@turmind/halo 1.4.6 → 1.5.0-alpha

package/dist/index.js

@@ -1048,6 +1048,9 @@ var init_config = __esm({
     ENV_PATTERN2 = /<<([A-Z_][A-Z0-9_]*)>>/g;
     _wsSettingsCache = /* @__PURE__ */ new Map();
     config = {
+      // Goal entry points are retired, not the runtime. Internal/global-only, no UI:
+      // set general.goal_mode_enabled in ~/.halo/secrets/settings.yaml, then restart.
+      goalModeEnabled: settingsBool("general.goal_mode_enabled", false),
       server: {
         port: systemInt("HALO_PORT", "server.port", 9527),
         /** scrypt hash stored in `secrets/config.yaml`, set by `halo setup`.
@@ -1142,10 +1145,12 @@ var init_config = __esm({
       timeout: {
         shellExec: systemInt("HALO_SHELL_TIMEOUT", "timeout.shell_exec", 12e4),
         webFetch: systemInt("HALO_WEB_FETCH_TIMEOUT", "timeout.web_fetch", 1e4),
-        // Per model-call wall-clock cap. A bare fetch has no default timeout, so a
-        // half-open connection (server accepted but never sends bytes / sends no
-        // RST) hangs the await indefinitely. Bounds each callModel; on expiry the
-        // request aborts and the agent loop's retry takes over.
+        // Per model-call cap. A bare fetch has no default timeout, so a half-open
+        // connection (server accepted but never sends bytes / sends no RST) hangs
+        // the await indefinitely. Bounds each callModel; on expiry the request
+        // aborts and the agent loop's retry takes over. Streaming providers reset
+        // the timer on every chunk, so for them it is an idle timeout — a long but
+        // live stream is never cut off.
         modelRequest: systemInt("HALO_MODEL_TIMEOUT", "timeout.model_request", 30 * 6e4),
         sessionGrace: systemInt("HALO_SESSION_GRACE", "timeout.session_grace", 5 * 6e4),
         terminalGrace: systemInt("HALO_TERMINAL_GRACE", "timeout.terminal_grace", 5 * 6e4)
@@ -1402,7 +1407,7 @@ function classifyKind(msg, errName, httpStatus) {
   if (errName === "ThrottlingException" || httpStatus === 429 || msg.includes("throttl") || msg.includes("rate limit") || msg.includes("ThrottlingException") || msg.includes("ServiceUnavailableException") || msg.includes("API error 429")) {
     return "throttle";
   }
-  if (errName === "InternalServerException" || errName === "ModelTimeoutException" || errName === "ServiceUnavailableException" || httpStatus === 500 || httpStatus === 502 || httpStatus === 503 || httpStatus === 504 || httpStatus === 529 || httpStatus === 408) {
+  if (errName === "InternalServerException" || errName === "ModelTimeoutException" || errName === "ModelStreamErrorException" || errName === "ServiceUnavailableException" || httpStatus === 500 || httpStatus === 502 || httpStatus === 503 || httpStatus === 504 || httpStatus === 529 || httpStatus === 408) {
     return "server_error";
   }
   if (msg === "fetch failed" || msg === "Model request timed out" || msg.includes("http2 request did not get a response") || msg.includes("UND_ERR_HEADERS_TIMEOUT") || msg.includes("HeadersTimeoutError") || msg.includes("socket hang up") || msg.includes("ECONNRESET") || msg.includes("ECONNREFUSED") || msg.includes("ETIMEDOUT") || msg.includes("EAI_AGAIN")) {
@@ -1616,7 +1621,7 @@ function toolResultImages(content) {
   }
   return images.length > 0 ? [{ type: "text", text: "[Images from the tool results above]" }, ...images] : [];
 }
-var TOOL_ERROR_MARKER, TOOL_WARN_MARKER, MODEL_TIMEOUT_ERROR, AgentLoop;
+var TOOL_ERROR_MARKER, TOOL_WARN_MARKER, MODEL_TIMEOUT_ERROR, INTERRUPTED_REPLY_MARKER, AgentLoop;
 var init_agent_loop = __esm({
   "../server/dist/agents/agent-loop.js"() {
     "use strict";
@@ -1624,6 +1629,7 @@ var init_agent_loop = __esm({
     TOOL_ERROR_MARKER = "__TOOL_ERROR__";
     TOOL_WARN_MARKER = "__TOOL_WARN__";
     MODEL_TIMEOUT_ERROR = "Model request timed out";
+    INTERRUPTED_REPLY_MARKER = "\n\n[reply interrupted by the user here \u2014 the text above is what was shown before the cut]";
     AgentLoop = class {
       tools;
       messages = [];
@@ -1658,8 +1664,42 @@ var init_agent_loop = __esm({
           timer.unref?.();
           const callSignal = options?.cancelSignal ? AbortSignal.any([options.cancelSignal, timeoutController.signal]) : timeoutController.signal;
           let result;
+          let streamedText = "";
           try {
-            result = await this.callModel(callSignal);
+            const deltas = [];
+            let wake = null;
+            let settled = false;
+            const notify = () => {
+              if (wake) {
+                wake();
+                wake = null;
+              }
+            };
+            const call = this.callModel(callSignal, (d) => {
+              deltas.push(d);
+              timer.refresh();
+              notify();
+            });
+            call.then(() => {
+              settled = true;
+              notify();
+            }, () => {
+              settled = true;
+              notify();
+            });
+            while (!settled) {
+              if (deltas.length === 0)
+                await new Promise((r) => {
+                  wake = r;
+                });
+              while (deltas.length > 0) {
+                const d = deltas.shift();
+                if (d.type === "text_delta")
+                  streamedText += d.text;
+                yield { type: d.type, text: d.text };
+              }
+            }
+            result = await call;
           } catch (err) {
             if (timeoutController.signal.aborted && !options?.cancelSignal?.aborted) {
               throw new Error(MODEL_TIMEOUT_ERROR);
@@ -1667,9 +1707,12 @@ var init_agent_loop = __esm({
             throw err;
           } finally {
             clearTimeout(timer);
+            if (result === void 0 && options?.cancelSignal?.aborted && streamedText.length > 0) {
+              this.messages.push({ role: "assistant", content: [{ type: "text", text: streamedText + INTERRUPTED_REPLY_MARKER }] });
+            }
           }
           if (result.stopReason === "refusal") {
-            yield { type: "usage", usage: result.usage, durationMs: result.durationMs };
+            yield { type: "usage", usage: result.usage, durationMs: result.durationMs, ttftMs: result.ttftMs };
             yield { type: "stop", stopReason: "refusal", stopDetails: result.stopDetails };
             return;
           }
@@ -1688,7 +1731,8 @@ var init_agent_loop = __esm({
           yield {
             type: "usage",
             usage: result.usage,
-            durationMs: result.durationMs
+            durationMs: result.durationMs,
+            ttftMs: result.ttftMs
           };
           if (result.stopReason !== "tool_use") {
             yield { type: "stop", stopReason: result.stopReason };
@@ -2457,6 +2501,7 @@ function ensureHaloHome(haloHome2) {
   const globalDir2 = path8.join(haloHome2, "global");
   const secretsDir = path8.join(haloHome2, "secrets");
   fs7.mkdirSync(globalDir2, { recursive: true });
+  fs7.mkdirSync(path8.join(globalDir2, "extensions"), { recursive: true });
   fs7.mkdirSync(secretsDir, { recursive: true, mode: 448 });
   try {
     fs7.chmodSync(secretsDir, 448);
@@ -2573,7 +2618,7 @@ var init_init = __esm({
       path8.resolve(__dirname, "..", "bundled-docs"),
       path8.resolve(__dirname, "..", "..", "..", ".halo", "docs")
     ];
-    TEMPLATE_VERSION = 67;
+    TEMPLATE_VERSION = 74;
     VERSION_FILE = ".template-version";
     SKIP_NAMES = /* @__PURE__ */ new Set([".DS_Store", "schema.sql", "__pycache__", ".pytest_cache"]);
     BUILTIN_AGENT_IDS = /* @__PURE__ */ new Set([
@@ -2617,7 +2662,12 @@ var init_init = __esm({
       // root-prompt injection. Loaded on demand via `activate_skill('halo')`
       // when the user asks anything about Halo itself (config dirs, MD scopes,
       // doc lookup table). user-invocable: false — no `/halo` command.
-      "halo"
+      "halo",
+      // Canvas preview extensions: `/extension install|list|remove` manages
+      // `~/.halo/global/extensions/<id>/` via templates/ext.sh (download from
+      // halo-hub, unpack, pre-check, atomic replace). The server's root-dir
+      // watcher picks the change up — no endpoint call from the skill.
+      "extension"
     ]);
     BUNDLED_DOCS = [
       "guide/getting-started.md",
@@ -2773,7 +2823,7 @@ function buildSessionTools(sm, sessionId) {
       type: "object",
       properties: {
         agent_id: { type: "string", description: "The agent ID \u2014 must be one of the agents listed in your system prompt. Do not invent ids." },
-        message: { type: "string", description: "Task description / initial message for the agent" },
+        message: { type: "string", description: "The brief \u2014 all the worker will know. State: the goal and what done looks like (where the deliverable lives, which checks pass); decisions the user already made in this conversation (choices, rejected options, constraints \u2014 quote them when wording matters); what you already know (paths, line numbers, snippets, the pattern to copy \u2014 findings, not pointers); boundaries (files not to touch, whether commit / push / build / deploy is allowed, in-flight work to leave alone); the exact verification commands. One task per session." },
         system_prompt_context: { type: "string", description: "Optional background material prepended to the opening message BEFORE your task text \u2014 despite the name, it is NOT injected into the system prompt. Put here what frames the whole task: relevant file paths, prior findings, user-stated constraints, role framing. Keep one-shot task instructions in `message` itself so it stays a clean task statement. Note the cost: this text lives in the child's conversation history and is re-sent on every one of its model calls until compaction \u2014 include what the child genuinely needs throughout, not bulk material it could read from files instead." },
         working_dir: { type: "string", description: "Optional focus directory for the sub-agent (workspace-relative or absolute; must be inside the workspace). The platform bakes the directory-scoped INSTRUCTIONS.md found along the path from the workspace root down to this directory into the sub-agent's system prompt (present every turn), and tags its prompt with this focus. Does NOT change where tools run (shell/file tools still operate from the project root). Omit for project-root scope." },
         title: { type: "string", description: "Optional session title shown in the admin sidebar. When omitted, auto-generated from the task message." }
@@ -3019,7 +3069,7 @@ ${skillInfo}` : ""
 function buildContinueTaskTool(sm, sessionId) {
   return {
     name: "continue_task",
-    description: "Call this when your turn was started by an interruption (a user or parent message arrived while you were working) and the task you were doing is NOT finished yet. After your current reply ends, the session automatically resumes the interrupted task. Do NOT call it if the task is done, if the user told you to stop, or in a normal (uninterrupted) turn \u2014 it does nothing there. The flag lasts one turn: if you get interrupted again before resuming, call it again.",
+    description: "Call this when your turn was started by an interruption (a user or parent message arrived while you were working) and the task you were doing is NOT finished yet. After your current reply ends, the session automatically resumes the interrupted task. Do NOT call it if the task is done, if the user told you to stop, or in a normal (uninterrupted) turn \u2014 it does nothing there. The flag lasts one turn: if you get interrupted again before resuming, call it again. Write your reply to the interrupting message FIRST, then call this.",
     inputSchema: { type: "object", properties: {} },
     callback: async () => {
       switch (sm.requestSelfKick(sessionId)) {
@@ -4003,6 +4053,7 @@ var init_i18n = __esm({
       "agent.delete_usage": { zh: "\u7528\u6CD5\uFF1A/agent delete <\u540D\u79F0\u6216\u7F16\u53F7>", en: "Usage: /agent delete <name or number>" },
       "agent.delete_done": { zh: '\u{1F5D1} \u5DF2\u5220\u9664 agent "{name}"\uFF08{scope}\uFF09', en: '\u{1F5D1} Deleted agent "{name}" ({scope})' },
       // ── /goal verbs (goal mode) ──
+      "goal.disabled": { zh: "Goal \u6A21\u5F0F\u5DF2\u4E0B\u7EBF\u3002", en: "Goal mode is disabled." },
       "verb.goal.create": { zh: "\u5728\u5F53\u524D\u4F1A\u8BDD\u4E0A\u542F\u52A8 goal \u610F\u56FE\u5BF9\u8BDD", en: "Start goal intake on the current session" },
       "verb.goal.status": { zh: "\u67E5\u770B\u5F53\u524D goal \u7684\u8F6E\u6B21 / \u4E0A\u9650 / \u72B6\u6001", en: "Show the current goal's round / caps / state" },
       "verb.goal.pause": { zh: "\u6682\u505C goal\uFF08\u505C\u6B62 worker \u548C goal \u4F1A\u8BDD\uFF09", en: "Pause the goal (stops worker + goal session)" },
@@ -4052,8 +4103,23 @@ var init_registry = __esm({
       registerDescriptor(desc4) {
         this.descriptors.set(desc4.name, desc4);
       }
-      listDescriptors() {
-        return Array.from(this.descriptors.values()).filter((d) => !d.hidden);
+      listDescriptors(opts) {
+        return Array.from(this.descriptors.values()).filter((d) => opts?.includeHidden || !d.hidden);
+      }
+      /** Startup integrity checks include hidden commands: visibility is not routing. */
+      assertDispatchCommands(commands) {
+        const builtins = this.listDescriptors({ includeHidden: true }).filter((d) => d.source === "builtin");
+        const declared = new Set(builtins.map((d) => d.slashName));
+        const dispatched = new Set(commands);
+        const declaredServer = new Set(builtins.filter((d) => d.type === "server").map((d) => d.slashName));
+        const missingDispatch = [...declaredServer].filter((n) => !dispatched.has(n));
+        const orphanDispatch = [...dispatched].filter((n) => !declared.has(n));
+        if (missingDispatch.length > 0) {
+          throw new Error(`[Server] Command descriptors without a dispatch case: ${missingDispatch.join(", ")}. Either add a case in channels/shared/commands.ts dispatchCommand or change the descriptor type to 'client'.`);
+        }
+        if (orphanDispatch.length > 0) {
+          throw new Error(`[Server] Dispatch cases without a descriptor: ${orphanDispatch.join(", ")}. Add a registerDescriptor entry in commands/index.ts or remove the dispatch case.`);
+        }
       }
     };
   }
@@ -4068,6 +4134,7 @@ var init_commands = __esm({
   "../server/dist/commands/index.js"() {
     "use strict";
     init_registry();
+    init_config();
     commandRegistry = new CommandRegistry();
     commandRegistry.registerDescriptor({ name: "help", slashName: "/help", description: "Show available commands", type: "server", source: "builtin" });
     commandRegistry.registerDescriptor({ name: "session", slashName: "/session", description: "Manage sessions", type: "server", argHint: "<verb>", source: "builtin", verbs: [
@@ -4096,7 +4163,7 @@ var init_commands = __esm({
       { name: "create", desc: "Create a new agent" },
       { name: "update", desc: "Modify an existing agent" }
     ] });
-    commandRegistry.registerDescriptor({ name: "goal", slashName: "/goal", description: "Run a goal loop (judge + dispatch until done)", type: "server", argHint: "<verb>", source: "builtin", verbs: [
+    commandRegistry.registerDescriptor({ name: "goal", slashName: "/goal", description: "Run a goal loop (judge + dispatch until done)", type: "server", argHint: "<verb>", source: "builtin", hidden: !config.goalModeEnabled, verbs: [
       { name: "create", builtin: true, desc: "Start goal intake on the current session" },
       { name: "status", builtin: true, desc: "Show the current goal's round / caps / state" },
       { name: "pause", builtin: true, desc: "Pause the goal (stops worker + goal session)" },
@@ -4173,7 +4240,7 @@ async function getCommandSkillInfo(slashCommand, workspaceRoot) {
 }
 async function scanSkillDescriptors(workspaceRoot) {
   const entries = await scanSkillEntries(workspaceRoot);
-  const builtinSlashes = new Set(commandRegistry.listDescriptors().filter((d) => d.source === "builtin").map((d) => d.slashName));
+  const builtinSlashes = new Set(commandRegistry.listDescriptors({ includeHidden: true }).filter((d) => d.source === "builtin").map((d) => d.slashName));
   const claimed = new Set(builtinSlashes);
   const listed = [];
   for (const entry of entries) {
@@ -4409,6 +4476,9 @@ function wsEvoArchivedApplyZip(workspacePath, applyId) {
 function wsEvoHistoryDir(workspacePath, applyId) {
   return path15.join(wsEvoDir(workspacePath), "history", `apply-${applyId}`);
 }
+function globalExtensionsDir() {
+  return path15.join(globalDir(), "extensions");
+}
 function globalLogsDir() {
   return path15.join(globalDir(), "logs");
 }
@@ -5132,7 +5202,7 @@ async function dispatchCommand(ctx, command, arg, opts) {
     // Goal mode (docs/plans/loop-mode.md): all verbs are builtin (no backing
     // skill) — create/status/pause/resume/clear in SUBCOMMAND_ROUTES.
     case "/goal":
-      return routeObjectOrSkill(ctx, command, arg);
+      return config.goalModeEnabled ? routeObjectOrSkill(ctx, command, arg) : { text: t("goal.disabled", ctx.lang) };
     default:
       return routeObjectOrSkill(ctx, command, arg);
   }
@@ -5453,6 +5523,7 @@ var init_commands2 = __esm({
     init_i18n();
     init_skill_command();
     init_commands();
+    init_config();
     init_enqueue();
     init_goal_mode();
     ALIASES_FILE = path17.join(os.homedir(), ".halo", "global", "aliases.yaml");
@@ -5571,7 +5642,7 @@ ${report}`;
   const body = report.length > cap2 ? report.slice(0, cap2) + `
 
 [Report truncated: ${report.length} chars total. Use relay_read("${host.workspaceRoot}", "${session.id}") for the full text.]` : report;
-  const header = `[Relay report \xB7 workspace ${host.workspaceRoot} \xB7 session ${session.id}]`;
+  const header = `[Relay report \xB7 workspace ${host.workspaceRoot} \xB7 session ${session.id} \xB7 status: ${session.turnError ? "aborted" : "completed"}]`;
   const text6 = `${header}
 
 ${body}`;
@@ -5603,7 +5674,7 @@ async function deliverRelayInterim(host, sessionId, body) {
     console.error(`[Relay] caller workspace ${to.workspace} unreachable: ${err instanceof Error ? err.message : String(err)}`);
     return;
   }
-  const header = `[Relay interim report \xB7 workspace ${host.workspaceRoot} \xB7 session ${sessionId}] The session answered your latest message (below) and is now resuming the task that message interrupted \u2014 its final [Relay report] follows when that is done.`;
+  const header = `[Relay interim report \xB7 workspace ${host.workspaceRoot} \xB7 session ${sessionId} \xB7 status: still running] This is an interim reply \u2014 the session is still working; its final [Relay report] follows when done. Do not treat this as the result.`;
   const text6 = `${header}
 
 ${body}`;
@@ -5670,7 +5741,7 @@ function buildRelayTools(host, callerSessionId) {
   async function dispatch6(params, hard) {
     const registry2 = getRelayRegistry();
     if (!registry2)
-      return jsonErr2("relay is unavailable in this runtime (server only)");
+      return jsonErr2(RELAY_UNAVAILABLE);
     const resolved = resolveTarget(registry2, params.workspace);
     if (typeof resolved === "string")
       return resolved;
@@ -5705,7 +5776,7 @@ ${params.message}`;
       try {
         const registry2 = getRelayRegistry();
         if (!registry2)
-          return jsonErr2("relay is unavailable in this runtime (server only)");
+          return jsonErr2(RELAY_UNAVAILABLE);
         const resolved = resolveTarget(registry2, params.workspace);
         if (typeof resolved === "string")
           return resolved;
@@ -5732,7 +5803,7 @@ ${params.message}`;
       try {
         const registry2 = getRelayRegistry();
         if (!registry2)
-          return jsonErr2("relay is unavailable in this runtime (server only)");
+          return jsonErr2(RELAY_UNAVAILABLE);
         const resolved = resolveTarget(registry2, params.workspace);
         if (typeof resolved === "string")
           return resolved;
@@ -5757,7 +5828,7 @@ ${params.message}`;
       try {
         const registry2 = getRelayRegistry();
         if (!registry2)
-          return jsonErr2("relay is unavailable in this runtime (server only)");
+          return jsonErr2(RELAY_UNAVAILABLE);
         const resolved = resolveTarget(registry2, params.workspace ?? host.workspaceRoot);
         if (typeof resolved === "string")
           return resolved;
@@ -5779,7 +5850,7 @@ ${params.message}`;
   };
   return [relaySend, relayInterrupt, relayStop, relayRead, relayList];
 }
-var RELAY_CHANNEL_PREFIX, _registry, WORKSPACE_SESSION_PROPS;
+var RELAY_CHANNEL_PREFIX, _registry, RELAY_UNAVAILABLE, WORKSPACE_SESSION_PROPS;
 var init_relay = __esm({
   "../server/dist/agents/relay.js"() {
     "use strict";
@@ -5788,6 +5859,7 @@ var init_relay = __esm({
     init_commands2();
     RELAY_CHANNEL_PREFIX = "[channel: relay | from: ";
     _registry = null;
+    RELAY_UNAVAILABLE = "relay is not available in the CLI / TUI \u2014 it only runs inside `halo server`. This is permanent for this runtime, not a temporary outage: do not retry. Tell the user to send this request from the admin UI or an IM / Web channel connected to the server, or to open the target workspace directly with `halo tui -w <workspace path>`.";
     WORKSPACE_SESSION_PROPS = {
       workspace: { type: "string", description: "Absolute path of the target workspace on this server." },
       session_id: { type: "string", description: "Session id inside that workspace." }
@@ -5982,27 +6054,27 @@ var init_workspace = __esm({
       constructor(projectRoot) {
         this.projectRoot = projectRoot;
       }
-      async readFile(path70) {
-        const fullPath = this.validatePath(path70);
+      async readFile(path74) {
+        const fullPath = this.validatePath(path74);
         return readFile(fullPath, "utf-8");
       }
-      async writeFile(path70, content) {
-        const fullPath = this.validatePath(path70);
+      async writeFile(path74, content) {
+        const fullPath = this.validatePath(path74);
         const dir = resolve(fullPath, "..");
         await mkdir(dir, { recursive: true });
         await writeFile(fullPath, content, "utf-8");
       }
-      validatePath(path70) {
-        const fullPath = isAbsolute(path70) ? resolve(path70) : resolve(this.projectRoot, path70);
+      validatePath(path74) {
+        const fullPath = isAbsolute(path74) ? resolve(path74) : resolve(this.projectRoot, path74);
         const root = resolve(this.projectRoot);
         if (fullPath !== root && !fullPath.startsWith(root + sep)) {
-          throw new WorkspaceError(`Path "${path70}" is outside the workspace directory "${this.projectRoot}"`);
+          throw new WorkspaceError(`Path "${path74}" is outside the workspace directory "${this.projectRoot}"`);
         }
         try {
           const real = realpathSync(fullPath);
           const realRoot = realpathSync(root);
           if (real !== realRoot && !real.startsWith(realRoot + sep)) {
-            throw new WorkspaceError(`Path "${path70}" is outside the workspace directory "${this.projectRoot}"`);
+            throw new WorkspaceError(`Path "${path74}" is outside the workspace directory "${this.projectRoot}"`);
           }
         } catch (err) {
           if (err instanceof WorkspaceError)
@@ -6192,12 +6264,12 @@ var init_git_manager = __esm({
             const code = parts[0];
             const status = code[0];
             const isRenameOrCopy = status === "R" || status === "C";
-            const path70 = isRenameOrCopy ? parts[2] : parts[1];
-            if (!path70 || seen.has(path70))
+            const path74 = isRenameOrCopy ? parts[2] : parts[1];
+            if (!path74 || seen.has(path74))
               continue;
-            seen.add(path70);
+            seen.add(path74);
             files.push({
-              path: path70,
+              path: path74,
               status,
               from: isRenameOrCopy ? parts[1] : void 0
             });
@@ -6345,9 +6417,9 @@ var init_git_manager = __esm({
        *  empty for an added file or the root commit) and `modified` is the version
        *  at `commit` (empty for a deletion). The working-tree/staged path above is
        *  left entirely untouched (commit === undefined preserves existing behavior). */
-      async getFileDiff(path70, staged, from, commit) {
+      async getFileDiff(path74, staged, from, commit) {
         if (commit) {
-          const parentPath = from || path70;
+          const parentPath = from || path74;
           let original2 = "";
           try {
             original2 = await this.git.show([`${commit}^:${parentPath}`]);
@@ -6356,13 +6428,13 @@ var init_git_manager = __esm({
           }
           let modified2 = "";
           try {
-            modified2 = await this.git.show([`${commit}:${path70}`]);
+            modified2 = await this.git.show([`${commit}:${path74}`]);
           } catch {
             modified2 = "";
           }
           return { original: original2, modified: modified2 };
         }
-        const headPath = from || path70;
+        const headPath = from || path74;
         let original = "";
         try {
           original = await this.git.show([`HEAD:${headPath}`]);
@@ -6372,13 +6444,13 @@ var init_git_manager = __esm({
         let modified = "";
         if (staged) {
           try {
-            modified = await this.git.show([`:${path70}`]);
+            modified = await this.git.show([`:${path74}`]);
           } catch {
             modified = "";
           }
         } else {
           try {
-            modified = await this.workspace.readFile(path70);
+            modified = await this.workspace.readFile(path74);
           } catch {
             modified = "";
           }
@@ -6736,10 +6808,24 @@ function applyEvent(state, event) {
     initSubSessionLog(state, taskId, event.agentId ?? "", agentName, "");
   }
   switch (event.type) {
+    // Streaming chunks land in the turn blocks as they arrive; the whole
+    // `thinking` / `stream` that follows is stamped `streamed` and skipped so
+    // the text isn't appended twice. Deltas don't trigger a save — the usage /
+    // tool events that follow do.
+    case "thinking_delta":
+      appendThinking(getTarget(state, taskId), event.text ?? "");
+      break;
+    case "stream_delta":
+      appendStream(getTarget(state, taskId), event.text ?? "", agentName);
+      break;
     case "thinking":
+      if (event.streamed)
+        break;
       appendThinking(getTarget(state, taskId), event.text ?? "");
       break;
     case "stream":
+      if (event.streamed)
+        break;
       appendStream(getTarget(state, taskId), event.text ?? "", agentName);
       break;
     case "agent_start":
@@ -6826,9 +6912,8 @@ function applyEvent(state, event) {
       if (taskId) {
         const sub = state.subSessionLogs.get(taskId);
         if (sub) {
-          const turnId = sub.currentTurnId;
-          flushCompletedAssistantMessage(sub);
-          sub.messageLog.push(buildUsageMsg(event, agentName, taskId, turnId));
+          sub.messageLog.push(buildUsageMsg(event, agentName, taskId, sub.currentTurnId));
+          sub.currentTurnId = randomUUID();
           result.subSessionSave = taskId;
         }
       }
@@ -7147,15 +7232,15 @@ var init_session_ui_store = __esm({
       persistUIState(rootId, state, archive) {
         try {
           const projectPath = this.uiStateProjectPaths.get(rootId) ?? this.host.workspaceRoot;
-          const snapshot = createSaveSnapshot(state);
-          if (snapshot.length === 0)
+          const snapshot2 = createSaveSnapshot(state);
+          if (snapshot2.length === 0)
             return;
           const inMem = this.host.getSession(rootId);
           const row = inMem ? null : this.db.select().from(agentSessions).where(eq6(agentSessions.id, rootId)).get();
           this.host.persistSessionFile({
             sessionId: rootId,
             projectPath,
-            messages: snapshot,
+            messages: snapshot2,
             contextTokens: state.contextTokens,
             outputTokens: state.outputTokens,
             agentId: inMem?.agentId ?? row?.agentId,
@@ -7676,8 +7761,236 @@ var init_session_query_store = __esm({
   }
 });
 
+// ../server/dist/agents/sse.js
+async function* readSseJson(body) {
+  const reader = body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      buffer = (buffer + decoder.decode(value, { stream: true })).replace(/\r\n/g, "\n");
+      let sep2;
+      while ((sep2 = buffer.indexOf("\n\n")) !== -1) {
+        const payload2 = frameData(buffer.slice(0, sep2));
+        buffer = buffer.slice(sep2 + 2);
+        if (payload2 !== void 0)
+          yield JSON.parse(payload2);
+      }
+    }
+    const payload = frameData((buffer + decoder.decode()).replace(/\r\n/g, "\n"));
+    if (payload !== void 0)
+      yield JSON.parse(payload);
+  } finally {
+    reader.releaseLock();
+  }
+}
+function frameData(frame) {
+  const data = [];
+  for (const line of frame.split("\n")) {
+    if (!line.startsWith("data:"))
+      continue;
+    data.push(line.slice(line[5] === " " ? 6 : 5));
+  }
+  if (data.length === 0)
+    return void 0;
+  const payload = data.join("\n");
+  return payload === "[DONE]" ? void 0 : payload;
+}
+var init_sse = __esm({
+  "../server/dist/agents/sse.js"() {
+    "use strict";
+  }
+});
+
+// ../server/dist/agents/anthropic-stream.js
+async function fetchAnthropicStream(opts) {
+  const { tag } = opts;
+  const startTime = Date.now();
+  const res = await fetch(opts.url, {
+    method: "POST",
+    signal: opts.signal,
+    headers: { "content-type": "application/json", ...opts.headers },
+    body: JSON.stringify({ ...opts.body, stream: true })
+  });
+  if (!res.ok) {
+    const raw = await res.text();
+    let err;
+    try {
+      err = JSON.parse(raw);
+    } catch {
+      throw new Error(`[${tag}] non-JSON response (status=${res.status}): ${raw.slice(0, 200)}`);
+    }
+    throw new Error(`[${tag}] ${res.status} ${err.error?.type ?? "?"}: ${err.error?.message ?? raw.slice(0, 200)}`);
+  }
+  if (!res.body)
+    throw new Error(`[${tag}] empty response body`);
+  const acc = new AnthropicStreamAccumulator(startTime, opts.onDelta);
+  for await (const ev of readSseJson(res.body)) {
+    if (ev.type === "error") {
+      throw new Error(`[${tag}] ${SSE_ERROR_STATUS[ev.error?.type ?? ""] ?? "?"} ${ev.error?.type ?? "?"}: ${ev.error?.message ?? ""}`);
+    }
+    acc.push(ev);
+  }
+  if (opts.signal?.aborted)
+    throw new DOMException("Model call aborted", "AbortError");
+  return acc.finish();
+}
+var AnthropicStreamAccumulator, SSE_ERROR_STATUS;
+var init_anthropic_stream = __esm({
+  "../server/dist/agents/anthropic-stream.js"() {
+    "use strict";
+    init_sse();
+    AnthropicStreamAccumulator = class {
+      startTime;
+      onDelta;
+      blocks = /* @__PURE__ */ new Map();
+      /** Block indices in arrival order — `assistantBlocks` must keep wire order. */
+      order = [];
+      stopReason;
+      stopDetails;
+      inputTokens = 0;
+      outputTokens = 0;
+      cacheReadTokens = 0;
+      cacheWriteTokens = 0;
+      invocationMetrics;
+      firstDeltaAt;
+      constructor(startTime, onDelta) {
+        this.startTime = startTime;
+        this.onDelta = onDelta;
+      }
+      push(event) {
+        switch (event.type) {
+          case "message_start": {
+            const u = event.message?.usage;
+            this.inputTokens = u?.input_tokens ?? 0;
+            this.cacheReadTokens = u?.cache_read_input_tokens ?? 0;
+            this.cacheWriteTokens = u?.cache_creation_input_tokens ?? 0;
+            break;
+          }
+          case "content_block_start": {
+            const cb = event.content_block;
+            const index = event.index ?? this.order.length;
+            if (!cb)
+              break;
+            if (cb.type === "text")
+              this.open(index, { type: "text", text: "" });
+            else if (cb.type === "thinking")
+              this.open(index, { type: "thinking", thinking: "" });
+            else if (cb.type === "tool_use")
+              this.open(index, { type: "tool_use", id: cb.id ?? "", name: cb.name ?? "", partialJson: "" });
+            break;
+          }
+          case "content_block_delta": {
+            const d = event.delta;
+            if (!d)
+              break;
+            if (this.firstDeltaAt === void 0)
+              this.firstDeltaAt = Date.now();
+            const block = this.blocks.get(event.index ?? -1);
+            if (d.type === "text_delta" && block?.type === "text") {
+              block.text += d.text ?? "";
+              if (d.text)
+                this.onDelta?.({ type: "text_delta", text: d.text });
+            } else if (d.type === "thinking_delta" && block?.type === "thinking") {
+              block.thinking += d.thinking ?? "";
+              if (d.thinking)
+                this.onDelta?.({ type: "thinking_delta", text: d.thinking });
+            } else if (d.type === "input_json_delta" && block?.type === "tool_use") {
+              block.partialJson += d.partial_json ?? "";
+            }
+            break;
+          }
+          case "message_delta": {
+            if (event.delta?.stop_reason)
+              this.stopReason = event.delta.stop_reason;
+            if (event.delta?.stop_details) {
+              this.stopDetails = {
+                category: event.delta.stop_details.category ?? null,
+                explanation: event.delta.stop_details.explanation ?? null
+              };
+            }
+            const u = event.usage;
+            if (typeof u?.output_tokens === "number")
+              this.outputTokens = u.output_tokens;
+            if (typeof u?.input_tokens === "number")
+              this.inputTokens = u.input_tokens;
+            if (typeof u?.cache_read_input_tokens === "number")
+              this.cacheReadTokens = u.cache_read_input_tokens;
+            if (typeof u?.cache_creation_input_tokens === "number")
+              this.cacheWriteTokens = u.cache_creation_input_tokens;
+            break;
+          }
+          case "message_stop":
+            this.invocationMetrics = event["amazon-bedrock-invocationMetrics"];
+            break;
+        }
+      }
+      /** Build the loop-facing result. Call once, after the stream has ended. */
+      finish() {
+        let text6 = "";
+        let thinking = "";
+        const toolCalls = [];
+        const assistantBlocks = [];
+        for (const index of this.order) {
+          const block = this.blocks.get(index);
+          if (block.type === "text") {
+            if (!block.text)
+              continue;
+            text6 += block.text;
+            assistantBlocks.push({ type: "text", text: block.text });
+          } else if (block.type === "thinking") {
+            thinking += block.thinking;
+          } else {
+            const input = JSON.parse(block.partialJson || "{}");
+            toolCalls.push({ id: block.id, name: block.name, input });
+            assistantBlocks.push({ type: "tool_use", id: block.id, name: block.name, input });
+          }
+        }
+        const inputTokens = this.inputTokens || (this.invocationMetrics?.inputTokenCount ?? 0);
+        const outputTokens = this.outputTokens || (this.invocationMetrics?.outputTokenCount ?? 0);
+        return {
+          assistantBlocks,
+          stopReason: this.stopReason ?? "end_turn",
+          ...this.stopDetails ? { stopDetails: this.stopDetails } : {},
+          text: text6,
+          thinking,
+          toolCalls,
+          usage: {
+            inputTokens,
+            outputTokens,
+            totalTokens: inputTokens + outputTokens,
+            ...this.cacheReadTokens ? { cacheReadInputTokens: this.cacheReadTokens } : {},
+            ...this.cacheWriteTokens ? { cacheWriteInputTokens: this.cacheWriteTokens } : {}
+          },
+          durationMs: Date.now() - this.startTime,
+          ...this.firstDeltaAt !== void 0 ? { ttftMs: this.firstDeltaAt - this.startTime } : {}
+        };
+      }
+      open(index, block) {
+        this.blocks.set(index, block);
+        this.order.push(index);
+      }
+    };
+    SSE_ERROR_STATUS = {
+      invalid_request_error: 400,
+      authentication_error: 401,
+      billing_error: 402,
+      permission_error: 403,
+      not_found_error: 404,
+      request_too_large: 413,
+      rate_limit_error: 429,
+      api_error: 500,
+      timeout_error: 504,
+      overloaded_error: 529
+    };
+  }
+});
+
 // ../server/dist/agents/bedrock-agent.js
-import { BedrockRuntimeClient, InvokeModelCommand } from "@aws-sdk/client-bedrock-runtime";
+import { BedrockRuntimeClient, InvokeModelWithResponseStreamCommand } from "@aws-sdk/client-bedrock-runtime";
 function effortToBudget(effort, maxTokens) {
   const table = {
     low: 2048,
@@ -7702,6 +8015,7 @@ var init_bedrock_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_anthropic_stream();
     BedrockAgent = class extends AgentLoop {
       client;
       config;
@@ -7712,10 +8026,10 @@ var init_bedrock_agent = __esm({
         const region = extractRegionFromEndpoint(config2.endpoint);
         this.client = new BedrockRuntimeClient({ region, endpoint: config2.endpoint, ...creds });
       }
-      async callModel(signal) {
+      async callModel(signal, onDelta) {
         const body = this.buildRequestBody();
         const startTime = Date.now();
-        const command = new InvokeModelCommand({
+        const command = new InvokeModelWithResponseStreamCommand({
           modelId: this.config.modelId,
           contentType: "application/json",
           accept: "application/json",
@@ -7724,45 +8038,15 @@ var init_bedrock_agent = __esm({
         const response = await this.client.send(command, {
           abortSignal: signal
         });
-        const durationMs = Date.now() - startTime;
-        const raw = new TextDecoder().decode(response.body);
-        const msg = JSON.parse(raw);
-        let text6 = "";
-        let thinking = "";
-        const toolCalls = [];
-        const assistantBlocks = [];
-        for (const block of msg.content) {
-          if (block.type === "text" && block.text) {
-            text6 += block.text;
-            assistantBlocks.push({ type: "text", text: block.text });
-          } else if (block.type === "thinking" && block.thinking) {
-            thinking += block.thinking;
-          } else if (block.type === "tool_use") {
-            toolCalls.push({ id: block.id, name: block.name, input: block.input ?? {} });
-            assistantBlocks.push({ type: "tool_use", id: block.id, name: block.name, input: block.input ?? {} });
-          }
+        const acc = new AnthropicStreamAccumulator(startTime, onDelta);
+        const decoder = new TextDecoder();
+        for await (const chunk of response.body ?? []) {
+          if (chunk.chunk?.bytes)
+            acc.push(JSON.parse(decoder.decode(chunk.chunk.bytes)));
         }
-        const u = msg.usage;
-        const inputTokens = u?.input_tokens ?? 0;
-        const outputTokens = u?.output_tokens ?? 0;
-        const cacheReadTokens = u?.cache_read_input_tokens ?? 0;
-        const cacheWriteTokens = u?.cache_creation_input_tokens ?? 0;
-        return {
-          assistantBlocks,
-          stopReason: msg.stop_reason ?? "end_turn",
-          ...msg.stop_details ? { stopDetails: { category: msg.stop_details.category ?? null, explanation: msg.stop_details.explanation ?? null } } : {},
-          text: text6,
-          thinking,
-          toolCalls,
-          usage: {
-            inputTokens,
-            outputTokens,
-            totalTokens: inputTokens + outputTokens,
-            ...cacheReadTokens ? { cacheReadInputTokens: cacheReadTokens } : {},
-            ...cacheWriteTokens ? { cacheWriteInputTokens: cacheWriteTokens } : {}
-          },
-          durationMs
-        };
+        if (signal?.aborted)
+          throw new DOMException("Model call aborted", "AbortError");
+        return acc.finish();
       }
       /** Build Anthropic Messages API request body */
       buildRequestBody() {
@@ -7828,6 +8112,107 @@ var init_bedrock_agent = __esm({
   }
 });
 
+// ../server/dist/agents/openai-chat-stream.js
+async function fetchChatCompletionStream(opts) {
+  const { tag } = opts;
+  const startTime = Date.now();
+  const res = await fetch(opts.url, {
+    method: "POST",
+    signal: opts.signal,
+    headers: { "Content-Type": "application/json", ...opts.headers },
+    body: JSON.stringify({ ...opts.body, stream: true, stream_options: { include_usage: true } })
+  });
+  if (!res.ok) {
+    const errText2 = await res.text().catch(() => "");
+    throw new Error(`[${tag}] API error ${res.status}: ${errText2}`);
+  }
+  if (!res.body)
+    throw new Error(`[${tag}] empty response body`);
+  const acc = new ChatCompletionAccumulator(startTime, opts.onDelta);
+  for await (const chunk of readSseJson(res.body)) {
+    if (chunk.error) {
+      throw new Error(`[${tag}] API error in stream: ${JSON.stringify(chunk.error).slice(0, 300)}`);
+    }
+    acc.push(chunk);
+  }
+  if (opts.signal?.aborted)
+    throw new DOMException("Model call aborted", "AbortError");
+  return acc.finish();
+}
+var ChatCompletionAccumulator;
+var init_openai_chat_stream = __esm({
+  "../server/dist/agents/openai-chat-stream.js"() {
+    "use strict";
+    init_sse();
+    ChatCompletionAccumulator = class {
+      startTime;
+      onDelta;
+      content = "";
+      reasoning = "";
+      toolCalls = [];
+      finishReason;
+      usage;
+      firstDeltaAt;
+      constructor(startTime, onDelta) {
+        this.startTime = startTime;
+        this.onDelta = onDelta;
+      }
+      push(chunk) {
+        if (chunk.usage)
+          this.usage = chunk.usage;
+        const choice = chunk.choices?.[0];
+        if (!choice || typeof choice.index === "number" && choice.index !== 0)
+          return;
+        if (choice.finish_reason)
+          this.finishReason = choice.finish_reason;
+        const d = choice.delta;
+        if (!d)
+          return;
+        if (typeof d.content === "string" && d.content !== "") {
+          this.markFirstDelta();
+          this.content += d.content;
+          this.onDelta?.({ type: "text_delta", text: d.content });
+        }
+        const reasoning = d.reasoning_content ?? d.reasoning;
+        if (typeof reasoning === "string" && reasoning !== "") {
+          this.markFirstDelta();
+          this.reasoning += reasoning;
+          this.onDelta?.({ type: "thinking_delta", text: reasoning });
+        }
+        for (const tc of d.tool_calls ?? []) {
+          this.markFirstDelta();
+          const slot = tc.index ?? (tc.id ? this.toolCalls.length : Math.max(this.toolCalls.length - 1, 0));
+          let call = this.toolCalls[slot];
+          if (!call) {
+            call = { id: tc.id ?? "", type: "function", function: { name: tc.function?.name ?? "", arguments: "" } };
+            this.toolCalls[slot] = call;
+          }
+          if (tc.function?.name && !call.function.name)
+            call.function.name = tc.function.name;
+          call.function.arguments += tc.function?.arguments ?? "";
+        }
+      }
+      /** Build the agent-facing result. Call once, after the stream has ended. */
+      finish() {
+        return {
+          message: {
+            ...this.content ? { content: this.content } : {},
+            ...this.reasoning ? { reasoning_content: this.reasoning } : {},
+            ...this.toolCalls.length > 0 ? { tool_calls: this.toolCalls.filter(Boolean) } : {}
+          },
+          finishReason: this.finishReason,
+          usage: this.usage,
+          ...this.firstDeltaAt !== void 0 ? { ttftMs: this.firstDeltaAt - this.startTime } : {}
+        };
+      }
+      markFirstDelta() {
+        if (this.firstDeltaAt === void 0)
+          this.firstDeltaAt = Date.now();
+      }
+    };
+  }
+});
+
 // ../server/dist/agents/deepseek-agent.js
 function safeParse(json) {
   try {
@@ -7842,13 +8227,14 @@ var init_deepseek_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_openai_chat_stream();
     DeepSeekAgent = class extends AgentLoop {
       config;
       constructor(config2) {
         super(config2.tools);
         this.config = config2;
       }
-      async callModel(signal) {
+      async callModel(signal, onDelta) {
         const url = this.config.endpoint.replace(/\/+$/, "") + "/chat/completions";
         const startTime = Date.now();
         const messages2 = this.buildMessages();
@@ -7856,7 +8242,6 @@ var init_deepseek_agent = __esm({
         const body = {
           model: this.config.modelId,
           messages: messages2,
-          stream: false,
           max_completion_tokens: this.config.maxTokens ?? resolveMaxOutputTokens(this.config.modelId),
           ...tools.length > 0 ? { tools } : {}
         };
@@ -7865,24 +8250,14 @@ var init_deepseek_agent = __esm({
         } else {
           body.thinking = { type: "enabled" };
         }
-        const response = await fetch(url, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${this.config.apiKey}`
-          },
-          body: JSON.stringify(body),
-          signal
+        const { message: msg, finishReason, usage: rawUsage, ttftMs } = await fetchChatCompletionStream({
+          url,
+          headers: { "Authorization": `Bearer ${this.config.apiKey}` },
+          body,
+          signal,
+          onDelta,
+          tag: "DeepSeekAgent"
         });
-        if (!response.ok) {
-          const errText2 = await response.text().catch(() => "");
-          throw new Error(`[DeepSeekAgent] API error ${response.status}: ${errText2}`);
-        }
-        const data = await response.json();
-        const choices = data.choices;
-        const choice = choices?.[0];
-        const msg = choice?.message;
-        const finishReason = choice?.finish_reason;
         let text6 = "";
         let thinking = "";
         const toolCalls = [];
@@ -7914,7 +8289,7 @@ var init_deepseek_agent = __esm({
           assistantBlocks.push({ type: "text", text: text6 });
         }
         const stopReason = finishReason === "tool_calls" ? "tool_use" : finishReason === "length" ? "max_tokens" : "end_turn";
-        const usage = data.usage;
+        const usage = rawUsage;
         const inputTokens = usage?.prompt_tokens ?? 0;
         const outputTokens = usage?.completion_tokens ?? 0;
         const cacheHitTokens = usage?.prompt_cache_hit_tokens ?? 0;
@@ -7930,7 +8305,8 @@ var init_deepseek_agent = __esm({
             totalTokens: inputTokens - cacheHitTokens + outputTokens,
             ...cacheHitTokens ? { cacheReadInputTokens: cacheHitTokens } : {}
           },
-          durationMs: Date.now() - startTime
+          durationMs: Date.now() - startTime,
+          ttftMs
         };
       }
       buildMessages() {
@@ -8047,13 +8423,14 @@ var init_kimi_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_openai_chat_stream();
     KimiAgent = class extends AgentLoop {
       config;
       constructor(config2) {
         super(config2.tools);
         this.config = config2;
       }
-      async callModel(signal) {
+      async callModel(signal, onDelta) {
         const url = this.config.endpoint.replace(/\/+$/, "") + "/chat/completions";
         const startTime = Date.now();
         const messages2 = this.buildMessages();
@@ -8061,7 +8438,6 @@ var init_kimi_agent = __esm({
         const body = {
           model: this.config.modelId,
           messages: messages2,
-          stream: false,
           max_completion_tokens: this.config.maxTokens ?? resolveMaxOutputTokens(this.config.modelId),
           ...tools.length > 0 ? { tools } : {},
           prompt_cache_key: this.config.cacheKey ?? void 0
@@ -8075,24 +8451,14 @@ var init_kimi_agent = __esm({
             body.thinking = { type: "disabled" };
           }
         }
-        const response = await fetch(url, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${this.config.apiKey}`
-          },
-          body: JSON.stringify(body),
-          signal
+        const { message: msg, finishReason, usage: rawUsage, ttftMs } = await fetchChatCompletionStream({
+          url,
+          headers: { "Authorization": `Bearer ${this.config.apiKey}` },
+          body,
+          signal,
+          onDelta,
+          tag: "KimiAgent"
         });
-        if (!response.ok) {
-          const errText2 = await response.text().catch(() => "");
-          throw new Error(`[KimiAgent] API error ${response.status}: ${errText2}`);
-        }
-        const data = await response.json();
-        const choices = data.choices;
-        const choice = choices?.[0];
-        const msg = choice?.message;
-        const finishReason = choice?.finish_reason;
         let text6 = "";
         let thinking = "";
         const toolCalls = [];
@@ -8124,7 +8490,7 @@ var init_kimi_agent = __esm({
           assistantBlocks.push({ type: "text", text: text6 });
         }
         const stopReason = finishReason === "tool_calls" ? "tool_use" : finishReason === "length" ? "max_tokens" : "end_turn";
-        const usage = data.usage;
+        const usage = rawUsage;
         const inputTokens = usage?.prompt_tokens ?? 0;
         const outputTokens = usage?.completion_tokens ?? 0;
         const cachedTokens = usage?.cached_tokens ?? 0;
@@ -8140,7 +8506,8 @@ var init_kimi_agent = __esm({
             totalTokens: inputTokens - cachedTokens + outputTokens,
             ...cachedTokens ? { cacheReadInputTokens: cachedTokens } : {}
           },
-          durationMs: Date.now() - startTime
+          durationMs: Date.now() - startTime,
+          ttftMs
         };
       }
       buildMessages() {
@@ -8260,72 +8627,25 @@ var init_minimax_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_anthropic_stream();
     MiniMaxAgent = class extends AgentLoop {
       config;
       constructor(config2) {
         super(config2.tools);
         this.config = config2;
       }
-      async callModel(signal) {
-        const url = `${this.config.endpoint.replace(/\/$/, "")}/v1/messages`;
-        const body = this.buildRequestBody();
-        const startTime = Date.now();
-        const res = await fetch(url, {
-          method: "POST",
-          signal,
+      async callModel(signal, onDelta) {
+        return fetchAnthropicStream({
+          url: `${this.config.endpoint.replace(/\/$/, "")}/v1/messages`,
           headers: {
             "x-api-key": this.config.apiKey,
-            "anthropic-version": "2023-06-01",
-            "content-type": "application/json"
+            "anthropic-version": "2023-06-01"
           },
-          body: JSON.stringify(body)
+          body: this.buildRequestBody(),
+          signal,
+          onDelta,
+          tag: "minimax"
         });
-        const durationMs = Date.now() - startTime;
-        const raw = await res.text();
-        let msg;
-        try {
-          msg = JSON.parse(raw);
-        } catch {
-          throw new Error(`[minimax] non-JSON response (status=${res.status}): ${raw.slice(0, 200)}`);
-        }
-        if (!res.ok || msg.error) {
-          throw new Error(`[minimax] ${res.status} ${msg.error?.type ?? "?"}: ${msg.error?.message ?? raw.slice(0, 200)}`);
-        }
-        let text6 = "";
-        let thinking = "";
-        const toolCalls = [];
-        const assistantBlocks = [];
-        for (const block of msg.content ?? []) {
-          if (block.type === "text" && block.text) {
-            text6 += block.text;
-            assistantBlocks.push({ type: "text", text: block.text });
-          } else if (block.type === "thinking" && block.thinking) {
-            thinking += block.thinking;
-          } else if (block.type === "tool_use") {
-            toolCalls.push({ id: block.id, name: block.name, input: block.input ?? {} });
-            assistantBlocks.push({ type: "tool_use", id: block.id, name: block.name, input: block.input ?? {} });
-          }
-        }
-        const u = msg.usage;
-        const inputTokens = u?.input_tokens ?? 0;
-        const outputTokens = u?.output_tokens ?? 0;
-        const cacheReadTokens = u?.cache_read_input_tokens ?? 0;
-        const cacheWriteTokens = u?.cache_creation_input_tokens ?? 0;
-        return {
-          assistantBlocks,
-          stopReason: msg.stop_reason ?? "end_turn",
-          text: text6,
-          thinking,
-          toolCalls,
-          usage: {
-            inputTokens,
-            outputTokens,
-            totalTokens: inputTokens + outputTokens,
-            ...cacheReadTokens ? { cacheReadInputTokens: cacheReadTokens } : {},
-            ...cacheWriteTokens ? { cacheWriteInputTokens: cacheWriteTokens } : {}
-          },
-          durationMs
-        };
       }
       buildRequestBody() {
         const caching = this.config.promptCaching;
@@ -8399,71 +8719,22 @@ var init_qwen_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_anthropic_stream();
     QwenAgent = class extends AgentLoop {
       config;
       constructor(config2) {
         super(config2.tools);
         this.config = config2;
       }
-      async callModel(signal) {
-        const url = `${this.config.endpoint.replace(/\/$/, "")}/v1/messages`;
-        const body = this.buildRequestBody();
-        const startTime = Date.now();
-        const res = await fetch(url, {
-          method: "POST",
+      async callModel(signal, onDelta) {
+        return fetchAnthropicStream({
+          url: `${this.config.endpoint.replace(/\/$/, "")}/v1/messages`,
+          headers: { "x-api-key": this.config.apiKey },
+          body: this.buildRequestBody(),
           signal,
-          headers: {
-            "x-api-key": this.config.apiKey,
-            "content-type": "application/json"
-          },
-          body: JSON.stringify(body)
+          onDelta,
+          tag: "qwen"
         });
-        const durationMs = Date.now() - startTime;
-        const raw = await res.text();
-        let msg;
-        try {
-          msg = JSON.parse(raw);
-        } catch {
-          throw new Error(`[qwen] non-JSON response (status=${res.status}): ${raw.slice(0, 200)}`);
-        }
-        if (!res.ok || msg.error) {
-          throw new Error(`[qwen] ${res.status} ${msg.error?.type ?? "?"}: ${msg.error?.message ?? raw.slice(0, 200)}`);
-        }
-        let text6 = "";
-        let thinking = "";
-        const toolCalls = [];
-        const assistantBlocks = [];
-        for (const block of msg.content ?? []) {
-          if (block.type === "text" && block.text) {
-            text6 += block.text;
-            assistantBlocks.push({ type: "text", text: block.text });
-          } else if (block.type === "thinking" && block.thinking) {
-            thinking += block.thinking;
-          } else if (block.type === "tool_use") {
-            toolCalls.push({ id: block.id, name: block.name, input: block.input ?? {} });
-            assistantBlocks.push({ type: "tool_use", id: block.id, name: block.name, input: block.input ?? {} });
-          }
-        }
-        const u = msg.usage;
-        const inputTokens = u?.input_tokens ?? 0;
-        const outputTokens = u?.output_tokens ?? 0;
-        const cacheReadTokens = u?.cache_read_input_tokens ?? 0;
-        const cacheWriteTokens = u?.cache_creation_input_tokens ?? 0;
-        return {
-          assistantBlocks,
-          stopReason: msg.stop_reason ?? "end_turn",
-          text: text6,
-          thinking,
-          toolCalls,
-          usage: {
-            inputTokens,
-            outputTokens,
-            totalTokens: inputTokens + outputTokens,
-            ...cacheReadTokens ? { cacheReadInputTokens: cacheReadTokens } : {},
-            ...cacheWriteTokens ? { cacheWriteInputTokens: cacheWriteTokens } : {}
-          },
-          durationMs
-        };
       }
       buildRequestBody() {
         const cacheControl = this.config.promptCaching ? { type: "ephemeral" } : null;
@@ -8527,13 +8798,14 @@ var init_hunyuan_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_openai_chat_stream();
     HunyuanAgent = class extends AgentLoop {
       config;
       constructor(config2) {
         super(config2.tools);
         this.config = config2;
       }
-      async callModel(signal) {
+      async callModel(signal, onDelta) {
         const url = this.config.endpoint.replace(/\/+$/, "") + "/chat/completions";
         const startTime = Date.now();
         const messages2 = this.buildMessages();
@@ -8541,31 +8813,20 @@ var init_hunyuan_agent = __esm({
         const body = {
           model: this.config.modelId,
           messages: messages2,
-          stream: false,
           max_tokens: this.config.maxTokens ?? resolveMaxOutputTokens(this.config.modelId),
           ...tools.length > 0 ? { tools } : {}
         };
         if (this.config.thinking?.enabled && this.config.thinking.effort) {
           body.reasoning_effort = this.config.thinking.effort;
         }
-        const response = await fetch(url, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${this.config.apiKey}`
-          },
-          body: JSON.stringify(body),
-          signal
+        const { message: msg, finishReason, usage, ttftMs } = await fetchChatCompletionStream({
+          url,
+          headers: { "Authorization": `Bearer ${this.config.apiKey}` },
+          body,
+          signal,
+          onDelta,
+          tag: "HunyuanAgent"
         });
-        if (!response.ok) {
-          const errText2 = await response.text().catch(() => "");
-          throw new Error(`[HunyuanAgent] API error ${response.status}: ${errText2}`);
-        }
-        const data = await response.json();
-        const choices = data.choices;
-        const choice = choices?.[0];
-        const msg = choice?.message;
-        const finishReason = choice?.finish_reason;
         let text6 = "";
         let thinking = "";
         const toolCalls = [];
@@ -8597,7 +8858,6 @@ var init_hunyuan_agent = __esm({
           assistantBlocks.push({ type: "text", text: text6 });
         }
         const stopReason = finishReason === "tool_calls" ? "tool_use" : finishReason === "length" ? "max_tokens" : "end_turn";
-        const usage = data.usage;
         const promptTokens = usage?.prompt_tokens ?? 0;
         const completionTokens = usage?.completion_tokens ?? 0;
         const promptDetails = usage?.prompt_tokens_details;
@@ -8614,7 +8874,8 @@ var init_hunyuan_agent = __esm({
             totalTokens: promptTokens - cachedTokens + completionTokens,
             ...cachedTokens ? { cacheReadInputTokens: cachedTokens } : {}
           },
-          durationMs: Date.now() - startTime
+          durationMs: Date.now() - startTime,
+          ttftMs
         };
       }
       buildMessages() {
@@ -8708,13 +8969,14 @@ var init_doubao_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_openai_chat_stream();
     DoubaoAgent = class extends AgentLoop {
       config;
       constructor(config2) {
         super(config2.tools);
         this.config = config2;
       }
-      async callModel(signal) {
+      async callModel(signal, onDelta) {
         const url = this.config.endpoint.replace(/\/+$/, "") + "/chat/completions";
         const startTime = Date.now();
         const messages2 = this.buildMessages();
@@ -8722,31 +8984,20 @@ var init_doubao_agent = __esm({
         const body = {
           model: this.config.modelId,
           messages: messages2,
-          stream: false,
           max_tokens: this.config.maxTokens ?? resolveMaxOutputTokens(this.config.modelId),
           ...tools.length > 0 ? { tools } : {}
         };
         if (this.config.thinking) {
           body.thinking = { type: this.config.thinking.enabled ? "enabled" : "disabled" };
         }
-        const response = await fetch(url, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${this.config.apiKey}`
-          },
-          body: JSON.stringify(body),
-          signal
+        const { message: msg, finishReason, usage, ttftMs } = await fetchChatCompletionStream({
+          url,
+          headers: { "Authorization": `Bearer ${this.config.apiKey}` },
+          body,
+          signal,
+          onDelta,
+          tag: "DoubaoAgent"
         });
-        if (!response.ok) {
-          const errText2 = await response.text().catch(() => "");
-          throw new Error(`[DoubaoAgent] API error ${response.status}: ${errText2}`);
-        }
-        const data = await response.json();
-        const choices = data.choices;
-        const choice = choices?.[0];
-        const msg = choice?.message;
-        const finishReason = choice?.finish_reason;
         let text6 = "";
         let thinking = "";
         const toolCalls = [];
@@ -8778,7 +9029,6 @@ var init_doubao_agent = __esm({
           assistantBlocks.push({ type: "text", text: text6 });
         }
         const stopReason = finishReason === "tool_calls" ? "tool_use" : finishReason === "length" ? "max_tokens" : "end_turn";
-        const usage = data.usage;
         const promptTokens = usage?.prompt_tokens ?? 0;
         const completionTokens = usage?.completion_tokens ?? 0;
         const promptDetails = usage?.prompt_tokens_details;
@@ -8795,7 +9045,8 @@ var init_doubao_agent = __esm({
             totalTokens: promptTokens - cachedTokens + completionTokens,
             ...cachedTokens ? { cacheReadInputTokens: cachedTokens } : {}
           },
-          durationMs: Date.now() - startTime
+          durationMs: Date.now() - startTime,
+          ttftMs
         };
       }
       buildMessages() {
@@ -8889,6 +9140,7 @@ var init_zhipu_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_openai_chat_stream();
     EFFORTS = /* @__PURE__ */ new Set(["low", "high", "max"]);
     ZhipuAgent = class extends AgentLoop {
       config;
@@ -8896,7 +9148,7 @@ var init_zhipu_agent = __esm({
         super(config2.tools);
         this.config = config2;
       }
-      async callModel(signal) {
+      async callModel(signal, onDelta) {
         const url = this.config.endpoint.replace(/\/+$/, "") + "/chat/completions";
         const startTime = Date.now();
         const messages2 = this.buildMessages();
@@ -8904,7 +9156,6 @@ var init_zhipu_agent = __esm({
         const body = {
           model: this.config.modelId,
           messages: messages2,
-          stream: false,
           max_tokens: this.config.maxTokens ?? resolveMaxOutputTokens(this.config.modelId),
           ...tools.length > 0 ? { tools } : {}
         };
@@ -8920,24 +9171,14 @@ var init_zhipu_agent = __esm({
         } else {
           body.thinking = { type: "disabled" };
         }
-        const response = await fetch(url, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${this.config.apiKey}`
-          },
-          body: JSON.stringify(body),
-          signal
+        const { message: msg, finishReason, usage, ttftMs } = await fetchChatCompletionStream({
+          url,
+          headers: { "Authorization": `Bearer ${this.config.apiKey}` },
+          body,
+          signal,
+          onDelta,
+          tag: "ZhipuAgent"
         });
-        if (!response.ok) {
-          const errText2 = await response.text().catch(() => "");
-          throw new Error(`[ZhipuAgent] API error ${response.status}: ${errText2}`);
-        }
-        const data = await response.json();
-        const choices = data.choices;
-        const choice = choices?.[0];
-        const msg = choice?.message;
-        const finishReason = choice?.finish_reason;
         let text6 = "";
         let thinking = "";
         const toolCalls = [];
@@ -8969,7 +9210,6 @@ var init_zhipu_agent = __esm({
           assistantBlocks.push({ type: "text", text: text6 });
         }
         const stopReason = finishReason === "tool_calls" ? "tool_use" : finishReason === "length" ? "max_tokens" : "end_turn";
-        const usage = data.usage;
         const promptTokens = usage?.prompt_tokens ?? 0;
         const outputTokens = usage?.completion_tokens ?? 0;
         const details = usage?.prompt_tokens_details;
@@ -8987,7 +9227,8 @@ var init_zhipu_agent = __esm({
             totalTokens: inputTokens + outputTokens,
             ...cachedTokens ? { cacheReadInputTokens: cachedTokens } : {}
           },
-          durationMs: Date.now() - startTime
+          durationMs: Date.now() - startTime,
+          ttftMs
         };
       }
       buildMessages() {
@@ -9100,13 +9341,14 @@ var init_openai_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_openai_chat_stream();
     OpenAIAgent = class extends AgentLoop {
       config;
       constructor(config2) {
         super(config2.tools);
         this.config = config2;
       }
-      async callModel(signal) {
+      async callModel(signal, onDelta) {
         const url = this.config.endpoint.replace(/\/+$/, "") + "/chat/completions";
         const startTime = Date.now();
         const messages2 = this.buildMessages();
@@ -9114,37 +9356,26 @@ var init_openai_agent = __esm({
         const body = {
           model: this.config.modelId,
           messages: messages2,
-          stream: false,
           max_tokens: this.config.maxTokens ?? resolveMaxOutputTokens(this.config.modelId),
           ...tools.length > 0 ? { tools } : {}
         };
         if (this.config.thinking?.enabled && this.config.thinking.effort) {
           body.reasoning_effort = this.config.thinking.effort;
         }
-        const response = await fetch(url, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${this.config.apiKey}`
-          },
-          body: JSON.stringify(body),
-          signal
+        const { message: msg, finishReason, usage, ttftMs } = await fetchChatCompletionStream({
+          url,
+          headers: { "Authorization": `Bearer ${this.config.apiKey}` },
+          body,
+          signal,
+          onDelta,
+          tag: "OpenAIAgent"
         });
-        if (!response.ok) {
-          const errText2 = await response.text().catch(() => "");
-          throw new Error(`[OpenAIAgent] API error ${response.status}: ${errText2}`);
-        }
-        const data = await response.json();
-        const choices = data.choices;
-        const choice = choices?.[0];
-        const msg = choice?.message;
-        const finishReason = choice?.finish_reason;
         let text6 = "";
         let thinking = "";
         const toolCalls = [];
         const assistantBlocks = [];
         if (msg) {
-          const reasoning = msg.reasoning_content ?? msg.reasoning;
+          const reasoning = msg.reasoning_content;
           if (reasoning && typeof reasoning === "string") {
             thinking = reasoning;
           }
@@ -9171,7 +9402,6 @@ var init_openai_agent = __esm({
           assistantBlocks.push({ type: "text", text: text6 });
         }
         const stopReason = finishReason === "tool_calls" ? "tool_use" : finishReason === "length" ? "max_tokens" : "end_turn";
-        const usage = data.usage;
         const promptTokens = usage?.prompt_tokens ?? 0;
         const completionTokens = usage?.completion_tokens ?? 0;
         const promptDetails = usage?.prompt_tokens_details;
@@ -9188,7 +9418,8 @@ var init_openai_agent = __esm({
             totalTokens: promptTokens - cachedTokens + completionTokens,
             ...cachedTokens ? { cacheReadInputTokens: cachedTokens } : {}
           },
-          durationMs: Date.now() - startTime
+          durationMs: Date.now() - startTime,
+          ttftMs
         };
       }
       buildMessages() {
@@ -9282,6 +9513,46 @@ var init_openai_agent = __esm({
 import { SignatureV4 } from "@smithy/signature-v4";
 import { Sha256 } from "@aws-crypto/sha256-js";
 import { defaultProvider } from "@aws-sdk/credential-provider-node";
+async function readResponsesStream(res, onDelta, startTime, signal) {
+  if (!res.body)
+    throw new Error("[MantleAgent] empty response body");
+  let final;
+  let firstDeltaAt;
+  for await (const ev of readSseJson(res.body)) {
+    switch (ev.type) {
+      case "response.output_text.delta":
+        firstDeltaAt ??= Date.now();
+        if (ev.delta)
+          onDelta?.({ type: "text_delta", text: ev.delta });
+        break;
+      case "response.reasoning_summary_text.delta":
+        firstDeltaAt ??= Date.now();
+        if (ev.delta)
+          onDelta?.({ type: "thinking_delta", text: ev.delta });
+        break;
+      case "response.function_call_arguments.delta":
+        firstDeltaAt ??= Date.now();
+        break;
+      case "response.completed":
+      case "response.incomplete":
+        final = ev.response;
+        break;
+      // No HTTP status exists mid-stream (the 200 already went out), so
+      // classifyModelError falls back to its keyword checks on these messages.
+      case "response.failed": {
+        const failed = ev.response;
+        throw new Error(`[MantleAgent] API error in stream: ${JSON.stringify(failed?.error ?? ev.response).slice(0, 300)}`);
+      }
+      case "error":
+        throw new Error(`[MantleAgent] API error in stream: ${ev.code ?? "?"}: ${ev.message ?? ""}`);
+    }
+  }
+  if (signal?.aborted)
+    throw new DOMException("Model call aborted", "AbortError");
+  if (!final)
+    throw new Error("MantleEmptyResponse: stream ended without response.completed; transient, retrying");
+  return { data: final, ttftMs: firstDeltaAt !== void 0 ? firstDeltaAt - startTime : void 0 };
+}
 function extractRegionFromHost(hostname) {
   const m = hostname.match(/^bedrock-(?:mantle|runtime)\.([a-z0-9-]+)\./);
   return m?.[1] ?? "us-east-1";
@@ -9299,13 +9570,14 @@ var init_mantle_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_sse();
     MantleAgent = class extends AgentLoop {
       config;
       constructor(config2) {
         super(config2.tools);
         this.config = config2;
       }
-      async callModel(signal) {
+      async callModel(signal, onDelta) {
         const url = this.config.endpoint.replace(/\/+$/, "") + "/responses";
         const startTime = Date.now();
         const input = this.buildInput();
@@ -9313,7 +9585,7 @@ var init_mantle_agent = __esm({
         const body = {
           model: this.config.modelId,
           input,
-          stream: false,
+          stream: true,
           max_output_tokens: this.config.maxTokens ?? resolveMaxOutputTokens(this.config.modelId),
           text: { verbosity: this.config.verbosity ?? "low" },
           ...tools.length > 0 ? { tools } : {}
@@ -9334,7 +9606,7 @@ var init_mantle_agent = __esm({
           const errText2 = await response.text().catch(() => "");
           throw new Error(`[MantleAgent] API error ${response.status}: ${errText2}`);
         }
-        const data = await response.json();
+        const { data, ttftMs } = await readResponsesStream(response, onDelta, startTime, signal);
         const output = data.output ?? [];
         let text6 = "";
         let thinking = "";
@@ -9396,7 +9668,8 @@ var init_mantle_agent = __esm({
             totalTokens: inputTokens - cachedTokens + outputTokens,
             ...cachedTokens ? { cacheReadInputTokens: cachedTokens } : {}
           },
-          durationMs: Date.now() - startTime
+          durationMs: Date.now() - startTime,
+          ttftMs
         };
       }
       /** Build the Responses API `input` array from system prompt + message log. */
@@ -9523,73 +9796,25 @@ var init_anthropic_agent = __esm({
     "use strict";
     init_config();
     init_agent_loop();
+    init_anthropic_stream();
     AnthropicAgent = class extends AgentLoop {
       config;
       constructor(config2) {
         super(config2.tools);
         this.config = config2;
       }
-      async callModel(signal) {
-        const url = `${this.config.endpoint.replace(/\/$/, "")}/v1/messages`;
-        const body = this.buildRequestBody();
-        const startTime = Date.now();
-        const res = await fetch(url, {
-          method: "POST",
-          signal,
+      async callModel(signal, onDelta) {
+        return fetchAnthropicStream({
+          url: `${this.config.endpoint.replace(/\/$/, "")}/v1/messages`,
           headers: {
             "x-api-key": this.config.apiKey,
-            "anthropic-version": "2023-06-01",
-            "content-type": "application/json"
+            "anthropic-version": "2023-06-01"
           },
-          body: JSON.stringify(body)
+          body: this.buildRequestBody(),
+          signal,
+          onDelta,
+          tag: "anthropic"
         });
-        const durationMs = Date.now() - startTime;
-        const raw = await res.text();
-        let msg;
-        try {
-          msg = JSON.parse(raw);
-        } catch {
-          throw new Error(`[anthropic] non-JSON response (status=${res.status}): ${raw.slice(0, 200)}`);
-        }
-        if (!res.ok || msg.error) {
-          throw new Error(`[anthropic] ${res.status} ${msg.error?.type ?? "?"}: ${msg.error?.message ?? raw.slice(0, 200)}`);
-        }
-        let text6 = "";
-        let thinking = "";
-        const toolCalls = [];
-        const assistantBlocks = [];
-        for (const block of msg.content ?? []) {
-          if (block.type === "text" && block.text) {
-            text6 += block.text;
-            assistantBlocks.push({ type: "text", text: block.text });
-          } else if (block.type === "thinking" && block.thinking) {
-            thinking += block.thinking;
-          } else if (block.type === "tool_use") {
-            toolCalls.push({ id: block.id, name: block.name, input: block.input ?? {} });
-            assistantBlocks.push({ type: "tool_use", id: block.id, name: block.name, input: block.input ?? {} });
-          }
-        }
-        const u = msg.usage;
-        const inputTokens = u?.input_tokens ?? 0;
-        const outputTokens = u?.output_tokens ?? 0;
-        const cacheReadTokens = u?.cache_read_input_tokens ?? 0;
-        const cacheWriteTokens = u?.cache_creation_input_tokens ?? 0;
-        return {
-          assistantBlocks,
-          stopReason: msg.stop_reason ?? "end_turn",
-          ...msg.stop_details ? { stopDetails: { category: msg.stop_details.category ?? null, explanation: msg.stop_details.explanation ?? null } } : {},
-          text: text6,
-          thinking,
-          toolCalls,
-          usage: {
-            inputTokens,
-            outputTokens,
-            totalTokens: inputTokens + outputTokens,
-            ...cacheReadTokens ? { cacheReadInputTokens: cacheReadTokens } : {},
-            ...cacheWriteTokens ? { cacheWriteInputTokens: cacheWriteTokens } : {}
-          },
-          durationMs
-        };
       }
       buildRequestBody() {
         const caching = this.config.promptCaching;
@@ -11404,55 +11629,6 @@ var init_workspace_tools = __esm({
   }
 });
 
-// ../server/dist/tools/draft-tool.js
-function createDraftTool() {
-  let drafts = 0;
-  const tool = {
-    name: "draft",
-    description: "Submit a draft answer for self-review. Returns a checklist that critiques the draft so you can improve it before sending the final answer.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        content: {
-          type: "string",
-          description: "The complete draft answer. Required and must be non-empty."
-        }
-      },
-      required: ["content"]
-    },
-    callback: (input) => {
-      const content = input?.content;
-      if (typeof content !== "string" || content.trim().length === 0) {
-        return `${TOOL_ERROR_MARKER}
-Error: draft requires non-empty \`content\` \u2014 put your full draft answer there.`;
-      }
-      drafts++;
-      if (drafts > MAX_DRAFTS) {
-        return `You have drafted ${MAX_DRAFTS} times this turn \u2014 that is the limit. Write your final answer now, directly, without calling draft again.`;
-      }
-      return REVIEW_CHECKLIST;
-    }
-  };
-  return { tool, reset: () => {
-    drafts = 0;
-  } };
-}
-var MAX_DRAFTS, REVIEW_CHECKLIST;
-var init_draft_tool = __esm({
-  "../server/dist/tools/draft-tool.js"() {
-    "use strict";
-    init_agent_loop();
-    MAX_DRAFTS = 3;
-    REVIEW_CHECKLIST = `You are now a hostile reviewer whose job is to find everything wrong with the draft above. Do not defend it \u2014 attack it.
-
-1. Facts: list every factual claim in the draft, each tagged [verified-with-tool] / [from-memory] / [guess]. For anything not [verified-with-tool], verify it NOW with file_read / grep / search, or mark it "unconfirmed" in the answer. Do not assert from memory.
-2. Delivery: is it friendly? Does it answer the question simply and directly, or is it dancing around? If it uses a rhetorical question, is that question actually necessary?
-3. Gaps: is anything missing? If it can be looked up, look it up; if it can't, say "unknown" \u2014 don't paper over it.
-
-If the draft clears all three, write the final answer now. If not, fix it (gather more via tools, or call draft again to rewrite).`;
-  }
-});
-
 // ../server/dist/prompts/system-prompts.js
 import fs23 from "node:fs/promises";
 import path27 from "node:path";
@@ -11553,7 +11729,6 @@ var init_session_agent_builder = __esm({
     "use strict";
     init_model_runtime();
     init_workspace_tools();
-    init_draft_tool();
     init_system_prompts();
     init_md_loader();
     init_config();
@@ -11576,7 +11751,7 @@ var init_session_agent_builder = __esm({
         const yamlConfig = await loadAgentYaml(agentId, this.host.workspaceRoot);
         const isRoot = !parentId;
         const { modelId, endpoint, providerId } = this.validateAgentModelConfig(agentId, yamlConfig);
-        const { workspaceTools, sessionTools, allowedNamespaces, draftReset } = this.resolveBaseToolSet({
+        const { workspaceTools, sessionTools, allowedNamespaces } = this.resolveBaseToolSet({
           agentId,
           sessionId,
           modelId,
@@ -11615,7 +11790,7 @@ var init_session_agent_builder = __esm({
           systemPrompts,
           allToolNames
         });
-        return { agent, yamlConfig, contextConfig, modelId, systemPrompt, thinkingEffort, meta, draftReset };
+        return { agent, yamlConfig, contextConfig, modelId, systemPrompt, thinkingEffort, meta };
       }
       /** Throw with a clear message if agent.yaml is missing the model triple.
        *  Includes the resolved yaml path and distinguishes "file unreadable"
@@ -11659,16 +11834,10 @@ var init_session_agent_builder = __esm({
         const delegates = canDelegate(yamlConfig);
         const sessionTools = delegates ? this.host.createSessionTools(sessionId) : agentId === GOAL_AGENT_ID ? this.host.createGoalTools(sessionId) : [];
         sessionTools.push(this.host.createContinueTaskTool(sessionId));
-        let draftReset = null;
-        if (nameSet.has("draft")) {
-          const { tool, reset } = createDraftTool();
-          sessionTools.push(tool);
-          draftReset = reset;
-        }
         if (nameSet.has("relay_send") && accessLevel === null) {
           sessionTools.push(...this.host.createRelayTools(sessionId));
         }
-        return { workspaceTools, sessionTools, allowedNamespaces, draftReset };
+        return { workspaceTools, sessionTools, allowedNamespaces };
       }
       /**
        * Compose the agent's system prompt from the MD layer cake +
@@ -12141,7 +12310,7 @@ async function initObservability() {
     return true;
   }
   const { registerSdk: registerSdk2 } = await Promise.resolve().then(() => (init_otel_sdk(), otel_sdk_exports));
-  providers = registerSdk2(process.env.OTEL_SERVICE_NAME, "1.4.6");
+  providers = registerSdk2(process.env.OTEL_SERVICE_NAME, "1.5.0-alpha");
   console.log(`[Observability] OTLP export \u2192 ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT} (service.name=${process.env.OTEL_SERVICE_NAME}, capture_content=${config.observability.captureContent})`);
   return true;
 }
@@ -12182,6 +12351,14 @@ function instruments() {
   return {
     tokenUsage: meter.createHistogram("gen_ai.client.token.usage", { unit: "{token}", description: "Tokens per model call, split by gen_ai.token.type" }),
     operationDuration: meter.createHistogram("gen_ai.client.operation.duration", { unit: "s", description: "Model call latency" }),
+    // semconv's only TTFT metric (named `server.` though it's measured client-side
+    // here: first streamed delta, see ModelCallResult.ttftMs). Buckets are the
+    // spec's recommended set — the SDK default is ms-scale, useless for seconds.
+    timeToFirstToken: meter.createHistogram("gen_ai.server.time_to_first_token", {
+      unit: "s",
+      description: "Time to first streamed token per model call",
+      advice: { explicitBucketBoundaries: [1e-3, 5e-3, 0.01, 0.02, 0.04, 0.06, 0.08, 0.1, 0.25, 0.5, 0.75, 1, 2.5, 5, 7.5, 10] }
+    }),
     toolDuration: meter.createHistogram("halo.tool.duration", { unit: "s", description: "Tool execution latency" }),
     turnDuration: meter.createHistogram("halo.turn.duration", { unit: "s", description: "Agent turn latency (invoke_agent)" }),
     modelRetries: meter.createCounter("halo.model.retries", { description: "Model-call retries by kind" })
@@ -12310,7 +12487,8 @@ function recordModelCall(session, turn, event) {
       "gen_ai.usage.input_tokens": event.usage?.inputTokens ?? 0,
       "gen_ai.usage.output_tokens": event.usage?.outputTokens ?? 0,
       "gen_ai.response.finish_reasons": [turn.cycleToolCalls.length > 0 ? "tool_use" : "end_turn"],
-      "session.id": session.id
+      "session.id": session.id,
+      ...event.ttftMs != null ? { "halo.ttft_ms": event.ttftMs } : {}
     }
   }, turn.ctx);
   if (captureContent()) {
@@ -12334,6 +12512,8 @@ function recordModelCall(session, turn, event) {
   m.tokenUsage.record(event.usage?.inputTokens ?? 0, { ...modelAttr, "gen_ai.token.type": "input" });
   m.tokenUsage.record(event.usage?.outputTokens ?? 0, { ...modelAttr, "gen_ai.token.type": "output" });
   m.operationDuration.record(durationMs / 1e3, { ...modelAttr, "gen_ai.operation.name": "chat" });
+  if (event.ttftMs != null)
+    m.timeToFirstToken.record(event.ttftMs / 1e3, modelAttr);
 }
 function recordToolCall(session, turn, event) {
   const id = event.toolUseId ?? "";
@@ -12428,6 +12608,15 @@ function simpleHash(str) {
 function sleep(ms) {
   return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
+function formatAge(ms) {
+  const s = Math.max(0, Math.floor(ms / 1e3));
+  if (s < 60)
+    return `${s}s`;
+  const m = Math.floor(s / 60);
+  if (m < 60)
+    return `${m}m`;
+  return `${Math.floor(m / 60)}h${String(m % 60).padStart(2, "0")}m`;
+}
 function abortReason(reason) {
   return new DOMException(reason, "AbortError");
 }
@@ -12484,8 +12673,8 @@ function stripImageMarkers(s) {
 }
 function generateSessionId() {
   const ts = Date.now().toString(36);
-  const rand = Math.random().toString(36).slice(2, 8);
-  return `sid_${ts}_${rand}`;
+  const rand2 = Math.random().toString(36).slice(2, 8);
+  return `sid_${ts}_${rand2}`;
 }
 var CONTINUE_TASK_KICK, SessionManager;
 var init_session_manager = __esm({
@@ -12760,7 +12949,7 @@ var init_session_manager = __esm({
       }
       // ── Session lifecycle ───────────────────────────────────────────────
       /** Create default AgentSession fields */
-      createAgentSession(id, parentId, agentId, agentName, agent, description, contextConfig, modelId, systemPrompt, thinkingEffort = "off", workingDir = null, accessLevel = null, meta, imageOverride, draftReset = null) {
+      createAgentSession(id, parentId, agentId, agentName, agent, description, contextConfig, modelId, systemPrompt, thinkingEffort = "off", workingDir = null, accessLevel = null, meta, imageOverride) {
         return {
           id,
           parentId,
@@ -12768,9 +12957,9 @@ var init_session_manager = __esm({
           agentName,
           agent,
           description,
-          draftReset,
           output: "",
           lastActivityAt: null,
+          streamedThisCall: false,
           finalOutput: "",
           turnError: null,
           promise: null,
@@ -12834,14 +13023,14 @@ var init_session_manager = __esm({
             throw new Error(`Session ${sessionId} is archived and cannot be resumed`);
           const restoredAccessLevel = meta.accessLevel === "readonly" ? "readonly" : meta.accessLevel === "workspace" ? "workspace" : null;
           const restoredWorkingDir = meta.workingDir ? path30.resolve(this.workspaceRoot, meta.workingDir) : void 0;
-          const { agent, yamlConfig: resumedYaml, contextConfig, modelId, systemPrompt, thinkingEffort, meta: agentMeta, draftReset } = await this.buildAgentInstance(meta.agentId, sessionId, meta.parentId, restoredWorkingDir, restoredAccessLevel);
+          const { agent, yamlConfig: resumedYaml, contextConfig, modelId, systemPrompt, thinkingEffort, meta: agentMeta } = await this.buildAgentInstance(meta.agentId, sessionId, meta.parentId, restoredWorkingDir, restoredAccessLevel);
           const savedMessages = this.loadAgentState(sessionId, meta.agentId);
           if (savedMessages.length > 0) {
             agent.messages = savedMessages;
           }
           const resumedImageOverride = resumedYaml?.model?.image;
           const resumedAgentName = meta.agentName ?? resumedYaml?.name ?? meta.agentId;
-          const session = this.createAgentSession(sessionId, meta.parentId, meta.agentId, resumedAgentName, agent, meta.description ?? "", contextConfig, modelId, systemPrompt, thinkingEffort, restoredWorkingDir ?? null, restoredAccessLevel, agentMeta, resumedImageOverride, draftReset);
+          const session = this.createAgentSession(sessionId, meta.parentId, meta.agentId, resumedAgentName, agent, meta.description ?? "", contextConfig, modelId, systemPrompt, thinkingEffort, restoredWorkingDir ?? null, restoredAccessLevel, agentMeta, resumedImageOverride);
           this.sessions.set(sessionId, session);
           const rootId = this.findRootSessionId(sessionId);
           const state = this.uiStore.ensureUIState(rootId);
@@ -12889,10 +13078,12 @@ var init_session_manager = __esm({
        * @param explicitId - Optional explicit session ID (for unifying frontend sessionId with agent sessionId)
        */
       async createSession(agentId, parentId, description, agentName, explicitId, workingDir, accessLevel = null, title) {
+        if (agentId === GOAL_AGENT_ID && !config.goalModeEnabled)
+          throw new Error("Goal mode is disabled.");
         const segment = generateSessionId();
         const sessionId = explicitId ?? (parentId ? `${parentId}>${segment}` : segment);
         const now = Date.now();
-        const { agent, yamlConfig: createdYaml, contextConfig, modelId, systemPrompt, thinkingEffort, meta, draftReset } = await this.buildAgentInstance(agentId, sessionId, parentId, workingDir ?? void 0, accessLevel);
+        const { agent, yamlConfig: createdYaml, contextConfig, modelId, systemPrompt, thinkingEffort, meta } = await this.buildAgentInstance(agentId, sessionId, parentId, workingDir ?? void 0, accessLevel);
         const resolvedAgentName = agentName ?? createdYaml?.name ?? agentId;
         this.db.insert(agentSessions).values({
           id: sessionId,
@@ -12915,7 +13106,7 @@ var init_session_manager = __esm({
           }
         }
         const createdImageOverride = createdYaml?.model?.image;
-        const session = this.createAgentSession(sessionId, parentId, agentId, resolvedAgentName, agent, description, contextConfig, modelId, systemPrompt, thinkingEffort, workingDir ?? null, accessLevel, meta, createdImageOverride, draftReset);
+        const session = this.createAgentSession(sessionId, parentId, agentId, resolvedAgentName, agent, description, contextConfig, modelId, systemPrompt, thinkingEffort, workingDir ?? null, accessLevel, meta, createdImageOverride);
         this.sessions.set(sessionId, session);
         this.emitEvent(sessionId, { type: "context", agentId, agentName: resolvedAgentName, systemPrompt, taskId: parentId ? sessionId : void 0 });
         console.debug(`[SessionManager] Created session ${sessionId} for agent "${agentId}" (parent: ${parentId ?? "none"}, workingDir: ${workingDir ?? "project root"})`);
@@ -13157,16 +13348,28 @@ var init_session_manager = __esm({
         const agentId = session.agentId;
         const taskId = session.parentId ? session.id : void 0;
         switch (event.type) {
+          // Streaming chunks: UI-only. They never touch output / finalOutput —
+          // the whole `text` event below still carries the reply for those.
+          case "text_delta": {
+            session.streamedThisCall = true;
+            this.emitEvent(session.id, { type: "stream_delta", text: event.text, agentName, agentId, taskId });
+            break;
+          }
+          case "thinking_delta": {
+            session.streamedThisCall = true;
+            this.emitEvent(session.id, { type: "thinking_delta", text: event.text, agentName, agentId, taskId });
+            break;
+          }
           case "text": {
             session.output += event.text ?? "";
             session.lastActivityAt = (/* @__PURE__ */ new Date()).toISOString();
             if (event.final)
               session.finalOutput += event.text ?? "";
-            this.emitEvent(session.id, { type: "stream", text: event.text, final: event.final, agentName, agentId, taskId });
+            this.emitEvent(session.id, { type: "stream", text: event.text, final: event.final, streamed: session.streamedThisCall, agentName, agentId, taskId });
             break;
           }
           case "thinking": {
-            this.emitEvent(session.id, { type: "thinking", text: event.text, agentName, agentId, taskId });
+            this.emitEvent(session.id, { type: "thinking", text: event.text, streamed: session.streamedThisCall, agentName, agentId, taskId });
             break;
           }
           case "tool_call": {
@@ -13199,9 +13402,11 @@ var init_session_manager = __esm({
               agentId,
               taskId,
               e2eMs: event.durationMs,
+              ttftMs: event.ttftMs,
               thinkingEffort: session.thinkingEffort
             });
             session.lastContextTokens = (u.totalTokens ?? 0) + (u.cacheReadInputTokens ?? 0) + (u.cacheWriteInputTokens ?? 0);
+            session.streamedThisCall = false;
             break;
           }
           case "stop": {
@@ -13245,7 +13450,6 @@ var init_session_manager = __esm({
           session.abortController = new AbortController();
           const signal = session.abortController.signal;
           resultText = "";
-          session.draftReset?.();
           const last = session.agent.messages[session.agent.messages.length - 1];
           const input = attempt === 0 || last?.role !== "user" ? message : [];
           try {
@@ -13279,6 +13483,7 @@ var init_session_manager = __esm({
             break;
           } catch (err) {
             session.abortController = null;
+            session.streamedThisCall = false;
             const { kind, msg, errName, httpStatus } = classifyModelError(err);
             if (signal.aborted || errName === "AbortError") {
               if (session.interruptRequested) {
@@ -13410,6 +13615,9 @@ var init_session_manager = __esm({
             session.selfKick = false;
             result = await this.runAgentTurn(session, message);
             console.debug(`[SessionManager] runSession ${sessionId} first turn done \u2014 result: ${result.slice(0, 150)}`);
+            if (session.messageQueue.length > 0 && session.finalOutput !== "" && !session.turnError) {
+              this.sendOpeningInterim(session);
+            }
           }
           if (session.messageQueue.length > 0) {
             await this.drainQueue(session);
@@ -13508,11 +13716,17 @@ ${result}`;
        *  wrap-up (a fresh task) rather than being a leftover from the original batch.
        *
        *  Mid-tier parents are intentionally excluded (parentId !== null): their
-       *  tryReportToParent bubble-up already gates them on a fully-drained subtree. */
+       *  tryReportToParent bubble-up already gates them on a fully-drained subtree.
+       *
+       *  Returns two renderings of the same rows: `llm` (appended to the model
+       *  input, ISO stamps for a clock-less model) and `ui` (the `system` event the
+       *  admin shows — the message carries its own `timestamp`, so the header has no
+       *  clock and per-child times are relative ages, not raw UTC ISO). */
       siblingStatusSuffix(session) {
         if (session.parentId !== null)
-          return "";
-        const nowIso = (/* @__PURE__ */ new Date()).toISOString();
+          return { llm: "", ui: "" };
+        const now = Date.now();
+        const nowIso = new Date(now).toISOString();
         const stillRunning = this.db.select({
           agentName: agentSessions.agentName,
           description: agentSessions.description,
@@ -13520,16 +13734,19 @@ ${result}`;
           updatedAt: agentSessions.updatedAt
         }).from(agentSessions).where(and6(eq9(agentSessions.parentId, session.id), isNull4(agentSessions.stoppedAt), isNull4(agentSessions.archivedAt))).all();
         if (stillRunning.length === 0 && session.messageQueue.length === 0) {
-          return `
+          const done = "All sub-agents you dispatched have completed. This is the final report \u2014 you may now consolidate and wrap up.";
+          return { llm: `
 
-[System @ ${nowIso}] All sub-agents you dispatched have completed. This is the final report \u2014 you may now consolidate and wrap up.`;
+[System @ ${nowIso}] ${done}`, ui: `[System] ${done}` };
         }
-        const list = stillRunning.map((c) => `  - ${c.agentName} (created ${new Date(c.createdAt).toISOString()}, last active ${new Date(c.updatedAt).toISOString()}): ${c.description.slice(0, 80)}`).join("\n");
-        return `
-
-[System @ ${nowIso}] Do NOT wrap up yet \u2014 ${stillRunning.length} sub-agent(s) still running, ${session.messageQueue.length} report(s) still queued.
+        const head = `Do NOT wrap up yet \u2014 ${stillRunning.length} sub-agent(s) still running, ${session.messageQueue.length} report(s) still queued.
 Still running:
-${list}`;
+`;
+        const llmList = stillRunning.map((c) => `  - ${c.agentName} (created ${new Date(c.createdAt).toISOString()}, last active ${new Date(c.updatedAt).toISOString()}): ${c.description.slice(0, 80)}`).join("\n");
+        const uiList = stillRunning.map((c) => `  - ${c.agentName} (started ${formatAge(now - c.createdAt)} ago, last active ${formatAge(now - c.updatedAt)} ago): ${c.description.slice(0, 80)}`).join("\n");
+        return { llm: `
+
+[System @ ${nowIso}] ${head}${llmList}`, ui: `[System] ${head}${uiList}` };
       }
       /** Drain queued messages (user→agent AND agent→agent share this one queue)
        *  after a session finishes a turn. The whole queue is folded into ONE turn:
@@ -13561,12 +13778,12 @@ ${list}`;
           const merged = batch.map((q) => q.sourceSessionId ? `(from: session ${q.sourceSessionId})
 ${q.text}` : q.text).join("\n\n");
           const images = batch.flatMap((q) => q.images ?? []);
-          const suffix = batch.some((q) => q.sourceSessionId !== void 0) ? this.siblingStatusSuffix(session) : "";
-          if (suffix && session.parentId === null) {
-            this.emitEvent(session.id, { type: "system", text: suffix.trim(), agentName: session.agentName });
+          const suffix = batch.some((q) => q.sourceSessionId !== void 0) ? this.siblingStatusSuffix(session) : { llm: "", ui: "" };
+          if (suffix.ui && session.parentId === null) {
+            this.emitEvent(session.id, { type: "system", text: suffix.ui, agentName: session.agentName });
           }
           const kickNote = kickFlagReset ? "\n\n[System] The continue_task flag you set last turn was reset by this interrupt. If the interrupted task is still unfinished after you answer, call continue_task again." : "";
-          const input = this.buildInput(merged + suffix + kickNote, images.length > 0 ? images : void 0, session.supportsImage);
+          const input = this.buildInput(merged + suffix.llm + kickNote, images.length > 0 ? images : void 0, session.supportsImage);
           try {
             await this.runAgentTurn(session, input);
           } catch (err) {
@@ -13574,9 +13791,12 @@ ${q.text}` : q.text).join("\n\n");
             console.error(`[SessionManager] Drain run error for ${session.id}: ${errMsg}`);
             throw err;
           }
+          const nextTurnFollows = session.selfKick && !session.interruptRequested || session.messageQueue.length > 0;
+          const isAnswer = session.selfKick || session.finalOutput !== "";
+          if (nextTurnFollows && isAnswer)
+            this.sendInterimReport(session, batch);
           if (session.messageQueue.length === 0) {
             if (session.selfKick && !session.interruptRequested) {
-              this.sendInterimReport(session, batch);
               session.messageQueue.push({ text: CONTINUE_TASK_KICK });
               const taskId = session.parentId !== null ? session.id : void 0;
               this.emitEvent(session.id, { type: "user", text: CONTINUE_TASK_KICK, agentName: "user", report: true, taskId });
@@ -13589,30 +13809,52 @@ ${q.text}` : q.text).join("\n\n");
           }
         }
       }
-      /** continue_task interim report. The answer turn that precedes a kick is
-       *  otherwise lost to whoever asked: the end-of-run reports (tryReportToParent /
-       *  deliverRelayReport) read only the LAST turn's output, and the kick turn
-       *  resets it. So when the batch just answered came from the party this session
-       *  owes a report — its parent (sub-agent) or a relay caller (root, relay-
-       *  prefixed message) — forward the answer now. Neither path touches the final
-       *  report's state: no stoppedAt / agent_done (parent's sibling-status still sees
-       *  this child running), reply_to kept. Goal workers are deliberately excluded
-       *  (G's messages carry neither mark): an interim would wake G mid-round, and a
-       *  fresh query_session from G would interrupt W again. */
+      /** Interim report for a drained turn. A turn followed by another turn (kick /
+       *  queued message) is otherwise lost to whoever asked: the end-of-run reports
+       *  (tryReportToParent / deliverRelayReport) read only the LAST turn's output,
+       *  and the next runAgentTurn resets it. So when the batch just answered came
+       *  from the party this session owes a report — its parent (sub-agent) or a
+       *  relay caller (root, relay-prefixed message) — forward the answer now.
+       *  Neither path touches the final report's state: no stoppedAt / agent_done
+       *  (parent's sibling-status still sees this child running), reply_to kept.
+       *  Goal workers are deliberately excluded (G's messages carry neither mark):
+       *  an interim would wake G mid-round, and a fresh query_session from G would
+       *  interrupt W again. */
       sendInterimReport(session, batch) {
         const fromParent = session.parentId !== null && batch.some((q) => q.sourceSessionId === session.parentId);
         const fromRelay = session.parentId === null && batch.some((q) => q.sourceSessionId === void 0 && q.text.includes(RELAY_CHANNEL_PREFIX));
-        if (!fromParent && !fromRelay || session.turnError)
+        if (fromParent)
+          this.deliverInterim(session, "parent");
+        else if (fromRelay)
+          this.deliverInterim(session, "relay");
+      }
+      /** Interim report for the OPENING turn (runSession's `hasFirst` turn): when it
+       *  ends naturally while the queue already holds a follow-up, the drain resets
+       *  output and the wrap-up is lost the same way. No batch to read the door from
+       *  here — the opening message is the dispatch itself — so the owed party is
+       *  whoever this session reports to at the end: its parent, or a relay caller
+       *  (reply_to row). Goal workers have neither, so they get nothing. */
+      sendOpeningInterim(session) {
+        if (session.parentId !== null)
+          this.deliverInterim(session, "parent");
+        else if (readReplyTo(this.db, session.id) !== null)
+          this.deliverInterim(session, "relay");
+      }
+      /** Body = the WHOLE turn's text (`output`, not `finalOutput`): in a turn that
+       *  answered and then called continue_task the answer rides the tool_use
+       *  response, whose text is `final: false` and never reaches finalOutput. */
+      deliverInterim(session, to) {
+        if (session.turnError)
           return;
-        const answer = session.finalOutput || session.output;
+        const answer = session.output;
         if (!answer)
           return;
         const cap2 = config.limits.autoReportMax;
         const body = answer.length > cap2 ? answer.slice(0, cap2) + `
 
 [Interim report truncated: ${answer.length} chars total.]` : answer;
-        if (fromParent) {
-          const text6 = `[Interim report: answered your message (below) and is now resuming its interrupted task \u2014 the final report follows when that is done. Not the final result.]
+        if (to === "parent") {
+          const text6 = `[Interim report \xB7 status: still running] Answered your message (below); the session is still working \u2014 its final report follows when done. Not the final result.
 
 ${body}`;
           this.querySession(session.parentId, session.id, text6).catch((err) => {
@@ -13881,12 +14123,11 @@ ${cleaned}` : cleaned;
         if (accessLevel !== void 0 && accessLevel !== session.accessLevel) {
           session.accessLevel = accessLevel;
           const savedMessages = session.agent.messages;
-          const { agent, modelId, systemPrompt, draftReset } = await this.buildAgentInstance(session.agentId, sessionId, session.parentId, session.workingDir ?? void 0, accessLevel);
+          const { agent, modelId, systemPrompt } = await this.buildAgentInstance(session.agentId, sessionId, session.parentId, session.workingDir ?? void 0, accessLevel);
           session.agent = agent;
           session.agent.messages = savedMessages;
           session.currentModelId = modelId;
           session.systemPrompt = systemPrompt;
-          session.draftReset = draftReset;
           this.db.update(agentSessions).set({ accessLevel }).where(eq9(agentSessions.id, sessionId)).run();
         }
         const meta = this.db.select().from(agentSessions).where(eq9(agentSessions.id, sessionId)).get();
@@ -14361,7 +14602,7 @@ ${result.summary}`, agentName: "user", report: true, taskId });
         if (!uiState)
           return "not_found";
         const messageLog = uiState.messageLog;
-        let start = -1;
+        let start2 = -1;
         let seen = -1;
         for (let i = 0; i < messageLog.length; i++) {
           if (messageLog[i].role !== "user")
@@ -14370,22 +14611,22 @@ ${result.summary}`, agentName: "user", report: true, taskId });
             continue;
           seen++;
           if (seen === userOrdinal) {
-            start = i;
+            start2 = i;
             break;
           }
         }
-        if (start === -1)
+        if (start2 === -1)
           return "no_exchange";
-        const target = stripImageMarkers(messageLog[start].content);
+        const target = stripImageMarkers(messageLog[start2].content);
         let rank = 0;
-        for (let i = 0; i <= start; i++) {
+        for (let i = 0; i <= start2; i++) {
           const m = messageLog[i];
           if (m.role === "user" && !m.taskId && stripImageMarkers(m.content) === target)
             rank++;
         }
         const newLog = messageLog.slice();
-        for (let i = start; i < newLog.length; i++) {
-          if (i > start && newLog[i].role === "user")
+        for (let i = start2; i < newLog.length; i++) {
+          if (i > start2 && newLog[i].role === "user")
             break;
           newLog[i] = { ...newLog[i], deleted: true };
         }
@@ -14417,28 +14658,28 @@ ${result.summary}`, agentName: "user", report: true, taskId });
        *  Returns the new array, or null when no matching turn exists. */
       deleteRawTurn(raw, target, rank) {
         let seen = 0;
-        let start = -1;
+        let start2 = -1;
         for (let i = 0; i < raw.length; i++) {
           if (!isRawTurnStart(raw[i]))
             continue;
           if (stripImageMarkers(stripTurnStamp(rawMessageText(raw[i]))) === target) {
             seen++;
             if (seen === rank) {
-              start = i;
+              start2 = i;
               break;
             }
           }
         }
-        if (start === -1)
+        if (start2 === -1)
           return null;
         let end = raw.length;
-        for (let i = start + 1; i < raw.length; i++) {
+        for (let i = start2 + 1; i < raw.length; i++) {
           if (isRawTurnStart(raw[i])) {
             end = i;
             break;
           }
         }
-        return [...raw.slice(0, start), ...raw.slice(end)];
+        return [...raw.slice(0, start2), ...raw.slice(end)];
       }
       // ── Phase 2: deleteSession (SQLite only) ──────────────────────────
       /**
@@ -14999,7 +15240,7 @@ async function createHarness(opts) {
   function interrupt() {
     state.sm.interruptSession(state.sessionId);
   }
-  async function stop() {
+  async function stop2() {
     if (state.sm.isSessionRunning(state.sessionId)) {
       await state.sm.stopSession(state.sessionId);
     }
@@ -15076,7 +15317,7 @@ async function createHarness(opts) {
     offEvent,
     command,
     interrupt,
-    stop,
+    stop: stop2,
     destroy,
     switchWorkspace,
     getSessionTree,
@@ -16449,8 +16690,8 @@ function applyPathPick(value, ref, pick) {
   const before = value.slice(0, markerStart);
   const kind = ref.kind === "scope" ? "scope" : ref.kind === "image" ? "image" : pick.isImage ? "image" : "file";
   const needsQuote = pick.insertPath.includes(" ");
-  const path70 = pick.isDir ? needsQuote ? `"${pick.insertPath}/` : `${pick.insertPath}/` : needsQuote ? `"${pick.insertPath}" ` : `${pick.insertPath} `;
-  return `${before}@${kind} ${path70}`;
+  const path74 = pick.isDir ? needsQuote ? `"${pick.insertPath}/` : `${pick.insertPath}/` : needsQuote ? `"${pick.insertPath}" ` : `${pick.insertPath} `;
+  return `${before}@${kind} ${path74}`;
 }
 var init_path_suggest_engine = __esm({
   "src/tui/path-suggest-engine.ts"() {
@@ -17948,7 +18189,9 @@ function extractMediaMessage(text6) {
   const { text: stripped, mediaPaths } = extractMediaPaths(text6);
   return { text: stripped.replace(/\n{3,}/g, "\n\n").trim(), mediaPaths };
 }
-function isMediaPathAllowed(filePath, workspacePath) {
+function isMediaPathAllowed(filePath, workspacePath, accessLevel) {
+  if (accessLevel === "full")
+    return true;
   const resolved = path40.resolve(filePath);
   const ws = path40.resolve(workspacePath);
   return resolved === ws || resolved.startsWith(ws + path40.sep) || isInTempDir(resolved);
@@ -18263,6 +18506,48 @@ function createFileRoutes() {
       return c.json({ error: errorMessage }, 500);
     }
   });
+  app2.put("/files/raw", async (c) => {
+    try {
+      const filePath = c.req.query("path");
+      const projectId = c.req.query("projectId");
+      const expectMtimeRaw = c.req.query("expectMtime");
+      if (!filePath || !projectId) {
+        return c.json({ error: "path and projectId are required" }, 400);
+      }
+      const expectMtime = expectMtimeRaw === void 0 ? void 0 : Number(expectMtimeRaw);
+      if (expectMtime !== void 0 && !Number.isFinite(expectMtime)) {
+        return c.json({ error: "expectMtime must be a number" }, 400);
+      }
+      const projectPath = await resolveProjectPath(projectId);
+      if (!projectPath) {
+        return c.json({ error: "Project not found" }, 404);
+      }
+      if (!validatePath(filePath, projectPath)) {
+        return c.json({ error: "Path traversal not allowed" }, 403);
+      }
+      const absolutePath = path42.resolve(projectPath, filePath);
+      let before;
+      try {
+        before = await fs35.stat(absolutePath);
+      } catch (err) {
+        if (err.code === "ENOENT")
+          return c.json({ error: "File not found" }, 404);
+        throw err;
+      }
+      if (before.isDirectory())
+        return c.json({ error: "Cannot write a directory" }, 400);
+      if (expectMtime !== void 0 && Math.round(before.mtimeMs) !== Math.round(expectMtime)) {
+        return c.json({ error: "conflict", mtime: before.mtimeMs, size: before.size }, 409);
+      }
+      await fs35.writeFile(absolutePath, Buffer.from(await c.req.arrayBuffer()));
+      const stat = await fs35.stat(absolutePath);
+      return c.json({ ok: true, path: filePath, mtime: stat.mtimeMs, size: stat.size });
+    } catch (err) {
+      const errorMessage = err instanceof Error ? err.message : String(err);
+      console.log(`[Files] Error writing raw file: ${errorMessage}`);
+      return c.json({ error: errorMessage }, 500);
+    }
+  });
   app2.post("/files/new", async (c) => {
     try {
       const body = await c.req.json();
@@ -18378,7 +18663,8 @@ function createFileRoutes() {
     wav: "audio/wav",
     flac: "audio/flac",
     aac: "audio/aac",
-    m4a: "audio/mp4"
+    m4a: "audio/mp4",
+    wasm: "application/wasm"
   };
   app2.get("/files/download", async (c) => {
     try {
@@ -18407,15 +18693,15 @@ function createFileRoutes() {
       const disposition = inline ? `inline; filename="${encodeURIComponent(fileName)}"` : `attachment; filename="${encodeURIComponent(fileName)}"`;
       const fileSize = stat.size;
       const rangeHeader = c.req.header("range");
-      let start = 0;
+      let start2 = 0;
       let end = fileSize - 1;
       let status = 200;
       if (rangeHeader) {
         const match = /^bytes=(\d+)-(\d*)$/.exec(rangeHeader);
         if (match) {
-          start = parseInt(match[1], 10);
+          start2 = parseInt(match[1], 10);
           end = match[2] ? parseInt(match[2], 10) : fileSize - 1;
-          if (isNaN(start) || isNaN(end) || start > end || end >= fileSize) {
+          if (isNaN(start2) || isNaN(end) || start2 > end || end >= fileSize) {
             return new Response(null, {
               status: 416,
               headers: { "Content-Range": `bytes */${fileSize}` }
@@ -18424,8 +18710,8 @@ function createFileRoutes() {
           status = 206;
         }
       }
-      const chunkSize = fileSize === 0 ? 0 : end - start + 1;
-      const nodeStream = fileSize === 0 ? Readable.from([]) : createReadStream(absolutePath, { start, end });
+      const chunkSize = fileSize === 0 ? 0 : end - start2 + 1;
+      const nodeStream = fileSize === 0 ? Readable.from([]) : createReadStream(absolutePath, { start: start2, end });
       const req = c.req.raw;
       if (req.signal) {
         req.signal.addEventListener("abort", () => {
@@ -18440,7 +18726,7 @@ function createFileRoutes() {
         "Accept-Ranges": "bytes"
       };
       if (status === 206) {
-        headers["Content-Range"] = `bytes ${start}-${end}/${fileSize}`;
+        headers["Content-Range"] = `bytes ${start2}-${end}/${fileSize}`;
       }
       return new Response(webStream, { status, headers });
     } catch (err) {
@@ -19565,7 +19851,6 @@ function getAvailableTools() {
   if (_cachedTools)
     return _cachedTools;
   const tools = createWorkspaceTools("/tmp");
-  const { tool: draft } = createDraftTool();
   const relay = buildRelayTools({ workspaceRoot: "/tmp" }, "");
   const relayChip = {
     name: "relay_send",
@@ -19573,7 +19858,7 @@ function getAvailableTools() {
 
 ${relay[0].description}`
   };
-  _cachedTools = [...tools, draft].map((t2) => ({ name: t2.name, description: t2.description })).concat(relayChip);
+  _cachedTools = tools.map((t2) => ({ name: t2.name, description: t2.description })).concat(relayChip);
   return _cachedTools;
 }
 async function writeFileAtomic2(filePath, content) {
@@ -19766,6 +20051,8 @@ function createAgentConfigRoutes() {
     const id = body.name.toLowerCase().replace(/[^a-z0-9\u4e00-\u9fff]+/g, "-").replace(/^-|-$/g, "");
     if (!id)
       return c.json({ error: "Invalid agent name" }, 400);
+    if (id === GOAL_AGENT_ID && !config.goalModeEnabled)
+      return c.json({ error: "Goal mode is disabled." }, 403);
     const scope = body.scope ?? "global";
     let baseDir;
     if (scope === "workspace") {
@@ -20029,6 +20316,13 @@ ${body.description ?? ""}
     if (!isSafeIdSegment(sessionId))
       return c.json({ error: "Invalid session id" }, 400);
     const dir = getSessionsDir(agentId, source, projectId || void 0);
+    if (agentId === GOAL_AGENT_ID && !config.goalModeEnabled) {
+      try {
+        await fs39.access(path47.join(dir, `${sessionId}.json`));
+      } catch {
+        return c.json({ error: "Goal mode is disabled." }, 403);
+      }
+    }
     await ensureDir2(dir);
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const messages2 = body.messages ?? [];
@@ -20092,8 +20386,8 @@ var init_agent_configs = __esm({
   "../server/dist/routes/agent-configs.js"() {
     "use strict";
     init_workspace_tools();
-    init_draft_tool();
     init_relay();
+    init_goal_mode();
     init_md_loader();
     init_config();
     init_db();
@@ -20445,8 +20739,8 @@ function detectOrphans(tree, declared) {
       if (!block || typeof block !== "object")
         continue;
       for (const k of Object.keys(block)) {
-        const path70 = `${namespaceId}.${kindWord}.${k}`;
-        if (!declaredMap.has(path70)) {
+        const path74 = `${namespaceId}.${kindWord}.${k}`;
+        if (!declaredMap.has(path74)) {
           out.push({ namespaceId, kind: kindWord === "params" ? "param" : "secret", key: k });
         }
       }
@@ -21532,7 +21826,11 @@ function rememberWechatContextToken(db, accountId, userId, token) {
     return;
   const tokens = existing.config.contextTokens ?? {};
   if (tokens[userId] !== token) {
-    patchConfig(db, accountId, { contextTokens: { ...tokens, [userId]: token } });
+    const ats = existing.config.contextTokenAts ?? {};
+    patchConfig(db, accountId, {
+      contextTokens: { ...tokens, [userId]: token },
+      contextTokenAts: { ...ats, [userId]: Date.now() }
+    });
   }
   _wechatContextTokenCache.set(key, token);
 }
@@ -21754,14 +22052,14 @@ function createWebChannel(deps) {
     return findActiveSessionId(sm, accountId, prefix, activeOverrides2, "full") ?? void 0;
   }
   function resolveWorkspace(account, override) {
-    let path70 = account.workspacePath;
+    let path74 = account.workspacePath;
     if (override && override !== account.workspacePath) {
       if (account.accessLevel !== "full") {
         return { ok: false, error: "workspace override requires a full-access token" };
       }
-      path70 = override;
+      path74 = override;
     }
-    const resolved = resolveAccountWorkspace({ ...account, workspacePath: path70 });
+    const resolved = resolveAccountWorkspace({ ...account, workspacePath: path74 });
     if (!resolved)
       return { ok: false, error: "workspace not found" };
     return { ok: true, path: resolved };
@@ -22197,11 +22495,19 @@ var init_session_message = __esm({
   }
 });
 
+// ../core/dist/protocol/extension-frames.js
+var init_extension_frames = __esm({
+  "../core/dist/protocol/extension-frames.js"() {
+    "use strict";
+  }
+});
+
 // ../core/dist/protocol/index.js
 var init_protocol = __esm({
   "../core/dist/protocol/index.js"() {
     "use strict";
     init_session_message();
+    init_extension_frames();
   }
 });
 
@@ -23197,7 +23503,7 @@ var init_file_watcher = __esm({
     ];
     IS_WIN32 = process.platform === "win32";
     IGNORED_SEGMENT_SET = new Set(IGNORED_SEGMENTS);
-    NATIVE_IGNORE = IS_WIN32 ? IGNORED_SEGMENTS : IGNORED_SEGMENTS.flatMap((seg) => [seg, `**/${seg}/**`]);
+    NATIVE_IGNORE = IS_WIN32 ? IGNORED_SEGMENTS : [...IGNORED_SEGMENTS, `**/{${IGNORED_SEGMENTS.join(",")}}/**`];
     nativeOpChain = Promise.resolve();
     WorkspaceWatcher = class {
       subscription = null;
@@ -23231,8 +23537,8 @@ var init_file_watcher = __esm({
         const epoch = ++this.startEpoch;
         this.workspaceRoot = root;
         try {
-          const { default: watcher } = await import("@parcel/watcher");
-          const sub = await enqueueNativeOp(() => watcher.subscribe(root, (err, events) => {
+          const { default: watcher2 } = await import("@parcel/watcher");
+          const sub = await enqueueNativeOp(() => watcher2.subscribe(root, (err, events) => {
             if (err) {
               console.warn(`[FileWatcher] watcher error on ${root}: ${err.message}`);
               return;
@@ -23492,28 +23798,43 @@ function sendJson(ws, data) {
 function sendWsNotification(event, state, turnId, ctx) {
   const agentName = event.agentName ?? "default";
   const taskId = event.taskId;
+  const sessionId = ctx.sessionId;
   switch (event.type) {
+    // Streaming chunks ride the same frames as the whole-text events — the
+    // admin appends chat:thinking / chat:stream by turnId either way. The whole
+    // event that follows a streamed call is stamped `streamed` and dropped so
+    // the client doesn't render the text twice.
+    case "thinking_delta":
+      sendJson(ctx.ws, { type: "chat:thinking", text: event.text ?? "", agentName, taskId, turnId, sessionId });
+      break;
+    case "stream_delta":
+      sendJson(ctx.ws, { type: "chat:stream", text: event.text ?? "", agentName, taskId, turnId, sessionId });
+      break;
     case "thinking":
-      sendJson(ctx.ws, { type: "chat:thinking", text: event.text ?? "", agentName, taskId, turnId });
+      if (event.streamed)
+        break;
+      sendJson(ctx.ws, { type: "chat:thinking", text: event.text ?? "", agentName, taskId, turnId, sessionId });
       break;
     case "stream":
-      sendJson(ctx.ws, { type: "chat:stream", text: event.text ?? "", agentName, taskId, turnId });
+      if (event.streamed)
+        break;
+      sendJson(ctx.ws, { type: "chat:stream", text: event.text ?? "", agentName, taskId, turnId, sessionId });
       break;
     case "agent_start":
-      sendJson(ctx.ws, { type: "agent:start", agentName, task: event.text, taskId });
+      sendJson(ctx.ws, { type: "agent:start", agentName, task: event.text, taskId, sessionId });
       break;
     case "agent_done":
-      sendJson(ctx.ws, { type: "agent:done", agentName, taskId });
+      sendJson(ctx.ws, { type: "agent:done", agentName, taskId, sessionId });
       break;
     case "tool_call":
-      sendJson(ctx.ws, { type: "agent:tool_call", tool: event.toolName, toolUseId: event.toolUseId, input: event.toolInput, agentName, taskId, turnId });
+      sendJson(ctx.ws, { type: "agent:tool_call", tool: event.toolName, toolUseId: event.toolUseId, input: event.toolInput, agentName, taskId, turnId, sessionId });
       break;
     case "tool_result":
-      sendJson(ctx.ws, { type: "agent:tool_result", result: event.toolResult, toolUseId: event.toolUseId, agentName, taskId, durationMs: event.durationMs });
+      sendJson(ctx.ws, { type: "agent:tool_result", result: event.toolResult, toolUseId: event.toolUseId, agentName, taskId, durationMs: event.durationMs, sessionId });
       break;
     case "followup_start":
     case "queued_message":
-      sendJson(ctx.ws, { type: "chat:followup", agentName });
+      sendJson(ctx.ws, { type: "chat:followup", agentName, sessionId });
       break;
     case "usage":
       if (!taskId) {
@@ -23523,28 +23844,29 @@ function sendWsNotification(event, state, turnId, ctx) {
           outputTokens: state.outputTokens,
           turnId,
           modelId: event.modelId,
-          usage: buildUsageData(event)
+          usage: buildUsageData(event),
+          sessionId
         });
       }
       break;
     case "complete":
-      sendJson(ctx.ws, { type: "chat:complete", sessionId: ctx.sessionId });
+      sendJson(ctx.ws, { type: "chat:complete", sessionId });
       break;
     case "context":
-      sendJson(ctx.ws, { type: "agent:context", agentName, systemPrompt: event.systemPrompt, taskId });
+      sendJson(ctx.ws, { type: "agent:context", agentName, systemPrompt: event.systemPrompt, taskId, sessionId });
       break;
     case "system":
       if (!taskId && /^Compacting context \(\d+K tokens\)…$/.test(event.text ?? "")) {
         sendJson(ctx.ws, { type: "compact:started" });
       }
-      sendJson(ctx.ws, { type: "chat:system", text: event.text ?? "", taskId, agentName });
+      sendJson(ctx.ws, { type: "chat:system", text: event.text ?? "", taskId, agentName, sessionId });
       break;
     case "error":
-      sendJson(ctx.ws, { type: "error", error: event.error, agentName, taskId });
+      sendJson(ctx.ws, { type: "error", error: event.error, agentName, taskId, sessionId });
       break;
     case "user":
       if (!taskId && !event.localEcho) {
-        sendJson(ctx.ws, { type: "chat:user", text: event.text ?? "" });
+        sendJson(ctx.ws, { type: "chat:user", text: event.text ?? "", sessionId });
       }
       break;
     case "compacted":
@@ -23877,14 +24199,14 @@ function setupWebSocketHandler(deps) {
     if (!client.sessionManager.isUIStateDirty(client.sessionId))
       return;
     const projectPath = resolveProjectPath2(client.projectId);
-    const snapshot = createSaveSnapshot(state);
-    if (snapshot.length === 0)
+    const snapshot2 = createSaveSnapshot(state);
+    if (snapshot2.length === 0)
       return;
     const sessionInfo = client.sessionManager.getSessionById(client.sessionId);
     client.sessionManager.persistSessionFile({
       sessionId: client.sessionId,
       projectPath,
-      messages: snapshot,
+      messages: snapshot2,
       contextTokens: state.contextTokens,
       outputTokens: state.outputTokens,
       agentId: sessionInfo?.agentId,
@@ -24367,17 +24689,18 @@ ${msg.message}` : markers.join("\n");
         if (state2 && running) {
           console.debug(`[WS] Session still running \u2014 synthesizing in-progress state`);
           const agentName = detachedSession?.agentName ?? (state2.streamingAgent || "default");
-          sendJson(ws, { type: "chat:followup", agentName, replay: true });
+          const sessionId = client2.sessionId;
+          sendJson(ws, { type: "chat:followup", agentName, replay: true, sessionId });
           for (const block of state2.turnContentBlocks) {
             if (block.type === "thinking") {
-              sendJson(ws, { type: "chat:thinking", text: block.text, agentName, turnId: block.turnId, replay: true });
+              sendJson(ws, { type: "chat:thinking", text: block.text, agentName, turnId: block.turnId, replay: true, sessionId });
             } else if (block.type === "text") {
-              sendJson(ws, { type: "chat:stream", text: block.text, agentName, turnId: block.turnId, replay: true });
+              sendJson(ws, { type: "chat:stream", text: block.text, agentName, turnId: block.turnId, replay: true, sessionId });
             } else {
               const tc = block.toolCall;
-              sendJson(ws, { type: "agent:tool_call", tool: tc.name, toolUseId: tc.toolUseId, input: tc.input, agentName, turnId: block.turnId, replay: true });
+              sendJson(ws, { type: "agent:tool_call", tool: tc.name, toolUseId: tc.toolUseId, input: tc.input, agentName, turnId: block.turnId, replay: true, sessionId });
               if (tc.output) {
-                sendJson(ws, { type: "agent:tool_result", result: tc.output, toolUseId: tc.toolUseId, agentName, durationMs: tc.durationMs, replay: true });
+                sendJson(ws, { type: "agent:tool_result", result: tc.output, toolUseId: tc.toolUseId, agentName, durationMs: tc.durationMs, replay: true, sessionId });
               }
             }
           }
@@ -24681,14 +25004,14 @@ function resolveHaloCli() {
   return process.platform === "win32" ? "halo.cmd" : "halo";
 }
 function listDescendants(rootPid) {
-  let snapshot;
+  let snapshot2;
   try {
-    snapshot = execFileSync("ps", ["-e", "-o", "pid=,ppid="], { encoding: "utf-8" });
+    snapshot2 = execFileSync("ps", ["-e", "-o", "pid=,ppid="], { encoding: "utf-8" });
   } catch {
     return [];
   }
   const childrenOf = /* @__PURE__ */ new Map();
-  for (const line of snapshot.split("\n")) {
+  for (const line of snapshot2.split("\n")) {
     const parts = line.trim().split(/\s+/);
     if (parts.length !== 2)
       continue;
@@ -25574,88 +25897,810 @@ var init_cron = __esm({
   }
 });
 
-// ../server/dist/evolution/ticker.js
-import { eq as eq16, and as and12, or as or2, asc, isNull as isNull6, sql as sql2 } from "drizzle-orm";
-function setEvoSpawner(fn) {
-  _spawner = fn;
+// ../server/dist/extensions/registry.js
+import fs53 from "node:fs";
+import path61 from "node:path";
+function isExtensionId(id) {
+  return ID_RE.test(id);
+}
+function extensionsRoot() {
+  return globalExtensionsDir();
+}
+function parseManifest(raw, dirName, entryExists) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw))
+    return { error: "manifest must be a JSON object" };
+  const m = raw;
+  if (typeof m.id !== "string" || !ID_RE.test(m.id))
+    return { error: "id must match ^[a-z0-9][a-z0-9_-]{0,63}$" };
+  if (m.id !== dirName)
+    return { error: `id mismatch: manifest "${m.id}" vs directory "${dirName}"` };
+  if (typeof m.name !== "string" || m.name.trim() === "" || m.name.length > 64)
+    return { error: "name must be a non-empty string (\u2264 64 chars)" };
+  if (typeof m.version !== "string" || !VERSION_RE.test(m.version))
+    return { error: "version must be semver (x.y.z[-pre])" };
+  if (m.description !== void 0 && (typeof m.description !== "string" || m.description.length > 200))
+    return { error: "description must be a string (\u2264 200 chars)" };
+  if (!Array.isArray(m.extensions) || m.extensions.length === 0)
+    return { error: "extensions must be a non-empty array" };
+  for (const e of m.extensions) {
+    if (typeof e !== "string" || !FILE_EXT_RE.test(e))
+      return { error: `extensions entry "${String(e)}" must look like ".glb" (lowercase, with dot)` };
+  }
+  if (typeof m.entry !== "string" || m.entry === "" || m.entry.startsWith("/") || m.entry.split(/[\\/]/).includes("..")) {
+    return { error: "entry must be a relative path inside the extension directory" };
+  }
+  if (!entryExists(m.entry))
+    return { error: `entry not found: ${m.entry}` };
+  let priority = "default";
+  if (m.priority !== void 0) {
+    if (m.priority !== "default" && m.priority !== "option")
+      return { error: 'priority must be "default" or "option"' };
+    priority = m.priority;
+  }
+  const capabilities = [];
+  if (m.capabilities !== void 0) {
+    if (!Array.isArray(m.capabilities))
+      return { error: "capabilities must be an array" };
+    for (const cap2 of m.capabilities) {
+      if (typeof cap2 !== "string" || !CAPABILITIES.has(cap2))
+        return { error: `unknown capability: ${String(cap2)}` };
+      if (!capabilities.includes(cap2))
+        capabilities.push(cap2);
+    }
+  }
+  if (m.homepage !== void 0 && (typeof m.homepage !== "string" || !/^https?:\/\//.test(m.homepage)))
+    return { error: "homepage must be an http(s) URL" };
+  if (m.license !== void 0 && typeof m.license !== "string")
+    return { error: "license must be a string" };
+  return {
+    id: m.id,
+    name: m.name,
+    version: m.version,
+    ...m.description !== void 0 ? { description: m.description } : {},
+    extensions: m.extensions,
+    entry: m.entry,
+    priority,
+    capabilities,
+    ...m.homepage !== void 0 ? { homepage: m.homepage } : {},
+    ...m.license !== void 0 ? { license: m.license } : {}
+  };
 }
-function startEvoTicker() {
-  if (_interval)
-    return;
-  _startupTimer2 = setTimeout(() => {
-    _startupTimer2 = null;
-    runTick().catch(logTickError);
-  }, 2e3);
-  _interval = setInterval(() => {
-    runTick().catch(logTickError);
-  }, TICK_INTERVAL_MS);
-  console.log(`[EvoTicker] started (interval: ${TICK_INTERVAL_MS / 1e3}s)`);
+function readExtensionDir(dir, id = path61.basename(dir)) {
+  let raw;
+  try {
+    raw = JSON.parse(fs53.readFileSync(path61.join(dir, MANIFEST_FILE), "utf-8"));
+  } catch (err) {
+    const code = err.code;
+    return { id, error: code === "ENOENT" ? `${MANIFEST_FILE} missing` : `${MANIFEST_FILE} unreadable: ${err instanceof Error ? err.message : String(err)}` };
+  }
+  const parsed = parseManifest(raw, id, (entry) => {
+    try {
+      return fs53.statSync(path61.join(dir, entry)).isFile();
+    } catch {
+      return false;
+    }
+  });
+  if ("error" in parsed)
+    return { id, error: parsed.error };
+  let installedAt = 0;
+  try {
+    installedAt = Math.round(fs53.statSync(dir).mtimeMs);
+  } catch {
+  }
+  return { ...parsed, installedAt };
 }
-function stopEvoTicker() {
-  if (_startupTimer2) {
-    clearTimeout(_startupTimer2);
-    _startupTimer2 = null;
+function scanExtensions() {
+  const root = extensionsRoot();
+  const extensions = [];
+  const errors = [];
+  let entries = [];
+  try {
+    entries = fs53.readdirSync(root, { withFileTypes: true });
+  } catch {
   }
-  if (_interval) {
-    clearInterval(_interval);
-    _interval = null;
-    console.log("[EvoTicker] stopped");
+  for (const entry of entries) {
+    if (!entry.isDirectory() || entry.name.startsWith("."))
+      continue;
+    if (!ID_RE.test(entry.name)) {
+      errors.push({ id: entry.name, error: "directory name is not a valid extension id" });
+      continue;
+    }
+    const result = readExtensionDir(path61.join(root, entry.name));
+    if ("error" in result)
+      errors.push(result);
+    else
+      extensions.push(result);
   }
+  extensions.sort((a, b) => a.id.localeCompare(b.id));
+  errors.sort((a, b) => a.id.localeCompare(b.id));
+  snapshot = { extensions, errors };
+  return snapshot;
 }
-function logTickError(err) {
-  console.error(`[EvoTicker] tick failed: ${err instanceof Error ? err.message : String(err)}`);
+function getSnapshot() {
+  return snapshot;
 }
-async function runTick() {
-  markTimeouts();
-  startPendingRuns();
-  startPendingApplies();
-  broadcastChanges();
+function getExtension(id) {
+  return snapshot.extensions.find((e) => e.id === id);
 }
-function broadcastChanges() {
-  const db = getEvoDb();
-  const inFlightLimit = (config.evolution.maxConcurrentRun + config.evolution.maxConcurrentApply) * 3;
-  const runRows = db.select({ id: evolutionRuns.id, status: evolutionRuns.status }).from(evolutionRuns).where(or2(eq16(evolutionRuns.status, "pending"), eq16(evolutionRuns.status, "running"))).limit(inFlightLimit).all();
-  for (const r of runRows) {
-    if (_lastRunStatus.get(r.id) !== r.status) {
-      _lastRunStatus.set(r.id, r.status);
-      broadcast({ type: "evolution:run_changed", id: r.id, status: r.status });
-    }
-  }
-  const applyRows = db.select({ id: evolutionApplies.id, status: evolutionApplies.status }).from(evolutionApplies).where(or2(eq16(evolutionApplies.status, "pending"), eq16(evolutionApplies.status, "running"), eq16(evolutionApplies.status, "syncing"))).limit(inFlightLimit).all();
-  for (const a of applyRows) {
-    if (_lastApplyStatus.get(a.id) !== a.status) {
-      _lastApplyStatus.set(a.id, a.status);
-      broadcast({ type: "evolution:apply_changed", id: a.id, status: a.status });
-    }
+function snapshotKey(s) {
+  return [
+    ...s.extensions.map((e) => `${e.id}@${e.version}#${e.installedAt}`),
+    ...s.errors.map((e) => `!${e.id}:${e.error}`)
+  ].join("\n");
+}
+var MANIFEST_FILE, ID_RE, VERSION_RE, FILE_EXT_RE, CAPABILITIES, snapshot;
+var init_registry2 = __esm({
+  "../server/dist/extensions/registry.js"() {
+    "use strict";
+    init_paths();
+    MANIFEST_FILE = "halo-extension.json";
+    ID_RE = /^[a-z0-9][a-z0-9_-]{0,63}$/;
+    VERSION_RE = /^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$/;
+    FILE_EXT_RE = /^\.[a-z0-9]+$/;
+    CAPABILITIES = /* @__PURE__ */ new Set(["save"]);
+    snapshot = { extensions: [], errors: [] };
   }
-  const aliveRunIds = new Set(runRows.map((r) => r.id));
-  for (const id of [..._lastRunStatus.keys()]) {
-    if (aliveRunIds.has(id))
+});
+
+// ../server/dist/extensions/install.js
+import fs54 from "node:fs";
+import path62 from "node:path";
+import { randomBytes as randomBytes2 } from "node:crypto";
+import JSZip2 from "jszip";
+function safeEntryPath(name) {
+  const posix = name.replace(/\\/g, "/");
+  if (posix.startsWith("/") || /^[A-Za-z]:/.test(posix))
+    throw new ExtensionInstallError(`zip entry has an absolute path: ${name}`);
+  const segments = posix.split("/").filter((s) => s !== "" && s !== ".");
+  if (segments.includes(".."))
+    throw new ExtensionInstallError(`zip entry escapes the archive root: ${name}`);
+  if (segments.some((s) => s.includes("\0")))
+    throw new ExtensionInstallError(`zip entry name contains NUL: ${name}`);
+  return segments.join("/");
+}
+async function unpackZip(zipBuf, dest) {
+  let zip;
+  try {
+    zip = await JSZip2.loadAsync(zipBuf);
+  } catch (err) {
+    throw new ExtensionInstallError(`not a zip file: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  const files = Object.values(zip.files);
+  if (files.length === 0)
+    throw new ExtensionInstallError("zip is empty");
+  for (const entry of files) {
+    const rel = safeEntryPath(entry.name);
+    if (rel === "")
+      continue;
+    const perm = entry.unixPermissions;
+    if (typeof perm === "number" && (perm & S_IFMT) === S_IFLNK)
+      throw new ExtensionInstallError(`zip entry is a symlink: ${entry.name}`);
+    const abs = path62.join(dest, rel);
+    if (entry.dir) {
+      fs54.mkdirSync(abs, { recursive: true });
       continue;
-    const row = db.select({ status: evolutionRuns.status }).from(evolutionRuns).where(eq16(evolutionRuns.id, id)).get();
-    const finalStatus = row?.status;
-    if (finalStatus && _lastRunStatus.get(id) !== finalStatus) {
-      broadcast({ type: "evolution:run_changed", id, status: finalStatus });
     }
-    _lastRunStatus.delete(id);
+    fs54.mkdirSync(path62.dirname(abs), { recursive: true });
+    fs54.writeFileSync(abs, await entry.async("nodebuffer"));
   }
-  const aliveApplyIds = new Set(applyRows.map((r) => r.id));
-  for (const id of [..._lastApplyStatus.keys()]) {
-    if (aliveApplyIds.has(id))
-      continue;
-    const row = db.select({ status: evolutionApplies.status }).from(evolutionApplies).where(eq16(evolutionApplies.id, id)).get();
-    const finalStatus = row?.status;
-    if (finalStatus && _lastApplyStatus.get(id) !== finalStatus) {
-      broadcast({ type: "evolution:apply_changed", id, status: finalStatus });
+}
+function stripWrapperDir(dir) {
+  if (fs54.existsSync(path62.join(dir, MANIFEST_FILE)))
+    return;
+  const children = fs54.readdirSync(dir, { withFileTypes: true });
+  if (children.length !== 1 || !children[0].isDirectory())
+    return;
+  const inner = path62.join(dir, children[0].name);
+  if (!fs54.existsSync(path62.join(inner, MANIFEST_FILE)))
+    return;
+  for (const name of fs54.readdirSync(inner)) {
+    fs54.renameSync(path62.join(inner, name), path62.join(dir, name));
+  }
+  fs54.rmdirSync(inner);
+}
+function rand() {
+  return randomBytes2(3).toString("hex");
+}
+async function installExtensionZip(zipBuf, expectId) {
+  const root = extensionsRoot();
+  fs54.mkdirSync(root, { recursive: true });
+  const stage = path62.join(root, `.tmp-unpack-${rand()}`);
+  fs54.mkdirSync(stage);
+  try {
+    await unpackZip(zipBuf, stage);
+    stripWrapperDir(stage);
+    let manifestId;
+    try {
+      const raw = JSON.parse(fs54.readFileSync(path62.join(stage, MANIFEST_FILE), "utf-8"));
+      manifestId = typeof raw.id === "string" ? raw.id : "";
+    } catch (err) {
+      throw new ExtensionInstallError(`${MANIFEST_FILE} missing or unreadable at the zip root: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!isExtensionId(manifestId))
+      throw new ExtensionInstallError(`manifest id "${manifestId}" is not a valid extension id`);
+    if (expectId !== void 0 && manifestId !== expectId)
+      throw new ExtensionInstallError(`manifest id "${manifestId}" does not match requested "${expectId}"`);
+    const verdict = readExtensionDir(stage, manifestId);
+    if ("error" in verdict)
+      throw new ExtensionInstallError(`invalid extension: ${verdict.error}`);
+    const target = path62.join(root, manifestId);
+    const old = path62.join(root, `.old-${manifestId}-${rand()}`);
+    const hadOld = fs54.existsSync(target);
+    if (hadOld)
+      fs54.renameSync(target, old);
+    try {
+      fs54.renameSync(stage, target);
+    } catch (err) {
+      if (hadOld)
+        fs54.renameSync(old, target);
+      throw err;
     }
-    _lastApplyStatus.delete(id);
+    if (hadOld)
+      fs54.rmSync(old, { recursive: true, force: true });
+    const info = readExtensionDir(target);
+    if ("error" in info)
+      throw new ExtensionInstallError(`installed but failed re-validation: ${info.error}`);
+    console.log(`[Extensions] installed ${info.id}@${info.version}${hadOld ? " (replaced previous)" : ""}`);
+    return info;
+  } finally {
+    fs54.rmSync(stage, { recursive: true, force: true });
   }
 }
-function markTimeouts() {
-  const db = getEvoDb();
-  const now = Date.now();
-  const runCutoff = now - config.evolution.runTimeoutMinutes * 6e4;
-  const applyCutoff = now - config.evolution.applyTimeoutMinutes * 6e4;
+function uninstallExtension(id) {
+  if (!isExtensionId(id))
+    throw new ExtensionInstallError(`"${id}" is not a valid extension id`);
+  const dir = path62.join(extensionsRoot(), id);
+  if (!fs54.existsSync(dir))
+    return false;
+  fs54.rmSync(dir, { recursive: true, force: true });
+  console.log(`[Extensions] removed ${id}`);
+  return true;
+}
+var ExtensionInstallError, S_IFMT, S_IFLNK;
+var init_install = __esm({
+  "../server/dist/extensions/install.js"() {
+    "use strict";
+    init_registry2();
+    ExtensionInstallError = class extends Error {
+    };
+    S_IFMT = 61440;
+    S_IFLNK = 40960;
+  }
+});
+
+// ../server/dist/extensions/watcher.js
+import fs55 from "node:fs";
+function scheduleFlush() {
+  if (flushTimer)
+    return;
+  flushTimer = setTimeout(() => {
+    flushTimer = null;
+    rescanAndBroadcast();
+  }, 300);
+}
+function rescanAndBroadcast() {
+  const snap = scanExtensions();
+  const key = snapshotKey(snap);
+  if (key === lastKey)
+    return;
+  lastKey = key;
+  broadcast({ type: "extension:changed", ...snap });
+}
+function openWatcher(root) {
+  try {
+    watcher = fs55.watch(root, { persistent: false, recursive: false }, () => scheduleFlush());
+    watcher.on("error", (err) => {
+      console.warn(`[Extensions] watch error on ${root}: ${err.message} \u2014 retrying in 1s`);
+      closeWatcher();
+      restartTimer = setTimeout(() => {
+        restartTimer = null;
+        start();
+      }, 1e3);
+      scheduleFlush();
+    });
+  } catch (err) {
+    console.warn(`[Extensions] failed to watch ${root}: ${err instanceof Error ? err.message : String(err)} \u2014 live extension updates disabled`);
+    watcher = null;
+  }
+}
+function closeWatcher() {
+  if (watcher) {
+    watcher.close();
+    watcher = null;
+  }
+}
+function start() {
+  if (watcher)
+    return;
+  const root = extensionsRoot();
+  try {
+    fs55.mkdirSync(root, { recursive: true });
+  } catch (err) {
+    console.warn(`[Extensions] cannot create ${root}: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  lastKey = snapshotKey(scanExtensions());
+  openWatcher(root);
+  const { extensions, errors } = getSnapshot();
+  if (extensions.length > 0 || errors.length > 0) {
+    console.log(`[Extensions] ${extensions.length} installed${errors.length ? `, ${errors.length} invalid` : ""}: ${[...extensions.map((e) => `${e.id}@${e.version}`), ...errors.map((e) => `${e.id}(!)`)].join(", ")}`);
+  }
+}
+function stop() {
+  if (flushTimer)
+    clearTimeout(flushTimer);
+  flushTimer = null;
+  if (restartTimer)
+    clearTimeout(restartTimer);
+  restartTimer = null;
+  closeWatcher();
+}
+var watcher, flushTimer, restartTimer, lastKey;
+var init_watcher = __esm({
+  "../server/dist/extensions/watcher.js"() {
+    "use strict";
+    init_broadcast();
+    init_registry2();
+    watcher = null;
+    flushTimer = null;
+    restartTimer = null;
+    lastKey = "";
+  }
+});
+
+// ../server/dist/middleware/auth.js
+import { Hono as Hono15 } from "hono";
+import { getCookie, setCookie } from "hono/cookie";
+import crypto3 from "node:crypto";
+function passwordHash() {
+  return config.server.password ?? "";
+}
+function passwordEnvPlaintext() {
+  return config.server.passwordEnvPlaintext;
+}
+function jwtSecret() {
+  const secret = config.server.jwtSecret ?? "";
+  if (!secret) {
+    throw new Error("jwt_secret missing \u2014 run `halo setup` to initialize");
+  }
+  return Buffer.from(secret, "base64");
+}
+function base64url(data) {
+  const buf = typeof data === "string" ? Buffer.from(data) : data;
+  return buf.toString("base64url");
+}
+function jwtSign(payload) {
+  const header = base64url(JSON.stringify({ alg: "HS256", typ: "JWT" }));
+  const body = base64url(JSON.stringify(payload));
+  const sig = crypto3.createHmac("sha256", jwtSecret()).update(`${header}.${body}`).digest();
+  return `${header}.${body}.${base64url(sig)}`;
+}
+function jwtVerify(token) {
+  const parts = token.split(".");
+  if (parts.length !== 3)
+    return null;
+  const [header, body, sig] = parts;
+  let secret;
+  try {
+    secret = jwtSecret();
+  } catch {
+    return null;
+  }
+  const expected = base64url(crypto3.createHmac("sha256", secret).update(`${header}.${body}`).digest());
+  if (sig !== expected)
+    return null;
+  try {
+    const payload = JSON.parse(Buffer.from(body, "base64url").toString());
+    if (typeof payload.exp === "number" && Date.now() / 1e3 > payload.exp)
+      return null;
+    return payload;
+  } catch {
+    return null;
+  }
+}
+function createToken() {
+  const now = Math.floor(Date.now() / 1e3);
+  return jwtSign({ iat: now, exp: now + TOKEN_MAX_AGE });
+}
+function constantTimeEqualString(a, b) {
+  const ab = Buffer.from(a, "utf-8");
+  const bb = Buffer.from(b, "utf-8");
+  const max = Math.max(ab.length, bb.length);
+  const ap = Buffer.alloc(max);
+  ab.copy(ap);
+  const bp = Buffer.alloc(max);
+  bb.copy(bp);
+  const eq17 = crypto3.timingSafeEqual(ap, bp);
+  return eq17 && ab.length === bb.length;
+}
+function validateToken(token) {
+  if (!token)
+    return null;
+  const payload = jwtVerify(token);
+  if (payload?.scope)
+    return null;
+  return payload;
+}
+function mintScopedToken(scope, maxAgeSec) {
+  const now = Math.floor(Date.now() / 1e3);
+  return jwtSign({ scope, iat: now, exp: now + maxAgeSec });
+}
+function verifyScopedToken(token, scope) {
+  if (!token)
+    return false;
+  const payload = jwtVerify(token);
+  return payload !== null && payload.scope === scope;
+}
+function shouldRefresh(payload) {
+  const iat = payload.iat;
+  if (!iat)
+    return true;
+  return Date.now() / 1e3 - iat > REFRESH_AFTER;
+}
+function isAuthDisabled() {
+  return passwordHash().length === 0 && passwordEnvPlaintext() == null;
+}
+function isAuthenticated(cookie) {
+  if (isAuthDisabled())
+    return true;
+  return validateToken(cookie) !== null;
+}
+function getTokenFromCookieHeader(cookieHeader) {
+  if (!cookieHeader)
+    return void 0;
+  const match = cookieHeader.match(new RegExp(`(?:^|;\\s*)${COOKIE_NAME}=([^;]+)`));
+  return match?.[1];
+}
+function setTokenCookie(c, token) {
+  setCookie(c, COOKIE_NAME, token, {
+    path: "/",
+    // WS upgrade requests carry cookies on the underlying HTTP handshake;
+    // the server reads them via the Cookie header, never via JS — so the
+    // cookie can stay httpOnly to avoid XSS exfiltration.
+    httpOnly: true,
+    maxAge: TOKEN_MAX_AGE,
+    sameSite: "Lax"
+  });
+}
+function createAuthRoutes() {
+  const app2 = new Hono15();
+  app2.post("/auth/login", async (c) => {
+    const ip = getClientIp(c);
+    if (isLockedOut2(ip)) {
+      return c.json({ error: "Too many attempts, try again later" }, 429);
+    }
+    const body = await c.req.json().catch(() => ({ password: "" }));
+    if (!body.password) {
+      recordFailure2(ip);
+      return c.json({ error: "Invalid password" }, 401);
+    }
+    const envPlain = passwordEnvPlaintext();
+    const ok = envPlain != null ? constantTimeEqualString(body.password, envPlain) : await verifyPassword(body.password, passwordHash());
+    if (!ok) {
+      recordFailure2(ip);
+      return c.json({ error: "Invalid password" }, 401);
+    }
+    clearFailures2(ip);
+    const token = createToken();
+    setTokenCookie(c, token);
+    return c.json({ ok: true });
+  });
+  app2.get("/auth/check", (c) => {
+    const token = getCookie(c, COOKIE_NAME);
+    const payload = validateToken(token);
+    if (payload) {
+      if (shouldRefresh(payload)) {
+        const newToken = createToken();
+        setTokenCookie(c, newToken);
+      }
+      return c.json({ authenticated: true, badge: config.server.badge, goalModeEnabled: config.goalModeEnabled });
+    }
+    return c.json({ authenticated: false, badge: config.server.badge }, 401);
+  });
+  app2.post("/auth/logout", (c) => {
+    setCookie(c, COOKIE_NAME, "", { path: "/", maxAge: 0 });
+    return c.json({ ok: true });
+  });
+  app2.post("/auth/change-password", async (c) => {
+    const body = await c.req.json().catch(() => ({}));
+    const oldPassword = typeof body.oldPassword === "string" ? body.oldPassword : "";
+    const newPassword = typeof body.newPassword === "string" ? body.newPassword : "";
+    if (passwordEnvPlaintext() != null) {
+      return c.json({ error: "Password is managed by the HALO_PASSWORD environment variable" }, 400);
+    }
+    if (!await verifyPassword(oldPassword, passwordHash())) {
+      return c.json({ error: "Incorrect current password" }, 401);
+    }
+    const weak = passwordStrengthError(newPassword);
+    if (weak)
+      return c.json({ error: weak }, 400);
+    if (newPassword === oldPassword) {
+      return c.json({ error: "New password must differ from the current password" }, 400);
+    }
+    updateConfigLeaves({ "server.password": await hashPassword(newPassword) });
+    return c.json({ ok: true });
+  });
+  return app2;
+}
+function passwordStrengthError(pw) {
+  if (pw.length < 8)
+    return "Password must be at least 8 characters";
+  if (!/[A-Za-z]/.test(pw))
+    return "Password must contain at least one letter";
+  if (!/[0-9]/.test(pw))
+    return "Password must contain at least one digit";
+  return null;
+}
+function authMiddleware() {
+  return async (c, next) => {
+    const path74 = c.req.path;
+    if (PUBLIC_PATHS.some((p) => path74 === p || path74.startsWith(p + "?"))) {
+      return next();
+    }
+    if (EXTENSION_ASSET_PATH.test(path74)) {
+      return next();
+    }
+    const token = getCookie(c, COOKIE_NAME);
+    const payload = validateToken(token);
+    if (!payload) {
+      if (!path74.startsWith("/api/")) {
+        return next();
+      }
+      return c.json({ error: "Unauthorized" }, 401);
+    }
+    if (shouldRefresh(payload)) {
+      const newToken = createToken();
+      setTokenCookie(c, newToken);
+    }
+    return next();
+  };
+}
+var TOKEN_MAX_AGE, REFRESH_AFTER, COOKIE_NAME, ADMIN_LOGIN_BUCKET, isLockedOut2, recordFailure2, clearFailures2, PUBLIC_PATHS, EXTENSION_ASSET_PATH;
+var init_auth = __esm({
+  "../server/dist/middleware/auth.js"() {
+    "use strict";
+    init_config();
+    init_password_hash();
+    init_setup_config();
+    init_brute_force();
+    TOKEN_MAX_AGE = config.auth.tokenMaxAge;
+    REFRESH_AFTER = config.auth.refreshAfter;
+    COOKIE_NAME = "halo_token";
+    ADMIN_LOGIN_BUCKET = "admin-login";
+    isLockedOut2 = (ip) => isLockedOut(ADMIN_LOGIN_BUCKET, ip);
+    recordFailure2 = (ip) => recordFailure(ADMIN_LOGIN_BUCKET, ip);
+    clearFailures2 = (ip) => clearFailures(ADMIN_LOGIN_BUCKET, ip);
+    PUBLIC_PATHS = ["/api/auth/login", "/api/auth/check", "/api/auth/logout", "/api/health", "/api/web/chat", "/api/web/sessions", "/api/web/stop", "/api/web/history", "/api/web/subscribe", "/api/web/file", "/api/show/state", "/api/show/session", "/api/metrics"];
+    EXTENSION_ASSET_PATH = /^\/api\/extensions\/[^/]+\/[^/]+\/[^/]+\/./;
+  }
+});
+
+// ../server/dist/routes/extensions.js
+import { Hono as Hono16 } from "hono";
+import fs56 from "node:fs";
+import path63 from "node:path";
+import { Readable as Readable2 } from "node:stream";
+function assetMime(fileName) {
+  const ext = fileName.split(".").pop()?.toLowerCase() ?? "";
+  return imageMimeFromExt(ext) ?? ASSET_MIME[ext] ?? "application/octet-stream";
+}
+function resolveAsset(id, version, rest) {
+  if (!isExtensionId(id))
+    return null;
+  const info = getExtension(id);
+  if (!info || info.version !== version)
+    return null;
+  const segments = rest.split("/");
+  if (segments.some((s) => s === "" || s === "." || s === ".." || s.startsWith(".") || s.includes("\\")))
+    return null;
+  let dir;
+  let real;
+  try {
+    dir = fs56.realpathSync(path63.join(extensionsRoot(), id));
+    real = fs56.realpathSync(path63.join(dir, ...segments));
+  } catch {
+    return null;
+  }
+  if (real !== dir && !real.startsWith(dir + path63.sep))
+    return null;
+  try {
+    if (!fs56.statSync(real).isFile())
+      return null;
+  } catch {
+    return null;
+  }
+  return real;
+}
+function createExtensionRoutes() {
+  const app2 = new Hono16();
+  app2.get("/extensions", (c) => c.json(getSnapshot()));
+  app2.get("/extensions/token", (c) => c.json({
+    token: mintScopedToken(EXT_TOKEN_SCOPE, EXT_TOKEN_MAX_AGE),
+    expiresAt: Date.now() + EXT_TOKEN_MAX_AGE * 1e3
+  }));
+  app2.post("/extensions/install", async (c) => {
+    if (Number(c.req.header("content-length") ?? 0) > MAX_ZIP_BYTES)
+      return c.json({ error: `zip exceeds ${MAX_ZIP_BYTES / 1024 / 1024} MB` }, 413);
+    let file = null;
+    try {
+      const form = await c.req.formData();
+      const f = form.get("file");
+      file = f instanceof File ? f : null;
+    } catch {
+      return c.json({ error: "multipart form with a `file` field is required" }, 400);
+    }
+    if (!file)
+      return c.json({ error: "`file` (zip) is required" }, 400);
+    if (file.size > MAX_ZIP_BYTES)
+      return c.json({ error: `zip exceeds ${MAX_ZIP_BYTES / 1024 / 1024} MB` }, 413);
+    try {
+      const info = await installExtensionZip(Buffer.from(await file.arrayBuffer()));
+      rescanAndBroadcast();
+      return c.json(info);
+    } catch (err) {
+      if (err instanceof ExtensionInstallError)
+        return c.json({ error: err.message }, 400);
+      const msg = err instanceof Error ? err.message : String(err);
+      console.log(`[Extensions] install failed: ${msg}`);
+      return c.json({ error: msg }, 500);
+    }
+  });
+  app2.delete("/extensions/:id", (c) => {
+    const id = c.req.param("id");
+    if (!isExtensionId(id))
+      return c.json({ error: "Invalid extension id" }, 400);
+    try {
+      if (!uninstallExtension(id))
+        return c.json({ error: "Extension not installed" }, 404);
+      rescanAndBroadcast();
+      return c.json({ ok: true, id });
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      console.log(`[Extensions] uninstall ${id} failed: ${msg}`);
+      return c.json({ error: msg }, 500);
+    }
+  });
+  app2.get("/extensions/:id/:version/:token/:rest{.+}", (c) => {
+    if (!verifyScopedToken(c.req.param("token"), EXT_TOKEN_SCOPE))
+      return c.json({ error: "Unauthorized" }, 401);
+    const abs = resolveAsset(c.req.param("id"), c.req.param("version"), c.req.param("rest"));
+    if (!abs)
+      return c.json({ error: "Not found" }, 404);
+    const stat = fs56.statSync(abs);
+    const nodeStream = fs56.createReadStream(abs);
+    c.req.raw.signal?.addEventListener("abort", () => nodeStream.destroy(), { once: true });
+    return new Response(Readable2.toWeb(nodeStream), {
+      headers: {
+        "Content-Type": assetMime(abs),
+        "Content-Length": String(stat.size),
+        // The version segment changes on every upgrade, so the URL is a
+        // content address as far as the browser is concerned.
+        "Cache-Control": "public, max-age=31536000, immutable",
+        // Module scripts / fetch / wasm / dynamic import are CORS-mode
+        // requests; the iframe is same-origin today so this is a no-op, kept
+        // so the assets keep loading if the host ever drops allow-same-origin.
+        "Access-Control-Allow-Origin": "*",
+        // The token is in the URL — keep it out of Referer headers.
+        "Referrer-Policy": "no-referrer"
+      }
+    });
+  });
+  return app2;
+}
+var MAX_ZIP_BYTES, EXT_TOKEN_MAX_AGE, EXT_TOKEN_SCOPE, ASSET_MIME;
+var init_extensions = __esm({
+  "../server/dist/routes/extensions.js"() {
+    "use strict";
+    init_dist();
+    init_registry2();
+    init_install();
+    init_watcher();
+    init_auth();
+    MAX_ZIP_BYTES = 100 * 1024 * 1024;
+    EXT_TOKEN_MAX_AGE = 24 * 60 * 60;
+    EXT_TOKEN_SCOPE = "ext";
+    ASSET_MIME = {
+      html: "text/html; charset=utf-8",
+      htm: "text/html; charset=utf-8",
+      js: "text/javascript; charset=utf-8",
+      mjs: "text/javascript; charset=utf-8",
+      css: "text/css; charset=utf-8",
+      json: "application/json; charset=utf-8",
+      map: "application/json; charset=utf-8",
+      wasm: "application/wasm",
+      txt: "text/plain; charset=utf-8",
+      md: "text/plain; charset=utf-8",
+      woff: "font/woff",
+      woff2: "font/woff2",
+      ttf: "font/ttf",
+      otf: "font/otf",
+      hdr: "application/octet-stream",
+      bin: "application/octet-stream"
+    };
+  }
+});
+
+// ../server/dist/evolution/ticker.js
+import { eq as eq16, and as and12, or as or2, asc, isNull as isNull6, sql as sql2 } from "drizzle-orm";
+function setEvoSpawner(fn) {
+  _spawner = fn;
+}
+function startEvoTicker() {
+  if (_interval)
+    return;
+  _startupTimer2 = setTimeout(() => {
+    _startupTimer2 = null;
+    runTick().catch(logTickError);
+  }, 2e3);
+  _interval = setInterval(() => {
+    runTick().catch(logTickError);
+  }, TICK_INTERVAL_MS);
+  console.log(`[EvoTicker] started (interval: ${TICK_INTERVAL_MS / 1e3}s)`);
+}
+function stopEvoTicker() {
+  if (_startupTimer2) {
+    clearTimeout(_startupTimer2);
+    _startupTimer2 = null;
+  }
+  if (_interval) {
+    clearInterval(_interval);
+    _interval = null;
+    console.log("[EvoTicker] stopped");
+  }
+}
+function logTickError(err) {
+  console.error(`[EvoTicker] tick failed: ${err instanceof Error ? err.message : String(err)}`);
+}
+async function runTick() {
+  markTimeouts();
+  startPendingRuns();
+  startPendingApplies();
+  broadcastChanges();
+}
+function broadcastChanges() {
+  const db = getEvoDb();
+  const inFlightLimit = (config.evolution.maxConcurrentRun + config.evolution.maxConcurrentApply) * 3;
+  const runRows = db.select({ id: evolutionRuns.id, status: evolutionRuns.status }).from(evolutionRuns).where(or2(eq16(evolutionRuns.status, "pending"), eq16(evolutionRuns.status, "running"))).limit(inFlightLimit).all();
+  for (const r of runRows) {
+    if (_lastRunStatus.get(r.id) !== r.status) {
+      _lastRunStatus.set(r.id, r.status);
+      broadcast({ type: "evolution:run_changed", id: r.id, status: r.status });
+    }
+  }
+  const applyRows = db.select({ id: evolutionApplies.id, status: evolutionApplies.status }).from(evolutionApplies).where(or2(eq16(evolutionApplies.status, "pending"), eq16(evolutionApplies.status, "running"), eq16(evolutionApplies.status, "syncing"))).limit(inFlightLimit).all();
+  for (const a of applyRows) {
+    if (_lastApplyStatus.get(a.id) !== a.status) {
+      _lastApplyStatus.set(a.id, a.status);
+      broadcast({ type: "evolution:apply_changed", id: a.id, status: a.status });
+    }
+  }
+  const aliveRunIds = new Set(runRows.map((r) => r.id));
+  for (const id of [..._lastRunStatus.keys()]) {
+    if (aliveRunIds.has(id))
+      continue;
+    const row = db.select({ status: evolutionRuns.status }).from(evolutionRuns).where(eq16(evolutionRuns.id, id)).get();
+    const finalStatus = row?.status;
+    if (finalStatus && _lastRunStatus.get(id) !== finalStatus) {
+      broadcast({ type: "evolution:run_changed", id, status: finalStatus });
+    }
+    _lastRunStatus.delete(id);
+  }
+  const aliveApplyIds = new Set(applyRows.map((r) => r.id));
+  for (const id of [..._lastApplyStatus.keys()]) {
+    if (aliveApplyIds.has(id))
+      continue;
+    const row = db.select({ status: evolutionApplies.status }).from(evolutionApplies).where(eq16(evolutionApplies.id, id)).get();
+    const finalStatus = row?.status;
+    if (finalStatus && _lastApplyStatus.get(id) !== finalStatus) {
+      broadcast({ type: "evolution:apply_changed", id, status: finalStatus });
+    }
+    _lastApplyStatus.delete(id);
+  }
+}
+function markTimeouts() {
+  const db = getEvoDb();
+  const now = Date.now();
+  const runCutoff = now - config.evolution.runTimeoutMinutes * 6e4;
+  const applyCutoff = now - config.evolution.applyTimeoutMinutes * 6e4;
   const maxAttempts = config.evolution.maxAttempts;
   const runRows = db.select({
     id: evolutionRuns.id,
@@ -25817,7 +26862,7 @@ var init_ticker = __esm({
 });
 
 // ../server/dist/evolution/spawn.js
-import path61 from "node:path";
+import path64 from "node:path";
 import { spawn as spawn4 } from "node:child_process";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var __dirname2, WRAPPER_PATH, realEvoSpawner;
@@ -25825,8 +26870,8 @@ var init_spawn = __esm({
   "../server/dist/evolution/spawn.js"() {
     "use strict";
     init_child_env();
-    __dirname2 = path61.dirname(fileURLToPath2(import.meta.url));
-    WRAPPER_PATH = path61.resolve(__dirname2, "evo-wrapper.js");
+    __dirname2 = path64.dirname(fileURLToPath2(import.meta.url));
+    WRAPPER_PATH = path64.resolve(__dirname2, "evo-wrapper.js");
     realEvoSpawner = (mode, id) => {
       const child = spawn4(process.execPath, [WRAPPER_PATH, `--mode=${mode}`, `--id=${id}`], {
         detached: true,
@@ -25868,7 +26913,7 @@ async function shutdownChannels() {
   _running.length = 0;
 }
 var _running;
-var init_registry2 = __esm({
+var init_registry3 = __esm({
   "../server/dist/channels/registry.js"() {
     "use strict";
     _running = [];
@@ -26223,6 +27268,7 @@ var init_inbound = __esm({
 });
 
 // ../server/dist/channels/telegram/handler.js
+import path65 from "node:path";
 import { Bot, InputFile } from "grammy";
 function inferMediaKind(filePath) {
   const cls = classifyMedia(filePath);
@@ -26338,25 +27384,33 @@ function startTelegramChannel(deps) {
           const route = bridge.getRoute(sessionId);
           if (!route)
             return;
-          if (!isMediaPathAllowed(filePath, account.workspacePath)) {
-            console.warn(`[Telegram] sendMedia blocked: ${filePath} not under workspace`);
-            return;
-          }
-          const kind = inferMediaKind(filePath);
-          const file = new InputFile(filePath);
-          switch (kind) {
-            case "photo":
-              await bot.api.sendPhoto(route.chatId, file);
-              break;
-            case "video":
-              await bot.api.sendVideo(route.chatId, file);
-              break;
-            case "voice":
-              await bot.api.sendVoice(route.chatId, file);
-              break;
-            case "document":
-              await bot.api.sendDocument(route.chatId, file);
-              break;
+          try {
+            if (!isMediaPathAllowed(filePath, account.workspacePath, account.accessLevel)) {
+              throw new Error(`media path not allowed: ${filePath} (must be under the workspace or the temp dir; account access level ${account.accessLevel})`);
+            }
+            const kind = inferMediaKind(filePath);
+            const file = new InputFile(filePath);
+            switch (kind) {
+              case "photo":
+                await bot.api.sendPhoto(route.chatId, file);
+                break;
+              case "video":
+                await bot.api.sendVideo(route.chatId, file);
+                break;
+              case "voice":
+                await bot.api.sendVoice(route.chatId, file);
+                break;
+              case "document":
+                await bot.api.sendDocument(route.chatId, file);
+                break;
+            }
+          } catch (err) {
+            console.log(`[Telegram] sendMedia ${filePath} failed: ${err instanceof Error ? err.message : String(err)}`);
+            await bot.api.sendMessage(route.chatId, t("handler.upload_failed", getLang(account), {
+              name: path65.basename(filePath),
+              error: err instanceof Error ? err.message : String(err)
+            })).catch(() => {
+            });
           }
         }
       })
@@ -26421,7 +27475,8 @@ async function runBot(args) {
   bot.command("start", async (ctx) => {
     await ctx.reply(t("handler.start_greeting", lang));
   });
-  for (const cmd of builtinCommandNames()) {
+  for (const command of DISPATCH_COMMANDS) {
+    const cmd = command.slice(1);
     bot.command(cmd, async (ctx) => {
       const cmdCtx = buildCmdCtx4(ctx.from?.id ?? 0, ctx.chat?.id);
       if (!cmdCtx) {
@@ -26635,9 +27690,9 @@ var init_handler3 = __esm({
     init_event_adapter();
     init_media_store();
     init_accounts();
+    init_commands2();
     init_inbound();
     init_i18n();
-    init_commands();
     init_media();
     init_session_prefix();
     MAX_TG_DOWNLOAD_BYTES = 20 * 1024 * 1024;
@@ -26645,19 +27700,19 @@ var init_handler3 = __esm({
 });
 
 // ../server/dist/routes/telegram.js
-import { Hono as Hono15 } from "hono";
+import { Hono as Hono17 } from "hono";
 import { Bot as Bot2 } from "grammy";
-import fs53 from "node:fs";
+import fs57 from "node:fs";
 function createTelegramRoutes(deps) {
   const { db, channel } = deps;
-  const app2 = new Hono15();
+  const app2 = new Hono17();
   app2.get("/telegram/accounts", (c) => {
     const accounts = listAccounts3(db).map((acc) => {
       return {
         accountId: acc.accountId,
         botUsername: acc.botUsername,
         workspacePath: acc.workspacePath,
-        workspaceMissing: !fs53.existsSync(acc.workspacePath),
+        workspaceMissing: !fs57.existsSync(acc.workspacePath),
         label: acc.label,
         enabled: acc.enabled,
         accessLevel: acc.accessLevel,
@@ -26846,7 +27901,7 @@ var init_descriptor = __esm({
 });
 
 // ../server/dist/channels/wechat/api.js
-import crypto3 from "node:crypto";
+import crypto4 from "node:crypto";
 function buildClientVersion(version) {
   const [ma, mi, pa] = version.split(".").map((p) => parseInt(p, 10));
   return (ma & 255) << 16 | (mi & 255) << 8 | pa & 255;
@@ -26855,7 +27910,7 @@ function buildBaseInfo() {
   return { channel_version: CHANNEL_VERSION };
 }
 function randomWechatUin() {
-  const n = crypto3.randomBytes(4).readUInt32BE(0);
+  const n = crypto4.randomBytes(4).readUInt32BE(0);
   return Buffer.from(String(n), "utf-8").toString("base64");
 }
 function commonHeaders() {
@@ -26990,7 +28045,12 @@ async function sendMessage(params) {
   try {
     const parsed = JSON.parse(raw);
     if (parsed.ret !== void 0 && parsed.ret !== 0 || parsed.errcode !== void 0 && parsed.errcode !== 0) {
-      const hint = parsed.ret === -2 ? " (gateway rejected the message \u2014 payload too large (>16KB) or outbound sent without the context_token from the recipient's last inbound message)" : "";
+      let hint = "";
+      if (parsed.ret === -2) {
+        const tokenAge = !params.body.msg?.context_token ? "context_token missing" : params.contextTokenAt ? `context_token age ${Math.round((Date.now() - params.contextTokenAt) / 6e4)}m` : "context_token age unknown";
+        console.warn(`[WeChat:sendmessage] ret=-2 to=${params.body.msg?.to_user_id ?? ""} ${tokenAge}`);
+        hint = ` (gateway rejected the message \u2014 payload too large (>16KB), no context_token, or context_token expired (only a new inbound message from the recipient refreshes it); ${tokenAge})`;
+      }
       throw new Error(`[WeChat:sendmessage] gateway error ret=${parsed.ret} errcode=${parsed.errcode} ${parsed.errmsg ?? ""}${hint}`);
     }
   } catch (err) {
@@ -27259,14 +28319,18 @@ var init_event_adapter2 = __esm({
           try {
             await this.deps.sendText(text6);
           } catch (err) {
-            console.warn(`[WeChat] sendText failed: ${err instanceof Error ? err.message : String(err)}`);
+            const msg = `sendText failed: ${err instanceof Error ? err.message : String(err)}`;
+            console.warn(`[WeChat] ${msg}`);
+            this.deps.onSendError?.(msg);
           }
         }
         for (const p of mediaPaths) {
           try {
             await this.deps.sendMedia(p);
           } catch (err) {
-            console.warn(`[WeChat] sendMedia ${p} failed: ${err instanceof Error ? err.message : String(err)}`);
+            const msg = `sendMedia ${p} failed: ${err instanceof Error ? err.message : String(err)}`;
+            console.warn(`[WeChat] ${msg}`);
+            this.deps.onSendError?.(msg);
           }
         }
       }
@@ -27275,7 +28339,7 @@ var init_event_adapter2 = __esm({
 });
 
 // ../server/dist/channels/wechat/cdn.js
-import { createDecipheriv, createCipheriv, randomBytes as randomBytes2, createHash as createHash2 } from "node:crypto";
+import { createDecipheriv, createCipheriv, randomBytes as randomBytes3, createHash as createHash2 } from "node:crypto";
 function decryptAesEcb(ciphertext, key) {
   const decipher = createDecipheriv("aes-128-ecb", key, null);
   return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
@@ -27322,8 +28386,8 @@ async function downloadPlain(params) {
   return fetchCdnBytes(url, params.label);
 }
 function prepareUpload(plaintext) {
-  const filekey = randomBytes2(16).toString("hex");
-  const aeskey = randomBytes2(16);
+  const filekey = randomBytes3(16).toString("hex");
+  const aeskey = randomBytes3(16);
   return {
     filekey,
     aeskey,
@@ -27381,8 +28445,8 @@ var init_cdn = __esm({
 });
 
 // ../server/dist/channels/wechat/send-media.js
-import fs54 from "node:fs/promises";
-import path62 from "node:path";
+import fs58 from "node:fs/promises";
+import path66 from "node:path";
 function inferKind(filePath) {
   const cls = classifyMedia(filePath);
   if (cls === "image")
@@ -27392,9 +28456,9 @@ function inferKind(filePath) {
   return "file";
 }
 async function sendMediaFile(params) {
-  const { baseUrl, token, toUserId, contextToken, filePath } = params;
+  const { baseUrl, token, toUserId, contextToken, contextTokenAt, filePath } = params;
   const kind = params.kind ?? inferKind(filePath);
-  const plaintext = await fs54.readFile(filePath);
+  const plaintext = await fs58.readFile(filePath);
   const prep = prepareUpload(plaintext);
   console.log(`[WeChat] sendMediaFile: path=${filePath} kind=${kind} rawsize=${prep.rawsize} filesize=${prep.filesize}`);
   const mediaType = kind === "image" ? UploadMediaType.IMAGE : kind === "video" ? UploadMediaType.VIDEO : UploadMediaType.FILE;
@@ -27432,7 +28496,7 @@ async function sendMediaFile(params) {
     aesKeyBase64,
     fileSizeCiphertext: prep.filesize,
     fileSize: prep.rawsize,
-    fileName: path62.basename(filePath)
+    fileName: path66.basename(filePath)
   });
   const clientId = `halo-media-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
   const body = {
@@ -27446,7 +28510,7 @@ async function sendMediaFile(params) {
       context_token: contextToken
     }
   };
-  await sendMessage({ baseUrl, token, body });
+  await sendMessage({ baseUrl, token, body, contextTokenAt });
   console.log(`[WeChat] sendMediaFile: sendMessage success clientId=${clientId}`);
   return { clientId };
 }
@@ -27595,14 +28659,16 @@ var init_login = __esm({
 });
 
 // ../server/dist/channels/wechat/handler.js
-import fs55 from "node:fs";
-import path63 from "node:path";
+import fs59 from "node:fs";
+import path67 from "node:path";
 import QRCode from "qrcode";
-function wxRoute(fromUserId, contextToken) {
-  return (prev) => ({
-    fromUserId,
-    contextToken: contextToken ?? (prev?.fromUserId === fromUserId ? prev.contextToken : void 0)
-  });
+function wxRoute(fromUserId, contextToken, contextTokenAt) {
+  return (prev) => {
+    if (contextToken !== void 0)
+      return { fromUserId, contextToken, contextTokenAt: contextTokenAt ?? Date.now() };
+    const carry = prev?.fromUserId === fromUserId ? prev : void 0;
+    return { fromUserId, contextToken: carry?.contextToken, contextTokenAt: carry?.contextTokenAt };
+  };
 }
 function startWechatChannel(deps) {
   const { registry: registry2, db } = deps;
@@ -27630,24 +28696,29 @@ function startWechatChannel(deps) {
           const route = bridge.getRoute(sessionId);
           if (!route)
             return;
-          await sendToUser({ account, toUserId: route.fromUserId, text: chunk, contextToken: route.contextToken });
+          await sendToUser({ account, toUserId: route.fromUserId, text: chunk, contextToken: route.contextToken, contextTokenAt: route.contextTokenAt });
         },
         sendMedia: async (filePath) => {
           const route = bridge.getRoute(sessionId);
           if (!route)
             return;
-          if (!isMediaPathAllowed(filePath, account.workspacePath)) {
-            console.warn(`[WeChat] sendMedia blocked: ${filePath} not under workspace`);
-            return;
+          if (!isMediaPathAllowed(filePath, account.workspacePath, account.accessLevel)) {
+            throw new Error(`media path not allowed: ${filePath} (must be under the workspace or the temp dir; account access level ${account.accessLevel})`);
           }
           await sendMediaFile({
             baseUrl: account.baseUrl,
             token: account.botToken,
             toUserId: route.fromUserId,
             contextToken: route.contextToken,
+            contextTokenAt: route.contextTokenAt,
             filePath
           });
-        }
+        },
+        // A dropped reply used to be visible only in the server log. Record
+        // it in the session so the user sees the turn ran but never landed.
+        // appendNotification only writes the log row — it emits no event, so
+        // nothing loops back into this responder as another send attempt.
+        onSendError: (m) => registry2.getOrCreate(account.workspacePath).appendNotification(sessionId, `\u26A0\uFE0F WeChat delivery failed: ${m}`)
       })
     });
     const restartSelf = () => {
@@ -27690,7 +28761,9 @@ function startWechatChannel(deps) {
 }
 function restoreReplyRoutes(args) {
   const { registry: registry2, db, account, bridge } = args;
-  const tokens = getAccount(db, account.accountId)?.config.contextTokens ?? {};
+  const config2 = getAccount(db, account.accountId)?.config ?? {};
+  const tokens = config2.contextTokens ?? {};
+  const ats = config2.contextTokenAts ?? {};
   const users = Object.keys(tokens);
   if (users.length === 0)
     return;
@@ -27703,7 +28776,7 @@ function restoreReplyRoutes(args) {
       workspacePath,
       bridge,
       sessionPrefix: buildWxSessionPrefix(userId),
-      route: wxRoute(userId, tokens[userId])
+      route: wxRoute(userId, tokens[userId], ats[userId])
     });
     if (sid)
       console.log(`[WeChat] ${account.accountId} reply route restored for ${sid}`);
@@ -27887,6 +28960,7 @@ async function handleInbound(args) {
       account: storedAccount,
       toUserId: fromUserId,
       contextToken: msg.context_token,
+      contextTokenAt: Date.now(),
       text: t("handler.workspace_missing", lang, { path: storedAccount.workspacePath })
     });
     return;
@@ -27935,7 +29009,7 @@ async function handleInbound(args) {
     lang,
     // If the session is currently compacting or mid-turn, send an immediate
     // hint so the WeChat user doesn't stare at a silent chat for 30+ seconds.
-    sendHint: (hint) => sendToUser({ account, toUserId: fromUserId, contextToken: msg.context_token, text: hint }),
+    sendHint: (hint) => sendToUser({ account, toUserId: fromUserId, contextToken: msg.context_token, contextTokenAt: Date.now(), text: hint }),
     uiText: userText || "[\u4EC5\u56FE\u7247]",
     agentText: userText,
     userTag: fromUserId,
@@ -28009,7 +29083,7 @@ async function handleSlashCommand(args) {
         await reply(login.message);
         return true;
       }
-      const tmpPath = path63.join(tempDir(), `halo-qr-${login.sessionKey}.png`);
+      const tmpPath = path67.join(tempDir(), `halo-qr-${login.sessionKey}.png`);
       await QRCode.toFile(tmpPath, login.qrcodeUrl, { width: 256, margin: 2 });
       await sendMediaFile({
         baseUrl: account.baseUrl,
@@ -28018,7 +29092,7 @@ async function handleSlashCommand(args) {
         contextToken,
         filePath: tmpPath
       });
-      await fs55.promises.unlink(tmpPath).catch(() => {
+      await fs59.promises.unlink(tmpPath).catch(() => {
       });
       await reply(t("wechat.qr_sent", lang, { level, path: account.workspacePath }));
       waitLogin({ sessionKey: login.sessionKey }).then(async (result2) => {
@@ -28061,7 +29135,7 @@ async function sendToUser(params) {
       context_token: params.contextToken
     }
   };
-  await sendMessage({ baseUrl: params.account.baseUrl, token: params.account.botToken, body });
+  await sendMessage({ baseUrl: params.account.baseUrl, token: params.account.botToken, body, contextTokenAt: params.contextTokenAt });
 }
 function sleep2(ms, signal) {
   return new Promise((resolve2, reject) => {
@@ -28095,20 +29169,20 @@ var init_handler4 = __esm({
     RETRY_DELAY_MS = 2e3;
   }
 });
-
-// ../server/dist/routes/wechat.js
-import { Hono as Hono16 } from "hono";
-import path64 from "node:path";
-import fs56 from "node:fs";
+
+// ../server/dist/routes/wechat.js
+import { Hono as Hono18 } from "hono";
+import path68 from "node:path";
+import fs60 from "node:fs";
 function createWechatRoutes(deps) {
   const { db, channel } = deps;
-  const app2 = new Hono16();
+  const app2 = new Hono18();
   app2.get("/wechat/accounts", (c) => {
     const accounts = listAccounts4(db).map((acc) => {
       return {
         ...stripSecrets(acc),
         workspacePath: acc.workspacePath,
-        workspaceMissing: !fs56.existsSync(acc.workspacePath)
+        workspaceMissing: !fs60.existsSync(acc.workspacePath)
       };
     });
     return c.json({ accounts });
@@ -28124,7 +29198,7 @@ function createWechatRoutes(deps) {
       return c.json({ error: "sessionKey required" }, 400);
     if (!body.workspacePath)
       return c.json({ error: "workspacePath required" }, 400);
-    if (!path64.isAbsolute(body.workspacePath))
+    if (!path68.isAbsolute(body.workspacePath))
       return c.json({ error: "workspacePath must be absolute" }, 400);
     const levelError = accessLevelError(body.accessLevel, CHAT_ACCESS_LEVELS);
     if (levelError)
@@ -28231,7 +29305,11 @@ function readContextToken(accountId, userId) {
   const acct = getAccount(getChannelDb(), accountId);
   const tokens = acct?.config?.contextTokens;
   const v = tokens?.[userId];
-  return typeof v === "string" && v.length > 0 ? v : void 0;
+  if (typeof v !== "string" || v.length === 0)
+    return {};
+  const ats = acct?.config?.contextTokenAts;
+  const at = ats?.[userId];
+  return { token: v, at: typeof at === "number" ? at : void 0 };
 }
 async function dispatch2(accountId, text6, explicitChatId, media) {
   const acct = getAccount4(getChannelDb(), accountId);
@@ -28244,12 +29322,12 @@ async function dispatch2(accountId, text6, explicitChatId, media) {
     throw new Error("no wechat target \u2014 bind the account first (the QR-login owner becomes the default cron recipient)");
   }
   const out = [];
-  const contextToken = readContextToken(accountId, chatId);
+  const { token: contextToken, at: contextTokenAt } = readContextToken(accountId, chatId);
   if (text6) {
     const chunks = splitText(text6, WECHAT_TEXT_LIMIT);
     for (const [i, chunk] of chunks.entries()) {
       try {
-        await sendToUser({ account: acct, toUserId: chatId, text: chunk, contextToken });
+        await sendToUser({ account: acct, toUserId: chatId, text: chunk, contextToken, contextTokenAt });
       } catch (err) {
         throw new Error(`chunk ${i + 1}/${chunks.length}: ${err instanceof Error ? err.message : String(err)}`);
       }
@@ -28268,6 +29346,7 @@ async function dispatch2(accountId, text6, explicitChatId, media) {
         token: acct.botToken,
         toUserId: chatId,
         contextToken,
+        contextTokenAt,
         filePath
       });
       out.push({ channelType: "wechat", accountId, chatId, ok: true });
@@ -28334,20 +29413,20 @@ var init_descriptor2 = __esm({
 });
 
 // ../server/dist/routes/web.js
-import { Hono as Hono17 } from "hono";
+import { Hono as Hono19 } from "hono";
 import { streamSSE } from "hono/streaming";
-import crypto4 from "node:crypto";
-import fs57 from "node:fs";
+import crypto5 from "node:crypto";
+import fs61 from "node:fs";
 function createWebRoutes(deps) {
   const { db, channel } = deps;
-  const app2 = new Hono17();
+  const app2 = new Hono19();
   app2.get("/web/accounts", (c) => {
     const accounts = listAccounts2(db).map((acc) => {
       return {
         accountId: acc.accountId,
         token: acc.token,
         workspacePath: acc.workspacePath,
-        workspaceMissing: !fs57.existsSync(acc.workspacePath),
+        workspaceMissing: !fs61.existsSync(acc.workspacePath),
         label: acc.label,
         enabled: acc.enabled,
         accessLevel: acc.accessLevel,
@@ -28368,8 +29447,8 @@ function createWebRoutes(deps) {
     const wsError = validateWorkspaceBody(body.workspacePath);
     if (wsError)
       return c.json({ error: wsError }, 400);
-    const accountId = crypto4.randomUUID().slice(0, 8);
-    const token = crypto4.randomBytes(24).toString("base64url");
+    const accountId = crypto5.randomUUID().slice(0, 8);
+    const token = crypto5.randomBytes(24).toString("base64url");
     insertAccount2(db, {
       accountId,
       token,
@@ -28530,30 +29609,30 @@ function createWebRoutes(deps) {
     const filePath = c.req.query("path");
     if (!filePath)
       return c.json({ error: "path required" }, 400);
-    const path70 = await import("node:path");
-    const resolved = path70.default.resolve(account.workspacePath, filePath);
-    const root = path70.default.resolve(account.workspacePath);
-    if (resolved !== root && !resolved.startsWith(root + path70.default.sep)) {
+    const path74 = await import("node:path");
+    const resolved = path74.default.resolve(account.workspacePath, filePath);
+    const root = path74.default.resolve(account.workspacePath);
+    if (resolved !== root && !resolved.startsWith(root + path74.default.sep)) {
       return c.json({ error: "path traversal not allowed" }, 403);
     }
     let real;
     let realRoot;
     try {
-      real = fs57.realpathSync(resolved);
-      realRoot = fs57.realpathSync(root);
+      real = fs61.realpathSync(resolved);
+      realRoot = fs61.realpathSync(root);
     } catch {
       return c.json({ error: "file not found" }, 404);
     }
-    if (real !== realRoot && !real.startsWith(realRoot + path70.default.sep)) {
+    if (real !== realRoot && !real.startsWith(realRoot + path74.default.sep)) {
       return c.json({ error: "path traversal not allowed" }, 403);
     }
     if (isHiddenWorkspacePath(real, realRoot)) {
       return c.json({ error: "path is not accessible" }, 403);
     }
-    const stat = fs57.statSync(real);
+    const stat = fs61.statSync(real);
     if (stat.isDirectory())
       return c.json({ error: "cannot serve directory" }, 400);
-    const ext = path70.default.extname(real).toLowerCase();
+    const ext = path74.default.extname(real).toLowerCase();
     const nonImageMimes = {
       ".mp4": "video/mp4",
       ".webm": "video/webm",
@@ -28561,8 +29640,8 @@ function createWebRoutes(deps) {
       ".txt": "text/plain"
     };
     const contentType = imageMimeFromExt(ext) || nonImageMimes[ext] || "application/octet-stream";
-    const fileName = path70.default.basename(resolved);
-    const data = fs57.readFileSync(real);
+    const fileName = path74.default.basename(resolved);
+    const data = fs61.readFileSync(real);
     c.header("content-type", contentType);
     c.header("content-disposition", `inline; filename="${fileName}"`);
     return c.body(data);
@@ -28893,10 +29972,10 @@ async function authTest(botToken) {
   return slackPost("auth.test", botToken, {});
 }
 async function uploadFile(args) {
-  const fs64 = await import("node:fs");
-  const path70 = await import("node:path");
-  const filename = args.filename ?? path70.basename(args.filePath);
-  const stat = fs64.statSync(args.filePath);
+  const fs68 = await import("node:fs");
+  const path74 = await import("node:path");
+  const filename = args.filename ?? path74.basename(args.filePath);
+  const stat = fs68.statSync(args.filePath);
   if (!stat.isFile())
     throw new Error(`[slack:uploadFile] not a regular file: ${args.filePath}`);
   const length = stat.size;
@@ -28914,7 +29993,7 @@ async function uploadFile(args) {
   if (step1Parsed.ok === false || !step1Parsed.upload_url || !step1Parsed.file_id) {
     throw new Error(`[slack:files.getUploadURLExternal] ${step1Parsed.error ?? "unknown"}`);
   }
-  const buf = fs64.readFileSync(args.filePath);
+  const buf = fs68.readFileSync(args.filePath);
   const step2 = await fetch(step1Parsed.upload_url, {
     method: "POST",
     body: buf
@@ -29059,7 +30138,7 @@ var init_api2 = __esm({
 });
 
 // ../server/dist/channels/slack/handler.js
-import path65 from "node:path";
+import path69 from "node:path";
 import { WebSocket } from "ws";
 function slashToBang(text6, commandNames) {
   if (commandNames.length === 0)
@@ -29190,12 +30269,11 @@ function startSlackChannel(deps) {
             const route = bridge.getRoute(sessionId);
             if (!account || !route)
               return;
-            const resolved = path65.resolve(filePath);
-            if (!isMediaPathAllowed(resolved, account.workspacePath)) {
-              console.warn(`[Slack] sendMedia blocked: ${filePath} not under workspace`);
-              return;
-            }
+            const resolved = path69.resolve(filePath);
             try {
+              if (!isMediaPathAllowed(resolved, account.workspacePath, account.accessLevel)) {
+                throw new Error(`media path not allowed: ${filePath} (must be under the workspace or the temp dir; account access level ${account.accessLevel})`);
+              }
               await uploadFile({
                 botToken: account.botToken,
                 channel: route.channelId,
@@ -29209,7 +30287,7 @@ function startSlackChannel(deps) {
                 channel: route.channelId,
                 threadTs: route.replyTs,
                 text: t("handler.upload_failed", getLang(account), {
-                  name: path65.basename(filePath),
+                  name: path69.basename(filePath),
                   error: err instanceof Error ? err.message : String(err)
                 })
               }).catch(() => {
@@ -29471,11 +30549,11 @@ var init_handler5 = __esm({
 });
 
 // ../server/dist/routes/slack.js
-import { Hono as Hono18 } from "hono";
-import fs58 from "node:fs";
+import { Hono as Hono20 } from "hono";
+import fs62 from "node:fs";
 function createSlackRoutes(deps) {
   const { db, channel } = deps;
-  const app2 = new Hono18();
+  const app2 = new Hono20();
   app2.get("/slack/accounts/:id/search", async (c) => {
     const id = c.req.param("id");
     const q = c.req.query("q") ?? "";
@@ -29495,7 +30573,7 @@ function createSlackRoutes(deps) {
       botUserId: a.botUserId,
       teamId: a.teamId,
       workspacePath: a.workspacePath,
-      workspaceMissing: !fs58.existsSync(a.workspacePath),
+      workspaceMissing: !fs62.existsSync(a.workspacePath),
       label: a.label,
       enabled: a.enabled,
       accessLevel: a.accessLevel,
@@ -30014,10 +31092,10 @@ async function replyMessage(args) {
   return { message_id: parsed.data?.message_id ?? "" };
 }
 async function uploadImage(args) {
-  const fs64 = await import("node:fs");
-  const path70 = await import("node:path");
-  const buf = fs64.readFileSync(args.filePath);
-  const filename = path70.basename(args.filePath);
+  const fs68 = await import("node:fs");
+  const path74 = await import("node:path");
+  const buf = fs68.readFileSync(args.filePath);
+  const filename = path74.basename(args.filePath);
   const send = async (token2) => {
     const form = new FormData();
     form.append("image_type", "message");
@@ -30048,10 +31126,10 @@ async function uploadImage(args) {
   return { imageKey: parsed.data.image_key };
 }
 async function uploadFile2(args) {
-  const fs64 = await import("node:fs");
-  const path70 = await import("node:path");
-  const buf = fs64.readFileSync(args.filePath);
-  const filename = args.filename ?? path70.basename(args.filePath);
+  const fs68 = await import("node:fs");
+  const path74 = await import("node:path");
+  const buf = fs68.readFileSync(args.filePath);
+  const filename = args.filename ?? path74.basename(args.filePath);
   const send = async (token2) => {
     const form = new FormData();
     form.append("file_type", args.fileType);
@@ -30157,7 +31235,7 @@ var init_api3 = __esm({
 });
 
 // ../server/dist/channels/feishu/handler.js
-import path66 from "node:path";
+import path70 from "node:path";
 import * as Lark from "@larksuiteoapi/node-sdk";
 function buildSessionPrefixForThread2(chatId, rootId) {
   return sessionPrefix("feishu", `${chatId}:${rootId}`);
@@ -30360,12 +31438,11 @@ function startFeishuChannel(deps) {
             const route = bridge.getRoute(sessionId);
             if (!account || !route)
               return;
-            const resolved = path66.resolve(filePath);
-            if (!isMediaPathAllowed(resolved, account.workspacePath)) {
-              console.warn(`[Feishu] sendMedia blocked: ${filePath} not under workspace`);
-              return;
-            }
+            const resolved = path70.resolve(filePath);
             try {
+              if (!isMediaPathAllowed(resolved, account.workspacePath, account.accessLevel)) {
+                throw new Error(`media path not allowed: ${filePath} (must be under the workspace or the temp dir; account access level ${account.accessLevel})`);
+              }
               await sendFeishuMedia({ account, ...route, filePath: resolved });
             } catch (err) {
               console.log(`[Feishu] sendMedia ${filePath} failed: ${err instanceof Error ? err.message : String(err)}`);
@@ -30373,7 +31450,7 @@ function startFeishuChannel(deps) {
                 account,
                 ...route,
                 text: t("handler.upload_failed", getLang(account), {
-                  name: path66.basename(filePath),
+                  name: path70.basename(filePath),
                   error: err instanceof Error ? err.message : String(err)
                 })
               }).catch(() => {
@@ -30543,7 +31620,7 @@ async function replyToInbound(args) {
 async function sendFeishuMedia(args) {
   const { account, inboundMessageId, isP2P, chatId, filePath } = args;
   const cls = classifyMedia(filePath);
-  const ext = path66.extname(filePath).toLowerCase();
+  const ext = path70.extname(filePath).toLowerCase();
   if (cls === "image") {
     const { imageKey } = await uploadImage({ appId: account.appId, appSecret: account.appSecret, filePath });
     await replyToInboundRaw({
@@ -30670,11 +31747,11 @@ var init_handler6 = __esm({
 });
 
 // ../server/dist/routes/feishu.js
-import { Hono as Hono19 } from "hono";
-import fs59 from "node:fs";
+import { Hono as Hono21 } from "hono";
+import fs63 from "node:fs";
 function createFeishuRoutes(deps) {
   const { db, channel } = deps;
-  const app2 = new Hono19();
+  const app2 = new Hono21();
   app2.get("/feishu/accounts/:id/search", async (c) => {
     const id = c.req.param("id");
     const q = c.req.query("q") ?? "";
@@ -30695,7 +31772,7 @@ function createFeishuRoutes(deps) {
       botOpenId: a.botOpenId,
       hasEncryptKey: !!a.encryptKey,
       workspacePath: a.workspacePath,
-      workspaceMissing: !fs59.existsSync(a.workspacePath),
+      workspaceMissing: !fs63.existsSync(a.workspacePath),
       label: a.label,
       enabled: a.enabled,
       accessLevel: a.accessLevel,
@@ -31068,8 +32145,8 @@ var init_event_adapter5 = __esm({
 });
 
 // ../server/dist/channels/wecom/handler.js
-import path67 from "node:path";
-import fs60 from "node:fs/promises";
+import path71 from "node:path";
+import fs64 from "node:fs/promises";
 import { WSClient as WSClient2, generateReqId } from "@wecom/aibot-node-sdk";
 function pickConversation(body) {
   const userid = body.from?.userid ?? "unknown";
@@ -31196,13 +32273,13 @@ async function replyText(wsClient, route, text6) {
 }
 async function sendWecomMedia(args) {
   const { wsClient, route, filePath } = args;
-  const ext = path67.extname(filePath).toLowerCase();
+  const ext = path71.extname(filePath).toLowerCase();
   const cls = classifyMedia(filePath);
   const type = cls === "image" && [".png", ".jpg", ".jpeg", ".gif"].includes(ext) ? "image" : cls === "video" && ext === ".mp4" ? "video" : "file";
-  const buf = await fs60.readFile(filePath);
+  const buf = await fs64.readFile(filePath);
   if (buf.length > MAX_WECOM_DOWNLOAD_BYTES)
     throw new Error("file exceeds 20MB");
-  const { media_id: mediaId } = await wsClient.uploadMedia(buf, { type, filename: path67.basename(filePath) });
+  const { media_id: mediaId } = await wsClient.uploadMedia(buf, { type, filename: path71.basename(filePath) });
   await wsClient.replyMedia({ headers: { req_id: route.reqId } }, type, mediaId);
 }
 function startWecomChannel(deps) {
@@ -31226,17 +32303,16 @@ function startWecomChannel(deps) {
             const wsClient = states.get(accountId)?.wsClient;
             if (!account || !route || !wsClient)
               return;
-            const resolved = path67.resolve(filePath);
-            if (!isMediaPathAllowed(resolved, account.workspacePath)) {
-              console.warn(`[WeCom] sendMedia blocked: ${filePath} not under workspace`);
-              return;
-            }
+            const resolved = path71.resolve(filePath);
             try {
+              if (!isMediaPathAllowed(resolved, account.workspacePath, account.accessLevel)) {
+                throw new Error(`media path not allowed: ${filePath} (must be under the workspace or the temp dir; account access level ${account.accessLevel})`);
+              }
               await sendWecomMedia({ wsClient, route, filePath: resolved });
             } catch (err) {
               console.log(`[WeCom] sendMedia ${filePath} failed: ${err instanceof Error ? err.message : String(err)}`);
               await replyText(wsClient, route, t("handler.upload_failed", getLang(account), {
-                name: path67.basename(filePath),
+                name: path71.basename(filePath),
                 error: err instanceof Error ? err.message : String(err)
               })).catch(() => {
               });
@@ -31453,17 +32529,17 @@ var init_handler7 = __esm({
 });
 
 // ../server/dist/routes/wecom.js
-import { Hono as Hono20 } from "hono";
-import fs61 from "node:fs";
+import { Hono as Hono22 } from "hono";
+import fs65 from "node:fs";
 function createWecomRoutes(deps) {
   const { db, channel } = deps;
-  const app2 = new Hono20();
+  const app2 = new Hono22();
   app2.get("/wecom/accounts", (c) => {
     const accounts = listAccounts7(db).map((a) => ({
       accountId: a.accountId,
       botId: a.botId,
       workspacePath: a.workspacePath,
-      workspaceMissing: !fs61.existsSync(a.workspacePath),
+      workspaceMissing: !fs65.existsSync(a.workspacePath),
       label: a.label,
       enabled: a.enabled,
       accessLevel: a.accessLevel,
@@ -31657,235 +32733,25 @@ var init_descriptors = __esm({
   }
 });
 
-// ../server/dist/middleware/auth.js
-import { Hono as Hono21 } from "hono";
-import { getCookie, setCookie } from "hono/cookie";
-import crypto5 from "node:crypto";
-function passwordHash() {
-  return config.server.password ?? "";
-}
-function passwordEnvPlaintext() {
-  return config.server.passwordEnvPlaintext;
-}
-function jwtSecret() {
-  const secret = config.server.jwtSecret ?? "";
-  if (!secret) {
-    throw new Error("jwt_secret missing \u2014 run `halo setup` to initialize");
-  }
-  return Buffer.from(secret, "base64");
-}
-function base64url(data) {
-  const buf = typeof data === "string" ? Buffer.from(data) : data;
-  return buf.toString("base64url");
-}
-function jwtSign(payload) {
-  const header = base64url(JSON.stringify({ alg: "HS256", typ: "JWT" }));
-  const body = base64url(JSON.stringify(payload));
-  const sig = crypto5.createHmac("sha256", jwtSecret()).update(`${header}.${body}`).digest();
-  return `${header}.${body}.${base64url(sig)}`;
-}
-function jwtVerify(token) {
-  const parts = token.split(".");
-  if (parts.length !== 3)
-    return null;
-  const [header, body, sig] = parts;
-  let secret;
-  try {
-    secret = jwtSecret();
-  } catch {
-    return null;
-  }
-  const expected = base64url(crypto5.createHmac("sha256", secret).update(`${header}.${body}`).digest());
-  if (sig !== expected)
-    return null;
-  try {
-    const payload = JSON.parse(Buffer.from(body, "base64url").toString());
-    if (typeof payload.exp === "number" && Date.now() / 1e3 > payload.exp)
-      return null;
-    return payload;
-  } catch {
-    return null;
-  }
-}
-function createToken() {
-  const now = Math.floor(Date.now() / 1e3);
-  return jwtSign({ iat: now, exp: now + TOKEN_MAX_AGE });
-}
-function constantTimeEqualString(a, b) {
-  const ab = Buffer.from(a, "utf-8");
-  const bb = Buffer.from(b, "utf-8");
-  const max = Math.max(ab.length, bb.length);
-  const ap = Buffer.alloc(max);
-  ab.copy(ap);
-  const bp = Buffer.alloc(max);
-  bb.copy(bp);
-  const eq17 = crypto5.timingSafeEqual(ap, bp);
-  return eq17 && ab.length === bb.length;
-}
-function validateToken(token) {
-  if (!token)
-    return null;
-  return jwtVerify(token);
-}
-function shouldRefresh(payload) {
-  const iat = payload.iat;
-  if (!iat)
-    return true;
-  return Date.now() / 1e3 - iat > REFRESH_AFTER;
-}
-function isAuthDisabled() {
-  return passwordHash().length === 0 && passwordEnvPlaintext() == null;
-}
-function isAuthenticated(cookie) {
-  if (isAuthDisabled())
-    return true;
-  return validateToken(cookie) !== null;
-}
-function getTokenFromCookieHeader(cookieHeader) {
-  if (!cookieHeader)
-    return void 0;
-  const match = cookieHeader.match(new RegExp(`(?:^|;\\s*)${COOKIE_NAME}=([^;]+)`));
-  return match?.[1];
-}
-function setTokenCookie(c, token) {
-  setCookie(c, COOKIE_NAME, token, {
-    path: "/",
-    // WS upgrade requests carry cookies on the underlying HTTP handshake;
-    // the server reads them via the Cookie header, never via JS — so the
-    // cookie can stay httpOnly to avoid XSS exfiltration.
-    httpOnly: true,
-    maxAge: TOKEN_MAX_AGE,
-    sameSite: "Lax"
-  });
-}
-function createAuthRoutes() {
-  const app2 = new Hono21();
-  app2.post("/auth/login", async (c) => {
-    const ip = getClientIp(c);
-    if (isLockedOut2(ip)) {
-      return c.json({ error: "Too many attempts, try again later" }, 429);
-    }
-    const body = await c.req.json().catch(() => ({ password: "" }));
-    if (!body.password) {
-      recordFailure2(ip);
-      return c.json({ error: "Invalid password" }, 401);
-    }
-    const envPlain = passwordEnvPlaintext();
-    const ok = envPlain != null ? constantTimeEqualString(body.password, envPlain) : await verifyPassword(body.password, passwordHash());
-    if (!ok) {
-      recordFailure2(ip);
-      return c.json({ error: "Invalid password" }, 401);
-    }
-    clearFailures2(ip);
-    const token = createToken();
-    setTokenCookie(c, token);
-    return c.json({ ok: true });
-  });
-  app2.get("/auth/check", (c) => {
-    const token = getCookie(c, COOKIE_NAME);
-    const payload = validateToken(token);
-    if (payload) {
-      if (shouldRefresh(payload)) {
-        const newToken = createToken();
-        setTokenCookie(c, newToken);
-      }
-      return c.json({ authenticated: true, badge: config.server.badge });
-    }
-    return c.json({ authenticated: false, badge: config.server.badge }, 401);
-  });
-  app2.post("/auth/logout", (c) => {
-    setCookie(c, COOKIE_NAME, "", { path: "/", maxAge: 0 });
-    return c.json({ ok: true });
-  });
-  app2.post("/auth/change-password", async (c) => {
-    const body = await c.req.json().catch(() => ({}));
-    const oldPassword = typeof body.oldPassword === "string" ? body.oldPassword : "";
-    const newPassword = typeof body.newPassword === "string" ? body.newPassword : "";
-    if (passwordEnvPlaintext() != null) {
-      return c.json({ error: "Password is managed by the HALO_PASSWORD environment variable" }, 400);
-    }
-    if (!await verifyPassword(oldPassword, passwordHash())) {
-      return c.json({ error: "Incorrect current password" }, 401);
-    }
-    const weak = passwordStrengthError(newPassword);
-    if (weak)
-      return c.json({ error: weak }, 400);
-    if (newPassword === oldPassword) {
-      return c.json({ error: "New password must differ from the current password" }, 400);
-    }
-    updateConfigLeaves({ "server.password": await hashPassword(newPassword) });
-    return c.json({ ok: true });
-  });
-  return app2;
-}
-function passwordStrengthError(pw) {
-  if (pw.length < 8)
-    return "Password must be at least 8 characters";
-  if (!/[A-Za-z]/.test(pw))
-    return "Password must contain at least one letter";
-  if (!/[0-9]/.test(pw))
-    return "Password must contain at least one digit";
-  return null;
-}
-function authMiddleware() {
-  return async (c, next) => {
-    const path70 = c.req.path;
-    if (PUBLIC_PATHS.some((p) => path70 === p || path70.startsWith(p + "?"))) {
-      return next();
-    }
-    const token = getCookie(c, COOKIE_NAME);
-    const payload = validateToken(token);
-    if (!payload) {
-      if (!path70.startsWith("/api/")) {
-        return next();
-      }
-      return c.json({ error: "Unauthorized" }, 401);
-    }
-    if (shouldRefresh(payload)) {
-      const newToken = createToken();
-      setTokenCookie(c, newToken);
-    }
-    return next();
-  };
-}
-var TOKEN_MAX_AGE, REFRESH_AFTER, COOKIE_NAME, ADMIN_LOGIN_BUCKET, isLockedOut2, recordFailure2, clearFailures2, PUBLIC_PATHS;
-var init_auth = __esm({
-  "../server/dist/middleware/auth.js"() {
-    "use strict";
-    init_config();
-    init_password_hash();
-    init_setup_config();
-    init_brute_force();
-    TOKEN_MAX_AGE = config.auth.tokenMaxAge;
-    REFRESH_AFTER = config.auth.refreshAfter;
-    COOKIE_NAME = "halo_token";
-    ADMIN_LOGIN_BUCKET = "admin-login";
-    isLockedOut2 = (ip) => isLockedOut(ADMIN_LOGIN_BUCKET, ip);
-    recordFailure2 = (ip) => recordFailure(ADMIN_LOGIN_BUCKET, ip);
-    clearFailures2 = (ip) => clearFailures(ADMIN_LOGIN_BUCKET, ip);
-    PUBLIC_PATHS = ["/api/auth/login", "/api/auth/check", "/api/auth/logout", "/api/health", "/api/web/chat", "/api/web/sessions", "/api/web/stop", "/api/web/history", "/api/web/subscribe", "/api/web/file", "/api/show/state", "/api/show/session", "/api/metrics"];
-  }
-});
-
 // ../server/dist/index.js
 var dist_exports = {};
-import { Hono as Hono22 } from "hono";
+import { Hono as Hono23 } from "hono";
 import { cors } from "hono/cors";
 import { compress } from "hono/compress";
 import { serve } from "@hono/node-server";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { WebSocketServer } from "ws";
-import path68 from "node:path";
-import fs62 from "node:fs";
+import path72 from "node:path";
+import fs66 from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { homedir as homedir24 } from "node:os";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function findProjectRoot() {
   let dir = process.cwd();
   for (let i = 0; i < 32; i++) {
-    if (fs62.existsSync(path68.join(dir, "pnpm-workspace.yaml")))
+    if (fs66.existsSync(path72.join(dir, "pnpm-workspace.yaml")))
       return dir;
-    const parent = path68.dirname(dir);
+    const parent = path72.dirname(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -31894,15 +32760,15 @@ function findProjectRoot() {
   return process.cwd();
 }
 function acquireSingleInstanceLock(lockFile) {
-  fs62.mkdirSync(path68.dirname(lockFile), { recursive: true });
-  const fd = fs62.openSync(lockFile, fs62.constants.O_RDWR | fs62.constants.O_CREAT, 420);
+  fs66.mkdirSync(path72.dirname(lockFile), { recursive: true });
+  const fd = fs66.openSync(lockFile, fs66.constants.O_RDWR | fs66.constants.O_CREAT, 420);
   const result = spawnSync3("flock", ["-n", "3"], {
     stdio: ["ignore", "ignore", "ignore", fd]
   });
   if (result.error) {
     const content = readLockPid(fd);
     if (content > 0 && isProcessAlive(content)) {
-      fs62.closeSync(fd);
+      fs66.closeSync(fd);
       console.error(`[Server] another halo server is already running (pid ${content}). kill it first.`);
       process.exit(1);
     }
@@ -31911,19 +32777,19 @@ function acquireSingleInstanceLock(lockFile) {
     if (content > 0 && !isProcessAlive(content)) {
       console.warn(`[Server] removing stale server.lock (pid ${content} not running)`);
     } else {
-      fs62.closeSync(fd);
+      fs66.closeSync(fd);
       console.error(`[Server] another halo server is already running${content > 0 ? ` (pid ${content})` : ""}. kill it first.`);
       process.exit(1);
     }
   }
-  fs62.ftruncateSync(fd);
-  fs62.writeSync(fd, String(process.pid));
-  fs62.fsyncSync(fd);
+  fs66.ftruncateSync(fd);
+  fs66.writeSync(fd, String(process.pid));
+  fs66.fsyncSync(fd);
 }
 function readLockPid(fd) {
   try {
     const buf = Buffer.alloc(32);
-    const n = fs62.readSync(fd, buf, 0, 32, 0);
+    const n = fs66.readSync(fd, buf, 0, 32, 0);
     return parseInt(buf.subarray(0, n).toString("utf-8").trim(), 10) || 0;
   } catch {
     return 0;
@@ -31951,7 +32817,7 @@ function isProcessAlive(pid) {
   }
 }
 function readGitSha() {
-  if (!fs62.existsSync(path68.join(PROJECT_ROOT, "pnpm-workspace.yaml")) || !fs62.existsSync(path68.join(PROJECT_ROOT, ".git")))
+  if (!fs66.existsSync(path72.join(PROJECT_ROOT, "pnpm-workspace.yaml")) || !fs66.existsSync(path72.join(PROJECT_ROOT, ".git")))
     return null;
   try {
     const rev = spawnSync3("git", ["rev-parse", "--short", "HEAD"], { cwd: PROJECT_ROOT, encoding: "utf-8" });
@@ -31968,19 +32834,20 @@ function readGitSha() {
 }
 function resolveFrontendDir() {
   if (process.env.HALO_FRONTEND_DIR)
-    return path68.resolve(process.env.HALO_FRONTEND_DIR);
-  const bundled = path68.resolve(__dirname3, "..", "admin-out");
-  if (fs62.existsSync(path68.join(bundled, "index.html")))
+    return path72.resolve(process.env.HALO_FRONTEND_DIR);
+  const bundled = path72.resolve(__dirname3, "..", "admin-out");
+  if (fs66.existsSync(path72.join(bundled, "index.html")))
     return bundled;
-  const sibling = path68.resolve(__dirname3, "..", "..", "admin", "out");
-  if (fs62.existsSync(path68.join(sibling, "index.html")))
+  const sibling = path72.resolve(__dirname3, "..", "..", "admin", "out");
+  if (fs66.existsSync(path72.join(sibling, "index.html")))
     return sibling;
-  return path68.resolve(PROJECT_ROOT, "packages", "admin", "out");
+  return path72.resolve(PROJECT_ROOT, "packages", "admin", "out");
 }
 async function gracefulShutdown(signal) {
   console.log(`[Server] Received ${signal}, shutting down gracefully...`);
   stopEvoTicker();
   stopArchiveDaemon();
+  stop();
   stopCronDaemon();
   await shutdownChannels();
   wss.clients.forEach((client) => {
@@ -31994,7 +32861,7 @@ async function gracefulShutdown(signal) {
   await shutdownObservability();
   process.exit(0);
 }
-var __dirname3, PORT, HALO_VERSION, PROJECT_ROOT, HALO_HOME4, GIT_SHA, AGENTCORE, app, allowlist, authRoutes, fileRoutes, dataPreviewRoutes, gitRoutes, agentConfigRoutes, skillRoutes, settingsRoutes, evolutionRoutes, cronRoutes, channelDb, registry, sessionRoutes, sessionArchiveRoutes, showRoutes, metricsRoutes, commandRoutes, FRONTEND_DIR, server, wss;
+var __dirname3, PORT, HALO_VERSION, PROJECT_ROOT, HALO_HOME4, GIT_SHA, AGENTCORE, app, allowlist, authRoutes, fileRoutes, dataPreviewRoutes, gitRoutes, agentConfigRoutes, skillRoutes, settingsRoutes, evolutionRoutes, cronRoutes, extensionRoutes, channelDb, registry, sessionRoutes, sessionArchiveRoutes, showRoutes, metricsRoutes, commandRoutes, FRONTEND_DIR, server, wss;
 var init_dist2 = __esm({
   async "../server/dist/index.js"() {
     "use strict";
@@ -32023,11 +32890,13 @@ var init_dist2 = __esm({
     init_runs_db();
     init_runner();
     init_cron();
+    init_extensions();
+    init_watcher();
     init_evo_db();
     init_ticker();
     init_archive();
     init_spawn();
-    init_registry2();
+    init_registry3();
     init_descriptors();
     init_auth();
     init_logger();
@@ -32036,13 +32905,13 @@ var init_dist2 = __esm({
     init_sandbox();
     init_init();
     init_git_ssh();
-    __dirname3 = path68.dirname(fileURLToPath3(import.meta.url));
+    __dirname3 = path72.dirname(fileURLToPath3(import.meta.url));
     PORT = config.server.port;
-    HALO_VERSION = "1.4.6";
+    HALO_VERSION = "1.5.0-alpha";
     PROJECT_ROOT = findProjectRoot();
-    HALO_HOME4 = path68.join(homedir24(), ".halo");
+    HALO_HOME4 = path72.join(homedir24(), ".halo");
     GIT_SHA = readGitSha();
-    if (!fs62.existsSync(path68.join(HALO_HOME4, "global", ".template-version"))) {
+    if (!fs66.existsSync(path72.join(HALO_HOME4, "global", ".template-version"))) {
       process.stderr.write("\x1B[31m[Server] ~/.halo/global/ not initialized. Run `halo setup` first.\x1B[0m\n");
       process.exit(1);
     }
@@ -32063,20 +32932,8 @@ var init_dist2 = __esm({
       process.exit(1);
     }
     if (!AGENTCORE)
-      acquireSingleInstanceLock(path68.join(HALO_HOME4, "global", "server.lock"));
-    {
-      const declared = new Set(commandRegistry.listDescriptors().filter((d) => d.source === "builtin").map((d) => d.slashName));
-      const dispatched = new Set(DISPATCH_COMMANDS);
-      const declaredServer = new Set(commandRegistry.listDescriptors().filter((d) => d.type === "server" && d.source === "builtin").map((d) => d.slashName));
-      const missingDispatch = [...declaredServer].filter((n) => !dispatched.has(n));
-      const orphanDispatch = [...dispatched].filter((n) => !declared.has(n));
-      if (missingDispatch.length > 0) {
-        throw new Error(`[Server] Command descriptors without a dispatch case: ${missingDispatch.join(", ")}. Either add a case in channels/shared/commands.ts dispatchCommand or change the descriptor type to 'client'.`);
-      }
-      if (orphanDispatch.length > 0) {
-        throw new Error(`[Server] Dispatch cases without a descriptor: ${orphanDispatch.join(", ")}. Add a registerDescriptor entry in commands/index.ts or remove the dispatch case.`);
-      }
-    }
+      acquireSingleInstanceLock(path72.join(HALO_HOME4, "global", "server.lock"));
+    commandRegistry.assertDispatchCommands(DISPATCH_COMMANDS);
     await initObservability();
     initLogger();
     await initBwrapCheck();
@@ -32089,7 +32946,7 @@ var init_dist2 = __esm({
     ensureSshAgent();
     console.log(`[Server] Halo home: ${HALO_HOME4}`);
     console.log("[Server] Services initialized (ModelRuntime)");
-    app = new Hono22();
+    app = new Hono23();
     allowlist = config.server.corsOrigins;
     app.use("/*", cors({
       origin: allowlist.length > 0 ? (origin) => origin && allowlist.includes(origin) ? origin : null : (origin) => origin ?? "*",
@@ -32136,11 +32993,15 @@ var init_dist2 = __esm({
     app.route("/api", evolutionRoutes);
     cronRoutes = createCronRoutes();
     app.route("/api", cronRoutes);
-    channelDb = createChannelDb(path68.join(HALO_HOME4, "secrets"));
+    extensionRoutes = createExtensionRoutes();
+    app.route("/api", extensionRoutes);
+    if (!AGENTCORE)
+      start();
+    channelDb = createChannelDb(path72.join(HALO_HOME4, "secrets"));
     setChannelDb(channelDb);
-    setEvoDb(createEvoDb(path68.join(HALO_HOME4, "global")));
-    setCronDb(createCronDb(path68.join(HALO_HOME4, "global")));
-    setRunsDb(createRunsDb(path68.join(HALO_HOME4, "global")));
+    setEvoDb(createEvoDb(path72.join(HALO_HOME4, "global")));
+    setCronDb(createCronDb(path72.join(HALO_HOME4, "global")));
+    setRunsDb(createRunsDb(path72.join(HALO_HOME4, "global")));
     setEvoSpawner(realEvoSpawner);
     if (!AGENTCORE) {
       startEvoTicker();
@@ -32150,7 +33011,7 @@ var init_dist2 = __esm({
     setRelayRegistry(registry);
     setCronSessionRegistry(registry);
     for (const ws of listRunningWorkspaces()) {
-      if (!fs62.existsSync(path68.join(ws, ".halo")))
+      if (!fs66.existsSync(path72.join(ws, ".halo")))
         continue;
       if (!claimWorkspaceRuntime(ws))
         continue;
@@ -32179,11 +33040,11 @@ var init_dist2 = __esm({
       console.log(`[Server] AgentCore runtime mode \u2014 workspace: ${config.server.agentcoreWorkspace}`);
     }
     FRONTEND_DIR = resolveFrontendDir();
-    app.use("/*", serveStatic({ root: path68.relative(process.cwd(), FRONTEND_DIR) }));
+    app.use("/*", serveStatic({ root: path72.relative(process.cwd(), FRONTEND_DIR) }));
     app.get("/*", (c) => {
-      const indexPath = path68.join(FRONTEND_DIR, "index.html");
+      const indexPath = path72.join(FRONTEND_DIR, "index.html");
       try {
-        const html = fs62.readFileSync(indexPath, "utf-8");
+        const html = fs66.readFileSync(indexPath, "utf-8");
         return c.html(html);
       } catch {
         return c.text("Frontend not built. Run: cd packages/admin && npx next build", 503);
@@ -32973,11 +33834,11 @@ process.emitWarning = (warning, ...args) => {
 
 // src/index.ts
 init_server_supervisor();
-import path69 from "node:path";
-import fs63 from "node:fs";
+import path73 from "node:path";
+import fs67 from "node:fs";
 import { homedir as homedir25 } from "node:os";
 import { parseArgs as parseArgs2 } from "node:util";
-var VERSION = "1.4.6";
+var VERSION = "1.5.0-alpha";
 var HELP_TOP = `Usage: halo <command> [options]
 
 Commands:
@@ -33234,8 +34095,8 @@ async function cmdSetup(argv = []) {
   const { buildBindProviderPlan: buildBindProviderPlan2, KEEP_CURRENT: KEEP_CURRENT2, AWS_CHAIN_PROVIDER: AWS_CHAIN_PROVIDER2 } = await Promise.resolve().then(() => (init_setup_bind_provider(), setup_bind_provider_exports));
   const { promptText: promptText2, promptPassword: promptPassword2, promptSelect: promptSelect2, promptMultiSelect: promptMultiSelect2 } = await Promise.resolve().then(() => (init_setup_prompts(), setup_prompts_exports));
   const nonInteractive = argv.includes("--non-interactive") || argv.includes("-y");
-  const haloHome2 = path69.join(homedir25(), ".halo");
-  const globalDir2 = path69.join(haloHome2, "global");
+  const haloHome2 = path73.join(homedir25(), ".halo");
+  const globalDir2 = path73.join(haloHome2, "global");
   ensureHaloHome2(haloHome2);
   process.stderr.write(`[setup] ${haloHome2}/ ready
 `);
@@ -33578,7 +34439,7 @@ async function cmdUpgrade() {
 `);
       process.exit(1);
     }
-    const broken = verifyNativeModules2(path69.join(rootDir, PKG));
+    const broken = verifyNativeModules2(path73.join(rootDir, PKG));
     if (broken.length > 0) {
       process.stderr.write(
         `
@@ -33609,7 +34470,7 @@ halo: upgrade failed (npm exited ${install.status}). ${hint}
 async function cmdAgents(flags) {
   const { initRuntime: initRuntime2, listAgents: listAgents2 } = await Promise.resolve().then(() => (init_harness(), harness_exports));
   await initRuntime2();
-  const workspace = path69.resolve(flags.workspace ?? process.cwd());
+  const workspace = path73.resolve(flags.workspace ?? process.cwd());
   const agents = await listAgents2(workspace);
   if (agents.length === 0) {
     process.stderr.write("No agents found.\n");
@@ -33625,7 +34486,7 @@ async function cmdAgents(flags) {
 async function cmdSessions(flags) {
   const { initRuntime: initRuntime2, listSessions: listSessions2 } = await Promise.resolve().then(() => (init_harness(), harness_exports));
   await initRuntime2();
-  const workspace = path69.resolve(flags.workspace ?? process.cwd());
+  const workspace = path73.resolve(flags.workspace ?? process.cwd());
   const sessions = listSessions2(workspace);
   if (sessions.length === 0) {
     process.stderr.write("No sessions found.\n");
@@ -33738,11 +34599,11 @@ ${stdinContent}` : stdinContent;
     harness.destroy();
   }
 }
-var SERVER_LOCK_PATH = path69.join(homedir25(), ".halo", "global", "server.lock");
-var SERVER_LOG_PATH = path69.join(homedir25(), ".halo", "logs", "server.log");
+var SERVER_LOCK_PATH = path73.join(homedir25(), ".halo", "global", "server.lock");
+var SERVER_LOG_PATH = path73.join(homedir25(), ".halo", "logs", "server.log");
 function readServerPid() {
   try {
-    const txt = fs63.readFileSync(SERVER_LOCK_PATH, "utf-8").trim();
+    const txt = fs67.readFileSync(SERVER_LOCK_PATH, "utf-8").trim();
     const n = parseInt(txt, 10);
     return Number.isFinite(n) && n > 0 ? n : null;
   } catch {
@@ -33829,8 +34690,8 @@ async function cmdServerStart(argv, _unused) {
     return;
   }
   const { spawn: spawn5 } = await import("node:child_process");
-  fs63.mkdirSync(path69.dirname(SERVER_LOG_PATH), { recursive: true });
-  const out = fs63.openSync(SERVER_LOG_PATH, "a");
+  fs67.mkdirSync(path73.dirname(SERVER_LOG_PATH), { recursive: true });
+  const out = fs67.openSync(SERVER_LOG_PATH, "a");
   const child = spawn5(process.argv[0], [process.argv[1], "server", "start"], {
     detached: true,
     stdio: ["ignore", out, out],
@@ -33931,7 +34792,7 @@ async function cmdServerLogs(argv) {
       lines: { type: "string", short: "n" }
     }
   });
-  if (!fs63.existsSync(SERVER_LOG_PATH)) {
+  if (!fs67.existsSync(SERVER_LOG_PATH)) {
     process.stderr.write(`No log file at ${SERVER_LOG_PATH}
 `);
     return;
@@ -33949,7 +34810,7 @@ function exitMissingSetup() {
   process.exit(1);
 }
 function isHaloHomeReady() {
-  return fs63.existsSync(path69.join(homedir25(), ".halo", "global", ".template-version"));
+  return fs67.existsSync(path73.join(homedir25(), ".halo", "global", ".template-version"));
 }
 async function main2() {
   const argv = process.argv.slice(2);