@symerian/symi 3.5.16 → 3.5.17

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.5.16",
-  "commit": "820f004a3dfdb5436de913edaa9cfcdfa81baa24",
-  "builtAt": "2026-05-06T17:31:50.406Z"
+  "version": "3.5.17",
+  "commit": "e6354a3c26a29ca562ee7ec77906021c84235a0e",
+  "builtAt": "2026-05-06T17:41:46.852Z"
 }

package/dist/bundled/boot-md/handler.js

@@ -4,16 +4,16 @@ import { E as shouldLogVerbose, G as isRecord, r as DEFAULT_CHAT_CHANNEL, v as i
 import { a as resolveAgentSkillsFilter, c as resolveEffectiveModelFallbacks, i as resolveAgentModelPrimary, l as resolveSessionAgentId, o as resolveAgentWorkspaceDir, r as resolveAgentDir, t as listAgentIds, u as resolveSessionAgentIds } from "../../agent-scope-B1Ina6jV.js";
 import { r as defaultRuntime, t as createSubsystemLogger } from "../../subsystem-DzRUKS9f.js";
 import { l as ensureAgentWorkspace } from "../../workspace-CsaDUuDn.js";
-import { A as runWithModelFallback, C as resolveSymiDocsPath, D as resolveRunWorkspaceDir, E as redactRunIdentifier, M as resolveFailoverStatus, O as deriveSessionTotalTokens, S as buildAgentSystemPrompt, T as resolveBootstrapContextForRun, _ as AGENT_LANE_NESTED, a as resolveSessionDeliveryTarget, b as emitAgentEvent, c as detectRuntimeShell, d as applyModelOverrideToSessionEntry, f as applyVerboseOverride, g as resolveAgentTimeoutMs, i as resolveOutboundTarget, j as FailoverError, k as hasNonzeroUsage, l as resolveSendPolicy, m as clearSessionAuthProfileOverride, n as buildModelAliasLines, o as buildSystemPromptParams, p as loadModelCatalog, s as getProcessSupervisor, t as runAgentTurn, u as lookupContextTokens, v as AGENT_LANE_SUBAGENT, w as makeBootstrapWarn, x as registerAgentRunContext, y as clearAgentRunContext } from "../../unified-runner-ByJSAveb.js";
+import { A as runWithModelFallback, C as resolveSymiDocsPath, D as resolveRunWorkspaceDir, E as redactRunIdentifier, M as resolveFailoverStatus, O as deriveSessionTotalTokens, S as buildAgentSystemPrompt, T as resolveBootstrapContextForRun, _ as AGENT_LANE_NESTED, a as resolveSessionDeliveryTarget, b as emitAgentEvent, c as detectRuntimeShell, d as applyModelOverrideToSessionEntry, f as applyVerboseOverride, g as resolveAgentTimeoutMs, i as resolveOutboundTarget, j as FailoverError, k as hasNonzeroUsage, l as resolveSendPolicy, m as clearSessionAuthProfileOverride, n as buildModelAliasLines, o as buildSystemPromptParams, p as loadModelCatalog, s as getProcessSupervisor, t as runAgentTurn, u as lookupContextTokens, v as AGENT_LANE_SUBAGENT, w as makeBootstrapWarn, x as registerAgentRunContext, y as clearAgentRunContext } from "../../unified-runner-ChkYfsxy.js";
 import { d as ensureAuthProfileStore } from "../../auth-profiles-BSw0aQND.js";
 import { t as formatCliCommand } from "../../command-format-BrrHNE8r.js";
 import { _ as DEFAULT_MODEL, a as isCliProvider, c as normalizeProviderId, d as resolveDefaultModelForAgent, g as DEFAULT_CONTEXT_TOKENS, m as resolveThinkingDefault, o as modelKey, s as normalizeModelRef, t as buildAllowedModelSet, u as resolveConfiguredModelRef, v as DEFAULT_PROVIDER } from "../../model-selection-BqshlIZc.js";
-import { At as resolveSessionResetPolicy, Dt as resolveSessionKey, It as resolveAgentMainSessionKey, Lt as resolveExplicitAgentSessionKey, M as classifyFailoverReason, Ot as evaluateSessionFreshness, Rt as resolveMainSessionKey, U as isFailoverErrorMessage, a as normalizeOutboundPayloadsForJson, at as loadSessionStore, i as normalizeOutboundPayloads, it as resolveAndPersistSessionFile, jt as resolveSessionResetType, kt as resolveChannelResetConfig, lt as updateSessionStore, nt as parseSessionThreadInfo, r as formatOutboundPayloadLog, t as deliverOutboundPayloads, vt as normalizeAccountId } from "../../deliver-BiWlR84Y.js";
+import { At as resolveSessionResetPolicy, Dt as resolveSessionKey, It as resolveAgentMainSessionKey, Lt as resolveExplicitAgentSessionKey, M as classifyFailoverReason, Ot as evaluateSessionFreshness, Rt as resolveMainSessionKey, U as isFailoverErrorMessage, a as normalizeOutboundPayloadsForJson, at as loadSessionStore, i as normalizeOutboundPayloads, it as resolveAndPersistSessionFile, jt as resolveSessionResetType, kt as resolveChannelResetConfig, lt as updateSessionStore, nt as parseSessionThreadInfo, r as formatOutboundPayloadLog, t as deliverOutboundPayloads, vt as normalizeAccountId } from "../../deliver-B04yNX82.js";
 import { c as loadConfig } from "../../ssrf-DNhyFMRW.js";
 import "../../boolean-BsqeuxE6.js";
 import { s as isTruthyEnvValue } from "../../shell-env-B1lDWz4t.js";
 import "../../manifest-registry-BGJu2aC-.js";
-import "../../chrome-OTJg3QKn.js";
+import "../../chrome-CmQwGAuL.js";
 import "../../frontmatter-CJEX1BrH.js";
 import { n as buildWorkspaceSkillSnapshot } from "../../skills-Dm4gX4Tl.js";
 import "../../redact-CSGZUFxa.js";
@@ -27,7 +27,7 @@ import { i as resolveSessionTranscriptPath, n as resolveSessionFilePath, s as re
 import { t as SILENT_REPLY_TOKEN } from "../../tokens-D_vCJSzF.js";
 import "../../diagnostic-BALvP9wI.js";
 import "../../diagnostic-session-state-BDfanaOY.js";
-import "../../manager-DjhE8yLr.js";
+import "../../manager-B-wPs7cb.js";
 import "../../github-copilot-token-uhEBNQfj.js";
 import "../../pi-auth-json-DCGR3yfh.js";
 import "../../reply-prefix-D0NzzC4I.js";

package/dist/bundled/session-memory/handler.js

@@ -4,15 +4,15 @@ import "../../registry-C-JddWwo.js";
 import { o as resolveAgentWorkspaceDir } from "../../agent-scope-B1Ina6jV.js";
 import { t as createSubsystemLogger } from "../../subsystem-DzRUKS9f.js";
 import "../../workspace-CsaDUuDn.js";
-import "../../unified-runner-ByJSAveb.js";
+import "../../unified-runner-ChkYfsxy.js";
 import "../../auth-profiles-BSw0aQND.js";
 import "../../model-selection-BqshlIZc.js";
-import { Tt as hasInterSessionUserProvenance } from "../../deliver-BiWlR84Y.js";
+import { Tt as hasInterSessionUserProvenance } from "../../deliver-B04yNX82.js";
 import "../../ssrf-DNhyFMRW.js";
 import "../../boolean-BsqeuxE6.js";
 import "../../shell-env-B1lDWz4t.js";
 import "../../manifest-registry-BGJu2aC-.js";
-import "../../chrome-OTJg3QKn.js";
+import "../../chrome-CmQwGAuL.js";
 import "../../frontmatter-CJEX1BrH.js";
 import "../../skills-Dm4gX4Tl.js";
 import "../../redact-CSGZUFxa.js";
@@ -26,7 +26,7 @@ import "../../paths-BsT3BvfH.js";
 import "../../tokens-D_vCJSzF.js";
 import "../../diagnostic-BALvP9wI.js";
 import "../../diagnostic-session-state-BDfanaOY.js";
-import "../../manager-DjhE8yLr.js";
+import "../../manager-B-wPs7cb.js";
 import "../../github-copilot-token-uhEBNQfj.js";
 import "../../pi-auth-json-DCGR3yfh.js";
 import "../../reply-prefix-D0NzzC4I.js";

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-8541c326f67f2faaedef364e66a9aaa745e5471d29b0c0f99af2304bf1dcca9d
+c9d3271c9b49843128f1170d40c1f7e0a23bd45b3480f9a6f294ffd294c04151

package/dist/{chrome-OTJg3QKn.js → chrome-CmQwGAuL.js}

@@ -9,7 +9,7 @@ import fs$1 from "node:fs/promises";
 import { execFileSync, spawn } from "node:child_process";
 import net from "node:net";
 import { createServer } from "node:http";
-import WebSocket$1, { WebSocketServer } from "ws";
+import WebSocket, { WebSocketServer } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 
 //#region src/browser/constants.ts
@@ -177,7 +177,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 	let nextExtensionId = 1;
 	const sendToExtension = async (payload) => {
 		const ws = extensionWs;
-		if (!ws || ws.readyState !== WebSocket$1.OPEN) throw new Error("Chrome extension not connected");
+		if (!ws || ws.readyState !== WebSocket.OPEN) throw new Error("Chrome extension not connected");
 		ws.send(JSON.stringify(payload));
 		return await new Promise((resolve, reject) => {
 			const timer = setTimeout(() => {
@@ -194,12 +194,12 @@ async function ensureChromeExtensionRelayServer(opts) {
 	const broadcastToCdpClients = (evt) => {
 		const msg = JSON.stringify(evt);
 		for (const ws of cdpClients) {
-			if (ws.readyState !== WebSocket$1.OPEN) continue;
+			if (ws.readyState !== WebSocket.OPEN) continue;
 			ws.send(msg);
 		}
 	};
 	const sendResponseToCdp = (ws, res) => {
-		if (ws.readyState !== WebSocket$1.OPEN) return;
+		if (ws.readyState !== WebSocket.OPEN) return;
 		ws.send(JSON.stringify(res));
 	};
 	const ensureTargetEventsForClient = (ws, mode) => {
@@ -424,7 +424,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 	wssExtension.on("connection", (ws) => {
 		extensionWs = ws;
 		const ping = setInterval(() => {
-			if (ws.readyState !== WebSocket$1.OPEN) return;
+			if (ws.readyState !== WebSocket.OPEN) return;
 			ws.send(JSON.stringify({ method: "ping" }));
 		}, 5e3);
 		ws.on("message", (data) => {
@@ -742,7 +742,7 @@ async function fetchOk(url, timeoutMs = 1500, init) {
 }
 async function withCdpSocket(wsUrl, fn, opts) {
 	const headers = getHeadersWithAuth(wsUrl, opts?.headers ?? {});
-	const ws = new WebSocket$1(wsUrl, {
+	const ws = new WebSocket(wsUrl, {
 		handshakeTimeout: typeof opts?.handshakeTimeoutMs === "number" && Number.isFinite(opts.handshakeTimeoutMs) ? Math.max(1, Math.floor(opts.handshakeTimeoutMs)) : 5e3,
 		...Object.keys(headers).length ? { headers } : {}
 	});
@@ -1636,7 +1636,7 @@ async function getChromeWebSocketUrl(cdpUrl, timeoutMs = 500) {
 async function canOpenWebSocket(wsUrl, timeoutMs = 800) {
 	return await new Promise((resolve) => {
 		const headers = getHeadersWithAuth(wsUrl);
-		const ws = new WebSocket$1(wsUrl, {
+		const ws = new WebSocket(wsUrl, {
 			handshakeTimeout: timeoutMs,
 			...Object.keys(headers).length ? { headers } : {}
 		});

package/dist/{command-registry-2hfSOaGL.js → command-registry-Bmzf59Qv.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { Qt as getPrimaryCommand, tn as hasHelpOrVersion } from "./entry.js";
-import { i as registerSubCliCommands, o as reparseProgramFromActionArgs } from "./register.subclis-Dv8bf2ox.js";
+import { i as registerSubCliCommands, o as reparseProgramFromActionArgs } from "./register.subclis-B16w8wxz.js";
 
 //#region src/cli/program/command-registry.ts
 var command_registry_exports = /* @__PURE__ */ __exportAll({
@@ -22,7 +22,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.setup-D3XQyELS.js")).registerSetupCommand(program);
+			(await import("./register.setup-DDMtRxcF.js")).registerSetupCommand(program);
 		}
 	},
 	{
@@ -32,7 +32,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.onboard-O0P6rCuX.js")).registerOnboardCommand(program);
+			(await import("./register.onboard-BjPPudfS.js")).registerOnboardCommand(program);
 		}
 	},
 	{
@@ -79,7 +79,7 @@ const coreEntries = [
 			}
 		],
 		register: async ({ program }) => {
-			(await import("./register.maintenance-CTF70v5h.js")).registerMaintenanceCommands(program);
+			(await import("./register.maintenance-81d4KKmA.js")).registerMaintenanceCommands(program);
 		}
 	},
 	{

package/dist/{completion-cli-TYU7Y_XZ.js → completion-cli-BM4kZs0m.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { Mt as pathExists, l as routeLogsToStderr, yt as resolveStateDir } from "./entry.js";
-import { n as getSubCliEntries, r as registerSubCliByName } from "./register.subclis-Dv8bf2ox.js";
-import { i as registerCoreCliByName, n as getCoreCliCommandNames } from "./command-registry-2hfSOaGL.js";
+import { n as getSubCliEntries, r as registerSubCliByName } from "./register.subclis-B16w8wxz.js";
+import { i as registerCoreCliByName, n as getCoreCliCommandNames } from "./command-registry-Bmzf59Qv.js";
 import { t as getProgramContext } from "./program-context-CGKRxOBU.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{completion-cli-BEO2AB41.js → completion-cli-CtUZzw-P.js}

@@ -2,7 +2,7 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { _ as resolveStateDir } from "./paths-By0XjHBk.js";
 import { f as pathExists } from "./utils-CTPsqyE_.js";
 import { i as routeLogsToStderr } from "./subsystem-CHbO_DkH.js";
-import { a as registerCoreCliByName, c as getSubCliEntries, l as registerSubCliByName, r as getCoreCliCommandNames, t as getProgramContext } from "./program-context-CCIGjsQL.js";
+import { a as registerCoreCliByName, c as getSubCliEntries, l as registerSubCliByName, r as getCoreCliCommandNames, t as getProgramContext } from "./program-context-CZYb4zB2.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";

package/dist/control-ui/css/style.css

@@ -987,6 +987,172 @@ body {
   box-shadow: 0 0 8px rgba(0, 212, 255, 0.18);
 }
 
+/* ── Phase 4: type-specific body renderers ───────────────────────── */
+
+/* Text + markdown: inherit from .symframe-card-body. Add minimal
+   markdown rules — most users will want headings and code blocks
+   readable but compact. */
+.symframe-body-markdown h1,
+.symframe-body-markdown h2,
+.symframe-body-markdown h3,
+.symframe-body-markdown h4 {
+  font-size: 12px;
+  font-weight: 600;
+  margin: 8px 0 4px;
+  color: var(--text);
+}
+.symframe-body-markdown p {
+  margin: 4px 0;
+}
+.symframe-body-markdown ul,
+.symframe-body-markdown ol {
+  padding-left: 18px;
+  margin: 4px 0;
+}
+.symframe-body-markdown code {
+  font-family: var(--font-mono);
+  font-size: 10px;
+  padding: 1px 4px;
+  background: rgba(255, 255, 255, 0.04);
+  border-radius: 3px;
+}
+.symframe-body-markdown pre {
+  background: rgba(0, 0, 0, 0.25);
+  border: 1px solid rgba(255, 255, 255, 0.05);
+  border-radius: 5px;
+  padding: 8px;
+  overflow-x: auto;
+  margin: 6px 0;
+}
+.symframe-body-markdown pre code {
+  background: transparent;
+  padding: 0;
+  font-size: 10px;
+}
+
+/* Code body — pre/code wrapper with hljs theme-friendly chrome. */
+.symframe-body-code {
+  background: rgba(0, 0, 0, 0.3);
+  border: 1px solid rgba(255, 255, 255, 0.06);
+  border-radius: 5px;
+  padding: 8px 10px;
+  margin: 0;
+  overflow-x: auto;
+  max-height: 320px;
+  overflow-y: auto;
+}
+.symframe-body-code code {
+  font-family: var(--font-mono);
+  font-size: 10px;
+  line-height: 1.45;
+  color: var(--text);
+  background: transparent;
+}
+
+/* Email-draft — From/To/Subject header rows + body. */
+.symframe-body-email {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+.symframe-email-row {
+  display: flex;
+  gap: 6px;
+  font-family: var(--font-mono);
+  font-size: 10px;
+  letter-spacing: 0.02em;
+  padding: 2px 0;
+  border-bottom: 1px dashed rgba(255, 255, 255, 0.05);
+}
+.symframe-email-row:last-of-type {
+  border-bottom: 1px solid rgba(255, 255, 255, 0.08);
+  margin-bottom: 4px;
+  padding-bottom: 4px;
+}
+.symframe-email-label {
+  flex: 0 0 auto;
+  color: var(--text-dim);
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  font-size: 9px;
+  min-width: 48px;
+  opacity: 0.7;
+}
+.symframe-email-value {
+  color: var(--text);
+  word-break: break-word;
+}
+.symframe-email-body {
+  font-family: var(--font-mono);
+  font-size: 11px;
+  line-height: 1.5;
+  color: var(--text);
+  white-space: pre-wrap;
+  word-break: break-word;
+  margin-top: 4px;
+}
+
+/* PDF embed */
+.symframe-body-pdf {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+.symframe-pdf-iframe {
+  width: 100%;
+  height: 280px;
+  border: 1px solid rgba(255, 255, 255, 0.08);
+  border-radius: 5px;
+  background: rgba(0, 0, 0, 0.2);
+}
+
+/* Audio + video shared chrome */
+.symframe-body-audio,
+.symframe-body-video {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+.symframe-audio,
+.symframe-video {
+  width: 100%;
+  border-radius: 5px;
+  background: rgba(0, 0, 0, 0.2);
+}
+.symframe-video {
+  max-height: 280px;
+  object-fit: contain;
+}
+
+/* Empty-media placeholder when url is missing */
+.symframe-body-empty {
+  font-family: var(--font-mono);
+  font-size: 10px;
+  color: var(--text-dim);
+  opacity: 0.6;
+  font-style: italic;
+}
+
+/* Download link — used by pdf/audio/video renderers */
+.symframe-download {
+  display: inline-block;
+  padding: 4px 8px;
+  border: 1px solid var(--glass-border);
+  border-radius: 4px;
+  font-family: var(--font-mono);
+  font-size: 10px;
+  letter-spacing: 0.04em;
+  color: var(--text-dim);
+  text-decoration: none;
+  transition: all 0.15s ease;
+  align-self: flex-start;
+}
+.symframe-download:hover {
+  border-color: var(--accent-cyan);
+  color: var(--accent-cyan);
+  background: rgba(0, 212, 255, 0.06);
+}
+
 /* ── Response Area ────────────────────────────────────────────────── */
 .response-area {
   position: fixed;

package/dist/control-ui/js/symframe.js

@@ -57,33 +57,261 @@
     countEl.textContent = total === 1 ? "1 card" : `${total} cards`;
   }
 
-  // Per-type renderers transform a raw card into HTML the body slot
-  // accepts. Phase 3 ships `text` (plain) and `markdown` (via the bundled
-  // marked.min.js). Future types (`code`, `email-draft`, `pdf`, etc.) plug
-  // in here without touching the rest of the registry.
+  // ── Per-type body renderers ──
+  // Each renderer takes a card and returns an HTMLElement (or
+  // DocumentFragment) that gets appended to the body slot. New types
+  // plug in by adding to the renderers map below — no other code path
+  // changes required.
+
+  function renderTextBody(card) {
+    const div = document.createElement("div");
+    div.className = "symframe-body-text";
+    if (card.bodyHtml) {
+      div.innerHTML = card.bodyHtml;
+    } else {
+      div.textContent = card.body || "";
+    }
+    return div;
+  }
+
+  function renderMarkdownBody(card) {
+    const div = document.createElement("div");
+    div.className = "symframe-body-markdown";
+    if (typeof window.marked?.parse === "function") {
+      div.innerHTML = window.marked.parse(card.body || "");
+    } else {
+      div.textContent = card.body || "";
+    }
+    return div;
+  }
+
+  function renderCodeBody(card) {
+    const pre = document.createElement("pre");
+    pre.className = "symframe-body-code";
+    const code = document.createElement("code");
+    if (card.language) {
+      code.classList.add(`language-${card.language}`);
+    }
+    code.textContent = card.body || "";
+    pre.appendChild(code);
+    // hljs is bundled as window.hljs via vendor/highlight.min.js. Best-effort
+    // highlight; if hljs throws (unknown language, etc.) the plain pre/code
+    // already renders fine.
+    if (typeof window.hljs?.highlightElement === "function") {
+      try {
+        window.hljs.highlightElement(code);
+      } catch (err) {
+        console.warn("[symframe] hljs.highlightElement failed:", err);
+      }
+    }
+    return pre;
+  }
+
+  function renderEmailDraftBody(card) {
+    const wrap = document.createElement("div");
+    wrap.className = "symframe-body-email";
+    const email = card.email || {};
+    const headerRows = [
+      ["From", email.from],
+      ["To", email.to],
+      ["Cc", email.cc],
+      ["Bcc", email.bcc],
+      ["Subject", email.subject],
+    ];
+    for (const [label, value] of headerRows) {
+      if (!value) {
+        continue;
+      }
+      const row = document.createElement("div");
+      row.className = "symframe-email-row";
+      const lbl = document.createElement("span");
+      lbl.className = "symframe-email-label";
+      lbl.textContent = `${label}:`;
+      const val = document.createElement("span");
+      val.className = "symframe-email-value";
+      val.textContent = String(value);
+      row.appendChild(lbl);
+      row.appendChild(val);
+      wrap.appendChild(row);
+    }
+    if (email.body) {
+      const body = document.createElement("div");
+      body.className = "symframe-email-body";
+      body.textContent = email.body;
+      wrap.appendChild(body);
+    }
+    return wrap;
+  }
+
+  function renderEmptyMedia(reason) {
+    const div = document.createElement("div");
+    div.className = "symframe-body-empty";
+    div.textContent = reason;
+    return div;
+  }
+
+  function renderPdfBody(card) {
+    if (!card.url) {
+      return renderEmptyMedia("(no url provided)");
+    }
+    const wrap = document.createElement("div");
+    wrap.className = "symframe-body-pdf";
+    const frame = document.createElement("iframe");
+    frame.src = card.url;
+    frame.className = "symframe-pdf-iframe";
+    frame.setAttribute("title", card.title || "PDF document");
+    wrap.appendChild(frame);
+    wrap.appendChild(buildDownloadLink(card.url, card.downloadName, "Download PDF"));
+    return wrap;
+  }
+
+  function renderAudioBody(card) {
+    if (!card.url) {
+      return renderEmptyMedia("(no url provided)");
+    }
+    const wrap = document.createElement("div");
+    wrap.className = "symframe-body-audio";
+    const audio = document.createElement("audio");
+    audio.controls = true;
+    audio.preload = "metadata";
+    audio.className = "symframe-audio";
+    if (card.mimeType) {
+      const source = document.createElement("source");
+      source.src = card.url;
+      source.type = card.mimeType;
+      audio.appendChild(source);
+    } else {
+      audio.src = card.url;
+    }
+    wrap.appendChild(audio);
+    wrap.appendChild(buildDownloadLink(card.url, card.downloadName, "Download"));
+    return wrap;
+  }
+
+  function renderVideoBody(card) {
+    if (!card.url) {
+      return renderEmptyMedia("(no url provided)");
+    }
+    const wrap = document.createElement("div");
+    wrap.className = "symframe-body-video";
+    const video = document.createElement("video");
+    video.controls = true;
+    video.preload = "metadata";
+    video.className = "symframe-video";
+    video.playsInline = true;
+    if (card.poster) {
+      video.poster = card.poster;
+    }
+    if (card.mimeType) {
+      const source = document.createElement("source");
+      source.src = card.url;
+      source.type = card.mimeType;
+      video.appendChild(source);
+    } else {
+      video.src = card.url;
+    }
+    wrap.appendChild(video);
+    wrap.appendChild(buildDownloadLink(card.url, card.downloadName, "Download"));
+    return wrap;
+  }
+
+  function buildDownloadLink(url, downloadName, label) {
+    const a = document.createElement("a");
+    a.href = url;
+    if (downloadName) {
+      a.download = downloadName;
+    } else {
+      a.setAttribute("download", "");
+    }
+    a.target = "_blank";
+    a.rel = "noopener noreferrer";
+    a.className = "symframe-download";
+    a.textContent = `⬇ ${label}`;
+    return a;
+  }
+
+  const renderers = {
+    text: renderTextBody,
+    markdown: renderMarkdownBody,
+    code: renderCodeBody,
+    "email-draft": renderEmailDraftBody,
+    pdf: renderPdfBody,
+    audio: renderAudioBody,
+    video: renderVideoBody,
+  };
+
   function renderBodyForType(card) {
     const type = card.type || "text";
-    if (type === "markdown" && typeof window.marked?.parse === "function") {
-      return { html: window.marked.parse(card.body || "") };
+    const renderer = renderers[type] || renderers.text;
+    return renderer(card);
+  }
+
+  // True iff the card has any body-shaped data — body, bodyHtml, or
+  // type-specific structured fields. Used to decide whether to render
+  // the body slot at all.
+  function hasBodyContent(card) {
+    if (card.body || card.bodyHtml) {
+      return true;
+    }
+    if (card.url) {
+      return true;
+    }
+    if (card.email && typeof card.email === "object") {
+      return true;
+    }
+    return false;
+  }
+
+  // Choose what `Copy` would copy for this card. Honors body/bodyHtml first,
+  // then type-specific shapes (email-draft renders a plain-text email;
+  // url-based media types copy the URL).
+  function resolveCopyTarget(card) {
+    if (card.body) {
+      return card.body;
     }
-    // Fallback: text body (escaped via textContent in caller) or trusted HTML.
     if (card.bodyHtml) {
-      return { html: card.bodyHtml };
+      return card.bodyHtml;
+    }
+    if (card.email && typeof card.email === "object") {
+      const lines = [];
+      if (card.email.from) {
+        lines.push(`From: ${card.email.from}`);
+      }
+      if (card.email.to) {
+        lines.push(`To: ${card.email.to}`);
+      }
+      if (card.email.cc) {
+        lines.push(`Cc: ${card.email.cc}`);
+      }
+      if (card.email.bcc) {
+        lines.push(`Bcc: ${card.email.bcc}`);
+      }
+      if (card.email.subject) {
+        lines.push(`Subject: ${card.email.subject}`);
+      }
+      if (card.email.body) {
+        lines.push("");
+        lines.push(card.email.body);
+      }
+      return lines.join("\n");
+    }
+    if (card.url) {
+      return card.url;
     }
-    return { text: card.body || "" };
+    return "";
   }
 
-  // Default Copy action when the card has a body and no explicit actions.
-  // Wraps card.body (the original text the producer pushed, not the
-  // rendered HTML) into a clipboard.writeText call.
+  // Default Copy action when the card has copyable content and no explicit
+  // actions. Custom actions take precedence — server-pushed cards or
+  // tool-pushed cards with their own buttons get those instead.
   function buildDefaultActions(card) {
     if (Array.isArray(card.actions) && card.actions.length > 0) {
       return card.actions;
     }
-    if (!card.body && !card.bodyHtml) {
+    const copyTarget = resolveCopyTarget(card);
+    if (!copyTarget) {
       return [];
     }
-    const copyTarget = card.body ?? card.bodyHtml ?? "";
     return [
       {
         label: "Copy",
@@ -133,15 +361,13 @@
     }
     el.appendChild(header);
 
-    // Body via type-specific renderer
-    if (card.bodyHtml || card.body) {
+    // Body via type-specific renderer (returns an Element)
+    if (hasBodyContent(card)) {
       const body = document.createElement("div");
       body.className = "symframe-card-body";
       const rendered = renderBodyForType(card);
-      if (rendered.html !== undefined) {
-        body.innerHTML = rendered.html;
-      } else {
-        body.textContent = rendered.text;
+      if (rendered) {
+        body.appendChild(rendered);
       }
       el.appendChild(body);
     }