@rho-workspace/rho 0.5.5 → 0.5.7

package/node_modules/hono/dist/middleware/etag/index.js

@@ -16,7 +16,8 @@ const RETAINED_304_HEADERS = [
 ];
 const stripWeak = (tag) => tag.replace(/^W\//, "");
 function etagMatches(etag, ifNoneMatch) {
-	return ifNoneMatch != null && ifNoneMatch.split(",").some((t) => stripWeak(t.trim()) === stripWeak(etag));
+	const expected = stripWeak(etag);
+	return ifNoneMatch?.match(/"[^"]*"/g)?.some((tag) => tag === expected) ?? false;
 }
 function initializeGenerator(generator) {
 	if (!generator) {
@@ -64,6 +65,7 @@ const etag = (options) => {
 			etag = weak ? `W/"${hash}"` : `"${hash}"`;
 		}
 		if (ifNoneMatch === "*" || etagMatches(etag, ifNoneMatch)) {
+			await res.body?.cancel();
 			c.res = new Response(null, {
 				status: 304,
 				statusText: "Not Modified",

package/node_modules/hono/dist/middleware/language/language.js

@@ -1,5 +1,5 @@
-import { parseAccept } from "../../utils/accept.js";
 import { getCookie, setCookie } from "../../helper/cookie/index.js";
+import { parseAccept } from "../../utils/accept.js";
 //#region src/middleware/language/language.ts
 const DEFAULT_OPTIONS = {
 	order: [

package/node_modules/hono/dist/middleware/pretty-json/index.js

@@ -31,6 +31,7 @@ const prettyJSON = (options) => {
 			} catch {
 				return;
 			}
+			await c.res.body?.cancel();
 			c.res = new Response(JSON.stringify(obj, null, options?.space ?? 2), c.res);
 			c.res.headers.delete("Content-Length");
 		}

package/node_modules/hono/dist/middleware/timing/timing.js

@@ -74,6 +74,7 @@ const timing = (config) => {
 		}
 	};
 };
+const quote = (s) => `"${s.replace(/[\\"]/g, "\\$&")}"`;
 /**
 * Set a metric for the timing middleware.
 *
@@ -96,11 +97,11 @@ const setMetric = (c, name, valueDescription, description, precision) => {
 		return;
 	}
 	if (typeof valueDescription === "number") {
-		const dur = valueDescription.toFixed(precision || 1);
-		const metric = description ? `${name};dur=${dur};desc="${description}"` : `${name};dur=${dur}`;
+		const dur = valueDescription.toFixed(precision ?? 1);
+		const metric = description ? `${name};dur=${dur};desc=${quote(description)}` : `${name};dur=${dur}`;
 		metrics.headers.push(metric);
 	} else {
-		const metric = valueDescription ? `${name};desc="${valueDescription}"` : `${name}`;
+		const metric = valueDescription ? `${name};desc=${quote(valueDescription)}` : `${name}`;
 		metrics.headers.push(metric);
 	}
 };

package/node_modules/hono/dist/utils/cookie.js

@@ -79,8 +79,8 @@ const parseSigned = async (cookie, secret, name) => {
 const _serialize = (name, value, opt = {}) => {
 	if (!validCookieNameRegEx.test(name)) throw new Error("Invalid cookie name");
 	let cookie = `${name}=${value}`;
-	if (name.startsWith("__Secure-") && !opt.secure) throw new Error("__Secure- Cookie must have Secure attributes");
-	if (name.startsWith("__Host-")) {
+	if (/^__secure-/i.test(name) && !opt.secure) throw new Error("__Secure- Cookie must have Secure attributes");
+	if (/^__host-/i.test(name)) {
 		if (!opt.secure) throw new Error("__Host- Cookie must have Secure attributes");
 		if (opt.path !== "/") throw new Error("__Host- Cookie must have Path attributes with \"/\"");
 		if (opt.domain) throw new Error("__Host- Cookie must not have Domain attributes");

package/node_modules/hono/dist/utils/mime.js

@@ -9,7 +9,7 @@ const getMimeType = (filename, mimes = baseMimes) => {
 	return mimes[match[1].toLowerCase()];
 };
 const getExtension = (mimeType) => {
-	const baseType = mimeType.split(";", 1)[0].trim();
+	const baseType = mimeType.split(";", 1)[0].trim().toLowerCase();
 	for (const ext in baseMimes) {
 		const stored = baseMimes[ext];
 		if (stored === mimeType || stored.split(";", 1)[0].trim() === baseType) return ext;

package/node_modules/hono/dist/utils/url.js

@@ -161,7 +161,7 @@ const _getQueryParam = (url, key, multiple) => {
 	const hashIndex = url.indexOf("#", 8);
 	if (hashIndex !== -1) url = url.slice(0, hashIndex);
 	let encoded;
-	if (!multiple && key && key.indexOf("%") === -1 && key.indexOf("+") === -1) {
+	if (!multiple && key && !/[%+&=]/.test(key)) {
 		const queryIndex = url.indexOf("?", 8);
 		let keyIndex = queryIndex;
 		if (keyIndex === -1) return;

package/node_modules/hono/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hono",
-  "version": "4.13.16",
+  "version": "4.13.17",
   "description": "Web framework built on Web Standards",
   "main": "dist/cjs/index.js",
   "type": "module",

package/node_modules/jose/dist/webapi/jwe/general/decrypt.js

@@ -13,9 +13,10 @@ async function generalDecrypt(jwe, key, options) {
     throw new JWEInvalid("JWE Recipients missing or incorrect type");
   if (!recipients.length)
     throw new JWEInvalid("JWE Recipients has no members");
-  let shared, sharedJwe, token;
+  const shared = prepareDecrypt(options);
+  let sharedJwe, token;
   try {
-    shared = prepareDecrypt(options), sharedJwe = snapshotSharedJWE(jwe), token = shareJWE(sharedJwe);
+    sharedJwe = snapshotSharedJWE(jwe), token = shareJWE(sharedJwe);
   } catch {
     throw new JWEDecryptionFailed();
   }

package/node_modules/jose/dist/webapi/jwks/remote.js

@@ -5,7 +5,7 @@ function isCloudflareWorkers() {
   return typeof WebSocketPair < "u" || typeof navigator < "u" && navigator.userAgent === "Cloudflare-Workers" || typeof EdgeRuntime < "u" && EdgeRuntime === "vercel";
 }
 let USER_AGENT;
-(typeof navigator > "u" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) && (USER_AGENT = "jose/v6.2.15");
+(typeof navigator > "u" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) && (USER_AGENT = "jose/v6.2.16");
 const customFetch = /* @__PURE__ */ Symbol();
 async function fetchJwks(url, headers, signal, fetchImpl = fetch) {
   const response = await fetchImpl(url, {

package/node_modules/jose/dist/webapi/jws/general/verify.js

@@ -22,15 +22,9 @@ async function generalVerify(jws, key, options) {
   const signatureEntries = Array.from(signatures);
   if (!signatureEntries.every(isObject))
     throw new JWSInvalid("JWS Signatures missing or incorrect type");
-  let shared;
-  try {
-    if (inputPayload === void 0)
-      throw new Error();
-    shared = prepareVerify(options);
-  } catch {
+  if (inputPayload === void 0)
     throw new JWSSignatureVerificationFailed();
-  }
-  const payload = inputPayload instanceof Uint8Array ? new Uint8Array(inputPayload) : inputPayload, candidates = signatureEntries.map((signature) => snapshotSignature(signature, payload)).filter((candidate) => candidate !== void 0);
+  const shared = prepareVerify(options), payload = inputPayload instanceof Uint8Array ? new Uint8Array(inputPayload) : inputPayload, candidates = signatureEntries.map((signature) => snapshotSignature(signature, payload)).filter((candidate) => candidate !== void 0);
   let payloadEncodings = 0;
   for (const [, , payloadEncoding] of candidates)
     if (payloadEncodings |= payloadEncoding, payloadEncodings === 3)

package/node_modules/jose/dist/webapi/lib/jwe_decrypt.js

@@ -1,7 +1,7 @@
 import { decrypt, generateCek } from "./content_encryption.js";
 import { decodeBase64url, encodeAsciiMember, parseJoseHeader, isDisjoint, isObject, validateCrit, validateAlgorithms, JWE_RECOGNIZED } from "./validate.js";
 import { JOSEAlgNotAllowed, JOSENotSupported, JWEInvalid } from "../util/errors.js";
-import { decryptKeyManagement } from "./key_management.js";
+import { decryptKeyManagement, validateMaxPBES2Count } from "./key_management.js";
 import { decoder } from "./buffer_utils.js";
 import { prepareKey } from "./key.js";
 import { JWE, isJWECEKTransport, jweAlgorithm, jweEncryption } from "./jwe_algorithms.js";
@@ -69,12 +69,17 @@ function shareJWE(jwe) {
   ];
 }
 function prepareDecrypt(options) {
+  const keyManagementAlgorithms = options && validateAlgorithms("keyManagementAlgorithms", options.keyManagementAlgorithms), contentEncryptionAlgorithms = options && validateAlgorithms("contentEncryptionAlgorithms", options.contentEncryptionAlgorithms), { crit, maxPBES2Count, maxDecompressedLength } = options ?? {};
+  validateMaxPBES2Count(maxPBES2Count);
+  const decompressionLimit = maxDecompressedLength ?? 25e4;
+  if (decompressionLimit !== 0 && decompressionLimit !== 1 / 0 && (!Number.isSafeInteger(decompressionLimit) || decompressionLimit < 1))
+    throw new TypeError("maxDecompressedLength must be 0, a positive safe integer, or Infinity");
   return [
-    options && validateAlgorithms("keyManagementAlgorithms", options.keyManagementAlgorithms),
-    options && validateAlgorithms("contentEncryptionAlgorithms", options.contentEncryptionAlgorithms),
-    options?.crit,
-    options?.maxPBES2Count,
-    options?.maxDecompressedLength
+    keyManagementAlgorithms,
+    contentEncryptionAlgorithms,
+    crit,
+    maxPBES2Count,
+    maxDecompressedLength
   ];
 }
 async function decryptJWE(jwe, shared, key, token = shareJWE(jwe)) {
@@ -145,8 +150,6 @@ async function decryptJWE(jwe, shared, key, token = shareJWE(jwe)) {
     const decompressionLimit = maxDecompressedLength ?? 25e4;
     if (decompressionLimit === 0)
       throw new JOSENotSupported('JWE "zip" (Compression Algorithm) Header Parameter is not supported.');
-    if (decompressionLimit !== 1 / 0 && (!Number.isSafeInteger(decompressionLimit) || decompressionLimit < 1))
-      throw new TypeError("maxDecompressedLength must be 0, a positive safe integer, or Infinity");
     plaintext = await decompress(plaintext, decompressionLimit).catch((cause) => {
       throw cause instanceof JWEInvalid ? cause : new JWEInvalid("Failed to decompress plaintext", { cause });
     });

package/node_modules/jose/dist/webapi/lib/key_management.js

@@ -111,7 +111,6 @@ async function decryptKeyManagement(entry, enc, key, encryptedKey, joseHeader, m
     case "PBKDF2": {
       if (typeof joseHeader.p2c != "number")
         throw new JWEInvalid('JOSE Header "p2c" (PBES2 Count) missing or invalid');
-      validateMaxPBES2Count(maxPBES2Count);
       const p2cLimit = maxPBES2Count ?? 1e4;
       if (joseHeader.p2c > p2cLimit)
         throw new JWEInvalid('JOSE Header "p2c" (PBES2 Count) out is of acceptable bounds');

package/node_modules/jose/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "6.2.15",
+  "version": "6.2.16",
   "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
   "keywords": [
     "akp",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rho-workspace/rho",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "type": "module",
   "description": "Rho local workspace service, scoped browser shell and headless client",
   "license": "AGPL-3.0-only",
@@ -76,13 +76,14 @@
     "@rho-workspace/plugin-files": "file:vendor/rho-workspace-plugin-files-0.5.1.tgz",
     "@rho-workspace/plugin-r": "file:vendor/rho-workspace-plugin-r-0.4.2.tgz",
     "@rho-workspace/plugin-requirements": "file:vendor/rho-workspace-plugin-requirements-0.4.2.tgz",
-    "@rho-workspace/plugin-tables": "file:vendor/rho-workspace-plugin-tables-0.5.0.tgz",
+    "@rho-workspace/plugin-tables": "file:vendor/rho-workspace-plugin-tables-0.5.2.tgz",
     "@rho-workspace/plugin-media": "file:vendor/rho-workspace-plugin-media-0.4.0.tgz",
     "@rho-workspace/plugin-charts": "file:vendor/rho-workspace-plugin-charts-0.4.0.tgz",
-    "@rho-workspace/plugin-agent": "file:vendor/rho-workspace-plugin-agent-0.4.29.tgz",
+    "@rho-workspace/plugin-agent": "file:vendor/rho-workspace-plugin-agent-0.4.33.tgz",
     "@rho-workspace/plugin-annotations": "file:vendor/rho-workspace-plugin-annotations-0.5.2.tgz",
     "@rho-workspace/plugin-console": "file:vendor/rho-workspace-plugin-console-0.3.1.tgz",
-    "@rho-workspace/plugin-kernel": "file:vendor/rho-workspace-plugin-kernel-0.5.5.tgz",
+    "@rho-workspace/plugin-kernel": "file:vendor/rho-workspace-plugin-kernel-0.5.13.tgz",
+    "@rho-workspace/plugin-figures": "file:vendor/rho-workspace-plugin-figures-0.5.1.tgz",
     "@rho-workspace/plugin-skills": "file:vendor/rho-workspace-plugin-skills-0.1.0.tgz"
   },
   "bundleDependencies": [
@@ -100,6 +101,7 @@
     "@rho-workspace/plugin-annotations",
     "@rho-workspace/plugin-console",
     "@rho-workspace/plugin-kernel",
+    "@rho-workspace/plugin-figures",
     "@rho-workspace/plugin-skills"
   ],
   "publishConfig": {

package/protocol/index.json

@@ -4,8 +4,8 @@
   "schemaVersion": 2,
   "shared": {
     "path": "operations/shared.json",
-    "bytes": 75412,
-    "sha256": "d71c814419bfab48fcc6fe8c60e498a9cf59c83725d88787e938396c8b12c9a8"
+    "bytes": 75434,
+    "sha256": "c1ef5858bc0662f02d42c19c8cefdabfc7c66a2944308d49991fa44ec2137442"
   },
   "operations": {
     "action.cancel": {
@@ -77,14 +77,14 @@
     "agent.sessions.list": {
       "summary": "agent.sessions.list",
       "path": "operations/agent.sessions.list.json",
-      "bytes": 2202,
-      "sha256": "43d0306205db0acba77d71280e8b5aa23a47cbed66c05c8710a39e6285fd5e3b"
+      "bytes": 3632,
+      "sha256": "0e9e07210fa6acd13d0805e12d9fe8aa87ae4a1c5cf4910e54045937de2f074a"
     },
     "agent.sessions.read": {
       "summary": "agent.sessions.read",
       "path": "operations/agent.sessions.read.json",
-      "bytes": 6355,
-      "sha256": "1804a39c7edaf0caaf328404936aab0cd4d3d9e1731d7d03a86cc57c642d9c10"
+      "bytes": 7745,
+      "sha256": "fea43a16a670bd36eb1fd7c616cc398c2a66bc881ee6b6690e014b2cd5c418ae"
     },
     "annotation.create": {
       "summary": "annotation.create",
@@ -167,8 +167,8 @@
     "capability.list": {
       "summary": "Read registered actions and components. Does not start R or a Core Host.",
       "path": "operations/capability.list.json",
-      "bytes": 23255,
-      "sha256": "8fcc56faff6e2c4102945d8a532c987dabbc69f1833371cf8c1f149dbec92dda"
+      "bytes": 35886,
+      "sha256": "a31c52e26ef96c4bcb730fcaf194043129f9f9f57dcecd0be3f54e2f83ebd051"
     },
     "capability.resolve": {
       "summary": "Fetch selected relevant Skills with complete owner contracts, whole objects only. Pages pin catalog/bundle/caller; knownRefs only reuse currently available immutable bodies.",
@@ -179,8 +179,14 @@
     "composition.apply": {
       "summary": "composition.apply",
       "path": "operations/composition.apply.json",
-      "bytes": 47304,
-      "sha256": "bb67f1d1ad49ae58809918ee5a4a2da63aa10c82884172a0bf353668753974ce"
+      "bytes": 47492,
+      "sha256": "7f7c106b6569c39551c28573f3a5b381f5efcbe6cf93f27f7d90c1750375cd9c"
+    },
+    "composition.delete": {
+      "summary": "Delete an empty Studio workspace layout only, never the project directory, documents, resources, conversations or running sessions. Requires its observed expectedVersion and a stable changeId. The same request returns its original receipt without deleting a recreated workspace. Nonempty, conversation and active-task layouts are refused. The deleted layout and its history remain readable with composition.read and recoverable with composition.undo; it is omitted from active workspace lists. Recreating it uses a conditional composition.apply replacement at its retained version.",
+      "path": "operations/composition.delete.json",
+      "bytes": 26137,
+      "sha256": "1e1b1a50ccdc2b2069e3157549bdd04809485a1fdc4d3fe76bef819948fa196a"
     },
     "composition.put": {
       "summary": "composition.put",
@@ -191,14 +197,14 @@
     "composition.read": {
       "summary": "composition.read",
       "path": "operations/composition.read.json",
-      "bytes": 32911,
-      "sha256": "ed2193fe748d87dd6c4be08e2cf01e14c4c14e98977f566dce304d41f72f48e6"
+      "bytes": 33131,
+      "sha256": "adce3928d6b297cdce3963650f2601f52f35444a5f54df375a005687c7f6b4b5"
     },
     "composition.undo": {
       "summary": "composition.undo",
       "path": "operations/composition.undo.json",
-      "bytes": 25368,
-      "sha256": "fadd401c6a5a98ea5c66755603bccd36353566875acf8a29fd7d75ec8cc2bc64"
+      "bytes": 25556,
+      "sha256": "7e4f918650943b44784616d154ed1f6a7f355870638a14d8efe7314a8bf30950"
     },
     "console.events": {
       "summary": "Who ran each Console command and when, newest first, for the timeline: the folder, how it ended and its first line. No output.",
@@ -242,17 +248,29 @@
       "bytes": 7719,
       "sha256": "f3ca05f37c9dc2d272abe2a2f8afbc6445aee8f3f086d7a88a15dbf95290cf3b"
     },
+    "conversation.agents.add": {
+      "summary": "Person at this machine only: add an ACP Agent for new conversations in every project, given its program (on PATH or a path) and arguments, such as [\"hermes\", \"acp\"]. Rho starts it once in this project to read what it offers, then removes that session and ends the process; no message is sent. It is kept only when it answered. Adding the same command again checks it again.",
+      "path": "operations/conversation.agents.add.json",
+      "bytes": 8835,
+      "sha256": "64268a3115d3efbee3770db5f76514588d7c367cad677485740489c7cfe94064"
+    },
+    "conversation.agents.remove": {
+      "summary": "Person at this machine only: remove an added ACP Agent from the Agents new conversations can use. Its conversations stay and continue with the command they started with.",
+      "path": "operations/conversation.agents.remove.json",
+      "bytes": 8524,
+      "sha256": "549e4457d67c5a231db7b9e161582d87bdb6e0296d0957eb000485642c56a751"
+    },
     "conversation.configure": {
       "summary": "Person at this machine only: change one setting the Agent offers (model, effort, mode…) for the next messages of a conversation started in Rho. An open session changes now; otherwise the choice is applied when the session next opens. Refused while a message is being answered.",
       "path": "operations/conversation.configure.json",
-      "bytes": 20110,
-      "sha256": "a92723b3e054d81050be0edb5531b2f4621d30c4d3b8712c91959355d3a33cf7"
+      "bytes": 20885,
+      "sha256": "8a745fb3600d7ac64fad3812d856f7b135a2d2c3ea2eca65d922cd6d48c1eba7"
     },
     "conversation.decide": {
       "summary": "Person at this machine only: say to use an answer, or that it needs changes and why. The decision holds for the file versions that message kept when it was given and says nothing of later versions. A new decision supersedes the one before; none is removed. Refused while the Agent is still answering.",
       "path": "operations/conversation.decide.json",
-      "bytes": 33825,
-      "sha256": "366b88fc2102cd7ea25aa753c5e8f17780a2d78269a4e152786a97b0a0c22dc6"
+      "bytes": 40542,
+      "sha256": "e6a6a3e853044170478db9947af86e31a814d4db32ce537e8eb1ceef014b6719"
     },
     "conversation.delete": {
       "summary": "Person at this machine only: delete Rho's record of a conversation in the trash. The Agent's own session files are not touched. Repeating the request that started it is then refused.",
@@ -263,68 +281,68 @@
     "conversation.list": {
       "summary": "Person at this machine only: list the conversations started in Rho in this project, or those in its trash, with each one's Agent, last model, choices and reported usage. Reading starts nothing.",
       "path": "operations/conversation.list.json",
-      "bytes": 6767,
-      "sha256": "44c0fcaaf3b0775db9d3f969218a0b9516ea4d55f79d6d9737c34be368bda7a1"
+      "bytes": 7600,
+      "sha256": "2e291ce118cab1c43436e1e5ed22a916923f0089696f32dfa5ead04c99be5ec0"
     },
     "conversation.permission": {
       "summary": "Person at this machine only: record an offered choice for a pending Agent permission request. The original request identity is retained; repeated identical choices do not respond twice.",
       "path": "operations/conversation.permission.json",
-      "bytes": 33644,
-      "sha256": "85bc65c9209d43a75b49542d10f5d82c2998307ef2f8b3727a94ec6ae1bffc56"
+      "bytes": 40361,
+      "sha256": "10fc1163eaa07d65e62754b439a340b96558b1751d45920cfdab49d24e280c9d"
     },
     "conversation.read": {
       "summary": "Read a conversation started in Rho: the person's messages, the Agent's visible text and tool steps, and how each message ended. Reading starts and resumes nothing.",
       "path": "operations/conversation.read.json",
-      "bytes": 48752,
-      "sha256": "0ae9de68afa2da8419f5d723eca3f2ea8db9d1e0936a8dd1e92284d8bcc27805"
+      "bytes": 55861,
+      "sha256": "aaefd15ff9f411ef2283f23f3cdcd7d86651fe926f3dfad26ffd57a7dc3aae2e"
     },
     "conversation.restore": {
       "summary": "Person at this machine only: return a conversation from the trash to the project's conversations, within the project's conversation limit.",
       "path": "operations/conversation.restore.json",
-      "bytes": 6261,
-      "sha256": "282449bc3f84125f2e6d37ec391596aa03e666b1fac06774454cd830aa9d69e4"
+      "bytes": 7036,
+      "sha256": "184780ef30bc8d0a835c94b7617bac9abc1da220e8fc4e1fbaae6a72188e4238"
     },
     "conversation.send": {
       "summary": "Person at this machine only: send the next message to a conversation started in Rho. A continuationOf links a new message to the latest confirmed Agent turn-limit stop; the original request is not resent. Refused while the previous message is being answered. A repeated changeId with the same input returns the original message.",
       "path": "operations/conversation.send.json",
-      "bytes": 33931,
-      "sha256": "031bbfe0e76b4e932969743953f7664a283b85b75dc3fe55fca6af45ac4d1e4c"
+      "bytes": 42392,
+      "sha256": "b9e3b7ee748f5b70d31e72e008cf6c354c181bedf2a9811a0cbcb45e411dcd97"
     },
     "conversation.settings.check": {
       "summary": "Person at this machine only: start the chosen Agent in this project to read the settings it offers, then remove that session and end the process. No message is sent; one check per Agent runs at a time.",
       "path": "operations/conversation.settings.check.json",
-      "bytes": 14555,
-      "sha256": "0aba6e7c8dc96f20aa20db2bea94238d370774450c70a19cabdec344a2eda88e"
+      "bytes": 8584,
+      "sha256": "beef9711442ebaf076befbb402fcd288a9156d995073fd4378ce48e13cbe1383"
     },
     "conversation.settings.read": {
       "summary": "Person at this machine only: read the Agent and settings chosen for new conversations and what each Agent last offered. Reading starts nothing.",
       "path": "operations/conversation.settings.read.json",
-      "bytes": 14360,
-      "sha256": "04d5f1cf71ee88946dc0bbe7bef7d3864e6cc6e705304b98e19ad2351c999ca7"
+      "bytes": 8376,
+      "sha256": "7491b0cf930c244f0573d57ce727bbb552b4b03d117752441e49b44398c5e4c2"
     },
     "conversation.settings.update": {
       "summary": "Person at this machine only: choose the Agent and its settings for new conversations, among the values that Agent last offered, and whether a model describes the files a message writes. A stale expectedVersion is refused.",
       "path": "operations/conversation.settings.update.json",
-      "bytes": 16639,
-      "sha256": "20612281dff10b3a2f121be5a060f5e996dd7e2ccf5f2b06406bae87a85bc1ed"
+      "bytes": 9742,
+      "sha256": "91282a4971253c0ebdceb72561e5df9a8524ccac990de7aa24eed688254e0970"
     },
     "conversation.start": {
-      "summary": "Person at this machine only: start a conversation with the selected Claude Code or Codex Agent in this project. Rho selects the Agent plugin backend, attaches this project's MCP grant and records the message before sending it. Without backend or config, the person's saved Agent and settings are used and recorded with the conversation. A repeated changeId with the same text returns the original conversation and starts nothing.",
+      "summary": "Person at this machine only: start a conversation with the selected Claude Code or Codex Agent in this project. Rho selects the Agent plugin backend, attaches this project's MCP grant and records the message before sending it. Without backend or config, the person's saved Agent and settings are used and recorded with the conversation. A repeated changeId with the same text returns the original conversation and starts nothing. With continue, the message continues an Agent session listed by agent.sessions.list (one started in a terminal, an editor or the Agent's own app) through that same session, or through a copy of it with copy; a session another live window holds open is refused unless copied.",
       "path": "operations/conversation.start.json",
-      "bytes": 34318,
-      "sha256": "b691ed1d000206bbaa65289e7e255d53fc5552ace1ad180b4f4d8cf2020bbb96"
+      "bytes": 43418,
+      "sha256": "51c27c4a2e7890c879b7ed292b275048d81849afe7771ff19d639d4b2d1ae857"
     },
     "conversation.stop": {
       "summary": "Person at this machine only: ask the original Agent to stop answering one message. ACP cancellation is confirmed by the original prompt response; a lost connection keeps the outcome unknown. Legacy CLI conversations confirm process exit. Steps already taken stay done.",
       "path": "operations/conversation.stop.json",
-      "bytes": 33471,
-      "sha256": "0755e7ba9a7c1a516d0158f0f53656f1635970ab767b0455fe786fdb1535c441"
+      "bytes": 40188,
+      "sha256": "389d3601657c361ab37144cacfbd772158e439a09c4478bba69a77c1e41d2242"
     },
     "conversation.trash": {
       "summary": "Person at this machine only: move a conversation that is not being answered to the trash. It is kept whole and not continued until restored; an idle connection to its Agent ends.",
       "path": "operations/conversation.trash.json",
-      "bytes": 6299,
-      "sha256": "8ecc3aaf8da2cc307b65e7015a17ae1ec096451859a06721d884e1d519cb4540"
+      "bytes": 7074,
+      "sha256": "643d239b90f97bc69d5f0884b69f51c547f1393ae0cff4a9b9fcf2d9e9763051"
     },
     "data.compare": {
       "summary": "Join two explicit table versions using declared keys, namespaces, fields and join policy. Scientific comparability remains the project responsibility.",
@@ -431,20 +449,20 @@
     "extension.describe": {
       "summary": "Read an installed third-party package manifest, operation input schemas, required Rho methods, Skills and views. Read its Skill with extension.content before use. Disabled packages cannot run.",
       "path": "operations/extension.describe.json",
-      "bytes": 4684,
-      "sha256": "441616d6e634daa1ce2d058f6d0b0bd7ccd494de33f01a3dae3d6c344dc6f1a9"
+      "bytes": 5597,
+      "sha256": "570477ac19be996a537ce69da4b5ed534a69960d9a7d161d38f6d45118ca2067"
     },
     "extension.install": {
       "summary": "Local person/operator: install a trusted prebuilt npm package, local folder, tarball, or Git source. Lifecycle scripts are disabled. Replacement stages and checks the new package before switching; use replace and expectedDigest for updates.",
       "path": "operations/extension.install.json",
-      "bytes": 4803,
-      "sha256": "862db9660b7c6d0ddfe53aa2c3e1254c0d4a4a717f23c6b820c3248d916b7ce9"
+      "bytes": 6286,
+      "sha256": "2bb1282e6afcfae985379bbdb8cfdda841ec8d13add57e6084534c07fca7e295"
     },
     "extension.list": {
-      "summary": "List independently installed third-party packages and their enabled state, source and immutable digest. Reads start no plugin or runtime. Use extension.describe to discover operation schemas and Skills.",
+      "summary": "List installed third-party packages, the bundled directory and retained remote market indexes. Listing makes no network request and starts no plugin or runtime. Use extension.describe for installed operation schemas and Skills.",
       "path": "operations/extension.list.json",
-      "bytes": 2933,
-      "sha256": "4af06a8a7c11dbed53a9d9804d215708d7e6b6c0edacdf1bf2817a3daf24f86f"
+      "bytes": 7672,
+      "sha256": "68e5ef4bbdaeebffa00dc6879f438a95b49980cb6bb157dadba02c24398acbeb"
     },
     "extension.manage": {
       "summary": "Local person/operator: enable, disable or remove an installed third-party package at the expected digest. Existing native tasks, R sessions, project files and retained receipts are preserved.",
@@ -452,6 +470,12 @@
       "bytes": 1207,
       "sha256": "90a83550840d2d33d3d0c7e5db0dcd09de4752b0b829f65a0cac2f39dbdf5a07"
     },
+    "extension.market.change": {
+      "summary": "Local person/operator: add an HTTPS plugin market index, refresh it explicitly, or remove its source. Failed refresh retains the last valid index; removal preserves installed plugins. Listing never refreshes a source.",
+      "path": "operations/extension.market.change.json",
+      "bytes": 5453,
+      "sha256": "b6f09b901587d5d028370c3f26ce98ba0fae13d91d60fd09ddc9716db799a9f7"
+    },
     "extension.read": {
       "summary": "Observe an original plugin invocation, including pending or unknown outcomes. Never reruns code. Only its original caller can read it.",
       "path": "operations/extension.read.json",
@@ -476,6 +500,18 @@
       "bytes": 9488,
       "sha256": "4285b03a126e4f7ebd09748e557fc944700d43c804d870142cd84c93653131c1"
     },
+    "figure.read": {
+      "summary": "What a plot a cell drew shows: its layers, mappings, panels and data, the rows behind marks, and the marks people and Agents selected.",
+      "path": "operations/figure.read.json",
+      "bytes": 6256,
+      "sha256": "a89bca2a797588561949356f05931726b57dc84a796fbc1f249b84edf405f582"
+    },
+    "figure.select": {
+      "summary": "Keeps a set of a figure's marks with a note, shown highlighted in the plot; the plot and its data do not change.",
+      "path": "operations/figure.select.json",
+      "bytes": 3633,
+      "sha256": "a5f2648ad5beeaa71dd39158405d08229fa3e17e78eac6877c5649d9524525d7"
+    },
     "interaction.selection.read": {
       "summary": "interaction.selection.read",
       "path": "operations/interaction.selection.read.json",
@@ -503,8 +539,8 @@
     "kernel.interrupt": {
       "summary": "Interrupt one cell: a running cell stops and its session and values stay; a waiting cell is not run. A cell that has ended is returned unchanged.",
       "path": "operations/kernel.interrupt.json",
-      "bytes": 6360,
-      "sha256": "79636eab4cc83f34976c3a4097be5ee13777b17765e7955d55807a800eab287b"
+      "bytes": 9955,
+      "sha256": "3e03293fe6aaaf8e73d653e16cecf6f4f5b57d787631714f5baa93f7c6c6ac35"
     },
     "kernel.place.check": {
       "summary": "Connect to a place on a server and report its system, machine, the folder after its setup lines, and R and Python there. Runs the place's setup lines; starts no session.",
@@ -545,14 +581,14 @@
     "kernel.read": {
       "summary": "The live sessions and their cells, oldest cell first: code, purpose, who ran it, what it printed, its plots and how it ended, and each session's variables. Reading never starts a session.",
       "path": "operations/kernel.read.json",
-      "bytes": 13302,
-      "sha256": "cfbc1a18a6c1414d45bbc9ba3baf7ddc009baad91f15194031f5de902f60d29f"
+      "bytes": 17135,
+      "sha256": "944cc4dd59cce979338173b1c6f13c8d28dca5889cd28f4d28f5250f1a9fa141"
     },
     "kernel.run": {
       "summary": "Run a cell of R or Python in the project's live session of that language, which the Agent and the person share: what one cell defines stays for the next. Starts the session when none is live, on this machine or at a place on one of the person's servers (place, or where kernel.places says that language runs next). interpreter names the program a session on this machine starts with, in a folder of the project such as .venv/bin/python; the project keeps it for that language's later sessions, and each cell records the program and version that ran it. The same changeId from the same caller returns the same cell and never runs it twice. waitMs waits for the cell to end.",
       "path": "operations/kernel.run.json",
-      "bytes": 13162,
-      "sha256": "f6a48db022b54b204f5c685fdb16737caf6dfa973cbd5184cbbb877a4032bbb5"
+      "bytes": 16757,
+      "sha256": "728230e62d3b4b2c279f626cb734dec203b4f2043d00e4bae8144080ba7978df"
     },
     "kernel.server.skill": {
       "summary": "One skill bound to a server, as its file reads now: how that server is used. Read it before naming a place there or running work on it.",
@@ -587,8 +623,8 @@
     "observation.snapshot": {
       "summary": "observation.snapshot",
       "path": "operations/observation.snapshot.json",
-      "bytes": 165030,
-      "sha256": "ee71c0bf7b912ad38bbbfc3ad5a797f1306f1eb821cdc30819d24b5d86e0867d"
+      "bytes": 180932,
+      "sha256": "0772088169eaa4421be046b0bc783ceb2e1996e7fe9d9109bd6667c25f7c4bca"
     },
     "project.create": {
       "summary": "project.create",
@@ -629,8 +665,8 @@
     "project.openFile": {
       "summary": "Open one text file from the selected project as a document and place it in the person's own layout in one conditional step, so a person can see and edit their own source files without an Agent. Accepts a project-relative path or the @<sourceId>/<path> reference the listing returns; it executes nothing.",
       "path": "operations/project.openFile.json",
-      "bytes": 39369,
-      "sha256": "f995dc4e4355fa368f65933486be1a8b4830aa39e95578be0ec5fa797ebc77ec"
+      "bytes": 39589,
+      "sha256": "045659b998a532f8721415f10559695e50c8e65bcd891bc213fda75f1076c586"
     },
     "project.pick": {
       "summary": "project.pick",
@@ -737,8 +773,14 @@
     "session.grant": {
       "summary": "session.grant",
       "path": "operations/session.grant.json",
-      "bytes": 5059,
-      "sha256": "d5d0e15b50349fbec4affa99ceb1b98c79a6dbdce048e1305f8cd8ad31a3fdd2"
+      "bytes": 5188,
+      "sha256": "2e23b33da965d9085eddabde5a22e5d25b3eb2c90adb438905b4616e3f36559b"
+    },
+    "session.instructions": {
+      "summary": "Person at this machine or operator only: read a prompt for the person's own MCP client to connect itself to this existing project. Returns local launcher paths, never credential contents. Reading or copying grants no access, edits no client configuration and starts no runtime.",
+      "path": "operations/session.instructions.json",
+      "bytes": 1057,
+      "sha256": "acc5dba3651bdd6db317d7a3062fd0d7f3dff3e1514d6d51c00a017c3d050181"
     },
     "skill.list": {
       "summary": "List the application and enabled provider Skills shipped in the selected package. Skills guide discovery but do not grant authorization.",
@@ -809,8 +851,8 @@
     "view.close": {
       "summary": "view.close",
       "path": "operations/view.close.json",
-      "bytes": 33232,
-      "sha256": "55c3de5d21493a691340739f7786ee4d111f74fa3a814235681a92d65a904082"
+      "bytes": 33452,
+      "sha256": "50be16f1f9f36920447a99c71dbbfc143726aa0edca47fe537954c163dd586ef"
     },
     "view.observations.read": {
       "summary": "view.observations.read",
@@ -827,8 +869,8 @@
     "view.protection.set": {
       "summary": "view.protection.set",
       "path": "operations/view.protection.set.json",
-      "bytes": 25562,
-      "sha256": "d8a8168a41d40c7294f57170986cdb6c138dfdd134f910d6771d7e82b7da0ed9"
+      "bytes": 25750,
+      "sha256": "46b70dca9e4a11f430f8c809aa70f982ba7bc387139c8668d24068b893089c75"
     },
     "workspace.enhance": {
       "summary": "Assigned presenter only: conditional display emphasis/title/plain Agent note using exact current generation, witness and observation. Does not modify business resources, feedback or protection.",