@sumicom/quicksave 0.8.6 → 0.8.7

package/dist/handlers/legacyBusAdapter.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 King Young Technology
+// SPDX-License-Identifier: MIT
 import { createMessage, } from '@sumicom/quicksave-shared';
 /**
  * Verbs from the legacy `MessageHandler` switch that are exposed as bus
@@ -11,7 +13,7 @@ import { createMessage, } from '@sumicom/quicksave-shared';
  * touching:
  *   1. `messageHandler.ts` switch (the handler itself)
  *   2. This array (the bus exposure)
- *   3. The relevant docs (`docs/references/quicksave-architecture.md`)
+ *   3. The relevant docs (`docs/references/quicksave-architecture.en.md`)
  */
 export const LEGACY_BUS_VERBS = [
     'ping',
@@ -52,6 +54,10 @@ export const LEGACY_BUS_VERBS = [
     'agent:check-update',
     'agent:update',
     'agent:restart',
+    // systemd user-unit (Linux only — agent returns available:false elsewhere)
+    'systemd:status',
+    'systemd:install',
+    'systemd:uninstall',
     // codex
     'codex:list-models',
     'codex:login-start',
@@ -73,6 +79,7 @@ export const LEGACY_BUS_VERBS = [
     'session:update-history',
     'session:delete-history',
     'session:list-archived',
+    'session:mark-read',
     // project
     'project:list-summaries',
     'project:list-repos',
@@ -88,6 +95,10 @@ export const LEGACY_BUS_VERBS = [
     // files
     'files:list',
     'files:read',
+    // attachments
+    'attachment:upload',
+    'attachment:cancel',
+    'attachment:fetch',
 ];
 /**
  * Bridge legacy `MessageHandler` request/response verbs onto a
@@ -105,6 +116,7 @@ export const LEGACY_BUS_VERBS = [
  *   callers can `String#startsWith` to detect specific codes.
  */
 export function wireLegacyBusVerbs(bus, handler, verbs = LEGACY_BUS_VERBS) {
+    console.log(`[legacy-bus] wiring ${verbs.length} verbs; attachment* present: ${verbs.filter(v => v.startsWith('attachment:')).join(',') || 'NONE'}`);
     for (const verb of verbs) {
         bus.onCommand(verb, async (rawPayload, { peer }) => {
             let repoPath;

package/dist/handlers/legacyBusAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"legacyBusAdapter.js","sourceRoot":"","sources":["../../src/handlers/legacyBusAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,GAEd,MAAM,2BAA2B,CAAC;AAInC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAkB;IAC7C,MAAM;IACN,MAAM;IACN,YAAY;IACZ,UAAU;IACV,WAAW;IACX,aAAa;IACb,iBAAiB;IACjB,mBAAmB;IACnB,YAAY;IACZ,SAAS;IACT,cAAc;IACd,cAAc;IACd,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,KAAK;IACL,4BAA4B;IAC5B,yBAAyB;IACzB,gBAAgB;IAChB,uBAAuB;IACvB,QAAQ;IACR,kBAAkB;IAClB,mBAAmB;IACnB,wBAAwB;IACxB,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,yBAAyB;IACzB,uBAAuB;IACvB,0BAA0B;IAC1B,oBAAoB;IACpB,cAAc;IACd,eAAe;IACf,QAAQ;IACR,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,SAAS;IACT,cAAc;IACd,eAAe;IACf,eAAe;IACf,cAAc;IACd,iBAAiB;IACjB,4BAA4B;IAC5B,wBAAwB;IACxB,+BAA+B;IAC/B,kBAAkB;IAClB,UAAU;IACV,oBAAoB;IACpB,yBAAyB;IACzB,wBAAwB;IACxB,wBAAwB;IACxB,uBAAuB;IACvB,UAAU;IACV,wBAAwB;IACxB,oBAAoB;IACpB,gBAAgB;IAChB,OAAO;IACP,yBAAyB;IACzB,WAAW;IACX,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,QAAQ;IACR,YAAY;IACZ,YAAY;CACb,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAqB,EACrB,OAAuB,EACvB,QAAgC,gBAAgB;IAEhD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,UAAmB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC1D,IAAI,QAA4B,CAAC;YACjC,IAAI,OAAO,GAAY,UAAU,CAAC;YAClC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,YAAY,IAAI,OAAO,EAAE,CAAC;gBACtE,MAAM,GAAG,GAAG,OAAkC,CAAC;gBAC/C,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;oBAAE,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC;gBAClE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;gBAC3C,KAAK,KAAK,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACzC,IAAI,QAAQ,KAAK,SAAS;gBAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAA8C,CAAC;gBACpE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACrE,OAAO,EAAE,GAAI,QAAQ,CAAC,OAAkB,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC5E,CAAC;YACD,OAAO,QAAQ,CAAC,OAAO,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}
+{"version":3,"file":"legacyBusAdapter.js","sourceRoot":"","sources":["../../src/handlers/legacyBusAdapter.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,+BAA+B;AAC/B,OAAO,EACL,aAAa,GAEd,MAAM,2BAA2B,CAAC;AAInC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAkB;IAC7C,MAAM;IACN,MAAM;IACN,YAAY;IACZ,UAAU;IACV,WAAW;IACX,aAAa;IACb,iBAAiB;IACjB,mBAAmB;IACnB,YAAY;IACZ,SAAS;IACT,cAAc;IACd,cAAc;IACd,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;IACpB,qBAAqB;IACrB,KAAK;IACL,4BAA4B;IAC5B,yBAAyB;IACzB,gBAAgB;IAChB,uBAAuB;IACvB,QAAQ;IACR,kBAAkB;IAClB,mBAAmB;IACnB,wBAAwB;IACxB,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,yBAAyB;IACzB,uBAAuB;IACvB,0BAA0B;IAC1B,oBAAoB;IACpB,cAAc;IACd,eAAe;IACf,2EAA2E;IAC3E,gBAAgB;IAChB,iBAAiB;IACjB,mBAAmB;IACnB,QAAQ;IACR,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,SAAS;IACT,cAAc;IACd,eAAe;IACf,eAAe;IACf,cAAc;IACd,iBAAiB;IACjB,4BAA4B;IAC5B,wBAAwB;IACxB,+BAA+B;IAC/B,kBAAkB;IAClB,UAAU;IACV,oBAAoB;IACpB,yBAAyB;IACzB,wBAAwB;IACxB,wBAAwB;IACxB,uBAAuB;IACvB,mBAAmB;IACnB,UAAU;IACV,wBAAwB;IACxB,oBAAoB;IACpB,gBAAgB;IAChB,OAAO;IACP,yBAAyB;IACzB,WAAW;IACX,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,QAAQ;IACR,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;CACnB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAqB,EACrB,OAAuB,EACvB,QAAgC,gBAAgB;IAEhD,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,MAAM,gCAAgC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IACrJ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,UAAmB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC1D,IAAI,QAA4B,CAAC;YACjC,IAAI,OAAO,GAAY,UAAU,CAAC;YAClC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,YAAY,IAAI,OAAO,EAAE,CAAC;gBACtE,MAAM,GAAG,GAAG,OAAkC,CAAC;gBAC/C,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;oBAAE,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC;gBAClE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;gBAC3C,KAAK,KAAK,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACzC,IAAI,QAAQ,KAAK,SAAS;gBAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAA8C,CAAC;gBACpE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACrE,OAAO,EAAE,GAAI,QAAQ,CAAC,OAAkB,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC5E,CAAC;YACD,OAAO,QAAQ,CAAC,OAAO,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/handlers/messageHandler.d.ts

@@ -2,6 +2,7 @@ import { Message, License, Repository, SessionRegistryEntry, AgentId, CodexModel
 import type { PushClient } from '../service/pushClient.js';
 import { CommitSummaryStateStore } from '../ai/commitSummaryStore.js';
 import { SessionManager } from '../ai/sessionManager.js';
+import { AttachmentStaging } from '../ai/attachmentStaging.js';
 import { CodexLoginManager } from '../ai/codexLogin.js';
 export declare class MessageHandler {
     private repos;
@@ -17,6 +18,8 @@ export declare class MessageHandler {
      *  `state-updated` event to `connection.broadcast` (see service/run.ts). */
     private commitSummaryStore;
     private claudeService;
+    private attachmentStaging;
+    private attachmentGcTimer;
     private pushClient;
     private latestVersionCache;
     private versionCheckInFlight;
@@ -172,6 +175,9 @@ export declare class MessageHandler {
     private handleAgentCheckUpdate;
     private handleAgentUpdate;
     private handleAgentRestart;
+    private handleSystemdStatus;
+    private handleSystemdInstall;
+    private handleSystemdUninstall;
     private handleCodexListModels;
     /**
      * Kick off the Codex device-auth OAuth flow on the daemon. Returns the
@@ -208,6 +214,18 @@ export declare class MessageHandler {
     private handleUpdateHistory;
     private handleDeleteHistory;
     private handleListArchived;
+    /**
+     * Stamp `lastReadAt` on a registry entry and broadcast the update so every
+     * connected PWA client converges on the same read state. The "unread" mark
+     * lives server-side under the user's group identity (see
+     * `docs/guidelines/sync-security.en.md`) — there's no per-device scoping,
+     * so reading on the phone clears the badge on the desktop too.
+     *
+     * Idempotent: late-arriving / out-of-order viewedAt values that are older
+     * than the persisted timestamp are dropped (max-wins) so a slow tab can't
+     * undo a fresh read from a faster one.
+     */
+    private handleMarkRead;
     private handleListProjectSummaries;
     private handleListProjectRepos;
     /**
@@ -236,6 +254,11 @@ export declare class MessageHandler {
     private handleTerminalRename;
     private handleFilesList;
     private handleFilesRead;
+    /** Exposed so other agent paths (sessionManager) can resolve staged ids. */
+    getAttachmentStaging(): AttachmentStaging;
+    private handleAttachmentUpload;
+    private handleAttachmentCancel;
+    private handleAttachmentFetch;
     private createErrorResponse;
 }
 //# sourceMappingURL=messageHandler.d.ts.map

package/dist/handlers/messageHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messageHandler.d.ts","sourceRoot":"","sources":["../../src/handlers/messageHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EAqCP,OAAO,EAQP,UAAU,EA2CV,oBAAoB,EAOpB,OAAO,EACP,cAAc,EA4Bf,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAI3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AA8DxD,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,YAAY,CAAW;IAC/B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,cAAc,CAAe;IACrC,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,SAAS,CAAqC;IACtD,OAAO,CAAC,YAAY,CAAwC;IAC5D;gFAC4E;IAC5E,OAAO,CAAC,kBAAkB,CAA0D;IACpF,OAAO,CAAC,aAAa,CAAiB;IACtC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,kBAAkB,CAAuD;IACjF,OAAO,CAAC,oBAAoB,CAAuC;IACnE,OAAO,CAAC,gBAAgB,CAAgE;IACxF,OAAO,CAAC,wBAAwB,CAAiD;IACjF,OAAO,CAAC,wBAAwB,CAAqD;IACrF;;;gCAG4B;IAC5B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,iBAAiB,CAA2B;IACpD,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC;IAEnG,OAAO,CAAC,eAAe,CAAU;gBAG/B,KAAK,EAAE,UAAU,EAAE,EACnB,QAAQ,CAAC,EAAE,OAAO,EAClB,WAAW,CAAC,EAAE,MAAM,EAAE,EACtB,eAAe,UAAQ,EACvB,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;;;WAKG;QACH,cAAc,CAAC,EAAE,cAAc,CAAC;KACjC;IAqBH;;;OAGG;YACW,kBAAkB;IAgChC;;;;;;;;;;;;;;;OAeG;YACW,gBAAgB;IAkC9B;;;;;;OAMG;YACW,6BAA6B;IAwB3C;;;;;;;;OAQG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS;IAYvF,kEAAkE;IAClE,oBAAoB,IAAI,cAAc,EAAE;IAIxC;;;OAGG;IACH,2BAA2B,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,IAAI,GAAG,IAAI;IAI9E;;;;;;OAMG;IACH,qBAAqB,IAAI,IAAI;IAI7B;;;;OAIG;YACW,mBAAmB;IAejC,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAS/B,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAa9B,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,eAAe;IAMvB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAkBvC,OAAO,IAAI,IAAI;IAIf,qBAAqB,IAAI,MAAM;IAI/B,yEAAyE;IACzE,qBAAqB,IAAI,uBAAuB;IAIhD,gBAAgB,IAAI,cAAc;IAIlC;;0EAEsE;IACtE,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,IAAI;IAI9C,aAAa,IAAI,UAAU,GAAG,IAAI;IAIlC,OAAO,CAAC,YAAY;IAWd,aAAa,CACjB,OAAO,EAAE,OAAO,EAChB,WAAW,GAAE,MAAkB,GAC9B,OAAO,CAAC,OAAO,CAAC;YAyCL,QAAQ;IA0ItB,OAAO,CAAC,eAAe;YAwBT,YAAY;YAOZ,UAAU;YAQV,WAAW;YA2BX,aAAa;YA2Bb,gBAAgB;YA2BhB,kBAAkB;YA2BlB,YAAY;YAkCZ,SAAS;YAQT,cAAc;YAQd,cAAc;YA4Bd,aAAa;YA2Bb,aAAa;YA2Bb,gBAAgB;YAiBhB,kBAAkB;YAOlB,kBAAkB;YAiBlB,kBAAkB;YA2BlB,mBAAmB;YAOnB,oBAAoB;IA2BlC;;;;;OAKG;YACW,2BAA2B;IAuEzC;;;;OAIG;YACW,gBAAgB;IAmF9B,OAAO,CAAC,wBAAwB;IAchC,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,eAAe;IAkBvB,OAAO,CAAC,qBAAqB;YAQf,eAAe;IAoB7B,OAAO,CAAC,gBAAgB;YAuBV,qBAAqB;YAiErB,aAAa;IA0D3B,OAAO,CAAC,gBAAgB;YAwBV,eAAe;IAsE7B,OAAO,CAAC,qBAAqB;YASf,mBAAmB;IA8CjC,OAAO,CAAC,sBAAsB;IA6B9B,qEAAqE;IACrE,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAC;YAElB,sBAAsB;YA8BtB,iBAAiB;YAmEjB,kBAAkB;YA8ClB,qBAAqB;IA4BnC;;;;OAIG;YACW,qBAAqB;YAarB,sBAAsB;YAYtB,sBAAsB;IAYpC,6EAA6E;IAC7E,oBAAoB,IAAI,iBAAiB;YAQ3B,iBAAiB;YA6EjB,kBAAkB;YA2DlB,kBAAkB;IAgBhC,OAAO,CAAC,iBAAiB;IAczB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,mBAAmB;IA8B3B,OAAO,CAAC,6BAA6B;YAWvB,oBAAoB;IA2BlC,OAAO,CAAC,oBAAoB;YAUd,0BAA0B;YAgB1B,sBAAsB;YAyCtB,oBAAoB;IA2BlC,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,kBAAkB;IAa1B,OAAO,CAAC,0BAA0B;YA8DpB,sBAAsB;IA+FpC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,mBAAmB;YAuCb,iBAAiB;YAUjB,gBAAgB;YAchB,2BAA2B;YAqB3B,oBAAoB;YAkBpB,mBAAmB;YAkBnB,oBAAoB;YAsBpB,mBAAmB;YAkBnB,oBAAoB;YAsBpB,eAAe;YASf,eAAe;IAS7B,OAAO,CAAC,mBAAmB;CAK5B"}
+{"version":3,"file":"messageHandler.d.ts","sourceRoot":"","sources":["../../src/handlers/messageHandler.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,OAAO,EAqCP,OAAO,EAQP,UAAU,EAiDV,oBAAoB,EASpB,OAAO,EACP,cAAc,EA+Bf,MAAM,2BAA2B,CAAC;AAQnC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAI3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAsExD,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,YAAY,CAAW;IAC/B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,cAAc,CAAe;IACrC,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,SAAS,CAAqC;IACtD,OAAO,CAAC,YAAY,CAAwC;IAC5D;gFAC4E;IAC5E,OAAO,CAAC,kBAAkB,CAA0D;IACpF,OAAO,CAAC,aAAa,CAAiB;IACtC,OAAO,CAAC,iBAAiB,CAA8C;IACvE,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,kBAAkB,CAAuD;IACjF,OAAO,CAAC,oBAAoB,CAAuC;IACnE,OAAO,CAAC,gBAAgB,CAAgE;IACxF,OAAO,CAAC,wBAAwB,CAAiD;IACjF,OAAO,CAAC,wBAAwB,CAAqD;IACrF;;;gCAG4B;IAC5B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,iBAAiB,CAA2B;IACpD,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC;IAEnG,OAAO,CAAC,eAAe,CAAU;gBAG/B,KAAK,EAAE,UAAU,EAAE,EACnB,QAAQ,CAAC,EAAE,OAAO,EAClB,WAAW,CAAC,EAAE,MAAM,EAAE,EACtB,eAAe,UAAQ,EACvB,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;;;WAKG;QACH,cAAc,CAAC,EAAE,cAAc,CAAC;KACjC;IA0BH;;;OAGG;YACW,kBAAkB;IAgChC;;;;;;;;;;;;;;;OAeG;YACW,gBAAgB;IAkC9B;;;;;;OAMG;YACW,6BAA6B;IAwB3C;;;;;;;;OAQG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS;IAYvF,kEAAkE;IAClE,oBAAoB,IAAI,cAAc,EAAE;IAIxC;;;OAGG;IACH,2BAA2B,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,IAAI,GAAG,IAAI;IAI9E;;;;;;OAMG;IACH,qBAAqB,IAAI,IAAI;IAI7B;;;;OAIG;YACW,mBAAmB;IAejC,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAS/B,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAa9B,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,eAAe;IAMvB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAqBvC,OAAO,IAAI,IAAI;IAQf,qBAAqB,IAAI,MAAM;IAI/B,yEAAyE;IACzE,qBAAqB,IAAI,uBAAuB;IAIhD,gBAAgB,IAAI,cAAc;IAIlC;;0EAEsE;IACtE,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,IAAI;IAI9C,aAAa,IAAI,UAAU,GAAG,IAAI;IAIlC,OAAO,CAAC,YAAY;IAWd,aAAa,CACjB,OAAO,EAAE,OAAO,EAChB,WAAW,GAAE,MAAkB,GAC9B,OAAO,CAAC,OAAO,CAAC;YA0CL,QAAQ;IAwJtB,OAAO,CAAC,eAAe;YAyBT,YAAY;YAOZ,UAAU;YAQV,WAAW;YA2BX,aAAa;YA2Bb,gBAAgB;YA2BhB,kBAAkB;YA2BlB,YAAY;YAkCZ,SAAS;YAQT,cAAc;YAQd,cAAc;YA4Bd,aAAa;YA2Bb,aAAa;YA2Bb,gBAAgB;YAiBhB,kBAAkB;YAOlB,kBAAkB;YAiBlB,kBAAkB;YA2BlB,mBAAmB;YAOnB,oBAAoB;IA2BlC;;;;;OAKG;YACW,2BAA2B;IAuEzC;;;;OAIG;YACW,gBAAgB;IAmF9B,OAAO,CAAC,wBAAwB;IAchC,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,eAAe;IAkBvB,OAAO,CAAC,qBAAqB;YAQf,eAAe;IAoB7B,OAAO,CAAC,gBAAgB;YAuBV,qBAAqB;YAiErB,aAAa;IA0D3B,OAAO,CAAC,gBAAgB;YAwBV,eAAe;IAsE7B,OAAO,CAAC,qBAAqB;YASf,mBAAmB;IA8CjC,OAAO,CAAC,sBAAsB;IA6B9B,qEAAqE;IACrE,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAC;YAElB,sBAAsB;YA8BtB,iBAAiB;YAmEjB,kBAAkB;IAuDhC,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,oBAAoB;IAgB5B,OAAO,CAAC,sBAAsB;YA0ChB,qBAAqB;IA4BnC;;;;OAIG;YACW,qBAAqB;YAarB,sBAAsB;YAYtB,sBAAsB;IAYpC,6EAA6E;IAC7E,oBAAoB,IAAI,iBAAiB;YAQ3B,iBAAiB;YA8FjB,kBAAkB;YA4ElB,kBAAkB;IAgBhC,OAAO,CAAC,iBAAiB;IAczB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,mBAAmB;IAoC3B,OAAO,CAAC,6BAA6B;YAWvB,oBAAoB;IA2BlC,OAAO,CAAC,oBAAoB;YAUd,0BAA0B;YAgB1B,sBAAsB;YAyCtB,oBAAoB;IA2BlC,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,kBAAkB;IAa1B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,cAAc;IAiCtB,OAAO,CAAC,0BAA0B;YA8DpB,sBAAsB;IA+FpC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,mBAAmB;YAuCb,iBAAiB;YAUjB,gBAAgB;YAchB,2BAA2B;YAqB3B,oBAAoB;YAkBpB,mBAAmB;YAkBnB,oBAAoB;YAsBpB,mBAAmB;YAkBnB,oBAAoB;YAsBpB,eAAe;YASf,eAAe;IAU7B,4EAA4E;IAC5E,oBAAoB,IAAI,iBAAiB;IAIzC,OAAO,CAAC,sBAAsB;IAgB9B,OAAO,CAAC,sBAAsB;YAUhB,qBAAqB;IAanC,OAAO,CAAC,mBAAmB;CAK5B"}

package/dist/handlers/messageHandler.js

@@ -1,4 +1,7 @@
+// SPDX-FileCopyrightText: 2026 King Young Technology
+// SPDX-License-Identifier: MIT
 import { createMessage, } from '@sumicom/quicksave-shared';
+import { getSystemdStatus, installUserUnit, uninstallUserUnit, systemctlAvailable, } from '../service/systemdUnit.js';
 import { GitOperations } from '../git/operations.js';
 import { getAnthropicApiKey, setAnthropicApiKey, hasAnthropicApiKey, addManagedRepo, removeManagedRepo, addManagedCodingPath, removeManagedCodingPath } from '../config.js';
 import { CommitSummaryService } from '../ai/commitSummary.js';
@@ -6,6 +9,8 @@ import { CommitSummaryCliService, CommitSummaryCliError } from '../ai/commitSumm
 import { CommitSummaryStateStore } from '../ai/commitSummaryStore.js';
 import { SessionManager } from '../ai/sessionManager.js';
 import { ClaudeCodeProvider } from '../ai/claudeCodeProvider.js';
+import { AttachmentStaging } from '../ai/attachmentStaging.js';
+import { loadAttachment, removeSessionAttachments } from '../ai/attachmentStore.js';
 import { CodexAppServerProvider } from '../ai/codexAppServer/index.js';
 import { CodexLoginManager } from '../ai/codexLogin.js';
 import { getTerminalManager } from '../terminal/terminalManager.js';
@@ -16,7 +21,7 @@ import { getEventStore } from '../storage/eventStore.js';
 import { readdir, stat, readFile } from 'fs/promises';
 import { existsSync } from 'fs';
 import { join, dirname, basename } from 'path';
-import { homedir } from 'os';
+import { homedir, platform as osPlatform } from 'os';
 import { spawnAppServer } from '../ai/codexAppServer/index.js';
 const VERSION_CHECK_INTERVAL_MS = 12 * 60 * 60 * 1000; // 12 hours
 // model/list reflects the current authenticated account's available models.
@@ -24,6 +29,14 @@ const VERSION_CHECK_INTERVAL_MS = 12 * 60 * 60 * 1000; // 12 hours
 // every PWA reload; short enough that plan upgrades / model rollouts surface
 // within the same session day. Force-refreshes still bypass the TTL.
 const CODEX_MODELS_TTL_MS = 30 * 60 * 1000;
+/** Coerce `os.platform()` into the narrow union the PWA expects. Anything
+ *  outside the three first-class platforms gets `'other'` so the field is
+ *  always present and the PWA doesn't have to handle `undefined`. */
+function normalizePlatform(p) {
+    if (p === 'linux' || p === 'darwin' || p === 'win32')
+        return p;
+    return 'other';
+}
 /** Shallow equality on a model list. Used to suppress no-op
  *  `/codex/models` broadcasts after a TTL refresh that returned the
  *  same list. */
@@ -74,7 +87,7 @@ function projectAppServerModel(m) {
 }
 export class MessageHandler {
     repos;
-    agentVersion = '0.8.6';
+    agentVersion = '0.8.7';
     defaultRepoPath;
     clientRepos = new Map(); // peerAddress -> repoPath
     repoLocks = new Map(); // repoPath -> peerAddress holding lock
@@ -86,6 +99,8 @@ export class MessageHandler {
      *  `state-updated` event to `connection.broadcast` (see service/run.ts). */
     commitSummaryStore = new CommitSummaryStateStore();
     claudeService;
+    attachmentStaging = new AttachmentStaging();
+    attachmentGcTimer = null;
     pushClient = null;
     latestVersionCache = null;
     versionCheckInFlight = null;
@@ -117,6 +132,10 @@ export class MessageHandler {
                 this.codingPaths.set(p, { path: p, name: basename(p) });
             }
         }
+        this.attachmentGcTimer = setInterval(() => this.attachmentStaging.gc(), 60_000);
+        if (typeof this.attachmentGcTimer.unref === 'function') {
+            this.attachmentGcTimer.unref();
+        }
     }
     /**
      * Check npm registry for latest version. Deduped: returns cached value
@@ -359,10 +378,17 @@ export class MessageHandler {
                 this.repoLocks.delete(repoPath);
             }
         }
+        // Drop any in-flight uploads from this peer; on reconnect the PWA will
+        // re-stage them via the upload manager's resume path.
+        this.attachmentStaging.removePeer(peerAddress);
         // Pending user input requests are NOT auto-approved on disconnect.
         // They persist until the user reconnects and explicitly responds.
     }
     cleanup() {
+        if (this.attachmentGcTimer) {
+            clearInterval(this.attachmentGcTimer);
+            this.attachmentGcTimer = null;
+        }
         this.claudeService.cleanup();
     }
     getActiveSessionCount() {
@@ -397,7 +423,8 @@ export class MessageHandler {
     async handleMessage(message, peerAddress = 'default') {
         const isVerbose = message.type.startsWith('claude:') ||
             message.type.startsWith('agent:add') ||
-            message.type.startsWith('project:');
+            message.type.startsWith('project:') ||
+            message.type.startsWith('attachment:');
         if (isVerbose) {
             console.log(`[msg] ${message.type} from ${peerAddress.slice(0, 12)}`);
         }
@@ -498,6 +525,12 @@ export class MessageHandler {
                 return this.handleAgentUpdate(message);
             case 'agent:restart':
                 return this.handleAgentRestart(message);
+            case 'systemd:status':
+                return this.handleSystemdStatus(message);
+            case 'systemd:install':
+                return this.handleSystemdInstall(message);
+            case 'systemd:uninstall':
+                return this.handleSystemdUninstall(message);
             case 'codex:list-models':
                 return this.handleCodexListModels(message);
             case 'codex:login-start':
@@ -535,6 +568,8 @@ export class MessageHandler {
                 return this.handleDeleteHistory(message);
             case 'session:list-archived':
                 return this.handleListArchived(message);
+            case 'session:mark-read':
+                return this.handleMarkRead(message);
             case 'project:list-summaries':
                 return this.handleListProjectSummaries(message);
             case 'project:list-repos':
@@ -557,6 +592,12 @@ export class MessageHandler {
                 return this.handleFilesList(message);
             case 'files:read':
                 return this.handleFilesRead(message);
+            case 'attachment:upload':
+                return this.handleAttachmentUpload(message, peerAddress);
+            case 'attachment:cancel':
+                return this.handleAttachmentCancel(message, peerAddress);
+            case 'attachment:fetch':
+                return this.handleAttachmentFetch(message);
             default:
                 return this.createErrorResponse(message.id, 'UNKNOWN_MESSAGE_TYPE', `Unknown message type: ${message.type}`);
         }
@@ -575,6 +616,7 @@ export class MessageHandler {
             latestVersion: this.latestVersionCache?.version,
             devBuild: !this.productionBuild || undefined,
             codexModels: this.codexModelsCache?.models,
+            platform: normalizePlatform(osPlatform()),
         });
         response.id = message.id;
         return response;
@@ -1506,6 +1548,77 @@ export class MessageHandler {
             return response;
         }
     }
+    // ==========================================================================
+    // systemd user-unit (Linux auto-start at login)
+    //
+    // The PWA toggles install/uninstall from the per-machine settings page.
+    // These handlers are no-ops on non-Linux hosts (the status payload's
+    // `available: false` field is the gate the PWA uses to hide the section,
+    // so non-Linux still gets a well-formed response instead of an error).
+    // ==========================================================================
+    handleSystemdStatus(message) {
+        const status = getSystemdStatus();
+        const response = createMessage('systemd:status:response', status);
+        response.id = message.id;
+        return response;
+    }
+    handleSystemdInstall(message) {
+        if (!systemctlAvailable()) {
+            const response = createMessage('systemd:install:response', {
+                success: false,
+                error: 'systemctl --user is not available on this host',
+                status: getSystemdStatus(),
+            });
+            response.id = message.id;
+            return response;
+        }
+        const result = installUserUnit();
+        const response = createMessage('systemd:install:response', result);
+        response.id = message.id;
+        return response;
+    }
+    handleSystemdUninstall(message) {
+        // Uninstalling can stop the systemd-managed daemon as a side effect — if
+        // the running process IS that daemon, `disable --now` would kill our IPC
+        // server before the response reaches the PWA. So we compute the response
+        // up front (which captures the pre-uninstall status) but defer the
+        // actual mutation until next tick, giving the bus transport a chance to
+        // flush. The next CLI invocation will hit `ensureDaemon`, which falls
+        // back to detached spawn now that the unit is gone.
+        if (!systemctlAvailable()) {
+            const response = createMessage('systemd:uninstall:response', {
+                success: false,
+                error: 'systemctl --user is not available on this host',
+                status: getSystemdStatus(),
+            });
+            response.id = message.id;
+            return response;
+        }
+        setImmediate(() => {
+            try {
+                uninstallUserUnit();
+            }
+            catch (err) {
+                console.error('[systemd] deferred uninstall failed:', err);
+            }
+        });
+        // Optimistic response: report the post-uninstall shape (unitInstalled,
+        // unitEnabled, isActive all expected to flip false). We can't actually
+        // observe the post state because we haven't run the disable yet.
+        const optimistic = getSystemdStatus();
+        const response = createMessage('systemd:uninstall:response', {
+            success: true,
+            status: {
+                ...optimistic,
+                unitInstalled: false,
+                unitEnabled: false,
+                isActive: false,
+                currentExecStart: undefined,
+            },
+        });
+        response.id = message.id;
+        return response;
+    }
     async handleCodexListModels(message) {
         try {
             const [models, auth] = await Promise.all([
@@ -1558,7 +1671,7 @@ export class MessageHandler {
     // Claude Code SDK Handlers
     // ============================================================================
     async handleClaudeStart(message, peerAddress) {
-        const { prompt, cwd: payloadCwd, agent, allowedTools, systemPrompt, model, permissionMode, sandboxed, reasoningEffort, contextWindow } = message.payload;
+        const { prompt, cwd: payloadCwd, agent, allowedTools, systemPrompt, model, permissionMode, sandboxed, reasoningEffort, contextWindow, attachmentIds } = message.payload;
         const legacyProvider = message.payload.provider;
         const cwd = payloadCwd || this.getClientRepoPath(peerAddress);
         const resolvedAgent = agent ?? (legacyProvider === 'codex-mcp' ? 'codex' : legacyProvider ? 'claude-code' : undefined);
@@ -1568,7 +1681,20 @@ export class MessageHandler {
         // turn/start with `BadRequest`. Pass-through for non-codex agents and
         // when the cache hasn't loaded yet.
         const validatedModel = this.validateCodexModel(model, resolvedAgent ?? 'claude-code');
-        console.log(`[agent:start] agent=${resolvedAgent ?? 'default'} model=${validatedModel ?? 'default'}${validatedModel !== model ? ` (coerced from ${model})` : ''} cwd=${cwd} prompt=${prompt.slice(0, 80)}${sandboxed ? ' [sandboxed]' : ''}`);
+        console.log(`[agent:start] agent=${resolvedAgent ?? 'default'} model=${validatedModel ?? 'default'}${validatedModel !== model ? ` (coerced from ${model})` : ''} cwd=${cwd} prompt=${prompt.slice(0, 80)}${sandboxed ? ' [sandboxed]' : ''}${attachmentIds && attachmentIds.length > 0 ? ` [+${attachmentIds.length} attachments]` : ''}`);
+        let attachments;
+        if (attachmentIds && attachmentIds.length > 0) {
+            try {
+                attachments = this.attachmentStaging.consume(peerAddress, attachmentIds);
+            }
+            catch (error) {
+                const code = error.code ?? 'attachment_error';
+                const text = error instanceof Error ? error.message : 'attachment resolve failed';
+                const response = createMessage('claude:start:response', { success: false, error: `${code}: ${text}` });
+                response.id = message.id;
+                return response;
+            }
+        }
         try {
             const sessionId = await this.claudeService.startSession({
                 prompt,
@@ -1581,6 +1707,7 @@ export class MessageHandler {
                 sandboxed,
                 reasoningEffort,
                 contextWindow,
+                attachments,
             });
             console.log(`[agent:start] session created: ${sessionId} agent=${resolvedAgent ?? 'default'}`);
             // Register in session history
@@ -1622,18 +1749,32 @@ export class MessageHandler {
         }
     }
     async handleClaudeResume(message, peerAddress) {
-        const { sessionId: requestedId, prompt, cwd: payloadCwd, agent } = message.payload;
+        const { sessionId: requestedId, prompt, cwd: payloadCwd, agent, attachmentIds } = message.payload;
         const legacyProvider = message.payload.provider;
         const cwd = payloadCwd || this.getClientRepoPath(peerAddress);
         const resolvedAgent = agent ?? (legacyProvider === 'codex-mcp' ? 'codex' : legacyProvider ? 'claude-code' : undefined);
         const activeCfg = this.claudeService.getSessionConfig(requestedId);
-        console.log(`[agent:resume] session=${requestedId} agent=${resolvedAgent ?? 'stored'} model=${activeCfg.model ?? 'default'} cwd=${cwd} prompt=${prompt.slice(0, 80)}`);
+        console.log(`[agent:resume] session=${requestedId} agent=${resolvedAgent ?? 'stored'} model=${activeCfg.model ?? 'default'} cwd=${cwd} prompt=${prompt.slice(0, 80)}${attachmentIds && attachmentIds.length > 0 ? ` [+${attachmentIds.length} attachments]` : ''}`);
+        let attachments;
+        if (attachmentIds && attachmentIds.length > 0) {
+            try {
+                attachments = this.attachmentStaging.consume(peerAddress, attachmentIds);
+            }
+            catch (error) {
+                const code = error.code ?? 'attachment_error';
+                const text = error instanceof Error ? error.message : 'attachment resolve failed';
+                const response = createMessage('claude:resume:response', { success: false, error: `${code}: ${text}` });
+                response.id = message.id;
+                return response;
+            }
+        }
         try {
             const actualSessionId = await this.claudeService.resumeSession({
                 sessionId: requestedId,
                 prompt,
                 cwd,
                 agent: resolvedAgent,
+                attachments,
             });
             console.log(`[agent:resume] session resumed: ${actualSessionId}`);
             getEventStore().record({
@@ -1708,6 +1849,11 @@ export class MessageHandler {
             }
         }
         const closed = this.claudeService.closeSession(sessionId);
+        // Drop persisted attachment bytes for this session — fire-and-forget;
+        // a stuck rm shouldn't block the response.
+        removeSessionAttachments(sessionId).catch((err) => {
+            console.error(`[agent:end-task] removeSessionAttachments failed session=${sessionId}:`, err);
+        });
         const success = closed || archived;
         console.log(`[agent:end-task] session=${sessionId} closed=${closed} archived=${archived} cwd=${cwd ?? 'unknown'}`);
         const response = createMessage('claude:end-task:response', { success, error: success ? undefined : 'Session not found' });
@@ -1842,6 +1988,42 @@ export class MessageHandler {
         response.id = message.id;
         return response;
     }
+    /**
+     * Stamp `lastReadAt` on a registry entry and broadcast the update so every
+     * connected PWA client converges on the same read state. The "unread" mark
+     * lives server-side under the user's group identity (see
+     * `docs/guidelines/sync-security.en.md`) — there's no per-device scoping,
+     * so reading on the phone clears the badge on the desktop too.
+     *
+     * Idempotent: late-arriving / out-of-order viewedAt values that are older
+     * than the persisted timestamp are dropped (max-wins) so a slow tab can't
+     * undo a fresh read from a faster one.
+     */
+    handleMarkRead(message) {
+        const { sessionId, cwd, viewedAt } = message.payload;
+        const stamp = typeof viewedAt === 'number' ? viewedAt : Date.now();
+        const existing = getSessionRegistry().getEntry(cwd, sessionId);
+        if (!existing) {
+            const failed = createMessage('session:mark-read:response', { success: false, error: 'Entry not found' });
+            failed.id = message.id;
+            return failed;
+        }
+        const nextLastReadAt = Math.max(existing.lastReadAt ?? 0, stamp);
+        let entry = existing;
+        if (nextLastReadAt !== existing.lastReadAt) {
+            const updated = getSessionRegistry().updateEntry(cwd, sessionId, { lastReadAt: nextLastReadAt });
+            if (updated)
+                entry = updated;
+            // Broadcast on /sessions/history so other PWA clients see the new
+            // read state immediately. /sessions/active is also re-emitted via
+            // sessionManager so the live-stats path stays consistent.
+            this.onHistoryUpdated?.(cwd, entry, 'upsert');
+            this.claudeService.emitSessionUpdate(sessionId);
+        }
+        const response = createMessage('session:mark-read:response', { success: true, lastReadAt: entry.lastReadAt });
+        response.id = message.id;
+        return response;
+    }
     handleListProjectSummaries(message) {
         const allEntries = getSessionRegistry().getEntriesForProject();
         // Group by cwd
@@ -2162,6 +2344,40 @@ export class MessageHandler {
         response.id = message.id;
         return response;
     }
+    // ── Attachment staging handlers ──────────────────────────────────────────
+    /** Exposed so other agent paths (sessionManager) can resolve staged ids. */
+    getAttachmentStaging() {
+        return this.attachmentStaging;
+    }
+    handleAttachmentUpload(message, peerAddress) {
+        try {
+            const result = this.attachmentStaging.acceptChunk(peerAddress, message.payload);
+            const response = createMessage('attachment:upload:response', result);
+            response.id = message.id;
+            return response;
+        }
+        catch (error) {
+            const code = error.code ?? 'attachment_error';
+            const text = error instanceof Error ? error.message : 'attachment upload failed';
+            return this.createErrorResponse(message.id, code, text);
+        }
+    }
+    handleAttachmentCancel(message, peerAddress) {
+        const removed = this.attachmentStaging.cancel(peerAddress, message.payload.attachmentId);
+        const response = createMessage('attachment:cancel:response', { removed });
+        response.id = message.id;
+        return response;
+    }
+    async handleAttachmentFetch(message) {
+        const { sessionId, attachmentId } = message.payload;
+        const attachment = await loadAttachment(sessionId, attachmentId);
+        if (!attachment) {
+            return this.createErrorResponse(message.id, 'attachment_not_found', `attachment ${attachmentId} not on disk for session ${sessionId}`);
+        }
+        const response = createMessage('attachment:fetch:response', { attachment });
+        response.id = message.id;
+        return response;
+    }
     createErrorResponse(id, code, message) {
         const response = createMessage('error', { code, message });
         response.id = id;