@robota-sdk/agent-ui-web 3.2.1 → 3.3.1

package/dist/index.cjs

@@ -21,6 +21,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
+let _robota_sdk_agent_transport = require("@robota-sdk/agent-transport");
 let react = require("react");
 react = __toESM(react, 1);
 let _robota_sdk_agent_transport_client = require("@robota-sdk/agent-transport/client");
@@ -126,12 +127,12 @@ function askResponse(id, response) {
 //#endregion
 //#region src/hooks/ui-intent-state.ts
 /**
-* CMD-004 Stage D — how the GUI surface answers a `ui_intent`.
+* How the GUI surface answers a `ui_intent`.
 *
 * The server requester-routes `ui_intent`, so everything that arrives here was asked for by THIS
 * surface and must be answered visibly. An intent with a GUI screen opens it (the session picker is
-* the session sidebar, #3189; settings and the plugin manager both open the Settings modal, #3282
-* §4a/§4 part b-2; the agent switcher is a sheet, #3282 §4 part b-3). #3282 §4e: an intent whose
+* the session sidebar; settings and the plugin manager both open the Settings modal; the agent
+* switcher is a sheet). An intent whose
 * command is on the GUI's exclusion list never reaches here at all (`excluded-commands.ts` catches it
 * before the session is asked) — this module only answers a screen this HOST cannot back even though
 * the GUI knows how to render it (the session picker, when the host cannot list sessions), or a kind
@@ -161,7 +162,7 @@ function guiScreenForUiIntent(intent) {
 * Describe one intent for this surface: a plain, honest sentence for a screen this HOST cannot back
 * right now (a session picker with no session list), the `/theme` exclusion this intent defensively
 * reuses, or an unrecognized future kind. Never called for `show-settings`, `show-plugin-manager` or
-* `show-agent-switcher` — all three always have a screen now (#3282 §4a, §4 part b-2, §4 part b-3) —
+* `show-agent-switcher` — all three always have a screen now —
 * but their cases are left out of this switch rather than kept as dead branches that would claim
 * otherwise; an unknown wire-level kind (a newer host) still yields an explicit notice naming the raw
 * kind, so the "never a silent no-op" floor holds for future intents too.
@@ -265,7 +266,7 @@ function createWsSessionClient(url, callbacks) {
 //#endregion
 //#region src/hooks/server-message-handling.ts
 /**
-* ARCH-2164: exhaustive ownership for every decoded server variant on the shared GUI surface.
+* Exhaustive ownership for every decoded server variant on the shared GUI surface.
 * Adding a wire variant without deciding its GUI disposition is a compile error instead of a silent
 * reducer omission. `intentionally-not-rendered` is an explicit disposition for server-side query
 * snapshots and domain events that this session/usage surface does not currently visualize.
@@ -332,6 +333,7 @@ const SERVER_MESSAGE_HANDLING = {
 	background_task_control_result: "visible-notice",
 	protocol_error: "visible-notice",
 	resume_gap: "transport-control",
+	surface_role: "reducer-state",
 	settings: "reducer-state",
 	settings_error: "reducer-state"
 };
@@ -343,10 +345,10 @@ function nextRequestId$7(prefix) {
 	return `${prefix}_${requestCounter$7}_${Date.now()}`;
 }
 /**
-* #3282 §4 part b-3: the agent switcher sheet's own correlated request/response state, the same
+* The agent switcher sheet's own correlated request/response state, the same
 * shape `useSettingsState` already uses for `get-settings`/`update-settings` — independent from the
 * chat conversation, because choosing an agent is answered by the sheet's own confirmation line
-* ("Default agent: Explore"), never a conversation card (issue #3282 §4's decided design).
+* ("Default agent: Explore"), never a conversation card.
 *
 * `openAgentSwitcher` re-fetches every time (`/agent` bare, or reopening after a close), so a change
 * made elsewhere reaches an open-then-reopened sheet, matching `useSettingsState`'s own reasoning.
@@ -426,6 +428,7 @@ function nextRequestId$6(prefix) {
 	return `${prefix}_${requestCounter$6}_${Date.now()}`;
 }
 const CONNECTION_CLOSED = "The connection to the session closed.";
+const READ_ONLY = "This session is read-only.";
 /**
 * The key a finished call's app view is read and called by, taken from the tool row's `appView`
 * reference; `undefined` when the row gives none. Everything outside this module treats it as an
@@ -457,7 +460,7 @@ function callAppToolMessage(requestId, viewKey, name, args) {
 * keeps its own entry. A reply that lost its connection never arrives: the owner of the connection
 * rejects every outstanding request when it drops, is replaced or goes away (`rejectPendingAppRequests`).
 */
-function useAppViewRequests(send, isConnected) {
+function useAppViewRequests(send, isConnected, isObserving) {
 	const pendingRef = (0, react.useRef)(/* @__PURE__ */ new Map());
 	const [requestOwner] = (0, react.useState)(() => nextRequestId$6("app_request"));
 	const rejectPendingAppRequests = (0, react.useCallback)((reason = CONNECTION_CLOSED) => {
@@ -473,6 +476,10 @@ function useAppViewRequests(send, isConnected) {
 			reject(/* @__PURE__ */ new Error(signal?.aborted ? "The app view closed." : CONNECTION_CLOSED));
 			return;
 		}
+		if (isObserving()) {
+			reject(/* @__PURE__ */ new Error(READ_ONLY));
+			return;
+		}
 		const requestId = nextRequestId$6(`${requestOwner}_${prefix}`);
 		const dispose = () => signal?.removeEventListener("abort", abort);
 		const abort = () => {
@@ -491,6 +498,7 @@ function useAppViewRequests(send, isConnected) {
 		}
 	}), [
 		isConnected,
+		isObserving,
 		requestOwner,
 		send
 	]);
@@ -702,7 +710,7 @@ function nextRequestId$4() {
 	return `model_list_${requestCounter$4}_${Date.now()}`;
 }
 /**
-* #3282 §2 (part 2) — the model list the model control's pop-up menu is built from, requested on
+* The model list the model control's pop-up menu is built from, requested on
 * demand (`list-models`) and correlated by `requestId` (mirrors `usePersonalUsageState`'s pattern) so
 * a reply to an older request — one already superseded by a newer one, e.g. across a reconnect — is
 * never applied over the list a still-open menu is currently showing.
@@ -827,7 +835,7 @@ function nextRequestId$2(prefix) {
 	return `${prefix}_${requestCounter$2}_${Date.now()}`;
 }
 /**
-* #3282 §4c — the Project panel's correlated request/response state (status, one file's diff, project
+* The Project panel's correlated request/response state (status, one file's diff, project
 * memory), independent from chat state. Mirrors `usePersonalUsageState`'s shape: a status per read, a
 * `requestId` ref that drops a stale reply (a diff request superseded by clicking another file before
 * the first answered), and a request function per read.
@@ -913,15 +921,15 @@ function useProjectPanelState(send) {
 //#endregion
 //#region src/hooks/use-schedules-state.ts
 /**
-* #3282 §4 part b-3: the Agents panel's "Scheduled" group. No `requestId` correlates
+* The Agents panel's "Scheduled" group. No `requestId` correlates
 * `get-background-tasks`/`background_tasks` (the message carries none — see `wire-messages.ts`), so
 * this owns that whole message type for the GUI: every reply is a full refresh of the roster,
 * filtered server-side to `kind: 'scheduled'` (the same tasks `/schedule list` shows).
 *
 * Pause/resume send the SAME `command` text `/schedule pause <id>` / `/schedule resume <id>` runs.
 * Delete sends the existing `cancel-background-task` write — the same one Stop already uses for any
-* other background-task kind (#3288/#3332) — since a schedule IS a background task, and cancelling
-* one is permanent (distinct from the reversible pause), matching #3282 §4's "Delete…" requirement.
+* other background-task kind — since a schedule IS a background task, and cancelling
+* one is permanent (distinct from the reversible pause).
 */
 function useSchedulesState(send) {
 	const [scheduledTasks, setScheduledTasks] = (0, react.useState)([]);
@@ -999,7 +1007,7 @@ function keepsSessionsLive(listing) {
 	return listing.sessions.some((row) => typeof row.live === "boolean");
 }
 /**
-* Issue #3280 §5: a desktop Reconnect reloads the page, which loses every bit of JS state — so the
+* A desktop Reconnect reloads the page, which loses every bit of JS state — so the
 * session to go back to cannot live in a ref like `lastSwitchedIdRef` below. `sessionStorage` survives
 * the reload (and only that tab), so it carries the id across it. Namespaced so a page hosting other
 * state under the same origin does not collide.
@@ -1036,14 +1044,14 @@ function initialSidebarOpen() {
 	return window.matchMedia("(min-width: 768px)").matches;
 }
 /**
-* #3189 — the host's session list beside the conversation: requests correlated by id (the latest
+* The host's session list beside the conversation: requests correlated by id (the latest
 * wins), the start/switch commands, and whether the sidebar is shown.
 *
 * A host that keeps sessions live binds each connection to its own session and puts a new connection
 * on its primary one. After a reconnect to such a host this surface goes back to the session it was
 * on; an older host has one session for everyone, so there is nothing to go back to.
 */
-function useSessionDirectoryState(send) {
+function useSessionDirectoryState(send, isObserving) {
 	const { storage: { browserNamespace } } = useProductIdentity();
 	const [sessionListing, setSessionListing] = (0, react.useState)(null);
 	const [sessionsError, setSessionsError] = (0, react.useState)(null);
@@ -1094,6 +1102,7 @@ function useSessionDirectoryState(send) {
 		if (target === null) return;
 		clearStoredRestoreId(browserNamespace);
 		if (target === listing.currentSessionId) return;
+		if (isObserving()) return;
 		if (!keepsSessionsLive(listing)) return;
 		if (!listing.sessions.some((row) => row.id === target)) return;
 		send({
@@ -1101,7 +1110,11 @@ function useSessionDirectoryState(send) {
 			sessionId: target,
 			requestId: nextRequestId$1("session_change")
 		});
-	}, [send, browserNamespace]);
+	}, [
+		send,
+		browserNamespace,
+		isObserving
+	]);
 	return {
 		sessionListing,
 		sessionsError,
@@ -1150,12 +1163,12 @@ function nextRequestId(prefix) {
 	return `${prefix}_${requestCounter}_${Date.now()}`;
 }
 /**
-* #3282 §4a: the Settings screen's own correlated request/response state, independent from chat
+* The Settings screen's own correlated request/response state, independent from chat
 * state — the same shape `usePersonalUsageState` already uses for `get-personal-usage-report`.
 *
 * `openSettings` re-fetches every time (opening from the gear, `/settings`, or reopening after a
 * close): the simplest correct way for a change made elsewhere — another typed command, another
-* client — to reach an open-then-reopened screen, per #3282 §4's "pick the simplest correct option."
+* client — to reach an open-then-reopened screen.
 *
 * A failed UPDATE never touches `settingsSnapshot`, so a control bound to it shows the value it had
 * before the write — "a failed write leaves the control at its previous value" — while
@@ -1223,7 +1236,7 @@ function useSettingsState(send) {
 //#endregion
 //#region src/hooks/useSessionClient.ts
 /**
-* GUI-005 — the transport-neutral session reducer for the GUI presentation layer. Reconstructs conversation
+* The transport-neutral session reducer for the GUI presentation layer. Reconstructs conversation
 * state from the wire `TServerMessage` stream, independent of HOW the bytes arrive (a `TMakeSessionClient`
 * factory over `{onMessage, onStatusChange}`). The core is **generic over its status type** (default
 * `TConnectionStatus`) so a surface with extra connection states (e.g. the browser WebRTC surface) can widen it
@@ -1263,7 +1276,7 @@ function pushToolStartSegment(segments, tool) {
 	}];
 }
 /**
-* #3288: attribute a `tool_end` to its call by executionId first — two same-named parallel calls
+* Attribute a `tool_end` to its call by executionId first — two same-named parallel calls
 * can finish out of start order, and matching by name+running alone would close whichever running
 * call of that name is found first, not the one that actually finished. Falls back to name+running
 * only when the event carries no executionId (legacy fixtures / hosts that predate it).
@@ -1320,7 +1333,7 @@ function applyToolEndToSegments(segments, state) {
 	});
 }
 /**
-* #3288: the files an Edit/Write call touched during the turn, aggregated by path — the "Changed
+* The files an Edit/Write call touched during the turn, aggregated by path — the "Changed
 * files" row's data. `diffLines` keeps the LATEST edit's diff (what a click on the file opens); the
 * +/- counts sum every edit to that path within the turn.
 */
@@ -1353,7 +1366,7 @@ function activeToolFromHistoricalState(state) {
 	};
 }
 /**
-* #3288 §2: turns the server's chronological `IHistoryDisplaySegment[]` (a reload/reconnect/resume
+* Turns the server's chronological `IHistoryDisplaySegment[]` (a reload/reconnect/resume
 * replay) into the SAME `TConversationEntry[]` shape a live turn's `finishTurn` produces — reusing its
 * exact segment-accumulation and "Changed files" logic, so the two paths cannot draw the turn/grouping
 * boundary differently. A `'text', role: 'user'` segment is both its own entry AND the turn boundary:
@@ -1396,6 +1409,9 @@ function buildConversationEntriesFromDisplaySegments(displaySegments) {
 function useSessionClient(makeClient) {
 	const [status, setStatus] = (0, react.useState)("disconnected");
 	const statusRef = (0, react.useRef)("disconnected");
+	const [role, setRole] = (0, react.useState)(null);
+	const roleRef = (0, react.useRef)(null);
+	const isObserving = (0, react.useCallback)(() => roleRef.current === "observe", []);
 	const [messages, setMessages] = (0, react.useState)([]);
 	const [activeTools, setActiveTools] = (0, react.useState)([]);
 	const [streamingText, setStreamingText] = (0, react.useState)("");
@@ -1427,7 +1443,7 @@ function useSessionClient(makeClient) {
 	}, []);
 	/**
 	* End the running turn: its text and tool calls stay in the conversation as SEPARATE entries, in
-	* the order they happened (#3288) — not one tools-block grouped ahead of a single merged reply.
+	* the order they happened — not one tools-block grouped ahead of a single merged reply.
 	*/
 	const finishTurn = (0, react.useCallback)((toolStatus) => {
 		const segments = turnSegmentsRef.current;
@@ -1463,8 +1479,9 @@ function useSessionClient(makeClient) {
 	const [executionDetailInput, setExecutionDetailInput] = (0, react.useState)();
 	const executionDetailInputRef = (0, react.useRef)(null);
 	const send = (0, react.useCallback)((msg) => {
+		const refused = isObserving() && !(0, _robota_sdk_agent_transport.isObserverMessageType)(msg.type);
 		if (msg.type === "send-background-task") {
-			if (executionDetailInputRef.current !== null) return;
+			if (refused || executionDetailInputRef.current !== null) return;
 			executionDetailInputRef.current = msg.taskId;
 			setExecutionDetailInput({
 				taskId: msg.taskId,
@@ -1487,21 +1504,23 @@ function useSessionClient(makeClient) {
 				});
 				return;
 			}
+			if (refused) return;
 			commandsInFlightRef.current += 1;
 		}
+		if (refused) return;
 		if (msg.type === "switch-session" || msg.type === "new-session") {
 			sessionChangesInFlightRef.current += 1;
 			if (msg.requestId !== void 0) sessionChangeRequestIdsRef.current.add(msg.requestId);
 		}
 		clientRef.current?.send(msg);
-	}, [appendEntry]);
+	}, [appendEntry, isObserving]);
 	/** One session change this surface asked for has been answered. */
 	const settleSessionChange = (0, react.useCallback)((requestId) => {
 		sessionChangesInFlightRef.current = Math.max(0, sessionChangesInFlightRef.current - 1);
 		if (requestId !== void 0) sessionChangeRequestIdsRef.current.delete(requestId);
 	}, []);
 	/**
-	* #3282 §2 (part 2): run a command the same way `send` does, but flag it as controls-triggered —
+	* Run a command the same way `send` does, but flag it as controls-triggered —
 	* the model/mode/effort pop-up menus use this instead of `send` directly, so their change is
 	* confirmed by the control's own label (via the `get-status` refresh `command_result` already
 	* triggers) rather than a conversation card. A typed `/command` still goes through plain `send`
@@ -1510,7 +1529,7 @@ function useSessionClient(makeClient) {
 	* `TClientMessage` — giving `command` a `requestId` there would let ANY caller of `send` opt a typed
 	* command into silence, which is exactly what this must not allow.
 	*
-	* #3282 §4e: `send` also intercepts `help` and an excluded command before either reaches the wire —
+	* `send` also intercepts `help` and an excluded command before either reaches the wire —
 	* for `help` that opens the sheet regardless of how it was asked for, but an excluded command's
 	* interception adds a VISIBLE info card, defeating the silence this function promises. Every current
 	* caller (model/mode/effort) names neither, so this is dormant, not exercised — a future caller must
@@ -1530,8 +1549,8 @@ function useSessionClient(makeClient) {
 	const { handleExecutionDetailMessage, handleExecutionWorkspace, closeExecutionDetail, ...executionDetailState } = useExecutionDetailState(send);
 	const { handleModelListMessage, ...modelListState } = useModelListState(send);
 	const { handleProjectMessage, ...projectPanelState } = useProjectPanelState(send);
-	const { handleAppViewMessage, rejectPendingAppRequests, readAppView, callAppTool } = useAppViewRequests(send, (0, react.useCallback)(() => statusRef.current === "connected", []));
-	const { handleSessionsMessage, canListSessions, markCurrent, armRestore, ...sessionDirectoryState } = useSessionDirectoryState(send);
+	const { handleAppViewMessage, rejectPendingAppRequests, readAppView, callAppTool } = useAppViewRequests(send, (0, react.useCallback)(() => statusRef.current === "connected", []), isObserving);
+	const { handleSessionsMessage, canListSessions, markCurrent, armRestore, ...sessionDirectoryState } = useSessionDirectoryState(send, isObserving);
 	const { requestSessions, setSessionSidebarOpen } = sessionDirectoryState;
 	const { handleSettingsMessage, openSettings, refreshSettings, ...settingsState } = useSettingsState(send);
 	const settingsOpenRef = (0, react.useRef)(false);
@@ -1553,6 +1572,10 @@ function useSessionClient(makeClient) {
 		if (handleAgentDefinitionsMessage(msg)) return;
 		if (handleSchedulesMessage(msg)) return;
 		switch (msg.type) {
+			case "surface_role":
+				roleRef.current = msg.role;
+				setRole(msg.role);
+				break;
 			case "messages": {
 				const reconstructed = msg.display ? buildConversationEntriesFromDisplaySegments(msg.display) : msg.messages.flatMap((m) => {
 					if (m.role !== "user" && m.role !== "assistant") return [];
@@ -1924,6 +1947,10 @@ function useSessionClient(makeClient) {
 		const onStatusChange = (next) => {
 			statusRef.current = next;
 			setStatus(next);
+			if (next !== "connected") {
+				roleRef.current = null;
+				setRole(null);
+			}
 			if (next !== "connected") {
 				rejectPendingAppRequests();
 				clearCompactionNotices();
@@ -1942,6 +1969,7 @@ function useSessionClient(makeClient) {
 				sessionChangesInFlightRef.current = 0;
 				sessionChangeRequestIdsRef.current.clear();
 				pendingIntentRef.current = null;
+				client.send({ type: "get-surface-role" });
 				client.send({ type: "get-commands" });
 				client.send({ type: "get-status" });
 				client.send({ type: "get-pending" });
@@ -1950,10 +1978,18 @@ function useSessionClient(makeClient) {
 				requestSchedules();
 			}
 		};
-		const client = makeClient({
+		const inner = makeClient({
 			onMessage: handleMessage,
 			onStatusChange
 		});
+		const client = {
+			connect: () => inner.connect(),
+			disconnect: () => inner.disconnect(),
+			send: (msg) => {
+				if (roleRef.current === "observe" && !(0, _robota_sdk_agent_transport.isObserverMessageType)(msg.type)) return;
+				inner.send(msg);
+			}
+		};
 		clientRef.current = client;
 		client.connect();
 		return () => {
@@ -1982,6 +2018,7 @@ function useSessionClient(makeClient) {
 		commandCatalog,
 		sessionStatus,
 		ownDriverId,
+		role,
 		send,
 		sendCommandSilently,
 		pendingPrompts,
@@ -2119,7 +2156,7 @@ function resolveClientRuntimeHost(environment) {
 //#endregion
 //#region src/clipboard.ts
 /**
-* Copies `text` to the clipboard for the "Copy code" / "Copy message" buttons (#3289 §2): the async
+* Copies `text` to the clipboard for the "Copy code" / "Copy message" buttons: the async
 * Clipboard API first, and — for a page that denies it (no permission granted yet, a browser that
 * never implements it, or a context that disallows it outright) — a same-tick `execCommand('copy')`
 * fallback through a throwaway, invisible textarea. Rejects only once both have failed, so a caller
@@ -2166,7 +2203,7 @@ const FEEDBACK_MS = 2e3;
 /**
 * The "Copy code" / "Copy message" buttons' shared feedback state: `copied` or `error` for a couple of
 * seconds, then back to `idle` — drives both the button's own label swap and an `aria-live` region a
-* screen reader announces without moving focus (#3289 §2).
+* screen reader announces without moving focus.
 */
 function useCopyFeedback() {
 	const [status, setStatus] = (0, react.useState)("idle");
@@ -2186,7 +2223,7 @@ function useCopyFeedback() {
 //#endregion
 //#region src/driver-labels.ts
 /**
-* #3289 §3 — plain, human labels for a REMOTE-014 E5 driver id, and whether one names the SAME KIND
+* Plain, human labels for a driver id, and whether one names the SAME KIND
 * of surface as this connection's own. Shared by every place the GUI shows who drove a turn (a
 * message, a permission/ask prompt): the person's own input never carries a label, and a turn from a
 * different kind of surface does — in words, never a raw id.
@@ -2240,7 +2277,7 @@ function humanDriverLabel(driverId) {
 }
 /**
 * The ready-to-render attribution phrase: "from <label>" for a co-driver, or "Automatic — loop"
-* for the agent's own wake-ups — "from automatic" reads as a typo, not a source. #3288 §1: every
+* for the agent's own wake-ups — "from automatic" reads as a typo, not a source. Every
 * `AGENT_DRIVER_ID` turn is, today, a loop's own injected iteration (fixed or self-paced —
 * `requestWakeup` in `interactive-session.ts` is the one place that stamps this id); if a
 * differently-sourced agent-wakeup turn is ever added, this label needs to name that source
@@ -2585,7 +2622,7 @@ function AppViewFrame({ tool, host, sandboxUrl, viewKey, sourceId }) {
 //#endregion
 //#region src/components/DiffLines.tsx
 /**
-* #3288: renders a unified diff already built server-side (the ONE diff builder, in
+* Renders a unified diff already built server-side (the ONE diff builder, in
 * `interactive-session-streaming.ts`) — a tool row's expanded result and the Edit/Write permission
 * prompt both show the SAME diff through this, so approving a change and reviewing it afterwards
 * look identical. This component never computes a diff itself, only displays one.
@@ -2650,7 +2687,7 @@ function nodeText(node) {
 	return "";
 }
 /**
-* "Copy code" / "Copy message" (#3289 §2): shows on hover and keyboard focus, always on touch (no
+* "Copy code" / "Copy message": shows on hover and keyboard focus, always on touch (no
 * `hover` capability to gate on there). The transient "Copied" / "Couldn't copy" feedback lives in a
 * visually hidden `aria-live` region that is a SIBLING of the button, not a descendant of it — ARIA
 * name computation only ever looks at an element's own subtree, so a live region placed anywhere
@@ -2694,7 +2731,7 @@ function CopyButton({ label, getText, className = "" }) {
 /**
 * A fenced code block: unwrapped and horizontally scrollable (a visible scrollbar via
 * `.gui-code-scroll`, `tabIndex=0` and a name so a keyboard user without a mouse wheel can still reach
-* the rest of a long line), with its own "Copy code" button revealed on hover/focus (#3289 §2).
+* the rest of a long line), with its own "Copy code" button revealed on hover/focus.
 */
 function CodeBlockRenderer({ children }) {
 	const text = nodeText(children).replace(/\n$/, "");
@@ -2838,7 +2875,7 @@ function ToolIcon({ name, className }) {
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(lucide_react.Wrench, { ...props });
 }
 /**
-* #3288: a long path's directory is shortened FROM THE LEFT so the filename — the part someone
+* A long path's directory is shortened FROM THE LEFT so the filename — the part someone
 * actually needs to recognise — is never the part that gets cut.
 */
 const PATH_DISPLAY_MAX_CHARS = 52;
@@ -3034,7 +3071,7 @@ const COMMAND_TONE = {
 	}
 };
 /**
-* A slash command's outcome, where it was typed: line breaks kept, long output folded. #3289 §2 — the
+* A slash command's outcome, where it was typed: line breaks kept, long output folded. The
 * card itself still marks the command (the `/name` header stays monospace, a fixed-width label rather
 * than prose), but its BODY reads as normal text — proportional, normal size — unless it is actually a
 * long listing (the same measure that decides whether to fold it: many raw lines, or tall once
@@ -3141,7 +3178,7 @@ function ToolGroup({ tools }) {
 		]
 	});
 }
-/** #3288: a turn that changed files ends with this compact row — a click opens that file's diff. */
+/** A turn that changed files ends with this compact row — a click opens that file's diff. */
 function ChangedFilesRow({ files }) {
 	const [openPath, setOpenPath] = (0, react.useState)(null);
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -3196,7 +3233,7 @@ function ConversationView({ messages, activeTools, streamingText, isThinking, ow
 		setIsAtBottomState(value);
 	};
 	/**
-	* #3289 §2 — follows new content only while the person is already at the bottom: streaming text, a
+	* Follows new content only while the person is already at the bottom: streaming text, a
 	* finished message, a tool starting or finishing. Expanding something already on screen (a tool row,
 	* a folded command card) touches none of these, so it never causes a jump — the effect simply does
 	* not run for it. An instant jump rather than a smooth one, so it can never itself be mistaken by
@@ -3382,7 +3419,7 @@ const SECONDARY_BUTTON$2 = `${BUTTON$2} bg-raised text-foreground hover:bg-hover
 const DESTRUCTIVE_BUTTON$2 = `${BUTTON$2} bg-destructive text-destructive-foreground hover:opacity-90`;
 /**
 * A title, a body, Cancel focused by default, and a confirm button that can be styled destructive.
-* #3282 §4e: `destructive` also picks the dialog's ARIA role — `"alertdialog"` when it is (an action
+* `destructive` also picks the dialog's ARIA role — `"alertdialog"` when it is (an action
 * that demands a decision before anything else, e.g. deleting a session), `"dialog"` otherwise.
 */
 function ConfirmDialog({ open, title, body, confirmLabel, cancelLabel = "Cancel", destructive = false, onConfirm, onCancel, restoreFocusTo }) {
@@ -3595,7 +3632,7 @@ function AgentActivityPanel({ tasks, schedules = [], goal = null, onPauseSchedul
 							task,
 							onPause: onPauseSchedule,
 							onResume: onResumeSchedule,
-							onRequestDelete: () => setPendingDeleteId(task.id)
+							onRequestDelete: onDeleteSchedule ? () => setPendingDeleteId(task.id) : void 0
 						}, task.id))
 					})] }),
 					goal && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
@@ -3678,7 +3715,7 @@ function AgentCard({ entry, selected, onOpen, onStop }) {
 		]
 	});
 }
-/** #3282 §4 part b-3: one row of the "Scheduled" group — what it runs, when next, status, controls. */
+/** One row of the "Scheduled" group — what it runs, when next, status, controls. */
 function ScheduleCard({ task, onPause, onResume, onRequestDelete }) {
 	const isPaused = task.status === "paused";
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -3696,37 +3733,37 @@ function ScheduleCard({ task, onPause, onResume, onRequestDelete }) {
 					describeScheduleStatus(task)
 				]
 			}),
-			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+			onResume || onPause || onRequestDelete ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "mt-2 flex items-center gap-3",
-				children: [isPaused ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+				children: [isPaused ? onResume && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
 					type: "button",
-					onClick: () => onResume?.(task.id),
+					onClick: () => onResume(task.id),
 					className: "flex items-center gap-1.5 rounded-lg px-2 py-1 text-[13px] text-muted-foreground hover:bg-hover hover:text-foreground",
 					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(lucide_react.Play, {
 						size: 11,
 						fill: "currentColor",
 						"aria-hidden": "true"
 					}), "Resume"]
-				}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+				}) : onPause && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
 					type: "button",
-					onClick: () => onPause?.(task.id),
+					onClick: () => onPause(task.id),
 					className: "flex items-center gap-1.5 rounded-lg px-2 py-1 text-[13px] text-muted-foreground hover:bg-hover hover:text-foreground",
 					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(lucide_react.Pause, {
 						size: 11,
 						fill: "currentColor",
 						"aria-hidden": "true"
 					}), "Pause"]
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+				}), onRequestDelete && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 					type: "button",
 					onClick: onRequestDelete,
 					className: "flex items-center gap-1.5 rounded-lg px-2 py-1 text-[13px] text-destructive hover:bg-destructive/10",
 					children: "Delete…"
 				})]
-			})
+			}) : null
 		]
 	});
 }
-/** #3282 §4 part b-3: the current goal — objective, plain-word status, and Cancel. */
+/** The current goal — objective, plain-word status, and Cancel. */
 function GoalCard({ goal, onCancel }) {
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 		className: "rounded-xl bg-card px-3.5 py-3",
@@ -3746,7 +3783,7 @@ function GoalCard({ goal, onCancel }) {
 				className: "mt-1.5 pl-[26px] text-[13px] text-muted-foreground",
 				children: describeGoalStatus(goal)
 			}),
-			goal.status === "active" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+			goal.status === "active" && onCancel && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 				className: "mt-2 pl-[26px]",
 				children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
 					type: "button",
@@ -3813,12 +3850,12 @@ function AttentionTag({ attention, status, deniedToolCalls }) {
 //#endregion
 //#region src/components/AgentSwitcherSheet.tsx
 /**
-* #3282 §4 part b-3 — the agent switcher: `show-agent-switcher` (`/agent` with no args) opens this
+* The agent switcher: `show-agent-switcher` (`/agent` with no args) opens this
 * sheet instead of the surface's old "not available" line. It lists every agent this session can
 * run — name, one-line description, and where each is defined in plain words — with the current one
 * checked. Choosing a row runs the SAME path as typing `/agent <name>` (a plain `command`, wired in
 * `useAgentSwitcherState`); the reply is this sheet's own confirmation line, never a conversation
-* card (issue #3282 §4's decided design).
+* card.
 */
 function AgentSwitcherSheet({ state }) {
 	if (!state.agentSwitcherOpen) return null;
@@ -3900,7 +3937,7 @@ function isEditableElement(element) {
 	return element !== null && element.matches("input, textarea, select, [contenteditable]");
 }
 /**
-* #3282 §2 (part 2) — the one destructive option in the provider profile action menu (the ask built
+* The one destructive option in the provider profile action menu (the ask built
 * by `askProviderProfileAction` in `agent-command`'s `provider-command-profile.ts`, `request.id`
 * `'provider-profile-action'`): "Delete" answers to no digit and renders apart from Switch/Edit/Test/
 * Duplicate, styled destructive — the exact audited bug ("Delete looks the same as Switch, answers to
@@ -4315,7 +4352,7 @@ const BUTTON$1 = "inline-flex items-center gap-2 rounded-lg px-3.5 py-1.5 text-[
 const PRIMARY_BUTTON$1 = `${BUTTON$1} bg-primary text-primary-foreground hover:opacity-90`;
 const SECONDARY_BUTTON$1 = `${BUTTON$1} bg-raised text-foreground hover:bg-hover`;
 const GHOST_BUTTON = `${BUTTON$1} text-muted-foreground hover:bg-hover hover:text-foreground`;
-/** #3282 §2: a destructive ask option (Delete) — visually distinct from Switch/Edit/Test/Duplicate. */
+/** A destructive ask option (Delete) — visually distinct from Switch/Edit/Test/Duplicate. */
 const DESTRUCTIVE_BUTTON$1 = `${BUTTON$1} bg-destructive/12 text-destructive hover:bg-destructive/20`;
 /**
 * The free-text answer to one ask prompt. Its value lives ONLY here, in a component the parent
@@ -4341,7 +4378,7 @@ const FreeTextField = (0, react.forwardRef)(function FreeTextField({ masked, pla
 		onCancel();
 	};
 	/**
-	* A key that reaches the field types into it — the prompt's own shortcuts never see it (#3280 §3).
+	* A key that reaches the field types into it — the prompt's own shortcuts never see it.
 	* The Enter that only finishes an IME composition (Korean/Japanese/Chinese) must not submit the
 	* still-uncommitted text — `isComposing` (or `keyCode` 229, on browsers that predate it) marks that
 	* Enter; the keystroke is left alone so the browser can commit the composition normally.
@@ -4426,7 +4463,7 @@ function ToolArgs({ args }) {
 	});
 }
 /**
-* #3288: a Shell request shows just its command — and the working directory only when the server
+* A Shell request shows just its command — and the working directory only when the server
 * says it differs from the workspace — instead of every raw argument.
 */
 function ShellCommandPreview({ command, cwd }) {
@@ -4461,7 +4498,7 @@ function formatUpdatedAt(updatedAt, now = Date.now()) {
 	return new Date(at).toISOString().slice(0, 10);
 }
 /**
-* A session's title (#3289 §1): its name, else its stable first-message title, else "New session".
+* A session's title: its name, else its stable first-message title, else "New session".
 * Never `preview` — that field is the raw latest reply, which is what changes every turn and is what
 * this title exists to stop showing.
 */
@@ -4492,12 +4529,12 @@ function lockedSessionsLine(count) {
 	return count === 1 ? "1 saved session is sealed and not listed here." : `${count} saved sessions are sealed and not listed here.`;
 }
 /**
-* #3189 — this workspace's sessions on the left of the conversation, as in Claude Code Desktop:
+* This workspace's sessions on the left of the conversation, as in Claude Code Desktop:
 * start a new one, or click another to make it current. Rows the host could not read are listed,
 * disabled, so a damaged session never looks deleted. A refused switch comes back as a notice.
 * A host that keeps several sessions live marks the rows running now and counts who else is on them.
 *
-* #3289 §1 — each row also carries a "More" menu (or right-click) with Rename (inline) and Delete
+* Each row also carries a "More" menu (or right-click) with Rename (inline) and Delete
 * (confirmed). Rename on the current row reuses the `/rename` command, which also updates the live
 * session's own name and title bar; rename on any other row writes the stored record directly.
 */
@@ -5381,10 +5418,10 @@ function ProductWordmark({ surface }) {
 //#endregion
 //#region src/hooks/command-menu.ts
 /**
-* #3186 — what the composer's `/` menu offers for a draft. Pure, so the matching is testable without
+* What the composer's `/` menu offers for a draft. Pure, so the matching is testable without
 * rendering: the TUI's autocomplete offers commands and skills the same way.
 *
-* #3282 §4e: a command the GUI cannot run at all (`isExcludedCommand`) never appears here — there is
+* A command the GUI cannot run at all (`isExcludedCommand`) never appears here — there is
 * nothing useful for choosing it to do, and typing it by hand is answered separately (see
 * `excluded-commands.ts`, `useSessionClient.ts`). Commands are listed before skills, each in its own
 * group, so the menu can head them "Commands" and "Skills".
@@ -5424,7 +5461,7 @@ function byName(a, b) {
 //#endregion
 //#region src/components/composer-attachments.ts
 /**
-* #3282 §4d — pure logic behind the composer's attach button and drag-and-drop, kept apart from
+* Pure logic behind the composer's attach button and drag-and-drop, kept apart from
 * `Composer.tsx` so it is testable without React or a DOM.
 *
 * The runtime resolves `@relative/path` references already (`prompt-file-reference-resolver.ts` in
@@ -5440,7 +5477,7 @@ function byName(a, b) {
 const MAX_ATTACHMENT_FILE_BYTES = 64 * 1024;
 /** Mirrors `DEFAULT_MAX_TOTAL_BYTES` in the same resolver. */
 const MAX_ATTACHMENT_TOTAL_BYTES = 256 * 1024;
-/** Shown whenever a file cannot be resolved to a path inside the workspace — rule 3 (#3282 §4). */
+/** Shown whenever a file cannot be resolved to a path inside the workspace — rule 3. */
 const ATTACHMENT_NO_PATH_NOTICE = "Only files inside this project folder can be attached.";
 /** Shown once the running count of attachments would pass `MAX_ATTACHMENT_COUNT`. */
 const ATTACHMENT_COUNT_LIMIT_NOTICE = `You can attach up to 8 files to one message.`;
@@ -5623,11 +5660,11 @@ function evaluateCandidateFile(file, workspacePath, existingTotalBytes, existing
 	};
 }
 /**
-* Inserts each chip as the runtime's existing `@relative/path` reference syntax — rule 2 (#3282 §4).
+* Inserts each chip as the runtime's existing `@relative/path` reference syntax — rule 2.
 * Always prefixed with `./`: the parser's `isPathLikeReference` only treats a token as a file
 * reference when it has a `.` somewhere or an explicit relative-path prefix, so a dotless name like
 * `Makefile`, `Dockerfile` or `LICENSE` — common, useful, and never refused for lacking one — would
-* otherwise be sent as plain text with no file and no diagnostic (follow-up to #3282 §4d). `./` makes
+* otherwise be sent as plain text with no file and no diagnostic. `./` makes
 * every path path-like regardless of its name, and the resolver collapses it back to the plain
 * relative path before use.
 */
@@ -5639,7 +5676,7 @@ function buildPromptWithAttachments(prompt, attachments) {
 //#endregion
 //#region src/components/PopupMenu.tsx
 /**
-* A HIG pop-up menu (#3282 §2): `role="menu"`, its choices as `menuitemradio` with `aria-checked`
+* A HIG pop-up menu: `role="menu"`, its choices as `menuitemradio` with `aria-checked`
 * (or `menuitem` for a plain action, e.g. "Manage providers…"), grouped into optional labelled
 * sections. Arrow keys move a roving focus, Enter/Space activates the focused item, and Esc — or a
 * click outside — closes the menu and returns focus to the trigger that opened it, so the person
@@ -5755,7 +5792,7 @@ function PopupMenu({ label, sections, onClose, triggerRef }) {
 //#endregion
 //#region src/components/StatusControls.tsx
 /**
-* #3282 §2 (part 2) — the plain label for each effort selection. Kept in step with
+* The plain label for each effort selection. Kept in step with
 * `EFFORT_LEVEL_LABELS` in `packages/agent-framework/src/effort/effort-resolution.ts` (which
 * `agent-command`'s `/effort` re-exports and reports as its own outcome text) — this package cannot
 * import that one directly (it is a Node-side package this browser bundle does not depend on), so the
@@ -5772,7 +5809,7 @@ const EFFORT_LEVEL_LABELS = {
 	xhigh: "Extra high",
 	max: "Maximum"
 };
-/** The primary row (#3282 §2 design point 4); the rest sit under "More". */
+/** The primary row; the rest sit under "More". */
 const EFFORT_PRIMARY = [
 	"auto",
 	"low",
@@ -5795,7 +5832,7 @@ function modeLabel(catalog, mode) {
 }
 const CHIP_CLASS = "flex min-w-0 items-center gap-1.5 rounded-lg px-2 py-1 text-[13px] text-muted-foreground hover:bg-hover hover:text-foreground disabled:cursor-not-allowed disabled:opacity-60 disabled:hover:bg-transparent";
 const CHIP_WARNING_CLASS = "text-warning hover:text-warning";
-/** One status chip that opens a `PopupMenu` HIG pop-up beneath it (#3282 §2). */
+/** One status chip that opens a `PopupMenu` HIG pop-up beneath it. */
 function StatusChip({ chipLabel, value, icon, connected, warning = false, menuLabel, sections, onOpen }) {
 	const [open, setOpen] = (0, react.useState)(false);
 	const triggerRef = (0, react.useRef)(null);
@@ -5832,7 +5869,7 @@ const ICON_PROPS = {
 	"aria-hidden": true
 };
 /**
-* Model · mode · effort, each a pop-up menu (#3282 §2), and the context the conversation fills.
+* Model · mode · effort, each a pop-up menu, and the context the conversation fills.
 * Every menu applies its choice through the same command wire path the equivalent typed slash
 * command uses — `onSilentCommand` — so `/model <id>`, `/mode <name>` and `/effort <value>` and a
 * click in these menus can never drift apart; the control's own chip label (fed by the session's next
@@ -5965,7 +6002,7 @@ const EMPTY_DRAFT = {
 	attachments: []
 };
 /**
-* #3282 §4e: a command whose whole job is opening a GUI screen — choosing it from the `/` menu runs
+* A command whose whole job is opening a GUI screen — choosing it from the `/` menu runs
 * it at once (its `ui_intent` opens the screen the normal way) instead of filling the draft and
 * waiting for Enter, since there is nothing useful to type after it. `help` never reaches the
 * session at all (`useSessionClient.ts`'s `send` opens the Help sheet locally). Every other command
@@ -5984,14 +6021,14 @@ function menuGroupLabel(item) {
 	return item.kind === "skill" ? "Skills" : "Commands";
 }
 /**
-* #3280 §4: the unsent draft survives a Chat → Usage → Chat switch (the composer unmounts), a page
+* The unsent draft survives a Chat → Usage → Chat switch (the composer unmounts), a page
 * reload, and a desktop relaunch — `localStorage`, not `sessionStorage`, since only `localStorage`
 * survives a closed window/tab being reopened. Namespaced (the configured draft prefix, matching
 * the configured restore key in `use-session-directory.ts`) so a page hosting other state under the
 * same origin does not collide. Per session id when one is known; a single fallback key before the
 * first status arrives (the gap is brief and is reconciled once it does — see the effect below).
 *
-* #3282 §4d: the stored value is now JSON (`IStoredDraft`), not the bare text string it used to be —
+* The stored value is now JSON (`IStoredDraft`), not the bare text string it used to be —
 * `parseStoredDraft` treats anything that does not parse as that shape (including a draft saved
 * before this change shipped) as plain text with no attachments, so an old stored draft still loads.
 */
@@ -6089,7 +6126,7 @@ const ComposerInstance = (0, react.forwardRef)(function Composer({ draftMode = "
 	(0, react.useEffect)(() => {
 		menuOptionRefs.current[selected]?.scrollIntoView?.({ block: "nearest" });
 	}, [selected, menu]);
-	/** #3280 §4: every draft change is persisted at once, so a reload or relaunch loses nothing. */
+	/** Every draft change is persisted at once, so a reload or relaunch loses nothing. */
 	const setDraft = (value) => {
 		stateRef.current = {
 			...stateRef.current,
@@ -6098,7 +6135,7 @@ const ComposerInstance = (0, react.forwardRef)(function Composer({ draftMode = "
 		setDraftState(value);
 		if (draftMode === "persistent") writeDraft(browserNamespace, sessionIdRef.current, stateRef.current);
 	};
-	/** #3282 §4d: attachment chips persist alongside the text, under the same per-session draft key. */
+	/** Attachment chips persist alongside the text, under the same per-session draft key. */
 	const setAttachments = (updater) => {
 		const next = typeof updater === "function" ? updater(stateRef.current.attachments) : updater;
 		stateRef.current = {
@@ -6256,7 +6293,7 @@ const ComposerInstance = (0, react.forwardRef)(function Composer({ draftMode = "
 		chooseMenuItem(item);
 		return true;
 	};
-	/** #3280 §2: Edit puts the queued text back in the draft and cancels the queue behind it (the wire
+	/** Edit puts the queued text back in the draft and cancels the queue behind it (the wire
 	*  has no per-message cancel — only a whole-queue clear). Offered only when exactly one prompt is
 	*  queued: with more than one, `cancel-queue` would still drop every one of them, but only the
 	*  shown prompt's text is known here, so "Edit" would silently lose the rest — the row offers only
@@ -6542,7 +6579,7 @@ function GoalBar({ status, onStop }) {
 					goal.maxIterations
 				]
 			}),
-			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+			onStop && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
 				type: "button",
 				"aria-label": "Stop goal",
 				onClick: onStop,
@@ -6579,7 +6616,7 @@ const RECORD_KIND_LABEL = {
 	group_summary: "Summary"
 };
 /**
-* #3288 §1: opening an Agents panel entry — status, what it was asked (one line, from its
+* Opening an Agents panel entry — status, what it was asked (one line, from its
 * headline), its transcript so far (paginated via `onLoadMore`) and, once it has one, its result.
 * `entry === null` renders nothing; the caller owns showing/hiding this over the panel.
 */
@@ -6799,7 +6836,7 @@ const SHORTCUTS = [
 	}
 ];
 /**
-* The GUI's Help sheet (#3282 §4e), a `Dialog` opened by `/help` — client-only: `useSessionClient.ts`'s
+* The GUI's Help sheet, a `Dialog` opened by `/help` — client-only: `useSessionClient.ts`'s
 * `send` catches `/help` before it ever reaches the session and opens this instead, so there is no
 * round trip and nothing terminal-style to replace it with. It lists the same commands and skills the
 * `/` menu offers (`commandMenuFor`, unfiltered by any query — an excluded command has no row here
@@ -7123,7 +7160,7 @@ const VIEW_LABEL = {
 	project: "Project"
 };
 /**
-* #3289 §1 — the folder this session works in, wherever `document.title` is settable: a page (the
+* The folder this session works in, wherever `document.title` is settable: a page (the
 * browser tab) and the desktop window that loads it (Electron follows the page's title unless told
 * otherwise, and nothing in `apps/agent-app/electron/main.ts` overrides it — see its own SPEC note).
 * Absent while the host has not said, so a not-yet-connected surface keeps whatever title it loaded
@@ -7198,7 +7235,7 @@ function SessionTitleBar({ status, surface, title, workspace, showBrand, view, o
 /** The column every part of the conversation shares (matches `SessionSurface`'s `COLUMN`). */
 const BANNER_COLUMN = "mx-auto w-full max-w-[760px] px-6";
 /**
-* A connection that drops after a working session (issue #3280 §5): a banner directly above the
+* A connection that drops after a working session: a banner directly above the
 * conversation — never a full-screen replacement — so the conversation and its history stay visible
 * and scrollable throughout. Shown as soon as the drop happens; says nothing on the very first
 * connect, because nothing has been lost yet.
@@ -7287,7 +7324,7 @@ function displayProvider(provider) {
 	return PROVIDER_DISPLAY_NAMES[provider] ?? provider[0].toUpperCase() + provider.slice(1);
 }
 /**
-* A provider/session error classified at the wire boundary (#3289 §3) as one plain sentence naming
+* A provider/session error classified at the wire boundary as one plain sentence naming
 * what happened and, where there is one, the next step — `null` for a notice this classification does
 * not cover, which keeps showing its own `message` instead.
 *
@@ -7477,7 +7514,7 @@ function SettingsLanguageField({ label, current, recommended, note, onChange, di
 //#region src/components/SettingsGeneralSection.tsx
 /**
 * Language, output style and preset — reusing the exact choices and descriptions the runtime
-* already builds for `/language`, `/output-style` and `/preset` (#3282 §4a). Never internal ids:
+* already builds for `/language`, `/output-style` and `/preset`. Never internal ids:
 * every pop-up shows the runtime's human labels.
 */
 function SettingsGeneralSection({ snapshot, onUpdate, onRequestPresetChange }) {
@@ -7595,7 +7632,7 @@ function ServerRow({ server, expanded, onToggleExpanded, onToggleEnabled }) {
 	});
 }
 /**
-* The MCP Servers section (#3282 §4 part b-2): every configured server's name, where it is
+* The MCP Servers section: every configured server's name, where it is
 * configured, its live connection status and tool count, an enable/disable switch (approve/reject),
 * an expandable list of its tool names, and a section-level Reload. Adding or editing a server is
 * left out — the runtime has no command path that writes MCP config (recorded in
@@ -7690,7 +7727,7 @@ function PermissionRuleRow({ rule, onRequestRemove }) {
 	});
 }
 /**
-* Default permission mode, the rules `/permissions` shows, and the sandbox switch (#3282 §4a).
+* Default permission mode, the rules `/permissions` shows, and the sandbox switch.
 * "Skip all checks" as the mode and a preset that would set it both go through
 * `onRequestModeChange`'s parent-owned confirmation before anything is sent.
 */
@@ -7801,7 +7838,7 @@ function PluginRow({ plugin, canInstall, onToggleEnabled, onRequestUninstall })
 	});
 }
 /**
-* The Plugins section (#3282 §4 part b-2): every installed plugin's name, description and enabled
+* The Plugins section: every installed plugin's name, description and enabled
 * state, an enable/disable switch, a section-level Reload, and — local surfaces only — install and
 * uninstall, since installing runs third-party code. `canInstall` (from the snapshot) mirrors the
 * refusal `/plugin install|uninstall` itself gives a remote device or an observer.
@@ -7892,7 +7929,7 @@ const BUTTON = "rounded-lg px-2.5 py-1.5 text-[12.5px] font-medium transition-co
 const PRIMARY_BUTTON = `${BUTTON} bg-primary text-primary-foreground hover:opacity-90`;
 const SECONDARY_BUTTON = `${BUTTON} bg-raised text-foreground hover:bg-hover`;
 const DESTRUCTIVE_BUTTON = `${BUTTON} text-destructive hover:bg-destructive/10`;
-/** The "Model" action: a `PopupMenu` of this ONE profile's catalog models (#3282 §4b). */
+/** The "Model" action: a `PopupMenu` of this ONE profile's catalog models. */
 function ProviderModelButton({ profile, modelList, onSelect }) {
 	const [open, setOpen] = (0, react.useState)(false);
 	const triggerRef = (0, react.useRef)(null);
@@ -7998,7 +8035,7 @@ function ProviderProfileRow({ profile, modelList, onUse, onModelChange, onComman
 	});
 }
 /**
-* The configured provider profiles (#3282 §4b), each row a plain provider name, its model's label,
+* The configured provider profiles, each row a plain provider name, its model's label,
 * a checkmark on the one in use, and a plain connection state when one is known. Every action goes
 * through the same path the equivalent command does: Use/Model apply through `state.updateSettings`
 * (the same `field` patterns Preset/Mode/Sandbox use); Edit/Test/Duplicate/Add dispatch the raw
@@ -8046,7 +8083,7 @@ function SettingsProvidersSection({ snapshot, modelList, onRequestModelList, onU
 //#endregion
 //#region src/components/SettingsScreen.tsx
 /**
-* The Settings screen's sections (#3282 §4). Adding a later section (Advisor) is one entry here plus
+* The Settings screen's sections. Adding a later section (Advisor) is one entry here plus
 * one component in the switch below — nothing else in this file changes.
 */
 const SECTIONS = [
@@ -8072,7 +8109,7 @@ const SECTIONS = [
 	}
 ];
 /**
-* A large modal sheet with a section sidebar on the left and content on the right (#3282 §4a) — the
+* A large modal sheet with a section sidebar on the left and content on the right — the
 * GUI's Settings screen, opened by the sidebar's gear button, the desktop app's ⌘, menu item, or
 * `/settings` (its `show-settings` `ui_intent` calls `state.openSettings()`, wired in
 * `useSessionClient`). Every change applies at once; there is no Save button. Esc and the Close
@@ -8347,7 +8384,7 @@ function describePluginAction(action) {
 //#endregion
 //#region src/hooks/use-media-query.ts
 /**
-* Tracks whether `query` currently matches, reactively (#3289 §2 — the narrow-window session sheet
+* Tracks whether `query` currently matches, reactively (the narrow-window session sheet
 * below `md`). A host without `window.matchMedia` (an older embedding, or a non-browser test) reports
 * `false` and never subscribes, rather than throwing.
 */
@@ -8383,7 +8420,7 @@ const COLUMN = "mx-auto w-full max-w-[760px] px-6";
 const APP_VIEW_HOST_VERSION = "1.0.0";
 /**
 * Designed empty state shown before the first turn. Renders in the same slot as `ConversationView`
-* (never together), so it carries the same `main` landmark and label (#3289 §3 review) — nothing
+* (never together), so it carries the same `main` landmark and label — nothing
 * above this slot supplies one.
 */
 function EmptyState() {
@@ -8407,14 +8444,14 @@ function EmptyState() {
 	});
 }
 /**
-* Issue #3282 §3 — shown in place of the conversation while `sessionStatus.setupRequired` holds: the
+* Shown in place of the conversation while `sessionStatus.setupRequired` holds: the
 * session is running (the GUI itself connected fine), but has no provider to reply with yet. "Set up
 * provider" runs `/provider add` as a command; its questions dock above where the composer would be
 * (the same `PermissionPrompt` any ask uses), and the panel clears itself once the session reports a
 * real provider, live — no restart, no reload.
 *
 * Renders in the same slot as `ConversationView`/`EmptyState` (never together), so it carries the
-* page's `main` landmark here too (#3289 §3 review) — nothing above this slot supplies one.
+* page's `main` landmark here too — nothing above this slot supplies one.
 */
 function SetupPanel({ onSetUp, disabled }) {
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("main", {
@@ -8447,7 +8484,8 @@ function SetupPanel({ onSetUp, disabled }) {
 * The full desktop layout over an `IWsSessionState`. `surface` is an optional label shown next to the
 * mark (e.g. "app").
 */
-function SessionSurface({ state, surface, personalUsageEnabled = false, draftMode = "persistent", onReconnect, pickFiles, getPathForFile, onOpenMemoryInEditor, appViewSandboxUrl }) {
+function SessionSurface({ state, surface, personalUsageEnabled: personalUsageRequested = false, draftMode = "persistent", onReconnect, pickFiles, getPathForFile, onOpenMemoryInEditor, appViewSandboxUrl }) {
+	const readOnly = state.role === "observe";
 	const [view, setView] = (0, react.useState)("chat");
 	const { identity } = useProductIdentity();
 	const appViewHost = (0, react.useMemo)(() => ({
@@ -8466,6 +8504,7 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 		identity.displayName,
 		surface
 	]);
+	const personalUsageEnabled = personalUsageRequested && !readOnly;
 	const composerRef = (0, react.useRef)(null);
 	const tasks = state.executionWorkspace?.entries ?? [];
 	const hasTasks = tasks.some((entry) => entry.kind !== "main_thread");
@@ -8485,7 +8524,7 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 	const hasWorkInProgress = hasTasks || state.scheduledTasks.length > 0 || currentGoal !== null;
 	const isEmpty = state.messages.length === 0 && !state.streamingText && !state.isThinking && state.activeTools.length === 0;
 	const setupRequired = state.sessionStatus?.setupRequired === true;
-	const hasSessionList = (state.sessionListing ?? null) !== null || state.sessionsError?.code === "list_failed";
+	const hasSessionList = !readOnly && ((state.sessionListing ?? null) !== null || state.sessionsError?.code === "list_failed");
 	const sidebarOpen = hasSessionList && state.sessionSidebarOpen;
 	const usage = personalUsageEnabled && view === "usage";
 	const project = view === "project";
@@ -8555,7 +8594,7 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 					connectionLost: state.connectionLost ?? false
 				}), usage ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 					className: "min-h-0 flex-1",
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PersonalUsageDashboard, { state }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PermissionPrompt, {
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PersonalUsageDashboard, { state }), readOnly ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PermissionPrompt, {
 						layout: "modal",
 						prompts: state.pendingPrompts,
 						onAnswerPermission: state.answerPermission,
@@ -8567,7 +8606,7 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ProjectPanel, {
 						state,
 						onOpenMemoryInEditor
-					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PermissionPrompt, {
+					}), readOnly ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PermissionPrompt, {
 						layout: "modal",
 						prompts: state.pendingPrompts,
 						onAnswerPermission: state.answerPermission,
@@ -8587,7 +8626,7 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 								}),
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 									className: "min-h-0 flex-1 overflow-hidden",
-									children: setupRequired ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SetupPanel, {
+									children: setupRequired && !readOnly ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SetupPanel, {
 										onSetUp: () => state.send({
 											type: "command",
 											name: "provider",
@@ -8595,7 +8634,7 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 										}),
 										disabled: state.status !== "connected"
 									}) : isEmpty ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(EmptyState, {}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AppViewHostContext.Provider, {
-										value: appViewHost,
+										value: readOnly ? null : appViewHost,
 										children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ConversationView, {
 											messages: state.messages,
 											activeTools: state.activeTools,
@@ -8610,13 +8649,13 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 									children: [
 										/* @__PURE__ */ (0, react_jsx_runtime.jsx)(GoalBar, {
 											status: state.sessionStatus ?? null,
-											onStop: () => state.send({
+											onStop: readOnly ? void 0 : () => state.send({
 												type: "command",
 												name: "goal",
 												args: "cancel"
 											})
 										}),
-										/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PermissionPrompt, {
+										readOnly ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PermissionPrompt, {
 											layout: "dock",
 											prompts: state.pendingPrompts,
 											onAnswerPermission: state.answerPermission,
@@ -8624,7 +8663,11 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 											ownDriverId: state.ownDriverId,
 											onFocusReturn: () => composerRef.current?.focus()
 										}),
-										setupRequired ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Composer, {
+										readOnly ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+											role: "status",
+											className: "rounded-2xl bg-card px-4 py-3 text-center text-[14px] text-muted-foreground",
+											children: "Read-only: you are watching this session."
+										}) : setupRequired ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Composer, {
 											ref: composerRef,
 											draftMode,
 											catalog: state.commandCatalog ?? null,
@@ -8679,13 +8722,13 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 								selectedEntryId: state.openEntryId ?? void 0,
 								onSelect: (entry) => state.openExecutionDetail(entry.id),
 								onReturnToConversation: () => state.closeExecutionDetail(),
-								onStop: stopExecutionEntry,
+								onStop: readOnly ? void 0 : stopExecutionEntry,
 								schedules: state.scheduledTasks,
 								goal: currentGoal,
-								onPauseSchedule: state.pauseSchedule,
-								onResumeSchedule: state.resumeSchedule,
-								onDeleteSchedule: state.deleteSchedule,
-								onCancelGoal: () => state.send({
+								onPauseSchedule: readOnly ? void 0 : state.pauseSchedule,
+								onResumeSchedule: readOnly ? void 0 : state.resumeSchedule,
+								onDeleteSchedule: readOnly ? void 0 : state.deleteSchedule,
+								onCancelGoal: readOnly ? void 0 : () => state.send({
 									type: "command",
 									name: "goal",
 									args: "cancel"
@@ -8700,18 +8743,18 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 							complete: state.executionDetailComplete,
 							onClose: () => state.closeExecutionDetail(),
 							onLoadMore: () => state.loadMoreExecutionDetail(),
-							onStop: openEntry ? () => stopExecutionEntry(openEntry) : void 0,
+							onStop: openEntry && !readOnly ? () => stopExecutionEntry(openEntry) : void 0,
 							inputState: state.executionDetailInput,
 							mode: state.executionDetailMode,
 							unreadable: state.executionDetailUnreadable,
 							onShowEarlier: state.showEarlierExecutionDetail,
 							onShowLive: state.showLiveExecutionDetail,
-							onSend: openEntry ? (prompt) => state.send({
+							onSend: openEntry && !readOnly ? (prompt) => state.send({
 								type: "send-background-task",
 								taskId: openEntry.sourceId,
 								input: { prompt }
 							}) : void 0,
-							onContinue: openEntry?.resumeSessionId ? () => {
+							onContinue: openEntry?.resumeSessionId && !readOnly ? () => {
 								if (openEntry.resumeSessionId) state.switchSession(openEntry.resumeSessionId);
 							} : void 0
 						})
@@ -8719,8 +8762,8 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 				})]
 			}),
 			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SessionNotices, { state }),
-			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SettingsScreen, { state }),
-			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AgentSwitcherSheet, { state }),
+			readOnly ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SettingsScreen, { state }),
+			readOnly ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AgentSwitcherSheet, { state }),
 			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(HelpSheet, {
 				open: state.helpOpen,
 				onClose: () => state.closeHelp(),
@@ -8731,7 +8774,7 @@ function SessionSurface({ state, surface, personalUsageEnabled = false, draftMod
 }
 /**
 * A centered chrome frame for the pre-session (loading) and fatal states — reused by app shells. Its
-* content area is this page's `main` landmark (#3289 §3 review): nothing above `CenteredChrome`'s
+* content area is this page's `main` landmark: nothing above `CenteredChrome`'s
 * three call sites (starting, fatal, the trust question) supplies one, and none of the three ever
 * render alongside `SessionSurface`'s own. `header` stays a sibling of `main`, not inside it, so it
 * keeps its own implicit `banner` role.