@playcraft/cli 0.1.71 → 0.1.72

package/dist/workspace-runtime/server/http.js

@@ -1,14 +1,14 @@
-import { hasPendingLevelEditorTransaction, assertNoPendingLevelEditorTransaction } from '../workspaces/level-editor-atomic.js';
+import { hasPendingLevelEditorTransaction, assertNoPendingLevelEditorTransaction, } from '../workspaces/level-editor-atomic.js';
 import { readObservedFile, withObservedFile } from '../workspaces/revisions.js';
 import { observeWorkspaceDirectories } from '../workspaces/directory-revisions.js';
-import { registerWorkspace, revisionScope, sessionWorkspaceRoot, workspaceRoot, WorkspaceContextError } from '../workspaces/registry.js';
+import { registerWorkspace, revisionScope, sessionWorkspaceRoot, workspaceRoot, WorkspaceContextError, } from '../workspaces/registry.js';
 import { constants } from 'node:fs';
 import { access as accessDirectory, stat } from 'node:fs/promises';
 import { workspaceRegistrationRequestSchema, workspaceFileSearchQuerySchema, HTTP_STATUS_BY_ERROR, assertLeaseFence, buildHandshakeDocument, capability, findUntrustedRuntimeFields, gitFileRefSchema, sourceAckSchema, operationAcceptRequestSchema, operationLogSchema, operationKindSchema, operationScopeKey, productionSessionAttemptId, takesWorkspaceDirectory, nativeHistoryReadSchema, runtimeError, runtimeConnectivityDocumentSchema, unavailableRuntimeCapabilities, workspaceUiResultSchema, workspaceRemixReferenceImportRequestSchema, WORKSPACE_REMIX_REFERENCE_BODY_MAX_BYTES, WORKSPACE_ASSET_LIBRARY_IMPORT_BODY_MAX_BYTES, workspaceSessionRestoreRequestSchema, workspaceSessionRestoreResponseSchema, deliveryValidatePayloadSchema, deliveryBuildListQuerySchema, deliveryBuildListSchema, deliveryBuildDetailSchema, deliveryBuildLogSchema, workspaceDirectoryNameSchema, workspaceDirectoryRegistrationSchema, attachmentIdsSchema, } from '@playcraft/common/cloud-workspace/runtime';
 import { controlTokenMatches, extractControlToken } from './auth.js';
 import { applyRuntimeEndpointPatch } from './endpoints.js';
 import { wakeSourceEventUploader } from './source-uploader.js';
-import { InvalidWorkspacePathError, } from '../workspaces/files.js';
+import { InvalidWorkspacePathError } from '../workspaces/files.js';
 import { GitWorkspaceError, readWorkspaceGitDiff, readWorkspaceGitFile, readWorkspaceGitGraph, readWorkspaceGitStatus, } from '../workspaces/git.js';
 import { readWorkspaceParameters } from '../workspaces/parameters.js';
 import { listParameterAgentTasks } from '../workspaces/parameter-agent.js';
@@ -20,22 +20,22 @@ import { readDependencies } from '../workspaces/dependencies.js';
 import { permissionDriftFromError } from '../workspaces/workspace-shares.js';
 import { desktopHost, desktopRoute } from './desktop-host.js';
 import { ensureCliCredentials } from '../workspaces/cli-credentials.js';
-import { readAttachmentUpload, uploadWorkspaceAttachment, uploadWorkspaceVideoAttachment } from '../workspaces/attachments.js';
+import { readAttachmentUpload, uploadWorkspaceAttachment, uploadWorkspaceVideoAttachment, } from '../workspaces/attachments.js';
 import { serveWorkspaceAttachment } from '../workspaces/attachment-content.js';
 import { serveWorkspaceFileContent } from '../workspaces/file-content.js';
 import { validateDeliveryArtifact, DeliveryValidationError } from '../workspaces/delivery.js';
 import { DeliveryStore } from '../workspaces/delivery-store.js';
-import { importWorkspaceLibraryAttachment, listWorkspaceLibraryAttachments, listWorkspaceLibraryImportReceipts, readLibraryAttachmentUpload } from '../workspaces/library-attachments.js';
-import { beginWorkspaceDirectoryAttachment, uploadWorkspaceDirectoryFile, completeWorkspaceDirectoryAttachment, cancelWorkspaceDirectoryAttachment } from '../workspaces/directory-attachments.js';
+import { importWorkspaceLibraryAttachment, listWorkspaceLibraryAttachments, listWorkspaceLibraryImportReceipts, readLibraryAttachmentUpload, } from '../workspaces/library-attachments.js';
+import { beginWorkspaceDirectoryAttachment, uploadWorkspaceDirectoryFile, completeWorkspaceDirectoryAttachment, cancelWorkspaceDirectoryAttachment, } from '../workspaces/directory-attachments.js';
 import { readWorkspaceSkills, readWorkspaceSkillSnapshot } from '../workspaces/skills.js';
-import { listWorkspaceRemixReferences, RemixReferenceError } from '../workspaces/remix-references.js';
+import { listWorkspaceRemixReferences, RemixReferenceError, } from '../workspaces/remix-references.js';
 import { loadWorkspaceSkillArtifact } from '../workspaces/skill-artifact-loader.js';
 import { join } from 'node:path';
 import { terminalHost } from './terminal-host.js';
 import { batchDirectoryHeld } from '../batch/occupancy.js';
 import { dispatchBatchRoute } from '../batch/routes.js';
-import { cleanupWorkspaceDirectories, syncWorkspaceDirectories } from '../workspaces/directory-maintenance.js';
-import { registerWorkspaceDirectory, restoreWorkspaceDirectory } from '../workspaces/directories.js';
+import { cleanupWorkspaceDirectories, syncWorkspaceDirectories, } from '../workspaces/directory-maintenance.js';
+import { registerWorkspaceDirectory, restoreWorkspaceDirectory, } from '../workspaces/directories.js';
 import { readWorkspaceDirectoryStats } from '../workspaces/directory-stats.js';
 import { probeRuntimeConnectivity } from './connectivity.js';
 import { refreshWorkspaceArtifacts } from '../workspaces/artifact-events.js';
@@ -52,7 +52,7 @@ import { serveSessionImage } from '../workspaces/session-image.js';
 import { restoreNativeSession, SessionRestoreError } from './session-restore.js';
 import { handleAssetTransferRequest } from './asset-transfers.js';
 import { readWorktreeSource, registerChatWorktree } from '../workspaces/worktrees.js';
-import { withDirectoryWrite } from './directory-access.js';
+import { directoryBusyCode, withDirectoryWrite } from './directory-access.js';
 import { readProceduralModelCandidates } from '../workspaces/procedural-3d/read-candidates.js';
 import { ModelPreviewStore } from '../workspaces/procedural-3d/model-preview-store.js';
 import { readModelPreparation } from '../workspaces/model-preparation.js';
@@ -61,23 +61,40 @@ import { handleAudioAssetRequest } from './audio-assets.js';
 export async function handleRuntimeRequest(state, request, response) {
     const url = new URL(request.url ?? '/', 'http://127.0.0.1');
     const workspaceId = url.searchParams.get('workspaceId');
-    const protectedRead = ['/runtime/level-editor', '/runtime/parameters', '/runtime/file', '/runtime/files', '/runtime/files/search', '/runtime/file-content', '/runtime/archive', '/runtime/git-bundle', '/runtime/git/status', '/runtime/git/diff', '/runtime/audio/assets', '/runtime/audio/content'].includes(url.pathname) && ['GET', 'HEAD'].includes(request.method ?? 'GET');
+    const protectedRead = [
+        '/runtime/level-editor',
+        '/runtime/parameters',
+        '/runtime/file',
+        '/runtime/files',
+        '/runtime/files/search',
+        '/runtime/file-content',
+        '/runtime/archive',
+        '/runtime/git-bundle',
+        '/runtime/git/status',
+        '/runtime/git/diff',
+        '/runtime/audio/assets',
+        '/runtime/audio/content',
+    ].includes(url.pathname) && ['GET', 'HEAD'].includes(request.method ?? 'GET');
     if (authorizeRuntime(state, request) === 'control' && protectedRead) {
+        const directoryName = url.searchParams.get('directoryName') ?? 'basic';
         try {
-            const directoryName = url.searchParams.get('directoryName') ?? 'basic';
             const readContext = { state, workspaceId: workspaceId ?? undefined, directoryName };
             const root = await workspaceRoot(state, readContext.workspaceId, directoryName);
             if (await hasPendingLevelEditorTransaction(root, readContext)) {
                 // A retained writer owns the exclusive lease. Reconcile that exact operation before admitting a reader.
                 for (const { operation } of state.journal.listOperations())
-                    if (operation.kind === 'level-editor.transaction' && (state.config.workspaceMode !== 'multi' || operation.workspaceId === readContext.workspaceId) && (operation.directoryName ?? 'basic') === directoryName)
+                    if (operation.kind === 'level-editor.transaction' &&
+                        (state.config.workspaceMode !== 'multi' ||
+                            operation.workspaceId === readContext.workspaceId) &&
+                        (operation.directoryName ?? 'basic') === directoryName)
                         await observeLevelEditorTransaction(state, operation);
             }
             const recovering = await hasPendingLevelEditorTransaction(root, readContext);
             return await withDirectoryWrite(state, { ...readContext, mode: recovering ? 'exclusive' : 'shared', wait: false }, async () => {
                 if (recovering) {
                     const snapshot = await readWorkspaceLevelEditor(root, state.journal.fileRevisions(revisionScope(state, readContext.workspaceId, directoryName)), readContext);
-                    if (snapshot.status === 'invalid' && snapshot.diagnostics.some(item => /recovery|history/.test(item.code)))
+                    if (snapshot.status === 'invalid' &&
+                        snapshot.diagnostics.some((item) => /recovery|history/.test(item.code)))
                         throw new Error(snapshot.diagnostics[0].code);
                 }
                 await assertNoPendingLevelEditorTransaction(root, readContext);
@@ -85,26 +102,49 @@ export async function handleRuntimeRequest(state, request, response) {
             });
         }
         catch (error) {
-            if (!response.headersSent)
-                writeJson(response, 409, { error: error instanceof Error ? error.message : 'level_editor_recovery_required' });
+            if (!response.headersSent) {
+                const busy = error instanceof Error && error.message === 'directory_busy';
+                writeJson(response, 409, {
+                    error: busy
+                        ? await directoryBusyCode(state, workspaceId ?? undefined, directoryName)
+                        : error instanceof Error
+                            ? error.message
+                            : 'level_editor_recovery_required',
+                });
+            }
             return;
         }
     }
     // Body-scoped operations, members and terminal control take their own lifetime-aware leases.
-    const ownLease = url.pathname.startsWith('/runtime/operations') || url.pathname.startsWith('/runtime/terminals/') ||
+    const ownLease = url.pathname.startsWith('/runtime/operations') ||
+        url.pathname.startsWith('/runtime/terminals/') ||
         url.pathname === '/runtime/audio/export' ||
-        url.pathname.startsWith('/runtime/batch-') || /^\/runtime\/sessions\/[^/]+\/ui-results$/.test(url.pathname) ||
+        url.pathname.startsWith('/runtime/batch-') ||
+        /^\/runtime\/sessions\/[^/]+\/ui-results$/.test(url.pathname) ||
         /^\/runtime\/sessions\/[^/]+\/prediction$/.test(url.pathname);
-    if (authorizeRuntime(state, request) === 'control' && workspaceId &&
-        (!['GET', 'HEAD', 'OPTIONS'].includes(request.method ?? 'GET') || url.pathname === '/runtime/git-bundle') && !ownLease) {
+    if (authorizeRuntime(state, request) === 'control' &&
+        workspaceId &&
+        (!['GET', 'HEAD', 'OPTIONS'].includes(request.method ?? 'GET') ||
+            url.pathname === '/runtime/git-bundle') &&
+        !ownLease) {
         try {
-            return await withDirectoryWrite(state, { workspaceId, directoryName: url.searchParams.get('directoryName') ?? 'basic', wait: false,
+            return await withDirectoryWrite(state, {
+                workspaceId,
+                directoryName: url.searchParams.get('directoryName') ?? 'basic',
+                wait: false,
                 sessionId: url.searchParams.get('sessionId') ?? undefined,
-                ...(url.pathname === '/runtime/git-bundle' ? { mode: 'exclusive' } : {}) }, () => dispatchRuntimeRequest(state, request, response));
+                ...(url.pathname === '/runtime/git-bundle' ? { mode: 'exclusive' } : {}),
+            }, () => dispatchRuntimeRequest(state, request, response));
         }
         catch (error) {
-            if (!response.headersSent)
-                writeJson(response, error instanceof Error && error.message === 'directory_busy' ? 409 : 500, { error: error instanceof Error && error.message === 'directory_busy' ? 'directory_busy' : 'runtime_request_failed' });
+            if (!response.headersSent) {
+                const busy = error instanceof Error && error.message === 'directory_busy';
+                writeJson(response, busy ? 409 : 500, {
+                    error: busy
+                        ? await directoryBusyCode(state, workspaceId, url.searchParams.get('directoryName') ?? 'basic')
+                        : 'runtime_request_failed',
+                });
+            }
             else
                 response.destroy(error instanceof Error ? error : undefined);
             return;
@@ -160,7 +200,7 @@ async function dispatchRuntimeRequest(state, request, response) {
             }
             const workspaceId = parsed.data;
             const root = await sessionWorkspaceRoot(state, workspaceId, directoryName);
-            const rootStat = await stat(root).catch(error => {
+            const rootStat = await stat(root).catch((error) => {
                 if (['ENOENT', 'ENOTDIR'].includes(error.code))
                     throw new WorkspaceContextError('workspace_not_prepared', { cause: error });
                 throw error;
@@ -202,6 +242,7 @@ async function dispatchRuntimeRequest(state, request, response) {
                 levelEditorRetryVersion: 1,
                 remixReferencesVersion: 1,
                 batchSourceFreezeRevision: 2,
+                batchStarterTemplateVersion: 1,
                 batchSourcePublicationVersion: 1,
                 batchReferenceContextVersion: 1,
                 ...(state.native?.workspaceUi ? { workspaceUiVersion: 1 } : {}),
@@ -213,7 +254,9 @@ async function dispatchRuntimeRequest(state, request, response) {
                 executionGroup: {
                     replaced: state.journal.executionGroup().replaced,
                     stopConfirmed: state.journal.executionGroup().stopConfirmed,
-                    ...(state.journal.stoppedRuntimeEpochs().length ? { stoppedRuntimeEpochs: state.journal.stoppedRuntimeEpochs() } : {}),
+                    ...(state.journal.stoppedRuntimeEpochs().length
+                        ? { stoppedRuntimeEpochs: state.journal.stoppedRuntimeEpochs() }
+                        : {}),
                 },
             });
             return;
@@ -230,8 +273,12 @@ async function dispatchRuntimeRequest(state, request, response) {
                 writeJson(response, 409, { error: 'multi_workspace_unavailable' });
                 return;
             }
-            const scope = workspaceSessionRestoreResponseSchema.pick({ sessionId: true, workspaceId: true, directoryName: true }).safeParse({
-                sessionId: decodeURIComponent(restoreRoute[1]), workspaceId: url.searchParams.get('workspaceId'), directoryName,
+            const scope = workspaceSessionRestoreResponseSchema
+                .pick({ sessionId: true, workspaceId: true, directoryName: true })
+                .safeParse({
+                sessionId: decodeURIComponent(restoreRoute[1]),
+                workspaceId: url.searchParams.get('workspaceId'),
+                directoryName,
             });
             const parsed = workspaceSessionRestoreRequestSchema.safeParse(await readJson(request, 4096));
             if (!scope.success || !parsed.success) {
@@ -245,8 +292,11 @@ async function dispatchRuntimeRequest(state, request, response) {
                     return state.journal.exclusive(`session:${scope.data.sessionId}`, () => state.journal.exclusive(`workspace:${revisionScope(state, scope.data.workspaceId, directoryName) ?? 'single'}`, () => restoreNativeSession(state, scope.data, parsed.data)));
                 });
                 writeJson(response, 200, workspaceSessionRestoreResponseSchema.parse({
-                    ...scope.data, threadId: restored.threadId, generation: parsed.data.generation,
-                    runtimeEpoch: parsed.data.runtimeEpoch, recoverability: 'native',
+                    ...scope.data,
+                    threadId: restored.threadId,
+                    generation: parsed.data.generation,
+                    runtimeEpoch: parsed.data.runtimeEpoch,
+                    recoverability: 'native',
                 }));
             }
             catch (error) {
@@ -267,8 +317,10 @@ async function dispatchRuntimeRequest(state, request, response) {
                 return;
             }
             const session = state.journal.getSession(sessionId);
-            if (!session || productionSessionAttemptId(sessionId) || session.workspaceId !== url.searchParams.get('workspaceId')
-                || (session.directoryName ?? 'basic') !== directoryName) {
+            if (!session ||
+                productionSessionAttemptId(sessionId) ||
+                session.workspaceId !== url.searchParams.get('workspaceId') ||
+                (session.directoryName ?? 'basic') !== directoryName) {
                 writeJson(response, 404, { error: 'session_not_found' });
                 return;
             }
@@ -286,8 +338,10 @@ async function dispatchRuntimeRequest(state, request, response) {
                 return;
             const sessionId = decodeURIComponent(predictionRoute[1]);
             const session = state.journal.getSession(sessionId);
-            if (!session || productionSessionAttemptId(sessionId) || session.workspaceId !== url.searchParams.get('workspaceId')
-                || (session.directoryName ?? 'basic') !== directoryName) {
+            if (!session ||
+                productionSessionAttemptId(sessionId) ||
+                session.workspaceId !== url.searchParams.get('workspaceId') ||
+                (session.directoryName ?? 'basic') !== directoryName) {
                 writeJson(response, 404, { error: 'session_not_found' });
                 return;
             }
@@ -305,7 +359,9 @@ async function dispatchRuntimeRequest(state, request, response) {
             if (writeDestroyed(state, response))
                 return;
             const parsed = workspaceRegistrationRequestSchema.safeParse(await readJson(request));
-            if (!parsed.success || parsed.data.generation !== state.config.generation || parsed.data.runtimeEpoch !== state.runtimeEpoch) {
+            if (!parsed.success ||
+                parsed.data.generation !== state.config.generation ||
+                parsed.data.runtimeEpoch !== state.runtimeEpoch) {
                 writeJson(response, 409, { error: 'invalid_workspace_registration' });
                 return;
             }
@@ -319,7 +375,9 @@ async function dispatchRuntimeRequest(state, request, response) {
             if (writeDestroyed(state, response))
                 return;
             const body = asRecord(await readJson(request));
-            if (body.generation !== state.config.generation || body.runtimeEpoch !== state.runtimeEpoch || !Number.isSafeInteger(body.leaseFence)) {
+            if (body.generation !== state.config.generation ||
+                body.runtimeEpoch !== state.runtimeEpoch ||
+                !Number.isSafeInteger(body.leaseFence)) {
                 writeJson(response, 409, { error: 'invalid_workspace_registration' });
                 return;
             }
@@ -331,7 +389,12 @@ async function dispatchRuntimeRequest(state, request, response) {
                     return;
                 }
                 const directory = workspaceDirectoryRegistrationSchema.parse(body.directory);
-                writeJson(response, 200, await withDirectoryWrite(state, { ...directory, mode: 'exclusive', wait: false }, () => withDirectoryWrite(state, { workspaceId: directory.workspaceId, directoryName: source.data, mode: 'exclusive', wait: false }, () => registerChatWorktree(state, directory, Number(body.leaseFence), source.data, body.sourceBranchName, attachments.data))));
+                writeJson(response, 200, await withDirectoryWrite(state, { ...directory, mode: 'exclusive', wait: false }, () => withDirectoryWrite(state, {
+                    workspaceId: directory.workspaceId,
+                    directoryName: source.data,
+                    mode: 'exclusive',
+                    wait: false,
+                }, () => registerChatWorktree(state, directory, Number(body.leaseFence), source.data, body.sourceBranchName, attachments.data))));
             }
             else {
                 const directory = workspaceDirectoryRegistrationSchema.parse(body.directory);
@@ -339,17 +402,27 @@ async function dispatchRuntimeRequest(state, request, response) {
             }
             return;
         }
-        if (request.method === 'POST' && url.pathname === '/runtime/workspaces/directories/worktree-source') {
+        if (request.method === 'POST' &&
+            url.pathname === '/runtime/workspaces/directories/worktree-source') {
             if (writeDestroyed(state, response))
                 return;
             const body = asRecord(await readJson(request));
             const source = workspaceDirectoryNameSchema.safeParse(body.sourceDirectoryName);
-            if (body.generation !== state.config.generation || body.runtimeEpoch !== state.runtimeEpoch || !Number.isSafeInteger(body.leaseFence)
-                || !source.success || typeof body.workspaceId !== 'string' || typeof body.sourceBranchName !== 'string') {
+            if (body.generation !== state.config.generation ||
+                body.runtimeEpoch !== state.runtimeEpoch ||
+                !Number.isSafeInteger(body.leaseFence) ||
+                !source.success ||
+                typeof body.workspaceId !== 'string' ||
+                typeof body.sourceBranchName !== 'string') {
                 writeJson(response, 409, { error: 'invalid_workspace_registration' });
                 return;
             }
-            writeJson(response, 200, await withDirectoryWrite(state, { workspaceId: body.workspaceId, directoryName: source.data, mode: 'exclusive', wait: false }, () => readWorktreeSource(state, body.workspaceId, source.data, Number(body.leaseFence), body.sourceBranchName)));
+            writeJson(response, 200, await withDirectoryWrite(state, {
+                workspaceId: body.workspaceId,
+                directoryName: source.data,
+                mode: 'exclusive',
+                wait: false,
+            }, () => readWorktreeSource(state, body.workspaceId, source.data, Number(body.leaseFence), body.sourceBranchName)));
             return;
         }
         const maintenance = /^\/runtime\/workspaces\/([a-f0-9-]{36})\/directories\/(cleanup|sync|stats)$/.exec(url.pathname);
@@ -387,11 +460,15 @@ async function dispatchRuntimeRequest(state, request, response) {
             await handleSessionHistory(state, response, historyPath.workspaceId, historyPath.sessionId);
             return;
         }
-        if (['GET', 'HEAD', 'POST'].includes(request.method ?? '') && url.pathname === '/runtime/session-image') {
+        if (['GET', 'HEAD', 'POST'].includes(request.method ?? '') &&
+            url.pathname === '/runtime/session-image') {
             let recordedPath;
             if (request.method === 'POST') {
                 const body = asRecord(await readJson(request));
-                if (Object.keys(body).length !== 1 || typeof body.path !== 'string' || !body.path || body.path.length > 4096) {
+                if (Object.keys(body).length !== 1 ||
+                    typeof body.path !== 'string' ||
+                    !body.path ||
+                    body.path.length > 4096) {
                     writeJson(response, 404, { error: 'image_not_found' });
                     return;
                 }
@@ -410,15 +487,18 @@ async function dispatchRuntimeRequest(state, request, response) {
             await handleSourceEvents(state, request, response, url);
             return;
         }
-        if (url.pathname === '/runtime/attachments/library' && ['GET', 'POST'].includes(request.method ?? '')) {
+        if (url.pathname === '/runtime/attachments/library' &&
+            ['GET', 'POST'].includes(request.method ?? '')) {
             if (writeDestroyed(state, response))
                 return;
             const workspaceId = url.searchParams.get('workspaceId') ?? '';
             const root = await workspaceRoot(state, workspaceId, directoryName);
             if (request.method === 'GET') {
                 const sessionId = url.searchParams.get('sessionId') ?? undefined;
-                writeJson(response, 200, { attachments: await listWorkspaceLibraryAttachments(root, sessionId),
-                    importReceipts: await listWorkspaceLibraryImportReceipts(root, sessionId) });
+                writeJson(response, 200, {
+                    attachments: await listWorkspaceLibraryAttachments(root, sessionId),
+                    importReceipts: await listWorkspaceLibraryImportReceipts(root, sessionId),
+                });
             }
             else {
                 if (await batchDirectoryHeld(state, workspaceId, directoryName)) {
@@ -428,15 +508,25 @@ async function dispatchRuntimeRequest(state, request, response) {
                 try {
                     const attachment = await importWorkspaceLibraryAttachment(root, await readLibraryAttachmentUpload(request));
                     await state.journal.allocateSourceEvent({
-                        runtimeId: state.config.runtimeId, generation: state.config.generation, runtimeEpoch: state.runtimeEpoch,
-                        workspaceId, type: 'attachments.imported', occurredAt: new Date().toISOString(),
+                        runtimeId: state.config.runtimeId,
+                        generation: state.config.generation,
+                        runtimeEpoch: state.runtimeEpoch,
+                        workspaceId,
+                        type: 'attachments.imported',
+                        occurredAt: new Date().toISOString(),
                         payload: { workspaceId, directoryName, attachmentId: attachment.id },
                     });
                     writeJson(response, 200, attachment);
                 }
                 catch (error) {
-                    const code = error instanceof Error && ['library_asset_too_large', 'library_asset_changed', 'library_attachment_limit'].includes(error.message)
-                        ? error.message : 'invalid_library_attachment';
+                    const code = error instanceof Error &&
+                        [
+                            'library_asset_too_large',
+                            'library_asset_changed',
+                            'library_attachment_limit',
+                        ].includes(error.message)
+                        ? error.message
+                        : 'invalid_library_attachment';
                     writeJson(response, 400, { error: code });
                 }
             }
@@ -461,8 +551,12 @@ async function dispatchRuntimeRequest(state, request, response) {
                 else if (uploadId && action === 'complete' && request.method === 'POST') {
                     const attachment = await completeWorkspaceDirectoryAttachment(root, uploadId);
                     await state.journal.allocateSourceEvent({
-                        runtimeId: state.config.runtimeId, generation: state.config.generation, runtimeEpoch: state.runtimeEpoch,
-                        workspaceId, type: 'attachments.imported', occurredAt: new Date().toISOString(),
+                        runtimeId: state.config.runtimeId,
+                        generation: state.config.generation,
+                        runtimeEpoch: state.runtimeEpoch,
+                        workspaceId,
+                        type: 'attachments.imported',
+                        occurredAt: new Date().toISOString(),
                         payload: { workspaceId, directoryName, attachmentId: attachment.id },
                     });
                     writeJson(response, 200, attachment);
@@ -473,7 +567,11 @@ async function dispatchRuntimeRequest(state, request, response) {
                     writeJson(response, 400, { error: 'invalid_attachment' });
             }
             catch (error) {
-                writeJson(response, 400, { error: error instanceof Error && error.message === 'video_probe_unavailable' ? 'video_probe_unavailable' : 'invalid_attachment' });
+                writeJson(response, 400, {
+                    error: error instanceof Error && error.message === 'video_probe_unavailable'
+                        ? 'video_probe_unavailable'
+                        : 'invalid_attachment',
+                });
             }
             return;
         }
@@ -487,10 +585,16 @@ async function dispatchRuntimeRequest(state, request, response) {
             }
             const root = await workspaceRoot(state, workspaceId, directoryName);
             try {
-                writeJson(response, 200, await uploadWorkspaceVideoAttachment(root, request, { name: url.searchParams.get('name') }));
+                writeJson(response, 200, await uploadWorkspaceVideoAttachment(root, request, {
+                    name: url.searchParams.get('name'),
+                }));
             }
             catch (error) {
-                writeJson(response, 400, { error: error instanceof Error && error.message === 'video_probe_unavailable' ? 'video_probe_unavailable' : 'invalid_attachment' });
+                writeJson(response, 400, {
+                    error: error instanceof Error && error.message === 'video_probe_unavailable'
+                        ? 'video_probe_unavailable'
+                        : 'invalid_attachment',
+                });
             }
             return;
         }
@@ -511,7 +615,8 @@ async function dispatchRuntimeRequest(state, request, response) {
             }
             return;
         }
-        if (['GET', 'HEAD'].includes(request.method ?? '') && url.pathname === '/runtime/attachment-content') {
+        if (['GET', 'HEAD'].includes(request.method ?? '') &&
+            url.pathname === '/runtime/attachment-content') {
             if (writeDestroyed(state, response))
                 return;
             const root = await workspaceRoot(state, url.searchParams.get('workspaceId') ?? '', directoryName);
@@ -558,8 +663,7 @@ async function dispatchRuntimeRequest(state, request, response) {
                 return;
             }
             await workspaceRoot(state, workspaceId, directoryName);
-            const items = await new DeliveryStore(state.config.stateDir, workspaceId)
-                .list(directoryName, parsed.data.channel, parsed.data.limit);
+            const items = await new DeliveryStore(state.config.stateDir, workspaceId).list(directoryName, parsed.data.channel, parsed.data.limit);
             writeJson(response, 200, deliveryBuildListSchema.parse({ items, scannedAt: new Date().toISOString() }));
             return;
         }
@@ -594,7 +698,8 @@ async function dispatchRuntimeRequest(state, request, response) {
             writeJson(response, 200, deliveryBuildDetailSchema.parse({ record, ...(report ? { report } : {}) }));
             return;
         }
-        if (['GET', 'HEAD'].includes(request.method ?? '') && url.pathname === '/runtime/model-preview-content') {
+        if (['GET', 'HEAD'].includes(request.method ?? '') &&
+            url.pathname === '/runtime/model-preview-content') {
             if (writeDestroyed(state, response))
                 return;
             const workspaceId = url.searchParams.get('workspaceId');
@@ -605,10 +710,15 @@ async function dispatchRuntimeRequest(state, request, response) {
             const root = await workspaceRoot(state, workspaceId, directoryName);
             try {
                 const output = await new ModelPreviewStore(state.config.stateDir, root).content(url.searchParams.get('previewId') ?? '');
-                response.writeHead(200, { 'content-type': 'text/html; charset=utf-8', 'content-length': output.bytes.length,
-                    'cache-control': 'private, no-store', 'x-content-type-options': 'nosniff', 'x-content-sha256': output.record.contentHash,
+                response.writeHead(200, {
+                    'content-type': 'text/html; charset=utf-8',
+                    'content-length': output.bytes.length,
+                    'cache-control': 'private, no-store',
+                    'x-content-type-options': 'nosniff',
+                    'x-content-sha256': output.record.contentHash,
                     'content-security-policy': "sandbox allow-scripts; default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src data: blob:; connect-src 'none'",
-                    'referrer-policy': 'no-referrer' });
+                    'referrer-policy': 'no-referrer',
+                });
                 response.end(request.method === 'HEAD' ? undefined : output.bytes);
             }
             catch {
@@ -663,10 +773,15 @@ async function dispatchRuntimeRequest(state, request, response) {
             }
             await workspaceRoot(state, workspaceId, directoryName);
             const parsed = workspaceArtifactContentQuerySchema.safeParse({
-                artifactId: url.searchParams.get('artifactId'), versionId: url.searchParams.get('versionId'),
+                artifactId: url.searchParams.get('artifactId'),
+                versionId: url.searchParams.get('versionId'),
                 ...(url.searchParams.has('path') ? { path: url.searchParams.get('path') } : {}),
-                ...(url.searchParams.has('offset') ? { offset: Number(url.searchParams.get('offset')) } : {}),
-                ...(url.searchParams.has('length') ? { length: Number(url.searchParams.get('length')) } : {}),
+                ...(url.searchParams.has('offset')
+                    ? { offset: Number(url.searchParams.get('offset')) }
+                    : {}),
+                ...(url.searchParams.has('length')
+                    ? { length: Number(url.searchParams.get('length')) }
+                    : {}),
             });
             if (!parsed.success) {
                 writeJson(response, 400, { error: 'invalid_artifact_query' });
@@ -692,17 +807,27 @@ async function dispatchRuntimeRequest(state, request, response) {
                 return;
             const archiveWorkspaceId = url.searchParams.get('workspaceId') ?? undefined;
             const root = await sessionWorkspaceRoot(state, archiveWorkspaceId, directoryName);
-            const expectedModelPaths = state.journal.listOperations().map(({ operation }) => operation).filter(operation => operation.kind === 'asset.library.import'
-                && (state.config.workspaceMode !== 'multi' || operation.workspaceId === archiveWorkspaceId)
-                && (operation.directoryName ?? 'basic') === directoryName)
-                .flatMap(operation => operation.result && 'bundleReceipt' in operation.result ? operation.result.bundleReceipt?.files ?? [] : [])
-                .map(file => file.path).filter(path => path.toLowerCase().endsWith('.glb'));
-            await serveWorkspaceArchive(root, request, response, { excludedRoots: [state.config.stateDir],
+            const expectedModelPaths = state.journal
+                .listOperations()
+                .map(({ operation }) => operation)
+                .filter((operation) => operation.kind === 'asset.library.import' &&
+                (state.config.workspaceMode !== 'multi' ||
+                    operation.workspaceId === archiveWorkspaceId) &&
+                (operation.directoryName ?? 'basic') === directoryName)
+                .flatMap((operation) => operation.result && 'bundleReceipt' in operation.result
+                ? (operation.result.bundleReceipt?.files ?? [])
+                : [])
+                .map((file) => file.path)
+                .filter((path) => path.toLowerCase().endsWith('.glb'));
+            await serveWorkspaceArchive(root, request, response, {
+                excludedRoots: [state.config.stateDir],
                 expectedModelPaths: [...new Set(expectedModelPaths)],
-                verifyProvenance: provenance => verifyRuntimeAssetProvenance(state, provenance) });
+                verifyProvenance: (provenance) => verifyRuntimeAssetProvenance(state, provenance),
+            });
             return;
         }
-        if (['GET', 'HEAD'].includes(request.method ?? '') && url.pathname === '/runtime/file-content') {
+        if (['GET', 'HEAD'].includes(request.method ?? '') &&
+            url.pathname === '/runtime/file-content') {
             if (writeDestroyed(state, response))
                 return;
             const root = await workspaceRoot(state, url.searchParams.get('workspaceId') ?? undefined, directoryName);
@@ -738,8 +863,10 @@ async function dispatchRuntimeRequest(state, request, response) {
             }
             const controller = new AbortController();
             const abort = () => controller.abort();
-            const closedRequest = () => { if (request.aborted || !request.complete)
-                abort(); };
+            const closedRequest = () => {
+                if (request.aborted || !request.complete)
+                    abort();
+            };
             request.once('aborted', abort);
             request.once('close', closedRequest);
             response.once('close', abort);
@@ -752,7 +879,8 @@ async function dispatchRuntimeRequest(state, request, response) {
             catch (error) {
                 if (error instanceof Error && error.name === 'AbortError')
                     return;
-                if (error instanceof Error && ['invalid_workspace_search', 'invalid_workspace_search_cursor'].includes(error.message))
+                if (error instanceof Error &&
+                    ['invalid_workspace_search', 'invalid_workspace_search_cursor'].includes(error.message))
                     writeJson(response, 400, { error: error.message });
                 else
                     throw error;
@@ -820,7 +948,9 @@ async function dispatchRuntimeRequest(state, request, response) {
             catch (error) {
                 if (error instanceof WorkspaceContextError)
                     throw error;
-                writeJson(response, 409, { error: error instanceof RemixReferenceError ? error.message : 'remix_reference_unavailable' });
+                writeJson(response, 409, {
+                    error: error instanceof RemixReferenceError ? error.message : 'remix_reference_unavailable',
+                });
             }
             return;
         }
@@ -843,13 +973,17 @@ async function dispatchRuntimeRequest(state, request, response) {
                 return;
             const workspaceId = url.searchParams.get('workspaceId') ?? undefined;
             try {
-                const view = await state.journal.exclusive(`workspace:${revisionScope(state, workspaceId, directoryName) ?? 'single'}`, async () => readWorkspaceSkills(await workspaceRoot(state, workspaceId, directoryName), join(state.config.stateDir, 'skill-artifacts'), entry => loadWorkspaceSkillArtifact(state, workspaceId ?? 'workspace', entry, directoryName)));
+                const view = await state.journal.exclusive(`workspace:${revisionScope(state, workspaceId, directoryName) ?? 'single'}`, async () => readWorkspaceSkills(await workspaceRoot(state, workspaceId, directoryName), join(state.config.stateDir, 'skill-artifacts'), (entry) => loadWorkspaceSkillArtifact(state, workspaceId ?? 'workspace', entry, directoryName)));
                 writeJson(response, 200, view);
             }
             catch (error) {
                 if (error instanceof WorkspaceContextError)
                     throw error;
-                writeJson(response, 409, { error: error instanceof Error && error.message.startsWith('workspace_skills_') ? error.message : 'workspace_skills_unavailable' });
+                writeJson(response, 409, {
+                    error: error instanceof Error && error.message.startsWith('workspace_skills_')
+                        ? error.message
+                        : 'workspace_skills_unavailable',
+                });
             }
             return;
         }
@@ -866,10 +1000,18 @@ async function dispatchRuntimeRequest(state, request, response) {
             }
             const workspaceId = url.searchParams.get('workspaceId') ?? undefined;
             const root = await workspaceRoot(state, workspaceId, directoryName), scope = revisionScope(state, workspaceId, directoryName);
-            const first = await readWorkspaceLevelEditor(root, state.journal.fileRevisions(scope), { state, workspaceId, directoryName });
+            const first = await readWorkspaceLevelEditor(root, state.journal.fileRevisions(scope), {
+                state,
+                workspaceId,
+                directoryName,
+            });
             for (const document of Object.values(first.definition?.documents ?? {}))
                 await withObservedFile(state, workspaceId, document.path, async () => undefined, directoryName);
-            writeJson(response, 200, await readWorkspaceLevelEditor(root, state.journal.fileRevisions(scope), { state, workspaceId, directoryName }));
+            writeJson(response, 200, await readWorkspaceLevelEditor(root, state.journal.fileRevisions(scope), {
+                state,
+                workspaceId,
+                directoryName,
+            }));
             return;
         }
         if (request.method === 'GET' && url.pathname === '/runtime/level-editor/tasks') {
@@ -880,7 +1022,9 @@ async function dispatchRuntimeRequest(state, request, response) {
                 return;
             }
             const workspaceId = url.searchParams.get('workspaceId') ?? undefined;
-            writeJson(response, 200, { tasks: await listLevelEditorTasks(state, workspaceId, directoryName, await workspaceRoot(state, workspaceId, directoryName)) });
+            writeJson(response, 200, {
+                tasks: await listLevelEditorTasks(state, workspaceId, directoryName, await workspaceRoot(state, workspaceId, directoryName)),
+            });
             return;
         }
         if (request.method === 'GET' && url.pathname === '/runtime/skill-activation-requests') {
@@ -892,7 +1036,9 @@ async function dispatchRuntimeRequest(state, request, response) {
             }
             const workspaceId = url.searchParams.get('workspaceId') ?? undefined;
             await workspaceRoot(state, workspaceId, directoryName);
-            writeJson(response, 200, { requests: await listSkillActivationRequests(state, workspaceId, directoryName) });
+            writeJson(response, 200, {
+                requests: await listSkillActivationRequests(state, workspaceId, directoryName),
+            });
             return;
         }
         if (request.method === 'GET' && url.pathname === '/runtime/level-editor/requests') {
@@ -904,7 +1050,9 @@ async function dispatchRuntimeRequest(state, request, response) {
             }
             const workspaceId = url.searchParams.get('workspaceId') ?? undefined;
             await workspaceRoot(state, workspaceId, directoryName);
-            writeJson(response, 200, { requests: await listLevelEditorRequests(state, workspaceId, directoryName) });
+            writeJson(response, 200, {
+                requests: await listLevelEditorRequests(state, workspaceId, directoryName),
+            });
             return;
         }
         if (request.method === 'GET' && url.pathname === '/runtime/parameters') {
@@ -922,14 +1070,18 @@ async function dispatchRuntimeRequest(state, request, response) {
             }
             const workspaceId = url.searchParams.get('workspaceId') ?? undefined;
             const root = await workspaceRoot(state, workspaceId, directoryName);
-            writeJson(response, 200, { tasks: await listParameterAgentTasks(state, workspaceId, directoryName, root) });
+            writeJson(response, 200, {
+                tasks: await listParameterAgentTasks(state, workspaceId, directoryName, root),
+            });
             return;
         }
         if (request.method === 'GET' && url.pathname === '/runtime/terminals') {
             if (writeDestroyed(state, response))
                 return;
             writeJson(response, 200, {
-                terminals: state.journal.listTerminals(url.searchParams.get('workspaceId') ?? undefined).filter(terminal => (terminal.directoryName ?? 'basic') === directoryName),
+                terminals: state.journal
+                    .listTerminals(url.searchParams.get('workspaceId') ?? undefined)
+                    .filter((terminal) => (terminal.directoryName ?? 'basic') === directoryName),
             });
             return;
         }
@@ -957,7 +1109,9 @@ async function dispatchRuntimeRequest(state, request, response) {
                 directoryName,
                 sessionId: url.searchParams.get('sessionId') ?? undefined,
             }));
-            const observed = operation ? await observeLevelEditorTransaction(state, operation) : undefined;
+            const observed = operation
+                ? await observeLevelEditorTransaction(state, operation)
+                : undefined;
             writeJson(response, observed ? 200 : 404, observed ?? { error: 'operation_not_found' });
             return;
         }
@@ -971,8 +1125,9 @@ async function dispatchRuntimeRequest(state, request, response) {
                 return;
             }
             const operation = state.journal.getOperationById(operationLog[1]);
-            if (!operation || operation.workspaceId !== workspaceId
-                || (operation.directoryName ?? 'basic') !== directoryName) {
+            if (!operation ||
+                operation.workspaceId !== workspaceId ||
+                (operation.directoryName ?? 'basic') !== directoryName) {
                 writeJson(response, 404, { error: 'operation_not_found' });
                 return;
             }
@@ -996,13 +1151,16 @@ async function dispatchRuntimeRequest(state, request, response) {
             return;
         }
         if (request.method === 'POST' && url.pathname === '/runtime/scheduled-task-proposals/source') {
-            const body = await readJson(request);
-            if (!body || Object.keys(body).some(key => !['bridge', 'threadId', 'turnId', 'toolCallId'].includes(key))
-                || !['bridge', 'threadId', 'turnId', 'toolCallId'].every(key => typeof body[key] === 'string' && Boolean(body[key]))) {
+            const body = (await readJson(request));
+            if (!body ||
+                Object.keys(body).some((key) => !['bridge', 'threadId', 'turnId', 'toolCallId'].includes(key)) ||
+                !['bridge', 'threadId', 'turnId', 'toolCallId'].every((key) => typeof body[key] === 'string' && Boolean(body[key]))) {
                 writeJson(response, 400, { valid: false });
                 return;
             }
-            writeJson(response, 200, { valid: state.native?.scheduledTaskProposalSource?.(body) === true });
+            writeJson(response, 200, {
+                valid: state.native?.scheduledTaskProposalSource?.(body) === true,
+            });
             return;
         }
         if (request.method === 'POST' && url.pathname === '/runtime/operations') {
@@ -1018,13 +1176,17 @@ async function dispatchRuntimeRequest(state, request, response) {
             writeJson(response, 409, { error: 'directory_busy' });
             return;
         }
-        if (request.method === 'GET' && ['/runtime/connectivity', '/runtime/files'].includes(url.pathname)) {
+        if (request.method === 'GET' &&
+            ['/runtime/connectivity', '/runtime/files'].includes(url.pathname)) {
             const cause = error instanceof Error && error.cause ? error.cause : error;
             if (['EACCES', 'EPERM'].includes(String(cause?.code))) {
                 writeJson(response, 409, { error: 'workspace_permission_denied' });
                 return;
             }
-            if (url.pathname === '/runtime/connectivity' && error instanceof WorkspaceContextError && error.cause && !['ENOENT', 'ENOTDIR'].includes(String(cause?.code))) {
+            if (url.pathname === '/runtime/connectivity' &&
+                error instanceof WorkspaceContextError &&
+                error.cause &&
+                !['ENOENT', 'ENOTDIR'].includes(String(cause?.code))) {
                 writeJson(response, 500, { error: 'workspace_access_failed' });
                 return;
             }
@@ -1058,7 +1220,7 @@ function handshake(state) {
         if (item.name === 'conversation') {
             if (conversationReady)
                 return capability('conversation', true);
-            return capability('conversation', false, destroyed ? 'runtime_destroyed' : state.nativeError ?? 'adapter_not_started');
+            return capability('conversation', false, destroyed ? 'runtime_destroyed' : (state.nativeError ?? 'adapter_not_started'));
         }
         if (item.name === 'files') {
             return filesReady
@@ -1083,7 +1245,9 @@ function handshake(state) {
             if (destroyed)
                 return capability('desktop', false, 'runtime_destroyed');
             const status = desktopHost(state).snapshot().status;
-            return status === 'ready' ? capability('desktop', true) : capability('desktop', false, status);
+            return status === 'ready'
+                ? capability('desktop', true)
+                : capability('desktop', false, status);
         }
         if (item.name === 'parameters') {
             return destroyed
@@ -1142,8 +1306,15 @@ async function acceptOperation(state, request, response) {
     if (parsed.data.kind === 'workspace.references.import') {
         const source = workspaceRemixReferenceImportRequestSchema.safeParse(parsed.data.payload);
         const snapshot = parsed.data.remixReferenceSnapshot;
-        if (!source.success || (snapshot && (snapshot.source.projectUuid !== source.data.source.projectUuid ||
-            snapshot.source.branchName !== source.data.source.branchName || snapshot.source.environment !== state.config.environment))) {
+        if (!source.success ||
+            (snapshot &&
+                (snapshot.source.environment !== state.config.environment ||
+                    ('builtinTemplate' in source.data.source
+                        ? !('builtinTemplate' in snapshot.source) ||
+                            snapshot.source.builtinTemplate !== source.data.source.builtinTemplate
+                        : !('projectUuid' in snapshot.source) ||
+                            snapshot.source.projectUuid !== source.data.source.projectUuid ||
+                            snapshot.source.branchName !== source.data.source.branchName)))) {
             writeJson(response, 400, { error: 'invalid_remix_reference' });
             return;
         }
@@ -1152,13 +1323,20 @@ async function acceptOperation(state, request, response) {
         writeJson(response, 400, { error: 'invalid_operation', reason: 'sessionId_required' });
         return;
     }
-    if (parsed.data.directoryName === 'root' && !parsed.data.kind.startsWith('session.') && !['runtime.ensure', 'terminal.create'].includes(parsed.data.kind)) {
+    if (parsed.data.directoryName === 'root' &&
+        !parsed.data.kind.startsWith('session.') &&
+        !['runtime.ensure', 'terminal.create'].includes(parsed.data.kind)) {
         writeJson(response, 400, { error: 'invalid_workspace_directory' });
         return;
     }
-    if (state.config.workspaceMode === 'multi' && parsed.data.kind === 'runtime.ensure' && parsed.data.workspaceId && parsed.data.directoryName !== 'root') {
+    if (state.config.workspaceMode === 'multi' &&
+        parsed.data.kind === 'runtime.ensure' &&
+        parsed.data.workspaceId &&
+        parsed.data.directoryName !== 'root') {
         const workspaceId = parsed.data.workspaceId, directoryName = parsed.data.directoryName ?? 'basic';
-        const restoring = state.journal.getWorkspace(workspaceId)?.directories?.some(directory => directory.directoryName === directoryName && directory.status === 'reclaimed') ?? false;
+        const restoring = state.journal
+            .getWorkspace(workspaceId)
+            ?.directories?.some((directory) => directory.directoryName === directoryName && directory.status === 'reclaimed') ?? false;
         // Opening a resident checkout only refreshes instructions and can share its background install.
         // Rebuilding a reclaimed checkout must still exclude every existing writer.
         await withDirectoryWrite(state, { workspaceId, directoryName, mode: restoring ? 'exclusive' : 'shared', wait: false }, async () => {
@@ -1169,7 +1347,8 @@ async function acceptOperation(state, request, response) {
         await sessionWorkspaceRoot(state, parsed.data.workspaceId, parsed.data.directoryName);
     // Shared classification: a new conversation writes no files, so a batch hold must not refuse it.
     const occupiesDirectory = takesWorkspaceDirectory(parsed.data.kind);
-    if (occupiesDirectory && await batchDirectoryHeld(state, parsed.data.workspaceId, parsed.data.directoryName)) {
+    if (occupiesDirectory &&
+        (await batchDirectoryHeld(state, parsed.data.workspaceId, parsed.data.directoryName))) {
         writeJson(response, 409, { error: 'batch_workspace_readonly' });
         return;
     }
@@ -1178,15 +1357,23 @@ async function acceptOperation(state, request, response) {
         : parsed.data.kind === 'asset.library.import'
             ? { selection: parsed.data.payload, snapshot: parsed.data.libraryAssetImports }
             : parsed.data.kind === 'session.turn' && parsed.data.scheduledTaskProposalBridge
-                ? { ...asRecord(parsed.data.payload), scheduledTaskProposalBridge: parsed.data.scheduledTaskProposalBridge }
+                ? {
+                    ...asRecord(parsed.data.payload),
+                    scheduledTaskProposalBridge: parsed.data.scheduledTaskProposalBridge,
+                }
                 : parsed.data.payload;
     const accept = async () => {
         const result = await acceptOperationCore(state, parsed.data, {
             leaseFence: incomingFence,
             executionPayload,
             validate: async (scopeKey) => {
-                if (parsed.data.kind.startsWith('session.') && parsed.data.sessionId && productionSessionAttemptId(parsed.data.sessionId)) {
-                    return { status: 409, body: runtimeError('capability_unavailable', 'production_session_readonly') };
+                if (parsed.data.kind.startsWith('session.') &&
+                    parsed.data.sessionId &&
+                    productionSessionAttemptId(parsed.data.sessionId)) {
+                    return {
+                        status: 409,
+                        body: runtimeError('capability_unavailable', 'production_session_readonly'),
+                    };
                 }
                 if (parsed.data.kind === 'session.create') {
                     const creation = state.journal.findSessionCreation(parsed.data.sessionId);
@@ -1198,7 +1385,10 @@ async function acceptOperation(state, request, response) {
                     const payload = asRecord(parsed.data.payload);
                     const terminalId = typeof payload.terminalId === 'string' ? payload.terminalId.trim() : '';
                     if (!terminalId)
-                        return { status: 400, body: { error: 'invalid_operation', reason: 'terminalId_required' } };
+                        return {
+                            status: 400,
+                            body: { error: 'invalid_operation', reason: 'terminalId_required' },
+                        };
                     const creation = state.journal.findTerminalCreation(terminalId);
                     const terminal = state.journal.getTerminal(terminalId);
                     if (creation && operationScopeKey(creation) !== scopeKey) {
@@ -1207,16 +1397,20 @@ async function acceptOperation(state, request, response) {
                     if (terminal && !creation)
                         return { status: 409, body: { error: 'terminal_already_bound' } };
                 }
-                else if (parsed.data.kind.startsWith('session.') && state.config.workspaceMode === 'multi') {
+                else if (parsed.data.kind.startsWith('session.') &&
+                    state.config.workspaceMode === 'multi') {
                     const session = state.journal.getSession(parsed.data.sessionId);
                     // A replaced sandbox has no binding yet; the recovering turn creates it.
                     const rebinding = !session && parsed.data.kind === 'session.turn' && parsed.data.sessionRecovery;
-                    if (!rebinding && (!session || session.workspaceId !== parsed.data.workspaceId
-                        || (session.directoryName ?? 'basic') !== (parsed.data.directoryName ?? 'basic'))) {
+                    if (!rebinding &&
+                        (!session ||
+                            session.workspaceId !== parsed.data.workspaceId ||
+                            (session.directoryName ?? 'basic') !== (parsed.data.directoryName ?? 'basic'))) {
                         return { status: 409, body: { error: 'session_workspace_mismatch' } };
                     }
                 }
-                if (parsed.data.kind === 'workspace.references.import' && !parsed.data.remixReferenceSnapshot) {
+                if (parsed.data.kind === 'workspace.references.import' &&
+                    !parsed.data.remixReferenceSnapshot) {
                     return { status: 400, body: { error: 'remix_reference_snapshot_required' } };
                 }
                 if (parsed.data.kind === 'asset.library.import' && !parsed.data.libraryAssetImports) {
@@ -1243,7 +1437,8 @@ async function acceptOperation(state, request, response) {
         writeJson(response, executed.status === 'failed' ? 409 : 202, executed);
     };
     const acceptBound = async () => {
-        if (occupiesDirectory && await batchDirectoryHeld(state, parsed.data.workspaceId, parsed.data.directoryName)) {
+        if (occupiesDirectory &&
+            (await batchDirectoryHeld(state, parsed.data.workspaceId, parsed.data.directoryName))) {
             writeJson(response, 409, { error: 'batch_workspace_readonly' });
             return;
         }
@@ -1319,7 +1514,7 @@ async function handleTerminalIdentity(state, request, response, remainder) {
     if (writeDestroyed(state, response))
         return;
     const [terminalId, action] = remainder.split('/');
-    if (!terminalId || action && action !== 'connect') {
+    if (!terminalId || (action && action !== 'connect')) {
         writeJson(response, 404, { error: 'not_found' });
         return;
     }
@@ -1424,7 +1619,12 @@ async function readObservedParameters(state, workspaceId, directoryName = 'basic
     const scope = revisionScope(state, workspaceId, directoryName);
     return state.journal.exclusive(`workspace:${scope ?? 'single'}`, async () => {
         const first = await readWorkspaceParameters(root, state.journal.fileRevisions(scope));
-        for (const path of [first.schemaPath, first.dataPath, first.runtimeI18n?.globalPath, first.runtimeI18n?.themePath]) {
+        for (const path of [
+            first.schemaPath,
+            first.dataPath,
+            first.runtimeI18n?.globalPath,
+            first.runtimeI18n?.themePath,
+        ]) {
             if (path)
                 await withObservedFile(state, workspaceId, path, async () => undefined, directoryName);
         }
@@ -1502,7 +1702,10 @@ async function handleSourceEvents(state, request, response, url) {
         const runtimeEpoch = epochQuery === null ? state.runtimeEpoch : Number(epochQuery);
         const runtimeId = url.searchParams.get('runtimeId') ?? state.config.runtimeId;
         const generation = Number(url.searchParams.get('generation') ?? state.config.generation);
-        if (runtimeId !== state.config.runtimeId || generation !== state.config.generation || !Number.isInteger(runtimeEpoch) || runtimeEpoch < 0) {
+        if (runtimeId !== state.config.runtimeId ||
+            generation !== state.config.generation ||
+            !Number.isInteger(runtimeEpoch) ||
+            runtimeEpoch < 0) {
             writeJson(response, 403, { error: 'source_identity_mismatch' });
             return;
         }
@@ -1512,15 +1715,26 @@ async function handleSourceEvents(state, request, response, url) {
             runtimeEpoch,
             after: safeAfter,
         };
-        if (!state.journal.epochsSnapshot().some(epoch => epoch.runtime_id === runtimeId && epoch.generation === generation && epoch.runtime_epoch === runtimeEpoch)) {
-            writeJson(response, 409, { code: 'source_gap', retainedFrom: 1, highWater: 0, coveredThrough: safeAfter });
+        if (!state.journal
+            .epochsSnapshot()
+            .some((epoch) => epoch.runtime_id === runtimeId &&
+            epoch.generation === generation &&
+            epoch.runtime_epoch === runtimeEpoch)) {
+            writeJson(response, 409, {
+                code: 'source_gap',
+                retainedFrom: 1,
+                highWater: 0,
+                coveredThrough: safeAfter,
+            });
             return;
         }
         if (String(request.headers.accept ?? '').includes('text/event-stream')) {
             writeSourceStream(state, request, response, query);
             return;
         }
-        if (epochQuery === null && !url.searchParams.has('runtimeId') && !url.searchParams.has('generation')) {
+        if (epochQuery === null &&
+            !url.searchParams.has('runtimeId') &&
+            !url.searchParams.has('generation')) {
             const events = state.journal.listEvents(safeAfter);
             const page = state.journal.readSourcePage({ ...query, limit: 1 });
             writeJson(response, 200, {