONS);
+        const responseWaitToken = waitToken && validation.expiredAt ? input.state.workflowService.expireWorkflowWaitToken({ piboSessionId: input.piboSessionId, workflowRunId: workflowSession.workflowRunId, waitTokenId: waitToken.id, resolvedAt: validation.checkedAt }).waitToken : waitToken;
+        recordWorkflowLifecycleEvent(input.state, input.webSession, { type: "workflow.human_action.submitted", workflowId: workflowSession.workflowId, workflowVersion: workflowSession.workflowVersion, piboSessionId: input.piboSessionId, workflowRunId: workflowSession.workflowRunId, status: "blocked", diagnostics: validation.diagnostics, payload: workflowHumanActionLifecyclePayload(request) });
+        return workflowHumanActionDiagnosticResponse("Human action was rejected by wait-token validation", validation.diagnostics, validation.httpStatus, responseWaitToken, WORKFLOW_HUMAN_ACTION_REF_OPTIONS);
     }
     try {
-        const result = input.state.projectService.resolveProjectWorkflowHumanAction({
-            projectId: project.id,
-            piboSessionId: session.id,
-            workflowRunId: projectSession.workflowRunId,
-            waitTokenId: request.waitTokenId,
-            ...(validation.actionRef?.id ? { actionId: validation.actionRef.id } : {}),
-            kind: validation.actionKind,
-            actor: {
-                userId: input.webSession.authSession.identity.userId,
-                ...(input.webSession.authSession.identity.email ? { email: input.webSession.authSession.identity.email } : {}),
-            },
-            ...(request.payload !== undefined ? { payload: request.payload } : {}),
-        });
-        const enrichedProjectSession = enrichProjectSessionWorkflowWaitTokens(input.state, enrichProjectSessionWorkflowDefinitionLink(input.state, result.projectSession));
-        recordWorkflowLifecycleEvent(input.state, input.webSession, {
-            type: "workflow.human_action.submitted",
-            workflowId: result.projectSession.workflowId,
-            ...(result.projectSession.workflowVersion ? { workflowVersion: result.projectSession.workflowVersion } : {}),
-            projectId: project.id,
-            piboSessionId: session.id,
-            workflowRunId: result.run.id,
-            status: "submitted",
-            diagnostics: [],
-            payload: projectWorkflowHumanActionSubmittedLifecyclePayload(result.waitToken.id, result.action),
-        });
-        return responseJson({
-            ok: true,
-            projectSession: enrichedProjectSession,
-            waitToken: result.waitToken,
-            action: result.action,
-            run: result.run,
-            diagnostics: [],
-        }, { status: result.action.kind === "cancel" ? 200 : 202 });
+        const result = input.state.workflowService.resolveWorkflowHumanAction({ piboSessionId: input.piboSessionId, workflowRunId: workflowSession.workflowRunId, waitTokenId: request.waitTokenId, ...(validation.actionRef?.id ? { actionId: validation.actionRef.id } : {}), kind: validation.actionKind, actor: { userId: input.webSession.authSession.identity.userId, ...(input.webSession.authSession.identity.email ? { email: input.webSession.authSession.identity.email } : {}) }, ...(request.payload !== undefined ? { payload: request.payload } : {}) });
+        recordWorkflowLifecycleEvent(input.state, input.webSession, { type: "workflow.human_action.submitted", workflowId: result.workflowSession.workflowId, workflowVersion: result.workflowSession.workflowVersion, piboSessionId: input.piboSessionId, workflowRunId: result.run.id, status: "submitted", diagnostics: [], payload: workflowHumanActionSubmittedLifecyclePayload(result.waitToken.id, result.action) });
+        return responseJson({ ok: true, workflowSession: enrichWorkflowSession(input.state, result.workflowSession), waitToken: result.waitToken, action: result.action, run: result.run, diagnostics: [] }, { status: result.action.kind === "cancel" ? 200 : 202 });
     }
     catch (error) {
-        const diagnostics = [projectWorkflowHumanActionRuntimeDiagnostic(error, request.waitTokenId)];
-        recordWorkflowLifecycleEvent(input.state, input.webSession, {
-            type: "workflow.human_action.submitted",
-            workflowId: projectSession.workflowId,
-            ...(projectSession.workflowVersion ? { workflowVersion: projectSession.workflowVersion } : {}),
-            projectId: project.id,
-            piboSessionId: session.id,
-            workflowRunId: projectSession.workflowRunId,
-            status: "blocked",
-            diagnostics,
-            payload: projectWorkflowHumanActionLifecyclePayload(request),
-        });
-        const responseWaitToken = input.state.projectService.getProjectWorkflowWaitToken(request.waitTokenId) ?? waitToken;
-        return projectWorkflowHumanActionDiagnosticResponse("Human action was rejected by wait-token validation", diagnostics, 409, responseWaitToken, WORKFLOW_HUMAN_ACTION_REF_OPTIONS);
+        const diagnostics = [workflowHumanActionRuntimeDiagnostic(error, request.waitTokenId)];
+        return workflowHumanActionDiagnosticResponse("Human action was rejected by wait-token validation", diagnostics, 409, input.state.workflowService.getWorkflowWaitToken(request.waitTokenId) ?? waitToken, WORKFLOW_HUMAN_ACTION_REF_OPTIONS);
     }
 }
-function isProjectWorkflowBackedSession(projectSession) {
-    return Boolean(projectSession.workflowRunId) || projectSession.state === "workflow" || projectSession.workflowId !== "simple-chat";
-}
 function workflowDefinitionViewerPath(workflowId, workflowVersion) {
     return `${CHAT_WEB_MOUNT_PATH}/workflows/view/${encodeURIComponent(workflowId)}/${encodeURIComponent(workflowVersion)}`;
 }
-function applyProjectSessionArchiveState(nodes, archivedBySessionId) {
-    for (const node of nodes) {
-        const archived = archivedBySessionId.get(node.piboSessionId);
-        if (archived !== undefined)
-            node.archived = archived;
-        applyProjectSessionArchiveState(node.children, archivedBySessionId);
-    }
-}
-async function sendProjectMessage(input) {
-    const text = normalizeMessageText(input.body.text);
-    const delivery = normalizeMessageDelivery(input.body.delivery);
-    const clientTxnId = normalizeClientTxnId(input.body.clientTxnId);
-    if (typeof input.body.piboSessionId !== "string")
-        throw new PiboWebHttpError("Project session is required", 400);
-    const selectedSession = requireSharedSession(input.context, input.body.piboSessionId);
-    const projectSession = input.state.projectService.getProjectSession(selectedSession.id);
-    if (!projectSession)
-        throw new PiboWebHttpError("Project session not found", 404);
-    requireSharedProject(input.state, input.webSession, projectSession.projectId);
-    const actorId = auditActorIdFor(input.webSession);
-    const duplicate = clientTxnId ? input.state.eventCommands.findByClientTxn(undefined, actorId, clientTxnId) : undefined;
-    if (duplicate)
-        return responseJson({ duplicate: true, event: duplicate });
-    const accepted = input.state.eventCommands.appendEvent({
-        piboSessionId: selectedSession.id,
-        eventType: "user.message.accepted",
-        actorType: "user",
-        actorId,
-        clientTxnId,
-        retentionClass: "chat_message",
-        payload: {
-            type: "user.message.accepted",
-            piboSessionId: selectedSession.id,
-            projectId: projectSession.projectId,
-            text,
-            delivery,
-            ...(clientTxnId ? { clientTxnId } : {}),
-        },
-    });
-    for (const listener of input.state.liveListeners)
-        listener(accepted);
-    const messageId = clientTxnId ?? randomUUID();
-    try {
-        const output = await input.context.channelContext.emit({
-            type: "message",
-            piboSessionId: selectedSession.id,
-            id: messageId,
-            text,
-            delivery,
-            source: "user",
-        });
-        return responseJson({ accepted, output });
-    }
-    catch (error) {
-        if (error instanceof PiboSteeringUnavailableError || error instanceof AgentRuntimeBindingMissingError) {
-            throw new PiboWebHttpError(error.message, 409);
-        }
-        throw error;
-    }
-}
 function startChatStreamingFixture(input) {
     const requestedRoomId = typeof input.body.roomId === "string" ? input.body.roomId : undefined;
     const selectedSession = resolveRequestedSession(input.state, input.context, input.webSession, input.defaultProfile, typeof input.body.piboSessionId === "string" ? input.body.piboSessionId : undefined, requestedRoomId);
@@ -3678,6 +3540,11 @@ export function createChatWebApp(options = {}) {
     const defaultProfile = options.defaultProfile ?? "base";
     const dataStore = createDataStore(options);
     const reliabilityStore = createReliabilityStore(options.reliabilityStorePath);
+    const workflowService = new ChatWorkflowSessionService(workflowStorePath(options, dataStore));
+    if (dataStore.path !== ":memory:" && workflowService.path !== ":memory:") {
+        migrateLegacyProjects({ dataStore, workflowService });
+    }
+    const workflowCatalogStore = workflowService.catalogDataStore;
     const eventLoopDelay = monitorEventLoopDelay({ resolution: 20 });
     eventLoopDelay.enable();
     const state = {
@@ -3687,7 +3554,7 @@ export function createChatWebApp(options = {}) {
         eventCommands: new ChatEventCommandService(dataStore),
         readState: new ChatReadStateService(dataStore),
         roomService: new ChatRoomService(dataStore),
-        projectService: new ChatProjectService(options.projectStorePath),
+        workflowService,
         agentStore: createAgentStore(options.agentStorePath),
         reliabilityStore,
         cronStore: createDefaultPiboCronStore({ path: options.cronStorePath }),
@@ -3713,12 +3580,12 @@ export function createChatWebApp(options = {}) {
             globalRoot: options.userSkillGlobalRoot ?? os.homedir(),
             workspaceRoot: options.userSkillWorkspaceRoot ?? process.cwd(),
         }),
-        workflowDraftStore: new ChatWorkflowDraftStore(dataStore),
-        workflowPublishedVersionStore: new ChatWorkflowPublishedVersionStore(dataStore),
-        workflowArchiveStore: new ChatWorkflowArchiveStore(dataStore),
-        workflowTombstoneStore: new ChatWorkflowTombstoneStore(dataStore),
-        workflowLifecycleEventStore: new ChatWorkflowLifecycleEventStore(dataStore),
-        workflowPromptAssetStore: new ChatWorkflowPromptAssetStore(dataStore),
+        workflowDraftStore: new ChatWorkflowDraftStore(workflowCatalogStore),
+        workflowPublishedVersionStore: new ChatWorkflowPublishedVersionStore(workflowCatalogStore),
+        workflowArchiveStore: new ChatWorkflowArchiveStore(workflowCatalogStore),
+        workflowTombstoneStore: new ChatWorkflowTombstoneStore(workflowCatalogStore),
+        workflowLifecycleEventStore: new ChatWorkflowLifecycleEventStore(workflowCatalogStore),
+        workflowPromptAssetStore: new ChatWorkflowPromptAssetStore(workflowCatalogStore),
         telemetryRetentionMaintenance: {},
         integrations,
     };
@@ -3739,7 +3606,7 @@ export function createChatWebApp(options = {}) {
             state.subscribedContext = undefined;
             state.eventLoopDelay.disable();
             state.outputPersistenceRetries.dispose();
-            state.projectService.close();
+            state.workflowService.close();
             state.agentStore.close();
             state.reliabilityStore.close();
             state.cronStore.close();
@@ -4000,306 +3867,66 @@ export function createChatWebApp(options = {}) {
                 if (response)
                     return response;
             }
-            if (url.pathname === `${CHAT_WEB_API_PREFIX}/projects/bootstrap` && request.method === "GET") {
-                const webSession = await requireSession(request, context);
-                return responseJson(await buildProjectsBootstrap({
-                    state,
-                    context,
-                    webSession,
-                    defaultProfile,
-                    projectId: url.searchParams.get("projectId") || undefined,
-                    piboSessionId: url.searchParams.get("piboSessionId") || undefined,
-                    includeArchived: parseBooleanSearchParam(url, "includeArchived"),
-                }));
-            }
-            if (url.pathname === `${CHAT_WEB_API_PREFIX}/projects/message` && request.method === "POST") {
-                requireSameOriginJsonRequest(request);
-                const webSession = await requireSession(request, context);
-                const body = await readJsonBody(request);
-                return sendProjectMessage({ state, context, webSession, defaultProfile, body });
-            }
-            if (url.pathname === `${CHAT_WEB_API_PREFIX}/projects` && request.method === "GET") {
-                const webSession = await requireSession(request, context);
-                return responseJson({ projects: listSharedProjects(state, webSession, { includeArchived: parseBooleanSearchParam(url, "includeArchived") }) });
-            }
-            if (url.pathname === `${CHAT_WEB_API_PREFIX}/projects` && request.method === "POST") {
-                requireSameOriginJsonRequest(request);
-                const webSession = await requireSession(request, context);
-                const body = await readJsonBody(request);
-                try {
-                    const project = state.projectService.createProject({
-                        name: normalizeRoomName(body.name),
-                        description: normalizeProjectDescription(body.description),
-                        projectFolder: normalizeProjectPath(body.projectFolder),
-                        createFolder: body.createFolder === true,
-                    });
-                    return responseJson({ project }, { status: 201 });
-                }
-                catch (error) {
-                    throw new PiboWebHttpError(error instanceof Error ? error.message : String(error), 400);
-                }
-            }
-            const projectResource = projectResourcePath(url.pathname);
-            if (projectResource && projectResource.child === undefined && request.method === "PATCH") {
+            if (url.pathname === `${CHAT_WEB_API_PREFIX}/workflow-sessions` && request.method === "POST") {
                 requireSameOriginJsonRequest(request);
                 const webSession = await requireSession(request, context);
                 const body = await readJsonBody(request);
-                try {
-                    const existingProject = requireSharedProject(state, webSession, projectResource.projectId, { includeArchived: true });
-                    if (existingProject.metadata.default === true)
-                        throw new PiboWebHttpError("Project Manager cannot be changed", 400);
-                    const project = state.projectService.updateProject(projectResource.projectId, {
-                        ...(body.name !== undefined ? { name: normalizeRoomName(body.name) } : {}),
-                        ...(body.description !== undefined ? { description: normalizeProjectDescription(body.description) ?? null } : {}),
-                        ...(body.archived !== undefined ? { archived: normalizeProjectArchived(body.archived) } : {}),
-                    });
-                    if (!project)
-                        throw new PiboWebHttpError("Project not found", 404);
-                    return responseJson({ project });
-                }
-                catch (error) {
-                    if (error instanceof PiboWebHttpError)
-                        throw error;
-                    throw new PiboWebHttpError(error instanceof Error ? error.message : String(error), 400);
-                }
+                const room = typeof body.roomId === "string" && body.roomId.trim() ? requireRoom(state, body.roomId.trim(), webSession, "write") : state.roomService.ensureDefaultRoom();
+                const workspace = body.workspace === undefined ? undefined : normalizeRoomWorkspace(body.workspace);
+                const profile = resolveCreateSessionProfile(context, defaultProfile, body.profile);
+                const workflow = resolveWorkflowSelection(state, body.workflowId, body.workflowVersion, { requireExplicitWorkflowId: true, requireExplicitVersion: true });
+                const published = resolvePublishedWorkflowDefinitionForProfile(state, workflow, profile);
+                const baseDefinition = cloneJsonObject(published.definition);
+                const configuration = normalizeWorkflowSessionConfiguration(body, baseDefinition);
+                const validation = validatePublishedWorkflowBoundary({ state, context, webSession, definition: baseDefinition, trigger: "before_workflow_session_creation" });
+                recordWorkflowLifecycleEvent(state, webSession, { type: "workflow.validation.completed", workflowId: workflow.id, workflowVersion: workflow.version, status: validation.validation.ok ? "accepted" : "blocked", validation: validation.validation, diagnostics: validation.diagnostics, payload: { trigger: validation.validation.trigger, boundary: "workflow_session_creation" } });
+                if (!validation.validation.ok)
+                    return workflowValidationBlockedResponse("Workflow version has validation errors and cannot create a Workflow Session", validation, { workflow });
+                const created = createWorkflowSession({ state, context, room, workspace, profile, workflow, title: normalizeSessionTitle(body.title) ?? undefined, configuration });
+                const snapshot = state.workflowService.saveWorkflowSessionSnapshot(createWorkflowSessionSnapshot({ webSession, session: created.session, workflow: published, baseDefinition, configuration, validation }));
+                recordWorkflowLifecycleEvent(state, webSession, { type: "workflow.session.created", workflowId: workflow.id, workflowVersion: workflow.version, piboSessionId: created.session.id, status: "accepted", validation: validation.validation, diagnostics: validation.diagnostics, payload: { snapshotId: snapshot.id, profile, roomId: room.id } });
+                return responseJson({ session: created.session, workflowSession: enrichWorkflowSession(state, created.workflowSession), workflow, configuration, snapshot, validation: validation.validation, diagnostics: validation.diagnostics }, { status: 201 });
             }
-            if (projectResource && projectResource.child === undefined && request.method === "DELETE") {
-                requireSameOriginJsonRequest(request);
-                const webSession = await requireSession(request, context);
-                const body = await readJsonBody(request);
-                try {
-                    const project = requireSharedProject(state, webSession, projectResource.projectId, { includeArchived: true });
-                    if (project.metadata.default === true)
-                        throw new PiboWebHttpError("Project Manager cannot be deleted", 400);
-                    return responseJson(state.projectService.deleteProject(projectResource.projectId, {
-                        confirmName: normalizeRoomDeleteConfirmation(body.confirmName),
-                        deleteFiles: body.deleteFiles === true,
-                    }));
-                }
-                catch (error) {
-                    if (error instanceof PiboWebHttpError)
-                        throw error;
-                    throw new PiboWebHttpError(error instanceof Error ? error.message : String(error), 400);
-                }
+            const workflowResource = sessionWorkflowResource(url.pathname);
+            if (workflowResource && workflowResource.action === undefined && request.method === "GET") {
+                await requireSession(request, context);
+                return responseJson(inspectWorkflowSession(state, context, workflowResource.piboSessionId));
             }
-            const workflowHumanActionResource = projectWorkflowHumanActionsResource(url.pathname);
-            if (workflowHumanActionResource && request.method === "POST") {
+            if (workflowResource?.action === "human-actions" && request.method === "POST") {
                 requireSameOriginJsonRequest(request);
                 const webSession = await requireSession(request, context);
-                const body = await readJsonBody(request);
-                return submitProjectWorkflowHumanAction({
-                    state,
-                    context,
-                    webSession,
-                    projectId: workflowHumanActionResource.projectId,
-                    piboSessionId: workflowHumanActionResource.piboSessionId,
-                    body,
-                });
+                return submitWorkflowHumanAction({ state, context, webSession, piboSessionId: workflowResource.piboSessionId, body: await readJsonBody(request) });
             }
-            if (projectResource && projectResource.child === "workflow-sessions" && request.method === "POST" && !projectWorkflowSessionStartResource(url.pathname) && !workflowHumanActionResource) {
+            if (workflowResource?.action === "start" && request.method === "POST") {
                 requireSameOriginJsonRequest(request);
                 const webSession = await requireSession(request, context);
-                const body = await readJsonBody(request);
-                const project = requireSharedProject(state, webSession, projectResource.projectId);
-                const profile = resolveCreateSessionProfile(context, defaultProfile, body.profile);
-                const workflowSelection = resolveProjectWorkflowSelection(state, body.workflowId, body.workflowVersion, { requireExplicitWorkflowId: true, requireExplicitVersion: true });
-                const publishedWorkflow = resolvePublishedWorkflowDefinitionForProfile(state, workflowSelection, profile);
-                const baseDefinition = cloneJsonObject(publishedWorkflow.definition);
-                const configuration = normalizeProjectWorkflowSessionConfiguration(body, baseDefinition);
-                const validation = validatePublishedWorkflowBoundary({
-                    state,
-                    context,
-                    webSession,
-                    definition: baseDefinition,
-                    trigger: "before_project_session_creation",
-                });
-                recordWorkflowLifecycleEvent(state, webSession, {
-                    type: "workflow.validation.completed",
-                    workflowId: workflowSelection.id,
-                    workflowVersion: workflowSelection.version,
-                    projectId: project.id,
-                    status: validation.validation.ok ? "accepted" : "blocked",
-                    validation: validation.validation,
-                    diagnostics: validation.diagnostics,
-                    payload: { trigger: validation.validation.trigger, boundary: "project_session_creation" },
-                });
-                if (!validation.validation.ok) {
-                    return workflowValidationBlockedResponse("Workflow version has validation errors and cannot be used to create a Project session", validation, { workflow: workflowSelection });
-                }
-                const session = createProjectChatSession({
-                    state,
-                    context,
-                    webSession,
-                    project,
-                    profile,
-                    workflowId: workflowSelection.id,
-                    workflowVersion: workflowSelection.version,
-                    title: normalizeSessionTitle(body.title) ?? undefined,
-                    configuredWorkflow: true,
-                    configuration,
-                });
-                const snapshot = state.projectService.saveWorkflowSessionSnapshot(createProjectWorkflowSessionSnapshot({
-                    webSession,
-                    project,
-                    session,
-                    workflow: publishedWorkflow,
-                    baseDefinition,
-                    configuration,
-                    validation,
-                }));
-                const projectSession = state.projectService.getProjectSession(session.id);
-                recordWorkflowLifecycleEvent(state, webSession, {
-                    type: "project.workflow_session.created",
-                    workflowId: workflowSelection.id,
-                    workflowVersion: workflowSelection.version,
-                    projectId: project.id,
-                    piboSessionId: session.id,
-                    status: "accepted",
-                    validation: validation.validation,
-                    diagnostics: validation.diagnostics,
-                    payload: { snapshotId: snapshot.id, profile },
-                });
-                return responseJson({ session, projectSession, workflow: workflowSelection, configuration, snapshot, validation: validation.validation, diagnostics: validation.diagnostics }, { status: 201 });
-            }
-            const workflowSessionStart = projectWorkflowSessionStartResource(url.pathname);
-            if (workflowSessionStart && request.method === "POST") {
-                requireSameOriginJsonRequest(request);
-                const webSession = await requireSession(request, context);
-                const session = requireSharedSession(context, workflowSessionStart.piboSessionId);
-                const project = requireSharedProject(state, webSession, workflowSessionStart.projectId);
-                const projectSession = state.projectService.getProjectSession(session.id);
-                if (!projectSession || projectSession.projectId !== project.id)
-                    throw new PiboWebHttpError("Project workflow session not found", 404);
-                const snapshot = state.projectService.getWorkflowSessionSnapshotForSession(session.id);
+                const session = requireSharedSession(context, workflowResource.piboSessionId);
+                const workflowSession = state.workflowService.getWorkflowSession(session.id);
+                if (!workflowSession)
+                    throw new PiboWebHttpError("Workflow session not found", 404);
+                const snapshot = state.workflowService.getWorkflowSessionSnapshotForSession(session.id);
                 if (!snapshot)
-                    throw new PiboWebHttpError("Project workflow session snapshot not found", 409);
-                const workflowSelection = workflowVersionFromSnapshot(snapshot);
-                if (projectSession.workflowRunId) {
-                    const existingRun = state.projectService.getProjectWorkflowRun(projectSession.workflowRunId);
-                    if (existingRun) {
-                        updateProjectWorkflowRunSessionMetadata({ state, context, session, workflowRunId: existingRun.id });
-                        return responseJson({
-                            projectSession,
-                            workflow: workflowSelection,
-                            snapshot,
-                            run: existingRun,
-                            alreadyStarted: true,
-                            validation: existingRun.validation ?? summarizeWorkflowDiagnostics([], "before_workflow_start"),
-                            diagnostics: [],
-                            message: "Workflow run already exists for this Project session.",
-                        }, { status: 200 });
+                    throw new PiboWebHttpError("Workflow session snapshot not found", 409);
+                const workflow = workflowVersionFromSnapshot(snapshot);
+                if (workflowSession.workflowRunId) {
+                    const run = state.workflowService.getWorkflowRun(workflowSession.workflowRunId);
+                    if (run) {
+                        updateWorkflowRunSessionMetadata({ state, context, session, workflowRunId: run.id });
+                        return responseJson({ workflowSession: enrichWorkflowSession(state, workflowSession), run, snapshot, workflow, alreadyStarted: true, validation: run.validation ?? summarizeWorkflowDiagnostics([], "before_workflow_start"), diagnostics: [], message: "Workflow run already exists for this Workflow Session." });
                     }
                 }
-                const validation = validateProjectWorkflowSnapshotForStart(snapshot, { state, context, webSession });
-                recordWorkflowLifecycleEvent(state, webSession, {
-                    type: "workflow.validation.completed",
-                    workflowId: workflowSelection.id,
-                    workflowVersion: workflowSelection.version,
-                    projectId: project.id,
-                    piboSessionId: session.id,
-                    workflowRunId: projectSession.workflowRunId,
-                    status: validation.validation.ok ? "accepted" : "blocked",
-                    validation: validation.validation,
-                    diagnostics: validation.diagnostics,
-                    payload: { trigger: validation.validation.trigger, boundary: "workflow_start", snapshotId: snapshot.id },
-                });
+                const validation = validateWorkflowSnapshotForStart(snapshot, { state, context, webSession });
+                recordWorkflowLifecycleEvent(state, webSession, { type: "workflow.validation.completed", workflowId: workflow.id, workflowVersion: workflow.version, piboSessionId: session.id, workflowRunId: workflowSession.workflowRunId, status: validation.validation.ok ? "accepted" : "blocked", validation: validation.validation, diagnostics: validation.diagnostics, payload: { trigger: validation.validation.trigger, boundary: "workflow_start", snapshotId: snapshot.id } });
                 if (!validation.validation.ok) {
-                    recordWorkflowLifecycleEvent(state, webSession, {
-                        type: "project.workflow_start.blocked",
-                        workflowId: workflowSelection.id,
-                        workflowVersion: workflowSelection.version,
-                        projectId: project.id,
-                        piboSessionId: session.id,
-                        workflowRunId: projectSession.workflowRunId,
-                        status: "blocked",
-                        validation: validation.validation,
-                        diagnostics: validation.diagnostics,
-                        payload: { snapshotId: snapshot.id, profile: session.profile },
-                    });
-                    return workflowValidationBlockedResponse("Workflow session has validation errors and cannot be started", validation, { projectSession, workflow: workflowSelection });
-                }
-                const startResult = state.projectService.startWorkflowSessionRun({
-                    projectId: project.id,
-                    piboSessionId: session.id,
-                    runId: `wfr_${randomUUID()}`,
-                    workflowId: snapshot.workflow.id,
-                    workflowVersion: snapshot.workflow.version,
-                    snapshotId: snapshot.id,
-                    effectiveDefinitionHash: snapshot.workflow.effectiveDefinitionHash,
-                    current: createProjectWorkflowRunCurrent(snapshot.effectiveDefinition),
-                    inputValues: snapshot.inputValues,
-                    validation: validation.validation,
-                });
-                updateProjectWorkflowRunSessionMetadata({ state, context, session, workflowRunId: startResult.run.id });
-                recordWorkflowLifecycleEvent(state, webSession, {
-                    type: "project.workflow_start.accepted",
-                    workflowId: workflowSelection.id,
-                    workflowVersion: workflowSelection.version,
-                    projectId: project.id,
-                    piboSessionId: session.id,
-                    workflowRunId: startResult.run.id,
-                    status: "accepted",
-                    validation: validation.validation,
-                    diagnostics: validation.diagnostics,
-                    payload: { snapshotId: snapshot.id, profile: session.profile, alreadyStarted: startResult.alreadyStarted },
-                });
-                if (!startResult.alreadyStarted) {
-                    recordWorkflowLifecycleEvent(state, webSession, {
-                        type: "workflow.run.status_changed",
-                        workflowId: workflowSelection.id,
-                        workflowVersion: workflowSelection.version,
-                        projectId: project.id,
-                        piboSessionId: session.id,
-                        workflowRunId: startResult.run.id,
-                        status: "changed",
-                        validation: validation.validation,
-                        diagnostics: validation.diagnostics,
-                        payload: { snapshotId: snapshot.id, state: startResult.run.status, current: startResult.run.current },
-                    });
-                }
-                return responseJson({
-                    projectSession: startResult.projectSession,
-                    workflow: workflowSelection,
-                    snapshot,
-                    run: startResult.run,
-                    alreadyStarted: startResult.alreadyStarted,
-                    validation: validation.validation,
-                    diagnostics: validation.diagnostics,
-                    message: startResult.alreadyStarted ? "Workflow run already exists for this Project session." : "Workflow run started.",
-                }, { status: startResult.alreadyStarted ? 200 : 202 });
-            }
-            if (projectResource && projectResource.child === "sessions" && request.method === "POST") {
-                requireSameOriginJsonRequest(request);
-                const webSession = await requireSession(request, context);
-                const body = await readJsonBody(request);
-                const project = requireSharedProject(state, webSession, projectResource.projectId);
-                const profile = resolveCreateSessionProfile(context, defaultProfile, body.profile);
-                const workflowId = normalizeLegacyProjectWorkflowId(body.workflowId);
-                const session = createProjectChatSession({ state, context, webSession, project, profile, workflowId });
-                return responseJson({ session, projectSession: state.projectService.getProjectSession(session.id) }, { status: 201 });
-            }
-            const projectSessionId = projectSessionResourceId(url.pathname);
-            if (projectSessionId && request.method === "PATCH") {
-                requireSameOriginJsonRequest(request);
-                const webSession = await requireSession(request, context);
-                const selectedSession = resolveRequestedSession(state, context, webSession, defaultProfile, projectSessionId);
-                const body = await readJsonBody(request);
-                assertProjectSessionPatchFields(body);
-                const updateSession = context.channelContext.updateSession;
-                if (!updateSession)
-                    throw new PiboWebHttpError("Session updates are not available", 501);
-                const title = normalizeSessionTitle(body.title);
-                let updated = selectedSession;
-                if (title !== undefined) {
-                    const next = updateSession(selectedSession.id, { title });
-                    if (!next)
-                        throw new PiboWebHttpError("Session not found", 404);
-                    updated = next;
-                    state.sessionQuery.upsertSession(updated);
+                    recordWorkflowLifecycleEvent(state, webSession, { type: "workflow.start.blocked", workflowId: workflow.id, workflowVersion: workflow.version, piboSessionId: session.id, status: "blocked", validation: validation.validation, diagnostics: validation.diagnostics, payload: { snapshotId: snapshot.id, profile: session.profile } });
+                    return workflowValidationBlockedResponse("Workflow Session has validation errors and cannot be started", validation, { workflowSession, workflow });
                 }
-                const archived = normalizeProjectSessionArchived(body.archived);
-                const projectSession = archived === undefined ? state.projectService.getProjectSession(selectedSession.id) : state.projectService.setProjectSessionArchived(selectedSession.id, archived);
-                return responseJson({ session: updated, projectSession });
+                const started = state.workflowService.startWorkflowSessionRun({ piboSessionId: session.id, runId: `wfr_${randomUUID()}`, workflowId: snapshot.workflow.id, workflowVersion: snapshot.workflow.version, snapshotId: snapshot.id, effectiveDefinitionHash: snapshot.workflow.effectiveDefinitionHash, current: createWorkflowRunCurrent(snapshot.effectiveDefinition), inputValues: snapshot.inputValues, validation: validation.validation });
+                updateWorkflowRunSessionMetadata({ state, context, session, workflowRunId: started.run.id });
+                recordWorkflowLifecycleEvent(state, webSession, { type: "workflow.start.accepted", workflowId: workflow.id, workflowVersion: workflow.version, piboSessionId: session.id, workflowRunId: started.run.id, status: "accepted", validation: validation.validation, diagnostics: validation.diagnostics, payload: { snapshotId: snapshot.id, profile: session.profile, alreadyStarted: started.alreadyStarted } });
+                if (!started.alreadyStarted)
+                    recordWorkflowLifecycleEvent(state, webSession, { type: "workflow.run.status_changed", workflowId: workflow.id, workflowVersion: workflow.version, piboSessionId: session.id, workflowRunId: started.run.id, status: "changed", validation: validation.validation, diagnostics: validation.diagnostics, payload: { snapshotId: snapshot.id, state: started.run.status, current: started.run.current } });
+                return responseJson({ workflowSession: enrichWorkflowSession(state, started.workflowSession), run: started.run, snapshot, workflow, alreadyStarted: started.alreadyStarted, validation: validation.validation, diagnostics: validation.diagnostics, message: started.alreadyStarted ? "Workflow run already exists for this Workflow Session." : "Workflow run recorded. General graph execution is not connected to this surface; supported manual triggers run from the editor." }, { status: started.alreadyStarted ? 200 : 202 });
             }
             if (url.pathname === `${CHAT_WEB_API_PREFIX}/signals/statuses` && request.method === "GET") {
                 await requireSession(request, context);
@@ -4475,6 +4102,7 @@ export function createChatWebApp(options = {}) {
                     });
                     return workflowValidationBlockedResponse("Workflow draft has validation errors and cannot be test-run", validation, { draft: serializeWorkflowDraft(record) });
                 }
+                const room = body.roomId ? requireRoom(state, body.roomId, webSession, "write") : state.roomService.ensureDefaultRoom();
                 const result = await runWorkflowManualTextTrigger({
                     definition: record.definition,
                     triggerNodeId: body.triggerNodeId,
@@ -4483,11 +4111,31 @@ export function createChatWebApp(options = {}) {
                     draftId: record.draftId,
                     channelContext: context.channelContext,
                     channel: CHAT_WEB_CHANNEL,
-                    defaultWorkspace: getDefaultPiboWorkspace(),
+                    roomId: room.id,
+                    defaultWorkspace: body.workspace ?? room.workspace ?? getDefaultPiboWorkspace(),
                     onSessionCreated: (session) => state.sessionQuery.upsertSession(session),
                     resolveProfile: (profileId) => resolveWorkflowRuntimeProfile({ context, requestedId: profileId }),
                 });
                 const diagnostics = result.ok ? validation.diagnostics : sanitizeWorkflowDiagnostics([...validation.diagnostics, ...result.diagnostics]);
+                if (result.run) {
+                    const run = result.run;
+                    const store = state.workflowService.runtimeStore;
+                    store.transaction(() => {
+                        const hash = hashWorkflowDefinitionJson(record.definition);
+                        const existing = store.listDefinitionSnapshots({ workflowId: run.workflowId, workflowVersion: run.workflowVersion, hash, limit: 1 })[0];
+                        const definitionSnapshotId = existing?.id ?? `wfds_${run.id}`;
+                        if (!existing)
+                            store.saveDefinitionSnapshot({ id: definitionSnapshotId, workflowId: run.workflowId, workflowVersion: run.workflowVersion, hash, definition: record.definition, createdAt: run.createdAt });
+                        store.saveRun({ ...run, piboSessionId: result.nodeAttempts.find((attempt) => attempt.piboSessionId)?.piboSessionId, definitionSnapshotId, workflowDefinitionHash: hash, current: { status: run.status, nodeId: result.nodeAttempts.at(-1)?.nodeId }, state: { global: {} } });
+                        for (const attempt of result.nodeAttempts) {
+                            store.saveNodeAttempt({ ...attempt, attempt: 1 });
+                            if (attempt.piboSessionId)
+                                state.workflowService.addWorkflowSession({ piboSessionId: attempt.piboSessionId, workflowId: run.workflowId, workflowVersion: run.workflowVersion, workflowRunId: run.id, state: run.status });
+                        }
+                        for (const transfer of result.edgeTransfers)
+                            store.saveEdgeTransfer(transfer);
+                    });
+                }
                 recordWorkflowLifecycleEvent(state, webSession, {
                     type: result.ok ? "workflow.editor_test_run.completed" : "workflow.editor_test_run.failed",
                     workflowId: record.workflowId,
@@ -4624,13 +4272,12 @@ export function createChatWebApp(options = {}) {
                 return responseJson(archiveWorkflowIdentity(state, context, webSession, archiveWorkflowId, body.reason));
             }
             if (url.pathname === `${CHAT_WEB_API_PREFIX}/workflows/lifecycle-events` && request.method === "GET") {
-                const webSession = await requireSession(request, context);
+                await requireSession(request, context);
                 return responseJson({
                     events: state.workflowLifecycleEventStore.listEvents({
                         type: url.searchParams.get("type") ?? undefined,
                         workflowId: url.searchParams.get("workflowId") ?? undefined,
                         draftId: url.searchParams.get("draftId") ?? undefined,
-                        projectId: url.searchParams.get("projectId") ?? undefined,
                         piboSessionId: url.searchParams.get("piboSessionId") ?? undefined,
                         workflowRunId: url.searchParams.get("workflowRunId") ?? undefined,
                         limit: parsePositiveIntSearchParam(url, "limit", 100, 500),
@@ -4942,12 +4589,42 @@ export function createChatWebApp(options = {}) {
                     sessions: await buildSessionNodes(ownedSessions, state.sessionQuery.listSessions(), process.cwd(), new Map(), sessionNodeHistoryOptions(context)),
                 });
             }
+            if (roomResource?.child === "order" && request.method === "PATCH") {
+                requireSameOriginJsonRequest(request);
+                const webSession = await requireSession(request, context);
+                const room = requireRoom(state, roomResource.roomId, webSession, "admin");
+                const body = await readJsonBody(request);
+                if (typeof body.targetRoomId !== "string" || !body.targetRoomId) {
+                    throw new PiboWebHttpError("targetRoomId is required", 400);
+                }
+                if (body.position !== "before" && body.position !== "after") {
+                    throw new PiboWebHttpError("position must be before or after", 400);
+                }
+                const targetRoom = requireRoom(state, body.targetRoomId, webSession, "admin");
+                return responseJson({
+                    orderedRoomIds: reorderChatWebRoom({ state, room, targetRoom, position: body.position }),
+                });
+            }
             if (roomResource && roomResource.child === undefined && request.method === "PATCH") {
                 requireSameOriginJsonRequest(request);
                 const webSession = await requireSession(request, context);
                 const existingRoom = requireRoom(state, roomResource.roomId, webSession, "admin");
                 const body = await readJsonBody(request);
+                if (body.pinned !== undefined && existingRoom.parentRoomId) {
+                    throw new PiboWebHttpError("Only top-level rooms can be pinned", 400);
+                }
+                if (body.pinned === true && (body.archived === true || isPiboRoomArchived(existingRoom))) {
+                    throw new PiboWebHttpError("Archived rooms cannot be pinned", 400);
+                }
                 const update = createRoomUpdate(existingRoom, body);
+                if (typeof body.pinned === "boolean") {
+                    const targetGroup = state.roomService.listRooms().filter((room) => !room.parentRoomId
+                        && !isDefaultPiboRoom(room)
+                        && !isPiboRoomArchived(room)
+                        && room.id !== existingRoom.id
+                        && isPiboRoomPinned(room) === body.pinned);
+                    update.metadata = withPiboRoomPinned(update.metadata ?? existingRoom.metadata, body.pinned, nextChatWebRoomSidebarOrder(targetGroup));
+                }
                 if (update.parentRoomId)
                     requireRoom(state, update.parentRoomId, webSession, "admin");
                 let room;
@@ -5082,6 +4759,28 @@ export function createChatWebApp(options = {}) {
                     throw new PiboWebHttpError(message, status);
                 }
             }
+            if (sessionAction?.action === "order" && request.method === "PATCH") {
+                requireSameOriginJsonRequest(request);
+                const webSession = await requireSession(request, context);
+                const selectedSession = resolveRequestedSession(state, context, webSession, defaultProfile, sessionAction.piboSessionId);
+                const body = await readJsonBody(request);
+                if (typeof body.targetPiboSessionId !== "string" || !body.targetPiboSessionId) {
+                    throw new PiboWebHttpError("targetPiboSessionId is required", 400);
+                }
+                if (body.position !== "before" && body.position !== "after") {
+                    throw new PiboWebHttpError("position must be before or after", 400);
+                }
+                const targetSession = resolveRequestedSession(state, context, webSession, defaultProfile, body.targetPiboSessionId);
+                return responseJson({
+                    orderedSessionIds: reorderChatWebSession({
+                        state,
+                        context,
+                        session: selectedSession,
+                        targetSession,
+                        position: body.position,
+                    }),
+                });
+            }
             const patchSessionId = sessionResourceId(url.pathname);
             if (patchSessionId && request.method === "PATCH") {
                 requireSameOriginJsonRequest(request);
@@ -5095,7 +4794,23 @@ export function createChatWebApp(options = {}) {
                 if (body.profile !== undefined && (state.activeTraceSessions.has(selectedSession.id) || state.sessionQuery.hasSessionActivity(selectedSession.id))) {
                     throw new PiboWebHttpError("Session profile can only be changed before the first message.", 400);
                 }
+                if (body.pinned !== undefined && selectedSession.parentId) {
+                    throw new PiboWebHttpError("Only top-level sessions can be pinned", 400);
+                }
+                if (body.pinned === true && (body.archived === true || isChatWebSessionArchived(selectedSession))) {
+                    throw new PiboWebHttpError("Archived sessions cannot be pinned", 400);
+                }
                 const update = createSessionUpdate(context, selectedSession, body);
+                if (typeof body.pinned === "boolean") {
+                    const roomId = chatRoomIdFromMetadata(selectedSession.metadata);
+                    const targetGroup = roomId
+                        ? sessionsInRoom(listSharedSessions(context), roomId).filter((session) => !session.parentId
+                            && !isChatWebSessionArchived(session)
+                            && session.id !== selectedSession.id
+                            && isChatWebSessionPinned(session) === body.pinned)
+                        : [];
+                    update.metadata = withChatWebSessionPinned(update.metadata ?? selectedSession.metadata, body.pinned, nextChatWebSessionSidebarOrder(targetGroup));
+                }
                 if ("activeModel" in update) {
                     try {
                         await context.channelContext.setLiveSessionActiveModel?.(selectedSession.id, update.activeModel ?? undefined);
@@ -5709,17 +5424,6 @@ export function createChatWebApp(options = {}) {
                 const selectedSession = resolveRequestedSession(state, context, webSession, defaultProfile, requestedPiboSessionId, requestedRoomId);
                 const cursor = parseSseCursor(url.searchParams.get("since")) ?? parseSseCursor(request.headers.get("last-event-id"));
                 const transientReplayCursor = parseTransientReplayCursor(url.searchParams.get("liveSince"));
-                if (!requestedRoomId && state.projectService.getProjectSession(selectedSession.id)) {
-                    return createEventStream({
-                        piboSessionId: selectedSession.id,
-                        activePiboSessionId: selectedSession.id,
-                        mode: streamMode,
-                        context,
-                        state,
-                        cursor,
-                        transientReplayCursor,
-                    });
-                }
                 const roomId = requestedRoomId ?? selectedRoomIdForSession(state, context, selectedSession);
                 requireRoom(state, roomId, webSession, "read");
                 const streamPiboSessionId = requestedPiboSessionId || !requestedRoomId ? selectedSession.id : undefined;