claude-code-session-manager 0.123.1 → 0.124.1

package/dist-web/index.html

@@ -0,0 +1,16 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Claude Session Manager</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+    <link href="https://fonts.googleapis.com/css2?family=Newsreader:ital,opsz,wght@0,6..72,400;0,6..72,500;0,6..72,600;0,6..72,700;1,6..72,400&family=Geist:wght@300;400;500;600;700&family=IBM+Plex+Mono:wght@400;500;600&display=swap" rel="stylesheet">
+    <script type="module" crossorigin src="./assets/app.js"></script>
+    <link rel="stylesheet" crossorigin href="./assets/app.css">
+  </head>
+  <body class="bg-bg text-fg font-sans antialiased">
+    <div id="root"></div>
+  </body>
+</html>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-code-session-manager",
-  "version": "0.123.1",
+  "version": "0.124.1",
   "description": "Local cockpit for the Claude Code CLI — multi-tab terminal, full config surface, scheduler, voice dictation, and live observability.",
   "type": "module",
   "main": "src/main/index.cjs",
@@ -29,6 +29,7 @@
     "dist/index.html",
     "dist/assets/",
     "dist/vad/",
+    "dist-web/",
     "README.md",
     "!src/**/__tests__/**"
   ],
@@ -36,7 +37,8 @@
     "dev": "concurrently -k -n vite,electron -c magenta,cyan \"npm:dev:renderer\" \"npm:dev:electron\"",
     "dev:renderer": "vite",
     "dev:electron": "wait-on http://localhost:5173 && SM_DEV=1 electron .",
-    "build": "vite build",
+    "build": "vite build && vite build --config vite.web.config.ts",
+    "build:web": "vite build --config vite.web.config.ts",
     "dist:stage": "npm run build && node scripts/package/stage.cjs",
     "dist:mac": "npm run dist:stage && electron-builder --config electron-builder.yml --mac --publish never",
     "dist:win": "npm run dist:stage && electron-builder --config electron-builder.yml --win --publish never",
@@ -45,7 +47,7 @@
     "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.main.json",
     "start": "electron .",
     "prepack": "node scripts/write-build-info.cjs",
-    "prepublishOnly": "node scripts/write-build-info.cjs && vite build",
+    "prepublishOnly": "node scripts/write-build-info.cjs && npm run build",
     "test:unit": "vitest run",
     "test:unit:stability": "bash scripts/test-unit-stability.sh",
     "bench": "node scripts/bench/main-bench.cjs",
@@ -138,7 +140,7 @@
     "electron-updater": "^6.8.9",
     "node-pty": "^1.2.0-beta.12",
     "ws": "^8.18.0",
-    "zod": "^3.23.8"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@huggingface/transformers": "^4.1.0",

package/plugins/session-manager-dev/skills/builder/3-publish/SKILL.md

@@ -40,24 +40,37 @@ to ask for reconfirmation once `builder:gate` has passed.
 
 5. **Create the isolated worktree from that tag:**
    ```
-   git worktree add /tmp/sm-publish-v<version> v<version>
+   mkdir -p "$HOME/.cache/sm-publish"
+   git worktree add "$HOME/.cache/sm-publish/v<version>" v<version>
    ```
+   **Never under `/tmp`** (or anywhere under `os.tmpdir()`): the test suite treats such paths as
+   test fixtures, so `src/main/__tests__/opsErrorLog.test.cjs` ("a real project root is
+   refused") fails inside a `/tmp` worktree.
 
-6. **Move into the worktree and build clean:**
+6. **Move into the worktree, build clean, and run the in-tree gate:**
    ```
-   cd /tmp/sm-publish-v<version>
+   cd "$HOME/.cache/sm-publish/v<version>"
    npm ci
    npm run typecheck
+   npm run test:unit
    ```
    `npm ci` gives a fully clean `node_modules` from the lockfile — no leftover local state
-   from the dirty main repo can leak into the published artifact.
+   from the dirty main repo can leak into the published artifact. Typecheck and unit tests
+   must both pass here; stop before `npm publish` on any failure.
+
+   After the build step (run the project's build, e.g. `npm run build` plus any web build that
+   produces `dist-web/`), check that every `files` entry exists:
+   ```
+   test -f dist-web/index.html && test -f dist/index.html
+   ```
+   If either is missing, stop before `npm publish` and report.
 
 7. **Publish from inside the worktree:**
    ```
    npm publish
    ```
    This project's `prepublishOnly` script runs `vite build` — because step 6 already `cd`'d
-   into `/tmp/sm-publish-v<version>`, that build runs **inside the clean worktree**, never
+   into `$HOME/.cache/sm-publish/v<version>`, that build runs **inside the clean worktree**, never
    touching (or being affected by) the live/dirty working directory back in the main repo.
    This is the entire reason the worktree exists: it decouples "what's uncommitted in my
    editor right now" from "what gets built and shipped."
@@ -81,16 +94,21 @@ to ask for reconfirmation once `builder:gate` has passed.
 
 9. **Clean up the worktree:**
    ```
-   git worktree remove /tmp/sm-publish-v<version> --force
+   git worktree remove "$HOME/.cache/sm-publish/v<version>" --force
    ```
 
-10. **Verify the publish actually landed on the registry:**
+10. **Verify the publish actually landed on the registry.** `npm view` is cached and lags for
+    minutes after a real publish, so check a cache-busted packument and the tarball first:
     ```
+    curl -s "https://registry.npmjs.org/<packageName>?t=$(date +%s)"   # dist-tags.latest + versions
+    curl -sI <tarball URL from versions["<version>"].dist.tarball>      # expect HTTP 200
     npm view <packageName> version
     npm view <packageName> dist-tags
     ```
-    Confirm the reported version matches `<version>` and `latest` points to it (unless the
-    project intentionally publishes to a different dist-tag).
+    Confirm `dist-tags.latest` is `<version>`, `<version>` is in `versions`, and the tarball
+    returns 200 (unless the project intentionally publishes to a different dist-tag). If the
+    packument is current, an unchanged `npm view` for a few minutes is normal lag, not a
+    failure — do not republish.
 
 11. **Post-publish: verify the installer release.** Pushing `v<version>` (step 8) triggers
     `.github/workflows/release.yml`. Confirm the tag push succeeded, then poll (bounded: at most
@@ -109,7 +127,7 @@ to ask for reconfirmation once `builder:gate` has passed.
 Stop at that step. Do not proceed. Report which step failed and its output. If the worktree
 was already created (step 5+), leave it in place if its state is relevant evidence for
 diagnosing the failure; otherwise remove it (step 9) before reporting, so a retry doesn't
-collide with a stale `/tmp/sm-publish-v<version>` path.
+collide with a stale `$HOME/.cache/sm-publish/v<version>` path.
 
 ## Output
 

package/plugins/session-manager-dev/skills/develop/SKILL.md

@@ -181,9 +181,9 @@ the API rejects that.
     or a gitignored path. Why: a dirtied tree fails the clean-tree check.
 12. Never put a step only a human or the passage of time can complete (host cron install,
     waiting for a live post, a live payment, an account dashboard action) in a gate or
-    criterion. The executor ends with `SCHEDULER_VERDICT: NEEDS_HUMAN <question>` for those, and
-    the PRD notes say so. Why: no executor can pass such a gate, so the job parks as
-    `sentinel_fail`.
+    criterion; keep them out of PRDs at authoring time. An executor that meets one ends
+    `SCHEDULER_VERDICT: FAIL` naming what is missing. Why: no executor can pass such a gate,
+    and queued work runs with no questions asked.
     Live-run steps that need gitignored state follow PRD_AUTHORING.md §7 (absolute main-checkout
     paths, artifact-only).
 
@@ -271,9 +271,8 @@ Rules:
          `scheduler_archive_prd`. Archiving marks it completed and frees the PRDs that depend on
          it.
       A parked validator arrives this way too.
-      A `needs_human` notice carries a question for the human: relay it verbatim, then act on
-      the answer with `scheduler_update_prd` + `scheduler_reset_job`. Why: the executor stopped
-      on a step only the human can answer.
+      Never relay a question to the human: resolve every PRD through cases 1-4, making the
+      safest reasonable choice, and report it. Why: queued work runs with no questions asked.
    2. **A PLAN SETTLED digest.** Read the validator records it names. A `REFUTED` PRD, or a
       Critical or Important finding, means a fix wave: one `behavior` or `wire` PRD per finding
       plus a new validate PRD. Never fix inline. A Not validated list means validate exactly

package/src/main/build-info.json

@@ -1,8 +1,8 @@
 {
-  "version": "0.123.1",
-  "gitSha": "457770adbb40ab9fb1a79929c1c734198a683ba5",
-  "gitShortSha": "457770ad",
+  "version": "0.124.1",
+  "gitSha": "604bae39a0da6417ec4f1ba2f92c81f4661c2dfd",
+  "gitShortSha": "604bae39",
   "gitBranch": "HEAD",
-  "builtAt": "2026-10-25T22:46:53.152Z",
+  "builtAt": "2026-10-26T07:38:06.859Z",
   "dirty": false
 }

package/src/main/chatRunner.cjs

@@ -1,4 +1,5 @@
 'use strict';
+const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
 
 /**
  * chatRunner.cjs — headless `claude -p --output-format stream-json` runner for
@@ -49,6 +50,7 @@ const { killTree, detachedSpawnOpts } = require('./lib/process/killTree.cjs');
 const agentModelResolve = require('./lib/claude/agentModelResolve.cjs');
 const { resolveEpicEffort, effortArgs } = require('./lib/claude/agentEffortResolve.cjs');
 const { planEpicSpawn } = require('./lib/epic/epicSpawnPlan.cjs');
+const epicWorktreeMint = require('./lib/epic/epicWorktreeMint.cjs');
 const logs = require('./logs.cjs');
 const { createHeadTailBuffer } = require('./lib/util/headTailBuffer.cjs');
 
@@ -257,6 +259,33 @@ const STOP_SIGNAL_INSTRUCTION =
   `guess on what's genuinely blocked, but always answer what you can first. ` +
   `Otherwise complete the task and end with a concise summary of what you did.\n\n`;
 
+// Replaces STOP_SIGNAL_INSTRUCTION for turns the scheduler itself starts: no human is
+// watching, so a question would stall the Epic forever.
+const SCHEDULER_TURN_INSTRUCTION =
+  `IMPORTANT: This turn was started by the scheduler and nobody is watching. ` +
+  `Never ask questions and never print ${STOP_SENTINEL}. Act on the message below with ` +
+  `the /develop skill's Phase 2 rules (reset, fix the spec, archive, or queue a fix wave). ` +
+  `Make the safest reasonable choice for anything left open, and end with a short report ` +
+  `of what you did.\n\n`;
+
+// tab+prompt keys of scheduler-originated prompts awaiting their run() (consumed once).
+const schedulerPrompts = new Map();
+const SCHEDULER_PROMPT_TTL_MS = 6 * 60 * 60 * 1000;
+function noteSchedulerPrompt(tabId, prompt) {
+  const now = Date.now();
+  for (const [k, v] of schedulerPrompts) if (v.expires < now) schedulerPrompts.delete(k);
+  const key = `${tabId}\n${prompt}`;
+  const cur = schedulerPrompts.get(key);
+  schedulerPrompts.set(key, { count: (cur ? cur.count : 0) + 1, expires: now + SCHEDULER_PROMPT_TTL_MS });
+}
+function consumeSchedulerPrompt(tabId, prompt) {
+  const key = `${tabId}\n${prompt}`;
+  const cur = schedulerPrompts.get(key);
+  if (!cur || cur.expires < Date.now()) { schedulerPrompts.delete(key); return false; }
+  if (cur.count <= 1) schedulerPrompts.delete(key); else cur.count -= 1;
+  return true;
+}
+
 // ─── Hard wall-clock kill ceiling ────────────────────────────────────────
 // Defined here (ahead of CHAT_MODE_TRUTH_INSTRUCTION) so the prompt's stated
 // budget is always derived from this single constant — never a hand-written
@@ -311,6 +340,9 @@ const dispatching = new Set();
 // "Session ID … is already in use", so pump() refuses to start a second run
 // for a held sessionId (it waits in `waiting` like any other blocked run).
 const liveSessions = new Set();
+// Submissions parked while a New Epic's fire-and-forget worktree mint is still in
+// flight (tabId → opts). Counted by run()'s tabBusy; cancel() can drop them.
+const pendingStart = new Map();
 
 // Indirection so tests can stub the spawn without launching claude.
 let executor = executeRun;
@@ -327,6 +359,7 @@ function __resetQueueForTests() {
   dispatching.clear();
   liveSessions.clear();
   waiting.length = 0;
+  pendingStart.clear();
   sessionSlots.__resetForTests();
 }
 
@@ -337,11 +370,7 @@ let mainWindow = null;
 function attachWindow(win) { mainWindow = win; }
 
 function broadcast(channel, payload) {
-  try {
-    if (mainWindow && !mainWindow.isDestroyed() && mainWindow.webContents && !mainWindow.webContents.isDestroyed()) {
-      mainWindow.webContents.send(channel, payload);
-    }
-  } catch { /* render frame may be gone */ }
+  sendIfAlive(mainWindow, channel, payload);
 }
 
 // ─── Public queue entry ─────────────────────────────────────────────────────
@@ -358,6 +387,9 @@ function broadcast(channel, payload) {
  * @param {{ tabId: string, sessionId: string, prompt: string, cwd: string, resume: boolean, silent?: boolean, onSilentResult?: (text: string) => void, onSilentError?: (message: string, code?: string) => void, promptId?: string }} opts
  */
 function run(opts) {
+  // A scheduler-originated prompt (tagged by enqueueExternalPrompt) is re-identified
+  // here by tab + exact text, since it travels through the renderer's chat:run.
+  if (!opts.silent && consumeSchedulerPrompt(opts.tabId, opts.prompt)) opts = { ...opts, origin: 'scheduler' };
   // Per-tab exclusivity still holds — two `claude -p --resume` against ONE
   // sessionId must never overlap — but it is now enforced in pump() (which
   // refuses to start a run for a tab that already has one live) rather than by
@@ -374,6 +406,7 @@ function run(opts) {
   const tabBusy = inFlight.has(opts.tabId)
     || dispatching.has(opts.tabId)
     || liveSessions.has(opts.sessionId)
+    || pendingStart.has(opts.tabId)
     || waiting.some((w) => w.tabId === opts.tabId);
   if (tabBusy && opts.silent) {
     // Silent probes stay best-effort and invisible: a probe that collides is
@@ -381,6 +414,21 @@ function run(opts) {
     return { accepted: false, reason: 'tab-busy-silent' };
   }
 
+  // A New Epic's turn 1 races the fire-and-forget worktree mint: only when a mint is
+  // actually in flight for this Epic, hold the submission (<=90s, never rejects) so the
+  // first spawn lands in the worktree. Every other run is untouched.
+  if (epicWorktreeMint.hasPendingEpicWorktree(opts.cwd, opts.tabId)) {
+    pendingStart.set(opts.tabId, opts);
+    epicWorktreeMint.awaitPendingEpicWorktree(opts.cwd, opts.tabId)
+      .then((wt) => wt, () => null)
+      .then((wt) => {
+        if (pendingStart.get(opts.tabId) !== opts) return; // cancelled meanwhile
+        pendingStart.delete(opts.tabId);
+        run({ ...opts, worktreeDirHint: wt && wt.dir ? wt.dir : undefined });
+      });
+    return { accepted: true, queued: tabBusy };
+  }
+
   waiting.push(opts);
   pump();
   return { accepted: true, queued: tabBusy };
@@ -448,7 +496,7 @@ sessionSlots.subscribe(() => { try { pump(); } catch { /* defensive */ } });
  * @param {{ tabId: string, sessionId: string, prompt: string, cwd: string, resume: boolean, silent?: boolean, onSilentResult?: (text: string) => void, onSilentError?: (message: string, code?: string) => void, promptId?: string }} opts
  * @returns {Promise<void>}
  */
-function executeRun({ tabId, sessionId, prompt, cwd, resume, silent, onSilentResult, onSilentError, promptId }) {
+function executeRun({ tabId, sessionId, prompt, cwd, resume, silent, onSilentResult, onSilentError, promptId, origin, worktreeDirHint }) {
   return new Promise((resolve) => {
     const startedAt = Date.now();
     // Last few tool_use blocks seen on the stream, oldest first — surfaced in
@@ -532,7 +580,8 @@ function executeRun({ tabId, sessionId, prompt, cwd, resume, silent, onSilentRes
 
     // Prepend the stop-signal protocol instruction and the chat-mode truth
     // instruction to every prompt
-    const fullPrompt = STOP_SIGNAL_INSTRUCTION + CHAT_MODE_TRUTH_INSTRUCTION + prompt;
+    const fullPrompt = (origin === 'scheduler' ? SCHEDULER_TURN_INSTRUCTION : STOP_SIGNAL_INSTRUCTION)
+      + CHAT_MODE_TRUTH_INSTRUCTION + prompt;
 
     // sessionId is the Epic's claudeSessionId for an Epic-backed tab (see
     // comment above childEnv) — resolve that Epic's agentType persona model,
@@ -551,7 +600,7 @@ function executeRun({ tabId, sessionId, prompt, cwd, resume, silent, onSilentRes
     // Main is authoritative about --resume vs --session-id AND the spawn cwd, and it decides
     // them TOGETHER (epicSpawnPlan.cjs): a transcript under an encoding the spawn cwd cannot see
     // must never yield a claimed flag. Unreachable / closed Epics are refused before any spawn.
-    const plan = planEpicSpawn({ cwd, claudeSessionId: sessionId, fallbackResume: !!resume });
+    const plan = planEpicSpawn({ cwd, claudeSessionId: sessionId, fallbackResume: !!resume, worktreeDirHint });
     if (!plan.ok) {
       emitTerminal('chat:run:error', { tabId, sessionId, code: plan.code, message: plan.message });
       // emitTerminal is a no-op broadcast for silent runs, so hand the refusal to the caller
@@ -919,6 +968,14 @@ function executeRun({ tabId, sessionId, prompt, cwd, resume, silent, onSilentRes
  *   no-op cancel, since there is nothing further to await in those cases.
  */
 function cancel(tabId) {
+  const parked = pendingStart.get(tabId);
+  if (parked) {
+    pendingStart.delete(tabId);
+    if (!parked.silent) {
+      broadcast('chat:run:error', { tabId: parked.tabId, sessionId: parked.sessionId, message: 'cancelled while queued' });
+    }
+    return Promise.resolve();
+  }
   const entry = inFlight.get(tabId);
   if (entry) {
     entry.cancelFn(); // settle() (on child exit) deletes from inFlight + pumps the next run
@@ -959,8 +1016,9 @@ function hasLiveWindow() {
  * { disposition: 'unconfirmed', reason: 'timeout' | 'no-window' }. Never rejects.
  */
 function enqueueExternalPrompt(tabId, prompt, extra = {}) {
-  const { sessionId, cwd } = extra ?? {};
+  const { sessionId, cwd, origin } = extra ?? {};
   if (!hasLiveWindow()) return Promise.resolve({ disposition: 'unconfirmed', reason: 'no-window' });
+  if (origin === 'scheduler') noteSchedulerPrompt(tabId, prompt);
   const requestId = require('node:crypto').randomUUID();
   return new Promise((resolve) => {
     const timer = setTimeout(() => {
@@ -1088,6 +1146,7 @@ module.exports = {
   // (lib/promptPreamble.ts) can be drift-tested against the REAL text rather
   // than a copy — see chat-preamble-anchors.test.cjs.
   STOP_SIGNAL_INSTRUCTION,
+  SCHEDULER_TURN_INSTRUCTION,
   CHAT_MODE_TRUTH_INSTRUCTION,
   KILL_CEILING_MS,
   KILL_CEILING_MIN,

package/src/main/config.cjs

@@ -26,6 +26,13 @@ const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
 const { expandHome } = require('./lib/util/expandHome.cjs');
 const { listReferencedFiles } = require('./lib/importReferences.cjs');
 const atomicFs = require('./lib/util/atomicFs.cjs');
+const insideHome = require('./lib/insideHome.cjs');
+
+// Platform + matching path module, read per call so tests can inject win32.
+const platformNow = () => process.platform;
+const pathFor = () => (platformNow() === 'win32' ? path.win32 : path);
+const within = (real, root) => insideHome.isContainedIn(real, root, platformNow());
+const canon = (p) => insideHome.realpath(p, { platform: platformNow() });
 
 /** Map<watchKey, {watcher, refCount}> — one chokidar watcher per path (+ depth, see watchKeyOf). */
 const watchers = new Map();
@@ -55,26 +62,7 @@ function attachWindow(w) {
  * squarely inside the allowed root.
  */
 function realResolve(abs) {
-  const lex = path.resolve(expandHome(abs));
-  try {
-    return fs.realpathSync(lex);
-  } catch (e) {
-    if (e.code !== 'ENOENT') throw e;
-  }
-  const tail = [path.basename(lex)];
-  let dir = path.dirname(lex);
-  for (;;) {
-    try {
-      const realDir = fs.realpathSync(dir);
-      return path.join(realDir, ...tail.reverse());
-    } catch (e) {
-      if (e.code !== 'ENOENT') throw e;
-      const parentDir = path.dirname(dir);
-      if (parentDir === dir) return lex; // hit the filesystem root; give up safely
-      tail.push(path.basename(dir));
-      dir = parentDir;
-    }
-  }
+  return canon(expandHome(abs));
 }
 
 /**
@@ -87,7 +75,12 @@ function realResolve(abs) {
 const allowedRoots = new Set([os.homedir()]);
 
 function addAllowedRoot(dir) {
-  if (dir) allowedRoots.add(path.resolve(dir));
+  if (dir) allowedRoots.add(pathFor().resolve(dir));
+}
+
+/** Snapshot of the registered roots (main-process-registered only). */
+function getAllowedRoots() {
+  return [...allowedRoots];
 }
 
 // PromptSession archive writes (state/promptSessions.ts's markCompleted ->
@@ -119,11 +112,11 @@ function validatePath(abs) {
   for (const root of allowedRoots) {
     let realRoot;
     try {
-      realRoot = fs.realpathSync(root);
+      realRoot = canon(root);
     } catch {
       realRoot = root;
     }
-    if (real === realRoot || real.startsWith(realRoot + path.sep)) return real;
+    if (within(real, realRoot)) return real;
   }
   throw new Error(`Path outside allowed boundaries: ${real}`);
 }
@@ -132,7 +125,7 @@ function validatePath(abs) {
 // home because validateWrite compares against a realpath — on macOS a HOME
 // under os.tmpdir() (/var → /private/var) otherwise never matches.
 const REAL_HOME = (() => {
-  try { return fs.realpathSync(os.homedir()); } catch { return os.homedir(); }
+  try { return canon(os.homedir()); } catch { return os.homedir(); }
 })();
 const WRITE_PREFIXES = [
   path.join(REAL_HOME, '.claude'),
@@ -150,7 +143,7 @@ function validateWrite(realAbs) {
     throw new Error(`Write to .credentials.json denied`);
   }
   const inWritePrefix = WRITE_PREFIXES.some(
-    (p) => realAbs === p || realAbs.startsWith(p + path.sep)
+    (p) => within(realAbs, p)
   );
   if (inWritePrefix) return;
   // The app's own userData dir (update-check.json cache).
@@ -162,10 +155,10 @@ function validateWrite(realAbs) {
   for (const root of allowedRoots) {
     if (root === os.homedir()) continue;
     let realRoot;
-    try { realRoot = fs.realpathSync(root); } catch { realRoot = root; }
-    if (realAbs === realRoot || realAbs.startsWith(realRoot + path.sep)) {
+    try { realRoot = canon(root); } catch { realRoot = root; }
+    if (within(realAbs, realRoot)) {
       const claudeSub = path.join(realRoot, '.claude');
-      if (realAbs === claudeSub || realAbs.startsWith(claudeSub + path.sep)) {
+      if (within(realAbs, claudeSub)) {
         return;
       }
       // Writable ops namespaces under a registered project root — every
@@ -189,7 +182,7 @@ function validateWrite(realAbs) {
         opsSubs = [];
       }
       for (const sub of opsSubs) {
-        if (realAbs === sub || realAbs.startsWith(sub + path.sep)) return;
+        if (within(realAbs, sub)) return;
       }
     }
   }
@@ -536,6 +529,7 @@ module.exports = {
   listDir,
   exists,
   addAllowedRoot,
+  getAllowedRoots,
   registerPromptSessionsRoot,
   validatePath,
   validateWrite,

package/src/main/docEdit.cjs

@@ -1,4 +1,5 @@
 'use strict';
+const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
 
 /**
  * docEdit.cjs — Document Experience rewrite runner (PRD 638).
@@ -154,11 +155,7 @@ let mainWindow = null;
 function attachWindow(win) { mainWindow = win; }
 
 function broadcast(channel, payload) {
-  try {
-    if (mainWindow && !mainWindow.isDestroyed() && mainWindow.webContents && !mainWindow.webContents.isDestroyed()) {
-      mainWindow.webContents.send(channel, payload);
-    }
-  } catch { /* render frame may be gone */ }
+  sendIfAlive(mainWindow, channel, payload);
 }
 
 // `chatRunner.run()`'s silent lane invokes `onSilentResult` on its success path and

package/src/main/files.cjs

@@ -20,7 +20,8 @@ const path = require('node:path');
 const os = require('node:os');
 
 const { z } = require('zod');
-const { assertInsideHome } = require('./lib/insideHome.cjs');
+const { assertInsideHomeOrRoots } = require('./lib/insideHome.cjs');
+const { getAllowedRoots } = require('./config.cjs');
 const { expandHome } = require('./lib/util/expandHome.cjs');
 const atomicFs = require('./lib/util/atomicFs.cjs');
 const { schemas } = require('./ipcSchemas.cjs');
@@ -32,7 +33,7 @@ const { schemas } = require('./ipcSchemas.cjs');
  * ~ — but never escapes the home tree.
  */
 function validateHomePath(abs) {
-  return assertInsideHome(expandHome(abs)).realPath;
+  return assertInsideHomeOrRoots(expandHome(abs), getAllowedRoots()).realPath;
 }
 
 /** Reject .credentials.json writes regardless of where they sit. */
@@ -282,14 +283,23 @@ async function duplicateEntry(filePath) {
   }
 }
 
-const CRITICAL_PATHS = new Set([os.homedir(), '/', '/usr', '/bin', '/etc', '/var', '/System', '/Applications']);
+const CRITICAL_PATHS = ['/', '/usr', '/bin', '/etc', '/var', '/System', '/Applications'];
+
+/** Case-insensitive on win32 (`C:\\Users\\Me` == `c:\\users\\me`). */
+function isCriticalPath(resolved, platform = process.platform, home = os.homedir()) {
+  const norm = platform === 'win32'
+    ? (v) => path.win32.normalize(v).toLowerCase().replace(/[\\/]+$/, '')
+    : (v) => v;
+  const r = norm(resolved);
+  return [home, ...CRITICAL_PATHS].some((c) => norm(c) === r);
+}
 
 async function deleteEntry(filePath) {
   let resolved;
   try { resolved = validateHomePath(filePath); }
   catch (e) { return { ok: false, error: e.message }; }
 
-  if (CRITICAL_PATHS.has(resolved)) {
+  if (isCriticalPath(resolved)) {
     return { ok: false, error: 'Cannot delete system-critical paths' };
   }
   try { rejectCredentials(resolved); }
@@ -414,6 +424,8 @@ module.exports = {
   showInFinder,
   // exported for tests
   rejectCredentials,
+  validateHomePath,
+  isCriticalPath,
   listDir,
   readFile,
   writeFile,

package/src/main/index.cjs

@@ -16,6 +16,9 @@ const { PROC_NAMES, setProcessTitle, inhibitHolderShell } = require('./lib/proce
 // `process.argv.includes('--simple')` read further down.
 setProcessTitle(PROC_NAMES.main);
 const { app, BrowserWindow, ipcMain, dialog, Menu, session, systemPreferences, globalShortcut, shell, clipboard, powerSaveBlocker, protocol } = require('electron');
+// Capture every ipcMain.handle registration (before any module registers one) so the
+// web-remote ipc:invoke dispatcher calls the exact handlers the renderer calls.
+const capturedIpcHandlers = require('./lib/feedback-remote/remoteIpcDispatch.cjs').captureIpcHandlers(ipcMain);
 const { spawn, execFile, execFileSync } = require('node:child_process');
 const path = require('node:path');
 const fs = require('node:fs');
@@ -62,7 +65,7 @@ const prdCreate = require('./lib/prd/prdCreate.cjs');
 const prdAdminRoutes = require('./lib/prd/prdAdminRoutes.cjs');
 const projectHomeAdminRoutes = require('./lib/feedback-remote/projectHomeAdminRoutes.cjs');
 const macroAdminRoutes = require('./lib/feedback-remote/macroAdminRoutes.cjs');
-const { smfileResponseHeaders, shouldBlockFrameNavigation } = require('./lib/smfileHeaders.cjs');
+const { smfileResponseHeaders, shouldBlockFrameNavigation, smfileUrlToPath } = require('./lib/smfileHeaders.cjs');
 const { appendAuditEvent } = require('./lib/telemetry/auditLog.cjs');
 const chatRunner = require('./chatRunner.cjs');
 const promptSessionEvents = require('./promptSessionEvents.cjs');
@@ -122,6 +125,24 @@ const heapSnapshot = require('./heapSnapshot.cjs');
 const filesIpc = require('./files.cjs');
 const { registerDocEditHandlers, attachWindow: attachDocEditWindow } = require('./docEdit.cjs');
 const webRemote = require('./webRemote.cjs');
+{
+  const { createRemoteIpcDispatcher } = require('./lib/feedback-remote/remoteIpcDispatch.cjs');
+  webRemote.setIpcDispatcher(createRemoteIpcDispatcher({
+    surface: require('./../preload/apiSurface.cjs'),
+    handlers: capturedIpcHandlers,
+    getConfig: () => webRemote.loadConfig(),
+    fenceCtx: {
+      homeDir: os.homedir(),
+      realpath: (p) => require('./lib/insideHome.cjs').realpath(p),
+      projectRoots: () => {
+        try {
+          const data = JSON.parse(fs.readFileSync(sessionsStore.storePath(), 'utf8'));
+          return (data.tabs || []).map((t) => t && t.cwd).filter((c) => typeof c === 'string' && c);
+        } catch { return []; }
+      },
+    },
+  }));
+}
 const { registerAgentsHandlers } = require('./agentsIpc.cjs');
 const { registerTelemetryHandlers } = require('./telemetryIpc.cjs');
 const { registerUpdaterIpc } = require('./updaterIpc.cjs');
@@ -1025,6 +1046,7 @@ require('./lib/epic/archivedTranscript.cjs').registerIpc(ipcMain);
 customerFeedbackIpc.registerCustomerFeedbackHandlers();
 epicWorktreeMint.registerEpicWorktreeMintHandlers();
 epicWorktreeMerge.registerEpicWorktreeMergeHandlers();
+require('./lib/epic/epicReopen.cjs').registerEpicReopenHandlers();
 epicWorktreeProjectConfig.registerEpicWorktreeProjectConfigHandlers();
 registerMemoryAggregateIpc();
 registerProjectBriefIpc();
@@ -1322,7 +1344,7 @@ app.whenReady().then(async () => {
   protocol.handle('smfile', async (request) => {
     try {
       const url = new URL(request.url);
-      const abs = decodeURIComponent(url.pathname);
+      const abs = smfileUrlToPath(url.pathname);
       const { realPath } = assertInsideHome(abs); // throws if outside home
       const st = await fs.promises.stat(realPath);
       if (st.isDirectory()) return new Response('Not a file', { status: 404 });
@@ -1365,7 +1387,7 @@ app.whenReady().then(async () => {
           accelerator: 'CmdOrCtrl+N',
           click: () => {
             if (mainWindow && !mainWindow.isDestroyed()) {
-              mainWindow.webContents.send('app:new-session');
+              sendIfAlive(mainWindow, 'app:new-session');
             }
           },
         },
@@ -1379,7 +1401,7 @@ app.whenReady().then(async () => {
           accelerator: 'CmdOrCtrl+Shift+S',
           click: () => {
             if (mainWindow && !mainWindow.isDestroyed()) {
-              mainWindow.webContents.send('app:reboot-session');
+              sendIfAlive(mainWindow, 'app:reboot-session');
             }
           },
         },

package/src/main/ipcSchemas.cjs

@@ -232,6 +232,9 @@ const promptSessionsCreateWorktree = z.object({
   epicId: z.string().regex(PROMPT_SESSION_ID_RE),
 });
 
+// Renderer entry point for reopening a completed Epic in place (lib/epic/epicReopen.cjs).
+const promptSessionsReopen = z.object({ cwd: z.string().min(1).max(4096), epicId: z.string().regex(PROMPT_SESSION_ID_RE) }).strict();
+
 // Renderer entry point for folding an Epic's isolated git worktree branch
 // back into its owning project's main tree (lib/epic/epicWorktreeMerge.cjs) — PRD
 // 1034, the ONLY point where the per-Epic isolation PRD 1033 wires resolves.
@@ -835,8 +838,8 @@ const projectBriefUpdate = z.object({
     purpose: PROJECT_BRIEF_TEXT.optional(),
     what: z.array(PROJECT_BRIEF_TEXT).max(50).optional(),
     conventions: z.array(PROJECT_BRIEF_TEXT).max(100).optional(),
-    areas: z.array(z.record(z.unknown())).max(100).optional(),
-    scope: z.array(z.record(z.unknown())).max(200).optional(),
+    areas: z.array(z.record(z.string(), z.unknown())).max(100).optional(),
+    scope: z.array(z.record(z.string(), z.unknown())).max(200).optional(),
   }).strict().refine((p) => Object.keys(p).length > 0, { message: 'patch is empty' }),
 }).strict();
 
@@ -1357,6 +1360,7 @@ module.exports = {
     promptSessionsMergeActiveIndex,
     promptSessionsCreateEpic,
     promptSessionsCreateWorktree,
+    promptSessionsReopen,
     promptSessionsMergeToMain,
     promptSessionsGetWorktreeDisabled,
     promptSessionsSetWorktreeDisabled,