@schlenkr/ragents 0.1.14 → 0.1.16

package/apps/web/dist/assets/runPanel-BjG5NBKm.js

@@ -0,0 +1,26 @@
+import{a as _,H as B,u as X,r as o,j as e,B as E,I as Fe,J as Me,K as De,v as Ue,l as W,m as Y,t as He,k as $e,P as Be,G as fe,L as Ve,p as Z,q as pe,i as qe,N as xe,O as le,T as Je,V as Ge,A as ce,Y as Ke,Z as Qe,_ as We,$ as Ye,s as Ze,a0 as Xe,e as et,a1 as tt,a2 as nt,x as st,y as rt,a3 as ot,a4 as at,a5 as it,z as lt,Q as ct,a6 as dt,a7 as ut,F as ht}from"./mermaid-HWGCJPDP-CSCkaArr.js";/**
+ * @license lucide-react v1.46.0 - ISC
+ *
+ * This source code is licensed under the ISC license.
+ * See the LICENSE file in the root directory of this source tree.
+ */const me={name:"ellipsis-vertical",size:24,node:[["circle",{cx:"12",cy:"12",r:"1",key:"41hilf"}],["circle",{cx:"12",cy:"5",r:"1",key:"gxeob9"}],["circle",{cx:"12",cy:"19",r:"1",key:"lyex9k"}]],aliases:["more-vertical"]};me.node;const ft=_(me);/**
+ * @license lucide-react v1.46.0 - ISC
+ *
+ * This source code is licensed under the ISC license.
+ * See the LICENSE file in the root directory of this source tree.
+ */const ve={name:"external-link",size:24,node:[["path",{d:"M15 3h6v6",key:"1q9fwt"}],["path",{d:"M10 14 21 3",key:"gplh6r"}],["path",{d:"M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6",key:"a6xqqp"}]]};ve.node;const pt=_(ve);/**
+ * @license lucide-react v1.46.0 - ISC
+ *
+ * This source code is licensed under the ISC license.
+ * See the LICENSE file in the root directory of this source tree.
+ */const ge={name:"layout-grid",size:24,node:[["rect",{width:"7",height:"7",x:"3",y:"3",rx:"1",key:"1g98yp"}],["rect",{width:"7",height:"7",x:"14",y:"3",rx:"1",key:"6d4xhi"}],["rect",{width:"7",height:"7",x:"14",y:"14",rx:"1",key:"nxv5o0"}],["rect",{width:"7",height:"7",x:"3",y:"14",rx:"1",key:"1bb6yr"}]]};ge.node;const xt=_(ge);/**
+ * @license lucide-react v1.46.0 - ISC
+ *
+ * This source code is licensed under the ISC license.
+ * See the LICENSE file in the root directory of this source tree.
+ */const we={name:"log-out",size:24,node:[["path",{d:"m16 17 5-5-5-5",key:"1bji2h"}],["path",{d:"M21 12H9",key:"dn1m92"}],["path",{d:"M9 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h4",key:"1uf3rs"}]]};we.node;const mt=_(we);/**
+ * @license lucide-react v1.46.0 - ISC
+ *
+ * This source code is licensed under the ISC license.
+ * See the LICENSE file in the root directory of this source tree.
+ */const be={name:"play",size:24,node:[["path",{d:"M5 5a2 2 0 0 1 3.008-1.728l11.997 6.998a2 2 0 0 1 .003 3.458l-12 7A2 2 0 0 1 5 19z",key:"10ikf1"}]]};be.node;const vt=_(be),O="flex w-full cursor-pointer items-center gap-2.5 rounded-md px-2 py-1.5 text-left hover:bg-accent focus-visible:outline-2 focus-visible:outline-ring/60 focus-visible:-outline-offset-2 disabled:cursor-default disabled:opacity-50 disabled:hover:bg-transparent [&>svg]:size-4 [&>svg]:flex-none [&>svg]:text-muted-foreground",K=t=>t instanceof Error?t.message:String(t);function Q({onOpenSettings:t,runId:a}){const r=B(),n=X(),[l,c]=o.useState(!1),[u,f]=o.useState(!1),[m,x]=o.useState(),[d,b]=o.useState(),k=o.useRef(null),R=o.useId(),P=i=>{var p;return i.reason==="outside-press"&&i.event.target instanceof Node&&((p=k.current)==null?void 0:p.contains(i.event.target))===!0},v=()=>{c(!1),b(void 0),x(void 0)},g=()=>{if(r.kind==="vscode"){r.requestLogout(),c(!1);return}f(!0),x(void 0),n.logout().then(()=>c(!1)).catch(i=>x(K(i))).finally(()=>f(!1))},V=i=>{b({kind:"loading"}),x(void 0),W.call(Y.runs.scripts,{runId:i}).then(p=>b({kind:"ready",scripts:p})).catch(p=>{b({kind:"ready",scripts:[]}),x(K(p))})},z=(i,p)=>{f(!0),x(void 0),W.call(Y.runs.startScript,{runId:i,entry:p,input:null}).then(v).catch(F=>x(K(F))).finally(()=>f(!1))},h=a!==void 0&&n.can("runs.write")?a:void 0;return e.jsxs(e.Fragment,{children:[e.jsx(E,{"aria-controls":l?R:void 0,"aria-expanded":l,"aria-haspopup":"dialog","aria-label":"Panel menu",className:"self-center",onClick:()=>l?v():c(!0),ref:k,size:"icon-lg",title:"Menu",variant:"ghost",children:e.jsx(ft,{})}),e.jsx(Fe,{onOpenChange:(i,p)=>{!i&&P(p)||(i?c(!0):v())},open:l,children:e.jsxs(Me,{align:"end",anchor:k,"aria-label":"Panel menu",className:"w-[260px] gap-0 p-1 text-[0.8rem]",collisionPadding:8,dim:!0,id:R,role:"dialog",side:"bottom",children:[d&&h!==void 0?e.jsxs(e.Fragment,{children:[e.jsxs("button",{className:O,onClick:()=>{b(void 0),x(void 0)},type:"button",children:[e.jsx(De,{}),"Run script"]}),e.jsxs("div",{"aria-label":"Run scripts",className:"grid max-h-[50vh] overflow-auto border-t border-border-soft pt-1",role:"list",children:[d.kind==="loading"&&e.jsx("p",{className:"px-2 py-1.5 text-muted-foreground",children:"Loading run scripts ..."}),d.kind==="ready"&&d.scripts.length===0&&!m&&e.jsx("p",{className:"px-2 py-1.5 text-muted-foreground",children:"This profile has no run scripts for you."}),d.kind==="ready"&&d.scripts.map(i=>e.jsx("button",{className:O,disabled:u||!i.available,onClick:()=>z(h,i.id),role:"listitem",title:i.reason??i.description,type:"button",children:e.jsxs("span",{className:"grid min-w-0",children:[e.jsx("span",{className:"truncate",children:i.title}),e.jsx("span",{className:"line-clamp-2 text-[0.68rem] text-muted-foreground",children:i.available?i.description:i.reason})]})},i.id))]})]}):e.jsxs(e.Fragment,{children:[e.jsxs("button",{className:O,onClick:()=>{v(),t()},type:"button",children:[e.jsx(Ue,{}),"Settings"]}),h!==void 0&&e.jsxs("button",{className:O,onClick:()=>V(h),type:"button",children:[e.jsx(vt,{}),"Run script"]}),r.kind==="vscode"&&e.jsxs("button",{className:O,onClick:()=>{v(),r.openExternal(new URL("/",window.location.href).toString())},type:"button",children:[e.jsx(pt,{}),"Open in browser"]}),n.enabled&&n.user&&e.jsxs("button",{className:O,disabled:u,onClick:g,title:n.user.id,type:"button",children:[e.jsx(mt,{}),e.jsxs("span",{className:"grid min-w-0",children:[e.jsx("span",{children:"Sign out"}),e.jsx("span",{className:"truncate text-[0.68rem] text-muted-foreground",children:n.user.label})]})]})]}),m&&e.jsx("p",{className:"px-2 py-1.5 text-[0.72rem] text-destructive",role:"alert",children:m})]})})]})}const gt=5e3;function je(t){const[a,r]=o.useState([]),[n,l]=o.useState(!1),c=o.useRef(void 0),u=o.useRef(!1),f=o.useCallback(()=>{if(!t)return Promise.resolve();if(c.current)return u.current=!0,c.current;const m=async()=>{do{u.current=!1;try{r(await He()),l(!1)}catch{l(!0)}}while(u.current)};return c.current=m().finally(()=>{c.current=void 0}),c.current},[t]);return o.useEffect(()=>{if(!t)return;f();const m=W.subscribe(Y.channels.runs,{},()=>void f()),x=setInterval(()=>void f(),gt);return()=>{m(),clearInterval(x)}},[t,f]),{sessions:a,unreachable:n,refresh:f}}const Se="relative z-[80] flex h-header flex-none items-stretch border-b border-border bg-shell shadow-bar",de="max-w-[120px] self-center truncate rounded-full bg-secondary px-2 py-0.5 text-[0.66rem] font-semibold text-muted-foreground",wt="min-w-0 flex-1 self-center truncate px-1.5 text-[0.82rem] font-semibold",bt="Stopped in the run panel",jt=5e3,S="New run",St="relative z-[80] flex h-header flex-none items-center gap-2 border-b border-border bg-shell px-3 shadow-bar",ye="m-auto max-w-[420px] p-6 text-center text-muted-foreground",yt=new Set,kt=()=>({id:crypto.randomUUID(),title:S,updatedAt:Date.now()}),ke=(t,a="Run")=>({id:t,title:a,updatedAt:Date.now()}),Nt={kind:"working",title:"Loading profile",detail:"Loading the server's interface."},Rt={kind:"working",title:"Starting run",detail:"Creating the new run."},ue={kind:"working",title:"Starting run",detail:"Starting the template."},Ct={kind:"waiting",title:"No run selected",detail:"On the Start page you start a new run or open an existing one."},Et={kind:"error",title:"No runs enabled",detail:"No runs are enabled for this user account."};function It({location:t}){const a=$e(),r=t.layout==="app";if(a.status==="loading")return e.jsx(y,{headless:r,state:Nt});if(a.status==="failed")return e.jsx(y,{headless:r,state:{kind:"error",title:"The profile could not be loaded",detail:a.error},children:e.jsx(E,{onClick:()=>window.location.reload(),size:"sm",variant:"outline",children:"Reload"})});const n=t.layout==="app"?e.jsx(Tt,{elementId:t.elementId,registry:a.registry,runId:t.runId}):e.jsx(Ot,{connection:t.connection,initialRunId:t.runId,registry:a.registry});return a.failures.length===0?n:e.jsxs("div",{className:"flex h-full flex-col",children:[e.jsx(Be,{failures:a.failures}),e.jsx("div",{className:"flex min-h-0 flex-1 flex-col",children:n})]})}function Ot({connection:t,initialRunId:a,registry:r}){var ie;const n=B(),l=X(),c=l.can("runs.read"),u=c&&l.can("runs.write"),f=u&&l.can("runs.create"),m=f||u&&r.scriptEntries.some(s=>pe(l,s.id)),x=qe((ie=l.user)==null?void 0:ie.id),[d,b]=o.useState(a),[k,R]=o.useState(),[P,v]=o.useState(),g=o.useCallback(()=>v(s=>s===d?void 0:s),[d]),[V,z]=o.useState(),[h,i]=o.useState(),[p,F]=o.useState(),q=o.useRef(void 0),j=o.useCallback(s=>{q.current=s==null?void 0:s.runId,F(s)},[]),[ee,J]=o.useState(),[L,te]=o.useState(!1),[ne,se]=o.useState(),G=o.useCallback(()=>te(!0),[]),{sessions:re,unreachable:Re,refresh:Ce}=je(c&&!h&&!p),[Ee,Ie]=o.useState(null),[Oe,Pe]=o.useState(null),T=o.useCallback((s,w)=>{var $;const N=($=r.startEntries.find(ze=>ze.id===w))==null?void 0:$.fixedStartOptions;i({session:kt(),startOptions:s&&xe(s,N),entryId:w})},[r]),Le=o.useCallback(()=>T(),[T]),A=o.useCallback((s,w)=>{i(void 0),j(void 0),z(w),b(s),v(n.kind==="vscode"?s:void 0)},[n.kind,j]),oe=o.useCallback(s=>{i(void 0),j(s),Pt(s,r,l).then(()=>{q.current===s.runId&&A(s.runId)},w=>{q.current===s.runId&&F({...s,error:w instanceof Error?w.message:String(w)})})},[l,A,r,j]),Te=o.useCallback(s=>{v(void 0),R(void 0),b(s)},[]),M=o.useCallback(()=>{v(void 0),i(void 0),j(void 0),J(void 0),n.kind==="vscode"?n.notify({type:"showStart"}):b(void 0)},[n,j]);o.useLayoutEffect(()=>{if(P){if(L||h){g();return}return window.addEventListener("pointerdown",g,!0),window.addEventListener("keydown",g,!0),window.addEventListener("blur",g),()=>{window.removeEventListener("pointerdown",g,!0),window.removeEventListener("keydown",g,!0),window.removeEventListener("blur",g)}}},[h,P,L,g]),o.useEffect(()=>n.onCommand(s=>{if(s.type==="selectRun"&&(v(void 0),i(void 0),j(void 0),J(void 0),z(void 0),R(void 0),b(s.runId??void 0)),s.type!=="newRun")return;if(n.kind!=="vscode"){m&&T(s.startOptions,s.entryId);return}const w=m?s.entryId===void 0&&!f?"Free runs are not enabled for this user account.":void 0:"New runs are not enabled for this user account.";if(J(w),w!==void 0)return;const N=r.startEntries.find($=>$.id===s.entryId);if(R((N==null?void 0:N.title)??S),s.entryId===void 0){A(crypto.randomUUID(),s.startOptions);return}if(N!==void 0&&r.guideFor(N)!==void 0){j(void 0),T(s.startOptions,N.id);return}oe({runId:crypto.randomUUID(),entryId:s.entryId,startOptions:s.startOptions})}),[m,f,n,A,r,j,T,oe]),o.useEffect(()=>{n.notify({type:"ready"})},[n]),o.useEffect(()=>{n.notify({type:"runChanged",runId:d??null})},[n,d]);const D=L&&e.jsx(Ze,{onClose:()=>te(!1),registry:r}),I=s=>e.jsxs(e.Fragment,{children:[e.jsx(E,{"aria-label":"Back to Start",className:"self-center",onClick:M,size:"icon-lg",title:"Back to Start",variant:"ghost",children:e.jsx(le,{})}),e.jsx("strong",{className:wt,children:s}),t&&e.jsx("span",{className:de,title:`Server ${t}`,children:t}),e.jsx(Q,{onOpenSettings:G})]}),U=e.jsx(E,{onClick:M,size:"sm",variant:"outline",children:"Back to Start"}),ae=h&&e.jsx(Z,{initialStartOptions:h.startOptions,onStarted:()=>{A(h.session.id),R(s=>s??S),Ce()},registry:r,session:h.session,startDialog:{onClose:n.kind==="vscode"?M:()=>i(void 0),initialEntryId:h.entryId}},h.session.id);if(p)return e.jsxs(e.Fragment,{children:[p.error===void 0?e.jsx(y,{header:I(k??S),state:ue}):e.jsx(y,{header:I(k??S),state:{kind:"error",title:"The run could not be started",detail:p.error},children:U}),D]});if(n.kind==="vscode"&&h)return e.jsxs(e.Fragment,{children:[e.jsx(y,{header:I(k??S),state:ue}),ae,D]});if(n.kind==="vscode"&&!(c&&d))return e.jsxs(e.Fragment,{children:[c?ee!==void 0?e.jsx(y,{header:I(S),state:{kind:"error",title:"No new run possible",detail:ee},children:U}):e.jsx(Lt,{header:I(S),children:U}):e.jsx(y,{header:I(S),state:Et,children:U}),D]});const H=re.find(s=>s.id===d),Ae=()=>{d!==void 0&&(se(void 0),Xe(d,bt).catch(s=>se(`Stop failed: ${s instanceof Error?s.message:String(s)}`)))},_e=c?e.jsx(et,{activeId:d,onCreate:m?Le:void 0,onSelect:Te,onToggleSelected:()=>{},registry:r,seenRevisions:x.revisions,selectMode:!1,selectedIds:yt,sessions:re}):e.jsx("p",{className:ye,children:"No runs are enabled for this user account."});return e.jsxs("div",{className:"flex h-full flex-col bg-[image:var(--surface-backdrop)]",children:[c&&d?e.jsxs(e.Fragment,{children:[e.jsxs("header",{className:Se,children:[e.jsx(E,{"aria-label":"Back to Start",className:"self-center",onClick:M,size:"icon-lg",title:"Back to Start",variant:"ghost",children:e.jsx(le,{})}),e.jsx("div",{"aria-label":"Run title bar",className:"flex min-w-0 flex-1 items-stretch overflow-x-auto no-scrollbar",ref:Ie,role:"region"}),t&&e.jsx("span",{className:de,title:`Server ${t}`,children:t}),e.jsx(Je,{className:"self-center px-1.5",state:H!=null&&H.running?"running":"idle"}),e.jsx(Ge,{className:"self-center",disabled:!u,label:"Stop run",onClick:Ae,size:"icon-lg",title:"Stop the run with all agents and flows"}),e.jsx("div",{"aria-label":"Panel tools",className:"flex flex-none items-center empty:hidden",ref:Pe,role:"toolbar"}),e.jsx(Q,{onOpenSettings:G,runId:d})]}),ne&&e.jsx(ce,{variant:"destructive",children:ne}),e.jsx("main",{className:"relative z-1 flex min-h-0 min-w-0 flex-1 @container/chat-content",children:e.jsx(Z,{autoFocusChat:P===d&&!L&&!h,onAutoFocusChatSettled:g,toolbarContainer:Oe,headerContainer:Ee,initialStartOptions:V,layout:"panel",onViewed:x.markViewed,registry:r,session:H??ke(d,k),viewing:!h&&!L},d)})]}):e.jsxs(e.Fragment,{children:[e.jsxs("header",{className:St,children:[e.jsx(xt,{"aria-hidden":!0,className:"size-4 flex-none text-muted-foreground"}),e.jsx("strong",{className:"min-w-0 flex-1 truncate text-[0.82rem] font-semibold",children:r.brand.title}),e.jsx(Q,{onOpenSettings:G})]}),e.jsxs("div",{className:"min-h-0 flex-1 overflow-auto p-3",children:[Re&&e.jsx(ce,{className:"mb-3",variant:"destructive",children:"The server is unreachable."}),_e]})]}),D,ae]})}async function Pt(t,a,r){const n=a.startEntries.find(l=>l.id===t.entryId);if(!n)throw new Error("This template does not exist in this profile.");if(!pe(r,n.id))throw new Error(`${n.title} is not enabled for this user account.`);if(t.startOptions){const l=await Ke(t.runId),c=xe(t.startOptions,n.fixedStartOptions);for(const[u,f]of Qe(l,c))await We(t.runId,u,f)}await Ye(t.runId,n,null)}function Lt({children:t,header:a}){const[r,n]=o.useState(!1);return o.useEffect(()=>{const l=window.setTimeout(()=>n(!0),jt);return()=>window.clearTimeout(l)},[]),r?e.jsx(y,{header:a,state:Ct,children:t}):e.jsx(y,{header:a,state:Rt})}function y({children:t,header:a,headless:r=!1,state:n}){return e.jsxs("div",{className:"flex h-full flex-col bg-[image:var(--surface-backdrop)]",children:[!r&&e.jsx("header",{className:Se,children:a}),e.jsx("main",{className:"grid min-h-0 flex-1 place-items-center overflow-hidden p-6",children:e.jsx(Ve,{state:n,children:t})})]})}function Tt({elementId:t,registry:a,runId:r}){const n=B(),l=X().can("runs.read"),{sessions:c}=je(l);return o.useEffect(()=>{n.notify({type:"ready"})},[n]),l?e.jsx("main",{className:"relative flex h-full min-h-0 min-w-0 flex-1 bg-background @container/chat-content",children:e.jsx(Z,{layout:{element:t},registry:a,session:c.find(u=>u.id===r)??ke(r)},r)}):e.jsx("p",{className:ye,children:"No runs are enabled for this user account."})}function At(){const t=B();return e.jsxs(fe,{children:[e.jsx("h1",{className:"my-3 text-[1.5rem]",children:"Sign-in required"}),e.jsx("p",{className:"mb-6 leading-normal text-muted-foreground",children:"Sign-in goes through VS Code. The panel then reloads."}),e.jsx(E,{className:"w-full",onClick:()=>t.requestLogin(),children:"Sign in with VS Code"})]})}const C=t=>t!=null&&t.trim()?t.trim():void 0,_t=t=>{if(t==="browser"||t==="vscode")return t;throw new Error(`Unknown host ${JSON.stringify(t)}. Allowed are browser and vscode.`)};function zt(t){const a=new URLSearchParams(t),r=C(a.get("layout"))??"panel";if(r!=="panel"&&r!=="app")throw new Error(`Unknown layout ${JSON.stringify(r)}. Allowed are panel and app.`);const n=C(a.get("theme"));if(n!==void 0&&!tt(n))throw new Error(`Unknown theme ${JSON.stringify(n)}. Allowed are light and dark.`);const l={host:_t(C(a.get("host"))??"browser"),connection:C(a.get("connection")),theme:n,access:C(a.get(nt))},c=C(a.get("run"));if(r==="panel")return{layout:r,runId:c,...l};const u=C(a.get("element"));if(!c||!u)throw new Error("The app layout needs run and element.");return{layout:r,runId:c,elementId:u,...l}}st();const Ne=document.getElementById("root");if(!Ne)throw new Error("Root element is missing");const he=rt.createRoot(Ne);try{const t=zt(window.location.search);t.access!==void 0&&ot(t.access);const a=at(t.host,window);if(t.host==="vscode"){const n=it(window)}const r=lt(window);t.theme!==void 0&&r.setPreference(t.theme),a.onCommand(n=>{n.type==="theme"&&r.setPreference(n.theme)}),he.render(e.jsx(o.StrictMode,{children:e.jsx(ct,{children:e.jsx(dt,{value:a,children:e.jsx(ut,{value:t.host==="vscode"?{open:a.openPage}:void 0,children:e.jsx(ht,{Login:t.host==="vscode"?At:void 0,children:e.jsx(It,{location:t})})})})})}))}catch(t){he.render(e.jsxs(fe,{children:[e.jsx("h1",{className:"my-3 text-[1.5rem]",children:"The RAgents panel could not be loaded"}),e.jsx("p",{className:"mb-6 leading-normal",role:"alert",children:t instanceof Error?t.message:String(t)}),e.jsx(E,{onClick:()=>window.location.reload(),variant:"outline",children:"Reload"})]}))}

package/apps/web/dist/help/guide-clients.html

@@ -137,6 +137,13 @@ tab bar on the right. Without <code>run</code>, it shows the run list with &quot
 card. <code>run-panel.html?layout=app&amp;run=&lt;id&gt;&amp;element=&lt;app-id&gt;</code> shows one mini-app without the tab bar.
 Run-panel state, including the selected app and actor, view mode, chat width, collapsed chat
 height, open tab, and tab-area height, is stored per run in the browser.</p>
+<p>With write rights, the menu at the top right of an open run offers &quot;Run script&quot;: it lists the run
+scripts you may start, each with its description, and greyed out with the reason when it cannot
+join this run, because its <code>RUN.md</code> does not set <code>embeddable: true</code> or because it fixes a start
+option to a value the run does not have. A click starts it inside the run without a start value;
+the primary actor stays, a repeated start reuses the script, its main view is placed next to the
+tiles, and its output and summary appear in the chat as <code>@handle: ...</code>. If the start is refused,
+the menu shows why. The same menu works in the VS Code run panel.</p>
 <p>The narrow tab bar on the right contains the same tabs as the full web view: files, documents,
 functions, executions, and language-server diagnostics, depending on the run and the user&#39;s
 permissions. The tab name appears in a tooltip. A small counter sits at the top right of its
@@ -328,9 +335,9 @@ in their URL (the server accepts a bearer token or the <code>access</code> query
 After expiry or a server restart, that server asks for sign-in again without affecting others.
 <code>RAgents: Sign out</code> revokes the session.</p>
 <h2 id="control-ragents-as-an-agent">Control RAgents as an agent</h2>
-<p>An AI agent working on the same machine controls RAgents through four <code>ragents</code> subcommands. In
-a checkout, use <code>pnpm ragents &lt;command&gt;</code>. These commands are the agent-facing contract: each one
-waits for the turn to end and returns an exit code.</p>
+<p>An AI agent working on the same machine controls RAgents through five <code>ragents</code> subcommands. In
+a checkout, use <code>pnpm ragents &lt;command&gt;</code>. These commands are the agent-facing contract: <code>run</code> and
+<code>send</code> wait for the turn to end, and every command returns an exit code.</p>
 <pre><code class="language-sh">ragents provision developer                                  # once per machine
 ragents run selftest/workspace-project &quot;Fix the type error in src/broken.ts&quot;
 ragents send &lt;runId&gt; &quot;Read README.md and report the passphrase&quot;
@@ -338,6 +345,8 @@ ragents journal &lt;runId&gt; --tools
 ragents stop &lt;runId&gt;                                         # interrupt the primary actor&#39;s active turn
 ragents stop &lt;runId&gt; --run                                   # emergency stop: halt the whole run
 ragents stop --host                                          # stop the remembered host
+ragents script &lt;runId&gt;                                       # list the run scripts and whether each can join the run
+ragents script &lt;runId&gt; &lt;entry&gt; --input &#39;{&quot;topic&quot;:&quot;Launch&quot;}&#39;  # start one inside the running run
 ragents --help                                               # same as ragents help
 </code></pre>
 <p><code>run</code> checks <code>GET &lt;address&gt;/health</code> to see whether the profile host is already running. If not,
@@ -370,7 +379,11 @@ exactly like the stop button in the chat input: the run and all actors stay acti
 next task, and without an active turn nothing happens. <code>stop &lt;runId&gt; --run</code> is the emergency stop (<code>ragents.chat.stop</code>): it aborts every turn
 and stops all actors of the run. <code>stop --host</code> terminates exactly the PID in <code>host.json</code>, never a
 process pattern, and only if the host at the recorded address reports that same PID from
-<code>/health</code>; otherwise it fails, leaves the process alone and removes the stale record. <code>ragents --help</code> and <code>ragents help</code> show usage and exit with 0; invoking the
+<code>/health</code>; otherwise it fails, leaves the process alone and removes the stale record.
+<code>script &lt;runId&gt;</code> lists the run scripts through <code>ragents.runs.scripts</code>, one per line with id, title,
+and the reason if one cannot join; <code>script &lt;runId&gt; &lt;entry&gt; [--input &lt;json&gt;]</code> starts it inside the
+run through <code>ragents.runs.startScript</code> as the run&#39;s user and prints <code>script: @&lt;handle&gt;, start &lt;n&gt;</code>;
+a refusal is an error with exit code 1. <code>--json</code> prints the RPC results instead. <code>ragents --help</code> and <code>ragents help</code> show usage and exit with 0; invoking the
 command without arguments is an error with exit code 1.</p>
 <p><code>--profile &lt;profile|path&gt;</code> selects something other than <code>developer</code>: a profile name beside the
 host or the path to a custom <code>ragents.config.&lt;profile&gt;.ts</code> anywhere on disk. Resolution matches
@@ -436,6 +449,10 @@ requests as Server-Sent Events:</p>
   -d &#39;{&quot;jsonrpc&quot;:&quot;2.0&quot;,&quot;id&quot;:1,&quot;method&quot;:&quot;ragents.runs.list&quot;,&quot;params&quot;:{}}&#39;
 </code></pre>
 <p>The response contains either <code>result</code> or <code>error</code>; <code>error.data</code> provides <code>code</code> and <code>status</code>.</p>
+<p>A run script whose <code>RUN.md</code> sets <code>embeddable: true</code> also starts inside a running run:
+<code>ragents.runs.startScript</code> with <code>runId</code>, <code>entry</code>, and <code>input</code> waits and returns the script actor and
+which start of its package in the run this was, or the reason in <code>error</code>. The primary actor stays;
+a repeated start reuses the script&#39;s actor.</p>
 <p>Without HTTP, use stdio: <code>pnpm start -- --stdio</code> exchanges one JSON message per line through
 stdin and stdout and opens no port. The startup modes are:</p>
 <ul>

package/apps/web/dist/help/guide-clients.md

@@ -11,6 +11,14 @@ card. `run-panel.html?layout=app&run=<id>&element=<app-id>` shows one mini-app w
 Run-panel state, including the selected app and actor, view mode, chat width, collapsed chat
 height, open tab, and tab-area height, is stored per run in the browser.
 
+With write rights, the menu at the top right of an open run offers "Run script": it lists the run
+scripts you may start, each with its description, and greyed out with the reason when it cannot
+join this run, because its `RUN.md` does not set `embeddable: true` or because it fixes a start
+option to a value the run does not have. A click starts it inside the run without a start value;
+the primary actor stays, a repeated start reuses the script, its main view is placed next to the
+tiles, and its output and summary appear in the chat as `@handle: ...`. If the start is refused,
+the menu shows why. The same menu works in the VS Code run panel.
+
 The narrow tab bar on the right contains the same tabs as the full web view: files, documents,
 functions, executions, and language-server diagnostics, depending on the run and the user's
 permissions. The tab name appears in a tooltip. A small counter sits at the top right of its
@@ -224,9 +232,9 @@ After expiry or a server restart, that server asks for sign-in again without aff
 
 ## Control RAgents as an agent
 
-An AI agent working on the same machine controls RAgents through four `ragents` subcommands. In
-a checkout, use `pnpm ragents <command>`. These commands are the agent-facing contract: each one
-waits for the turn to end and returns an exit code.
+An AI agent working on the same machine controls RAgents through five `ragents` subcommands. In
+a checkout, use `pnpm ragents <command>`. These commands are the agent-facing contract: `run` and
+`send` wait for the turn to end, and every command returns an exit code.
 
 ```sh
 ragents provision developer                                  # once per machine
@@ -236,6 +244,8 @@ ragents journal <runId> --tools
 ragents stop <runId>                                         # interrupt the primary actor's active turn
 ragents stop <runId> --run                                   # emergency stop: halt the whole run
 ragents stop --host                                          # stop the remembered host
+ragents script <runId>                                       # list the run scripts and whether each can join the run
+ragents script <runId> <entry> --input '{"topic":"Launch"}'  # start one inside the running run
 ragents --help                                               # same as ragents help
 ```
 
@@ -272,7 +282,11 @@ exactly like the stop button in the chat input: the run and all actors stay acti
 next task, and without an active turn nothing happens. `stop <runId> --run` is the emergency stop (`ragents.chat.stop`): it aborts every turn
 and stops all actors of the run. `stop --host` terminates exactly the PID in `host.json`, never a
 process pattern, and only if the host at the recorded address reports that same PID from
-`/health`; otherwise it fails, leaves the process alone and removes the stale record. `ragents --help` and `ragents help` show usage and exit with 0; invoking the
+`/health`; otherwise it fails, leaves the process alone and removes the stale record.
+`script <runId>` lists the run scripts through `ragents.runs.scripts`, one per line with id, title,
+and the reason if one cannot join; `script <runId> <entry> [--input <json>]` starts it inside the
+run through `ragents.runs.startScript` as the run's user and prints `script: @<handle>, start <n>`;
+a refusal is an error with exit code 1. `--json` prints the RPC results instead. `ragents --help` and `ragents help` show usage and exit with 0; invoking the
 command without arguments is an error with exit code 1.
 
 `--profile <profile|path>` selects something other than `developer`: a profile name beside the
@@ -355,6 +369,11 @@ curl -s http://localhost:4710/rpc -H 'content-type: application/json' \
 
 The response contains either `result` or `error`; `error.data` provides `code` and `status`.
 
+A run script whose `RUN.md` sets `embeddable: true` also starts inside a running run:
+`ragents.runs.startScript` with `runId`, `entry`, and `input` waits and returns the script actor and
+which start of its package in the run this was, or the reason in `error`. The primary actor stays;
+a repeated start reuses the script's actor.
+
 Without HTTP, use stdio: `pnpm start -- --stdio` exchanges one JSON message per line through
 stdin and stdout and opens no port. The startup modes are:
 

package/apps/web/dist/help/guide-plugins.html

@@ -194,6 +194,11 @@ functions, actor programs, language servers, and interfaces; they add no new mec
 <td>Setup in code, domain decisions in the responsible model</td>
 </tr>
 <tr>
+<td>Program several run scripts use</td>
+<td>Shared actor package in the owning plugin (<code>actors/&lt;name&gt;/</code>)</td>
+<td>One actor per run; scripts name it and ensure it, none copies it</td>
+</tr>
+<tr>
 <td>Reusable work instructions</td>
 <td>Skill in the owning plugin</td>
 <td>Describes the approach but does not perform required initialization</td>
@@ -253,6 +258,11 @@ a successful check. A compact status contract can expose state and work step wit
 reasoning or tool arguments. Grant diagnostic and change permissions independently from full
 technical inspection and enforce them on the server. Roles belong in configuration; neutral
 components check permissions, not user names.</p>
+<p>A service that trusts a TypeScript actor more than others asks the actor programs service who it
+is: <code>programOf(runId, actorId)</code> names the package, its revision, and its origin, a shared package
+of a plugin, a run script&#39;s template, or a package created in the run, and a package changed in the
+run counts as created there. Authorize by that identity, never by handle or package name: any
+agent with the program functions creates a package under any free name.</p>
 <h3 id="7-develop-mini-apps-in-the-actual-host">7. Develop mini-apps in the actual host</h3>
 <p>The iframe constrains interaction, layout, and communication. Use shared controls and the
 declared function bridge. For a dialog spanning host areas, the app signals intent through a
@@ -341,8 +351,8 @@ bound identity apply equally, while a program&#39;s <code>capabilities</code> li
 <p>Every domain function is available through <code>context.functions</code> in <code>typescript_eval</code>.
 <code>nativeTool: true</code> additionally exposes it as a native model tool when the model normally must
 read its result before taking the next step: browser interactions, domain reports and status,
-language diagnostics, <code>read</code>, <code>edit</code>, <code>write</code>, <code>bash</code>, <code>document_write</code>, <code>show_document</code>, and
-<code>browser_view_screenshot</code>, which can return image pixels only natively. Snippets remain the right
+language diagnostics, <code>read</code>, <code>edit</code>, <code>write</code>, <code>bash</code>, <code>document_write</code>, <code>show_document</code>,
+<code>ask_user</code>, and <code>browser_view_screenshot</code>, which can return image pixels only natively. Snippets remain the right
 form for calls that combine, filter, or pass results onward, including data queries, management
 functions, list results, and values passed from earlier responses without transcription. Native
 tools remain callable from snippets. The building-block reference marks them in the catalog and

package/apps/web/dist/help/guide-plugins.md

@@ -37,6 +37,7 @@ functions, actor programs, language servers, and interfaces; they add no new mec
 | Investigation, conversation, or multi-step implementation | LLM actor with suitable functions | Context and tools must match the task |
 | Controls or status for an existing actor | View on that actor | An interface alone does not justify another actor |
 | Repeatable prepared run | Run script in the owning plugin | Setup in code, domain decisions in the responsible model |
+| Program several run scripts use | Shared actor package in the owning plugin (`actors/<name>/`) | One actor per run; scripts name it and ensure it, none copies it |
 | Reusable work instructions | Skill in the owning plugin | Describes the approach but does not perform required initialization |
 
 ### 1. Keep capabilities and workflows separate
@@ -105,6 +106,12 @@ reasoning or tool arguments. Grant diagnostic and change permissions independent
 technical inspection and enforce them on the server. Roles belong in configuration; neutral
 components check permissions, not user names.
 
+A service that trusts a TypeScript actor more than others asks the actor programs service who it
+is: `programOf(runId, actorId)` names the package, its revision, and its origin, a shared package
+of a plugin, a run script's template, or a package created in the run, and a package changed in the
+run counts as created there. Authorize by that identity, never by handle or package name: any
+agent with the program functions creates a package under any free name.
+
 ### 7. Develop mini-apps in the actual host
 
 The iframe constrains interaction, layout, and communication. Use shared controls and the
@@ -212,8 +219,8 @@ bound identity apply equally, while a program's `capabilities` limit its install
 Every domain function is available through `context.functions` in `typescript_eval`.
 `nativeTool: true` additionally exposes it as a native model tool when the model normally must
 read its result before taking the next step: browser interactions, domain reports and status,
-language diagnostics, `read`, `edit`, `write`, `bash`, `document_write`, `show_document`, and
-`browser_view_screenshot`, which can return image pixels only natively. Snippets remain the right
+language diagnostics, `read`, `edit`, `write`, `bash`, `document_write`, `show_document`,
+`ask_user`, and `browser_view_screenshot`, which can return image pixels only natively. Snippets remain the right
 form for calls that combine, filter, or pass results onward, including data queries, management
 functions, list results, and values passed from earlier responses without transcription. Native
 tools remain callable from snippets. The building-block reference marks them in the catalog and

package/apps/web/dist/help/guide-programs.html

@@ -181,8 +181,11 @@ views.</p>
 as its default export. The TypeBox contract describes <code>state</code>, <code>functions</code>, and optional <code>input</code>.</p>
 <p>State must accept the initial value <code>{}</code>. Each function declares its input and output, with
 optional granted capabilities, confirmation, and publication as a tool. The implementation
-contains the same functions and, when input is declared, an <code>onInput</code> handler. TypeScript derives
-input, result, and state types from the contract.</p>
+contains the same functions and, when input is declared, an <code>onInput</code> handler; a run script can
+add <code>onStart</code>, which receives its starts instead of <code>onInput</code>, <code>onResult</code> for the results of scripts
+it starts itself, and ends a start with <code>context.finish</code> (details in
+<a href="https://github.com/SchlenkR/RAgents/blob/main/docs/spec/typescript-platform.md">TypeScript platform</a>, Run scripts). TypeScript derives input, result, and
+state types from the contract.</p>
 <p>Each function receives <code>(input, context)</code> and returns only its domain result.
 <code>context.state.replace</code> stages state changes; a return value is never also interpreted as new
 state. <code>context.actor</code> identifies the actor that owns the function and state.
@@ -227,6 +230,9 @@ only then activates the verified version. Errors identify the location to fix.</
 <code>typescript_api</code> returns their exact contracts, and snippets call them through
 <code>context.functions</code>. Reactivation updates the schemas; removed functions disappear from the same
 catalog. No additional call contract is needed.</p>
+<p><code>actor_program_ensure</code> makes a package active only when it is not: it returns an active package
+unchanged, restarts its stopped actor, activates an installed package, or installs a shared
+package of the profile (<a href="https://github.com/SchlenkR/RAgents/blob/main/docs/spec/typescript-platform.md">TypeScript platform</a>, Run scripts).</p>
 <p><code>actor_program_list</code> shows installed programs. <code>actor_program_remove</code> removes the binding and its
 views. It also stops a TypeScript actor, while an existing LLM actor remains. Activating a package
 of the same name again restarts that stopped actor with its state instead of creating another. Sources stay

package/apps/web/dist/help/guide-programs.md

@@ -65,8 +65,11 @@ as its default export. The TypeBox contract describes `state`, `functions`, and
 
 State must accept the initial value `{}`. Each function declares its input and output, with
 optional granted capabilities, confirmation, and publication as a tool. The implementation
-contains the same functions and, when input is declared, an `onInput` handler. TypeScript derives
-input, result, and state types from the contract.
+contains the same functions and, when input is declared, an `onInput` handler; a run script can
+add `onStart`, which receives its starts instead of `onInput`, `onResult` for the results of scripts
+it starts itself, and ends a start with `context.finish` (details in
+[TypeScript platform](https://github.com/SchlenkR/RAgents/blob/main/docs/spec/typescript-platform.md), Run scripts). TypeScript derives input, result, and
+state types from the contract.
 
 Each function receives `(input, context)` and returns only its domain result.
 `context.state.replace` stages state changes; a return value is never also interpreted as new
@@ -119,6 +122,10 @@ Published functions appear in the current TypeScript API even during an active L
 `context.functions`. Reactivation updates the schemas; removed functions disappear from the same
 catalog. No additional call contract is needed.
 
+`actor_program_ensure` makes a package active only when it is not: it returns an active package
+unchanged, restarts its stopped actor, activates an installed package, or installs a shared
+package of the profile ([TypeScript platform](https://github.com/SchlenkR/RAgents/blob/main/docs/spec/typescript-platform.md), Run scripts).
+
 `actor_program_list` shows installed programs. `actor_program_remove` removes the binding and its
 views. It also stops a TypeScript actor, while an existing LLM actor remains. Activating a package
 of the same name again restarts that stopped actor with its state instead of creating another. Sources stay

package/apps/web/dist/help/guide-runtime.html

@@ -317,8 +317,9 @@ way, by the host, a run script, or an actor program, are checked by the schedule
 it runs (any driver except <code>manual</code>) is created or restarted, it resolves the requested names the way a turn would, counting functions
 that are currently unavailable as known. A name that no host function provides stops the actor
 before its first turn, and the stop reason names the unknown tools. The selection is not
-inherited, although delegable engine capabilities still are. <code>withoutCapabilities</code> removes
-named technical permissions. Availability and grants also apply when the value is <code>null</code>.
+inherited, although delegable engine capabilities still are, except that an inherited copy of a
+first-hand capability (<code>firstHandCapabilities</code> in <code>domain/vocabulary.ts</code>, today <code>script.start</code>) is
+not delegable further. <code>withoutCapabilities</code> removes named technical permissions. Availability and grants also apply when the value is <code>null</code>.
 <code>forkOf</code> (a handle or ID) makes the new agent a fork of an LLM agent in the same run:
 <code>agent.spawned</code> records the source, and the new agent&#39;s context begins with an unchanged copy of
 the source&#39;s context up to the end of the source&#39;s last finished turn, reasoning blocks included.

package/apps/web/dist/help/guide-runtime.md

@@ -203,8 +203,9 @@ way, by the host, a run script, or an actor program, are checked by the schedule
 it runs (any driver except `manual`) is created or restarted, it resolves the requested names the way a turn would, counting functions
 that are currently unavailable as known. A name that no host function provides stops the actor
 before its first turn, and the stop reason names the unknown tools. The selection is not
-inherited, although delegable engine capabilities still are. `withoutCapabilities` removes
-named technical permissions. Availability and grants also apply when the value is `null`.
+inherited, although delegable engine capabilities still are, except that an inherited copy of a
+first-hand capability (`firstHandCapabilities` in `domain/vocabulary.ts`, today `script.start`) is
+not delegable further. `withoutCapabilities` removes named technical permissions. Availability and grants also apply when the value is `null`.
 `forkOf` (a handle or ID) makes the new agent a fork of an LLM agent in the same run:
 `agent.spawned` records the source, and the new agent's context begins with an unchanged copy of
 the source's context up to the end of the source's last finished turn, reasoning blocks included.

package/apps/web/dist/help/index.html

@@ -290,7 +290,7 @@ a { color: inherit; text-underline-offset: 4px; }
     <div class="end" data-end><button type="button" class="end-button" data-replay><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M3 12a9 9 0 1 0 9-9 9.75 9.75 0 0 0-6.74 2.74L3 8"/><path d="M3 3v5h5"/></svg>Replay</button><button type="button" class="end-button" data-onward><svg class="end-arrow" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 5v14"/><path d="m19 12-7 7-7-7"/></svg>Scroll down</button></div>
   </div>
   <div class="sr-only story" data-story>
-    <article data-chapter="workspace" id="setups" data-anchor="setups"><h2><span>Tailor a workspace</span> <span>for a task</span></h2><p>The script builds the workspace, so the agents start with everything in place.</p><ul class="bullets"><li>A setup script creates agents, scripts and mini-apps</li><li>Start it again with one click</li><li>Ask for inputs before the run starts</li></ul><p class="how"><span class="how-label">How it works</span> A setup is a tested TypeScript package that appears as a start card. Its script starts agents, TypeScript programs and mini-apps through the same functions the AI uses. A setup dialog can ask for values, such as a repository or a topic, before the run starts.</p></article>
+    <article data-chapter="workspace" id="setups" data-anchor="setups"><h2><span>Tailor a workspace</span> <span>for a task</span></h2><p>The script builds the workspace, so the agents start with everything in place.</p><ul class="bullets"><li>A setup script creates agents, scripts and mini-apps</li><li>Start it again with one click</li><li>Add a setup to a run that is already running</li><li>Ask for inputs before the run starts</li></ul><p class="how"><span class="how-label">How it works</span> A setup is a tested TypeScript package that appears as a start card. Its script starts agents, TypeScript programs and mini-apps through the same functions the AI uses. A setup dialog can ask for values, such as a repository or a topic, before the run starts. A setup marked as embeddable also joins a running run, from the run menu, the command line or the coordinator, and reports its result back.</p></article>
     <article data-chapter="agents" id="agents" data-anchor="agents"><h2><span>Everyone talks</span> <span>to everyone</span></h2><p>Agents write plain text to each other, addressed by handle, such as @agent1.</p><ul class="bullets"><li>Agents hand work to each other</li><li>Agents talk to scripts, scripts answer</li><li>People talk to agents and mini-apps</li><li>Mini-apps talk to people and agents</li><li class="wink">... you get the idea :)</li></ul><p class="how"><span class="how-label">How it works</span> Each agent has its own model, prompt, history and handle. A coordinator takes the task and hands out work. A helper starts with no tools, a picked list, or all tools. When an agent asks you something, the choices appear in the chat and your answer goes back to that agent.</p></article>
     <article data-chapter="ui" id="ui" data-anchor="ui"><h2><span>Agents with</span> <span>their own UI</span></h2><p>People are used to working with interfaces. A UI shows what the agent is doing, and you step in with a click.</p><ul class="bullets"><li>The AI builds a UI while it works</li><li>Extensions ship UIs ready to use</li><li>You and the agent use the same UI and state</li><li>Your click goes straight to the agent</li><li>A new UI goes live after its tests pass</li></ul><p class="how"><span class="how-label">How it works</span> A mini-app is a React view on the state of an agent or a TypeScript program. Its buttons call the program's typed functions directly. The AI type-checks and tests a new view before it goes live; if a rebuild fails, the old version stays active. In VS Code, a mini-app opens in its own editor tab.</p></article>
     <article data-chapter="typescript" id="typescript" data-anchor="typescript"><h2><span>Tools are</span> <span>TypeScript functions</span></h2><ul class="bullets"><li>Register a typed function once, from your own plugin</li><li>Agents get it as a tool</li><li>AI-written code calls it, type-checked first</li><li>A button calls it without a model</li><li>Programs call it when events arrive</li></ul><p class="how"><span class="how-label">How it works</span> A snippet runs once and returns its result to the model. A program keeps its state and reacts to later messages. A setup starts agents, programs and UIs. All of them call the same typed functions, with the same permission checks.</p></article>

package/apps/web/dist/help/mini-app.css

@@ -855,8 +855,8 @@
   .w-\[42px\] {
     width: 42px;
   }
-  .w-\[220px\] {
-    width: 220px;
+  .w-\[260px\] {
+    width: 260px;
   }
   .w-\[calc\(100\%-3rem\)\] {
     width: calc(100% - 3rem);
@@ -3238,6 +3238,11 @@
   .disabled\:opacity-60:disabled {
     opacity: 60%;
   }
+  @media (hover: hover) {
+    .disabled\:hover\:bg-transparent:disabled:hover {
+      background-color: transparent;
+    }
+  }
   :where([data-detail-level="summary"]) .in-data-\[detail-level\=summary\]\:py-\[10px\] {
     padding-block: 10px;
   }

package/apps/web/dist/host-web.json

@@ -1,8 +1,8 @@
 {
   "inputs": {
-    "apps/server/src/api/contracts.ts": "88d12d6b852a8d3b76a9fdba310f6e0e2e173558dd5663ab6e311c8ab9944346",
-    "apps/server/src/host-api.ts": "0495247e24ec1d62b148f4293d526f62994855d4072c5d06b1c6ec551b1201d1",
-    "apps/server/src/plugin-support/actor-programs/contract.ts": "70923e56f2780f71378a3420613256e27c724e6a82844c5486112d6fefc16624",
+    "apps/server/src/api/contracts.ts": "5dcbff61b0e317a674fa58475027e1d30da6ac9f1812aced1fdbf325c4271a91",
+    "apps/server/src/host-api.ts": "e5cd123304fbf0567eef1985e0e1b9ce3b1cf845f111238fa755b36d928a3e1f",
+    "apps/server/src/plugin-support/actor-programs/contract.ts": "e8a1ba7dde7b73ad8904bafba2f61b4ef1ea0f0aa957fae2a76920edfc668974",
     "apps/server/src/plugin-support/chat-display-contract.ts": "2fb8aab13b5a60b4fe28f87f93cc82afb34b7d8ef1463e376bc3cbc0bcdc797b",
     "apps/server/src/plugin-support/language-server/contract.ts": "01794d6b63c19bb3c201412b45480d8dde5bd0f3d50459fb936a5e9b314d5a83",
     "apps/server/src/plugin-support/product-model-settings-contract.ts": "40d139db6a5c9047ad832c4f29465321e939cdf610789c367f9d064878c3e5f7",
@@ -64,9 +64,9 @@
     "apps/web/src/run-panel/input-bridge.ts": "4c3deb8fe115286d20f29f92a6ae6cb38dbae8c883deb97e6f6c32c64fba843d",
     "apps/web/src/run-panel/keyboard.ts": "e89266a2e99c2d96dbec79f5c1aef937101cebdfa74fdc0b4bb1688986097526",
     "apps/web/src/run-panel/run-panel-location.ts": "d191d3d9da695f277cd8f899b9682ba149c4bf1ae8e3cecc1bc2bc60bf3e7adb",
-    "apps/web/src/run-panel/RunPanelApp.tsx": "534c14df4d66d2c677812a0952a8622f41b826acf167bec2ec90ac732fb8f0f1",
+    "apps/web/src/run-panel/RunPanelApp.tsx": "a9541eafa3f67fc01e02ae3219bb6304bb0f91f43a97ade6a8313ab4c9b4c695",
     "apps/web/src/run-panel/RunPanelHeader.tsx": "a1ffbdbf4a705f14b859f11041f7954bfaccc7abe9b7640e7235774a953e0bad",
-    "apps/web/src/run-panel/RunPanelMenu.tsx": "db7809ac8ed1730e9504a237b977ec11b9629031a3ac9f7794f3aa600f220f46",
+    "apps/web/src/run-panel/RunPanelMenu.tsx": "ea12a2e0a0867dbaee5e01473822ef238a9edb1739819140e3a669c01b219b28",
     "apps/web/src/run-panel/RunPanelRail.tsx": "d3c0cddb28805690f92d1aeb5fe32a9d7459022cae2a4cdeb4c15b1c6196bd10",
     "apps/web/src/run-panel/RunPanelWorkspace.tsx": "f240418198b9b2dc39c041aa4f7dccd2412d9d46b06c8fa748e1f055aa04aeca",
     "apps/web/src/run-panel/use-session-list.ts": "740a1040b50b597055b3950fcd99c42b3c6eef2cbbbac00eaee1c02370540838",
@@ -138,6 +138,6 @@
     "packages/ragents/src/rpc/peer.ts": "9050dff218bdc6603478a77bdca241629f55c03b65f6efe7df598b53446b4c09",
     "packages/ragents/src/rpc/protocol.ts": "82bbcb8181a2f90708dc607922fef4a9d472cd82d6dede09324df778773699a6",
     "packages/ragents/src/runtime/domain-error.ts": "d6bf8fa09769c4137e616c83a84cb9c05a58bfa6c2e32c9404a1c202815837a4",
-    "pnpm-lock.yaml": "c7edb4e9414089daad46f922bae423d42b1257eb53ef490a3f0e3a8afb055fb3"
+    "pnpm-lock.yaml": "7a0ed220c7b68d8da22c5b6df864934dafa53aecad8e61d438ee86ddf79ee108"
   }
 }

package/apps/web/dist/index.html

@@ -5,8 +5,8 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="stylesheet" href="/ragents.css"  />
     <title>RAgents</title>
-    <script type="module" crossorigin src="/assets/main-BUN8m8SW.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/mermaid-HWGCJPDP-B1erZlFM.js">
+    <script type="module" crossorigin src="/assets/main-KBrc5Q77.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/mermaid-HWGCJPDP-CSCkaArr.js">
     <link rel="stylesheet" crossorigin href="/assets/mermaid-HWGCJPDP-BPn4aV2r.css">
   </head>
   <body>

package/apps/web/dist/run-panel.html

@@ -5,8 +5,8 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="stylesheet" href="/ragents.css"  />
     <title>RAgents Panel</title>
-    <script type="module" crossorigin src="/assets/runPanel-s8gGpr9M.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/mermaid-HWGCJPDP-B1erZlFM.js">
+    <script type="module" crossorigin src="/assets/runPanel-BjG5NBKm.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/mermaid-HWGCJPDP-CSCkaArr.js">
     <link rel="stylesheet" crossorigin href="/assets/mermaid-HWGCJPDP-BPn4aV2r.css">
   </head>
   <body>

package/apps/web/package.json

@@ -21,7 +21,7 @@
     "dompurify": "^3.4.13",
     "highlight.js": "^11.12.0",
     "lucide-react": "^1.46.0",
-    "quassel": "^0.4.0",
+    "quassel": "^0.4.2",
     "react": "^19.2.0",
     "react-diff-view": "^3.3.3",
     "react-dom": "^19.2.0",

package/apps/web/src/run-panel/RunPanelApp.tsx

@@ -231,7 +231,7 @@ function RunPanelPage({ connection, initialRunId, registry }: { connection: stri
               <RunStateIcon className="self-center px-1.5" state={session?.running ? "running" : "idle"} />
               <StopButton className="self-center" disabled={!writeRuns} label="Stop run" onClick={stop} size="icon-lg" title="Stop the run with all agents and flows" />
               <div aria-label="Panel tools" className="flex flex-none items-center empty:hidden" ref={setToolsContainer} role="toolbar" />
-              <RunPanelMenu onOpenSettings={openSettings} />
+              <RunPanelMenu onOpenSettings={openSettings} runId={runId} />
             </header>
             {stopError && <Alert variant="destructive">{stopError}</Alert>}
             <main className="relative z-1 flex min-h-0 min-w-0 flex-1 @container/chat-content">

package/apps/web/src/run-panel/RunPanelMenu.tsx

@@ -1,35 +1,71 @@
 import { useId, useRef, useState } from "react";
-import { ExternalLinkIcon, LogOutIcon, MoreVerticalIcon, SettingsIcon } from "lucide-react";
+import { ChevronLeftIcon, ExternalLinkIcon, LogOutIcon, MoreVerticalIcon, PlayIcon, SettingsIcon } from "lucide-react";
+import { coreContracts } from "@ragents/host/api/contracts";
+import type { RunScriptListing } from "../../../server/src/chat-handler";
 import { useAccess } from "../AccessContext";
+import { rpc } from "../rpc";
 import { Button, Popover, PopoverContent } from "../ui";
 import { useRunPanelHost } from "./host";
 
-const itemClass = "flex w-full cursor-pointer items-center gap-2.5 rounded-md px-2 py-1.5 text-left hover:bg-accent focus-visible:outline-2 focus-visible:outline-ring/60 focus-visible:-outline-offset-2 disabled:cursor-default disabled:opacity-50 [&>svg]:size-4 [&>svg]:flex-none [&>svg]:text-muted-foreground";
+const itemClass = "flex w-full cursor-pointer items-center gap-2.5 rounded-md px-2 py-1.5 text-left hover:bg-accent focus-visible:outline-2 focus-visible:outline-ring/60 focus-visible:-outline-offset-2 disabled:cursor-default disabled:opacity-50 disabled:hover:bg-transparent [&>svg]:size-4 [&>svg]:flex-none [&>svg]:text-muted-foreground";
 
-/** The menu at the top right of the panel: settings, server in the browser, and sign-out behind one button. */
-export function RunPanelMenu({ onOpenSettings }: { onOpenSettings: () => void }) {
+const messageOf = (cause: unknown): string => cause instanceof Error ? cause.message : String(cause);
+
+type Scripts = { readonly kind: "loading" } | { readonly kind: "ready"; readonly scripts: readonly RunScriptListing[] };
+
+/** The menu at the top right of the panel: settings, run scripts for the open run, server in the browser, and sign-out behind one button. */
+export function RunPanelMenu({ onOpenSettings, runId }: { onOpenSettings: () => void; runId?: string }) {
   const host = useRunPanelHost();
   const access = useAccess();
   const [open, setOpen] = useState(false);
   const [pending, setPending] = useState(false);
   const [error, setError] = useState<string>();
+  const [scripts, setScripts] = useState<Scripts>();
   const buttonRef = useRef<HTMLButtonElement>(null);
   const panelId = useId();
   const pressedAnchor = (details: { reason: string; event: Event }) =>
     details.reason === "outside-press" && details.event.target instanceof Node && buttonRef.current?.contains(details.event.target) === true;
+  const close = () => { setOpen(false); setScripts(undefined); setError(undefined); };
   const logout = () => {
     if (host.kind === "vscode") { host.requestLogout(); setOpen(false); return; }
     setPending(true);
     setError(undefined);
-    void access.logout().then(() => setOpen(false)).catch((cause: unknown) => setError(cause instanceof Error ? cause.message : String(cause))).finally(() => setPending(false));
+    void access.logout().then(() => setOpen(false)).catch((cause: unknown) => setError(messageOf(cause))).finally(() => setPending(false));
+  };
+  const listScripts = (run: string) => {
+    setScripts({ kind: "loading" });
+    setError(undefined);
+    void rpc.call(coreContracts.runs.scripts, { runId: run }).then((listed) => setScripts({ kind: "ready", scripts: listed }))
+      .catch((cause: unknown) => { setScripts({ kind: "ready", scripts: [] }); setError(messageOf(cause)); });
+  };
+  const startScript = (run: string, entry: string) => {
+    setPending(true);
+    setError(undefined);
+    void rpc.call(coreContracts.runs.startScript, { runId: run, entry, input: null }).then(close)
+      .catch((cause: unknown) => setError(messageOf(cause))).finally(() => setPending(false));
   };
+  const scriptRun = runId !== undefined && access.can("runs.write") ? runId : undefined;
   return <>
-    <Button aria-controls={open ? panelId : undefined} aria-expanded={open} aria-haspopup="dialog" aria-label="Panel menu" className="self-center" onClick={() => setOpen((value) => !value)} ref={buttonRef} size="icon-lg" title="Menu" variant="ghost"><MoreVerticalIcon /></Button>
-    <Popover onOpenChange={(next, details) => { if (!next && pressedAnchor(details)) return; setOpen(next); }} open={open}>
-      <PopoverContent align="end" anchor={buttonRef} aria-label="Panel menu" className="w-[220px] gap-0 p-1 text-[0.8rem]" collisionPadding={8} dim id={panelId} role="dialog" side="bottom">
-        <button className={itemClass} onClick={() => { setOpen(false); onOpenSettings(); }} type="button"><SettingsIcon />Settings</button>
-        {host.kind === "vscode" && <button className={itemClass} onClick={() => { setOpen(false); host.openExternal(new URL("/", window.location.href).toString()); }} type="button"><ExternalLinkIcon />Open in browser</button>}
-        {access.enabled && access.user && <button className={itemClass} disabled={pending} onClick={logout} title={access.user.id} type="button"><LogOutIcon /><span className="grid min-w-0"><span>Sign out</span><span className="truncate text-[0.68rem] text-muted-foreground">{access.user.label}</span></span></button>}
+    <Button aria-controls={open ? panelId : undefined} aria-expanded={open} aria-haspopup="dialog" aria-label="Panel menu" className="self-center" onClick={() => (open ? close() : setOpen(true))} ref={buttonRef} size="icon-lg" title="Menu" variant="ghost"><MoreVerticalIcon /></Button>
+    <Popover onOpenChange={(next, details) => { if (!next && pressedAnchor(details)) return; if (next) setOpen(true); else close(); }} open={open}>
+      <PopoverContent align="end" anchor={buttonRef} aria-label="Panel menu" className="w-[260px] gap-0 p-1 text-[0.8rem]" collisionPadding={8} dim id={panelId} role="dialog" side="bottom">
+        {scripts && scriptRun !== undefined ? <>
+          <button className={itemClass} onClick={() => { setScripts(undefined); setError(undefined); }} type="button"><ChevronLeftIcon />Run script</button>
+          <div aria-label="Run scripts" className="grid max-h-[50vh] overflow-auto border-t border-border-soft pt-1" role="list">
+            {scripts.kind === "loading" && <p className="px-2 py-1.5 text-muted-foreground">Loading run scripts ...</p>}
+            {scripts.kind === "ready" && scripts.scripts.length === 0 && !error && <p className="px-2 py-1.5 text-muted-foreground">This profile has no run scripts for you.</p>}
+            {scripts.kind === "ready" && scripts.scripts.map((script) => <button className={itemClass} disabled={pending || !script.available} key={script.id}
+              onClick={() => startScript(scriptRun, script.id)} role="listitem" title={script.reason ?? script.description} type="button">
+              <span className="grid min-w-0"><span className="truncate">{script.title}</span>
+                <span className="line-clamp-2 text-[0.68rem] text-muted-foreground">{script.available ? script.description : script.reason}</span></span>
+            </button>)}
+          </div>
+        </> : <>
+          <button className={itemClass} onClick={() => { close(); onOpenSettings(); }} type="button"><SettingsIcon />Settings</button>
+          {scriptRun !== undefined && <button className={itemClass} onClick={() => listScripts(scriptRun)} type="button"><PlayIcon />Run script</button>}
+          {host.kind === "vscode" && <button className={itemClass} onClick={() => { close(); host.openExternal(new URL("/", window.location.href).toString()); }} type="button"><ExternalLinkIcon />Open in browser</button>}
+          {access.enabled && access.user && <button className={itemClass} disabled={pending} onClick={logout} title={access.user.id} type="button"><LogOutIcon /><span className="grid min-w-0"><span>Sign out</span><span className="truncate text-[0.68rem] text-muted-foreground">{access.user.label}</span></span></button>}
+        </>}
         {error && <p className="px-2 py-1.5 text-[0.72rem] text-destructive" role="alert">{error}</p>}
       </PopoverContent>
     </Popover>

package/bundles/ragents.activity/ragents-bundle.json

@@ -23,7 +23,7 @@
     }
   },
   "revision": "b7b04d050f5f4bcb0980880167b8e2cdd3ad533ba07f589dd0de471b9e55c0fd",
-  "sourceRevision": "d0f96d5406c652a4ed17f8642adfc889bb3be49fc7948f84e0f889ecb910f26e",
+  "sourceRevision": "047290b262944aedbbbb4c4a819509c4bc3a7e0df4fa76b38d9e21ebe5626828",
   "server": "server/index.js",
   "web": {
     "entry": "web/index.js",

package/bundles/ragents.actor-programs/ragents-bundle.json

@@ -18,6 +18,7 @@
         "handleKey",
         "holdsUsable",
         "implement",
+        "inheritedGrants",
         "runCapabilityBindingHash",
         "runCapabilityContractHash",
         "schemaComplaints",
@@ -26,6 +27,7 @@
       "@ragents/host/plugin-support/actor-programs/app-project": [
         "compileAppBackend",
         "installServerSdk",
+        "packageIdentity",
         "prepareAppProject",
         "prepareAppWorkspace",
         "projectSourceFiles",
@@ -192,8 +194,8 @@
       ]
     }
   },
-  "revision": "e25685f9ef95c00333e76e28047747da063b0367833419273d936820fbf1078a",
-  "sourceRevision": "a90150418157ee1b04b3a4c91d1502f32d2e4b7dde1924b63598df7f9ff7360b",
+  "revision": "15fc5afb9aac414335069c28989cae4fa95fec8a2937584f8497a42ce01ffaba",
+  "sourceRevision": "6abd7c9e82683655c2bf5010641391a3960ccf495729a87ef00ef58cfb07f7af",
   "server": "server/index.js",
   "web": {
     "entry": "web/index.js",