@super-one/cli 0.71.0-alpha.1 → 0.71.0-alpha.3

package/lib/cli.mjs

@@ -137,8 +137,8 @@ import { fileURLToPath } from "node:url";
 function resolveCliReleaseVersion() {
   const fromEnv = process.env.SUPERONE_CLI_VERSION?.trim();
   if (fromEnv) return fromEnv;
-  if ("0.71.0-alpha.1".trim()) {
-    return "0.71.0-alpha.1".trim();
+  if ("0.71.0-alpha.3".trim()) {
+    return "0.71.0-alpha.3".trim();
   }
   const fromDist = readDistManifestVersion();
   if (fromDist) return fromDist;
@@ -12908,6 +12908,40 @@ var init_src = __esm({
   }
 });
 
+// ../../packages/shared/src/mod-ui.ts
+function nodeModClientId(clientId, clientSessionId) {
+  return `${clientId}.${clientSessionId}`;
+}
+function asNodeCallerModUiRequest(request, clientSessionId) {
+  if (!("clientId" in request)) return request;
+  return { ...request, clientId: nodeModClientId(String(request.clientId), clientSessionId) };
+}
+function asNodeReaderModEvent(event, clientSessionId) {
+  if (!("clientId" in event) || !event.type.startsWith("mod_")) return event;
+  const suffix = nodeModClientId("", clientSessionId);
+  return event.clientId.endsWith(suffix) ? { ...event, clientId: event.clientId.slice(0, -suffix.length) } : event;
+}
+var MOD_UI_MUTATING_OPS, MOD_UI_UNAVAILABLE;
+var init_mod_ui = __esm({
+  "../../packages/shared/src/mod-ui.ts"() {
+    "use strict";
+    MOD_UI_MUTATING_OPS = /* @__PURE__ */ new Set([
+      "press",
+      "input",
+      "select",
+      "paneShow",
+      "paneFocus",
+      "close",
+      "scroll",
+      "focus",
+      "clientPress",
+      "message",
+      "promptEdit"
+    ]);
+    MOD_UI_UNAVAILABLE = "mod-ui-unavailable";
+  }
+});
+
 // ../../packages/runtime/src/mcp-apps/identity.ts
 import { createHash as createHash3 } from "node:crypto";
 function mcpServerConfigFingerprint(config2) {
@@ -13240,11 +13274,31 @@ var init_model_fallback_wire = __esm({
 });
 
 // ../../packages/shared/src/slash-commands.ts
+function slashCommandKey(name) {
+  return name.startsWith("/") ? name.slice(1) : name;
+}
+function sdkSlashCommands(commands, terminalNames) {
+  return markTerminalBoundSlashCommands(
+    commands.map((c) => ({ name: c.name, description: c.description, argumentHint: c.argumentHint ?? "", isSkill: false })),
+    terminalNames
+  );
+}
 function readTerminalSlashCommands(value) {
   if (!Array.isArray(value)) return void 0;
   const names = value.filter((item) => typeof item === "string" && item.length > 0);
   return names.length > 0 ? names : void 0;
 }
+function markTerminalBoundSlashCommands(commands, terminalNames) {
+  if (!terminalNames?.length) return commands;
+  const tagged = new Set(terminalNames.map(slashCommandKey));
+  let changed = false;
+  const next = commands.map((command) => {
+    if (command.terminalBound || !tagged.has(slashCommandKey(command.name))) return command;
+    changed = true;
+    return { ...command, terminalBound: true };
+  });
+  return changed ? next : commands;
+}
 var init_slash_commands = __esm({
   "../../packages/shared/src/slash-commands.ts"() {
     "use strict";
@@ -13314,6 +13368,7 @@ var init_harness_capabilities = __esm({
         // the goal is either live or cleared.
         goal: { lifecycleArgs: ["clear"], canPause: false, transport: "slash", semantics: "condition" },
         terminalCommandApproval: "harness",
+        modUi: true,
         displayName: "Claude"
       },
       codex: {
@@ -13334,6 +13389,7 @@ var init_harness_capabilities = __esm({
         // follow-up turns itself, so every transition is an explicit RPC.
         goal: { lifecycleArgs: [], canPause: true, transport: "rpc", semantics: "objective" },
         terminalCommandApproval: "harness",
+        modUi: false,
         displayName: "Codex"
       },
       acp: {
@@ -13367,6 +13423,7 @@ var init_harness_capabilities = __esm({
           semantics: "objective"
         },
         terminalCommandApproval: "harness",
+        modUi: false,
         displayName: "Others"
       },
       opencode: {
@@ -13384,6 +13441,7 @@ var init_harness_capabilities = __esm({
         supportsFork: true,
         goal: null,
         terminalCommandApproval: "harness",
+        modUi: false,
         displayName: "OpenCode"
       },
       cursor: {
@@ -13403,6 +13461,7 @@ var init_harness_capabilities = __esm({
         goal: null,
         // The @cursor/sdk local executor auto-approves custom tools with no host hook.
         terminalCommandApproval: "executor",
+        modUi: false,
         displayName: "Cursor"
       },
       dsh: {
@@ -13435,6 +13494,7 @@ var init_harness_capabilities = __esm({
         supportsFork: true,
         goal: null,
         terminalCommandApproval: "harness",
+        modUi: false,
         displayName: "DeepSeek"
       }
     };
@@ -13667,6 +13727,7 @@ function createClaudeAgentEventMapper(options) {
   const subagentTracking = /* @__PURE__ */ new Map();
   const activeBackgroundTasks = /* @__PURE__ */ new Map();
   const reportedPluginErrors = options.reportedPluginErrors ?? /* @__PURE__ */ new Set();
+  const terminalNames = options.terminalSlashCommands ?? { names: void 0 };
   let lastAssistantUsage = null;
   let lastTopLevelAssistantUuid = "";
   const retractions = createRetractionLedger();
@@ -13680,6 +13741,7 @@ function createClaudeAgentEventMapper(options) {
   let rejectedRateLimitResetsAt;
   let hasRejectedRateLimit = false;
   let pendingSlashOutput = "";
+  let pendingSlashCommand;
   let messageInputTokens = 0;
   let messageOutputTokens = 0;
   let resultSeen = false;
@@ -13717,12 +13779,17 @@ function createClaudeAgentEventMapper(options) {
     });
   };
   const applySystem = (system) => {
+    if (options.onSystem?.(system)) return;
     switch (system.subtype) {
+      case "commands_changed":
+        if (Array.isArray(system.commands)) emit({ type: "session_commands", commands: sdkSlashCommands(system.commands, terminalNames.names) });
+        break;
       case "init": {
         if (typeof system.session_id === "string" && system.session_id) {
           options.onSessionId?.(system.session_id);
         }
         const terminalSlashCommands = readTerminalSlashCommands(system.terminal_slash_commands);
+        terminalNames.names = terminalSlashCommands;
         emit({
           type: "session_init",
           session: {
@@ -14046,6 +14113,7 @@ function createClaudeAgentEventMapper(options) {
             const text2 = blocks.filter((block) => block.type === "text").map((block) => block.text ?? "").join("").trim();
             if (text2) pendingSlashOutput = pendingSlashOutput ? `${pendingSlashOutput}
 ${text2}` : text2;
+            if (typeof raw.local_command_run?.command === "string") pendingSlashCommand = raw.local_command_run.command;
           }
           for (const block of blocks) {
             if (block.type === "text" && assistantParent && block.text) {
@@ -14190,7 +14258,14 @@ ${text2}` : text2;
             emit({ type: "message_interrupted", messageId, metadata });
             activeBackgroundTasks.clear();
           } else if (!resultIsError) {
-            if (pendingSlashOutput) emit({ type: "slash_command_output", messageId, content: pendingSlashOutput });
+            if (pendingSlashOutput) {
+              emit({
+                type: "slash_command_output",
+                messageId,
+                content: pendingSlashOutput,
+                ...pendingSlashCommand ? { command: pendingSlashCommand } : {}
+              });
+            }
             emit({ type: "message_complete", messageId, metadata });
           } else {
             metadata.errorInfo = failure.errorInfo;
@@ -14204,6 +14279,7 @@ ${text2}` : text2;
           hasRejectedRateLimit = false;
           rejectedRateLimitResetsAt = void 0;
           pendingSlashOutput = "";
+          pendingSlashCommand = void 0;
           resultSeen = true;
           options.onStepBoundary?.();
           emit({ type: "status_change", status: activeBackgroundTasks.size === 0 ? "idle" : "background" });
@@ -15298,6 +15374,7 @@ var init_claude_live_session = __esm({
       backgroundTaskIds = /* @__PURE__ */ new Set();
       idleSystemMapper = null;
       reportedPluginErrors = /* @__PURE__ */ new Set();
+      terminalNames = { names: void 0 };
       sdkSessionId;
       closed = false;
       iterationDone;
@@ -15312,6 +15389,10 @@ var init_claude_live_session = __esm({
        * provider). Null when a test `queryFn` yields a bare message stream.
        */
       query;
+      /** The terminal-bound command names the latest init gave, to tag a reloaded command list. */
+      get terminalSlashCommands() {
+        return this.terminalNames.names;
+      }
       static open(opts) {
         const binary = (opts.binaryPath && existsSync6(opts.binaryPath) ? opts.binaryPath : null) ?? resolveSdkClaudeBinary();
         if (opts.binaryPath && !existsSync6(opts.binaryPath)) {
@@ -15462,7 +15543,7 @@ var init_claude_live_session = __esm({
           this.opts.onAmbientEvent?.({ type: "status_change", status: "streaming" });
           this.ambient = {
             messageId,
-            mapper: createClaudeAgentEventMapper({ messageId, emit: (event) => this.opts.onAmbientEvent?.(event), toolApps: this.opts.toolApps, reportedPluginErrors: this.reportedPluginErrors })
+            mapper: createClaudeAgentEventMapper({ messageId, emit: (event) => this.opts.onAmbientEvent?.(event), toolApps: this.opts.toolApps, reportedPluginErrors: this.reportedPluginErrors, terminalSlashCommands: this.terminalNames, onSystem: this.opts.onSystem })
           };
         }
         if (!this.ambient) return;
@@ -15490,7 +15571,9 @@ var init_claude_live_session = __esm({
                 this.idleSystemMapper ??= createClaudeAgentEventMapper({
                   messageId: "",
                   emit: (event) => this.opts.onAmbientEvent?.(event),
-                  reportedPluginErrors: this.reportedPluginErrors
+                  reportedPluginErrors: this.reportedPluginErrors,
+                  terminalSlashCommands: this.terminalNames,
+                  onSystem: this.opts.onSystem
                 });
                 this.idleSystemMapper.apply(msg);
               } else {
@@ -15509,6 +15592,7 @@ var init_claude_live_session = __esm({
               if (!uuids && this.opts.sessionId && result.num_turns === 0 && result.is_error === false && !cur.sawResult && !cur.streamedText) continue;
             }
             if (cur.cancelled) {
+              if (msg.type === "system") this.opts.onSystem?.(msg);
               if (msg.type === "result") {
                 this.active = null;
                 this.permissionHandler = void 0;
@@ -15530,7 +15614,9 @@ var init_claude_live_session = __esm({
                   pausedMs: () => this.timing.pausedMs,
                   isInterrupted: () => cur.input.signal?.aborted === true,
                   toolApps: this.opts.toolApps,
-                  reportedPluginErrors: this.reportedPluginErrors
+                  reportedPluginErrors: this.reportedPluginErrors,
+                  terminalSlashCommands: this.terminalNames,
+                  onSystem: this.opts.onSystem
                 });
               } else {
                 holder2._state = createSdkMapState(cur.messageId);
@@ -15763,6 +15849,299 @@ var init_src2 = __esm({
   }
 });
 
+// ../../packages/claude/src/mod-surface/wire.ts
+function renameKeys(obj, names) {
+  const out = {};
+  for (const [key, value] of Object.entries(obj)) {
+    if (value === void 0) continue;
+    out[names[key] ?? key] = value;
+  }
+  return out;
+}
+function toWireRequest(op, request) {
+  const body = renameKeys(request, WIRE_KEY);
+  if (op === "attach" && Array.isArray(request.answers)) {
+    body.answers = request.answers.map((kind) => HOST_REQUEST_SUBTYPE[kind]);
+  }
+  return { subtype: OP_SUBTYPE[op], ...body };
+}
+function fromWireResponse(op, response) {
+  if (!response || typeof response !== "object") return response;
+  const raw = response;
+  if (op === "panes") return toRoster(raw);
+  const out = renameKeys(raw, LOCAL_KEY);
+  delete out.bench;
+  delete out.rewritten;
+  return out;
+}
+function toPane(raw) {
+  if (!raw || typeof raw !== "object") return null;
+  const pane = renameKeys(raw, LOCAL_KEY);
+  return typeof pane.id === "string" && typeof pane.plugin === "string" ? { ...pane, title: typeof pane.title === "string" ? pane.title : pane.id } : null;
+}
+function toRoster(raw) {
+  const panes = Array.isArray(raw.panes) ? raw.panes.map(toPane).filter((p3) => p3 !== null) : [];
+  const id = (value) => typeof value === "string" ? value : null;
+  return { panes, shownId: id(raw.shown_id), focusedId: id(raw.focused_id), focusRequestedId: id(raw.focus_requested_id) };
+}
+function mapModSystemMessage(sys) {
+  switch (sys.subtype) {
+    case "ui_invalidate": {
+      if (!Array.isArray(sys.instances)) return { type: "mod_invalidate" };
+      const instances2 = sys.instances.filter((i) => !!i && typeof i === "object" && typeof i.instance_id === "string").map((i) => ({ surface: i.surface, component: i.component, instanceId: i.instance_id }));
+      return { type: "mod_invalidate", instances: instances2 };
+    }
+    case "ui_panes":
+      return { type: "mod_panes", roster: toRoster(sys) };
+    case "ui_scroll":
+      if (typeof sys.client_id !== "string" || typeof sys.instance_id !== "string" || typeof sys.offset !== "number") return null;
+      return {
+        type: "mod_scroll",
+        clientId: sys.client_id,
+        component: sys.component === "AbovePrompt" ? "AbovePrompt" : "Pane",
+        instanceId: sys.instance_id,
+        offset: sys.offset,
+        ...sys.follow_end === true ? { followEnd: true } : {}
+      };
+    case "ui_focus":
+      if (typeof sys.client_id !== "string" || typeof sys.instance_id !== "string" || typeof sys.plugin !== "string" || typeof sys.key !== "string") return null;
+      return {
+        type: "mod_focus",
+        clientId: sys.client_id,
+        component: sys.component === "AbovePrompt" ? "AbovePrompt" : "Pane",
+        instanceId: sys.instance_id,
+        plugin: sys.plugin,
+        key: sys.key
+      };
+    default:
+      return null;
+  }
+}
+function toHostRequest(kind, req) {
+  switch (kind) {
+    case "copy":
+      return { kind, plugin: String(req.plugin ?? ""), text: String(req.text ?? "") };
+    case "promptRead":
+      return { kind };
+    case "promptFill": {
+      const mode = req.mode === "append" || req.mode === "insert" ? req.mode : "replace";
+      return {
+        kind,
+        text: String(req.text ?? ""),
+        mode,
+        ...Array.isArray(req.decorations) ? { decorations: req.decorations } : {}
+      };
+    }
+    case "promptSuggest":
+      return { kind, text: String(req.text ?? "") };
+  }
+}
+function toWireHostReply(kind, reply) {
+  switch (kind) {
+    case "copy":
+      return { copied: reply?.kind === "copy" && reply.copied };
+    case "promptRead":
+      return reply?.kind === "promptRead" ? { text: reply.text, cursor: reply.cursor } : { text: "", cursor: 0 };
+    case "promptFill":
+      return { filled: reply?.kind === "promptFill" && reply.filled };
+    case "promptSuggest":
+      return { shown: reply?.kind === "promptSuggest" && reply.shown };
+  }
+}
+var OP_SUBTYPE, HOST_REQUEST_SUBTYPE, WIRE_KEY, LOCAL_KEY;
+var init_wire = __esm({
+  "../../packages/claude/src/mod-surface/wire.ts"() {
+    "use strict";
+    OP_SUBTYPE = {
+      attach: "ui_attach",
+      detach: "ui_detach",
+      render: "ui_render",
+      press: "ui_press",
+      input: "ui_input",
+      select: "ui_select",
+      panes: "ui_panes",
+      paneShow: "ui_pane_show",
+      paneFocus: "ui_pane_focus",
+      close: "ui_close",
+      scroll: "ui_scroll",
+      focus: "ui_focus",
+      clientModule: "ui_client_module",
+      clientPress: "ui_client_press",
+      message: "ui_message",
+      promptEdit: "ui_prompt_edit"
+    };
+    HOST_REQUEST_SUBTYPE = {
+      copy: "ui_copy",
+      promptRead: "ui_prompt_read",
+      promptFill: "ui_prompt_fill",
+      promptSuggest: "ui_prompt_suggest"
+    };
+    WIRE_KEY = {
+      clientId: "client_id",
+      instanceId: "instance_id",
+      onScreen: "on_screen",
+      contentRows: "content_rows",
+      bodyRows: "body_rows",
+      isHeld: "is_held"
+    };
+    LOCAL_KEY = {
+      shown_id: "shownId",
+      focused_id: "focusedId",
+      focus_requested_id: "focusRequestedId",
+      follow_end: "followEnd",
+      client_modules: "clientModules",
+      close_on_escape: "closeOnEscape",
+      hold_toasts: "holdToasts"
+    };
+  }
+});
+
+// ../../packages/claude/src/mod-surface/mod-surface.ts
+import { randomUUID as randomUUID4 } from "node:crypto";
+var UI_SURFACE_CAPABILITY, ModUiUnavailableError, ModSurface;
+var init_mod_surface = __esm({
+  "../../packages/claude/src/mod-surface/mod-surface.ts"() {
+    "use strict";
+    init_mod_ui();
+    init_wire();
+    UI_SURFACE_CAPABILITY = "ui_surface_v1";
+    ModUiUnavailableError = class extends Error {
+      name = MOD_UI_UNAVAILABLE;
+    };
+    ModSurface = class {
+      constructor(opts) {
+        this.opts = opts;
+        this.requestTimeoutMs = opts.requestTimeoutMs ?? 15e3;
+        this.hostReplyTimeoutMs = opts.hostReplyTimeoutMs ?? 4500;
+        const { query } = opts;
+        if (typeof query.request !== "function" || typeof query.setUiHost !== "function") return;
+        query.setUiHost({
+          copy: (req) => this.relayHostRequest("copy", req),
+          promptRead: (req) => this.relayHostRequest("promptRead", req),
+          promptFill: (req) => this.relayHostRequest("promptFill", req),
+          promptSuggest: (req) => this.relayHostRequest("promptSuggest", req)
+        });
+        void query.initializationResult?.().then(
+          (init) => this.setAvailable(Array.isArray(init?.capabilities) && init.capabilities.includes(UI_SURFACE_CAPABILITY)),
+          () => this.setAvailable(false)
+        );
+      }
+      opts;
+      available = false;
+      /** The CLI serves remote surfaces; `available` also needs the user's preference. */
+      capable = false;
+      decided = false;
+      disposed = false;
+      clientAnswers = /* @__PURE__ */ new Map();
+      pendingHost = /* @__PURE__ */ new Map();
+      requestTimeoutMs;
+      hostReplyTimeoutMs;
+      get isAvailable() {
+        return this.available;
+      }
+      /** Re-reads the user preference (after it changed) and re-announces availability. */
+      refreshEnabled() {
+        if (this.capable) this.setAvailable(true);
+      }
+      setAvailable(capable) {
+        if (this.disposed) return;
+        this.capable = capable;
+        const next = capable && (this.opts.enabled?.() ?? true);
+        if (this.decided && next === this.available && !next) return;
+        this.decided = true;
+        this.available = next;
+        if (!next) this.clientAnswers.clear();
+        this.opts.emit({ type: "mod_ui_state", available: next });
+      }
+      async call(op, request) {
+        if (op === "hostReply") return this.acceptHostReply(request);
+        if (!this.available || this.disposed) throw new ModUiUnavailableError("This session cannot draw mod interfaces");
+        const wireOp = op;
+        if (wireOp === "attach") {
+          const { clientId, answers } = request;
+          if (answers) this.clientAnswers.set(clientId, new Set(answers));
+        } else if (wireOp === "detach") {
+          this.clientAnswers.delete(request.clientId);
+        }
+        const signal = AbortSignal.timeout(this.requestTimeoutMs);
+        const response = await this.opts.query.request(toWireRequest(wireOp, request), { signal });
+        const payload = response && typeof response === "object" && "response" in response ? response.response : response;
+        return fromWireResponse(wireOp, payload);
+      }
+      /** Consumes a mod push; false when `sys` is not one. */
+      handleSystem(sys) {
+        const event = mapModSystemMessage(sys);
+        if (!event) return false;
+        if (this.available) this.opts.emit(event);
+        return true;
+      }
+      dispose() {
+        if (this.disposed) return;
+        this.disposed = true;
+        if (this.available) this.opts.emit({ type: "mod_ui_state", available: false });
+        this.available = false;
+        for (const pending2 of this.pendingHost.values()) pending2.resolve(null);
+        this.pendingHost.clear();
+      }
+      /**
+       * A plugin asked a client to act (clipboard, composer). The CLI names the
+       * client; the request goes out as `mod_host_request` and waits for that
+       * client's `hostReply`. Never throws: an error reply would make the CLI wait
+       * its full 5 s, so a missing answer resolves the safe default instead.
+       */
+      async relayHostRequest(kind, req) {
+        const clientId = typeof req.client_id === "string" ? req.client_id : "";
+        if (!this.available || !this.clientAnswers.get(clientId)?.has(kind)) return toWireHostReply(kind, null);
+        const requestId = randomUUID4();
+        const reply = await new Promise((resolve18) => {
+          const timer = setTimeout(() => {
+            this.pendingHost.delete(requestId);
+            resolve18(null);
+          }, this.hostReplyTimeoutMs);
+          this.pendingHost.set(requestId, {
+            kind,
+            clientId,
+            resolve: (value) => {
+              clearTimeout(timer);
+              resolve18(value);
+            }
+          });
+          this.opts.emit({ type: "mod_host_request", clientId, requestId, request: toHostRequest(kind, req) });
+        });
+        return toWireHostReply(kind, reply);
+      }
+      /** Whether a `mod_host_request` still waits for its client; a delivered copy of a finished one must not be acted on. */
+      isHostRequestPending(requestId) {
+        return this.pendingHost.has(requestId);
+      }
+      acceptHostReply({ requestId, clientId, reply }) {
+        const pending2 = this.pendingHost.get(requestId);
+        if (!pending2 || pending2.kind !== reply.kind || pending2.clientId !== clientId) return { accepted: false };
+        this.pendingHost.delete(requestId);
+        pending2.resolve(reply);
+        return { accepted: true };
+      }
+    };
+  }
+});
+
+// ../../packages/claude/src/mod-surface/dev-folders.ts
+var init_dev_folders = __esm({
+  "../../packages/claude/src/mod-surface/dev-folders.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/claude/src/mod-surface.ts
+var init_mod_surface2 = __esm({
+  "../../packages/claude/src/mod-surface.ts"() {
+    "use strict";
+    init_mod_surface();
+    init_wire();
+    init_dev_folders();
+  }
+});
+
 // ../../packages/runtime/src/mcp-apps/resource-gc.ts
 function createMcpAppResourceGc(store, references, graceMs = 5 * 6e4) {
   let immediate;
@@ -17590,7 +17969,7 @@ var init_host_wake = __esm({
 });
 
 // ../../packages/runtime/src/session/host-action-store.ts
-import { createHash as createHash4, randomBytes as randomBytes2, randomUUID as randomUUID4, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+import { createHash as createHash4, randomBytes as randomBytes2, randomUUID as randomUUID5, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 function hashToken(token) {
   return createHash4("sha256").update(token).digest("hex");
 }
@@ -17777,7 +18156,7 @@ function createSqliteHostActionStore(db) {
       const now = input.now ?? Date.now();
       const deadlineMs = input.deadlineMs ?? DEFAULT_HOST_ACTION_DEADLINE_MS;
       const row = {
-        actionId: randomUUID4(),
+        actionId: randomUUID5(),
         sessionId: input.sessionId,
         turnId: input.turnId ?? null,
         controllerClientSessionId: input.controllerClientSessionId,
@@ -18325,7 +18704,7 @@ var init_runtime_policy = __esm({
 });
 
 // ../../packages/runtime/src/session/session-runtime.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 function deriveSessionTitleFromUserText(text2) {
   const cleaned = stripMiniAppMarkup(text2).trim().replace(/\s+/g, " ");
   if (!cleaned) return null;
@@ -18349,7 +18728,7 @@ function createSimulatedTurnRunner(opts) {
     onEvent?.({ kind: "status", status: "streaming" });
     if (opts?.requestPermission && onPermission) {
       const decision = await onPermission({
-        interactionId: randomUUID5(),
+        interactionId: randomUUID6(),
         kind: "permission",
         toolName: "shell",
         createdAt: Date.now()
@@ -18361,7 +18740,7 @@ function createSimulatedTurnRunner(opts) {
     }
     if (opts?.requestQuestion && onQuestion) {
       await onQuestion({
-        interactionId: randomUUID5(),
+        interactionId: randomUUID6(),
         kind: "question",
         toolName: "AskUserQuestion",
         input: {
@@ -18372,7 +18751,7 @@ function createSimulatedTurnRunner(opts) {
     }
     if (opts?.requestPlan && onPlan) {
       const plan = await onPlan({
-        interactionId: randomUUID5(),
+        interactionId: randomUUID6(),
         kind: "plan",
         toolName: "ExitPlanMode",
         input: { plan: "Do the work" },
@@ -18384,7 +18763,7 @@ function createSimulatedTurnRunner(opts) {
       }
     }
     if (opts?.emitStructuredEvents && onEvent) {
-      const toolUseId = randomUUID5();
+      const toolUseId = randomUUID6();
       onEvent({
         kind: "tool",
         phase: "started",
@@ -18401,7 +18780,7 @@ function createSimulatedTurnRunner(opts) {
       });
     }
     let finalText = "";
-    const blockId = randomUUID5();
+    const blockId = randomUUID6();
     for (const chunk of chunks) {
       if (signal.aborted) throw new Error("aborted");
       await new Promise((r) => setTimeout(r, delayMs));
@@ -18417,7 +18796,7 @@ function createSimulatedTurnRunner(opts) {
       onEvent?.({ kind: "text", blockId, final: true, text: finalText });
     }
     onEvent?.({ kind: "status", status: "idle" });
-    return { finalText, providerResume: `resume-${randomUUID5()}` };
+    return { finalText, providerResume: `resume-${randomUUID6()}` };
   };
 }
 var DEFAULT_AGENTS_CONFIRM_TIMEOUT_MS, SessionRuntime, createSimulatedCodexRunner;
@@ -18430,6 +18809,7 @@ var init_session_runtime = __esm({
     init_mcp_apps_state();
     init_mcp_apps_index();
     init_codex_accounts();
+    init_mod_ui();
     init_schema_form();
     init_environment();
     init_message_catalog();
@@ -18513,6 +18893,28 @@ var init_session_runtime = __esm({
           onElicitation: (interaction, signal) => this.requestElicitation(session.sessionId, interaction, signal)
         });
       }
+      /**
+       * A view's op on the session's mod surface. Ops that change what a plugin
+       * sees or does need the control lease; drawing does not.
+       */
+      async modUi(input) {
+        const session = this.live.get(input.sessionId);
+        if (!session) throw Object.assign(new Error("session not found"), { code: "not_found" });
+        if (MOD_UI_MUTATING_OPS.has(input.op)) {
+          this.leases.assertValid({
+            resource: { environmentId: this.environmentId, sessionId: input.sessionId },
+            leaseId: input.leaseId ?? "",
+            generation: input.generation ?? "",
+            holderClientId: input.client.clientSessionId
+          });
+        }
+        if (!this.turnRunner.modUi) throw Object.assign(new Error("This harness draws no mod interfaces"), { name: MOD_UI_UNAVAILABLE, code: "unavailable" });
+        return this.turnRunner.modUi(session, input.op, asNodeCallerModUiRequest(input.request, input.client.clientSessionId));
+      }
+      /** Live runtimes pick up a plugin change on disk; released ones load it at their next start. */
+      async reloadPlugins() {
+        await this.turnRunner.reloadPlugins?.();
+      }
       runtimeReleases = /* @__PURE__ */ new Set();
       /**
        * Per-session FIFO of turns accepted while status is streaming for harnesses
@@ -18669,7 +19071,7 @@ var init_session_runtime = __esm({
         const automationId = typeof input.automationId === "string" && input.automationId.trim() ? input.automationId.trim() : null;
         const isAutomation = input.isAutomation === true || !!automationId;
         const session = {
-          sessionId: randomUUID5(),
+          sessionId: randomUUID6(),
           projectId: input.projectId,
           harnessId: input.harnessId ?? "claude",
           providerId: input.providerId ?? input.harnessId ?? "claude",
@@ -18862,7 +19264,7 @@ var init_session_runtime = __esm({
         const cwd = input.cwd !== void 0 ? input.cwd && input.cwd.trim() ? input.cwd.trim() : null : source.cwd;
         const providerResume = input.providerResume !== void 0 ? input.providerResume && input.providerResume.trim() ? input.providerResume.trim() : null : null;
         const session = {
-          sessionId: randomUUID5(),
+          sessionId: randomUUID6(),
           projectId: source.projectId,
           harnessId: source.harnessId,
           providerId: source.providerId,
@@ -18922,8 +19324,24 @@ var init_session_runtime = __esm({
       snapshotSequence() {
         return this.events.headSequence();
       }
-      listEventsAfter(afterSequence) {
-        return this.events.listAfter(afterSequence);
+      /**
+       * Events after a cursor, as `reader` sees them. Mod events are delivered
+       * through this durable log although only their moment matters: a host
+       * request that no longer waits for its client is read without its event
+       * (the envelope stays so the cursor moves past it), so a clipboard write or
+       * composer fill is never replayed; mod client ids read as the reader's own.
+       */
+      listEventsAfter(afterSequence, reader) {
+        return this.events.listAfter(afterSequence).map((envelope) => {
+          if (envelope.aggregateType !== "session" || envelope.eventType !== SESSION_DURABLE_EVENT.agentEvent) return envelope;
+          const payload = envelope.payload;
+          const event = payload?.event;
+          if (!event?.type.startsWith("mod_")) return envelope;
+          if (event.type === "mod_host_request" && !this.turnRunner.isModHostRequestPending?.(envelope.aggregateId, event.requestId)) {
+            return { ...envelope, payload: {} };
+          }
+          return reader ? { ...envelope, payload: { ...payload, event: asNodeReaderModEvent(event, reader.clientSessionId) } } : envelope;
+        });
       }
       /**
        * Paged denser message catalog for remote UI hydrate.
@@ -19154,7 +19572,7 @@ var init_session_runtime = __esm({
       appendUserMessage(session, opts) {
         if (opts.source === "task-notification" && isModelOnlyHostWake(opts.text)) return;
         const userBlock = {
-          id: randomUUID5(),
+          id: randomUUID6(),
           role: "user",
           text: opts.text,
           ...opts.userMessageContent ? { userMessageContent: opts.userMessageContent } : {},
@@ -19221,6 +19639,10 @@ var init_session_runtime = __esm({
       handleAmbientEvent(sessionId, event) {
         const session = this.live.get(sessionId);
         if (!session || session.closed || this.disposing) return;
+        if (event.type.startsWith("mod_")) {
+          this.events.appendSession({ sessionId, eventType: SESSION_DURABLE_EVENT.agentEvent, payload: { event } });
+          return;
+        }
         const activeUsers = this.activeTurnCounts.get(sessionId) ?? 0;
         if (event.type === "status_change" && event.status === "idle" && activeUsers > 0) return;
         if (event.type === "message_start") {
@@ -19261,7 +19683,7 @@ var init_session_runtime = __esm({
         this.persist(session);
       }
       async runTurn(session, opts, abort) {
-        const assistantId = randomUUID5();
+        const assistantId = randomUUID6();
         let assistantText = "";
         const requestId = opts.requestId;
         const permissionMode = typeof opts.permissionMode === "string" && opts.permissionMode.trim() ? opts.permissionMode.trim() : void 0;
@@ -19954,7 +20376,7 @@ var init_session_runtime = __esm({
           this.rejectPendingPermission(session);
         }
         const interaction = {
-          interactionId: `sessionagents_${Date.now()}_${randomUUID5().slice(0, 8)}`,
+          interactionId: `sessionagents_${Date.now()}_${randomUUID6().slice(0, 8)}`,
           kind: "session_agents_confirm",
           toolName: "session_collab_request",
           toolUseId: void 0,
@@ -20390,7 +20812,7 @@ var init_session_runtime = __esm({
 });
 
 // ../../packages/runtime/src/session/event-log.ts
-import { randomUUID as randomUUID6 } from "node:crypto";
+import { randomUUID as randomUUID7 } from "node:crypto";
 var EventLog;
 var init_event_log = __esm({
   "../../packages/runtime/src/session/event-log.ts"() {
@@ -20403,7 +20825,7 @@ var init_event_log = __esm({
       db;
       environmentId;
       append(input) {
-        const eventId = randomUUID6();
+        const eventId = randomUUID7();
         const timestamp = Date.now();
         const eventVersion = input.eventVersion ?? 1;
         const payloadJson = JSON.stringify(input.payload);
@@ -20701,7 +21123,7 @@ var init_session_provider_definitions = __esm({
 });
 
 // ../../packages/runtime/src/session/session-provider-store.ts
-import { randomUUID as randomUUID7 } from "node:crypto";
+import { randomUUID as randomUUID8 } from "node:crypto";
 function assertHarnessId(raw) {
   if (!VALID_HARNESS_IDS.has(raw)) {
     throw Object.assign(new Error(`Unknown harness: ${raw}`), { code: "invalid_argument" });
@@ -20809,7 +21231,7 @@ function createSessionProviderStore(db) {
       throw Object.assign(new Error("name required"), { code: "invalid_argument" });
     }
     const config2 = normalizeConfig(input.config);
-    const id = input.id?.trim() || `${harnessId}-${randomUUID7()}`;
+    const id = input.id?.trim() || `${harnessId}-${randomUUID8()}`;
     if (get3(id)) {
       throw Object.assign(new Error(`Provider already exists: ${id}`), { code: "conflict" });
     }
@@ -25875,7 +26297,7 @@ var init_resolve_service = __esm({
 import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync3 } from "node:fs";
 import { tmpdir } from "node:os";
 import { join as join11 } from "node:path";
-import { randomUUID as randomUUID8 } from "node:crypto";
+import { randomUUID as randomUUID9 } from "node:crypto";
 function resolveAttachmentsDir() {
   const override = process.env.SUPERONE_ATTACHMENTS_DIR?.trim();
   if (override) return override;
@@ -25904,8 +26326,8 @@ function decodeBase64(base643) {
   }
 }
 function safeFileBase(name, mimeType) {
-  const cleaned = (name || `attachment-${randomUUID8()}`).replace(/[^\w.\-]+/g, "_").slice(0, 80);
-  const base = cleaned || `attachment-${randomUUID8()}`;
+  const cleaned = (name || `attachment-${randomUUID9()}`).replace(/[^\w.\-]+/g, "_").slice(0, 80);
+  const base = cleaned || `attachment-${randomUUID9()}`;
   if (/\.\w{2,5}$/.test(base)) return base;
   return `${base}.${extForAttachmentMime(mimeType)}`;
 }
@@ -25915,7 +26337,7 @@ function persistAttachment(base643, mimeType, opts) {
   try {
     const dir = resolveAttachmentsDir();
     mkdirSync4(dir, { recursive: true });
-    const fileName = `${randomUUID8()}-${safeFileBase(opts?.name, mimeType)}`;
+    const fileName = `${randomUUID9()}-${safeFileBase(opts?.name, mimeType)}`;
     const filePath = join11(dir, fileName);
     writeFileSync3(filePath, buf);
     return filePath;
@@ -35705,6 +36127,29 @@ function findPluginSourceDir(mpDir, pluginName) {
   }
   return null;
 }
+function enabledPluginsSources(cwd, opts) {
+  return cwd ? [getUserSettingsPath(opts), getProjectSettingsPath2(cwd), getLocalSettingsPath(cwd)] : [getUserSettingsPath(opts)];
+}
+function enabledPluginsEntry(filePath, key) {
+  const map2 = readJsonObject(filePath).enabledPlugins;
+  return map2 && typeof map2 === "object" && !Array.isArray(map2) ? map2[key] : void 0;
+}
+function isPluginEnabled(cwd, key, defaultEnabled, opts) {
+  let value;
+  for (const file2 of enabledPluginsSources(cwd, opts)) {
+    const entry = enabledPluginsEntry(file2, key);
+    if (entry !== void 0) value = entry;
+  }
+  return value === void 0 ? defaultEnabled !== false : value === true || Array.isArray(value);
+}
+function setPluginEnabled(cwd, key, scope, enabled, opts) {
+  const sources = enabledPluginsSources(cwd, opts);
+  const deciding = [...sources].reverse().find((file2) => enabledPluginsEntry(file2, key) !== void 0);
+  const target = deciding ?? (scope === "user" || !cwd ? getUserSettingsPath(opts) : getProjectSettingsPath2(cwd));
+  const data = readJsonObject(target);
+  const map2 = data.enabledPlugins && typeof data.enabledPlugins === "object" && !Array.isArray(data.enabledPlugins) ? data.enabledPlugins : {};
+  writeSettingsJson(target, { ...data, enabledPlugins: { ...map2, [key]: enabled } });
+}
 function listPlugins(cwd, opts) {
   const data = readJson2(installedFile(opts));
   if (!data?.plugins) return [];
@@ -35734,6 +36179,7 @@ function listPlugins(cwd, opts) {
         version: version2,
         installPath: entry.installPath,
         installedAt: entry.installedAt,
+        enabled: isPluginEnabled(cwd, pluginKey, manifest?.defaultEnabled, opts),
         ...contents,
         latestVersion,
         hasUpdate
@@ -36066,6 +36512,13 @@ var init_plugins_manage = __esm({
   }
 });
 
+// ../../packages/runtime/src/fs/plugin-review.ts
+var init_plugin_review = __esm({
+  "../../packages/runtime/src/fs/plugin-review.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/runtime/src/fs/hooks-config.ts
 import { existsSync as existsSync18, mkdirSync as mkdirSync10, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "node:fs";
 import { dirname as dirname9, join as join19 } from "node:path";
@@ -36204,6 +36657,7 @@ var init_fs = __esm({
     init_mcp_merge();
     init_fuzzy();
     init_plugins_manage();
+    init_plugin_review();
     init_hooks_config();
     init_agents_discover();
   }
@@ -36263,6 +36717,7 @@ function createNodeClaudeTurnRunner(opts) {
   const disposeEntry = async (sessionKey) => {
     const entry = lives.get(sessionKey);
     if (!entry) return;
+    entry.modSurface?.dispose();
     lives.delete(sessionKey);
     await entry.live.dispose().catch(() => void 0);
     await entry.hostActionDispose?.().catch(() => void 0);
@@ -36353,7 +36808,8 @@ function createNodeClaudeTurnRunner(opts) {
       env: p3.authEnv,
       queryFn: opts.queryFn,
       options: mcpOptions,
-      toolApps
+      toolApps,
+      onSystem: (system) => lives.get(sessionKey)?.modSurface?.handleSystem(system) ?? false
     });
     const entry = {
       live,
@@ -36364,10 +36820,22 @@ function createNodeClaudeTurnRunner(opts) {
       mcpServers: merged.claudeMcpServers,
       mcpAppsCatalog,
       refreshMcpAppsCatalog: refreshCatalog,
+      modSurface: null,
+      modBacklog: [],
       busyCount: 0,
       lastActivityAt: Date.now()
     };
     lives.set(sessionKey, entry);
+    if (live.query) {
+      entry.modSurface = new ModSurface({
+        query: live.query,
+        emit: (event) => {
+          if (lives.get(sessionKey) !== entry) return;
+          if (entry.onAmbientEvent) entry.onAmbientEvent(event);
+          else entry.modBacklog.push(event);
+        }
+      });
+    }
     return entry;
   };
   const runner = async (input) => {
@@ -36408,9 +36876,7 @@ function createNodeClaudeTurnRunner(opts) {
     const nextAdditionalDirsKey = additionalDirsKeyOf(input.additionalDirectories?.filter(Boolean));
     let entry = lives.get(sessionKey);
     if (entry && (entry.cwd !== cwd || entry.mcpDiskKey !== nextMcpDiskKey || entry.additionalDirsKey !== nextAdditionalDirsKey)) {
-      await entry.live.dispose().catch(() => void 0);
-      await entry.hostActionDispose?.().catch(() => void 0);
-      lives.delete(sessionKey);
+      await disposeEntry(sessionKey);
       entry = void 0;
     }
     entry ??= openEntry({
@@ -36429,6 +36895,7 @@ function createNodeClaudeTurnRunner(opts) {
       apiProviderId: input.apiProviderId
     });
     entry.onAmbientEvent = input.onAmbientEvent;
+    if (input.onAmbientEvent) for (const event of entry.modBacklog.splice(0)) input.onAmbientEvent(event);
     const prepared = prepareTurnPrompt(input.text, cwd, input.images);
     const content = prepared.kind === "text" ? prepared.text : prepared.content;
     const activeEntry = entry;
@@ -36542,6 +37009,19 @@ function createNodeClaudeTurnRunner(opts) {
   runner.disposeSession = async (sessionId) => {
     await disposeEntry(sessionId);
   };
+  runner.reloadPlugins = async () => {
+    await Promise.all([...lives.values()].map(async (entry) => {
+      const result = await entry.live.query?.reloadPlugins().catch(() => null);
+      if (result) entry.onAmbientEvent?.({ type: "session_commands", commands: sdkSlashCommands(result.commands, entry.live.terminalSlashCommands) });
+    }));
+  };
+  runner.modUi = async (session, op, request) => {
+    const entry = lives.get(session.sessionId);
+    if (!entry?.modSurface) throw Object.assign(new Error("No live Claude runtime for this session"), { name: MOD_UI_UNAVAILABLE, code: "unavailable" });
+    if (MOD_UI_MUTATING_OPS.has(op)) entry.lastActivityAt = Date.now();
+    return entry.modSurface.call(op, request);
+  };
+  runner.isModHostRequestPending = (sessionId, requestId) => lives.get(sessionId)?.modSurface?.isHostRequestPending(requestId) ?? false;
   runner.disposeAll = async () => {
     const keys = [...lives.keys()];
     await Promise.all(keys.map((id) => disposeEntry(id)));
@@ -36562,6 +37042,9 @@ var init_claude_turn_runner = __esm({
     init_mcp_apps3();
     init_identity();
     init_mcp_apps();
+    init_mod_ui();
+    init_slash_commands();
+    init_mod_surface2();
     init_session();
     init_resolve_service();
     init_turn_attachments();
@@ -37535,8 +38018,8 @@ var init_managed_official = __esm({
   "../../packages/runtime/src/harness/managed-official.ts"() {
     "use strict";
     init_managed_layout();
-    OFFICIAL_CLAUDE_SDK_VERSION = "0.3.287";
-    OFFICIAL_CODEX_NPM_VERSION = "0.159.0";
+    OFFICIAL_CLAUDE_SDK_VERSION = "0.3.289";
+    OFFICIAL_CODEX_NPM_VERSION = "0.160.0";
     OFFICIAL_CODEX_PACKAGE = "@openai/codex";
   }
 });
@@ -74118,7 +74601,7 @@ var init_mcp_app_elicitation = __esm({
 
 // src/session/codex-turn-runner.ts
 import { existsSync as existsSync32 } from "node:fs";
-import { randomUUID as randomUUID9 } from "node:crypto";
+import { randomUUID as randomUUID10 } from "node:crypto";
 function mapCodexReasoningEffort(effort) {
   if (!effort) return void 0;
   const e = effort.trim().toLowerCase();
@@ -74186,7 +74669,7 @@ function createNodeCodexTurnRunner(opts) {
         }
         const threadId = request.params.threadId ?? request.params.thread_id;
         if (!live2?.onElicitation || typeof threadId === "string" && live2.threadId && threadId !== live2.threadId) return { action: "cancel", content: null, _meta: null };
-        const permission = codexElicitationRequest(`codex-elicitation-${randomUUID9()}`, request.params);
+        const permission = codexElicitationRequest(`codex-elicitation-${randomUUID10()}`, request.params);
         if (!permission) return { action: "cancel", content: null, _meta: null };
         live2.busyCount += 1;
         try {
@@ -74427,7 +74910,7 @@ function createNodeCodexTurnRunner(opts) {
     const provider = createCodexMcpAppsProvider(binding, live.threadId, live.client.request.bind(live.client), live.client.request);
     if (!host) return provider;
     return withCodexMcpAppElicitation(provider, live.client, live.threadId, async (request, signal) => {
-      const permission = codexElicitationRequest(`codex-elicitation-${randomUUID9()}`, request.params);
+      const permission = codexElicitationRequest(`codex-elicitation-${randomUUID10()}`, request.params);
       if (!permission) return { action: "cancel", content: null, _meta: null };
       live.busyCount += 1;
       try {
@@ -74499,6 +74982,16 @@ function createProductionTurnRunner(opts) {
     if (!native?.getMcpAppsProvider) throw new McpAppsError("not_connected", "Harness does not support MCP Apps");
     return native.getMcpAppsProvider(session, binding, origin, host);
   };
+  runner.reloadPlugins = async () => {
+    await claude.reloadPlugins?.();
+  };
+  runner.modUi = (session, op, request) => {
+    if (session.harnessId !== "claude" || !claude.modUi) {
+      return Promise.reject(Object.assign(new Error("This harness draws no mod interfaces"), { name: MOD_UI_UNAVAILABLE, code: "unavailable" }));
+    }
+    return claude.modUi(session, op, request);
+  };
+  runner.isModHostRequestPending = (sessionId, requestId) => claude.isModHostRequestPending?.(sessionId, requestId) ?? false;
   runner.disposeSession = async (sessionId) => {
     await Promise.all([
       claude.disposeSession?.(sessionId),
@@ -74518,6 +75011,7 @@ var init_codex_turn_runner = __esm({
   "src/session/codex-turn-runner.ts"() {
     "use strict";
     init_mcp_apps2();
+    init_mod_ui();
     init_mcp_apps();
     init_identity();
     init_codex_accounts();
@@ -83529,6 +84023,7 @@ CREATE INDEX IF NOT EXISTS idx_session_providers_harness ON session_providers(ha
 
 // src/rpc/handlers.ts
 init_message_display();
+init_mod_ui();
 
 // src/rpc/mcp-apps-handlers.ts
 init_environment();
@@ -84003,6 +84498,111 @@ async function probeSandboxRpc() {
   };
 }
 
+// ../../packages/runtime/src/server/rpc-mutating-methods.ts
+init_mod_ui();
+var NODE_MUTATING_METHODS = /* @__PURE__ */ new Set([
+  "terminal.create",
+  "terminal.write",
+  "terminal.resize",
+  "terminal.kill",
+  "project.open",
+  "project.update",
+  "project.remove",
+  "workspace.writeFile",
+  "workspace.rename",
+  "workspace.move",
+  "workspace.delete",
+  "workspace.mkdir",
+  "workspace.watchStart",
+  "workspace.watchStop",
+  "workspace.tailWatchStart",
+  "workspace.tailWatchStop",
+  "git.clone",
+  "git.switchBranch",
+  "git.createBranch",
+  "git.worktreeActivate",
+  "git.worktreeAssignBranch",
+  "git.worktreeHandoff",
+  "session.create",
+  "session.setCwd",
+  "session.patchSettings",
+  "session.fork",
+  "session.send",
+  "session.interrupt",
+  "session.respondPermission",
+  "session.respondQuestion",
+  "session.respondPlan",
+  "session.claimHostAction",
+  "session.respondHostAction",
+  "harness.probe",
+  "session.acquireControl",
+  "session.renewControl",
+  "session.releaseControl",
+  "session.close",
+  "session.remove",
+  "session.rename",
+  "session.setTags",
+  "session.setUiFlags",
+  // pin/hide
+  "terminal.acquireControl",
+  "terminal.renewControl",
+  "terminal.releaseControl",
+  "collaboration.request",
+  "collaboration.start",
+  "collaboration.send",
+  "provider.createCredential",
+  "provider.updateCredential",
+  "provider.deleteCredential",
+  "provider.setBinding",
+  "provider.clearBinding",
+  "provider.upsertCustomPlatform",
+  "provider.deleteCustomPlatform",
+  "provider.importBundle",
+  "settings.patch",
+  // Skills, MCP, plugins, hooks
+  "skills.delete",
+  "skills.install",
+  "mcp.save",
+  "mcp.toggle",
+  "mcp.delete",
+  "plugins.delete",
+  "plugins.setEnabled",
+  "plugins.install",
+  "plugins.update",
+  "plugins.addMarketplace",
+  "plugins.removeMarketplace",
+  "plugins.updateMarketplace",
+  "hooks.save",
+  "hooks.delete",
+  "automation.create",
+  "automation.update",
+  "automation.delete",
+  "automation.runNow",
+  "sessionProviders.create",
+  "sessionProviders.update",
+  "sessionProviders.delete",
+  "codex.setDefaultAccount",
+  "codex.setAuth",
+  "codex.accountLoginStart",
+  "codex.accountLoginCancel",
+  "codex.accountLogout",
+  "codex.consumeRateLimitReset",
+  "codex.loginMcpOauth",
+  "codex.importExternalAgent",
+  "codex.plugins.install",
+  "codex.plugins.uninstall",
+  "codex.marketplace.add",
+  "codex.marketplace.remove",
+  "codex.marketplace.upgrade"
+]);
+function isNodeMutatingCall(method, payload) {
+  if (method === "session.modUi") {
+    const op = payload?.op;
+    return typeof op === "string" && MOD_UI_MUTATING_OPS.has(op);
+  }
+  return NODE_MUTATING_METHODS.has(method);
+}
+
 // ../../packages/shared/src/git-clone.ts
 import { execFile as execFile2 } from "node:child_process";
 import { existsSync as existsSync34, mkdirSync as mkdirSync19 } from "node:fs";
@@ -84590,6 +85190,34 @@ function handlePluginsDelete(payload, ctx) {
     return mapThrown(err);
   }
 }
+function handlePluginsSetEnabled(payload, ctx) {
+  const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
+  if (baseDenied) return baseDenied;
+  const p3 = asRecord17(payload);
+  try {
+    const projectId = String(p3.projectId ?? "");
+    const cwd = projectRoot(ctx.projects, projectId);
+    const provider = parseClaudeProvider(p3.provider);
+    if (!provider) {
+      return { error: { code: "invalid_argument", message: "provider must be claude" } };
+    }
+    const scope = parseScope(p3.scope);
+    if (!scope) {
+      return { error: { code: "invalid_argument", message: "scope must be user or project" } };
+    }
+    const denied = requireResourceWrite(ctx.client, scope);
+    if (denied) return denied;
+    const key = String(p3.key ?? "");
+    if (!key || typeof p3.enabled !== "boolean") {
+      return { error: { code: "invalid_argument", message: "key and enabled are required" } };
+    }
+    setPluginEnabled(cwd, key, scope, p3.enabled, manageOpts(ctx));
+    ctx.projects.touch(projectId);
+    return { result: { ok: true, provider } };
+  } catch (err) {
+    return mapThrown(err);
+  }
+}
 async function handlePluginsInstall(payload, ctx) {
   const baseDenied = requireScopes(ctx.client, OPERATION_SCOPES.writeWorkspace);
   if (baseDenied) return baseDenied;
@@ -84950,6 +85578,8 @@ function dispatchResourceRpc(method, payload, ctx) {
       return handlePluginsReadFile(payload, ctx);
     case "plugins.delete":
       return handlePluginsDelete(payload, ctx);
+    case "plugins.setEnabled":
+      return handlePluginsSetEnabled(payload, ctx);
     case "plugins.install":
       return handlePluginsInstall(payload, ctx);
     case "plugins.update":
@@ -84980,21 +85610,6 @@ function dispatchResourceRpc(method, payload, ctx) {
       return null;
   }
 }
-var RESOURCE_MUTATING_METHODS = [
-  "skills.delete",
-  "skills.install",
-  "mcp.save",
-  "mcp.toggle",
-  "mcp.delete",
-  "plugins.delete",
-  "plugins.install",
-  "plugins.update",
-  "plugins.addMarketplace",
-  "plugins.removeMarketplace",
-  "plugins.updateMarketplace",
-  "hooks.save",
-  "hooks.delete"
-];
 
 // src/rpc/automation-handlers.ts
 init_environment();
@@ -85263,12 +85878,6 @@ function dispatchAutomationRpc(method, payload, ctx) {
       return null;
   }
 }
-var AUTOMATION_MUTATING_METHODS = [
-  "automation.create",
-  "automation.update",
-  "automation.delete",
-  "automation.runNow"
-];
 
 // src/rpc/draft-handlers.ts
 init_environment();
@@ -85592,21 +86201,6 @@ async function dispatchCodexRpc(method, payload, ctx) {
       };
   }
 }
-var CODEX_MUTATING_METHODS = [
-  "codex.setDefaultAccount",
-  "codex.setAuth",
-  "codex.accountLoginStart",
-  "codex.accountLoginCancel",
-  "codex.accountLogout",
-  "codex.consumeRateLimitReset",
-  "codex.loginMcpOauth",
-  "codex.importExternalAgent",
-  "codex.plugins.install",
-  "codex.plugins.uninstall",
-  "codex.marketplace.add",
-  "codex.marketplace.remove",
-  "codex.marketplace.upgrade"
-];
 function handleGetAuthStatus(payload, ctx) {
   const denied = requireScopes5(ctx.client, OPERATION_SCOPES.readEnvironment);
   if (denied) return denied;
@@ -86028,11 +86622,6 @@ async function handleAccounts(method, payload, ctx) {
 
 // src/rpc/session-provider-handlers.ts
 init_environment();
-var SESSION_PROVIDER_MUTATING_METHODS = [
-  "sessionProviders.create",
-  "sessionProviders.update",
-  "sessionProviders.delete"
-];
 function requireScopes6(client3, scopes) {
   if (!hasAllScopes(client3.scopes, scopes)) {
     return { error: { code: "forbidden", message: `missing scopes: ${scopes.join(", ")}` } };
@@ -86282,72 +86871,8 @@ function clearWatchBuffersForClient(clientSessionId) {
   }
 }
 var MAX_TURN_ADDITIONAL_DIRS = 64;
-var MUTATING_METHODS = /* @__PURE__ */ new Set([
-  "terminal.create",
-  "terminal.write",
-  "terminal.resize",
-  "terminal.kill",
-  "project.open",
-  "project.update",
-  "project.remove",
-  "workspace.writeFile",
-  "workspace.rename",
-  "workspace.move",
-  "workspace.delete",
-  "workspace.mkdir",
-  "workspace.watchStart",
-  "workspace.watchStop",
-  "workspace.tailWatchStart",
-  "workspace.tailWatchStop",
-  "git.clone",
-  "git.switchBranch",
-  "git.createBranch",
-  "git.worktreeActivate",
-  "git.worktreeAssignBranch",
-  "git.worktreeHandoff",
-  "session.create",
-  "session.setCwd",
-  "session.patchSettings",
-  "session.fork",
-  "session.send",
-  "session.interrupt",
-  "session.respondPermission",
-  "session.respondQuestion",
-  "session.respondPlan",
-  "session.claimHostAction",
-  "session.respondHostAction",
-  "harness.probe",
-  "session.acquireControl",
-  "session.renewControl",
-  "session.releaseControl",
-  "session.close",
-  "session.remove",
-  "session.rename",
-  "session.setTags",
-  "session.setUiFlags",
-  // pin/hide
-  "terminal.acquireControl",
-  "terminal.renewControl",
-  "terminal.releaseControl",
-  "collaboration.request",
-  "collaboration.start",
-  "collaboration.send",
-  "provider.createCredential",
-  "provider.updateCredential",
-  "provider.deleteCredential",
-  "provider.setBinding",
-  "provider.clearBinding",
-  "provider.upsertCustomPlatform",
-  "provider.deleteCustomPlatform",
-  "provider.importBundle",
-  "settings.patch",
-  ...RESOURCE_MUTATING_METHODS,
-  ...AUTOMATION_MUTATING_METHODS,
-  ...SESSION_PROVIDER_MUTATING_METHODS,
-  ...CODEX_MUTATING_METHODS
-]);
 async function dispatchRpc(method, payload, ctx) {
-  if (MUTATING_METHODS.has(method)) {
+  if (isNodeMutatingCall(method, payload)) {
     if (!ctx.idempotencyKey) {
       return {
         error: {
@@ -86405,6 +86930,7 @@ async function dispatchRpc(method, payload, ctx) {
   }
   return dispatchRpcInner(method, payload, ctx);
 }
+var PLUGIN_RELOAD_METHODS = /* @__PURE__ */ new Set(["plugins.setEnabled", "plugins.install", "plugins.update", "plugins.delete"]);
 async function dispatchRpcInner(method, payload, ctx) {
   const resource = dispatchResourceRpc(method, payload, {
     client: ctx.client,
@@ -86412,7 +86938,11 @@ async function dispatchRpcInner(method, payload, ctx) {
     harnesses: ctx.harnesses,
     providers: ctx.providers
   });
-  if (resource) return await resource;
+  if (resource) {
+    const result = await resource;
+    if (!result.error && PLUGIN_RELOAD_METHODS.has(method)) void ctx.sessions.reloadPlugins();
+    return result;
+  }
   const automation = dispatchAutomationRpc(method, payload, {
     client: ctx.client,
     projects: ctx.projects,
@@ -86588,6 +87118,8 @@ async function dispatchRpcInner(method, payload, ctx) {
       return handleTerminalReleaseControl(payload, ctx);
     case "session.send":
       return handleSessionSend(payload, ctx);
+    case "session.modUi":
+      return handleSessionModUi(payload, ctx);
     case "session.interrupt":
       return handleSessionInterrupt(payload, ctx);
     case "session.respondPermission":
@@ -88347,6 +88879,28 @@ async function handleSessionSend(payload, ctx) {
     return mapThrown8(err);
   }
 }
+async function handleSessionModUi(payload, ctx) {
+  const p3 = asRecord24(payload);
+  const op = String(p3.op ?? "");
+  const denied = requireScopes8(ctx.client, MOD_UI_MUTATING_OPS.has(op) ? OPERATION_SCOPES.operateSession : OPERATION_SCOPES.readSession);
+  if (denied) return denied;
+  try {
+    const result = await ctx.sessions.modUi({
+      sessionId: String(p3.sessionId ?? ""),
+      op,
+      request: asRecord24(p3.request),
+      client: { clientSessionId: ctx.client.clientSessionId },
+      leaseId: typeof p3.leaseId === "string" ? p3.leaseId : void 0,
+      generation: typeof p3.generation === "string" ? p3.generation : void 0
+    });
+    return { result };
+  } catch (err) {
+    if (err.name === MOD_UI_UNAVAILABLE) {
+      return { error: { code: "unavailable", message: `${MOD_UI_UNAVAILABLE}: ${err.message}` } };
+    }
+    return mapThrown8(err);
+  }
+}
 function handleSessionInterrupt(payload, ctx) {
   const denied = requireScopes8(ctx.client, OPERATION_SCOPES.operateSession);
   if (denied) return denied;
@@ -88545,7 +89099,7 @@ function handleSessionEvents(payload, ctx) {
   if (denied) return denied;
   const p3 = asRecord24(payload);
   const after = String(p3.afterSequence ?? "0");
-  return { result: { events: ctx.sessions.listEventsAfter(after) } };
+  return { result: { events: ctx.sessions.listEventsAfter(after, ctx.client) } };
 }
 function handleSessionMessagesList(payload, ctx) {
   const denied = requireScopes8(ctx.client, OPERATION_SCOPES.readSession);
@@ -89648,7 +90202,7 @@ function hashFileBounded(absolutePath, size) {
 import { existsSync as existsSync40, mkdirSync as mkdirSync22, realpathSync as realpathSync5, rmSync as rmSync8, writeFileSync as writeFileSync17 } from "node:fs";
 import { join as join35, resolve as resolve14 } from "node:path";
 import { tmpdir as tmpdir2 } from "node:os";
-import { randomUUID as randomUUID10 } from "node:crypto";
+import { randomUUID as randomUUID11 } from "node:crypto";
 
 // ../../packages/runtime/src/git/sanitize-ref.ts
 var CONTROL_CHAR_RE = /[\x00-\x1f\x7f]/;
@@ -90317,7 +90871,7 @@ var WorkspaceGitService = class {
       const mainStatus = git(diff.mainDir, ["status", "--porcelain"]).trim();
       if (mainStatus) return { ok: false, reason: "main-dirty" };
       const patch = git(diff.worktreePath, ["diff", "--binary", diff.base, diff.tree]);
-      const patchFile = join35(tmpdir2(), `s1-handoff-${randomUUID10()}.patch`);
+      const patchFile = join35(tmpdir2(), `s1-handoff-${randomUUID11()}.patch`);
       writeFileSync17(patchFile, `${patch}
 `);
       if (git(diff.mainDir, ["status", "--porcelain"]).trim()) {
@@ -90379,7 +90933,7 @@ var WorkspaceGitService = class {
     };
   }
   writeWorkingTree(worktreePath) {
-    const tmpIndex = join35(tmpdir2(), `s1-handoff-${randomUUID10()}.index`);
+    const tmpIndex = join35(tmpdir2(), `s1-handoff-${randomUUID11()}.index`);
     const env = { GIT_INDEX_FILE: tmpIndex };
     try {
       git(worktreePath, ["read-tree", "HEAD"], env);
@@ -90425,7 +90979,7 @@ function parseBranchPorcelain(raw) {
 init_session();
 
 // ../../packages/runtime/src/lease/control-lease.ts
-import { randomUUID as randomUUID11 } from "node:crypto";
+import { randomUUID as randomUUID12 } from "node:crypto";
 var DEFAULT_TTL_MS = 3e4;
 var MAX_TTL_MS = 15 * 60 * 1e3;
 function resourceKey(resource) {
@@ -90442,7 +90996,7 @@ function clampTtlMs(ttlMs) {
 var ControlLeaseService = class {
   constructor(db) {
     this.db = db;
-    this.leaseEpoch = randomUUID11();
+    this.leaseEpoch = randomUUID12();
   }
   db;
   leaseEpoch;
@@ -90473,7 +91027,7 @@ var ControlLeaseService = class {
         expiresAt: new Date(expiresAt2).toISOString()
       };
     }
-    const leaseId = randomUUID11();
+    const leaseId = randomUUID12();
     const generation = existing && existing.epoch === this.leaseEpoch ? String(Number(existing.generation || "0") + 1) : "1";
     const expiresAt = now + ttl;
     this.db.prepare(
@@ -90562,7 +91116,7 @@ import { dirname as dirname20, join as join37 } from "node:path";
 // ../../packages/runtime/src/mcp-apps/resource-store.ts
 init_mcp_apps();
 init_mcp_app_resource();
-import { createHash as createHash11, randomUUID as randomUUID12 } from "node:crypto";
+import { createHash as createHash11, randomUUID as randomUUID13 } from "node:crypto";
 import { existsSync as existsSync41, mkdirSync as mkdirSync23, readFileSync as readFileSync21, readdirSync as readdirSync13, renameSync as renameSync7, rmSync as rmSync9, statSync as statSync15, utimesSync, writeFileSync as writeFileSync18 } from "node:fs";
 import { join as join36 } from "node:path";
 function createMcpAppResourceStore(directory) {
@@ -90578,7 +91132,7 @@ function createMcpAppResourceStore(directory) {
       const hash2 = digest(snapshot.html), file2 = path(hash2);
       if (!existsSync41(file2) || statSync15(file2).size > MCP_APP_HTML_MAX_BYTES || digest(readFileSync21(file2, "utf8")) !== hash2) {
         mkdirSync23(directory, { recursive: true });
-        const temporary = join36(directory, `${hash2}.${randomUUID12()}.tmp`);
+        const temporary = join36(directory, `${hash2}.${randomUUID13()}.tmp`);
         try {
           writeFileSync18(temporary, snapshot.html, { encoding: "utf8", mode: 384, flag: "wx" });
           renameSync7(temporary, file2);
@@ -91033,7 +91587,7 @@ function prepareLaunchStart(store, callerSessionId, input) {
 }
 
 // ../../packages/runtime/src/collaboration/store.ts
-import { randomUUID as randomUUID13 } from "node:crypto";
+import { randomUUID as randomUUID14 } from "node:crypto";
 var GRANT_COLUMNS = `credential_hash AS grant_id, parent_session_id, child_session_id,
   agent_id, task, config_json, task_sent, COALESCE(kind, 'spawn') AS kind, started_at`;
 var MESSAGE_COLUMNS = `id, sequence, sender_session_id, recipient_session_id, client_message_id, content, created_at`;
@@ -91116,7 +91670,7 @@ var CollaborationStore = class {
    * handoff grants bind their session on start. The brief arrives on start.
    */
   createGrant(input) {
-    const grantId = randomUUID13();
+    const grantId = randomUUID14();
     try {
       this.db.prepare(`
         INSERT INTO session_collaboration_grants
@@ -91188,7 +91742,7 @@ var CollaborationStore = class {
   }
   insertMessage(grantId, input) {
     const row = {
-      id: randomUUID13(),
+      id: randomUUID14(),
       sequence: this.nextSequence(grantId),
       sender_session_id: input.senderSessionId,
       recipient_session_id: input.recipientSessionId,
@@ -91412,7 +91966,7 @@ function listCollaborationProfiles(deps) {
 }
 
 // src/session/collaboration-request.ts
-import { randomUUID as randomUUID14 } from "node:crypto";
+import { randomUUID as randomUUID15 } from "node:crypto";
 
 // src/session/collaboration-context.ts
 init_environment();
@@ -91448,7 +92002,7 @@ function normalizeLaunches(ctx, input, profileList) {
   const profiles = new Map(profileList.map((p3) => [p3.id, p3]));
   return input.launches.map((launch2) => {
     const mode = resolveLaunchMode(launch2.mode);
-    const launchId = launch2.launchId?.trim() || randomUUID14();
+    const launchId = launch2.launchId?.trim() || randomUUID15();
     if (mode === "link") {
       const peerSessionId = launch2.sessionId?.trim();
       if (!peerSessionId) {
@@ -92206,7 +92760,7 @@ var IdempotencyService = class {
 };
 
 // src/provider/provider-store.ts
-import { randomUUID as randomUUID15 } from "node:crypto";
+import { randomUUID as randomUUID16 } from "node:crypto";
 
 // src/provider/secret-crypto.ts
 import { existsSync as existsSync44, mkdirSync as mkdirSync24, readFileSync as readFileSync22, writeFileSync as writeFileSync19, chmodSync as chmodSync2 } from "node:fs";
@@ -92293,7 +92847,7 @@ var ProviderStore = class {
   }
   createCredential(input) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const id = input.id?.trim() || randomUUID15();
+    const id = input.id?.trim() || randomUUID16();
     const maxOrder = this.db.prepare("SELECT MAX(sort_order) as m FROM provider_credentials").get()?.m ?? -1;
     this.db.prepare(
       `INSERT INTO provider_credentials
@@ -92489,7 +93043,7 @@ var ProviderStore = class {
 };
 
 // src/session/host-action-mcp-server.ts
-import { randomUUID as randomUUID17 } from "node:crypto";
+import { randomUUID as randomUUID18 } from "node:crypto";
 import {
   createServer as createHttpServer
 } from "node:http";
@@ -96084,7 +96638,7 @@ init_interaction_memory();
 // ../../packages/runtime/src/fs/interaction-memory.ts
 init_superone_home();
 init_interaction_memory();
-import { createHash as createHash13, randomUUID as randomUUID16 } from "node:crypto";
+import { createHash as createHash13, randomUUID as randomUUID17 } from "node:crypto";
 import { lstat, mkdir, open, readdir, rename, rm } from "node:fs/promises";
 import { constants as constants4 } from "node:fs";
 import { join as join38 } from "node:path";
@@ -96280,7 +96834,7 @@ function indexEntry(note) {
   };
 }
 async function writeAtomic(dir, name, raw) {
-  const temp = join38(dir, `.${name}.${randomUUID16()}.tmp`);
+  const temp = join38(dir, `.${name}.${randomUUID17()}.tmp`);
   try {
     const file2 = await open(temp, "wx", 384);
     try {
@@ -104766,7 +105320,7 @@ function headerValue(req, name) {
   return typeof value === "string" && value.length > 0 ? value : null;
 }
 async function startHostActionMcpServer(opts) {
-  const masterToken = opts.masterToken ?? randomUUID17();
+  const masterToken = opts.masterToken ?? randomUUID18();
   const httpSessions = /* @__PURE__ */ new Map();
   const httpSessionsBySuperone = /* @__PURE__ */ new Map();
   let httpUrl2 = "";
@@ -104834,7 +105388,7 @@ async function startHostActionMcpServer(opts) {
         });
         let sessionRef;
         const transport = new StreamableHTTPServerTransport({
-          sessionIdGenerator: randomUUID17,
+          sessionIdGenerator: randomUUID18,
           onsessioninitialized: (id) => {
             if (sessionRef) httpSessions.set(id, sessionRef);
           },
@@ -105618,7 +106172,7 @@ function computeNextRunAt(schedule) {
 }
 
 // ../../packages/runtime/src/automations/store.ts
-import { randomUUID as randomUUID18 } from "node:crypto";
+import { randomUUID as randomUUID19 } from "node:crypto";
 function toRecord(row, projectPath) {
   return {
     id: row.id,
@@ -105650,7 +106204,7 @@ function createAutomationStore(db, resolveProjectPath2) {
       return { ...toRecord(row, path), projectId: row.project_id };
     },
     create(projectId, projectPath, data) {
-      const id = randomUUID18();
+      const id = randomUUID19();
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const nextRunAt = computeNextRunAt(data.schedule);
       db.prepare(