@surething/cockpit 1.0.258 → 1.0.260

package/dist/scheduledTasks.mjs

@@ -14,18 +14,15 @@ import {
   stashCodexRollout,
   stashTranscript,
   updateGlobalState
-} from "./chunk-L5TWVHYB.mjs";
+} from "./chunk-B5LXMESP.mjs";
 import {
   AgentError,
   AppRuntime,
   COCKPIT_DIR,
   DEEPSEEK_CREDENTIALS_FILE,
-  DEEPSEEK_DIR,
   Effect_exports,
   GLM_CREDENTIALS_FILE,
-  GLM_DIR,
   KIMI_CREDENTIALS_FILE,
-  KIMI_DIR,
   SCHEDULED_TASKS_FILE,
   SETTINGS_FILE,
   SKILLS_FILE,
@@ -37,11 +34,8 @@ import {
   getBuiltinSessionsRoot,
   getClaudeSessionPath,
   getDeepseekBuiltinSessionPath,
-  getDeepseekSessionPath,
   getGlmBuiltinSessionPath,
-  getGlmSessionPath,
   getKimiBuiltinSessionPath,
-  getKimiSessionPath,
   getOllamaSessionPath,
   getSessionFilePath,
   mutateJsonFile,
@@ -51,7 +45,7 @@ import {
   settlePendingRecord,
   withFileLock,
   writeJsonFile
-} from "./chunk-RSRPFWNL.mjs";
+} from "./chunk-TU3GL2HK.mjs";
 import {
   __export
 } from "./chunk-7P6ASYW6.mjs";
@@ -64,6 +58,17 @@ function defaultRegionForLanguage(language) {
   return language === "en" ? "global" : "cn";
 }
 
+// packages/shared/utils/src/outputProgress.ts
+function estimateOutputUnits(text) {
+  let cjk = 0;
+  let other = 0;
+  for (const ch of text) {
+    if (/[\u3040-\u30ff\u3400-\u9fff\uf900-\ufaff\u{20000}-\u{2a6df}\uac00-\ud7af]/u.test(ch)) cjk += 1;
+    else other += 1;
+  }
+  return Math.max(1, Math.ceil(cjk + other / 4));
+}
+
 // packages/feature/agent/src/shared/toolMutation.ts
 var READ_ONLY_TOOLS = /* @__PURE__ */ new Set([
   "Read",
@@ -535,7 +540,7 @@ description: "\u5B8C\u6574\u4EE3\u7801\u5BA1\u67E5:\u9759\u6001 + \u52A8\u6001\u
 
 subagent prompt \u6A21\u677F:\`\u8BFB\u672C skill (cr/SKILL.md),\u53EA\u5BF9 <\u4F60\u90A3\u5757(Part A \u5168\u90E8 / \u67D0\u4E2A\u52A8\u6001\u5207\u7247)> \u5E94\u7528\u5BF9\u5E94 Part,\u81EA\u884C triage,\u6309\u7EDF\u4E00\u683C\u5F0F\u8F93\u51FA findings\`\u3002
 
-**Synthesis(\u4E3B\u4F1A\u8BDD,\u53EA\u6574\u7406\u4E0D\u91CD\u5224)**:\u6C47\u603B\u5404 subagent \u7684 findings \u2192 \u53BB\u91CD(\u540C\u6839\u56E0\u6807"\u5171\u72AF")\u2192 \u5F71\u54CD \xD7 \u6982\u7387\u6392\u5E8F \u2192 \u4E00\u4EFD\u62A5\u544A + \u68AF\u5EA6\u56FE\u3002**\u7981\u6B62\u7528\u4E3B\u4F1A\u8BDD\u7684\u5F00\u53D1\u4E0A\u4E0B\u6587\u7ED9\u4EFB\u4F55 finding \u6D17\u767D / \u964D\u7EA7**\u2014\u2014subagent \u600E\u4E48\u5224\u5C31\u600E\u4E48\u6536\u3002\u8981\u8D28\u7591\u67D0\u6761,**\u91CD\u65B0 spawn \u4E00\u4E2A\u5E72\u51C0 subagent \u590D\u6838**,\u800C\u4E0D\u662F\u4E3B\u4F1A\u8BDD\u81EA\u5DF1\u62CD\u3002
+**Synthesis(\u4E3B\u4F1A\u8BDD,\u53EA\u6574\u7406\u4E0D\u91CD\u5224)**:\u6C47\u603B\u5404 subagent \u7684 findings \u2192 \u53BB\u91CD(\u540C\u6839\u56E0\u6807"\u5171\u72AF")\u2192 \u5F71\u54CD \xD7 \u6982\u7387\u6392\u5E8F \u2192 \u4E00\u4EFD\u62A5\u544A + \u68AF\u5EA6\u56FE\u3002**\u7981\u6B62\u7528\u4E3B\u4F1A\u8BDD\u7684\u5F00\u53D1\u4E0A\u4E0B\u6587\u7ED9\u4EFB\u4F55 finding \u6D17\u767D / \u964D\u7EA7**\u2014\u2014subagent \u600E\u4E48\u5224\u5C31\u600E\u4E48\u6536\u3002\u8981\u8D28\u7591\u67D0\u6761,**\u91CD\u65B0 spawn \u4E00\u4E2A\u5E72\u51C0 subagent \u590D\u6838**,\u800C\u4E0D\u662F\u4E3B\u4F1A\u8BDD\u81EA\u5DF1\u62CD\u3002\u4E3B\u4F1A\u8BDD\u53EF\u4EE5\u628A\u7ED3\u679C\u6574\u7406\u6210\u77ED\u8868,\u4F46**\u5C55\u5F00\u8BE6\u60C5\u5FC5\u987B\u4FDD\u7559 subagent \u7684\u5173\u952E\u8BC1\u636E\u5BC6\u5EA6**:\u52A8\u6001 finding \u7684\u72B6\u6001\u56FE / \u65F6\u95F4\u7EBF / \u53D8\u66F4\u8F68\u8FF9 / \u53CD\u4F8B\u8DEF\u5F84,\u9759\u6001 finding \u7684\u4E09\u89D2\u6821\u9A8C\u8BC1\u636E,\u90FD\u8981\u642C\u5230\u5BF9\u5E94\u7F16\u53F7\u8BE6\u60C5\u91CC\u3002\u5141\u8BB8\u53BB\u91CD\u548C\u5220\u6389\u91CD\u590D\u63AA\u8F9E,\u4E0D\u5141\u8BB8\u628A subagent \u7684\u8BE6\u7EC6\u6A21\u578B\u538B\u6210\u4E00\u53E5\u6458\u8981\u3002
 
 > \u53D6\u820D:\u9ED8\u8BA4 2-subagent \u65E2\u9694\u79BB\u5F00\u53D1\u6C61\u67D3\u3001\u53C8\u6D88\u6389\u9759\u6001\u644A\u8584\u52A8\u6001;hard \u7684 per-slice fan-out \u662F\u989D\u5916\u6DF1\u5EA6(\u5B9E\u6D4B\u628A image/video \u6316\u5230 \u{1F534} + \u591A subagent \u72EC\u7ACB\u6536\u655B\u63D0\u7F6E\u4FE1\u5EA6),\u8D35\u4E14\u6162,\u7531\u7528\u6237\u663E\u5F0F\u9009\u7528(\u4E0D\u81EA\u52A8\u5347\u6863)\u3002
 
@@ -625,22 +630,31 @@ correctness \u8FD9\u4E2A"\u672A\u77E5\u70B9",\u9760 **\u610F\u56FE / \u8F93\u516
 
 ---
 
-## \u4EA7\u51FA findings(\u76F4\u89C2\u4F18\u5148)
+## \u4EA7\u51FA findings(\u7B80\u8868 + \u8BE6\u60C5)
+
+\u4E25\u91CD\u5EA6 = **\u5F71\u54CD \xD7 \u6982\u7387**,\u76F4\u63A5\u7ED9\u4E58\u79EF\u7ED3\u8BBA,\u522B\u8BA9\u8BFB\u8005\u81EA\u5DF1\u6362\u7B97\u3002\u4E24\u8DEF findings \u5408\u5E76\u53BB\u91CD\u540E,\u5148\u8F93\u51FA\u4E00\u5F20**\u77ED\u5217\u8868\u683C**\u7528\u4E8E\u5FEB\u901F\u626B\u63CF,\u518D\u6309\u7F16\u53F7\u5C55\u5F00\u8BC1\u636E\u3002\u4E0D\u8981\u628A\u957F\u8BC1\u636E\u585E\u8FDB\u8868\u683C cell,\u5426\u5219\u804A\u5929\u7A97\u53E3\u4F1A\u628A\u5217\u6324\u6210\u96BE\u8BFB\u7684\u7A84\u5217\u3002
+
+| # | \u4E25\u91CD\u5EA6 | \u4F4D\u7F6E | \u95EE\u9898\u540E\u679C | \u5904\u7406\u65B9\u5411 |
+|---|---|---|---|---|
+| 1 | \u{1F534}/\u{1F7E1}/\u26AA | \`file:line\` | \u4E0D\u4FEE\u4F1A\u53D1\u751F\u4EC0\u4E48(\u4E00\u53E5\u5927\u767D\u8BDD\u540E\u679C,\u4E0D\u5E26\u672F\u8BED) | \u4E00\u53E5\u8BDD\u8BF4\u660E\u4FEE\u590D\u65B9\u5411 |
 
-\u4E25\u91CD\u5EA6 = **\u5F71\u54CD \xD7 \u6982\u7387**,\u76F4\u63A5\u7ED9\u4E58\u79EF\u7ED3\u8BBA,\u522B\u8BA9\u8BFB\u8005\u81EA\u5DF1\u6362\u7B97\u3002\u4E24\u8DEF findings \u5408\u5E76\u53BB\u91CD,\u7EDF\u4E00\u683C\u5F0F:
+\u7136\u540E\u6309\u8868\u683C\u7F16\u53F7\u5C55\u5F00:
 
 \`\`\`
-\u{1F534}|\u{1F7E1}|\u26AA <\u4F4D\u7F6E(file:line)> \u2014 \u4E0D\u4FEE\u4F1A\u53D1\u751F\u4EC0\u4E48(\u4E00\u53E5\u5927\u767D\u8BDD\u540E\u679C,\u4E0D\u5E26\u672F\u8BED)
-  \u5F71\u54CD: \u574F\u5230\u4EC0\u4E48\u7A0B\u5EA6 + \u574F\u7ED9\u8C01(\u5177\u4F53:\u54EA\u7C7B\u7528\u6237 / \u79DF\u6237 / \u8C03\u7528\u65B9,\u800C\u975E\u6CDB\u6307"\u7528\u6237")
-  \u6982\u7387: \u591A\u5927\u6982\u7387\u53D1\u751F + \u53D6\u51B3\u4E8E\u4EC0\u4E48
-  \u8BC1\u636E: \u9759\u6001 \u2192 \u4E09\u89D2\u6821\u9A8C\u91CC\u54EA\u4E2A\u53C2\u7167\u5BF9\u4E0D\u4E0A(\u610F\u56FE / \u8F93\u5165\u57DF / \u5468\u906D);\u52A8\u6001 \u2192 \u6A21\u578B\u8BC1\u636E(\u6307\u56DE\u72B6\u6001\u56FE / \u65F6\u95F4\u7EBF\u54EA\u4E00\u5904)
-  \u6B63\u89E3: \u5E94\u8BE5\u662F\u4EC0\u4E48 / \u88AB\u7834\u574F\u7684\u4E0D\u53D8\u91CF(\u672F\u8BED\u653E\u8FD9\u91CC)
+### #1 <\u4E00\u53E5\u8BDD\u540E\u679C>
+\u5F71\u54CD: \u574F\u5230\u4EC0\u4E48\u7A0B\u5EA6 + \u574F\u7ED9\u8C01(\u5177\u4F53:\u54EA\u7C7B\u7528\u6237 / \u79DF\u6237 / \u8C03\u7528\u65B9,\u800C\u975E\u6CDB\u6307"\u7528\u6237")
+\u6982\u7387: \u591A\u5927\u6982\u7387\u53D1\u751F + \u53D6\u51B3\u4E8E\u4EC0\u4E48;\u82E5\u5F85\u9A8C\u8BC1,\u5199\u660E\u5982\u4F55\u5347\u964D\u6863
+\u8BC1\u636E: \u9759\u6001 \u2192 \u4E09\u89D2\u6821\u9A8C\u91CC\u54EA\u4E2A\u53C2\u7167\u5BF9\u4E0D\u4E0A(\u610F\u56FE / \u8F93\u5165\u57DF / \u5468\u906D);\u52A8\u6001 \u2192 \u4FDD\u7559 subagent \u7ED9\u51FA\u7684\u72B6\u6001\u56FE / \u65F6\u95F4\u7EBF / \u53D8\u66F4\u8F68\u8FF9 / \u53CD\u4F8B\u8DEF\u5F84,\u4E0D\u8981\u53EA\u6458\u8981\u6210\u4E00\u53E5
+\u6B63\u89E3: \u5E94\u8BE5\u662F\u4EC0\u4E48 / \u88AB\u7834\u574F\u7684\u4E0D\u53D8\u91CF(\u672F\u8BED\u653E\u8FD9\u91CC)
 \`\`\`
 
-- \u{1F534} \u9AD8\u6982\u7387 \xD7 \u5927\u5F71\u54CD(\u5361\u53D1\u5E03) | \u{1F7E1} \u8BE5\u4FEE\u4F46\u4E0D\u6D41\u8840 | \u26AA \u987A\u624B\u3002\u964D\u5E8F\u8F93\u51FA\u3002
-- \u4E00\u53E5\u8BDD\u7ED3\u8BBA\u8BF4**\u540E\u679C**,\u4E0D\u8BF4\u6280\u672F\u539F\u56E0(\u539F\u56E0\u653E \`\u6B63\u89E3\`)\u3002
-- \u6982\u7387\u53D6\u51B3\u4E8E\u5F85\u9A8C\u8BC1\u56E0\u5B50\u5C31\u663E\u5F0F\u5199,\u5E76\u5199\u660E\u5982\u4F55\u5347\u964D\u6863;\u522B\u628A"\u5F85\u9A8C\u8BC1"\u4F2A\u88C5\u6210"\u5DF2\u786E\u8BA4"\u3002
-- \u591A\u6761\u540C\u6839\u56E0 \u2192 \u6807 **"\u5171\u72AF"** \u5408\u5E76\u6210\u4E00\u6761,\u522B\u540C\u4E00\u95EE\u9898\u62A5\u4E24\u904D(\u5C24\u5176\u9759\u6001/\u52A8\u6001\u5BF9\u540C\u4E00\u884C\u5404\u770B\u4E00\u9762\u65F6)\u3002
+- \u{1F534} \u9AD8\u6982\u7387 \xD7 \u5927\u5F71\u54CD(\u5361\u53D1\u5E03) | \u{1F7E1} \u8BE5\u4FEE\u4F46\u4E0D\u6D41\u8840 | \u26AA \u987A\u624B\u3002\u77ED\u5217\u8868\u683C\u6309\u4E25\u91CD\u5EA6\u964D\u5E8F\u8F93\u51FA\u3002
+- \`\u95EE\u9898\u540E\u679C\` \u53EA\u5199**\u540E\u679C**,\u4E0D\u5199\u6280\u672F\u539F\u56E0(\u539F\u56E0\u653E\u5C55\u5F00\u8BE6\u60C5\u7684 \`\u8BC1\u636E\` / \`\u6B63\u89E3\`)\u3002
+- \`\u4F4D\u7F6E\` \u7528\u53EF\u5B9A\u4F4D\u7684 \`file:line\`;\u5982\u679C\u662F\u5408\u5E76\u540E\u7684\u5171\u72AF finding,\u8868\u683C\u7528\u6700\u6838\u5FC3\u4F4D\u7F6E,\u5728\u5C55\u5F00\u8BE6\u60C5\u7684 \`\u8BC1\u636E\` \u4E2D\u8865\u5145\u5176\u5B83\u4F4D\u7F6E\u3002
+- \`\u5904\u7406\u65B9\u5411\` \u5728\u77ED\u8868\u91CC\u53EA\u5199\u4E00\u53E5,\u5B8C\u6574 \`\u6B63\u89E3\` \u653E\u5C55\u5F00\u8BE6\u60C5\u3002
+- \u5C55\u5F00\u8BE6\u60C5\u662F\u4FE1\u606F\u5B8C\u6574\u9762:\u5982\u679C subagent \u5DF2\u7ED9\u51FA\u52A8\u6001\u6A21\u578B\u3001\u65F6\u95F4\u7EBF\u3001\u8DEF\u5F84\u7F16\u53F7\u6216\u5173\u952E\u4EE3\u7801\u4F4D\u7F6E,\u6700\u7EC8\u62A5\u544A\u5FC5\u987B\u4FDD\u7559\u8FD9\u4E9B\u7EC6\u8282;\u77ED\u8868\u53EF\u4EE5\u7B80,\u8BE6\u60C5\u4E0D\u80FD\u628A\u8BC1\u636E\u538B\u6CA1\u3002
+- \u591A\u6761\u540C\u6839\u56E0 \u2192 \u5728 \`\u95EE\u9898\u540E\u679C\` \u6216\u5C55\u5F00\u8BE6\u60C5\u7684 \`\u8BC1\u636E\` \u6807 **"\u5171\u72AF"** \u5E76\u5408\u5E76\u6210\u4E00\u6761,\u522B\u540C\u4E00\u95EE\u9898\u62A5\u4E24\u904D(\u5C24\u5176\u9759\u6001/\u52A8\u6001\u5BF9\u540C\u4E00\u884C\u5404\u770B\u4E00\u9762\u65F6)\u3002
+- \u8868\u683C\u540E\u53EA\u5C55\u5F00\u6BCF\u6761 finding \u4E00\u6B21;\u4E0D\u8981\u518D\u91CD\u590D\u4E00\u5F20 7 \u5217\u957F\u8868\u3002
 - \u6536\u5C3E\u7ED9\u4E00\u5F20 **\u5F71\u54CD \xD7 \u6982\u7387** \u68AF\u5EA6\u56FE:
 
 \`\`\`
@@ -681,7 +695,7 @@ Three tiers by scale (**all enter at least one clean subagent**). **You pick bet
 
 Subagent prompt template: \`Read this skill (cr/SKILL.md); apply only the matching Part to <your chunk (all of Part A / one dynamic slice)>, triage it yourself, and output findings in the unified format\`.
 
-**Synthesis (main session, organize only \u2014 never re-judge)**: gather each subagent's findings \u2192 dedup (mark same-root-cause as "accomplices") \u2192 sort by impact \xD7 probability \u2192 one report + gradient chart. **It is forbidden to use the main session's dev context to whitewash / downgrade any finding** \u2014 take what the subagent judged as-is. To dispute one, **spawn a fresh clean subagent to re-check**, not the main session deciding on its own.
+**Synthesis (main session, organize only \u2014 never re-judge)**: gather each subagent's findings \u2192 dedup (mark same-root-cause as "accomplices") \u2192 sort by impact \xD7 probability \u2192 one report + gradient chart. **It is forbidden to use the main session's dev context to whitewash / downgrade any finding** \u2014 take what the subagent judged as-is. To dispute one, **spawn a fresh clean subagent to re-check**, not the main session deciding on its own. The main session may organize the result into a short summary table, but the **expanded details must preserve the subagent's key evidence density**: for dynamic findings, carry over the state diagram / timeline / change trajectory / counterexample path; for static findings, carry over the triangulation evidence. Deduplication and wording cleanup are allowed; compressing a detailed subagent model into a one-line summary is not.
 
 > Trade-off: the default 2-subagent both isolates dev pollution and removes static-dilutes-dynamic; hard's per-slice fan-out is extra depth (in practice it dug image/video up to \u{1F534}, and multiple independently-converging subagents raised confidence), expensive and slow, selected explicitly by the user (never auto-escalated).
 
@@ -771,22 +785,31 @@ These two diagrams are the evidence \u2014 many bugs (a 6-second gap, a key crea
 
 ---
 
-## Produce findings (intuitive first)
+## Produce findings (summary table + details)
 
-Severity = **impact \xD7 probability**; give the product conclusion directly, don't make the reader do the math. Merge and dedup findings from both tracks, unified format:
+Severity = **impact \xD7 probability**; give the product conclusion directly, don't make the reader do the math. Merge and dedup findings from both tracks. First output a **short summary table** for scanning, then expand each finding by number. Do not put long evidence into table cells; chat windows squeeze wide Markdown tables into unreadable narrow columns.
+
+| # | Severity | Location | Consequence | Direction |
+|---|---|---|---|---|
+| 1 | \u{1F534}/\u{1F7E1}/\u26AA | \`file:line\` | What happens if unfixed (one plain-language consequence, no jargon) | One-sentence repair direction |
+
+Then expand by table number:
 
 \`\`\`
-\u{1F534}|\u{1F7E1}|\u26AA <location (file:line)> \u2014 what happens if unfixed (one plain-language consequence, no jargon)
-  Impact: how bad + to whom (specific: which users / tenants / callers, not a vague "users")
-  Probability: how likely + what it depends on
-  Evidence: static \u2192 which reference fails in triangulation (intent / input domain / surroundings); dynamic \u2192 model evidence (point back to which spot on the state diagram / timeline)
-  Fix: what it should be / the broken invariant (jargon goes here)
+### #1 <one-line consequence>
+Impact: how bad + to whom (specific: which users / tenants / callers, not a vague "users")
+Probability: how likely + what it depends on; if uncertain, say how to raise/lower the tier
+Evidence: static \u2192 which triangulation reference fails (intent / input domain / surroundings); dynamic \u2192 preserve the subagent's state diagram / timeline / change trajectory / counterexample path, not a one-line summary
+Fix: what it should be / the broken invariant (jargon goes here)
 \`\`\`
 
-- \u{1F534} high probability \xD7 big impact (blocks release) | \u{1F7E1} should fix but not bleeding | \u26AA nice-to-have. Output in descending order.
-- The one-line conclusion states the **consequence**, not the technical cause (cause goes in \`Fix\`).
-- If probability depends on a to-be-verified factor, say so explicitly and write how to raise/lower the tier; don't disguise "to be verified" as "confirmed".
-- Multiple same-root-cause \u2192 mark as **"accomplices"** and merge into one; don't report the same problem twice (especially when static/dynamic each see one side of the same line).
+- \u{1F534} high probability \xD7 big impact (blocks release) | \u{1F7E1} should fix but not bleeding | \u26AA nice-to-have. Sort summary table rows in descending severity.
+- \`Consequence\` states the **outcome**, not the technical cause (cause goes in the expanded \`Evidence\` / \`Fix\`).
+- \`Location\` must be a precise \`file:line\`; for a merged accomplice finding, use the core location in the table and mention other locations in the expanded \`Evidence\`.
+- Keep \`Direction\` in the summary table to one sentence; put the complete \`Fix\` in the expanded detail.
+- Expanded details are the complete information surface: if a subagent provided a dynamic model, timeline, path labels, or key code locations, the final report must carry those details forward; the summary table may be short, the detail must not erase evidence.
+- Multiple same-root-cause \u2192 mark as **"accomplices"** in \`Consequence\` or expanded \`Evidence\` and merge into one finding; don't report the same problem twice (especially when static/dynamic each see one side of the same line).
+- Expand each finding only once after the table; don't also emit a 7-column long table.
 - Close with an **impact \xD7 probability** gradient chart:
 
 \`\`\`
@@ -1170,349 +1193,485 @@ Finally emit [Overall recap: end-to-end interaction verification + total deliver
 // packages/feature/agent/src/server/lib/htmlPrompt.ts
 var HTML_PROMPT_ZH = `---
 name: html
-description: "\u751F\u6210\u53EF\u4EA4\u4E92\u7684 HTML \u5E94\u7528\uFF1A\u5185\u7F6E cockpit bash SDK\uFF0C\u6267\u884C\u547D\u4EE4\u53D6/\u6539\u6570\u636E"
-argument-hint: "\u63CF\u8FF0\u4F60\u60F3\u8981\u7684 HTML \u5E94\u7528"
+description: "\u751F\u6210\u53EF\u4EA4\u4E92\u7684\u672C\u5730 React \u5E94\u7528\uFF1A\u5185\u7F6E cockpit bash SDK\uFF0C\u6267\u884C\u547D\u4EE4\u53D6/\u6539\u6570\u636E"
+argument-hint: "\u63CF\u8FF0\u4F60\u60F3\u8981\u7684\u5E94\u7528"
 ---
 
-# \u751F\u6210 Cockpit HTML \u5E94\u7528
+# \u751F\u6210 Cockpit \u5E94\u7528\uFF08\u672C\u5730 React \u9875\u9762\uFF09
 
-\u4E00\u4E2A\u80FD\u53D6/\u6539\u6570\u636E\u7684 HTML \u5E94\u7528\uFF1A\u9884\u89C8\u65F6\u6CE8\u5165\u4E86\u5168\u5C40 \`window.cockpit\` SDK \u2014\u2014 \u672C\u8D28\u5C31\u662F Bash
-\u5DE5\u5177\u66B4\u9732\u7ED9\u9875\u9762\uFF0C\u9875\u9762\u6309\u94AE\u80FD \`curl\`\u3001\u8BFB\u5199\u6587\u4EF6\u3001\u8DD1\u811A\u672C\u3002
+\u4E00\u4E2A**\u672C\u5730\u5E94\u7528**\uFF0C\u4E0D\u662F\u4E00\u6B21\u6027\u9875\u9762\uFF1A\u9884\u89C8\u65F6\u6CE8\u5165\u4E86\u5168\u5C40 \`window.cockpit\` SDK \u2014\u2014 \u672C\u8D28\u5C31\u662F Bash \u5DE5\u5177
+\u66B4\u9732\u7ED9\u9875\u9762\uFF0C\u6309\u94AE\u80FD \`curl\`\u3001\u8BFB\u5199\u6587\u4EF6\u3001\u8DD1\u811A\u672C\uFF1B\u6570\u636E\u843D\u76D8\u5728 app \u76EE\u5F55\u91CC\uFF0C\u91CD\u5F00\u5373\u7528\u3002
 
-**\u9ED8\u8BA4\u7528 React \u5199**\uFF08\u4E0B\u9762\u7684\u672C\u5730\u96F6\u6784\u5EFA\u6808\uFF0Cproductized\u3001AI \u6700\u719F\uFF0C\u9002\u5408\u6709\u72B6\u6001 / \u591A\u89C6\u56FE /
-\u8868\u5355\uFF09\uFF1B\u53EA\u6709**\u6781\u7B80\u5355\u7684\u5355\u89C6\u56FE\u3001\u6216\u7EAF\u9759\u6001\u4E00\u6B21\u6027\u9875**\u624D\u9000\u56DE\u5355\u6587\u4EF6\u5185\u8054 HTML\u3002\u4E24\u79CD\u6A21\u5F0F\u5171\u7528\u4E0B\u9762
-\u8FD9\u5957\u5951\u7EA6\u3002
+\u96F6\u6784\u5EFA\uFF1AReact / Babel \u4ECE\u540C\u6E90\u7684 \`/html-lib\` \u52A0\u8F7D\uFF0C\u4E0D\u6253\u5305\u3001\u4E0D\u88C5\u4F9D\u8D56\u3001\u79BB\u7EBF\u53EF\u7528\u3002
 
-## \u6D41\u7A0B\uFF1A\u5148\u5BF9\u9F50\uFF0C\u786E\u8BA4\u540E\u518D\u5199\uFF08\u91CD\u8981\uFF09
+## \u4E00\u3001\u6D41\u7A0B\uFF1A\u5148\u5BF9\u9F50\uFF0C\u786E\u8BA4\u540E\u518D\u5199\uFF08\u91CD\u8981\uFF09
 
 **\u522B\u4E00\u4E0A\u6765\u5C31\u5199\u6587\u4EF6**\uFF0C\u5206\u4E09\u6B65\uFF1A
 
-1. **\u5BF9\u9F50\u9700\u6C42** \u2014\u2014 \u5148\u590D\u8FF0\u4F60\u5BF9\u8FD9\u4E2A HTML \u5E94\u7528\u7684\u7406\u89E3\uFF08\u505A\u4EC0\u4E48\u3001\u7528 React \u8FD8\u662F\u5355\u6587\u4EF6\u3001\u6570\u636E\u4ECE\u54EA\u6765\u3001
-   \u5173\u952E\u529F\u80FD\u4E0E\u4EA4\u4E92\uFF09\u3002\u4EC5\u5F53\u9700\u6C42\u6709\u6B67\u4E49\u6216\u5B58\u5728\u591A\u79CD\u5408\u7406\u89E3\u8BFB\u65F6\u624D\u56DE\u95EE\uFF1B\u5DF2\u7ECF\u6E05\u695A\u5C31\u76F4\u63A5\u7ED9\u4E00\u6BB5\u7B80\u77ED
-   \u7684\u7406\u89E3\u6458\u8981\uFF0C\u4E0D\u5FC5\u9010\u6761\u8FFD\u95EE\u3002
-2. **\u544A\u77E5\u5B58\u653E\u76EE\u5F55** \u2014\u2014 \u6309\u4E0B\u9762\u300C\u5B58\u653E\u4F4D\u7F6E\u300D\u89C4\u5219\u5B9A\u51FA \`<\u76EE\u5F55>/<name>/\`\uFF0C\u660E\u786E\u544A\u8BC9\u7528\u6237\u51C6\u5907\u5B58\u54EA\u3001
-   \u53EB\u4EC0\u4E48\u540D\uFF1B\u7528\u6237\u53EF\u5426\u51B3\u6216\u6539\u76EE\u5F55 / \u6539\u540D\u3002
-3. **\u786E\u8BA4\u540E\u624D\u5199** \u2014\u2014 \u7B49\u7528\u6237\u660E\u786E\u540C\u610F\uFF08\u786E\u8BA4 / \u5F00\u59CB / \u5199\u5427 / go \u7B49\u4EFB\u610F\u80AF\u5B9A\u8868\u793A\uFF09\u518D \`Write\`
-   \u843D\u76D8\u3002\u786E\u8BA4\u4E4B\u524D\u53EA\u8BA8\u8BBA\u3001\u4E0D\u5199\u6587\u4EF6\u3002
-
-\u5373\u4FBF\u7528\u6237\u5728 \`/html\` \u540E\u5DF2\u7ECF\u628A\u9700\u6C42\u548C\u76EE\u5F55\u90FD\u5199\u6E05\u695A\u4E86\uFF0C\u4E5F\u8981\u5148\u505C\u4E00\u8F6E\uFF0C\u7ED9\u51FA\u300C\u7406\u89E3 + \u76EE\u5F55 + \u4E00\u53E5
-\u300E\u786E\u8BA4\u5C31\u5F00\u59CB\u5199?\u300F\u300D\u7B49\u5F85\u786E\u8BA4\u2014\u2014\u4F46\u8FD9\u4E00\u8F6E\u8981**\u8F7B\u91CF**\uFF0C\u522B\u53CD\u590D\u8FFD\u95EE\u3002
-
-## \u5951\u7EA6\uFF1Awindow.cockpit\uFF08\u4E24\u6A21\u5F0F\u5171\u7528\uFF0C\u53EA\u6B64\u4E00\u5904\uFF09
+1. **\u5BF9\u9F50\u9700\u6C42** \u2014\u2014 \u5148\u590D\u8FF0\u4F60\u5BF9\u8FD9\u4E2A\u5E94\u7528\u7684\u7406\u89E3\uFF08\u505A\u4EC0\u4E48\u3001\u6570\u636E\u4ECE\u54EA\u6765\u3001\u5173\u952E\u529F\u80FD\u4E0E\u4EA4\u4E92\uFF09\u3002\u4EC5\u5F53\u9700\u6C42\u6709
+   \u6B67\u4E49\u6216\u5B58\u5728\u591A\u79CD\u5408\u7406\u89E3\u8BFB\u65F6\u624D\u56DE\u95EE\uFF1B\u5DF2\u7ECF\u6E05\u695A\u5C31\u76F4\u63A5\u7ED9\u4E00\u6BB5\u7B80\u77ED\u7684\u7406\u89E3\u6458\u8981\uFF0C\u4E0D\u5FC5\u9010\u6761\u8FFD\u95EE\u3002
+2. **\u544A\u77E5\u5B58\u653E\u76EE\u5F55** \u2014\u2014 \u5B9A\u51FA \`<\u76EE\u5F55>/<name>/\`\uFF0C\u660E\u786E\u544A\u8BC9\u7528\u6237\u51C6\u5907\u5B58\u54EA\u3001\u53EB\u4EC0\u4E48\u540D\uFF1B\u7528\u6237\u53EF\u5426\u51B3\u6216\u6539\uFF1A
+   - \`<name>\` **\u4E00\u5F8B\u7531\u4F60\u6309\u9700\u6C42\u8D77\u540D**\uFF08\u77ED\u6A2A\u7EBF\u5C0F\u5199\uFF0C\u4E0E \`cockpit-name\` \u4E00\u81F4\uFF09\uFF0C\u7528\u6237\u53EA\u63CF\u8FF0\u9700\u6C42\u3001
+     \u4E0D\u8D1F\u8D23\u8D77\u540D\u3002
+   - \u7528\u6237\u5728\u9700\u6C42\u91CC\u7ED9\u4E86\u76EE\u5F55 \u2192 \`<\u7528\u6237\u7ED9\u7684\u76EE\u5F55>/<name>/\`\uFF1B\u6CA1\u7ED9 \u2192 **\u5F53\u524D\u804A\u5929\u5DE5\u4F5C\u76EE\u5F55**\uFF08\u672C\u6B21\u4F1A\u8BDD\u7684
+     cwd\uFF09\u4E0B\u7684 \`<name>/\`\u3002
+   - \u4E00\u4E2A app \u7684\u6240\u6709\u6587\u4EF6\u90FD\u5728\u8FD9\u4E2A\u76EE\u5F55\u91CC\uFF0C\u6570\u636E\u6309\u7B2C\u56DB\u8282\u5206\u5230 \`cache/\` \`state/\` \`out/\`\u3002\u522B\u628A\u6587\u4EF6
+     \u6563\u843D\u5230\u522B\u5904\uFF0C\u4E5F\u522B\u81EA\u9020 \`.cockpit-apps\` \u4E4B\u7C7B\u76EE\u5F55\u3002
+3. **\u786E\u8BA4\u540E\u624D\u5199** \u2014\u2014 \u7B49\u7528\u6237\u660E\u786E\u540C\u610F\uFF08\u786E\u8BA4 / \u5F00\u59CB / \u5199\u5427 / go \u7B49\u4EFB\u610F\u80AF\u5B9A\u8868\u793A\uFF09\u518D \`Write\` \u843D\u76D8\u3002
+   \u786E\u8BA4\u4E4B\u524D\u53EA\u8BA8\u8BBA\u3001\u4E0D\u5199\u6587\u4EF6\u3002
 
-\u9875\u9762\u52A0\u8F7D\u65F6 SDK \u5DF2\u5C31\u7EEA\uFF0C\u65E0\u9700\u5F15\u5165\u4EFB\u4F55\u5E93\uFF1A
-
-- \`cockpit.cwd: string\` \u2014\u2014 \u5F53\u524D\u6587\u4EF6\u6240\u5728\u76EE\u5F55\uFF0C\u76F8\u5BF9\u8DEF\u5F84\u547D\u4EE4\u9ED8\u8BA4\u5728\u6B64\u6267\u884C\u3002
-- \`cockpit.bash(command, opts?)\` \u2014\u2014 \u6267\u884C\u4E00\u6761 bash \u547D\u4EE4\uFF08\`command\` \u662F\u6574\u6761 shell \u4E32\uFF09\uFF1A
-  - **\u524D\u53F0**\uFF08\u9ED8\u8BA4\uFF0C\u77ED/\u79BB\u6563\u547D\u4EE4\uFF09\u2192 \`Promise<{ stdout, stderr, exitCode }>\`\uFF0C\`await\` \u540E\u4E00\u6B21\u6027\u62FF\u5168\u90E8\u8F93\u51FA\u3002
-  - **\u540E\u53F0**\uFF08\`opts.background: true\`\uFF0C\u957F/\u5B9E\u65F6\u547D\u4EE4\uFF09\u2192 \`{ kill() }\`\uFF0C\u7ECF\u56DE\u8C03\u6D41\u5F0F\u8F93\u51FA\uFF1A
-    \`opts = { background:true, cwd?, onOutput?, onStderr?, onExit?, onError? }\`\u3002\u5927/\u6301\u7EED\u8F93\u51FA\u5FC5\u987B\u7528\u540E\u53F0\uFF08\u524D\u53F0\u5168\u7F13\u5B58\u5728\u5185\u5B58\uFF09\u3002
-
-\u5199\u8FD9\u7C7B\u9875\u9762\u5FC5\u987B\u5B88\u7684\u51E0\u6761\uFF1A
-
-1. **\u6570\u636E\u53EA\u8D70 \`cockpit.bash\`**\uFF08\`curl\` \u53D6\u3001\`curl -X POST\` \u6539\u3001\u6216\u8BFB\u5199\u6587\u4EF6\uFF09\uFF0C**\u7EDD\u4E0D\u7528
-   \`fetch(\u5916\u90E8URL)\`** \u2014\u2014 \u540C\u6E90\u6C99\u7BB1\u4F1A CORS \u62E6\u622A\u3002
-2. **\u4E24\u7C7B\u5931\u8D25\u90FD\u8981\u5904\u7406**\uFF08\u524D\u53F0\uFF09\uFF1A\`try/catch\` \u6293\u5230\u7684**\u629B\u5F02\u5E38 = spawn/\u57FA\u5EFA\u5931\u8D25**\uFF08\u574F\u8DEF\u5F84\u3001
-   \u8FDE\u63A5\u65AD\uFF09\uFF1B\u6CA1\u629B\u4F46 **\`exitCode !== 0\` = \u547D\u4EE4\u8DD1\u4E86\u4F46\u5931\u8D25**\uFF0C\u5C55\u793A \`stderr\` \u6216 stdout \u91CC\u7684\u9519\u8BEF
-   \u4F53\uFF0C\u522B\u53EA\u5199"\u5931\u8D25"\u3002\u540E\u53F0\u5BF9\u5E94 \`onError\`\uFF08\u57FA\u5EFA\uFF09+ \`onExit\` \u975E\u96F6 \`code\`\uFF08\u547D\u4EE4\uFF09\u3002
-3. **\`command\` \u662F shell \u4E32**\uFF1A\u52A8\u6001\u503C/\u7528\u6237\u8F93\u5165\u62FC\u8FDB\u53BB\u524D\u5FC5\u987B\u6821\u9A8C\u6216\u8F6C\u4E49\uFF08shell \u5143\u5B57\u7B26\u4F1A\u6CE8\u5165\uFF09\uFF1B
-   \u80FD\u7528\u56FA\u5B9A\u547D\u4EE4\u5C31\u522B\u88F8\u62FC\u3002
-4. **\u8D44\u6E90\u5F15\u7528**\uFF1A\u540C\u7EA7\u76F8\u5BF9\uFF08\`./app.jsx\`\u3001\`./style.css\`\u3001\u56FE\u7247\uFF09\u548C CDN \u7EDD\u5BF9 URL \u90FD\u80FD\u52A0\u8F7D\uFF1B\u6839
-   \u76F8\u5BF9\uFF08\`/assets/x.css\`\uFF09\u4F1A 404\u3002
-
-meta \u5934\uFF08\u52A1\u5FC5\u5199\u4E0A\uFF0C\u4F9B HTML \u9762\u677F\u505A\u5361\u7247\u3001console \`/name\` \u6253\u5F00\uFF09\uFF1A
-
-\`\`\`html
-<title>\u9875\u9762\u6807\u9898</title>
-<meta name="cockpit-name" content="short-name">   <!-- /name \u77ED\u540D\uFF0C\u552F\u4E00\u3001\u53EA\u7528\u5B57\u6BCD\u6570\u5B57-_ -->
-<meta name="description" content="\u4E00\u53E5\u8BDD\u8BF4\u660E">
-<meta name="cockpit-icon" content="\u{1F50D}">           <!-- emoji \u6216\u56FE\u6807 url\uFF0C\u53EF\u9009 -->
-<meta name="cockpit-theme" content="auto">        <!-- \u542F\u7528\u53EF\u62D6\u52A8\u7684\u4EAE/\u6697\u5207\u6362\u6309\u94AE\uFF1Bauto=\u9996\u6B21\u8DDF\u968F\u7CFB\u7EDF\uFF0C\u53EF\u586B light/dark -->
-\`\`\`
+\u5373\u4FBF\u7528\u6237\u5728 \`/html\` \u540E\u5DF2\u7ECF\u628A\u9700\u6C42\u548C\u76EE\u5F55\u90FD\u5199\u6E05\u695A\u4E86\uFF0C\u4E5F\u8981\u5148\u505C\u4E00\u8F6E\uFF0C\u7ED9\u51FA\u300C\u7406\u89E3 + \u76EE\u5F55 + \u4E00\u53E5\u300E\u786E\u8BA4
+\u5C31\u5F00\u59CB\u5199?\u300F\u300D\u7B49\u5F85\u786E\u8BA4\u2014\u2014\u4F46\u8FD9\u4E00\u8F6E\u8981**\u8F7B\u91CF**\uFF0C\u522B\u53CD\u590D\u8FFD\u95EE\u3002
 
-## \u9ED8\u8BA4\uFF1AReact\uFF08\u672C\u5730\u96F6\u6784\u5EFA\u6808\uFF09
+## \u4E8C\u3001\u9AA8\u67B6\uFF1A\u4E09\u4E2A\u6587\u4EF6\uFF0C\u7167\u6284
 
-\u5916\u58F3\u56FA\u5B9A\u8FD9\u6837\u5199\uFF0C\u903B\u8F91\u62C6\u5230\u540C\u7EA7 \`./app.jsx\`\uFF1A
+\`index.html\` \u2014\u2014 \u5916\u58F3\u56FA\u5B9A\u8FD9\u6837\u5199\uFF0C\u522B\u81EA\u7531\u53D1\u6325\uFF1A
 
 \`\`\`html
-<div id="root"></div>
-<script src="/html-lib/react.production.min.js"></script>
-<script src="/html-lib/react-dom.production.min.js"></script>
-<script src="/html-lib/babel.min.js"></script>
-<script>
-  (async () => {
-    const src = await (await fetch('./app.jsx')).text();
-    // \u5FC5\u987B classic runtime\uFF1A\u9ED8\u8BA4 automatic \u4F1A\u6CE8\u5165 import react/jsx-runtime\uFF0C
-    // \u4F5C\u4E3A\u666E\u901A\u811A\u672C\u6CE8\u5165\u4F1A\u62A5 "Cannot use import statement outside a module"
-    const { code } = Babel.transform(src, { presets: [['react', { runtime: 'classic' }]] });
-    const s = document.createElement('script'); s.textContent = code; document.body.appendChild(s);
-  })();
-</script>
+<!doctype html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <title>\u9875\u9762\u6807\u9898</title>
+  <meta name="cockpit-name" content="short-name">   <!-- /name \u77ED\u540D\uFF0C\u552F\u4E00\u3001\u53EA\u7528\u5B57\u6BCD\u6570\u5B57-_ -->
+  <meta name="description" content="\u4E00\u53E5\u8BDD\u8BF4\u660E">
+  <meta name="cockpit-icon" content="\u{1F50D}">           <!-- emoji \u6216\u56FE\u6807 url\uFF0C\u53EF\u9009 -->
+  <meta name="cockpit-theme" content="auto">        <!-- \u4EAE/\u6697\u5207\u6362\uFF0C\u89C1\u7B2C\u4E94\u8282 -->
+  <link rel="stylesheet" href="/html-lib/theme.css">
+</head>
+<body>
+  <div id="root"></div>
+  <script src="/html-lib/react.production.min.js"></script>
+  <script src="/html-lib/react-dom.production.min.js"></script>
+  <script src="/html-lib/babel.min.js"></script>
+  <script>
+    (async () => {
+      const src = await (await fetch('./app.jsx')).text();
+      // \u5FC5\u987B classic runtime\uFF1A\u9ED8\u8BA4 automatic \u4F1A\u6CE8\u5165 import react/jsx-runtime\uFF0C
+      // \u4F5C\u4E3A\u666E\u901A\u811A\u672C\u6CE8\u5165\u4F1A\u62A5 "Cannot use import statement outside a module"
+      const { code } = Babel.transform(src, { presets: [['react', { runtime: 'classic' }]] });
+      const s = document.createElement('script'); s.textContent = code; document.body.appendChild(s);
+    })();
+  </script>
+</body>
+</html>
 \`\`\`
 
-- \`/html-lib\` \u662F Cockpit \u672C\u5730\u6258\u7BA1\uFF08\u540C\u6E90\u3001\u79BB\u7EBF\u53EF\u7528\uFF0C\u65E0\u9700 CDN\uFF09\u3002
-- \`app.jsx\` \u7528\u5168\u5C40 \`React\`\uFF08\`const { useState } = React;\`\uFF09\uFF0C\u672B\u5C3E
-  \`ReactDOM.createRoot(document.getElementById('root')).render(<App/>)\`\u3002
-- \u6837\u5F0F\u9ED8\u8BA4\u5957 **Cockpit \u4E3B\u9898**\uFF1A\`<link rel="stylesheet" href="/html-lib/theme.css">\`\uFF0C\u76F4\u63A5\u7528
-  \u8BED\u4E49\u53D8\u91CF\uFF08\`var(--background)\` / \`--foreground\` / \`--card\` / \`--brand\` / \`--muted-foreground\` /
-  \`--border\` / \`--destructive\`\uFF1B\u534A\u900F\u660E\u7528 \`hsl(var(--green-9) / .12)\`\uFF09\u3002\u4E0A\u9762 meta \u5934\u91CC\u7684
-  \`cockpit-theme\` \u8BA9\u9884\u89C8\u5E26\u4E0A\u4E00\u4E2A\u6D6E\u52A8\u4EAE/\u6697\u5207\u6362\u6309\u94AE\uFF08\u9ED8\u8BA4\u53F3\u4E0A\u89D2\uFF0C\u7528\u6237\u53EF\u62D6\u52A8\u5438\u9644\u5230\u4EFB\u610F\u4E00\u89D2\uFF0C
-  \u6240\u4EE5\u4E0D\u5FC5\u4E3A\u5B83\u5728\u53F3\u4E0A\u89D2\u7559\u7A7A\u4F4D\uFF09\uFF1B**\u9ED8\u8BA4\u8DDF\u968F Cockpit \u5BBF\u4E3B\u4E3B\u9898**\uFF08Cockpit \u5916\u6253\u5F00\u65F6\u6309
-  meta \u7684 auto/light/dark\uFF09\uFF0C\u624B\u52A8\u5207\u6362\u540E**\u6309 app \u8BB0\u4F4F\u9009\u62E9\uFF08\u8DE8\u5237\u65B0\uFF0C\u4F18\u5148\u4E8E\u8DDF\u968F\uFF09**\uFF0C\u4E5F\u53EF\u8C03
-  \`cockpit.toggleTheme()\`\u3002**\u522B\u81EA\u62CD\u8C03\u8272\u677F\u3001\u522B\u4E0A Tailwind**\uFF1Bapp \u7279\u6709\u7EC6\u8282\u518D\u8865\u4E00\u5C0F\u6BB5 \`<style>\`\u3002
+meta \u5934\u56DB\u884C\u90FD\u8981\u5199\uFF1AHTML \u9762\u677F\u9760\u5B83\u505A\u5361\u7247\uFF0Cconsole \u9760 \`cockpit-name\` \u7528 \`/name\` \u6253\u5F00\u3002
 
-React \u91CC\u53D6\u6570\u540C\u6837\u8D70 \`cockpit.bash\`\uFF1A
+\`app.jsx\` \u2014\u2014 \u5168\u5C40 \`React\`\uFF0C\u672B\u5C3E render\u3002**\u6253\u5F00\u53EA\u8BFB\u7F13\u5B58\uFF0C\u70B9\u5237\u65B0\u624D\u56DE\u6E90**\uFF1A
 
 \`\`\`jsx
+const { useState, useEffect, useCallback } = React;
+
 function App() {
-  const [stars, setStars] = React.useState(null);
-  const load = async () => {
-    const { stdout, exitCode } = await cockpit.bash("curl -s https://api.github.com/repos/Surething-io/cockpit");
-    setStars(exitCode === 0 ? JSON.parse(stdout).stargazers_count : '\u51FA\u9519');
-  };
-  return <button onClick={load}>\u2B50 {stars ?? '\u52A0\u8F7D'}</button>;
+  const [data, setData] = useState(null);
+  const [busy, setBusy] = useState(false);
+  const [err, setErr] = useState(null);
+
+  const load = useCallback(async (refresh) => {
+    setBusy(true); setErr(null);
+    try {
+      const arg = btoa(JSON.stringify({ refresh: !!refresh }));       // \u7ED3\u6784\u5316\u5165\u53C2\u8D70 base64
+      const { stdout, stderr, exitCode } = await cockpit.bash(\`node ./api.mjs \${arg}\`);
+      if (exitCode !== 0) throw new Error(stderr || '\u811A\u672C\u5931\u8D25');       // \u547D\u4EE4\u8DD1\u4E86\u4F46\u5931\u8D25
+      const d = JSON.parse(stdout);
+      if (d.error && !d.stale) throw new Error(d.error);
+      setData(d);
+      if (d.stale) setErr(d.error);                                   // \u6709\u65E7\u6570\u636E\u53EF\u663E\u793A
+    } catch (e) {
+      setErr(e.message);        // \u629B\u5F02\u5E38 = spawn/\u57FA\u5EFA\u5931\u8D25\u3002\u5DF2\u6709 data \u5C31\u7559\u7740\uFF0C\u522B\u6E05\u6210\u9519\u8BEF\u9875
+    } finally { setBusy(false); }
+  }, []);
+
+  useEffect(() => { load(false); }, [load]);        // \u6253\u5F00\uFF1A\u53EA\u8BFB\u7F13\u5B58\uFF0C0 \u6B21\u56DE\u6E90
+
+  if (!data) return <div>{err ?? '\u52A0\u8F7D\u4E2D\u2026'}</div>;
+  return (
+    <div>
+      <span>{data.cached ? '\u7F13\u5B58' : '\u5DF2\u66F4\u65B0'} \xB7 {new Date(data.fetchedAt).toLocaleString('zh-CN')}</span>
+      <button disabled={busy} onClick={() => load(true)}>{busy ? '\u5237\u65B0\u4E2D\u2026' : '\u5237\u65B0'}</button>
+      {err && <em>\u5237\u65B0\u5931\u8D25\uFF0C\u4E0B\u9762\u662F\u65E7\u6570\u636E\uFF1A{err}</em>}
+      {/* \u6E32\u67D3 data */}
+    </div>
+  );
 }
-\`\`\`
 
-## \u540E\u7AEF\uFF1A\u590D\u6742\u903B\u8F91\u5199\u6210\u811A\u672C\uFF08CGI \u98CE\u683C\uFF0C\u4E24\u6A21\u5F0F\u901A\u7528\uFF09
+ReactDOM.createRoot(document.getElementById('root')).render(<App />);
+\`\`\`
 
-\u547D\u4EE4\u5F88\u77ED\u5C31\u5185\u8054\u5728 \`cockpit.bash("...")\`\uFF1B\u903B\u8F91\u590D\u6742\uFF08\u591A\u6B65\u3001\u89E3\u6790\u3001\u5FAA\u73AF\u3001\u8981\u5E93\u3001\u5199\u5E93\uFF09\u65F6\uFF0C\u628A\u540E\u7AEF
-\u5199\u6210\u540C\u76EE\u5F55**\u811A\u672C\u6587\u4EF6**\uFF0C\`cockpit.bash\` \u8C03\u5B83\u2014\u2014HTML/JSX \u7BA1\u5C55\u793A\uFF0C\u811A\u672C\u5F53\u540E\u7AEF\u5904\u7406\u5668\u3002
+\`api.mjs\` \u2014\u2014 \u540E\u7AEF\u5904\u7406\u5668\uFF1A\u53D6\u6570\u3001\u89E3\u6790\u3001\u843D\u76D8\u90FD\u5728\u8FD9\u91CC\uFF0Cstdout \u5410\u4E00\u4E2A JSON\uFF1A
 
-- **\u663E\u5F0F\u89E3\u91CA\u5668**\uFF1A\`cockpit.bash("node ./api.mjs")\` / \`python3 ./api.py\` / \`bash ./api.sh\`
-  \uFF08\u514D \`chmod +x\`\uFF09\uFF1B\`node\`/\`python3\` \u62FF\u4E0D\u51C6\u5C31\u5148 \`command -v\` \u63A2\u6D4B\uFF0C\u9000\u56DE shell\u3002
-- **\u4F20\u53C2\u9632\u6CE8\u5165**\uFF1A\u7ED3\u6784\u5316\u5165\u53C2\u7528 **base64** \u4F20\uFF08\u524D\u7AEF \`btoa(...)\`\u3001\u811A\u672C
-  \`Buffer.from(arg,'base64')\`\uFF09\uFF0C\u522B\u62FC\u5B57\u7B26\u4E32\uFF1B\u5199\u5E93\u7528**\u53C2\u6570\u5316**\u8BED\u53E5\u3002
-- \u811A\u672C\u7528 stdout \u8FD4\u56DE JSON\uFF0C\u524D\u7AEF \`JSON.parse\`\u3002\u5148 \`Write\` \u51FA\u811A\u672C\uFF0C\u518D\u5728\u9875\u9762\u8C03\u5B83\u3002
+\`\`\`js
+import { existsSync, readFileSync, writeFileSync, renameSync, mkdirSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
 
-## \u9000\u56DE\uFF1A\u5355\u6587\u4EF6 HTML\uFF08\u6781\u7B80 / \u7EAF\u9759\u6001\u4E00\u6B21\u6027\u9875\uFF09
+const DIR = dirname(fileURLToPath(import.meta.url));
+const CACHE = join(DIR, 'cache/data.json');
+const VERSION = 1;          // payload \u7ED3\u6784\u4E00\u6539\u5C31 bump\uFF0C\u5426\u5219\u8001\u7F13\u5B58\u5582\u7ED9\u65B0\u524D\u7AEF
 
-\u4E0D\u9700\u8981\u72B6\u6001\u5C31\u522B\u4E0A React\uFF0C\u76F4\u63A5\u5185\u8054\uFF1B\u53D6\u6570\u4E0E\u9519\u8BEF\u5904\u7406\u540C\u4E0A\u3002
+const args = JSON.parse(Buffer.from(process.argv[2] || '', 'base64').toString() || '{}');
 
-\u524D\u53F0\uFF08\u70B9\u6309\u94AE\u62C9\u6570\u636E\uFF09\uFF1A
+function readCache() {
+  if (!existsSync(CACHE)) return null;
+  const c = JSON.parse(readFileSync(CACHE, 'utf8'));
+  return c.v === VERSION ? c : null;          // \u7248\u672C\u4E0D\u7B26 = \u4F5C\u5E9F\uFF0C\u5F53\u6CA1\u6709
+}
+function writeCache(payload) {
+  mkdirSync(dirname(CACHE), { recursive: true });
+  const tmp = \`\${CACHE}.\${process.pid}.tmp\`;   // \u539F\u5B50\u5199\uFF1A\u4E2D\u9014\u88AB\u6740\u4E0D\u4F1A\u7559\u4E0B\u534A\u4E2A JSON
+  writeFileSync(tmp, JSON.stringify({ v: VERSION, fetchedAt: new Date().toISOString(), payload }));
+  renameSync(tmp, CACHE);
+}
 
-\`\`\`html
-<button id="load">\u52A0\u8F7D</button>
-<pre id="out"></pre>
-<script>
-  document.getElementById('load').onclick = async () => {
-    try {
-      const { stdout, stderr, exitCode } = await cockpit.bash("curl -s https://api.github.com/repos/Surething-io/cockpit");
-      if (exitCode !== 0) { out.textContent = '\u547D\u4EE4\u5931\u8D25: ' + stderr; return; }
-      out.textContent = '\u2B50 ' + JSON.parse(stdout).stargazers_count;
-    } catch (e) {
-      out.textContent = '\u6267\u884C\u51FA\u9519: ' + e.message;  // spawn / \u57FA\u5EFA\u5931\u8D25
-    }
-  };
-</script>
+try {
+  const hit = args.refresh ? null : readCache();
+  if (hit) {
+    process.stdout.write(JSON.stringify({ ...hit.payload, cached: true, fetchedAt: hit.fetchedAt }));
+  } else {
+    const payload = await fetchFresh(args);   // \u2190 \u4F60\u7684\u53D6\u6570\u903B\u8F91\uFF08curl / \u67E5\u5E93 / \u8DD1\u547D\u4EE4\uFF09
+    writeCache(payload);
+    process.stdout.write(JSON.stringify({ ...payload, cached: false, fetchedAt: new Date().toISOString() }));
+  }
+} catch (e) {
+  const hit = readCache();                    // \u5237\u65B0\u5931\u8D25\uFF1A\u56DE\u843D\u65E7\u7F13\u5B58\u5E76\u6807\u6CE8\uFF0C\u522B\u8BA9\u9875\u9762\u7A7A\u6389
+  process.stdout.write(JSON.stringify(hit
+    ? { ...hit.payload, cached: true, stale: true, error: e.message, fetchedAt: hit.fetchedAt }
+    : { error: e.message }));
+}
 \`\`\`
 
-\u540E\u53F0\uFF08\u5B9E\u65F6\u65E5\u5FD7\uFF09\uFF1A
+- \u4E00\u6761\u547D\u4EE4\u5C31\u591F\u3001\u6570\u636E\u4E5F\u4E0D\u503C\u5F97\u7559\uFF08\u7EAF\u67E5\u770B\u5F53\u524D\u72B6\u6001\uFF09\u65F6\uFF0C\`api.mjs\` \u53EF\u4EE5\u7701\u6389\uFF0C\u76F4\u63A5
+  \`cockpit.bash("curl -s \u2026")\`\uFF1B\u4F46\u53EA\u8981\u6570\u636E\u8981\u7559\u4E0B\u6765\uFF0C\u5C31\u7528\u8FD9\u4E2A\u9AA8\u67B6\uFF0C\u522B\u81EA\u5DF1\u53D1\u660E\u4E00\u5957\u3002
+- \u6362\u8BED\u8A00\u540C\u7406\uFF1A\`python3 ./api.py\` / \`bash ./api.sh\`\uFF08\u663E\u5F0F\u89E3\u91CA\u5668\uFF0C\u514D \`chmod +x\`\uFF09\uFF1B\`node\` /
+  \`python3\` \u62FF\u4E0D\u51C6\u5C31\u5148 \`command -v\` \u63A2\u6D4B\uFF0C\u9000\u56DE shell\u3002
+- \u7F13\u5B58 key \u8981\u542B**\u5F71\u54CD\u7ED3\u679C\u7684\u53C2\u6570**\uFF08\u65F6\u95F4\u8303\u56F4\u3001\u6293\u53D6\u6DF1\u5EA6\u2026\uFF09\uFF1A\u628A \`cache/data.json\` \u6362\u6210
+  \`cache/<param>.json\` \u6216\u5728\u6587\u4EF6\u91CC\u6309 key \u5206\u6876\uFF0C\u5426\u5219\u4F1A\u62FF 7 \u5929\u7684\u7F13\u5B58\u53BB\u6E32\u67D3 30 \u5929\u7684\u89C6\u56FE\u3002
 
-\`\`\`html
-<pre id="log"></pre>
-<script>
-  const box = document.getElementById('log');
-  const h = cockpit.bash("tail -f ./build.log", {
-    background: true,
-    onOutput: c => { box.textContent += c; },
-    onExit:   code => { box.textContent += '\\n[\u9000\u51FA ' + code + ']'; },
-    onError:  msg  => { box.textContent += '\\n[\u9519\u8BEF ' + msg + ']'; },
-  });
-  // \u9700\u8981\u65F6 h.kill()
-</script>
-\`\`\`
+## \u4E09\u3001\u5951\u7EA6\uFF1Awindow.cockpit
 
-## \u5B58\u653E\u4F4D\u7F6E
+\u9875\u9762\u52A0\u8F7D\u65F6 SDK \u5DF2\u5C31\u7EEA\uFF0C\u65E0\u9700\u5F15\u5165\u4EFB\u4F55\u5E93\uFF1A
 
-\u4E00\u4E2A app \u7684\u6240\u6709\u6587\u4EF6\uFF08\`index.html\` + \`app.jsx\` + \`api.mjs\` \u2026\uFF09\u653E\u8FDB\u540C\u4E00\u4E2A \`<name>/\`
-\u5B50\u76EE\u5F55\u3002\`<name>\` **\u4E00\u5F8B\u7531\u4F60\u6309\u9700\u6C42\u8D77\u540D**\uFF08\u77ED\u6A2A\u7EBF\u5C0F\u5199\uFF0C\u4E0E \`cockpit-name\` \u4E00\u81F4\uFF09\uFF0C\u7528\u6237\u53EA
-\u63CF\u8FF0\u9700\u6C42\u3001\u4E0D\u8D1F\u8D23\u8D77\u540D\u3002\u76EE\u6807\u76EE\u5F55\u6309\u4E0B\u9762\u89C4\u5219\u786E\u5B9A\uFF1A
+- \`cockpit.cwd: string\` \u2014\u2014 \u5F53\u524D\u6587\u4EF6\u6240\u5728\u76EE\u5F55\uFF0C\u76F8\u5BF9\u8DEF\u5F84\u547D\u4EE4\u9ED8\u8BA4\u5728\u6B64\u6267\u884C\u3002
+- \`cockpit.bash(command, opts?)\` \u2014\u2014 \u6267\u884C\u4E00\u6761 bash \u547D\u4EE4\uFF08\`command\` \u662F\u6574\u6761 shell \u4E32\uFF09\uFF1A
+  - **\u524D\u53F0**\uFF08\u9ED8\u8BA4\uFF0C\u77ED/\u79BB\u6563\u547D\u4EE4\uFF09\u2192 \`Promise<{ stdout, stderr, exitCode }>\`\uFF0C\`await\` \u540E\u4E00\u6B21\u62FF\u5168\u90E8\u8F93\u51FA\u3002
+  - **\u540E\u53F0**\uFF08\`opts.background: true\`\uFF0C\u957F/\u5B9E\u65F6\u547D\u4EE4\uFF09\u2192 \`{ kill() }\`\uFF0C\u7ECF\u56DE\u8C03\u6D41\u5F0F\u8F93\u51FA\u3002
+    \u5927/\u6301\u7EED\u8F93\u51FA**\u5FC5\u987B**\u7528\u540E\u53F0\u2014\u2014\u524D\u53F0\u4F1A\u628A\u8F93\u51FA\u5168\u7F13\u5B58\u5728\u5185\u5B58\u91CC\u3002
+
+\`\`\`js
+const h = cockpit.bash("npm run build", {
+  background: true,
+  onOutput: c => append(c),
+  onStderr: c => append(c),
+  onExit:   code => append('\\n[\u9000\u51FA ' + code + ']'),   // \u547D\u4EE4\u8DD1\u5B8C\u4E86\uFF0Ccode \u975E\u96F6 = \u5931\u8D25
+  onError:  msg  => append('\\n[\u9519\u8BEF ' + msg + ']'),    // spawn / \u57FA\u5EFA\u5931\u8D25
+});
+// \u7EC4\u4EF6\u5378\u8F7D\u6216\u7528\u6237\u4E2D\u6B62\u65F6 h.kill()
+\`\`\`
 
-- \u7528\u6237\u5728\u9700\u6C42\u91CC\u7ED9\u4E86\u76EE\u5F55 \u2192 \u5B58\u5230 \`<\u7528\u6237\u7ED9\u7684\u76EE\u5F55>/<name>/\`
-- \u7528\u6237\u6CA1\u7ED9 \u2192 \u5B58\u5230**\u5F53\u524D\u804A\u5929\u5DE5\u4F5C\u76EE\u5F55**\uFF08\u672C\u6B21\u4F1A\u8BDD\u7684 cwd\uFF09\u4E0B\u7684 \`<name>/\`
+\u5FC5\u5B88\u7684\u51E0\u6761\uFF1A
 
-\u522B\u628A\u6587\u4EF6\u6563\u843D\u5230\u522B\u5904\u6216\u81EA\u9020 \`.cockpit-apps\` \u4E4B\u7C7B\u76EE\u5F55\u3002\u8FD9\u4E2A\u76EE\u5F55\u5C31\u662F\u4E0A\u9762\u300C\u6D41\u7A0B\u300D\u7B2C 2 \u6B65\u8981\u544A\u77E5\u7528\u6237\u7684\uFF1B**\u7528\u6237\u786E\u8BA4\u540E**\u518D\u7528 \`Write\` \u5199\u51FA\uFF0C\u7528\u6237\u70B9\u51FB
-\u5373\u53EF\u9884\u89C8\u5E76\u4EA4\u4E92\u3002`;
-var HTML_PROMPT_EN = `---
-name: html
-description: "Generate an interactive small app with the built-in cockpit bash SDK to fetch/update data"
-argument-hint: "describe the small app you want"
----
+1. **\u6570\u636E\u53EA\u8D70 \`cockpit.bash\`**\uFF08\`curl\` \u53D6\u3001\`curl -X POST\` \u6539\u3001\u6216\u8BFB\u5199\u6587\u4EF6\uFF09\uFF0C**\u7EDD\u4E0D\u7528
+   \`fetch(\u5916\u90E8URL)\`** \u2014\u2014 \u540C\u6E90\u6C99\u7BB1\u4F1A CORS \u62E6\u622A\u3002\uFF08\`fetch('./app.jsx')\` \u8FD9\u79CD\u540C\u76EE\u5F55\u76F8\u5BF9\u8BF7\u6C42\u6CA1\u95EE\u9898\u3002\uFF09
+2. **\u4E24\u7C7B\u5931\u8D25\u90FD\u8981\u5904\u7406**\uFF1A\`try/catch\` \u6293\u5230\u7684**\u629B\u5F02\u5E38 = spawn/\u57FA\u5EFA\u5931\u8D25**\uFF08\u574F\u8DEF\u5F84\u3001\u8FDE\u63A5\u65AD\uFF09\uFF1B\u6CA1\u629B\u4F46
+   **\`exitCode !== 0\` = \u547D\u4EE4\u8DD1\u4E86\u4F46\u5931\u8D25**\uFF0C\u8981\u5C55\u793A \`stderr\` \u6216 stdout \u91CC\u7684\u9519\u8BEF\u4F53\uFF0C\u522B\u53EA\u5199"\u5931\u8D25"\u3002
+   \u540E\u53F0\u5BF9\u5E94 \`onError\`\uFF08\u57FA\u5EFA\uFF09+ \`onExit\` \u975E\u96F6 \`code\`\uFF08\u547D\u4EE4\uFF09\u3002
+3. **\`command\` \u662F shell \u4E32**\uFF1A\u52A8\u6001\u503C/\u7528\u6237\u8F93\u5165\u62FC\u8FDB\u53BB\u524D\u5FC5\u987B\u6821\u9A8C\u6216\u8F6C\u4E49\uFF08shell \u5143\u5B57\u7B26\u4F1A\u6CE8\u5165\uFF09\uFF1B\u7ED3\u6784\u5316
+   \u5165\u53C2\u4E00\u5F8B\u8D70 base64\uFF08\u89C1\u9AA8\u67B6\uFF09\uFF0C\u522B\u62FC\u5B57\u7B26\u4E32\uFF1B\u5199\u5E93\u7528**\u53C2\u6570\u5316**\u8BED\u53E5\u3002
+4. **\u8D44\u6E90\u5F15\u7528**\uFF1A\u540C\u7EA7\u76F8\u5BF9\uFF08\`./app.jsx\`\u3001\`./style.css\`\u3001\u56FE\u7247\uFF09\u548C CDN \u7EDD\u5BF9 URL \u90FD\u80FD\u52A0\u8F7D\uFF1B\u6839\u76F8\u5BF9
+   \uFF08\`/assets/x.css\`\uFF09\u4F1A 404 \u2014\u2014 \u670D\u52A1\u7AEF\u53EA\u6258\u7BA1 \`/html-lib/*\` \u548C \`/apps/*\`\u3002
 
-# Build a Cockpit small app
+## \u56DB\u3001\u672C\u5730\u6570\u636E\uFF1A\u4E09\u7C7B\u76EE\u5F55
 
-A small app that can fetch/update data: the preview injects a global
-\`window.cockpit\` SDK \u2014 essentially the Bash tool exposed to the page, so buttons can
-\`curl\`, read/write files, and run scripts.
+\u6570\u636E\u8981\u843D\u76D8\u3001\u8981\u91CD\u5F00\u5373\u7528\u2014\u2014**\u522B\u6BCF\u6B21\u6253\u5F00\u90FD\u91CD\u65B0\u62C9\u4E00\u904D**\u3002\u6240\u6709\u6301\u4E45\u5316\u8D70 \`api.mjs\`\uFF0Capp \u76EE\u5F55\u4E0B\u6309
+\u300C\u80FD\u4E0D\u80FD\u91CD\u5EFA\u300D\u5206\u4E09\u7C7B\uFF0C\u522B\u5E73\u94FA\u5728\u4E00\u8D77\uFF1A
 
-**Default to React** (the local zero-build stack below \u2014 productized, most AI-familiar,
-ideal for stateful / multi-view / form apps); fall back to single-file inline HTML only
-for a **trivial single view or a purely static one-off**. Both modes share the one
-contract below.
+- \`cache/\` \u2014\u2014 \u80FD\u91CD\u5EFA\u7684\uFF08\u63A5\u53E3\u8FD4\u56DE\u3001\u539F\u59CB dump\u3001\u6D3E\u751F\u7D22\u5F15\uFF09\u3002\u5220\u4E86\u53EA\u662F\u6162\u3002**\u6574\u76EE\u5F55\u5199\u8FDB \`.gitignore\`**\u3002
+- \`state/\` \u2014\u2014 \u91CD\u5EFA\u4E0D\u51FA\u6765\u7684\uFF08\u6BCF\u65E5\u5FEB\u7167\u3001\u7528\u6237\u624B\u5DE5\u7EF4\u62A4\u7684\u6E05\u5355\uFF09\u3002\u6E90\u63A5\u53E3\u7ED9\u4E0D\u4E86\u7B2C\u4E8C\u6B21\uFF0C\u5220\u4E86\u6C38\u4E45\u4E22\u3002**\u5165\u5E93**\u3002
+- \`out/\` \u2014\u2014 \u7ED9\u4EBA\u770B\u7684\u4EA7\u7269\uFF08\u62A5\u544A\u3001\u5BFC\u51FA\uFF09\uFF0C\u6309\u65E5\u671F\u547D\u540D\uFF0C\u7559\u6863\u3002
 
-## Flow: align first, write only after confirmation (important)
+\u5206\u7C7B\u7684\u610F\u4E49\u5168\u5728 git \u7B56\u7565\u4E0A\uFF1A\u76EE\u5F55\u5206\u4E86\u4F46 \`cache/\` \u6CA1 ignore\u3001\`state/\` \u6CA1\u5165\u5E93\uFF0C\u7B49\u4E8E\u6CA1\u5206\u3002
 
-**Don't write files up front.** Three steps:
+\u9AA8\u67B6\u91CC\u5DF2\u7ECF\u505A\u6389\u7684\uFF08\u7248\u672C\u53F7\u3001\u539F\u5B50\u5199\u3001\`refresh\` \u53C2\u6570\u3001\u53D6\u6570\u65F6\u95F4\u6233\u3001\u5931\u8D25\u56DE\u843D\u65E7\u6570\u636E\uFF09\u4E0D\u518D\u91CD\u590D\uFF0C\u5269\u4E0B\u8FD9\u4E9B
+\u8981\u4F60\u81EA\u5DF1\u5B88\uFF1A
 
-1. **Align on the requirement** \u2014 restate your understanding of the app (what it does,
-   React vs single-file, where data comes from, key features/interactions). Ask back only
-   when the requirement is ambiguous or has several reasonable readings; if it's already
-   clear, just give a short understanding summary \u2014 don't interrogate.
-2. **Tell the storage directory** \u2014 resolve \`<dir>/<name>/\` per the "Where to store" rules
-   below and tell the user exactly where it'll go and what it's named; the user may reject
-   or change the directory / name.
-3. **Write only after confirmation** \u2014 \`Write\` the files only once the user clearly agrees
-   (confirm / start / go / "write it" \u2014 any affirmative). Until then, only discuss \u2014 write
-   nothing to disk.
+1. **\u4F1A\u589E\u957F\u7684\u76EE\u5F55\u5FC5\u987B\u6709\u4E0A\u9650\uFF0C\u5E76\u5728\u811A\u672C\u91CC\u6267\u884C**\uFF08\u7559 N \u6761 / \u8D85 X MB \u5C31\u6E05\uFF09\u3002\u53EA\u5199\u5728\u6CE8\u91CA\u91CC\u7684\u4E0A\u9650\u7B49\u4E8E
+   \u6CA1\u6709\uFF0C\u6CA1\u4EBA\u770B\u7BA1\u7684 dump \u76EE\u5F55\u6DA8\u5230 GB \u7EA7\u662F\u5E38\u6001\u3002
+2. **\u843D\u76D8\u6587\u4EF6\u91CC\u4E0D\u5199\u7EDD\u5BF9\u8DEF\u5F84**\uFF08\u5B58\u76F8\u5BF9 app \u76EE\u5F55\u7684\u8DEF\u5F84\uFF09\uFF0C\u5426\u5219\u76EE\u5F55\u4E00\u632A\u7D22\u5F15\u5168\u5E9F\uFF1B\u542B\u90AE\u7BB1\u7B49\u9690\u79C1\u7684\u843D\u76D8
+   \u4E00\u5F8B ignore\u3002
+3. **\u7559\u4E00\u4E2A\u6E05\u7A7A\u5165\u53E3**\uFF08\`api.mjs\` \u52A0\u4E2A \`clear_cache\` \u6A21\u5F0F + \u754C\u9762\u6309\u94AE\uFF09\uFF0C\u5426\u5219\u7528\u6237\u53EA\u80FD\u53BB\u6587\u4EF6\u7BA1\u7406\u5668\u91CC
+   \u731C\u54EA\u4E2A\u6587\u4EF6\u80FD\u5220\u3002
+4. \u8981\u7528\u522B\u7684 app \u7684\u51ED\u636E / \u5DE5\u5177\u811A\u672C\u65F6\u8D70 \`../<app>/\` \u76F8\u5BF9\u5F15\u7528\uFF0C\u5E76**\u5148\u63A2\u6D4B\u5B58\u5728\u518D\u7528**\uFF1B\u5931\u8D25\u7ED9\u4E00\u53E5\u7167\u7740\u505A
+   \u5C31\u80FD\u4FEE\u7684\u63D0\u793A\uFF08\u300C\u53BB xxx \u91CD\u65B0\u767B\u5F55\u300D\uFF09\uFF0C\u522B\u628A\u539F\u59CB\u62A5\u9519\u7529\u7ED9\u7528\u6237\u3002
 
-Even if the user already spelled out the requirement and directory in the \`/html\` call,
-still stop once to present "understanding + directory + a 'shall I start writing?'" and
-wait \u2014 but keep this round **lightweight**, don't re-interrogate.
+## \u4E94\u3001\u4E3B\u9898
 
-## Contract: window.cockpit (shared by both modes, stated once)
+\u6837\u5F0F\u9ED8\u8BA4\u5957 **Cockpit \u4E3B\u9898**\uFF08\`index.html\` \u91CC\u5DF2\u7ECF link \u4E86 \`/html-lib/theme.css\`\uFF09\u3002**\u914D\u8272\u52A8\u624B\u524D\u5148\u62C9
+\u4E00\u6B21\u8FD9\u4EFD\u6587\u4EF6**\uFF0C\u5B83\u662F\u53D8\u91CF\u7684\u552F\u4E00\u771F\u6E90\uFF0C\u522B\u51ED\u8BB0\u5FC6\u731C\u53D8\u91CF\u540D\uFF1A
 
-The SDK is ready on load \u2014 no library to import:
+\`\`\`bash
+curl -fsS "{{BASE_URL}}/html-lib/theme.css"
+\`\`\`
 
-- \`cockpit.cwd: string\` \u2014 directory of the current file; relative-path commands run here.
-- \`cockpit.bash(command, opts?)\` \u2014 run one bash command (\`command\` is a raw shell string):
-  - **Foreground** (default, short/discrete) \u2192 \`Promise<{ stdout, stderr, exitCode }>\`; \`await\` for the full output at once.
-  - **Background** (\`opts.background: true\`, long/live) \u2192 \`{ kill() }\`, streaming via callbacks:
-    \`opts = { background:true, cwd?, onOutput?, onStderr?, onExit?, onError? }\`. Use background for large/continuous output (foreground buffers it all in memory).
+- \`:root\` \u6BB5\u662F\u4EAE\u8272\u53D6\u503C\u3001\`.dark\` \u6BB5\u662F\u6697\u8272\u3002\u539F\u59CB\u8272\u9636\uFF08\`--slate-*\` / \`--teal-*\` / \`--red-*\` \u2026\uFF09\u5B58\u7684\u662F
+  HSL \u5206\u91CF\uFF0C\u6240\u4EE5\u534A\u900F\u660E\u76F4\u63A5\u5199 \`hsl(var(--green-9) / .12)\`\u3002
+- \u524D\u666F\u8272\u6210\u5BF9\u53D6\uFF08\`--card\`/\`--card-foreground\` \u2026\uFF09\uFF0C**\u53EA\u6709 \`--brand\` \u662F\u5751**\uFF1A\`--brand-foreground\` \u662F
+  \u540C\u8272\u7CFB\u8272\u8C03\uFF0C\u538B\u5728 \`--brand\` \u586B\u5145\u4E0A\u4EC5 1.5:1\uFF1B**brand \u586B\u5145\u4E0A\u7684\u6587\u5B57\u6539\u7528 \`var(--background)\`**\u3002
+- \`cockpit-theme\` meta \u8BA9\u9884\u89C8\u5E26\u4E00\u4E2A\u6D6E\u52A8\u4EAE/\u6697\u5207\u6362\u6309\u94AE\uFF08\u9ED8\u8BA4\u53F3\u4E0A\u89D2\uFF0C\u7528\u6237\u53EF\u62D6\u52A8\u5438\u9644\u5230\u4EFB\u610F\u4E00\u89D2\uFF0C\u6240\u4EE5
+  \u4E0D\u5FC5\u4E3A\u5B83\u5728\u53F3\u4E0A\u89D2\u7559\u7A7A\u4F4D\uFF09\uFF1B**\u9ED8\u8BA4\u8DDF\u968F Cockpit \u5BBF\u4E3B\u4E3B\u9898**\uFF08Cockpit \u5916\u6253\u5F00\u65F6\u6309 meta \u7684
+  auto/light/dark\uFF09\uFF0C\u624B\u52A8\u5207\u6362\u540E**\u6309 app \u8BB0\u4F4F\u9009\u62E9\uFF08\u8DE8\u5237\u65B0\uFF0C\u4F18\u5148\u4E8E\u8DDF\u968F\uFF09**\uFF0C\u4E5F\u53EF\u8C03
+  \`cockpit.toggleTheme()\`\u3002
+- **\u522B\u81EA\u62CD\u8C03\u8272\u677F\u3001\u522B\u4E0A Tailwind**\uFF1Bapp \u7279\u6709\u7EC6\u8282\u518D\u8865\u4E00\u5C0F\u6BB5 \`<style>\`\u3002`;
+var HTML_PROMPT_EN = `---
+name: html
+description: "Generate an interactive local React app with the built-in cockpit bash SDK to fetch/update data"
+argument-hint: "describe the app you want"
+---
 
-Rules every such page must follow:
+# Build a Cockpit app (a local React page)
 
-1. **Data only through \`cockpit.bash\`** (\`curl\` to read, \`curl -X POST\` to write, or
-   read/write files) \u2014 **never \`fetch(externalURL)\`**: the same-origin sandbox blocks it via CORS.
-2. **Handle both failure modes** (foreground): a **throw** caught by \`try/catch\` = spawn/infra
-   failure (bad path, dropped connection); no throw but **\`exitCode !== 0\` = the command ran
-   and failed** \u2014 show \`stderr\` or the error body in stdout, don't just say "failed". Background:
-   \`onError\` (infra) + a non-zero \`code\` in \`onExit\` (command).
-3. **\`command\` is a shell string**: validate or escape any dynamic/user input before
-   interpolating it (shell metacharacters inject); prefer a fixed command.
-4. **Resource refs**: relative siblings (\`./app.jsx\`, \`./style.css\`, images) and absolute
-   CDN URLs load; root-relative (\`/assets/x.css\`) 404s.
+A **local application**, not a one-off page: the preview injects a global \`window.cockpit\`
+SDK \u2014 essentially the Bash tool exposed to the page, so buttons can \`curl\`, read/write files
+and run scripts; data lands on disk inside the app directory and is there on reopen.
 
-Meta head (always include \u2014 the HTML panel renders cards from it, the console opens it via \`/name\`):
+Zero build: React / Babel load from the same-origin \`/html-lib\` \u2014 no bundler, no deps, works offline.
 
-\`\`\`html
-<title>Page title</title>
-<meta name="cockpit-name" content="short-name">   <!-- unique short name for /name; letters/digits/-_ only -->
-<meta name="description" content="one line about the page">
-<meta name="cockpit-icon" content="\u{1F50D}">           <!-- emoji or icon url, optional -->
-<meta name="cockpit-theme" content="auto">        <!-- enable the draggable light/dark toggle; auto = first load follows the OS, or light/dark -->
-\`\`\`
+## 1. Flow: align first, write only after confirmation (important)
 
-## Default: React (local zero-build stack)
+**Don't write files up front.** Three steps:
 
-Use this fixed shell, with the logic in a sibling \`./app.jsx\`:
+1. **Align on the requirement** \u2014 restate your understanding of the app (what it does, where
+   data comes from, key features/interactions). Ask back only when the requirement is ambiguous
+   or has several reasonable readings; if it's already clear, just give a short summary \u2014 don't
+   interrogate.
+2. **Tell the storage directory** \u2014 resolve \`<dir>/<name>/\` and tell the user exactly where it
+   goes and what it's called; they may reject or change it:
+   - **You always pick \`<name>\`** from the request (lowercase kebab-case, matching
+     \`cockpit-name\`) \u2014 the user only describes the app, they don't name it.
+   - The user gave a directory \u2192 \`<the given directory>/<name>/\`; none given \u2192 \`<name>/\` under
+     the **current chat working directory** (this session's cwd).
+   - Every file of the app lives in that one directory, with data split into \`cache/\`
+     \`state/\` \`out/\` per section 4. Don't scatter files elsewhere or invent a \`.cockpit-apps\`.
+3. **Write only after confirmation** \u2014 \`Write\` the files once the user clearly agrees (confirm /
+   start / go / "write it" \u2014 any affirmative). Until then, only discuss.
+
+Even if the user already spelled out requirement and directory in the \`/html\` call, still stop
+once to present "understanding + directory + a 'shall I start writing?'" and wait \u2014 but keep that
+round **lightweight**, don't re-interrogate.
+
+## 2. Skeleton: three files, copy them
+
+\`index.html\` \u2014 use this fixed shell, don't improvise:
 
 \`\`\`html
-<div id="root"></div>
-<script src="/html-lib/react.production.min.js"></script>
-<script src="/html-lib/react-dom.production.min.js"></script>
-<script src="/html-lib/babel.min.js"></script>
-<script>
-  (async () => {
-    const src = await (await fetch('./app.jsx')).text();
-    // MUST use classic runtime: the default automatic runtime injects an import of
-    // react/jsx-runtime, which \u2014 appended as a plain script \u2014 throws
-    // "Cannot use import statement outside a module".
-    const { code } = Babel.transform(src, { presets: [['react', { runtime: 'classic' }]] });
-    const s = document.createElement('script'); s.textContent = code; document.body.appendChild(s);
-  })();
-</script>
+<!doctype html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <title>Page title</title>
+  <meta name="cockpit-name" content="short-name">   <!-- unique short name for /name; letters/digits/-_ -->
+  <meta name="description" content="one line about the page">
+  <meta name="cockpit-icon" content="\u{1F50D}">           <!-- emoji or icon url, optional -->
+  <meta name="cockpit-theme" content="auto">        <!-- light/dark toggle, see section 5 -->
+  <link rel="stylesheet" href="/html-lib/theme.css">
+</head>
+<body>
+  <div id="root"></div>
+  <script src="/html-lib/react.production.min.js"></script>
+  <script src="/html-lib/react-dom.production.min.js"></script>
+  <script src="/html-lib/babel.min.js"></script>
+  <script>
+    (async () => {
+      const src = await (await fetch('./app.jsx')).text();
+      // MUST use classic runtime: the default automatic runtime injects an import of
+      // react/jsx-runtime, which \u2014 appended as a plain script \u2014 throws
+      // "Cannot use import statement outside a module".
+      const { code } = Babel.transform(src, { presets: [['react', { runtime: 'classic' }]] });
+      const s = document.createElement('script'); s.textContent = code; document.body.appendChild(s);
+    })();
+  </script>
+</body>
+</html>
 \`\`\`
 
-- \`/html-lib\` is hosted locally by Cockpit (same-origin, offline, no CDN).
-- \`app.jsx\` uses the global \`React\` (\`const { useState } = React;\`) and ends with
-  \`ReactDOM.createRoot(document.getElementById('root')).render(<App/>)\`.
-- Style with the **Cockpit theme** by default: \`<link rel="stylesheet" href="/html-lib/theme.css">\`,
-  then use the semantic vars (\`var(--background)\` / \`--foreground\` / \`--card\` / \`--brand\` /
-  \`--muted-foreground\` / \`--border\` / \`--destructive\`; translucency via \`hsl(var(--green-9) / .12)\`).
-  The \`cockpit-theme\` meta above gives the preview a floating light/dark toggle (top-right by
-  default, draggable to any corner \u2014 so don't reserve top-right space for it); it **follows the
-  Cockpit host theme by default** (outside Cockpit, the meta's auto/light/dark decides), and a manual
-  toggle is **remembered per app across reloads and overrides the host**, or call \`cockpit.toggleTheme()\`
-  from your own UI. Don't invent a palette or add Tailwind; add a small \`<style>\` for app-specific bits.
+All four meta lines matter: the HTML panel renders cards from them, and the console opens the
+app via \`cockpit-name\` (\`/name\`).
 
-Fetch data from React the same way, via \`cockpit.bash\`:
+\`app.jsx\` \u2014 global \`React\`, render at the end. **Opening reads the cache; only Refresh goes out**:
 
 \`\`\`jsx
+const { useState, useEffect, useCallback } = React;
+
 function App() {
-  const [stars, setStars] = React.useState(null);
-  const load = async () => {
-    const { stdout, exitCode } = await cockpit.bash("curl -s https://api.github.com/repos/Surething-io/cockpit");
-    setStars(exitCode === 0 ? JSON.parse(stdout).stargazers_count : 'error');
-  };
-  return <button onClick={load}>\u2B50 {stars ?? 'load'}</button>;
+  const [data, setData] = useState(null);
+  const [busy, setBusy] = useState(false);
+  const [err, setErr] = useState(null);
+
+  const load = useCallback(async (refresh) => {
+    setBusy(true); setErr(null);
+    try {
+      const arg = btoa(JSON.stringify({ refresh: !!refresh }));      // structured args as base64
+      const { stdout, stderr, exitCode } = await cockpit.bash(\`node ./api.mjs \${arg}\`);
+      if (exitCode !== 0) throw new Error(stderr || 'script failed');  // ran, but failed
+      const d = JSON.parse(stdout);
+      if (d.error && !d.stale) throw new Error(d.error);
+      setData(d);
+      if (d.stale) setErr(d.error);                                  // old data is still shown
+    } catch (e) {
+      setErr(e.message);      // a throw = spawn/infra failure. Keep existing data on screen
+    } finally { setBusy(false); }
+  }, []);
+
+  useEffect(() => { load(false); }, [load]);       // on open: cache only, zero requests
+
+  if (!data) return <div>{err ?? 'Loading\u2026'}</div>;
+  return (
+    <div>
+      <span>{data.cached ? 'cached' : 'updated'} \xB7 {new Date(data.fetchedAt).toLocaleString()}</span>
+      <button disabled={busy} onClick={() => load(true)}>{busy ? 'Refreshing\u2026' : 'Refresh'}</button>
+      {err && <em>Refresh failed, showing older data: {err}</em>}
+      {/* render data */}
+    </div>
+  );
 }
-\`\`\`
 
-## Backend: write complex logic as a script (CGI-style, both modes)
+ReactDOM.createRoot(document.getElementById('root')).render(<App />);
+\`\`\`
 
-Inline short commands in \`cockpit.bash("...")\`. For complex logic (multi-step, parsing,
-loops, a library, DB writes), write the backend as a **script file** next to the page and
-call it \u2014 the HTML/JSX is the frontend, the script is the backend handler.
+\`api.mjs\` \u2014 the backend handler: fetching, parsing and persistence live here; one JSON on stdout:
 
-- **Explicit interpreter**: \`cockpit.bash("node ./api.mjs")\` / \`python3 ./api.py\` /
-  \`bash ./api.sh\` (avoids \`chmod +x\`); probe \`node\`/\`python3\` with \`command -v\` if unsure,
-  and fall back to shell.
-- **Pass args safely**: send structured input as **base64** (\`btoa(...)\` on the page,
-  \`Buffer.from(arg,'base64')\` in the script) rather than string-building; use **parameterized**
-  statements for DB writes.
-- The script returns JSON on stdout; the frontend does \`JSON.parse\`. \`Write\` the script first, then call it.
+\`\`\`js
+import { existsSync, readFileSync, writeFileSync, renameSync, mkdirSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
 
-## Fallback: single-file HTML (trivial / static one-off)
+const DIR = dirname(fileURLToPath(import.meta.url));
+const CACHE = join(DIR, 'cache/data.json');
+const VERSION = 1;          // bump whenever the payload shape changes, or old cache feeds a new UI
 
-No state? Skip React and inline it. Same data/error handling as above.
+const args = JSON.parse(Buffer.from(process.argv[2] || '', 'base64').toString() || '{}');
 
-Foreground (button fetches data):
+function readCache() {
+  if (!existsSync(CACHE)) return null;
+  const c = JSON.parse(readFileSync(CACHE, 'utf8'));
+  return c.v === VERSION ? c : null;          // version mismatch = void it, act as if empty
+}
+function writeCache(payload) {
+  mkdirSync(dirname(CACHE), { recursive: true });
+  const tmp = \`\${CACHE}.\${process.pid}.tmp\`;   // atomic: a kill mid-write leaves no half JSON
+  writeFileSync(tmp, JSON.stringify({ v: VERSION, fetchedAt: new Date().toISOString(), payload }));
+  renameSync(tmp, CACHE);
+}
 
-\`\`\`html
-<button id="load">Load</button>
-<pre id="out"></pre>
-<script>
-  document.getElementById('load').onclick = async () => {
-    try {
-      const { stdout, stderr, exitCode } = await cockpit.bash("curl -s https://api.github.com/repos/Surething-io/cockpit");
-      if (exitCode !== 0) { out.textContent = 'command failed: ' + stderr; return; }
-      out.textContent = '\u2B50 ' + JSON.parse(stdout).stargazers_count;
-    } catch (e) {
-      out.textContent = 'exec error: ' + e.message;  // spawn / infra failure
-    }
-  };
-</script>
+try {
+  const hit = args.refresh ? null : readCache();
+  if (hit) {
+    process.stdout.write(JSON.stringify({ ...hit.payload, cached: true, fetchedAt: hit.fetchedAt }));
+  } else {
+    const payload = await fetchFresh(args);   // \u2190 your fetching logic (curl / DB / commands)
+    writeCache(payload);
+    process.stdout.write(JSON.stringify({ ...payload, cached: false, fetchedAt: new Date().toISOString() }));
+  }
+} catch (e) {
+  const hit = readCache();                    // failed refresh: fall back to the old cache, labelled
+  process.stdout.write(JSON.stringify(hit
+    ? { ...hit.payload, cached: true, stale: true, error: e.message, fetchedAt: hit.fetchedAt }
+    : { error: e.message }));
+}
 \`\`\`
 
-Background (live log):
+- When one command is enough and the data isn't worth keeping (just viewing current state), skip
+  \`api.mjs\` and call \`cockpit.bash("curl -s \u2026")\` directly. The moment data should survive a
+  reopen, use this skeleton rather than inventing your own.
+- Same for other languages: \`python3 ./api.py\` / \`bash ./api.sh\` (explicit interpreter avoids
+  \`chmod +x\`); probe \`node\` / \`python3\` with \`command -v\` if unsure and fall back to shell.
+- The cache key must include **every parameter that changes the result** (time range, fetch depth
+  \u2026): use \`cache/<param>.json\` or bucket by key inside the file \u2014 otherwise a 7-day cache renders
+  in the 30-day view.
 
-\`\`\`html
-<pre id="log"></pre>
-<script>
-  const box = document.getElementById('log');
-  const h = cockpit.bash("tail -f ./build.log", {
-    background: true,
-    onOutput: c => { box.textContent += c; },
-    onExit:   code => { box.textContent += '\\n[exit ' + code + ']'; },
-    onError:  msg  => { box.textContent += '\\n[error ' + msg + ']'; },
-  });
-  // h.kill() when done
-</script>
-\`\`\`
+## 3. Contract: window.cockpit
 
-## Where to store it
+The SDK is ready on load \u2014 no library to import:
 
-Put all of an app's files (\`index.html\` + \`app.jsx\` + \`api.mjs\` \u2026) in a single
-\`<name>/\` subdirectory. **You always pick \`<name>\`** from the request (lowercase
-kebab-case, matching \`cockpit-name\`) \u2014 the user only describes the app, they don't
-name it. Resolve the target directory as follows:
+- \`cockpit.cwd: string\` \u2014 directory of the current file; relative-path commands run here.
+- \`cockpit.bash(command, opts?)\` \u2014 run one bash command (\`command\` is a raw shell string):
+  - **Foreground** (default, short/discrete) \u2192 \`Promise<{ stdout, stderr, exitCode }>\`; \`await\` for the full output at once.
+  - **Background** (\`opts.background: true\`, long/live) \u2192 \`{ kill() }\`, streaming via callbacks.
+    Large/continuous output **must** use background \u2014 foreground buffers it all in memory.
+
+\`\`\`js
+const h = cockpit.bash("npm run build", {
+  background: true,
+  onOutput: c => append(c),
+  onStderr: c => append(c),
+  onExit:   code => append('\\n[exit ' + code + ']'),   // command finished; non-zero = failed
+  onError:  msg  => append('\\n[error ' + msg + ']'),   // spawn / infra failure
+});
+// h.kill() on unmount or when the user aborts
+\`\`\`
 
-- The user gave a directory in the request \u2192 store under \`<the given directory>/<name>/\`.
-- The user gave none \u2192 store under the **current chat working directory** (this session's cwd), i.e. \`<cwd>/<name>/\`.
+Rules every page must follow:
+
+1. **Data only through \`cockpit.bash\`** (\`curl\` to read, \`curl -X POST\` to write, or read/write
+   files) \u2014 **never \`fetch(externalURL)\`**: the same-origin sandbox blocks it via CORS.
+   (\`fetch('./app.jsx')\` and other same-directory relative requests are fine.)
+2. **Handle both failure modes**: a **throw** caught by \`try/catch\` = spawn/infra failure (bad
+   path, dropped connection); no throw but **\`exitCode !== 0\` = the command ran and failed** \u2014 show
+   \`stderr\` or the error body in stdout, don't just say "failed". Background: \`onError\` (infra) +
+   a non-zero \`code\` in \`onExit\` (command).
+3. **\`command\` is a shell string**: validate or escape any dynamic/user input before interpolating
+   it (shell metacharacters inject); pass structured input as base64 (see the skeleton) instead of
+   string-building; use **parameterized** statements for DB writes.
+4. **Resource refs**: relative siblings (\`./app.jsx\`, \`./style.css\`, images) and absolute CDN URLs
+   load; root-relative (\`/assets/x.css\`) 404s \u2014 the server only hosts \`/html-lib/*\` and \`/apps/*\`.
+
+## 4. Local data: three directories
+
+Data must land on disk and be there on reopen \u2014 **don't refetch everything on every open**. All
+persistence goes through \`api.mjs\`; inside the app directory, split it by "can this be rebuilt?"
+into three directories instead of one flat pile:
+
+- \`cache/\` \u2014 rebuildable (API responses, raw dumps, derived indexes). Deleting it only costs time. **Gitignore the whole directory.**
+- \`state/\` \u2014 NOT rebuildable (daily snapshots, hand-maintained lists). The source can't hand it to you twice; deleted means gone. **Commit it.**
+- \`out/\` \u2014 artifacts for humans (reports, exports), date-named, kept.
+
+The split only pays off through the git policy: directories separated but \`cache/\` not ignored and
+\`state/\` not committed means nothing was separated.
+
+What the skeleton already handles (versioning, atomic writes, the \`refresh\` flag, the fetch
+timestamp, stale fallback) isn't repeated here. What's left is on you:
+
+1. **Any growing directory needs a cap enforced in the script** (keep N entries / prune past X MB).
+   A cap that lives only in a comment is not a cap \u2014 unattended dump directories reach GB scale.
+2. **Never write absolute paths into a file on disk** (store paths relative to the app directory),
+   or moving the directory voids the index; anything holding private data (emails \u2026) is gitignored.
+3. **Provide a clear/reset entry point** (a \`clear_cache\` mode in \`api.mjs\` + a button), or the
+   user's only option is guessing which file is safe to delete in a file manager.
+4. To use another app's credentials / helper scripts, reference them as \`../<app>/\` and **probe
+   that they exist first**; on failure give one actionable line ("log in again at xxx") rather than
+   dumping the raw error.
+
+## 5. Theme
+
+Style with the **Cockpit theme** by default (\`index.html\` already links \`/html-lib/theme.css\`).
+**Fetch that file once before you pick any colour** \u2014 it is the single source of truth for the
+variables, so don't guess names from memory:
+
+\`\`\`bash
+curl -fsS "{{BASE_URL}}/html-lib/theme.css"
+\`\`\`
 
-Don't scatter files elsewhere or invent a directory like \`.cockpit-apps\`. This directory is what step 2 of the flow above tells the user; **after the user confirms**,
-\`Write\` the files; the user clicks to preview and interact.`;
+- \`:root\` holds the light values, \`.dark\` the dark ones. The raw scales (\`--slate-*\` / \`--teal-*\` /
+  \`--red-*\` \u2026) store HSL components, so translucency is just \`hsl(var(--green-9) / .12)\`.
+- Take foregrounds in pairs (\`--card\`/\`--card-foreground\` \u2026), **except \`--brand\`**:
+  \`--brand-foreground\` is a tint of the same hue and hits only 1.5:1 on a \`--brand\` fill \u2014 **use
+  \`var(--background)\` for text on a brand fill**.
+- The \`cockpit-theme\` meta gives the preview a floating light/dark toggle (top-right by default,
+  draggable to any corner \u2014 so don't reserve top-right space for it); it **follows the Cockpit host
+  theme by default** (outside Cockpit, the meta's auto/light/dark decides), and a manual toggle is
+  **remembered per app across reloads and overrides the host**, or call \`cockpit.toggleTheme()\`.
+- **Don't invent a palette or add Tailwind**; add a small \`<style>\` for app-specific bits.`;
 
 // packages/feature/agent/src/server/lib/newBranchPrompt.ts
 var NEW_BRANCH_PROMPT_ZH = `---
@@ -2374,7 +2533,7 @@ function follow(ctx) {
   else ctx.signal.addEventListener("abort", () => ac.abort(), { once: true });
   return ac;
 }
-async function runSdkLoop(ctx, buildOptions2) {
+async function runSdkLoop(ctx, buildOptions) {
   const hasImages = !!(ctx.images && ctx.images.length > 0);
   const content = [];
   if (ctx.images) {
@@ -2416,7 +2575,7 @@ async function runSdkLoop(ctx, buildOptions2) {
     })();
     const attemptAbort = follow(ctx);
     const resume = isRetry ? ctx.currentKey() : ctx.sessionId;
-    const options = isRetry ? { ...buildOptions2(attemptAbort, resume, true), resume } : buildOptions2(attemptAbort, ctx.sessionId, false);
+    const options = isRetry ? { ...buildOptions(attemptAbort, resume, true), resume } : buildOptions(attemptAbort, ctx.sessionId, false);
     const response = query({ prompt: input, options });
     let receivedResult = false;
     for await (const message of response) {
@@ -2446,6 +2605,39 @@ async function runSdkLoop(ctx, buildOptions2) {
 // packages/feature/agent/src/server/engines/claude.ts
 var PLAN_EDIT_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit"]);
 var isPlanFilePath = (p) => /(^|\/)\.claude\/plans\//.test(p);
+var CLAUDE_SDK_EFFORTS = /* @__PURE__ */ new Set(["low", "medium", "high", "xhigh", "max"]);
+var CLAUDE_ULTRACODE_MODELS = /* @__PURE__ */ new Set(["claude-fable-5", "claude-opus-5", "claude-opus-4-8"]);
+var CLAUDE_XHIGH_MODELS = /* @__PURE__ */ new Set(["claude-fable-5", "claude-opus-5", "claude-opus-4-8", "claude-sonnet-5"]);
+function resolveClaudeModel(ctx) {
+  const model = typeof ctx.params.model === "string" && ctx.params.model.trim() ? ctx.params.model.trim() : void 0;
+  if (!model) return void 0;
+  return ctx.params.claudeContextWindow === "1m" ? `${model}[1m]` : model;
+}
+function resolveClaudeEffort(ctx) {
+  const model = typeof ctx.params.model === "string" ? ctx.params.model.trim() : "";
+  if (model === "claude-haiku-4-5") return void 0;
+  const effort = typeof ctx.params.claudeEffort === "string" ? ctx.params.claudeEffort : void 0;
+  if (!effort || effort === "ultrathink") return void 0;
+  if (effort === "ultracode") return "xhigh";
+  if (effort === "xhigh" && !CLAUDE_XHIGH_MODELS.has(model)) return "max";
+  if (effort === "max" && model === "claude-sonnet-4-6") return "high";
+  return CLAUDE_SDK_EFFORTS.has(effort) ? effort : void 0;
+}
+function resolveClaudeSettings(ctx) {
+  const settings = {};
+  const model = typeof ctx.params.model === "string" ? ctx.params.model.trim() : "";
+  if (ctx.params.claudeFastMode === true) settings.fastMode = true;
+  if (ctx.params.claudeThinking !== void 0) settings.alwaysThinkingEnabled = ctx.params.claudeThinking;
+  if (ctx.params.claudeEffort === "ultracode" && CLAUDE_ULTRACODE_MODELS.has(model)) settings.ultracode = true;
+  return Object.keys(settings).length > 0 ? settings : void 0;
+}
+function withClaudePromptEffort(ctx) {
+  if (ctx.params.claudeEffort !== "ultrathink") return ctx;
+  const prompt = ctx.prompt ?? "";
+  if (/\bultrathink\b/i.test(prompt)) return ctx;
+  return { ...ctx, prompt: `Ultrathink:
+${prompt}` };
+}
 function planPermission(toolName, input, opts) {
   if (toolName === "ExitPlanMode") {
     return {
@@ -2472,6 +2664,9 @@ function planPermission(toolName, input, opts) {
 function buildClaudeOptions(ctx, independent) {
   const { permissionMode } = ctx.params;
   const isPlan = permissionMode === "plan";
+  const model = resolveClaudeModel(ctx);
+  const effort = resolveClaudeEffort(ctx);
+  const settings = resolveClaudeSettings(ctx);
   return (abort, resume, isRetry) => ({
     // Independent task: resume is what makes the CLI load the transcript, so the first
     // attempt drops it and names the session explicitly instead — same file on disk, empty
@@ -2479,6 +2674,9 @@ function buildClaudeOptions(ctx, independent) {
     // turn (the history is stashed away), which is exactly what the retry needs.
     ...independent && !isRetry ? { sessionId: resume } : resume && { resume },
     ...ctx.cwd && { cwd: ctx.cwd },
+    ...model ? { model } : {},
+    ...effort ? { effort } : {},
+    ...settings ? { settings } : {},
     settingSources: ["user", "project", "local"],
     // Permission mode: 'plan' (read-only) when requested, else skip all permission checks.
     permissionMode: isPlan ? "plan" : "bypassPermissions",
@@ -2500,15 +2698,16 @@ var claudeSpec = {
   name: "claude",
   runner: {
     async run(ctx) {
-      const independent = ctx.params.noHistory === true && !!ctx.sessionId;
+      const runCtx = withClaudePromptEffort(ctx);
+      const independent = runCtx.params.noHistory === true && !!runCtx.sessionId;
       if (!independent) {
-        await runSdkLoop(ctx, buildClaudeOptions(ctx, false));
+        await runSdkLoop(runCtx, buildClaudeOptions(runCtx, false));
         return;
       }
-      const sessionPath = getClaudeSessionPath(ctx.cwd, ctx.sessionId);
+      const sessionPath = getClaudeSessionPath(runCtx.cwd, runCtx.sessionId);
       const stashed = stashTranscript(sessionPath);
       try {
-        await runSdkLoop(ctx, buildClaudeOptions(ctx, true));
+        await runSdkLoop(runCtx, buildClaudeOptions(runCtx, true));
       } finally {
         if (stashed) mergeStashedTranscript(sessionPath);
       }
@@ -16841,6 +17040,16 @@ ${summary}`;
 }
 
 // packages/feature/agent/src/server/engines/builtinAgent/stream.ts
+function emitUsageUpdate(outputTokens, safeEnqueue) {
+  safeEnqueue(
+    `data: ${JSON.stringify({
+      type: "usage_update",
+      output_tokens: Math.max(0, Math.round(outputTokens))
+    })}
+
+`
+  );
+}
 function formatToolError(error48) {
   if (error48 instanceof Error) return error48.message || String(error48);
   if (typeof error48 === "string") return error48;
@@ -16852,12 +17061,15 @@ function formatToolError(error48) {
 }
 async function consumeStream(fullStream, safeEnqueue, _sessionId, opts) {
   let text = "";
+  let progressOutputTokens = 0;
   const toolCalls = [];
   const pendingToolCalls = /* @__PURE__ */ new Map();
   for await (const part of fullStream) {
     switch (part.type) {
       case "text-delta": {
         text += part.text;
+        progressOutputTokens += estimateOutputUnits(part.text);
+        emitUsageUpdate(progressOutputTokens, safeEnqueue);
         safeEnqueue(
           `data: ${JSON.stringify({
             type: "stream_event",
@@ -16871,12 +17083,16 @@ async function consumeStream(fullStream, safeEnqueue, _sessionId, opts) {
         );
         break;
       }
+      case "finish-step":
+        break;
       case "tool-call": {
         if (text) {
           opts?.onTextFlush?.(text);
           text = "";
         }
         const input = part.input || {};
+        progressOutputTokens += estimateOutputUnits(`${part.toolName} ${JSON.stringify(input)}`);
+        emitUsageUpdate(progressOutputTokens, safeEnqueue);
         opts?.onToolCall?.(part.toolCallId, part.toolName, input);
         safeEnqueue(
           `data: ${JSON.stringify({
@@ -16897,6 +17113,8 @@ async function consumeStream(fullStream, safeEnqueue, _sessionId, opts) {
       }
       case "tool-result": {
         const content = String(part.output);
+        progressOutputTokens += estimateOutputUnits(content);
+        emitUsageUpdate(progressOutputTokens, safeEnqueue);
         opts?.onToolResult?.(part.toolCallId, content, false);
         safeEnqueue(
           `data: ${JSON.stringify({
@@ -16918,6 +17136,8 @@ async function consumeStream(fullStream, safeEnqueue, _sessionId, opts) {
       // unusable session. Every tool call must close with a result line, success or not.
       case "tool-error": {
         const content = formatToolError(part.error);
+        progressOutputTokens += estimateOutputUnits(content);
+        emitUsageUpdate(progressOutputTokens, safeEnqueue);
         opts?.onToolResult?.(part.toolCallId, content, true);
         safeEnqueue(
           `data: ${JSON.stringify({
@@ -16941,8 +17161,6 @@ async function consumeStream(fullStream, safeEnqueue, _sessionId, opts) {
       // the normal failure path (orchestrator → run `error` event → UI).
       case "error":
         throw new Error(formatProviderError(part.error), { cause: part.error });
-      case "finish":
-        break;
       default:
         break;
     }
@@ -17129,12 +17347,12 @@ function resolveEndpoints(p, saved, language) {
   const id = saved.region || p.regions.defaultFor(language);
   return p.regions.byId[id] ?? p.endpoints;
 }
-function resolveBuiltinModel(requested, saved, fallback) {
+function resolveModel(requested, saved, fallback) {
   if (typeof requested === "string" && requested.trim()) return requested.trim();
   if (saved && saved.trim()) return saved.trim();
   return fallback;
 }
-function buildBuiltinConfig(p, apiKey, endpoints) {
+function buildConfig(p, apiKey, endpoints) {
   return {
     sessionsRoot: getBuiltinSessionsRoot(p.name),
     defaultModel: p.defaultModel,
@@ -17142,37 +17360,6 @@ function buildBuiltinConfig(p, apiKey, endpoints) {
     ...p.builtinTemperature !== void 0 && { temperature: p.builtinTemperature }
   };
 }
-function buildEnv(opts) {
-  const { provider: p, apiKey, model, settings, endpoints } = opts;
-  const wire = p.sdkWireModel ? p.sdkWireModel(model) : model;
-  return sanitizedSpawnEnv({
-    ANTHROPIC_AUTH_TOKEN: void 0,
-    ANTHROPIC_BASE_URL: endpoints.anthropicBaseUrl,
-    ANTHROPIC_API_KEY: apiKey,
-    // both providers accept this as x-api-key
-    ANTHROPIC_MODEL: wire,
-    ANTHROPIC_SMALL_FAST_MODEL: p.smallFastModel ?? wire,
-    CLAUDE_CONFIG_DIR: p.configDir,
-    ...p.disablePromptCaching && { DISABLE_PROMPT_CACHING: "1" },
-    CLAUDE_CODE_USE_BEDROCK: "0",
-    CLAUDE_CODE_USE_VERTEX: "0",
-    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1",
-    ...p.sdkEnv?.(model, settings)
-  });
-}
-function buildOptions(ctx, env) {
-  return (abort, resume) => ({
-    ...resume && { resume },
-    ...ctx.cwd && { cwd: ctx.cwd },
-    settingSources: ["user", "project", "local"],
-    permissionMode: "bypassPermissions",
-    allowDangerouslySkipPermissions: true,
-    includePartialMessages: true,
-    abortController: abort,
-    env
-  });
-}
-var isBuiltinMode = (params) => params.mode === "builtin";
 function makeAnthropicCompatSpec(p) {
   return {
     name: p.name,
@@ -17188,14 +17375,13 @@ function makeAnthropicCompatSpec(p) {
           error: `${p.label} API key is not configured. Open the ${p.label} picker in the chat header to set one.`
         };
       }
-      const requested = typeof params.model === "string" ? params.model : void 0;
-      if (isBuiltinMode(params)) {
-        const textCheck = requireTextPrompt(params);
-        if (!textCheck.ok) return textCheck;
-        params.model = resolveBuiltinModel(requested, saved.builtinModel, p.defaultModel);
-        return { ok: true };
-      }
-      params.model = p.resolveSdkModel(requested, saved.model);
+      const textCheck = requireTextPrompt(params);
+      if (!textCheck.ok) return textCheck;
+      params.model = resolveModel(
+        typeof params.model === "string" ? params.model : void 0,
+        saved.builtinModel,
+        p.defaultModel
+      );
       return { ok: true };
     },
     runner: {
@@ -17204,13 +17390,7 @@ function makeAnthropicCompatSpec(p) {
         const settings = await readSettings();
         const saved = settings.engines?.[p.name] ?? {};
         const endpoints = resolveEndpoints(p, saved, settings.language);
-        if (isBuiltinMode(ctx.params)) {
-          await runBuiltinAgent(ctx, buildBuiltinConfig(p, apiKey, endpoints));
-          return;
-        }
-        const model = typeof ctx.params.model === "string" ? ctx.params.model : p.defaultModel;
-        const env = buildEnv({ provider: p, apiKey, model, settings: saved, endpoints });
-        await runSdkLoop(ctx, buildOptions(ctx, env));
+        await runBuiltinAgent(ctx, buildConfig(p, apiKey, endpoints));
       },
       resolveTitle: (cwd, sessionId) => getSessionTitle(cwd, sessionId)
     }
@@ -17218,28 +17398,14 @@ function makeAnthropicCompatSpec(p) {
 }
 
 // packages/feature/agent/src/server/engines/deepseek.ts
-var DEEPSEEK_BASE_URL = "https://api.deepseek.com/anthropic";
-var DEFAULT_MODEL = "deepseek-v4-pro";
-var SMALL_FAST_MODEL = "deepseek-v4-flash";
-var ALLOWED_MODELS = /* @__PURE__ */ new Set(["deepseek-v4-flash", "deepseek-v4-pro"]);
 var DEEPSEEK_OPENAI_BASE_URL = "https://api.deepseek.com/v1";
+var DEFAULT_MODEL = "deepseek-v4-pro";
 var deepseekProvider = {
   name: "deepseek",
   label: "DeepSeek",
-  endpoints: { anthropicBaseUrl: DEEPSEEK_BASE_URL, openAiBaseUrl: DEEPSEEK_OPENAI_BASE_URL },
-  configDir: DEEPSEEK_DIR,
+  endpoints: { openAiBaseUrl: DEEPSEEK_OPENAI_BASE_URL },
   defaultModel: DEFAULT_MODEL,
-  apiKey: deepseekApiKey,
-  smallFastModel: SMALL_FAST_MODEL,
-  disablePromptCaching: true,
-  // DeepSeek runs its own server-side prefix KV cache
-  // SDK mode is whitelist-gated: with no listing API to validate against, an unknown id
-  // would only fail at the first chat turn.
-  resolveSdkModel(requested, saved) {
-    if (typeof requested === "string" && ALLOWED_MODELS.has(requested)) return requested;
-    if (saved && ALLOWED_MODELS.has(saved)) return saved;
-    return DEFAULT_MODEL;
-  }
+  apiKey: deepseekApiKey
 };
 var deepseekSpec = makeAnthropicCompatSpec(deepseekProvider);
 
@@ -17262,72 +17428,25 @@ var ollamaSpec = {
 };
 
 // packages/feature/agent/src/server/engines/kimi.ts
-var KIMI_BASE_URL = "https://api.kimi.com/coding/";
 var KIMI_OPENAI_BASE_URL = "https://api.kimi.com/coding/v1";
 var DEFAULT_MODEL3 = "kimi-for-coding";
-var CONTEXT_TOKENS_FALLBACK = {
-  k3: 1048576,
-  "k3-256k": 262144,
-  "kimi-for-coding": 262144,
-  "kimi-for-coding-highspeed": 262144
-};
-var DEFAULT_CONTEXT_TOKENS = 262144;
-function kimiWireModel(model) {
-  return model === "k3" ? "k3[1m]" : model;
-}
 var kimiProvider = {
   name: "kimi",
   label: "Kimi",
-  endpoints: { anthropicBaseUrl: KIMI_BASE_URL, openAiBaseUrl: KIMI_OPENAI_BASE_URL },
-  configDir: KIMI_DIR,
+  endpoints: { openAiBaseUrl: KIMI_OPENAI_BASE_URL },
   defaultModel: DEFAULT_MODEL3,
   apiKey: kimiApiKey,
-  sdkWireModel: kimiWireModel,
   // Kimi's coding models are thinking-only and reject any temperature but 1 with
   // `invalid temperature: only 1 is allowed for this model`, which fails the turn before a
   // token streams. Omit the field and take the provider default.
-  builtinTemperature: null,
-  // Kimi Code publishes no small/fast tier — the official Claude Code config points every
-  // model slot at the selected model, so ANTHROPIC_SMALL_FAST_MODEL falls through to it.
-  // Both protocols list live models (GET /coding/v1/models), so unlike DeepSeek there is
-  // nothing to whitelist against: pass the id through and let the API reject unknowns.
-  resolveSdkModel(requested, saved) {
-    if (typeof requested === "string" && requested.trim()) return requested.trim();
-    if (saved && saved.trim()) return saved.trim();
-    return DEFAULT_MODEL3;
-  },
-  sdkEnv(model, settings) {
-    const wire = kimiWireModel(model);
-    const contextTokens = settings.modelContextTokens ?? CONTEXT_TOKENS_FALLBACK[model] ?? DEFAULT_CONTEXT_TOKENS;
-    return {
-      // Kimi serves one model per key tier, so every alias the SDK may route to
-      // (subagents, haiku-class helpers) has to resolve to the same id — otherwise the
-      // SDK asks for `claude-3-5-haiku` and gets a 404.
-      ANTHROPIC_DEFAULT_FABLE_MODEL: wire,
-      ANTHROPIC_DEFAULT_OPUS_MODEL: wire,
-      ANTHROPIC_DEFAULT_SONNET_MODEL: wire,
-      ANTHROPIC_DEFAULT_HAIKU_MODEL: wire,
-      CLAUDE_CODE_SUBAGENT_MODEL: wire,
-      // Without these the SDK compacts against Claude's default window and throws away
-      // most of the 256K/1M context this plan pays for.
-      CLAUDE_CODE_MAX_CONTEXT_TOKENS: String(contextTokens),
-      CLAUDE_CODE_AUTO_COMPACT_WINDOW: String(contextTokens),
-      ...settings.modelEffort ? { CLAUDE_CODE_EFFORT_LEVEL: settings.modelEffort } : {}
-    };
-  }
+  builtinTemperature: null
 };
 var kimiSpec = makeAnthropicCompatSpec(kimiProvider);
 
 // packages/feature/agent/src/server/engines/glm.ts
 var GLM_REGIONS = {
-  cn: {
-    anthropicBaseUrl: "https://open.bigmodel.cn/api/anthropic",
-    openAiBaseUrl: "https://open.bigmodel.cn/api/coding/paas/v4"
-  },
-  global: {
-    anthropicBaseUrl: "https://api.z.ai/api/anthropic",
-    openAiBaseUrl: "https://api.z.ai/api/coding/paas/v4"
-  }
+  cn: { openAiBaseUrl: "https://open.bigmodel.cn/api/coding/paas/v4" },
+  global: { openAiBaseUrl: "https://api.z.ai/api/coding/paas/v4" }
 };
 var GLM_REGION_IDS = Object.keys(GLM_REGIONS);
 var DEFAULT_MODEL4 = "glm-5.2";
@@ -17340,34 +17459,10 @@ var glmProvider = {
     // Shared with the picker so the UI cannot claim one host while runs go to another.
     defaultFor: defaultRegionForLanguage
   },
-  configDir: GLM_DIR,
   defaultModel: DEFAULT_MODEL4,
-  apiKey: glmApiKey,
-  // GLM's /models reports bare ids — no context window, no display name — so unlike Kimi
-  // there is nothing to whitelist against and nothing to derive a context limit from.
-  // Pass the id through and let the API reject unknowns.
-  resolveSdkModel(requested, saved) {
-    if (typeof requested === "string" && requested.trim()) return requested.trim();
-    if (saved && saved.trim()) return saved.trim();
-    return DEFAULT_MODEL4;
-  },
-  sdkEnv(model) {
-    return {
-      // GLM serves one model per request, so every alias the SDK may route to has to
-      // resolve to the same id — otherwise it asks for `claude-3-5-haiku` and gets a 404.
-      ANTHROPIC_DEFAULT_FABLE_MODEL: model,
-      ANTHROPIC_DEFAULT_OPUS_MODEL: model,
-      ANTHROPIC_DEFAULT_SONNET_MODEL: model,
-      ANTHROPIC_DEFAULT_HAIKU_MODEL: model,
-      CLAUDE_CODE_SUBAGENT_MODEL: model
-    };
-  }
-  // No CLAUDE_CODE_MAX_CONTEXT_TOKENS: GLM publishes no per-model context metadata, and a
-  // hardcoded table would silently rot as models ship. The SDK default is close enough to
-  // GLM's 200K that guessing is not worth the staleness.
-  //
-  // No builtinTemperature override either: temperature 0 with tools is accepted here
-  // (verified), unlike Kimi's thinking-only models.
+  apiKey: glmApiKey
+  // No builtinTemperature override: temperature 0 with tools is accepted here (verified),
+  // unlike Kimi's thinking-only models.
 };
 var glmSpec = makeAnthropicCompatSpec(glmProvider);
 
@@ -17393,6 +17488,8 @@ var CODEX_TOOL_NAMES = {
 var CODEX_MCP_NAMESPACE_PREFIX = "mcp__";
 var codexMcpToolName = (server, tool2) => `${CODEX_MCP_NAMESPACE_PREFIX}${server}__${tool2}`;
 var CODEX_SPAWN_FN_NAME = "spawn_agent";
+var CODEX_PATCH_FN_NAME = "apply_patch";
+var CODEX_EXEC_SCRIPT_FN_NAME = "exec";
 function codexTodoInput(items) {
   return {
     todos: (items ?? []).flatMap(
@@ -17423,6 +17520,80 @@ function codexMcpResultText(item) {
   if (item.result === null || item.result === void 0) return "";
   return typeof item.result === "string" ? item.result : JSON.stringify(item.result, null, 2);
 }
+var JS_STRING_LITERAL_RE = /"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|`(?:\\.|[^`\\])*`/g;
+var JS_SIMPLE_ESCAPES = {
+  n: "\n",
+  r: "\r",
+  t: "	",
+  b: "\b",
+  f: "\f",
+  v: "\v",
+  "0": "\0"
+};
+function decodeJsStringLiteral(literal2) {
+  if (literal2.startsWith('"')) {
+    try {
+      return JSON.parse(literal2);
+    } catch {
+    }
+  }
+  return literal2.slice(1, -1).replace(
+    /\\(u\{[0-9a-fA-F]+\}|u[0-9a-fA-F]{4}|x[0-9a-fA-F]{2}|[\s\S])/g,
+    (_full, esc2) => {
+      if (esc2.startsWith("u{")) return String.fromCodePoint(parseInt(esc2.slice(2, -1), 16));
+      if (esc2.startsWith("u") || esc2.startsWith("x")) return String.fromCharCode(parseInt(esc2.slice(1), 16));
+      return JS_SIMPLE_ESCAPES[esc2] ?? esc2;
+    }
+  );
+}
+function extractPatchLiteral(script) {
+  JS_STRING_LITERAL_RE.lastIndex = 0;
+  let m;
+  while (m = JS_STRING_LITERAL_RE.exec(script)) {
+    const value = decodeJsStringLiteral(m[0]);
+    if (value.includes("*** Begin Patch")) return value;
+  }
+  return null;
+}
+function extractExecArgs(script) {
+  const call = script.indexOf("tools.exec_command(");
+  if (call === -1) return null;
+  const open = script.indexOf("{", call);
+  if (open === -1) return null;
+  let depth = 0;
+  let quote = "";
+  for (let i = open; i < script.length; i++) {
+    const ch = script[i];
+    if (quote) {
+      if (ch === "\\") i++;
+      else if (ch === quote) quote = "";
+      continue;
+    }
+    if (ch === '"' || ch === "'" || ch === "`") {
+      quote = ch;
+      continue;
+    }
+    if (ch === "{") depth++;
+    else if (ch === "}" && --depth === 0) {
+      try {
+        const parsed = JSON.parse(script.slice(open, i + 1));
+        return parsed && typeof parsed === "object" ? parsed : null;
+      } catch {
+        return null;
+      }
+    }
+  }
+  return null;
+}
+function parseCodexExecScript(script) {
+  const patch = extractPatchLiteral(script);
+  if (patch) return { kind: "patch", patch };
+  const args = extractExecArgs(script);
+  if (args) {
+    return { kind: "exec", command: typeof args.cmd === "string" ? args.cmd : "", args };
+  }
+  return { kind: "unknown" };
+}
 var CODEX_AGENT_DONE = /* @__PURE__ */ new Set(["completed", "errored", "interrupted", "not_found", "failed"]);
 function parseCodexSpawnInput(args, extra) {
   const prompt = typeof args.message === "string" ? args.message : "";
@@ -17515,8 +17686,12 @@ function parseCallLines(text, exec2, patch, spawns, mcps) {
       } catch {
       }
       exec2.push({ callId: p.call_id, cmd });
-    } else if (p.type === "custom_tool_call" && p.name === "apply_patch") {
+    } else if (p.type === "custom_tool_call" && p.name === CODEX_PATCH_FN_NAME) {
       patch.push({ callId: p.call_id, files: parsePatchFiles(p.input || "") });
+    } else if (p.type === "custom_tool_call" && p.name === CODEX_EXEC_SCRIPT_FN_NAME) {
+      const script = parseCodexExecScript(p.input || "");
+      if (script.kind === "exec") exec2.push({ callId: p.call_id, cmd: script.command });
+      else if (script.kind === "patch") patch.push({ callId: p.call_id, files: parsePatchFiles(script.patch) });
     } else if (p.type === "function_call" && p.name && p.namespace?.startsWith(CODEX_MCP_NAMESPACE_PREFIX)) {
       mcps.push({
         callId: p.call_id,
@@ -17643,7 +17818,9 @@ function createCodexEventAdapter(ctx) {
   const { sessionId } = ctx;
   let terminated = false;
   let failure = null;
+  let progressOutputTokens = 0;
   const pendingToolCalls = /* @__PURE__ */ new Map();
+  const progressItems = /* @__PURE__ */ new Set();
   let rolloutPath = null;
   let execBase = 0;
   let patchBase = 0;
@@ -17814,6 +17991,14 @@ function createCodexEventAdapter(ctx) {
     }
     emitAgentReports(item);
   };
+  const emitOutputProgress = (text, key) => {
+    if (key) {
+      if (progressItems.has(key)) return;
+      progressItems.add(key);
+    }
+    progressOutputTokens += estimateOutputUnits(text);
+    ctx.emit({ type: "usage_update", output_tokens: progressOutputTokens });
+  };
   const handle = (event) => {
     if (terminated) return;
     switch (event.type) {
@@ -17829,12 +18014,15 @@ function createCodexEventAdapter(ctx) {
         const item = event.item;
         if (!item) break;
         if (item.type === "agent_message" && item.text) {
+          emitOutputProgress(item.text);
           ctx.emit({ type: "assistant", message: { content: [{ type: "text", text: item.text }] } });
         }
         if (item.type === "error" && (item.message || item.text)) {
+          emitOutputProgress(item.message || item.text || "");
           ctx.emit({ type: "error", error: item.message || item.text });
         }
         if (item.type === "reasoning" && item.text) {
+          emitOutputProgress(item.text);
           ctx.emit({
             type: "assistant",
             message: { content: [{ type: "text", text: `<details><summary>Reasoning</summary>
@@ -17847,11 +18035,13 @@ ${item.text}
         if (item.type === "command_execution") {
           const toolUseId = resolveExecToolUseId(item);
           if (!pendingToolCalls.has(toolUseId)) {
+            emitOutputProgress(item.command || CODEX_TOOL_NAMES.bash, `command-start:${toolUseId}`);
             ctx.emit({
               type: "assistant",
               message: { content: [{ type: "tool_use", id: toolUseId, name: CODEX_TOOL_NAMES.bash, input: { command: item.command || "" } }] }
             });
           }
+          emitOutputProgress(item.aggregated_output || `(exit code: ${item.exit_code ?? "unknown"})`, `command-result:${toolUseId}`);
           ctx.emit({
             type: "user",
             message: { content: [{ tool_use_id: toolUseId, content: item.aggregated_output || `(exit code: ${item.exit_code ?? "unknown"})` }] }
@@ -17859,17 +18049,28 @@ ${item.text}
           pendingToolCalls.delete(toolUseId);
         }
         if (item.type === "collab_tool_call") handleCollabItem(item);
-        if (item.type === "mcp_tool_call") emitMcpCall(item, true);
-        if (item.type === "web_search") emitWebSearch(item);
-        if (item.type === "todo_list") emitTodoList(item);
+        if (item.type === "mcp_tool_call") {
+          emitOutputProgress(`${item.server || "mcp"} ${item.tool || ""} ${JSON.stringify(item.result ?? item.error ?? "")}`);
+          emitMcpCall(item, true);
+        }
+        if (item.type === "web_search") {
+          emitOutputProgress(JSON.stringify(item.action || item.query || "web_search"));
+          emitWebSearch(item);
+        }
+        if (item.type === "todo_list") {
+          emitOutputProgress(JSON.stringify(item.items || []));
+          emitTodoList(item);
+        }
         if (item.type === "file_change") {
           const toolUseId = resolvePatchToolUseId(item);
           if (!pendingToolCalls.has(toolUseId)) {
+            emitOutputProgress(patchResultText(item), `patch-start:${toolUseId}`);
             ctx.emit({
               type: "assistant",
               message: { content: [{ type: "tool_use", id: toolUseId, name: CODEX_TOOL_NAMES.applyPatch, input: patchInput(item) }] }
             });
           }
+          emitOutputProgress(patchResultText(item), `patch-result:${toolUseId}`);
           ctx.emit({
             type: "user",
             message: { content: [{ tool_use_id: toolUseId, content: patchResultText(item) }] }
@@ -17884,6 +18085,7 @@ ${item.text}
         if (item?.type === "command_execution" && item.command) {
           const toolUseId = resolveExecToolUseId(item);
           pendingToolCalls.set(toolUseId, toolUseId);
+          emitOutputProgress(item.command, `command-start:${toolUseId}`);
           ctx.emit({
             type: "assistant",
             message: { content: [{ type: "tool_use", id: toolUseId, name: CODEX_TOOL_NAMES.bash, input: { command: item.command } }] }
@@ -17892,6 +18094,7 @@ ${item.text}
         if (item?.type === "file_change" && (item.changes?.length ?? 0) > 0) {
           const toolUseId = resolvePatchToolUseId(item);
           pendingToolCalls.set(toolUseId, toolUseId);
+          emitOutputProgress(patchResultText(item), `patch-start:${toolUseId}`);
           ctx.emit({
             type: "assistant",
             message: { content: [{ type: "tool_use", id: toolUseId, name: CODEX_TOOL_NAMES.applyPatch, input: patchInput(item) }] }
@@ -17949,14 +18152,30 @@ function codexSdkInput(prompt, imageFiles) {
   ];
 }
 function codexThreadOptions(ctx) {
+  const effort = resolveCodexReasoningEffort(ctx.params.codexReasoningEffort);
   return {
     ...ctx.params.model ? { model: ctx.params.model } : {},
+    ...effort ? { modelReasoningEffort: effort } : {},
     ...ctx.cwd ? { workingDirectory: ctx.cwd } : {},
     sandboxMode: "danger-full-access",
     approvalPolicy: "never",
     skipGitRepoCheck: true
   };
 }
+function resolveCodexReasoningEffort(value) {
+  switch (value) {
+    case "minimal":
+    case "low":
+    case "medium":
+    case "high":
+    case "xhigh":
+    case "max":
+    case "ultra":
+      return value;
+    default:
+      return void 0;
+  }
+}
 async function runCodexSdk(ctx) {
   const imageFiles = ctx.images && ctx.images.length > 0 ? writeImagesToTemp(ctx.images) : [];
   const adapter = createCodexEventAdapter(ctx);
@@ -18023,6 +18242,7 @@ var en_default2 = {
     cancel: "Cancel",
     delete: "Delete",
     close: "Close",
+    minimize: "Minimize",
     copy: "Copy",
     edit: "Edit",
     file: "File",
@@ -18091,8 +18311,9 @@ var en_default2 = {
     searchPlaceholder: "Search HTML apps...",
     pathLabel: "Absolute path to the .html file",
     invalid: "Invalid",
+    builtin: "Built-in",
     noDescription: "No description",
-    emptyNoApps: "No HTML apps yet.",
+    emptyNoApps: "No custom HTML apps yet.",
     emptyCreatePrefix: "Use",
     emptyCreateSuffix: "in chat to create a new app.",
     addExisting: "add an existing HTML file",
@@ -18139,7 +18360,6 @@ var en_default2 = {
     unstagedNFiles: "Unstaged {{count}} files",
     discardFailed: "Discard failed",
     discardedNFiles: "Discarded changes in {{count}} files",
-    stagedAllFiles: "All files staged",
     deletedFile: "File deleted",
     discardedChanges: "Changes discarded",
     pastedFile: "Pasted: {{name}}",
@@ -18481,10 +18701,11 @@ var en_default2 = {
     startConversation: "Start a conversation",
     loadMoreHistory: "Load more...",
     scrollUpForMore: "\u2191 Scroll up to load more history",
-    claudeThinking: "Claude is thinking...",
     jumpToStart: "Jump to start",
     jumpToLatest: "Jump to latest",
     copyMessage: "Copy message",
+    copyImage: "Copy image",
+    copiedImage: "Image copied",
     forkSession: "Fork session from here",
     excerptTurn: "Excerpt this turn to a new session",
     imageN: "Image {{index}}",
@@ -18509,7 +18730,6 @@ var en_default2 = {
     placeholder: "Type a message, Enter to send (Shift+Enter for new line, paste images; start a line with / (main session) or @ (subagent) for commands, multiple allowed)",
     placeholderDisabled: "Generating... you can keep typing (ESC to cancel; if stuck, cancel and resend 'continue')",
     imageSizeLimit: "Image size exceeds limit (max 5MB), current: {{size}}MB",
-    stageAll: "Stage all files (git add -A)",
     viewGitChanges: "View Git changes",
     viewAllComments: "View all comments",
     userMessages: "User messages",
@@ -19225,6 +19445,7 @@ var zh_default = {
     cancel: "\u53D6\u6D88",
     delete: "\u5220\u9664",
     close: "\u5173\u95ED",
+    minimize: "\u6700\u5C0F\u5316",
     copy: "\u590D\u5236",
     edit: "\u7F16\u8F91",
     file: "\u6587\u4EF6",
@@ -19293,8 +19514,9 @@ var zh_default = {
     searchPlaceholder: "\u641C\u7D22 HTML \u5E94\u7528...",
     pathLabel: ".html \u6587\u4EF6\u7684\u7EDD\u5BF9\u8DEF\u5F84",
     invalid: "\u65E0\u6548",
+    builtin: "\u5185\u7F6E",
     noDescription: "\u65E0\u63CF\u8FF0",
-    emptyNoApps: "\u8FD8\u6CA1\u6709 HTML \u5E94\u7528\u3002",
+    emptyNoApps: "\u8FD8\u6CA1\u6709\u81EA\u5B9A\u4E49 HTML \u5E94\u7528\u3002",
     emptyCreatePrefix: "\u5728\u804A\u5929\u91CC\u4F7F\u7528",
     emptyCreateSuffix: "\u521B\u5EFA\u65B0\u5E94\u7528\u3002",
     addExisting: "\u6DFB\u52A0\u5DF2\u6709 HTML \u6587\u4EF6",
@@ -19341,7 +19563,6 @@ var zh_default = {
     unstagedNFiles: "\u5DF2\u53D6\u6D88\u6682\u5B58 {{count}} \u4E2A\u6587\u4EF6",
     discardFailed: "\u653E\u5F03\u53D8\u66F4\u5931\u8D25",
     discardedNFiles: "\u5DF2\u653E\u5F03 {{count}} \u4E2A\u6587\u4EF6\u7684\u53D8\u66F4",
-    stagedAllFiles: "\u5DF2\u6682\u5B58\u6240\u6709\u6587\u4EF6",
     deletedFile: "\u5DF2\u5220\u9664\u6587\u4EF6",
     discardedChanges: "\u5DF2\u653E\u5F03\u53D8\u66F4",
     pastedFile: "\u5DF2\u7C98\u8D34: {{name}}",
@@ -19683,10 +19904,11 @@ var zh_default = {
     startConversation: "\u5F00\u59CB\u5BF9\u8BDD\u5427",
     loadMoreHistory: "\u52A0\u8F7D\u66F4\u591A...",
     scrollUpForMore: "\u2191 \u5411\u4E0A\u6EDA\u52A8\u52A0\u8F7D\u66F4\u591A\u5386\u53F2",
-    claudeThinking: "Claude \u6B63\u5728\u601D\u8003...",
     jumpToStart: "\u8DF3\u8F6C\u5230\u5F00\u59CB",
     jumpToLatest: "\u8DF3\u8F6C\u5230\u6700\u65B0",
     copyMessage: "\u590D\u5236\u6D88\u606F",
+    copyImage: "\u590D\u5236\u56FE\u7247",
+    copiedImage: "\u5DF2\u590D\u5236\u56FE\u7247",
     forkSession: "\u4ECE\u6B64\u5904\u5206\u53C9\u4F1A\u8BDD",
     excerptTurn: "\u6458\u5F55\u672C\u8F6E\u5230\u65B0\u4F1A\u8BDD",
     imageN: "\u56FE\u7247 {{index}}",
@@ -19711,7 +19933,6 @@ var zh_default = {
     placeholder: "\u8F93\u5165\u6D88\u606F\uFF0CEnter \u53D1\u9001\uFF08Shift+Enter \u6362\u884C\uFF0C\u53EF\u7C98\u8D34\u56FE\u7247\uFF1B\u884C\u9996 /\uFF08\u4E3B\u4F1A\u8BDD\uFF09\u6216 @\uFF08\u5B50\u4EE3\u7406\uFF09\u5524\u8D77\u547D\u4EE4\uFF0C\u652F\u6301\u591A\u884C\u591A\u547D\u4EE4\uFF09",
     placeholderDisabled: "\u751F\u6210\u4E2D... \u53EF\u7EE7\u7EED\u8F93\u5165 (ESC \u53D6\u6D88;\u5361\u4F4F\u592A\u4E45\u53EF\u53D6\u6D88\u540E\u91CD\u53D1\u300C\u7EE7\u7EED\u300D)",
     imageSizeLimit: "\u56FE\u7247\u5927\u5C0F\u8D85\u8FC7\u9650\u5236\uFF08\u6700\u5927 5MB\uFF09\uFF0C\u5F53\u524D\u5927\u5C0F: {{size}}MB",
-    stageAll: "\u6682\u5B58\u6240\u6709\u6587\u4EF6 (git add -A)",
     viewGitChanges: "\u67E5\u770B Git \u53D8\u66F4",
     viewAllComments: "\u67E5\u770B\u6240\u6709\u8BC4\u8BBA",
     userMessages: "\u7528\u6237\u6D88\u606F\u5217\u8868",
@@ -20497,8 +20718,7 @@ var dispatchEngineMessageEff = (task, engine, startFresh) => Effect_exports.tryP
     if (!spec) {
       throw new Error(`no engine spec for ${engine}`);
     }
-    const builtinLoop = isBuiltinLoopSession(engine, task);
-    const noHistory = await readSessionNoHistory(task, engine, builtinLoop);
+    const noHistory = await readSessionNoHistory(task, engine);
     const outcome = await dispatchChat(spec, {
       prompt: buildTaskPrompt(task),
       // Omit sessionId to start a brand-new session when the resume target is gone;
@@ -20507,7 +20727,6 @@ var dispatchEngineMessageEff = (task, engine, startFresh) => Effect_exports.tryP
       cwd: task.cwd,
       engine,
       ...task.model && { model: task.model },
-      ...builtinLoop && { mode: "builtin" },
       ...noHistory && { noHistory: true }
     });
     if (!outcome.ok) {
@@ -20542,29 +20761,19 @@ var dispatchEngineMessageEff = (task, engine, startFresh) => Effect_exports.tryP
   })
 });
 var BUILTIN_LOOP_PATHS = {
+  ollama: getOllamaSessionPath,
   deepseek: getDeepseekBuiltinSessionPath,
   kimi: getKimiBuiltinSessionPath,
   glm: getGlmBuiltinSessionPath
 };
-var SDK_STORE_PATHS = {
-  deepseek: getDeepseekSessionPath,
-  kimi: getKimiSessionPath,
-  glm: getGlmSessionPath
-};
-function isBuiltinLoopSession(engine, task) {
-  const resolve = BUILTIN_LOOP_PATHS[engine];
-  return !!resolve && existsSync3(resolve(task.cwd, task.sessionId));
-}
-async function readSessionNoHistory(task, engine, builtinLoop) {
-  if (engine !== "ollama" && !builtinLoop && engine !== "claude" && engine !== "codex") return false;
+async function readSessionNoHistory(task, engine) {
+  if (!BUILTIN_LOOP_PATHS[engine] && engine !== "claude" && engine !== "codex") return false;
   const state = await readJsonFile(getSessionFilePath(task.cwd), {});
   return state.noHistories?.[task.sessionId] === true;
 }
 function sessionPathFor(engine, task) {
-  if (engine === "ollama") return getOllamaSessionPath(task.cwd, task.sessionId);
-  if (isBuiltinLoopSession(engine, task)) return BUILTIN_LOOP_PATHS[engine](task.cwd, task.sessionId);
-  const sdkStorePath = SDK_STORE_PATHS[engine];
-  if (sdkStorePath) return sdkStorePath(task.cwd, task.sessionId);
+  const builtinPath = BUILTIN_LOOP_PATHS[engine];
+  if (builtinPath) return builtinPath(task.cwd, task.sessionId);
   if (engine === "codex") return findCodexSessionPath(task.sessionId);
   return getClaudeSessionPath(task.cwd, task.sessionId);
 }