@tonyclaw/agent-inspector 3.0.29 → 3.0.31

package/src/components/proxy-viewer/RawExportWarning.tsx

@@ -0,0 +1,77 @@
+import { type JSX } from "react";
+
+import { Button } from "../ui/button";
+import { DialogDescription, DialogHeader, DialogTitle } from "../ui/dialog";
+
+export const RAW_EXPORT_DIALOG_CLASS_NAME =
+  "w-[calc(100%-1rem)] border-warning/30 bg-popover text-popover-foreground sm:max-w-lg";
+
+export const RAW_EXPORT_RISK_ITEMS = [
+  {
+    label: "Headers",
+    detail: "request and response headers, including authorization or cookie values",
+  },
+  {
+    label: "Prompts",
+    detail: "system instructions, user prompts, model responses, and conversation history",
+  },
+  {
+    label: "Source content",
+    detail: "source code, file contents, tool inputs, and tool output",
+  },
+  {
+    label: "Secrets",
+    detail: "API keys, access tokens, credentials, and other sensitive values",
+  },
+] as const;
+
+export type RawExportWarningProps = {
+  onCancel: () => void;
+  onExportRedacted: () => void;
+  onConfirmRaw: () => void;
+};
+
+export function RawExportWarning({
+  onCancel,
+  onExportRedacted,
+  onConfirmRaw,
+}: RawExportWarningProps): JSX.Element {
+  return (
+    <>
+      <DialogHeader>
+        <DialogTitle>Export unredacted logs?</DialogTitle>
+        <DialogDescription>
+          Raw exports bypass Agent Inspector redaction and may expose sensitive captured data.
+        </DialogDescription>
+      </DialogHeader>
+      <div
+        role="alert"
+        className="rounded-md border border-warning/35 bg-warning/10 px-3 py-3 text-sm text-foreground"
+      >
+        <p className="font-medium">The raw archive may include:</p>
+        <ul className="mt-2 list-disc space-y-1 pl-5 text-xs leading-relaxed text-muted-foreground">
+          {RAW_EXPORT_RISK_ITEMS.map((item) => (
+            <li key={item.label}>
+              <span className="font-semibold text-foreground">{item.label}:</span> {item.detail}
+            </li>
+          ))}
+        </ul>
+        <p className="mt-3 text-xs leading-relaxed text-muted-foreground">
+          Only continue if you trust where this file will be stored and everyone it may be shared
+          with.
+        </p>
+      </div>
+      <div className="flex flex-col-reverse gap-2 sm:flex-row sm:justify-end">
+        <Button type="button" variant="outline" size="sm" onClick={onCancel}>
+          Cancel
+        </Button>
+        <Button type="button" variant="outline" size="sm" onClick={onExportRedacted}>
+          Export redacted instead
+        </Button>
+        <Button type="button" variant="destructive" size="sm" onClick={onConfirmRaw}>
+          Export raw data
+        </Button>
+      </div>
+    </>
+  );
+}

package/src/components/proxy-viewer/SessionLoadProgressBar.tsx

@@ -0,0 +1,61 @@
+import { type JSX } from "react";
+import { cn } from "../../lib/utils";
+
+export type SessionLoadProgress = {
+  label: string;
+  elapsedMs: number;
+  timeoutMs: number;
+  loadedLogs: number;
+  loadedPages: number;
+};
+
+function formatDurationSeconds(ms: number): string {
+  return `${Math.max(0, Math.ceil(ms / 1000)).toString()}s`;
+}
+
+export function SessionLoadProgressBar({
+  progress,
+}: {
+  progress: SessionLoadProgress;
+}): JSX.Element {
+  const elapsedRatio = Math.min(1, progress.elapsedMs / progress.timeoutMs);
+  const percent = Math.max(4, Math.round(elapsedRatio * 100));
+  const remainingMs = Math.max(0, progress.timeoutMs - progress.elapsedMs);
+  const nearTimeout = elapsedRatio >= 0.75;
+  const details = [
+    progress.loadedLogs > 0 ? `${progress.loadedLogs.toString()} logs` : null,
+    progress.loadedPages > 0
+      ? `${progress.loadedPages.toString()} page${progress.loadedPages === 1 ? "" : "s"}`
+      : null,
+    `${formatDurationSeconds(remainingMs)} before timeout`,
+  ].filter((item): item is string => item !== null);
+  const valueText = `${progress.label}: ${details.join(", ")}`;
+
+  return (
+    <div className="min-w-0 space-y-1 px-1 pb-1">
+      <div className="flex min-w-0 items-center justify-between gap-3 font-mono text-[10px] text-muted-foreground">
+        <span className="min-w-0 truncate">{progress.label}</span>
+        <span className={cn("shrink-0 tabular-nums", nearTimeout && "text-amber-300")}>
+          {details.join(" / ")}
+        </span>
+      </div>
+      <div
+        role="progressbar"
+        aria-label={progress.label}
+        aria-valuemin={0}
+        aria-valuemax={progress.timeoutMs}
+        aria-valuenow={Math.min(progress.elapsedMs, progress.timeoutMs)}
+        aria-valuetext={valueText}
+        className="h-1.5 overflow-hidden rounded-full bg-white/[0.06]"
+      >
+        <div
+          className={cn(
+            "h-full rounded-full transition-all duration-300 motion-reduce:transition-none",
+            nearTimeout ? "bg-amber-300/80" : "bg-cyan-300/70",
+          )}
+          style={{ width: `${percent.toString()}%` }}
+        />
+      </div>
+    </div>
+  );
+}

package/src/components/proxy-viewer/ThreadConnector.tsx

@@ -11,6 +11,8 @@ export type ThreadConnectorProps = {
   isTurnStart: boolean;
   /** True when this entry is the turn's only request. */
   isOnlyEntry?: boolean;
+  /** True when this is the latest request in a turn that has not reached a real boundary. */
+  isOpenTurnTail?: boolean;
   /** Seed for crab variant selection (0-11). */
   crabIndex?: number;
   /** When true the crab is clickable (collapse / expand a turn). */
@@ -42,6 +44,7 @@ export function ThreadConnector({
   isFirst,
   isTurnStart,
   isOnlyEntry = false,
+  isOpenTurnTail = false,
   crabIndex = 0,
   collapsible = false,
   onToggle,
@@ -123,6 +126,18 @@ export function ThreadConnector({
             )}
           />
         </span>
+      ) : isOpenTurnTail ? (
+        <span
+          title={isPending ? "Current end of open turn (processing)" : "Current end of open turn"}
+        >
+          <Crab
+            className={cn(
+              "size-3.5 text-cyan-300/85",
+              isRunning ? "animate-crab-crawl" : "animate-crab-appear",
+              "drop-shadow-[0_0_4px_rgba(103,232,249,0.4)]",
+            )}
+          />
+        </span>
       ) : isRunning ? (
         <span title="Processing">
           <Crab className={cn("size-3.5 text-amber-300/80", "animate-crab-crawl")} />
@@ -134,7 +149,7 @@ export function ThreadConnector({
       )}
 
       <div className="flex-1 flex justify-center min-h-0">
-        {!isBoundary && (
+        {!isBoundary && !isOpenTurnTail && (
           <div
             className={cn(
               "w-0.5 h-full",

package/src/components/proxy-viewer/TurnGroup.tsx

@@ -69,7 +69,7 @@ export const TurnGroup = memo(function TurnGroup({
   const isComplete = lastStop !== null ? isTurnBoundary(lastStop) : false;
   const isPending = entries[lastIdx]?.log.responseStatus === null;
   const isSingleLog = entries.length === 1;
-  const collapsible = isTurnCollapsible(entries.length, isComplete, isPending);
+  const collapsible = isTurnCollapsible(entries.length);
   const [collapsed, setCollapsed] = useState(false);
 
   // Auto-collapse when the turn finishes (transitions from incomplete to complete)
@@ -233,13 +233,23 @@ export const TurnGroup = memo(function TurnGroup({
             <div className="flex-1 flex justify-center min-h-0">
               <div className="w-px bg-muted-foreground/14 h-full" />
             </div>
-            {isComplete && (
+            {isComplete ? (
               <CollapsedCrab
                 className={cn(
                   "size-3.5 animate-crab-settle text-amber-400",
                   "drop-shadow-[0_0_4px_rgba(251,191,36,0.45)]",
                 )}
               />
+            ) : (
+              <span title="Current end of open turn" aria-label="Current end of open turn">
+                <CollapsedCrab
+                  className={cn(
+                    "size-3.5 text-cyan-300/85",
+                    isPending ? "animate-crab-crawl" : "animate-crab-appear",
+                    "drop-shadow-[0_0_4px_rgba(103,232,249,0.4)]",
+                  )}
+                />
+              </span>
             )}
           </div>
 
@@ -343,6 +353,7 @@ export const TurnGroup = memo(function TurnGroup({
                 isFirst={visibleIdx === 0}
                 isTurnStart={isTurnStart}
                 isOnlyEntry={isSingleLog}
+                isOpenTurnTail={visibleIdx === lastIdx && !isComplete}
                 crabIndex={log.id % 12}
                 collapsible={collapsible && isTurnStart}
                 onToggle={toggleCollapse}

package/src/components/proxy-viewer/accessibility.ts

@@ -0,0 +1,8 @@
+export function preferredScrollBehavior(reducedMotion: boolean): ScrollBehavior {
+  return reducedMotion ? "auto" : "smooth";
+}
+
+export function browserPrefersReducedMotion(): boolean {
+  if (typeof window === "undefined") return false;
+  return window.matchMedia("(prefers-reduced-motion: reduce)").matches;
+}

package/src/components/proxy-viewer/lazy.ts

@@ -10,6 +10,10 @@ export const LazyCompareDrawer = lazy(() =>
   import("./CompareDrawer").then((m) => ({ default: m.CompareDrawer })),
 );
 
+export const LazyInspectorPet = lazy(() =>
+  import("../inspector-pet/InspectorPet").then((m) => ({ default: m.InspectorPet })),
+);
+
 export const LazyReplayDialog = lazy(() =>
   import("./ReplayDialog").then((m) => ({ default: m.ReplayDialog })),
 );

package/src/components/proxy-viewer/liveConnectionState.ts

@@ -0,0 +1,158 @@
+export type LiveConnectionPhase =
+  | "connecting"
+  | "live"
+  | "reconnecting"
+  | "stale"
+  | "offline"
+  | "error";
+
+export type LiveConnectionState = {
+  status: LiveConnectionPhase;
+  lastSuccessAt: number | null;
+  retryCount: number;
+  errorMessage: string | null;
+};
+
+export type LiveConnectionEvent =
+  | { type: "connect-requested" }
+  | { type: "message-received"; at: number }
+  | { type: "connection-lost"; online: boolean; message: string }
+  | { type: "stale-timeout" }
+  | { type: "browser-offline" }
+  | { type: "stop-retrying" }
+  | { type: "recoverable-error"; message: string };
+
+export function createInitialLiveConnectionState(): LiveConnectionState {
+  return {
+    status: "connecting",
+    lastSuccessAt: null,
+    retryCount: 0,
+    errorMessage: null,
+  };
+}
+
+export function reduceLiveConnectionState(
+  state: LiveConnectionState,
+  event: LiveConnectionEvent,
+): LiveConnectionState {
+  switch (event.type) {
+    case "connect-requested":
+      return {
+        ...state,
+        status:
+          state.lastSuccessAt === null
+            ? "connecting"
+            : state.status === "stale"
+              ? "stale"
+              : "reconnecting",
+        errorMessage: null,
+      };
+    case "message-received":
+      return {
+        status: "live",
+        lastSuccessAt: event.at,
+        retryCount: 0,
+        errorMessage: null,
+      };
+    case "connection-lost": {
+      const retryCount = state.retryCount + 1;
+      if (!event.online) {
+        return {
+          ...state,
+          status: "offline",
+          retryCount,
+          errorMessage: "Browser is offline.",
+        };
+      }
+      return {
+        ...state,
+        status: state.lastSuccessAt === null ? "error" : "reconnecting",
+        retryCount,
+        errorMessage: event.message,
+      };
+    }
+    case "stale-timeout":
+      if (state.lastSuccessAt === null || state.status === "live" || state.status === "offline") {
+        return state;
+      }
+      return { ...state, status: "stale" };
+    case "browser-offline":
+      return {
+        ...state,
+        status: "offline",
+        errorMessage: "Browser is offline.",
+      };
+    case "stop-retrying":
+      return {
+        ...state,
+        status: "offline",
+        errorMessage: "Automatic live updates are paused.",
+      };
+    case "recoverable-error":
+      return {
+        ...state,
+        status: "error",
+        errorMessage: event.message,
+      };
+  }
+}
+
+export type LiveEmptyState =
+  | "connecting"
+  | "empty"
+  | "reconnecting"
+  | "stale"
+  | "offline"
+  | "error";
+
+export function resolveLiveEmptyState(state: LiveConnectionState | undefined): LiveEmptyState {
+  if (state === undefined || state.status === "live") return "empty";
+  return state.status;
+}
+
+export type LiveEmptyStateCopy = {
+  title: string;
+  description: string;
+  showConnectionCommands: boolean;
+};
+
+export function getLiveEmptyStateCopy(state: LiveEmptyState): LiveEmptyStateCopy {
+  switch (state) {
+    case "connecting":
+      return {
+        title: "Connecting to the live stream...",
+        description: "Waiting for the first successful initialization before checking for logs.",
+        showConnectionCommands: false,
+      };
+    case "empty":
+      return {
+        title: "No logs captured yet.",
+        description: "Connect an AI coding tool to capture its first request.",
+        showConnectionCommands: true,
+      };
+    case "reconnecting":
+      return {
+        title: "Reconnecting to live updates...",
+        description: "The stream was interrupted. Agent Inspector is retrying automatically.",
+        showConnectionCommands: false,
+      };
+    case "stale":
+      return {
+        title: "Live data is stale.",
+        description: "No logs are hidden; retry the connection to resume live updates.",
+        showConnectionCommands: false,
+      };
+    case "offline":
+      return {
+        title: "Live updates are offline.",
+        description: "Check the browser and Inspector connection, then retry.",
+        showConnectionCommands: false,
+      };
+    case "error":
+      return {
+        title: "Live updates could not initialize.",
+        description: "The error is recoverable. Retry without reloading the page.",
+        showConnectionCommands: false,
+      };
+  }
+}

package/src/components/proxy-viewer/proxyViewerLogic.ts

@@ -1,4 +1,5 @@
 import type { CapturedLog } from "../../contracts";
+import type { ExportMode } from "../../lib/export-logs";
 import type { CaptureMode, TimeDisplayFormat } from "../../lib/runtimeConfig";
 import { extractStopReason, type StopReason } from "../../lib/stopReason";
 import { formatTimestampRange } from "../../lib/timeDisplay";
@@ -23,6 +24,11 @@ export type ConversationLogs = {
   logs: CapturedLog[];
 };
 
+export const COPYABLE_COMMAND_CONTAINER_CLASS_NAME =
+  "flex w-full min-w-0 items-center gap-2 rounded-md border border-border/70 bg-muted/35 px-3 py-2 sm:w-auto sm:max-w-full";
+export const COPYABLE_COMMAND_TEXT_CLASS_NAME =
+  "m-0 min-w-0 flex-1 overflow-x-auto font-mono text-xs text-foreground sm:text-sm";
+
 export type SessionSlateStats = {
   status: SessionSlateStatus;
   statusLabel: string;
@@ -74,6 +80,10 @@ export function shouldShowRawExport(captureMode: CaptureMode): boolean {
   return captureMode === "full";
 }
 
+export function exportRequiresConfirmation(mode: ExportMode): boolean {
+  return mode === "raw";
+}
+
 export function getExportActionVisibility(
   captureMode: CaptureMode,
   logCount: number,

package/src/components/proxy-viewer/viewerState.ts

@@ -69,12 +69,8 @@ function responseMayContainToolTrace(log: CapturedLog, format: ResolvedLogFormat
   }
 }
 
-export function isTurnCollapsible(
-  entryCount: number,
-  isComplete: boolean,
-  isPending: boolean,
-): boolean {
-  return entryCount > 1 && isComplete && !isPending;
+export function isTurnCollapsible(entryCount: number): boolean {
+  return entryCount > 1;
 }
 
 export function buildTurnGroups(logs: CapturedLog[]): TurnGroupData[] {

package/src/components/ui/select.tsx

@@ -62,7 +62,7 @@ function SelectContent({
       <SelectPrimitive.Content
         data-slot="select-content"
         className={cn(
-          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 relative z-50 max-h-(--radix-select-content-available-height) min-w-[8rem] origin-(--radix-select-content-transform-origin) overflow-x-hidden overflow-y-auto rounded-md border shadow-md",
+          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 motion-reduce:data-[state=open]:animate-none motion-reduce:data-[state=closed]:animate-none relative z-50 max-h-(--radix-select-content-available-height) min-w-[8rem] origin-(--radix-select-content-transform-origin) overflow-x-hidden overflow-y-auto rounded-md border shadow-md",
           position === "popper" &&
             "data-[side=bottom]:translate-y-1 data-[side=left]:-translate-x-1 data-[side=right]:translate-x-1 data-[side=top]:-translate-y-1",
           className,

package/src/components/ui/tabs.tsx

@@ -61,9 +61,9 @@ function TabsTrigger({
     <TabsPrimitive.Trigger
       data-slot="tabs-trigger"
       className={cn(
-        "focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:outline-ring text-foreground/60 hover:text-foreground dark:text-muted-foreground dark:hover:text-foreground relative inline-flex h-[calc(100%-1px)] flex-1 items-center justify-center gap-1.5 rounded-md border border-transparent px-2 py-1 text-sm font-medium whitespace-nowrap transition-all group-data-[orientation=vertical]/tabs:w-full group-data-[orientation=vertical]/tabs:justify-start focus-visible:ring-[3px] focus-visible:outline-1 disabled:pointer-events-none disabled:opacity-50 group-data-[variant=default]/tabs-list:data-[state=active]:shadow-sm group-data-[variant=line]/tabs-list:data-[state=active]:shadow-none [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
-        "group-data-[variant=line]/tabs-list:bg-transparent group-data-[variant=line]/tabs-list:data-[state=active]:bg-transparent dark:group-data-[variant=line]/tabs-list:data-[state=active]:border-transparent dark:group-data-[variant=line]/tabs-list:data-[state=active]:bg-transparent",
-        "data-[state=active]:bg-background dark:data-[state=active]:text-foreground dark:data-[state=active]:border-input dark:data-[state=active]:bg-input/30 data-[state=active]:text-foreground",
+        "focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:outline-ring text-muted-foreground hover:text-foreground relative inline-flex h-[calc(100%-1px)] flex-1 items-center justify-center gap-1.5 rounded-md border border-transparent px-2 py-1 text-sm font-medium whitespace-nowrap transition-all group-data-[orientation=vertical]/tabs:w-full group-data-[orientation=vertical]/tabs:justify-start focus-visible:ring-[3px] focus-visible:outline-1 disabled:pointer-events-none disabled:opacity-50 group-data-[variant=default]/tabs-list:data-[state=active]:shadow-sm group-data-[variant=line]/tabs-list:data-[state=active]:shadow-none [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
+        "group-data-[variant=line]/tabs-list:bg-transparent group-data-[variant=line]/tabs-list:data-[state=active]:border-transparent group-data-[variant=line]/tabs-list:data-[state=active]:bg-transparent",
+        "data-[state=active]:border-border data-[state=active]:bg-background data-[state=active]:text-foreground",
         "after:bg-foreground after:absolute after:opacity-0 after:transition-opacity group-data-[orientation=horizontal]/tabs:after:inset-x-0 group-data-[orientation=horizontal]/tabs:after:bottom-[-5px] group-data-[orientation=horizontal]/tabs:after:h-0.5 group-data-[orientation=vertical]/tabs:after:inset-y-0 group-data-[orientation=vertical]/tabs:after:-right-1 group-data-[orientation=vertical]/tabs:after:w-0.5 group-data-[variant=line]/tabs-list:data-[state=active]:after:opacity-100",
         className,
       )}

package/src/components/ui/transient-toast.tsx

@@ -80,19 +80,20 @@ export function TransientToast({
       <div
         key={notice.id}
         className={cn(
-          "pointer-events-auto flex items-start gap-2 rounded-md border px-3 py-2 text-sm shadow-[0_18px_50px_rgba(0,0,0,0.45)] backdrop-blur",
-          isError
-            ? "border-red-400/30 bg-[#16090b]/95 text-red-100"
-            : "border-cyan-300/25 bg-[#071318]/95 text-cyan-100",
+          "pointer-events-auto flex items-start gap-2 rounded-md border bg-popover/95 px-3 py-2 text-sm text-popover-foreground shadow-[0_18px_50px_color-mix(in_oklch,var(--foreground)_16%,transparent)] backdrop-blur",
+          isError ? "border-status-danger/35" : "border-status-success/35",
         )}
       >
         <Icon
-          className={cn("mt-0.5 size-4 shrink-0", isError ? "text-red-300" : "text-cyan-200")}
+          className={cn(
+            "mt-0.5 size-4 shrink-0",
+            isError ? "text-status-danger" : "text-status-success",
+          )}
         />
         <div className="min-w-0 flex-1 break-words leading-5">{notice.message}</div>
         <button
           type="button"
-          className="inline-flex size-6 shrink-0 items-center justify-center rounded-md text-current/70 transition-colors hover:bg-white/10 hover:text-current"
+          className="inline-flex size-6 shrink-0 items-center justify-center rounded-md text-current/70 transition-colors hover:bg-white/10 hover:text-current focus-visible:ring-1 focus-visible:ring-current focus-visible:outline-none"
           aria-label="Dismiss notification"
           onClick={onDismiss}
         >

package/src/lib/apiClient.ts

@@ -5,6 +5,18 @@ const ApiErrorSchema = z.object({
   error: z.string(),
 });
 
+const MUTATION_METHODS = new Set(["POST", "PUT", "PATCH", "DELETE"]);
+
+export function withBrowserMutationProof(init?: RequestInit): RequestInit | undefined {
+  const method = init?.method?.toUpperCase();
+  if (method === undefined || !MUTATION_METHODS.has(method)) return init;
+  const headers = new Headers(init?.headers);
+  if (!headers.has("x-agent-inspector-csrf")) {
+    headers.set("x-agent-inspector-csrf", "1");
+  }
+  return { ...init, headers };
+}
+
 /**
  * Parse and validate a JSON response at the browser/server trust boundary.
  *
@@ -40,7 +52,7 @@ export async function fetchJson<T>(
   init?: RequestInit,
   errorFallback?: (response: Response) => string,
 ): Promise<T> {
-  const response = await fetch(input, init);
+  const response = await fetch(input, withBrowserMutationProof(init));
   if (!response.ok) {
     const fallback = errorFallback?.(response) ?? `Request failed with status ${response.status}`;
     throw new Error(await readApiError(response, fallback));
@@ -88,7 +100,10 @@ export async function fetchWithTimeout(
   }
 
   try {
-    return await fetch(input, { ...init, signal: controller.signal });
+    return await fetch(input, {
+      ...withBrowserMutationProof(init),
+      signal: controller.signal,
+    });
   } catch (error) {
     if (timedOut && error instanceof DOMException && error.name === "AbortError") {
       throw new ApiTimeoutError(timeoutMs);

package/src/lib/ecosystemContract.ts

@@ -61,6 +61,38 @@ export const EcosystemTaskActionSchema = z.enum([
   "recipe",
 ]);
 
+export const ECOSYSTEM_EXECUTION_CONFIRMATION_PHRASE = "RUN_LOCAL_COMMAND";
+
+export const EcosystemExecutionPlanSchema = z.object({
+  action: EcosystemTaskActionSchema,
+  targetId: z.string(),
+  targetName: z.string(),
+  command: z.string(),
+  source: z.string(),
+  timeoutMs: z.number().int().positive(),
+  scope: z.string(),
+});
+
+export const EcosystemExecutionConfirmationSchema = z.object({
+  nonce: z.string().uuid(),
+  phrase: z.literal(ECOSYSTEM_EXECUTION_CONFIRMATION_PHRASE),
+  expiresAt: z.string().datetime(),
+  plan: EcosystemExecutionPlanSchema,
+});
+
+export const EcosystemExecutionConfirmationResponseSchema = z.object({
+  confirmation: EcosystemExecutionConfirmationSchema,
+});
+
+export const EcosystemExecutionRequestSchema = z.discriminatedUnion("intent", [
+  z.object({ intent: z.literal("prepare") }),
+  z.object({
+    intent: z.literal("confirm"),
+    nonce: z.string().uuid(),
+    confirmation: z.literal(ECOSYSTEM_EXECUTION_CONFIRMATION_PHRASE),
+  }),
+]);
+
 export const EcosystemTaskStatusSchema = z.enum(["queued", "running", "succeeded", "failed"]);
 
 export const EcosystemTaskSchema = z.object({
@@ -92,5 +124,7 @@ export type EcosystemPackage = z.infer<typeof EcosystemPackageSchema>;
 export type EcosystemRunnerPreset = z.infer<typeof EcosystemRunnerPresetSchema>;
 export type EcosystemRecipe = z.infer<typeof EcosystemRecipeSchema>;
 export type EcosystemTaskAction = z.infer<typeof EcosystemTaskActionSchema>;
+export type EcosystemExecutionPlan = z.infer<typeof EcosystemExecutionPlanSchema>;
+export type EcosystemExecutionConfirmation = z.infer<typeof EcosystemExecutionConfirmationSchema>;
 export type EcosystemTaskStatus = z.infer<typeof EcosystemTaskStatusSchema>;
 export type EcosystemTask = z.infer<typeof EcosystemTaskSchema>;

package/src/lib/export-logs.ts

@@ -1,4 +1,3 @@
-import JSZip from "jszip";
 import type { CapturedLog } from "../contracts";
 import { fetchWithTimeout } from "./apiClient";
 import packageJson from "../../package.json";
@@ -171,6 +170,7 @@ export async function exportLogsAsZip(
   const limitMessage = exportLimitMessage(logs);
   if (limitMessage !== null) return { ok: false, message: limitMessage };
 
+  const { default: JSZip } = await import("jszip");
   const zip = new JSZip();
   const suffix = mode === "redacted" ? "redacted" : "raw";
   const streamingLogs = logs.filter((log) => log.streaming).slice(0, MAX_STREAMING_CHUNK_EXPORTS);