@rho-workspace/rho 0.5.4 → 0.5.6

package/node_modules/hono/dist/jsx/base.js

@@ -1,5 +1,5 @@
 import { escapeToBuffer, raw, resolveCallbackSync, stringBufferToString } from "../utils/html.js";
-import { DOM_MEMO, DOM_RENDERER } from "./constants.js";
+import { DOM_MEMO, DOM_RENDERER, RENDERED_JSX } from "./constants.js";
 import { captureRenderContext, createContext, globalContexts, runWithRenderContext, useContext } from "./context.js";
 import { domRenderers } from "./intrinsic-element/common.js";
 import { components_exports } from "./intrinsic-element/components.js";
@@ -25,7 +25,7 @@ const emptyTags = [
 	"track",
 	"wbr"
 ];
-const booleanAttributes = [
+const booleanAttributes = /* @__PURE__ */ new Set([
 	"allowfullscreen",
 	"async",
 	"autofocus",
@@ -51,8 +51,11 @@ const booleanAttributes = [
 	"readonly",
 	"required",
 	"reversed",
-	"selected"
-];
+	"selected",
+	"shadowrootclonable",
+	"shadowrootdelegatesfocus",
+	"shadowrootserializable"
+]);
 const resolveFunctionComponentResult = (result, suspendedContext) => result.then((resolved) => {
 	if (typeof resolved !== "string" && !Array.isArray(resolved) && !(resolved instanceof JSXNode)) return resolved;
 	const children = Array.isArray(resolved) ? resolved : [resolved];
@@ -63,6 +66,44 @@ const resolveFunctionComponentResult = (result, suspendedContext) => result.then
 	};
 	return suspendedContext ? suspendedContext(render) : runWithRenderContext(render);
 });
+const markRenderedJSX = (value) => {
+	value[RENDERED_JSX] = true;
+	return value;
+};
+const isEscapedAttribute = (value) => value instanceof String && value.isEscaped && !(RENDERED_JSX in value);
+const objectToAttributeString = (v) => {
+	const s = v.toString();
+	return s instanceof Promise ? s.then(String) : String(s);
+};
+const attributeToBuffer = (buffer, prefix, key, v, tag) => {
+	if (key === "ref" || v === null || v === void 0) return;
+	if (typeof v === "boolean" && booleanAttributes.has(key)) {
+		if (v) buffer[0] += `${prefix}${key}=""`;
+		return;
+	}
+	if (typeof v === "function") {
+		if (!key.startsWith("on")) throw new Error(`Invalid prop '${key}' of type 'function' supplied to ${tag ? `'${tag}'` : "a JSX element"}.`);
+		return;
+	}
+	buffer[0] += `${prefix}${key}="`;
+	if (key === "style" && typeof v === "object") {
+		let styleStr = "";
+		styleObjectForEach(v, (property, value) => {
+			if (value != null) styleStr += `${styleStr ? ";" : ""}${property}:${value}`;
+		});
+		escapeToBuffer(styleStr, buffer);
+	} else if (typeof v === "string") escapeToBuffer(v, buffer);
+	else if (typeof v === "number" || isEscapedAttribute(v)) buffer[0] += `${v}`;
+	else {
+		const s = v instanceof Promise ? v.then((r) => typeof r === "object" && r !== null && !isEscapedAttribute(r) ? objectToAttributeString(r) : r) : objectToAttributeString(v);
+		if (s instanceof Promise) {
+			buffer.unshift("\"", s);
+			return;
+		}
+		escapeToBuffer(s, buffer);
+	}
+	buffer[0] += "\"";
+};
 const childrenToStringToBuffer = (children, buffer) => {
 	for (let i = 0, len = children.length; i < len; i++) {
 		const child = children[i];
@@ -114,7 +155,7 @@ var JSXNode = class {
 		const render = () => {
 			const buffer = [""];
 			this.toStringToBuffer(buffer);
-			return buffer.length === 1 ? "callbacks" in buffer ? resolveCallbackSync(raw(buffer[0], buffer.callbacks)).toString() : buffer[0] : stringBufferToString(buffer, buffer.callbacks);
+			return buffer.length === 1 ? "callbacks" in buffer ? resolveCallbackSync(raw(buffer[0], buffer.callbacks)).toString() : buffer[0] : stringBufferToString(buffer, buffer.callbacks).then(markRenderedJSX);
 		};
 		return runWithRenderContext(render);
 	}
@@ -127,34 +168,10 @@ var JSXNode = class {
 		for (let [key, v] of Object.entries(props)) {
 			key = normalizeKey(key);
 			if (!isValidAttributeName(key)) continue;
-			if (key === "children") {} else if (key === "style" && typeof v === "object") {
-				let styleStr = "";
-				styleObjectForEach(v, (property, value) => {
-					if (value != null) styleStr += `${styleStr ? ";" : ""}${property}:${value}`;
-				});
-				buffer[0] += " style=\"";
-				escapeToBuffer(styleStr, buffer);
-				buffer[0] += "\"";
-			} else if (typeof v === "string") {
-				buffer[0] += ` ${key}="`;
-				escapeToBuffer(v, buffer);
-				buffer[0] += "\"";
-			} else if (v === null || v === void 0) {} else if (typeof v === "number" || v.isEscaped) buffer[0] += ` ${key}="${v}"`;
-			else if (typeof v === "boolean" && booleanAttributes.includes(key)) {
-				if (v) buffer[0] += ` ${key}=""`;
-			} else if (key === "dangerouslySetInnerHTML") {
+			if (key === "children") {} else if (key === "dangerouslySetInnerHTML" && typeof v === "object" && v !== null && "__html" in v) {
 				if (children.length > 0) throw new Error("Can only set one of `children` or `props.dangerouslySetInnerHTML`.");
 				children = [raw(v.__html)];
-			} else if (v instanceof Promise) {
-				buffer[0] += ` ${key}="`;
-				buffer.unshift("\"", v);
-			} else if (typeof v === "function") {
-				if (!key.startsWith("on") && key !== "ref") throw new Error(`Invalid prop '${key}' of type 'function' supplied to '${tag}'.`);
-			} else {
-				buffer[0] += ` ${key}="`;
-				escapeToBuffer(v.toString(), buffer);
-				buffer[0] += "\"";
-			}
+			} else attributeToBuffer(buffer, " ", key, v, tag);
 		}
 		if (emptyTags.includes(tag) && children.length === 0) {
 			buffer[0] += "/>";
@@ -248,4 +265,4 @@ const cloneElement = (element, props, ...children) => {
 };
 const reactAPICompatVersion = "19.0.0-hono-jsx";
 //#endregion
-export { Fragment, JSXFragmentNode, JSXNode, booleanAttributes, cloneElement, getNameSpaceContext, isUntrustedObject, isValidElement, jsx, jsxFn, memo, reactAPICompatVersion, renderChildren, renderUntrustedObject, shallowEqual };
+export { Fragment, JSXFragmentNode, JSXNode, attributeToBuffer, booleanAttributes, cloneElement, getNameSpaceContext, isUntrustedObject, isValidElement, jsx, jsxFn, markRenderedJSX, memo, reactAPICompatVersion, renderChildren, renderUntrustedObject, shallowEqual };

package/node_modules/hono/dist/jsx/components.js

@@ -77,7 +77,7 @@ const ErrorBoundary = async ({ children, fallback, fallbackRender, onError }) =>
 				buffer[0] = buffer[0].replace(replaceRe, () => fallbackResString);
 				return fallbackCallbacks?.length ? raw("", fallbackCallbacks) : "";
 			}
-			return raw(`<template data-hono-target="E:${index}">${fallbackResString}</template><script>
+			return raw(`<template data-hono-target="E:${index}">${fallbackResString}</template><script${nonce ? ` nonce="${nonce}"` : ""}>
 ((d,c,n) => {
 c=d.currentScript.previousSibling
 d=d.getElementById('E:${index}')
@@ -118,7 +118,7 @@ d.parentElement.insertBefore(c.content,d.nextSibling)
 						buffer[0] += content;
 						return raw("", content.callbacks);
 					}
-					return raw(content + (resolvedCount !== callbacks.length ? "" : `<script>
+					return raw(content + (resolvedCount !== callbacks.length ? "" : `<script${nonce ? ` nonce="${nonce}"` : ""}>
 ((d,c,n) => {
 d=d.getElementById('E:${index}')
 if(!d)return

package/node_modules/hono/dist/jsx/constants.js

@@ -5,5 +5,6 @@ const DOM_STASH = Symbol("STASH");
 const DOM_INTERNAL_TAG = Symbol("INTERNAL");
 const DOM_MEMO = Symbol("MEMO");
 const PERMALINK = Symbol("PERMALINK");
+const RENDERED_JSX = Symbol("RENDERED_JSX");
 //#endregion
-export { DOM_ERROR_HANDLER, DOM_INTERNAL_TAG, DOM_MEMO, DOM_RENDERER, DOM_STASH, PERMALINK };
+export { DOM_ERROR_HANDLER, DOM_INTERNAL_TAG, DOM_MEMO, DOM_RENDERER, DOM_STASH, PERMALINK, RENDERED_JSX };

package/node_modules/hono/dist/jsx/jsx-runtime.js

@@ -1,31 +1,27 @@
 import { escapeToBuffer, raw, stringBufferToString } from "../utils/html.js";
 import { html } from "../helper/html/index.js";
-import { isValidAttributeName, styleObjectForEach } from "./utils.js";
-import { Fragment } from "./base.js";
+import { PERMALINK } from "./constants.js";
+import { isValidAttributeName } from "./utils.js";
+import { Fragment, attributeToBuffer, markRenderedJSX } from "./base.js";
 import { jsxDEV } from "./jsx-dev-runtime.js";
 //#region src/jsx/jsx-runtime.ts
+const jsxTemplate = (strings, ...values) => {
+	const result = html(strings, ...values);
+	return result instanceof Promise ? result.then(markRenderedJSX) : markRenderedJSX(result);
+};
 const jsxAttr = (key, v) => {
 	if (!isValidAttributeName(key)) return raw("");
-	const buffer = [`${key}="`];
-	if (key === "style" && typeof v === "object") {
-		let styleStr = "";
-		styleObjectForEach(v, (property, value) => {
-			if (value != null) styleStr += `${styleStr ? ";" : ""}${property}:${value}`;
-		});
-		escapeToBuffer(styleStr, buffer);
-		buffer[0] += "\"";
-	} else if (typeof v === "string") {
+	if (typeof v === "string") {
+		const buffer = [`${key}="`];
 		escapeToBuffer(v, buffer);
-		buffer[0] += "\"";
-	} else if (v === null || v === void 0) return raw("");
-	else if (typeof v === "number" || v.isEscaped) buffer[0] += `${v}"`;
-	else if (v instanceof Promise) buffer.unshift("\"", v);
-	else {
-		escapeToBuffer(v.toString(), buffer);
-		buffer[0] += "\"";
+		return raw(buffer[0] + "\"");
 	}
+	let value = v;
+	if (typeof value === "function" && (key === "action" || key === "formaction")) value = PERMALINK in value ? value[PERMALINK] : void 0;
+	const buffer = [""];
+	attributeToBuffer(buffer, "", key, value);
 	return buffer.length === 1 ? raw(buffer[0]) : stringBufferToString(buffer, void 0);
 };
 const jsxEscape = (value) => value;
 //#endregion
-export { Fragment, jsxDEV as jsx, jsxAttr, jsxEscape, html as jsxTemplate, jsxDEV as jsxs };
+export { Fragment, jsxDEV as jsx, jsxAttr, jsxEscape, jsxTemplate, jsxDEV as jsxs };

package/node_modules/hono/dist/middleware/etag/index.js

@@ -16,7 +16,8 @@ const RETAINED_304_HEADERS = [
 ];
 const stripWeak = (tag) => tag.replace(/^W\//, "");
 function etagMatches(etag, ifNoneMatch) {
-	return ifNoneMatch != null && ifNoneMatch.split(",").some((t) => stripWeak(t.trim()) === stripWeak(etag));
+	const expected = stripWeak(etag);
+	return ifNoneMatch?.match(/"[^"]*"/g)?.some((tag) => tag === expected) ?? false;
 }
 function initializeGenerator(generator) {
 	if (!generator) {
@@ -64,6 +65,7 @@ const etag = (options) => {
 			etag = weak ? `W/"${hash}"` : `"${hash}"`;
 		}
 		if (ifNoneMatch === "*" || etagMatches(etag, ifNoneMatch)) {
+			await res.body?.cancel();
 			c.res = new Response(null, {
 				status: 304,
 				statusText: "Not Modified",

package/node_modules/hono/dist/middleware/language/language.js

@@ -1,5 +1,5 @@
-import { parseAccept } from "../../utils/accept.js";
 import { getCookie, setCookie } from "../../helper/cookie/index.js";
+import { parseAccept } from "../../utils/accept.js";
 //#region src/middleware/language/language.ts
 const DEFAULT_OPTIONS = {
 	order: [

package/node_modules/hono/dist/middleware/pretty-json/index.js

@@ -31,6 +31,7 @@ const prettyJSON = (options) => {
 			} catch {
 				return;
 			}
+			await c.res.body?.cancel();
 			c.res = new Response(JSON.stringify(obj, null, options?.space ?? 2), c.res);
 			c.res.headers.delete("Content-Length");
 		}

package/node_modules/hono/dist/middleware/timing/timing.js

@@ -74,6 +74,7 @@ const timing = (config) => {
 		}
 	};
 };
+const quote = (s) => `"${s.replace(/[\\"]/g, "\\$&")}"`;
 /**
 * Set a metric for the timing middleware.
 *
@@ -96,11 +97,11 @@ const setMetric = (c, name, valueDescription, description, precision) => {
 		return;
 	}
 	if (typeof valueDescription === "number") {
-		const dur = valueDescription.toFixed(precision || 1);
-		const metric = description ? `${name};dur=${dur};desc="${description}"` : `${name};dur=${dur}`;
+		const dur = valueDescription.toFixed(precision ?? 1);
+		const metric = description ? `${name};dur=${dur};desc=${quote(description)}` : `${name};dur=${dur}`;
 		metrics.headers.push(metric);
 	} else {
-		const metric = valueDescription ? `${name};desc="${valueDescription}"` : `${name}`;
+		const metric = valueDescription ? `${name};desc=${quote(valueDescription)}` : `${name}`;
 		metrics.headers.push(metric);
 	}
 };

package/node_modules/hono/dist/utils/cookie.js

@@ -79,8 +79,8 @@ const parseSigned = async (cookie, secret, name) => {
 const _serialize = (name, value, opt = {}) => {
 	if (!validCookieNameRegEx.test(name)) throw new Error("Invalid cookie name");
 	let cookie = `${name}=${value}`;
-	if (name.startsWith("__Secure-") && !opt.secure) throw new Error("__Secure- Cookie must have Secure attributes");
-	if (name.startsWith("__Host-")) {
+	if (/^__secure-/i.test(name) && !opt.secure) throw new Error("__Secure- Cookie must have Secure attributes");
+	if (/^__host-/i.test(name)) {
 		if (!opt.secure) throw new Error("__Host- Cookie must have Secure attributes");
 		if (opt.path !== "/") throw new Error("__Host- Cookie must have Path attributes with \"/\"");
 		if (opt.domain) throw new Error("__Host- Cookie must not have Domain attributes");

package/node_modules/hono/dist/utils/mime.js

@@ -9,7 +9,7 @@ const getMimeType = (filename, mimes = baseMimes) => {
 	return mimes[match[1].toLowerCase()];
 };
 const getExtension = (mimeType) => {
-	const baseType = mimeType.split(";", 1)[0].trim();
+	const baseType = mimeType.split(";", 1)[0].trim().toLowerCase();
 	for (const ext in baseMimes) {
 		const stored = baseMimes[ext];
 		if (stored === mimeType || stored.split(";", 1)[0].trim() === baseType) return ext;

package/node_modules/hono/dist/utils/url.js

@@ -161,7 +161,7 @@ const _getQueryParam = (url, key, multiple) => {
 	const hashIndex = url.indexOf("#", 8);
 	if (hashIndex !== -1) url = url.slice(0, hashIndex);
 	let encoded;
-	if (!multiple && key && key.indexOf("%") === -1 && key.indexOf("+") === -1) {
+	if (!multiple && key && !/[%+&=]/.test(key)) {
 		const queryIndex = url.indexOf("?", 8);
 		let keyIndex = queryIndex;
 		if (keyIndex === -1) return;

package/node_modules/hono/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hono",
-  "version": "4.13.16",
+  "version": "4.13.17",
   "description": "Web framework built on Web Standards",
   "main": "dist/cjs/index.js",
   "type": "module",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rho-workspace/rho",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "type": "module",
   "description": "Rho local workspace service, scoped browser shell and headless client",
   "license": "AGPL-3.0-only",
@@ -56,7 +56,9 @@
     "scripts/ui-toolchain.json",
     "scripts/ui-preview",
     "web/theme.css",
-    "docs/PLUGIN-AUTHORING.md"
+    "docs/PLUGIN-AUTHORING.md",
+    "docs/THIRD-PARTY-PLUGINS.md",
+    "scripts/third-party-acceptance.mjs"
   ],
   "scripts": {
     "acceptance:collaboration": "node scripts/collaboration-acceptance.mjs",
@@ -77,7 +79,7 @@
     "@rho-workspace/plugin-tables": "file:vendor/rho-workspace-plugin-tables-0.5.0.tgz",
     "@rho-workspace/plugin-media": "file:vendor/rho-workspace-plugin-media-0.4.0.tgz",
     "@rho-workspace/plugin-charts": "file:vendor/rho-workspace-plugin-charts-0.4.0.tgz",
-    "@rho-workspace/plugin-agent": "file:vendor/rho-workspace-plugin-agent-0.4.28.tgz",
+    "@rho-workspace/plugin-agent": "file:vendor/rho-workspace-plugin-agent-0.4.30.tgz",
     "@rho-workspace/plugin-annotations": "file:vendor/rho-workspace-plugin-annotations-0.5.2.tgz",
     "@rho-workspace/plugin-console": "file:vendor/rho-workspace-plugin-console-0.3.1.tgz",
     "@rho-workspace/plugin-kernel": "file:vendor/rho-workspace-plugin-kernel-0.5.5.tgz",

package/protocol/index.json

@@ -74,6 +74,18 @@
       "bytes": 3705,
       "sha256": "64d31b4cefd29c0132bc82223775ada64f974df17216a06e8be5e7ff98461d1e"
     },
+    "agent.sessions.list": {
+      "summary": "agent.sessions.list",
+      "path": "operations/agent.sessions.list.json",
+      "bytes": 3397,
+      "sha256": "853106dcca93104995c3afff078975904788c3ee1f4bba3e5f99c0d27f189ca6"
+    },
+    "agent.sessions.read": {
+      "summary": "agent.sessions.read",
+      "path": "operations/agent.sessions.read.json",
+      "bytes": 7526,
+      "sha256": "48a53f06a7a1d33e11bbe3efc7d5a5d47c8130bc344b557c49ff5edfc226dbe6"
+    },
     "annotation.create": {
       "summary": "annotation.create",
       "path": "operations/annotation.create.json",
@@ -233,14 +245,14 @@
     "conversation.configure": {
       "summary": "Person at this machine only: change one setting the Agent offers (model, effort, mode…) for the next messages of a conversation started in Rho. An open session changes now; otherwise the choice is applied when the session next opens. Refused while a message is being answered.",
       "path": "operations/conversation.configure.json",
-      "bytes": 20110,
-      "sha256": "a92723b3e054d81050be0edb5531b2f4621d30c4d3b8712c91959355d3a33cf7"
+      "bytes": 20885,
+      "sha256": "8a745fb3600d7ac64fad3812d856f7b135a2d2c3ea2eca65d922cd6d48c1eba7"
     },
     "conversation.decide": {
       "summary": "Person at this machine only: say to use an answer, or that it needs changes and why. The decision holds for the file versions that message kept when it was given and says nothing of later versions. A new decision supersedes the one before; none is removed. Refused while the Agent is still answering.",
       "path": "operations/conversation.decide.json",
-      "bytes": 33825,
-      "sha256": "366b88fc2102cd7ea25aa753c5e8f17780a2d78269a4e152786a97b0a0c22dc6"
+      "bytes": 34600,
+      "sha256": "518369b3d052cea7f78f9722577d47ff54490ff8ba39769b0d768bf8529b8af4"
     },
     "conversation.delete": {
       "summary": "Person at this machine only: delete Rho's record of a conversation in the trash. The Agent's own session files are not touched. Repeating the request that started it is then refused.",
@@ -251,68 +263,68 @@
     "conversation.list": {
       "summary": "Person at this machine only: list the conversations started in Rho in this project, or those in its trash, with each one's Agent, last model, choices and reported usage. Reading starts nothing.",
       "path": "operations/conversation.list.json",
-      "bytes": 6767,
-      "sha256": "44c0fcaaf3b0775db9d3f969218a0b9516ea4d55f79d6d9737c34be368bda7a1"
+      "bytes": 7600,
+      "sha256": "2e291ce118cab1c43436e1e5ed22a916923f0089696f32dfa5ead04c99be5ec0"
     },
     "conversation.permission": {
       "summary": "Person at this machine only: record an offered choice for a pending Agent permission request. The original request identity is retained; repeated identical choices do not respond twice.",
       "path": "operations/conversation.permission.json",
-      "bytes": 33644,
-      "sha256": "85bc65c9209d43a75b49542d10f5d82c2998307ef2f8b3727a94ec6ae1bffc56"
+      "bytes": 34419,
+      "sha256": "3ca68aad6568a7fe3426671d84725656d1ff19815521090dadcac7c543dcce88"
     },
     "conversation.read": {
       "summary": "Read a conversation started in Rho: the person's messages, the Agent's visible text and tool steps, and how each message ended. Reading starts and resumes nothing.",
       "path": "operations/conversation.read.json",
-      "bytes": 48752,
-      "sha256": "0ae9de68afa2da8419f5d723eca3f2ea8db9d1e0936a8dd1e92284d8bcc27805"
+      "bytes": 49527,
+      "sha256": "cc68d9b16b03f5a39debba41c4b41422f843d18a67b1cb26f7e8eb58d3c5bcb9"
     },
     "conversation.restore": {
       "summary": "Person at this machine only: return a conversation from the trash to the project's conversations, within the project's conversation limit.",
       "path": "operations/conversation.restore.json",
-      "bytes": 6261,
-      "sha256": "282449bc3f84125f2e6d37ec391596aa03e666b1fac06774454cd830aa9d69e4"
+      "bytes": 7036,
+      "sha256": "184780ef30bc8d0a835c94b7617bac9abc1da220e8fc4e1fbaae6a72188e4238"
     },
     "conversation.send": {
       "summary": "Person at this machine only: send the next message to a conversation started in Rho. A continuationOf links a new message to the latest confirmed Agent turn-limit stop; the original request is not resent. Refused while the previous message is being answered. A repeated changeId with the same input returns the original message.",
       "path": "operations/conversation.send.json",
-      "bytes": 33931,
-      "sha256": "031bbfe0e76b4e932969743953f7664a283b85b75dc3fe55fca6af45ac4d1e4c"
+      "bytes": 34706,
+      "sha256": "8dd79b04112b14500817c596a8551921675d3a062babe62aee1837d30305a124"
     },
     "conversation.settings.check": {
       "summary": "Person at this machine only: start the chosen Agent in this project to read the settings it offers, then remove that session and end the process. No message is sent; one check per Agent runs at a time.",
       "path": "operations/conversation.settings.check.json",
-      "bytes": 14555,
-      "sha256": "0aba6e7c8dc96f20aa20db2bea94238d370774450c70a19cabdec344a2eda88e"
+      "bytes": 16792,
+      "sha256": "07b682197ffd780dbb462f0f55d9d0db29c6fea4b2b630556a462e041d4ced56"
     },
     "conversation.settings.read": {
       "summary": "Person at this machine only: read the Agent and settings chosen for new conversations and what each Agent last offered. Reading starts nothing.",
       "path": "operations/conversation.settings.read.json",
-      "bytes": 14360,
-      "sha256": "04d5f1cf71ee88946dc0bbe7bef7d3864e6cc6e705304b98e19ad2351c999ca7"
+      "bytes": 16597,
+      "sha256": "f200650e9a3a816bd3e919adbacad7c4ffb1ab0fd07e7d59f8c25fd8184b71b7"
     },
     "conversation.settings.update": {
       "summary": "Person at this machine only: choose the Agent and its settings for new conversations, among the values that Agent last offered, and whether a model describes the files a message writes. A stale expectedVersion is refused.",
       "path": "operations/conversation.settings.update.json",
-      "bytes": 16639,
-      "sha256": "20612281dff10b3a2f121be5a060f5e996dd7e2ccf5f2b06406bae87a85bc1ed"
+      "bytes": 18876,
+      "sha256": "9d2b489c49a3731c9081fa2c142e1785b53bf8e4bca09349bb82faf7f792f7b2"
     },
     "conversation.start": {
-      "summary": "Person at this machine only: start a conversation with the selected Claude Code or Codex Agent in this project. Rho selects the Agent plugin backend, attaches this project's MCP grant and records the message before sending it. Without backend or config, the person's saved Agent and settings are used and recorded with the conversation. A repeated changeId with the same text returns the original conversation and starts nothing.",
+      "summary": "Person at this machine only: start a conversation with the selected Claude Code or Codex Agent in this project. Rho selects the Agent plugin backend, attaches this project's MCP grant and records the message before sending it. Without backend or config, the person's saved Agent and settings are used and recorded with the conversation. A repeated changeId with the same text returns the original conversation and starts nothing. With continue, the message continues an Agent session listed by agent.sessions.list (one started in a terminal, an editor or the Agent's own app) through that same session, or through a copy of it with copy; a session another live window holds open is refused unless copied.",
       "path": "operations/conversation.start.json",
-      "bytes": 34318,
-      "sha256": "b691ed1d000206bbaa65289e7e255d53fc5552ace1ad180b4f4d8cf2020bbb96"
+      "bytes": 35719,
+      "sha256": "3cf1320d24698b12d2629d167b1ddd3516d7793725f52499b309437bd1d83fac"
     },
     "conversation.stop": {
       "summary": "Person at this machine only: ask the original Agent to stop answering one message. ACP cancellation is confirmed by the original prompt response; a lost connection keeps the outcome unknown. Legacy CLI conversations confirm process exit. Steps already taken stay done.",
       "path": "operations/conversation.stop.json",
-      "bytes": 33471,
-      "sha256": "0755e7ba9a7c1a516d0158f0f53656f1635970ab767b0455fe786fdb1535c441"
+      "bytes": 34246,
+      "sha256": "f4bf1a4b8108837fe29f7d71a549c4ecf51c7edfa13777c033460cadebd048e5"
     },
     "conversation.trash": {
       "summary": "Person at this machine only: move a conversation that is not being answered to the trash. It is kept whole and not continued until restored; an idle connection to its Agent ends.",
       "path": "operations/conversation.trash.json",
-      "bytes": 6299,
-      "sha256": "8ecc3aaf8da2cc307b65e7015a17ae1ec096451859a06721d884e1d519cb4540"
+      "bytes": 7074,
+      "sha256": "643d239b90f97bc69d5f0884b69f51c547f1393ae0cff4a9b9fcf2d9e9763051"
     },
     "data.compare": {
       "summary": "Join two explicit table versions using declared keys, namespaces, fields and join policy. Scientific comparability remains the project responsibility.",
@@ -404,6 +416,48 @@
       "bytes": 1004,
       "sha256": "4fbf03970c525ad073153aad9846ce960da2369b8cb45b4b6aaeef95cd8f19fd"
     },
+    "extension.call": {
+      "summary": "Call an enabled third-party operation at the described package digest, under the caller and project. The package runs trusted native code. Non-read calls retain the original changeId: repeat observes that invocation, including unknown outcomes, without re-execution. Completion is not scientific validity.",
+      "path": "operations/extension.call.json",
+      "bytes": 3054,
+      "sha256": "fef35859de95442313afcf2fb517ab7ec2e30781344e0b77174b904f70e5df3b"
+    },
+    "extension.content": {
+      "summary": "Read one installed plugin Skill or standalone HTML view at its selected package digest. Reading starts no plugin or runtime.",
+      "path": "operations/extension.content.json",
+      "bytes": 1627,
+      "sha256": "fe3542d6f35267766ef5227d9d6cb98009895ac9ec9cdc1355fbed97e07c77d9"
+    },
+    "extension.describe": {
+      "summary": "Read an installed third-party package manifest, operation input schemas, required Rho methods, Skills and views. Read its Skill with extension.content before use. Disabled packages cannot run.",
+      "path": "operations/extension.describe.json",
+      "bytes": 4684,
+      "sha256": "441616d6e634daa1ce2d058f6d0b0bd7ccd494de33f01a3dae3d6c344dc6f1a9"
+    },
+    "extension.install": {
+      "summary": "Local person/operator: install a trusted prebuilt npm package, local folder, tarball, or Git source. Lifecycle scripts are disabled. Replacement stages and checks the new package before switching; use replace and expectedDigest for updates.",
+      "path": "operations/extension.install.json",
+      "bytes": 4803,
+      "sha256": "862db9660b7c6d0ddfe53aa2c3e1254c0d4a4a717f23c6b820c3248d916b7ce9"
+    },
+    "extension.list": {
+      "summary": "List independently installed third-party packages and their enabled state, source and immutable digest. Reads start no plugin or runtime. Use extension.describe to discover operation schemas and Skills.",
+      "path": "operations/extension.list.json",
+      "bytes": 2933,
+      "sha256": "4af06a8a7c11dbed53a9d9804d215708d7e6b6c0edacdf1bf2817a3daf24f86f"
+    },
+    "extension.manage": {
+      "summary": "Local person/operator: enable, disable or remove an installed third-party package at the expected digest. Existing native tasks, R sessions, project files and retained receipts are preserved.",
+      "path": "operations/extension.manage.json",
+      "bytes": 1207,
+      "sha256": "90a83550840d2d33d3d0c7e5db0dcd09de4752b0b829f65a0cac2f39dbdf5a07"
+    },
+    "extension.read": {
+      "summary": "Observe an original plugin invocation, including pending or unknown outcomes. Never reruns code. Only its original caller can read it.",
+      "path": "operations/extension.read.json",
+      "bytes": 2409,
+      "sha256": "81f219ef1ce3aa15a3d7bd5865a97e141ff5db3ab4629a1eef7928dcf9681d40"
+    },
     "feedback.read": {
       "summary": "Original business binding only: fetch one complete frozen feedback object using its original delivery/context and a stable fetchId. relatedDocumentId is a pointer: read its CURRENT version before conditional edit/save and preserve human changes. This owner-served receipt does not prove client return or understanding.",
       "path": "operations/feedback.read.json",
@@ -533,8 +587,8 @@
     "observation.snapshot": {
       "summary": "observation.snapshot",
       "path": "operations/observation.snapshot.json",
-      "bytes": 165030,
-      "sha256": "ee71c0bf7b912ad38bbbfc3ad5a797f1306f1eb821cdc30819d24b5d86e0867d"
+      "bytes": 165863,
+      "sha256": "3ac0beddb297dbd7ee9448f30655e5d9b4e8dd8cbe46a64ed815d133dddfa436"
     },
     "project.create": {
       "summary": "project.create",
@@ -605,8 +659,8 @@
     "project.work.read": {
       "summary": "Person at this machine only: read linked Agent sessions, retained native activity identities, current referenced files and the shared notes document. Source cursors and resource versions remain independent. Does not start an Agent, collector or Host.",
       "path": "operations/project.work.read.json",
-      "bytes": 22226,
-      "sha256": "fb1426f26fa7bbb5c01671832b58cac79aa708bc056d8a3cc8e6f0cfc249d9ab"
+      "bytes": 22262,
+      "sha256": "51d070968ec8b567765acecb7c8ddc83411fe222c469641b2679cc00a5cb1008"
     },
     "protocol.describe": {
       "summary": "protocol.describe",
@@ -683,8 +737,14 @@
     "session.grant": {
       "summary": "session.grant",
       "path": "operations/session.grant.json",
-      "bytes": 4767,
-      "sha256": "95564602b9006b5fe960bad93460916c1461f9578766d2fd95a1bccfd866b7a4"
+      "bytes": 5059,
+      "sha256": "d5d0e15b50349fbec4affa99ceb1b98c79a6dbdce048e1305f8cd8ad31a3fdd2"
+    },
+    "session.instructions": {
+      "summary": "Person at this machine or operator only: read a prompt for the person's own MCP client to connect itself to this existing project. Returns local launcher paths, never credential contents. Reading or copying grants no access, edits no client configuration and starts no runtime.",
+      "path": "operations/session.instructions.json",
+      "bytes": 1057,
+      "sha256": "acc5dba3651bdd6db317d7a3062fd0d7f3dff3e1514d6d51c00a017c3d050181"
     },
     "skill.list": {
       "summary": "List the application and enabled provider Skills shipped in the selected package. Skills guide discovery but do not grant authorization.",