@qredence/fleet 0.5.9 → 0.5.11

package/dist/web/server/{router-dnEmu1cU-LUH74TAC.js → router-Ci1wxI7I-E2AYMNON.js}

@@ -12,18 +12,19 @@ import {
   domAnimation,
   initAnalytics,
   isServer
-} from "./chunk-VHBFU4TG.js";
+} from "./chunk-JUROEEWM.js";
 import {
   DEFAULT_UI_PREFERENCES,
   isModelPatternEnabled,
   readUiPreferences
-} from "./chunk-54II5QXQ.js";
+} from "./chunk-ETTDO4UO.js";
 import {
   Toaster
-} from "./chunk-WQDG5ZM2.js";
+} from "./chunk-KOUEJ3NU.js";
 import {
   redactSessionLabelSecrets
 } from "./chunk-QK4CHLVV.js";
+import "./chunk-SZJUXVWG.js";
 import "./chunk-TNL4YV63.js";
 import {
   drag,
@@ -36,7 +37,7 @@ import {
   CardHeader,
   CardTitle,
   validateAndNormalizeOpenUIHtmlArtifact
-} from "./chunk-K5ESTT4A.js";
+} from "./chunk-7MDZVLIY.js";
 import {
   ChatNewRequestSchema,
   ChatOpenUIArtifactUpsertRequestSchema,
@@ -54,8 +55,9 @@ import {
   ProjectRenameRequestSchema,
   SessionIdSchema,
   UploadedAttachmentSchema,
+  ZodError,
   external_exports
-} from "./chunk-NRDG2ISJ.js";
+} from "./chunk-GGT2ZKDB.js";
 import {
   KNOWN_PROVIDERS,
   OPENAI_CHAT_COMPLETIONS_PROVIDER_ID,
@@ -70,7 +72,7 @@ import {
   toInstanceSlug,
   toOccInstanceId
 } from "./chunk-RJOANOT4.js";
-import "./chunk-JICJWC33.js";
+import "./chunk-LZ4Q5KUJ.js";
 import "./chunk-JBLHIEVG.js";
 import "./chunk-C5X6G26O.js";
 import "./chunk-HFQZLPU2.js";
@@ -89,7 +91,7 @@ import "./chunk-JDCCC7A7.js";
 import "./chunk-L547YHC4.js";
 import "./chunk-MLKGABMK.js";
 
-// web/app/dist/server/assets/router-dnEmu1cU.js
+// web/app/dist/server/assets/router-Ci1wxI7I.js
 import { useEffect, useLayoutEffect } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
@@ -123,7 +125,8 @@ function NotFoundPage({ title = "404", description = "The requested page could n
     })
   });
 }
-var globals_default = "/assets/globals-C7ovVTh2.css";
+var globals_default = "/assets/globals-B_I1Eq1u.css";
+var inter_latin_wght_normal_default = "/assets/inter-latin-wght-normal-Dx4kXJAl.woff2";
 function makeQueryClient() {
   return new QueryClient({ defaultOptions: { queries: {
     staleTime: 6e4,
@@ -152,6 +155,13 @@ var Route$27 = createRootRoute({
         rel: "stylesheet",
         href: globals_default
       },
+      {
+        rel: "preload",
+        href: inter_latin_wght_normal_default,
+        as: "font",
+        type: "font/woff2",
+        crossOrigin: "anonymous"
+      },
       {
         rel: "icon",
         href: "/favicon-dark.svg",
@@ -200,7 +210,7 @@ function RootDocument({ children }) {
     ] })]
   });
 }
-var $$splitComponentImporter = () => import("./routes-Ci5_8lws-F54KB46D.js");
+var $$splitComponentImporter = () => import("./routes-CRpm9-Sa-IYK6MUJO.js");
 var Route$26 = createFileRoute("/")({ component: lazyRouteComponent($$splitComponentImporter, "component") });
 var ManagedAttachmentValidationError = class extends Error {
   status;
@@ -1950,6 +1960,34 @@ var defaultPersistence = {
 };
 var TOKEN_TTL_MS = 6e5;
 var MAX_DIRECTORY_ENTRIES = 200;
+var SENSITIVE_HOME_DIRECTORY_NAMES = [
+  ".ssh",
+  ".gnupg",
+  ".aws",
+  ".pki",
+  ".docker",
+  ".kube",
+  ".azure",
+  ".gcloud",
+  ".gsutil",
+  ".password-store",
+  ".config/gh"
+];
+function isSameOrWithin(candidate, ancestor) {
+  return candidate === ancestor || candidate.startsWith(`${ancestor}${sep}`);
+}
+async function assertAllowedProjectDirectory(canonical) {
+  if (dirname(canonical) === canonical) throw new Error("Project path must not be a filesystem root");
+  const home = await realpath(homedir()).catch(() => homedir());
+  if (canonical === home) throw new Error("Project path must not be the home directory");
+  for (const name of SENSITIVE_HOME_DIRECTORY_NAMES) if (isSameOrWithin(canonical, join(home, name))) throw new Error("Project path must not be a credentials directory");
+  const xdgConfigHome = process.env.XDG_CONFIG_HOME;
+  if (xdgConfigHome && isAbsolute(xdgConfigHome)) {
+    const canonicalConfigHome = await realpath(xdgConfigHome).catch(() => resolve(xdgConfigHome));
+    if (isSameOrWithin(canonical, join(canonicalConfigHome, "gh"))) throw new Error("Project path must not be a credentials directory");
+  }
+  if (isSameOrWithin(canonical, await realpath("/etc").catch(() => "/etc"))) throw new Error("Project path must not be a system directory");
+}
 var ProjectRegistryPersistenceError = class extends Error {
   constructor(operation, cause) {
     super(`Could not ${operation}. Please try again.`, { cause });
@@ -2047,6 +2085,7 @@ var ProjectRegistry = class {
     if (!candidate || !isAbsolute(candidate)) throw new Error("Project path must be absolute");
     const canonical = await realpath(candidate);
     if (!(await stat(canonical)).isDirectory()) throw new Error("Project path must be a directory");
+    await assertAllowedProjectDirectory(canonical);
     return canonical;
   }
   #findByPath(canonicalPath) {
@@ -2167,7 +2206,7 @@ var ProjectRegistry = class {
     if (options.token) {
       const token = this.#directoryTokens.get(options.token);
       if (!token || token.expiresAt < Date.now()) throw new Error("Directory token expired");
-      path = token.path;
+      path = await this.#canonicalDirectory(token.path);
     } else path = await this.#canonicalDirectory(options.path ?? this.#initialPath);
     const entries = await readdir(path, { withFileTypes: true });
     const directories = [];
@@ -4689,6 +4728,13 @@ function fallbackSessionPath(connectionState, cwd) {
   const sessionDir = connectionState.sessionDir ?? sessionDirectoryForCwd(cwd);
   return resolve(sessionDir, `${connectionState.sessionId}.jsonl`);
 }
+var SessionExportPathError = class extends Error {
+  status = 400;
+  constructor() {
+    super("Export path must stay inside the session project directory");
+    this.name = "SessionExportPathError";
+  }
+};
 function findSessionTreeEntry(nodes, entryId) {
   for (const node of nodes) {
     if (node.entry.id === entryId) return node.entry;
@@ -5094,10 +5140,7 @@ var PrimeBridge = class {
   async resumeSessionById(sessionId, requestedProjectId, options) {
     const live = this.#sessions.get(sessionId);
     if (live) {
-      if (requestedProjectId && live.projectId !== requestedProjectId) {
-        const forkedId = await this.forkSessionIntoProject(sessionId, requestedProjectId);
-        return this.#requireSession(forkedId);
-      }
+      if (requestedProjectId && live.projectId !== requestedProjectId) return void 0;
       return live;
     }
     const match = (await this.#sessionLister()).find((info) => info.sessionId === sessionId || info.id === sessionId);
@@ -5110,10 +5153,7 @@ var PrimeBridge = class {
       if (isSessionNotResumableError(error)) return void 0;
       throw error;
     }
-    if (requestedProjectId && resumed.projectId !== requestedProjectId) {
-      const forkedId = await this.forkSessionIntoProject(resumed.sessionId, requestedProjectId);
-      return this.#requireSession(forkedId);
-    }
+    if (requestedProjectId && resumed.projectId !== requestedProjectId) return void 0;
     return resumed;
   }
   async listSessions(cwd) {
@@ -5714,15 +5754,43 @@ var PrimeBridge = class {
   /** /export — write the session to HTML (default) or JSONL (path ends with .jsonl). */
   async exportSession(sessionId, outputPath) {
     const session = this.#requireSession(sessionId);
+    const confinedPath = await this.#confineExportPath(session, outputPath);
     if (outputPath?.endsWith(".jsonl")) return {
-      path: await session.connection.exportToJsonl(outputPath),
+      path: await session.connection.exportToJsonl(confinedPath),
       format: "jsonl"
     };
     return {
-      path: await session.connection.exportToHtml(outputPath),
+      path: await session.connection.exportToHtml(confinedPath),
       format: "html"
     };
   }
+  /**
+  * Confine an explicit /export path inside the session's project directory
+  * (the connection's live cwd). Absolute paths and `..` escapes that leave
+  * the directory throw a 400-status error; an omitted path passes through
+  * untouched so the default export location is unchanged.
+  */
+  async #confineExportPath(session, outputPath) {
+    if (outputPath === void 0) return void 0;
+    const { cwd } = await session.connection.getState();
+    const root2 = resolve(cwd);
+    const canonicalRoot = await realpath(root2).catch(() => root2);
+    const candidate = resolve(root2, outputPath);
+    const existingCandidate = await realpath(candidate).catch(() => void 0);
+    if (existingCandidate && existingCandidate !== canonicalRoot && !existingCandidate.startsWith(`${canonicalRoot}${sep}`)) throw new SessionExportPathError();
+    let ancestor = dirname(candidate);
+    while (true) {
+      const resolvedAncestor = await realpath(ancestor).catch(() => void 0);
+      if (resolvedAncestor) {
+        if (resolvedAncestor !== canonicalRoot && !resolvedAncestor.startsWith(`${canonicalRoot}${sep}`)) throw new SessionExportPathError();
+        break;
+      }
+      const parent = dirname(ancestor);
+      if (parent === ancestor) throw new SessionExportPathError();
+      ancestor = parent;
+    }
+    return candidate;
+  }
   /** /reload — re-scan keybindings, extensions, skills, prompts, themes. */
   async reloadResources(_sessionId) {
     await Promise.all([...this.#sessions.values()].map((session) => session.connection.reload?.()));
@@ -5815,9 +5883,9 @@ var PrimeBridge = class {
   }
   /** Fork the complete persisted history into another registered project. */
   async forkSessionIntoProject(sessionId, targetProjectId) {
+    const targetCwd = await getPrimeConfig().projectRegistry.cwdForProject(targetProjectId);
     const source = this.#sessions.get(sessionId) ?? await this.resumeSessionById(sessionId);
     if (!source) throw new Error(`Unknown session: ${sessionId}`);
-    const targetCwd = await getPrimeConfig().projectRegistry.cwdForProject(targetProjectId);
     await source.connection.waitForIdle();
     const sourceState = await source.connection.getState();
     const sourcePath = sourceState.sessionFile;
@@ -5838,7 +5906,7 @@ var PrimeBridge = class {
     await copyManagedPlanPresentationsForFork(source, forked, (await this.getMessages(forked.sessionId)).length);
     forked.mapperState.presentation = source.mapperState.presentation;
     this.#persistPresentation(forked.sessionId, forked.sessionPath, forked.mapperState.presentation);
-    return forked.sessionId;
+    return this.#requireProjectSession(forked.sessionId, targetProjectId).sessionId;
   }
   /** Reads message history from a live session, or from the JSONL transcript for a cold session. */
   async getMessages(sessionId) {
@@ -5880,6 +5948,17 @@ var PrimeBridge = class {
     if (!session) throw new Error(`Unknown session: ${sessionId}`);
     return session;
   }
+  /**
+  * Project-membership gate over the bridge's session records. Returns the
+  * live session only when its project linkage matches the caller-asserted
+  * project, and throws `Unknown session` otherwise so foreign sessions are
+  * indistinguishable from missing ones.
+  */
+  #requireProjectSession(sessionId, projectId) {
+    const session = this.#requireSession(sessionId);
+    if (session.projectId !== projectId) throw new Error(`Unknown session: ${sessionId}`);
+    return session;
+  }
 };
 var globalStore = globalThis;
 function getBridge() {
@@ -5890,7 +5969,20 @@ function getBridge() {
   });
   return globalStore.__primeBridge;
 }
+function isLoopbackHostname(hostname) {
+  const host = hostname.toLowerCase().replace(/\.$/, "");
+  if (host === "localhost") return true;
+  const bare = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+  const mapped = bare.startsWith("::ffff:") ? bare.slice(7) : bare;
+  if (mapped === "::1" || mapped === "0:0:0:0:0:0:0:1") return true;
+  if (mapped.startsWith("127.")) {
+    const parts = mapped.split(".");
+    if (parts.length === 4 && parts.every((p) => /^\d{1,3}$/.test(p) && Number(p) <= 255)) return true;
+  }
+  return false;
+}
 function getResponseStatus(error) {
+  if (error instanceof ZodError || error instanceof Error && error.name === "ZodError") return 422;
   if (error && typeof error === "object" && "status" in error) {
     const status = error.status;
     if (typeof status === "number" && status >= 400 && status < 600) return status;
@@ -5907,8 +5999,14 @@ function getErrorMessage(error) {
   }
 }
 function safeErrorMessage(error) {
-  return getErrorMessage(error).replace(/(['"])(\/(?!\/)[^'"\n]*|[A-Za-z]:\\[^'"\n]*)\1/g, "$1[local path]$1").replace(/(^|[\s'"(])\/(?!\/)[^'"\s)]+/g, "$1[local path]").replace(/[A-Za-z]:\\[^'"\s)]+/g, "[local path]");
+  const message = getErrorMessage(error);
+  return SECRET_PATTERNS.reduce((scrubbed, [pattern, replacement]) => scrubbed.replace(pattern, replacement), message.replace(/(['"])(\/(?!\/)[^'"\n]*|[A-Za-z]:\\[^'"\n]*)\1/g, "$1[local path]$1").replace(/(^|[\s'"(])\/(?!\/)[^'"\s)]+/g, "$1[local path]").replace(/[A-Za-z]:\\[^'"\s)]+/g, "[local path]"));
 }
+var SECRET_PATTERNS = [
+  [/\b(bearer\s+)[A-Za-z0-9\-._~+/=]{8,}/gi, "$1[redacted]"],
+  [/(api[_-]?key\s*[:=]\s*)["']?[^"'\s;,]+["']?/gi, "$1[redacted]"],
+  [/\bkey(\s*=\s*)[^"'\s;&,]+/gi, "key$1[redacted]"]
+];
 var DAEMON_DISCONNECT_PATTERNS = [/cannot send daemon command/i, /daemon is not connected/i];
 function isDaemonDisconnectError(error) {
   const message = getErrorMessage(error);
@@ -5928,14 +6026,43 @@ function chatErrorEnvelope(error) {
     message: safeErrorMessage(error)
   };
 }
-function wrapApiHandler(handler) {
+function isOriginAllowed(request) {
+  const origin = request.headers.get("origin");
+  if (!origin) return true;
+  let originUrl;
+  try {
+    originUrl = new URL(origin);
+  } catch {
+    return false;
+  }
+  if (isLoopbackHostname(originUrl.hostname)) return true;
+  try {
+    return originUrl.host.toLowerCase() === new URL(request.url).host.toLowerCase();
+  } catch {
+    return true;
+  }
+}
+function wrapApiHandler(handler, request) {
+  if (request && request.method.toUpperCase() !== "GET" && !isOriginAllowed(request)) return Promise.resolve(Response.json({
+    code: "UNKNOWN_ERROR",
+    message: "Cross-origin request rejected."
+  }, { status: 403 }));
   return handler().catch((error) => {
     const envelope = chatErrorEnvelope(error);
-    if (envelope.code === "NETWORK_DISCONNECTED") process.stderr.write(`[api] daemon transport failure: ${getErrorMessage(error)}
+    if (envelope.code === "NETWORK_DISCONNECTED") process.stderr.write(`[api] daemon transport failure: ${safeErrorMessage(error)}
 `);
     return Response.json(envelope, { status: getResponseStatus(error) });
   });
 }
+async function requireProjectSession(session) {
+  if (!session?.projectId) return false;
+  try {
+    await getPrimeConfig().projectRegistry.get(session.projectId);
+  } catch {
+    return false;
+  }
+  return true;
+}
 function resolveChatStreamingBehavior(streamingBehavior) {
   return streamingBehavior ?? "steer";
 }
@@ -5944,7 +6071,8 @@ function chooseChatStartId(mapperState, streamingBehavior, sessionIsStreaming =
   return crypto.randomUUID();
 }
 async function handleChatChildPost(bridge, parentSessionId, childId, message, streamingBehavior) {
-  if (!(bridge.getSession(parentSessionId) ?? await bridge.resumeSessionById(parentSessionId, void 0, {}))) return Response.json({ message: `Unknown session: ${parentSessionId}` }, { status: 404 });
+  const session = bridge.getSession(parentSessionId) ?? await bridge.resumeSessionById(parentSessionId, void 0, {});
+  if (!session || !await requireProjectSession(session)) return Response.json({ message: `Unknown session: ${parentSessionId}` }, { status: 404 });
   const encoder = new TextEncoder();
   const stream = new ReadableStream({ start(controller) {
     let closed = false;
@@ -6032,7 +6160,7 @@ function handleChatPost(request) {
     if (process.env.PRIME_BRIDGE_DEBUG === "1") process.stderr.write(`[chat] received session=${targetSessionId.slice(0, 8)} bytes=${message.length}
 `);
     const session = bridge.getSession(targetSessionId) ?? await bridge.resumeSessionById(targetSessionId, void 0, { openUI });
-    if (!session) return Response.json({ message: `Unknown session: ${targetSessionId}` }, { status: 404 });
+    if (!session || !await requireProjectSession(session)) return Response.json({ message: `Unknown session: ${targetSessionId}` }, { status: 404 });
     const uploadAttachments = (body.attachments ?? []).filter((attachment) => attachment.kind === "upload");
     let uploadInspections;
     try {
@@ -6186,7 +6314,7 @@ ${attachmentContext.join("\n\n")}` : message;
       Connection: "keep-alive",
       "X-Accel-Buffering": "no"
     } });
-  });
+  }, request);
 }
 var BodySchema$3 = external_exports.object({
   sessionId: SessionIdSchema.optional(),
@@ -6199,6 +6327,7 @@ function handleChatAbortPost(request) {
     const sessionId = body.sessionId;
     if (!sessionId) return Response.json({ message: "abort requires sessionId" }, { status: 400 });
     const bridge = getBridge();
+    if (!await requireProjectSession(bridge.getSession(sessionId) ?? await bridge.resumeSessionById(sessionId))) return Response.json({ message: `Unknown session: ${sessionId}` }, { status: 404 });
     if (body.childId) {
       if (!await bridge.abortRlmChild(sessionId, body.childId)) return Response.json({ message: `No active subagent turn: ${body.childId}` }, { status: 404 });
       return Response.json({
@@ -6212,13 +6341,33 @@ function handleChatAbortPost(request) {
       ok: true,
       sessionId
     });
-  });
+  }, request);
 }
 var AttachmentIdSchema = external_exports.uuid();
 var ATTACHMENT_WRITE_CONCURRENCY = 8;
+function isSafeRasterImage(mimeType, data) {
+  if (mimeType === "image/png") return data.length >= 8 && data.subarray(0, 8).every((byte, index) => byte === [
+    137,
+    80,
+    78,
+    71,
+    13,
+    10,
+    26,
+    10
+  ][index]);
+  if (mimeType === "image/jpeg") return data.length >= 3 && data[0] === 255 && data[1] === 216 && data[2] === 255;
+  if (mimeType === "image/gif") {
+    const header = new TextDecoder().decode(data.subarray(0, 6));
+    return header === "GIF87a" || header === "GIF89a";
+  }
+  return mimeType === "image/webp" && data.length >= 12 && new TextDecoder().decode(data.subarray(0, 4)) === "RIFF" && new TextDecoder().decode(data.subarray(8, 12)) === "WEBP";
+}
 async function resolveSession(sessionId) {
   const bridge = getBridge();
-  return bridge.getSession(sessionId) ?? await bridge.resumeSessionById(sessionId);
+  const session = bridge.getSession(sessionId) ?? await bridge.resumeSessionById(sessionId);
+  if (!await requireProjectSession(session)) return void 0;
+  return session;
 }
 function handleChatAttachmentsPost(request) {
   return wrapApiHandler(async () => {
@@ -6241,7 +6390,7 @@ function handleChatAttachmentsPost(request) {
     }
     const attachments = settled.flatMap((result) => result.status === "fulfilled" ? [result.value] : []);
     return Response.json({ attachments });
-  });
+  }, request);
 }
 function handleChatAttachmentGet(request) {
   return wrapApiHandler(async () => {
@@ -6252,18 +6401,19 @@ function handleChatAttachmentGet(request) {
     if (!session) return Response.json({ message: `Unknown session: ${sessionId}` }, { status: 404 });
     const attachment = await readManagedAttachment(session, attachmentId).catch(() => void 0);
     if (!attachment) return Response.json({ message: "Attachment not found" }, { status: 404 });
+    const safeRasterImage = isSafeRasterImage(attachment.metadata.mimeType, attachment.data);
     return new Response(attachment.data, { headers: {
-      "Content-Type": attachment.metadata.mimeType,
-      "Content-Disposition": `inline; filename*=UTF-8''${encodeURIComponent(attachment.metadata.name)}`,
+      "Content-Type": safeRasterImage ? attachment.metadata.mimeType : "application/octet-stream",
+      ...safeRasterImage ? {} : { "Content-Disposition": `attachment; filename*=UTF-8''${encodeURIComponent(attachment.metadata.name)}` },
       "Cache-Control": "private, no-store",
       "X-Content-Type-Options": "nosniff"
     } });
-  });
+  }, request);
 }
 var BodySchema$2 = external_exports.object({
   sessionId: SessionIdSchema,
   command: external_exports.string(),
-  args: external_exports.string().optional()
+  args: external_exports.string().max(1024).optional()
 });
 function handleChatCommandPost(request) {
   return wrapApiHandler(async () => {
@@ -6338,7 +6488,7 @@ function handleChatCommandPost(request) {
       default:
         return Response.json({ message: `Unknown slash command: /${body.command}` }, { status: 404 });
     }
-  });
+  }, request);
 }
 async function cwdForRequest(request) {
   const projectIdParam = new URL(request.url).searchParams.get("projectId");
@@ -6556,7 +6706,7 @@ function handleChatCommandsGet(request) {
       ],
       diagnostics
     });
-  });
+  }, request);
 }
 function shouldReplaySseEvent(event, pendingQuestionIds) {
   if (!pendingQuestionIds) return true;
@@ -6705,7 +6855,10 @@ function handleChatEventsGet(request) {
       const childId = SessionIdSchema.safeParse(childIdParam);
       if (!parentSessionId.success || !childId.success) return Response.json({ message: "Invalid subagent stream identifiers" }, { status: 400 });
       if (streamGenerationParam !== null && !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(streamGenerationParam)) return Response.json({ message: "Invalid child stream generation" }, { status: 400 });
-      const childStream = await getBridge().openRlmChildStream(parentSessionId.data, childId.data, {
+      const bridge = getBridge();
+      const parent = bridge.getSession(parentSessionId.data) ?? await bridge.resumeSessionById(parentSessionId.data);
+      if (!parent || !await requireProjectSession(parent)) return Response.json({ message: "Unknown live subagent stream" }, { status: 404 });
+      const childStream = await bridge.openRlmChildStream(parentSessionId.data, childId.data, {
         ...streamGenerationParam ? { streamGeneration: streamGenerationParam } : {},
         lastEventId: lastEventIdFor(request, url)
       });
@@ -6725,8 +6878,13 @@ function handleChatEventsGet(request) {
     if (!sessionIdParam) return Response.json({ message: "SSE requires ?sessionId=" }, { status: 400 });
     const sessionId = SessionIdSchema.safeParse(sessionIdParam);
     if (!sessionId.success) return Response.json({ message: "Invalid session identifier" }, { status: 400 });
+    {
+      const bridge = getBridge();
+      const session = bridge.getSession(sessionId.data) ?? await bridge.resumeSessionById(sessionId.data);
+      if (!session || !await requireProjectSession(session)) return Response.json({ message: `Unknown session: ${sessionId.data}` }, { status: 404 });
+    }
     return createSseResponse(request, getBridge(), { sessionId: sessionId.data }, lastEventIdFor(request, url));
-  });
+  }, request);
 }
 var BodySchema$1 = external_exports.object({
   sessionId: SessionIdSchema,
@@ -6739,12 +6897,15 @@ function handleChatModelPost(request) {
   return wrapApiHandler(async () => {
     const raw = await request.json().catch(() => ({}));
     const body = BodySchema$1.parse(raw);
-    await getBridge().setModel(body.sessionId, {
+    const bridge = getBridge();
+    const session = bridge.getSession(body.sessionId) ?? await bridge.resumeSessionById(body.sessionId);
+    if (!session || !await requireProjectSession(session)) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
+    await bridge.setModel(body.sessionId, {
       provider: body.model.provider,
       id: body.model.id
     });
     return Response.json({ ok: true });
-  });
+  }, request);
 }
 function toPatternCandidate(model) {
   return {
@@ -6797,7 +6958,7 @@ function handleChatModelsGet(request) {
       ...defaultThinkingLevel ? { defaultThinkingLevel } : {},
       diagnostics
     });
-  });
+  }, request);
 }
 function storedApiForCustomProvider(api) {
   return api === "google-genai" ? "google-generative-ai" : api;
@@ -6919,6 +7080,7 @@ function isDiscoverableEntry(entry) {
 function openAiModelsUrl(baseUrl) {
   const parsed = new URL(baseUrl);
   if (parsed.protocol !== "https:" && parsed.protocol !== "http:") throw new Error("model discovery requires an http(s) URL");
+  if (parsed.protocol === "http:" && !isLoopbackHostname(parsed.hostname)) throw new Error("model discovery requires https for non-loopback hosts");
   const path = parsed.pathname.replace(/\/+$/, "");
   parsed.pathname = path.endsWith("/v1") ? `${path}/models` : `${path}/v1/models`;
   parsed.search = "";
@@ -6951,6 +7113,7 @@ function handleChatModelsDiscoverPost(request) {
       const modelsUrl = openAiModelsUrl(baseUrl);
       const response = await fetch(modelsUrl, {
         headers: { Authorization: `Bearer ${apiKey}` },
+        redirect: "error",
         signal: AbortSignal.timeout(1e4)
       });
       if (!response.ok) return Response.json({
@@ -6982,7 +7145,7 @@ function handleChatModelsDiscoverPost(request) {
         models: []
       });
     }
-  });
+  }, request);
 }
 function toThinkingLevel(level) {
   return level;
@@ -7018,7 +7181,7 @@ function handleChatNewPost(request) {
       planPresentations: [],
       presentation: bridge.getPresentation(session.sessionId)
     });
-  });
+  }, request);
 }
 function record(value) {
   return typeof value === "object" && value !== null ? value : void 0;
@@ -7037,7 +7200,7 @@ function handleChatOpenUIArtifactPut(request) {
     if (!validation.ok) return Response.json({ message: validation.reason }, { status: validation.status ?? 400 });
     const bridge = getBridge();
     const session = bridge.getSession(body.sessionId) ?? await bridge.resumeSessionById(body.sessionId);
-    if (!session) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
+    if (!session || !await requireProjectSession(session)) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
     const messages = await bridge.getMessages(session.sessionId);
     const incomingId = body.assistantMessageId;
     const exact = messages.find((message) => message.role === "assistant" && message.id === incomingId);
@@ -7064,14 +7227,14 @@ function handleChatOpenUIArtifactPut(request) {
       artifact,
       presentation
     });
-  });
+  }, request);
 }
 function handleChatPlanPresentationPut(request) {
   return wrapApiHandler(async () => {
     const body = ChatPlanPresentationUpsertRequestSchema.parse(await request.json().catch(() => ({})));
     const bridge = getBridge();
     const session = bridge.getSession(body.sessionId) ?? await bridge.resumeSessionById(body.sessionId);
-    if (!session) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
+    if (!session || !await requireProjectSession(session)) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
     const messages = await bridge.getMessages(body.sessionId);
     const incomingId = body.presentation.assistantMessageId;
     const known = messages.find((message) => message.id === incomingId && message.role === "assistant");
@@ -7085,7 +7248,7 @@ function handleChatPlanPresentationPut(request) {
       assistantMessageId,
       ...clientMessageId ? { clientMessageId } : {}
     }) });
-  });
+  }, request);
 }
 var PRIME_BUTTERFLY_SVG = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 178 178" aria-hidden="true"><path fill="currentColor" d="m 123.322,84.092671 c -0.192,0.0065 -0.43,0.0147 -0.74,0.0147 l -0.018,-0.0247 c -0.873,0.1977 -1.958,0.1266 -3.067,0.0537 -3.29,-0.216 -6.799,-0.4465 -5.635,6.2824 0.259,1.4822 -1.538,1.8465 -2.73,1.9082 -3.384,0.1853 -6.78,0.2594 -10.171,0.1915 -0.641,-0.0106 -1.2979,-0.5506 -1.8904,-1.0388 -0.1022,-0.0844 -0.2034,-0.1673 -0.3016,-0.2457 -0.1052,-0.0865 0.2898,-1.2042 0.4942,-1.2166 3.3078,-0.1931 4.5068,-2.4361 5.7028,-4.6724 0.603,-1.1253 1.204,-2.2488 2.072,-3.1088 7.856,-7.7874 15.878,-15.4265 25.054,-21.7008 0.895,-0.6114 1.989,-1.1733 2.73,-0.1111 0.571,0.8205 0.036,1.2854 -0.512,1.7627 -0.24,0.2088 -0.482,0.4199 -0.637,0.6642 -0.554,0.8792 -1.538,1.5273 -2.514,2.1717 -1.92,1.2655 -3.82,2.5172 -2.408,5.4798 1.225,2.5651 0.129,3.0202 -1.555,3.7198 l -0.069,0.0287 c -0.72,0.3021 -1.458,0.5764 -2.194,0.8506 -1.568,0.5835 -3.134,1.1662 -4.537,2.0149 -1.408,0.8522 -2.081,2.5134 0.222,3.4954 5.033,2.1428 18.064,-1.2784 20.608,-5.9965 2.377,-4.4147 5.931,-7.6891 9.481,-10.9611 1.992,-1.836 3.984,-3.6712 5.767,-5.7067 3.844,-4.3849 8.344,-8.1939 12.846,-12.005 2.239,-1.8944 4.478,-3.78938 6.637,-5.75588 1.624,-1.48207 2.297,-3.43353 1.026,-5.56412 -1.267,-2.118215 -3.416,-2.402287 -5.435,-1.926802 -13.309,3.130982 -26.166,7.355122 -37.585,15.241302 -18.23,12.5919 -36.4911,25.1406 -54.9002,37.4669 -6.2743,4.2056 -10.0723,2.1491 -12.1657,-5.1318 -4.6502,-16.1676 -11.4681,-30.2664 -31.0569,-32.4587 -7.1574,-0.8028 -12.4066,3.6807 -11.3692,10.7949 0.5249,3.6065 0.0495,7.003 -1.6858,10.3872 -0.3827,0.7472 -0.7689,1.4947 -1.1556,2.243 -2.672,5.1706 -5.3671,10.3857 -7.0394,15.8885 -0.1399,0.4602 -0.3002,0.9444 -0.4654,1.4437 -1.4909,4.5052 -3.3862,10.2323 5.659,10.5492 0.3705,0.0123 1.0808,0.944799 0.9943,1.290699 -0.1976,0.8213 -0.5991,1.797 -1.2413,2.2725 -8.6705,6.3917 -15.79706,14.1294 -18.860151,24.5971 -1.550066,5.2865 -0.524909,10.7765 3.989391,14.8705 3.22984,2.928 7.35516,4.625 10.97396,2.162 3.3009,-2.247 6.9232,-3.754 10.538,-5.259 3.1819,-1.324 6.358,-2.646 9.3041,-4.468 0.7101,-0.439 1.5727,-0.841 2.4456,-1.248 2.4138,-1.1228 4.9063,-2.2843 4.4709,-4.3841 -0.6854,-3.2908 -4.1623,-6.3418 -7.0586,-8.7384 -2.8716,-2.3769 -10.1897,-18.3411 -9.3189,-22.176099 1.2193,-5.3704 3.9645,-10.0201 6.7125,-14.6744 2.3458,-3.9731 4.6935,-7.9497 6.0956,-12.3806 0.5804,-1.828 2.8037,-2.8284 4.9466,-2.0997 1.4543,0.4928 1.2068,1.8278 0.9762,3.0715 -0.0063,0.0344 -0.0127,0.0685 -0.019,0.1027 -0.8688,4.7802 -1.721,9.566 -2.5733,14.3517 -0.4261,2.3924 -0.8521,4.7847 -1.2803,7.1762 -0.2717,1.5316 0.2038,2.7544 1.7909,3.0631 3.0569,0.599 2.989,1.9762 1.6119,4.341499 -1.4636,2.5072 -1.6674,5.5703 -0.0309,7.8861 1.6427,2.3282 4.3908,2.8161 7.1821,1.4204 1.7415,-0.8646 3.094,-0.0927 3.0755,1.6612 -0.1112,9.3688 3.8103,7.2561 8.584,3.1681 0.439,-0.3763 1.0373,-0.5846 1.6152,-0.7857 0.1048,-0.0366 0.2091,-0.0728 0.3116,-0.1098 0.4529,-0.1616 0.9062,-0.3224 1.3595,-0.4833 8.986,-3.1884 17.9603,-6.3725 23.0334,-15.573099 0.392,-0.7187 1.6783,-1.0669 2.6795,-1.3377 0.057,-0.0154 0.113,-0.0307 0.1681,-0.0456 5.8013,-1.5766 11.7248,-1.6001 17.6438,-1.6237 4.445,-0.0176 8.888,-0.0352 13.277,-0.7107 4.329,-0.667 9.047,-3.1928 9.084,-7.3736 0.035,-3.3707 -2.546,-3.1612 -5.123,-2.9519 -1.115,0.0906 -2.231,0.1811 -3.134,-0.0185 -0.182,-0.0381 -0.375,-0.0316 -0.686,-0.0209 z"/><path fill="currentColor" d="m 55.1325,131.29447 c -1.0745,7.1515 1.6551,13.2715 12.8266,13.1915 h -0.0062 c 9.5413,-0.389 20.3365,-6.164 30.8838,-13.5492 6.9653,-4.8787 12.9873,-10.0236 16.8903,-17.6253 2.872,-5.5889 1.395,-10.0723 -2.933,-13.993799 -1.908,-1.7291 -3.73,-1.9205 -5.867,0.1667 -7.5842,7.423099 -17.0261,11.474299 -26.7218,15.550099 -2.4706,1.0393 -5.2847,1.5582 -8.1187,2.0809 -7.5511,1.3924 -15.2431,2.8103 -16.954,14.1791 z"/></svg>`;
 function escapeHtml(value) {
@@ -35072,7 +35235,7 @@ function listChatProviders() {
 function handleChatProvidersGet(_request) {
   return wrapApiHandler(async () => {
     return Response.json({ providers: buildProviders() });
-  });
+  }, _request);
 }
 function requireBaseUrl(baseUrl, providerId) {
   const trimmed = baseUrl?.trim() ?? "";
@@ -35141,7 +35304,7 @@ function handleChatProvidersPost(request) {
       success: true,
       providers: buildProviders()
     });
-  });
+  }, request);
 }
 function handleChatProvidersDelete(request) {
   return wrapApiHandler(async () => {
@@ -35155,7 +35318,7 @@ function handleChatProvidersDelete(request) {
       success: true,
       providers: buildProviders()
     });
-  });
+  }, request);
 }
 var LOGIN_TTL_MS = 96e4;
 var sessions = /* @__PURE__ */ new Map();
@@ -35313,7 +35476,7 @@ function handleChatProvidersOAuthPost(request) {
       error: `Unknown OAuth provider: ${body.providerId}`
     }, { status: 400 });
     return Response.json(startOAuthLogin(body.providerId, oauthDeps()));
-  });
+  }, request);
 }
 function handleChatQuestionPost(request) {
   return wrapApiHandler(async () => {
@@ -35325,19 +35488,26 @@ function handleChatQuestionPost(request) {
       ok: false,
       message: "answer requires sessionId and toolCallId"
     }, { status: 400 });
-    if (!getBridge().answerDialog(sessionId, toolCallId, body.answer)) return Response.json({
+    const bridge = getBridge();
+    if (!await requireProjectSession(bridge.getSession(sessionId) ?? await bridge.resumeSessionById(sessionId))) return Response.json({
+      ok: false,
+      message: `Unknown session: ${sessionId}`
+    }, { status: 404 });
+    if (!bridge.answerDialog(sessionId, toolCallId, body.answer)) return Response.json({
       ok: false,
       message: "Question is no longer active"
     }, { status: 404 });
     return Response.json({ ok: true });
-  });
+  }, request);
 }
 function handleChatQueueMutationPost(request) {
   return wrapApiHandler(async () => {
     const body = ChatQueueMutationRequestSchema.parse(await request.json().catch(() => ({})));
-    const result = await getBridge().deleteQueuedMessage(body.sessionId, body.lane, body.index, body.expectedText);
+    const bridge = getBridge();
+    if (!await requireProjectSession(bridge.getSession(body.sessionId) ?? await bridge.resumeSessionById(body.sessionId))) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
+    const result = await bridge.deleteQueuedMessage(body.sessionId, body.lane, body.index, body.expectedText);
     return Response.json(ChatQueueMutationResponseSchema.parse(result));
-  });
+  }, request);
 }
 function packageSourceToString(source) {
   if (typeof source === "string") return { name: source };
@@ -35394,7 +35564,7 @@ function handleChatResourcesGet(request) {
       })),
       diagnostics
     });
-  });
+  }, request);
 }
 var BodySchema = ChatSessionMetadataSchema.extend({ sessionId: SessionIdSchema });
 function handleChatResumePost(request) {
@@ -35416,7 +35586,7 @@ function handleChatResumePost(request) {
       });
     }
     return Response.json({ message: "resume requires sessionId" }, { status: 400 });
-  });
+  }, request);
 }
 function handleChatSessionGet(request) {
   return wrapApiHandler(async () => {
@@ -35428,7 +35598,10 @@ function handleChatSessionGet(request) {
       const parsedParentSessionId = SessionIdSchema.safeParse(parentSessionId);
       const parsedChildId = SessionIdSchema.safeParse(childId);
       if (!parsedParentSessionId.success || !parsedChildId.success) return Response.json({ message: "Invalid subagent session identifiers" }, { status: 400 });
-      const child = await getBridge().loadRlmChildTranscript(parsedParentSessionId.data, parsedChildId.data);
+      const bridge2 = getBridge();
+      const liveParent = bridge2.getSession(parsedParentSessionId.data);
+      if (liveParent && !await requireProjectSession(liveParent)) return Response.json({ message: `Unknown session: ${parsedParentSessionId.data}` }, { status: 404 });
+      const child = await bridge2.loadRlmChildTranscript(parsedParentSessionId.data, parsedChildId.data);
       if (!child) return Response.json({ message: "Unknown subagent transcript" }, { status: 404 });
       return Response.json({
         session: {
@@ -35447,7 +35620,7 @@ function handleChatSessionGet(request) {
     const bridge = getBridge();
     const projectId = requestedProjectId ? ProjectIdSchema.parse(requestedProjectId) : void 0;
     const existing = projectId ? await bridge.resumeSessionById(sessionId, projectId, { openUI }) : bridge.getSession(sessionId) ?? await bridge.resumeSessionById(sessionId, void 0, { openUI });
-    if (!existing) return Response.json({ message: `Unknown session: ${sessionId}` }, { status: 404 });
+    if (!existing || !await requireProjectSession(existing)) return Response.json({ message: `Unknown session: ${sessionId}` }, { status: 404 });
     return Response.json({
       session: {
         sessionId: existing.sessionId,
@@ -35457,7 +35630,7 @@ function handleChatSessionGet(request) {
       planPresentations: await loadManagedPlanPresentations(existing),
       presentation: bridge.getPresentation(existing.sessionId)
     });
-  });
+  }, request);
 }
 var RenameSessionSchema = external_exports.object({
   sessionId: SessionIdSchema,
@@ -35468,24 +35641,28 @@ function handleChatSessionRenamePatch(request) {
   return wrapApiHandler(async () => {
     const body = RenameSessionSchema.parse(await request.json().catch(() => ({})));
     const bridge = getBridge();
-    if (!(bridge.getSession(body.sessionId) ?? await bridge.resumeSessionById(body.sessionId))) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
+    const session = bridge.getSession(body.sessionId) ?? await bridge.resumeSessionById(body.sessionId);
+    if (!session || !await requireProjectSession(session)) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
     bridge.setSessionName(body.sessionId, body.title);
     return Response.json({
       ok: true,
       sessionId: body.sessionId,
       title: body.title
     });
-  });
+  }, request);
 }
 function handleChatSessionDelete(request) {
   return wrapApiHandler(async () => {
     const body = DeleteSessionSchema.parse(await request.json().catch(() => ({})));
-    if (!await getBridge().deleteSession(body.sessionId)) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
+    const bridge = getBridge();
+    const session = bridge.getSession(body.sessionId) ?? await bridge.resumeSessionById(body.sessionId);
+    if (!session || !await requireProjectSession(session)) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
+    if (!await bridge.deleteSession(body.sessionId)) return Response.json({ message: `Unknown session: ${body.sessionId}` }, { status: 404 });
     return Response.json({
       ok: true,
       sessionId: body.sessionId
     });
-  });
+  }, request);
 }
 function stringValue(value) {
   return typeof value === "string" && value.length > 0 ? value : void 0;
@@ -35559,7 +35736,7 @@ function handleProjectsGet(_request) {
         };
       })
     });
-  });
+  }, _request);
 }
 function handleProjectsPost(request) {
   return wrapApiHandler(async () => {
@@ -35567,20 +35744,20 @@ function handleProjectsPost(request) {
     const registry = getPrimeConfig().projectRegistry;
     const path = await registry.resolveDirectoryInput(body);
     return Response.json({ project: await registry.register(path, body.name) }, { status: 201 });
-  });
+  }, request);
 }
 function handleProjectPatch(request) {
   return wrapApiHandler(async () => {
     const projectId = ProjectIdSchema.parse(new URL(request.url).searchParams.get("projectId") ?? "");
     const body = ProjectRenameRequestSchema.parse(await request.json().catch(() => ({})));
     return Response.json({ project: await getPrimeConfig().projectRegistry.rename(projectId, body.name) });
-  });
+  }, request);
 }
 function handleProjectDelete(request) {
   return wrapApiHandler(async () => {
     const projectId = ProjectIdSchema.parse(new URL(request.url).searchParams.get("projectId") ?? "");
     return Response.json({ project: await getPrimeConfig().projectRegistry.unregister(projectId) });
-  });
+  }, request);
 }
 function handleProjectSessionFork(request) {
   return wrapApiHandler(async () => {
@@ -35590,7 +35767,7 @@ function handleProjectSessionFork(request) {
       sessionId,
       projectId: body.targetProjectId
     }, { status: 201 });
-  });
+  }, request);
 }
 function handleProjectBrowseGet(request) {
   return wrapApiHandler(async () => {
@@ -35600,7 +35777,7 @@ function handleProjectBrowseGet(request) {
       token: url.searchParams.get("token") ?? void 0
     });
     return Response.json(result);
-  });
+  }, request);
 }
 function handleChatSessionsGet(_request) {
   return wrapApiHandler(async () => {
@@ -35624,7 +35801,7 @@ function handleChatSessionsGet(_request) {
       };
     }));
     return Response.json({ sessions: projectId ? formatted.filter((session) => session.projectId === projectId) : formatted });
-  });
+  }, _request);
 }
 function toProjectShape(project) {
   const out = {};
@@ -35694,7 +35871,7 @@ function handleChatSettingsGet(request) {
   return wrapApiHandler(async () => {
     const cwd = await cwdForRequest(request);
     return Response.json(buildResponse(cwd));
-  });
+  }, request);
 }
 function handleChatSettingsPatch(request) {
   return wrapApiHandler(async () => {
@@ -35719,7 +35896,7 @@ function handleChatSettingsPatch(request) {
     if (patch.themes !== void 0) manager.setThemePaths(patch.themes);
     if (patch.packages !== void 0) manager.setPackages(patch.packages);
     return Response.json(buildResponse(cwd));
-  });
+  }, request);
 }
 function handleHealthGet(request) {
   return wrapApiHandler(async () => {
@@ -35729,12 +35906,12 @@ function handleHealthGet(request) {
       kernel,
       uptimeMs: process.uptime() * 1e3
     });
-  });
+  }, request);
 }
 function handleWorkspaceBrowseGet(request) {
   return wrapApiHandler(async () => {
     return Response.json({ message: "Workspace root switching is disabled; use /api/projects/browse for opaque directory tokens." }, { status: 410 });
-  });
+  }, request);
 }
 function canonicalizePath(path) {
   try {
@@ -35855,7 +36032,7 @@ function handleWorkspaceFileGet(request) {
     const result = await readWorkspaceFile(await cwdForRequest(request), path);
     if (result.kind === "error") return Response.json({ message: result.message }, { status: result.status });
     return Response.json(result.body);
-  });
+  }, request);
 }
 var IGNORED = /* @__PURE__ */ new Set([
   ".git",
@@ -35935,7 +36112,7 @@ function handleWorkspaceTreeGet(_request) {
       nodes,
       diagnostics
     });
-  });
+  }, _request);
 }
 var Route$25 = createFileRoute("/api/chat")({ server: { handlers: { POST: ({ request }) => handleChatPost(request) } } });
 var Route$24 = createFileRoute("/api/health")({ server: { handlers: { GET: ({ request }) => handleHealthGet(request) } } });