claude-code-session-manager 0.8.5 → 0.10.0

package/dist/assets/xml-C0mTbVRp.js

@@ -0,0 +1 @@
+import{l as e}from"./index-C_tgFedf.js";const n={comments:{blockComment:["<!--","-->"]},brackets:[["<",">"]],autoClosingPairs:[{open:"<",close:">"},{open:"'",close:"'"},{open:'"',close:'"'}],surroundingPairs:[{open:"<",close:">"},{open:"'",close:"'"},{open:'"',close:'"'}],onEnterRules:[{beforeText:new RegExp("<([_:\\w][_:\\w-.\\d]*)([^/>]*(?!/)>)[^<]*$","i"),afterText:/^<\/([_:\w][_:\w-.\d]*)\s*>$/i,action:{indentAction:e.IndentAction.IndentOutdent}},{beforeText:new RegExp("<(\\w[\\w\\d]*)([^/>]*(?!/)>)[^<]*$","i"),action:{indentAction:e.IndentAction.Indent}}]},o={defaultToken:"",tokenPostfix:".xml",ignoreCase:!0,qualifiedName:/(?:[\w\.\-]+:)?[\w\.\-]+/,tokenizer:{root:[[/[^<&]+/,""],{include:"@whitespace"},[/(<)(@qualifiedName)/,[{token:"delimiter"},{token:"tag",next:"@tag"}]],[/(<\/)(@qualifiedName)(\s*)(>)/,[{token:"delimiter"},{token:"tag"},"",{token:"delimiter"}]],[/(<\?)(@qualifiedName)/,[{token:"delimiter"},{token:"metatag",next:"@tag"}]],[/(<\!)(@qualifiedName)/,[{token:"delimiter"},{token:"metatag",next:"@tag"}]],[/<\!\[CDATA\[/,{token:"delimiter.cdata",next:"@cdata"}],[/&\w+;/,"string.escape"]],cdata:[[/[^\]]+/,""],[/\]\]>/,{token:"delimiter.cdata",next:"@pop"}],[/\]/,""]],tag:[[/[ \t\r\n]+/,""],[/(@qualifiedName)(\s*=\s*)("[^"]*"|'[^']*')/,["attribute.name","","attribute.value"]],[/(@qualifiedName)(\s*=\s*)("[^">?\/]*|'[^'>?\/]*)(?=[\?\/]\>)/,["attribute.name","","attribute.value"]],[/(@qualifiedName)(\s*=\s*)("[^">]*|'[^'>]*)/,["attribute.name","","attribute.value"]],[/@qualifiedName/,"attribute.name"],[/\?>/,{token:"delimiter",next:"@pop"}],[/(\/)(>)/,[{token:"tag"},{token:"delimiter",next:"@pop"}]],[/>/,{token:"delimiter",next:"@pop"}]],whitespace:[[/[ \t\r\n]+/,""],[/<!--/,{token:"comment",next:"@comment"}]],comment:[[/[^<\-]+/,"comment.content"],[/-->/,{token:"comment",next:"@pop"}],[/<!--/,"comment.content.invalid"],[/[<\-]/,"comment.content"]]}};export{n as conf,o as language};

package/dist/assets/yaml-D3sePJfA.js

@@ -0,0 +1 @@
+import{l as e}from"./index-C_tgFedf.js";const t={comments:{lineComment:"#"},brackets:[["{","}"],["[","]"],["(",")"]],autoClosingPairs:[{open:"{",close:"}"},{open:"[",close:"]"},{open:"(",close:")"},{open:'"',close:'"'},{open:"'",close:"'"}],surroundingPairs:[{open:"{",close:"}"},{open:"[",close:"]"},{open:"(",close:")"},{open:'"',close:'"'},{open:"'",close:"'"}],folding:{offSide:!0},onEnterRules:[{beforeText:/:\s*$/,action:{indentAction:e.IndentAction.Indent}}]},o={tokenPostfix:".yaml",brackets:[{token:"delimiter.bracket",open:"{",close:"}"},{token:"delimiter.square",open:"[",close:"]"}],keywords:["true","True","TRUE","false","False","FALSE","null","Null","Null","~"],numberInteger:/(?:0|[+-]?[0-9]+)/,numberFloat:/(?:0|[+-]?[0-9]+)(?:\.[0-9]+)?(?:e[-+][1-9][0-9]*)?/,numberOctal:/0o[0-7]+/,numberHex:/0x[0-9a-fA-F]+/,numberInfinity:/[+-]?\.(?:inf|Inf|INF)/,numberNaN:/\.(?:nan|Nan|NAN)/,numberDate:/\d{4}-\d\d-\d\d([Tt ]\d\d:\d\d:\d\d(\.\d+)?(( ?[+-]\d\d?(:\d\d)?)|Z)?)?/,escapes:/\\(?:[btnfr\\"']|[0-7][0-7]?|[0-3][0-7]{2})/,tokenizer:{root:[{include:"@whitespace"},{include:"@comment"},[/%[^ ]+.*$/,"meta.directive"],[/---/,"operators.directivesEnd"],[/\.{3}/,"operators.documentEnd"],[/[-?:](?= )/,"operators"],{include:"@anchor"},{include:"@tagHandle"},{include:"@flowCollections"},{include:"@blockStyle"},[/@numberInteger(?![ \t]*\S+)/,"number"],[/@numberFloat(?![ \t]*\S+)/,"number.float"],[/@numberOctal(?![ \t]*\S+)/,"number.octal"],[/@numberHex(?![ \t]*\S+)/,"number.hex"],[/@numberInfinity(?![ \t]*\S+)/,"number.infinity"],[/@numberNaN(?![ \t]*\S+)/,"number.nan"],[/@numberDate(?![ \t]*\S+)/,"number.date"],[/(".*?"|'.*?'|[^#'"]*?)([ \t]*)(:)( |$)/,["type","white","operators","white"]],{include:"@flowScalars"},[/.+?(?=(\s+#|$))/,{cases:{"@keywords":"keyword","@default":"string"}}]],object:[{include:"@whitespace"},{include:"@comment"},[/\}/,"@brackets","@pop"],[/,/,"delimiter.comma"],[/:(?= )/,"operators"],[/(?:".*?"|'.*?'|[^,\{\[]+?)(?=: )/,"type"],{include:"@flowCollections"},{include:"@flowScalars"},{include:"@tagHandle"},{include:"@anchor"},{include:"@flowNumber"},[/[^\},]+/,{cases:{"@keywords":"keyword","@default":"string"}}]],array:[{include:"@whitespace"},{include:"@comment"},[/\]/,"@brackets","@pop"],[/,/,"delimiter.comma"],{include:"@flowCollections"},{include:"@flowScalars"},{include:"@tagHandle"},{include:"@anchor"},{include:"@flowNumber"},[/[^\],]+/,{cases:{"@keywords":"keyword","@default":"string"}}]],multiString:[[/^( +).+$/,"string","@multiStringContinued.$1"]],multiStringContinued:[[/^( *).+$/,{cases:{"$1==$S2":"string","@default":{token:"@rematch",next:"@popall"}}}]],whitespace:[[/[ \t\r\n]+/,"white"]],comment:[[/#.*$/,"comment"]],flowCollections:[[/\[/,"@brackets","@array"],[/\{/,"@brackets","@object"]],flowScalars:[[/"([^"\\]|\\.)*$/,"string.invalid"],[/'([^'\\]|\\.)*$/,"string.invalid"],[/'[^']*'/,"string"],[/"/,"string","@doubleQuotedString"]],doubleQuotedString:[[/[^\\"]+/,"string"],[/@escapes/,"string.escape"],[/\\./,"string.escape.invalid"],[/"/,"string","@pop"]],blockStyle:[[/[>|][0-9]*[+-]?$/,"operators","@multiString"]],flowNumber:[[/@numberInteger(?=[ \t]*[,\]\}])/,"number"],[/@numberFloat(?=[ \t]*[,\]\}])/,"number.float"],[/@numberOctal(?=[ \t]*[,\]\}])/,"number.octal"],[/@numberHex(?=[ \t]*[,\]\}])/,"number.hex"],[/@numberInfinity(?=[ \t]*[,\]\}])/,"number.infinity"],[/@numberNaN(?=[ \t]*[,\]\}])/,"number.nan"],[/@numberDate(?=[ \t]*[,\]\}])/,"number.date"]],tagHandle:[[/\![^ ]*/,"tag"]],anchor:[[/[&*][^ ]+/,"namespace"]]}};export{t as conf,o as language};

package/dist/index.html

@@ -4,8 +4,8 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Claude Session Manager</title>
-    <script type="module" crossorigin src="./assets/index-DWDcKbgI.js"></script>
-    <link rel="stylesheet" crossorigin href="./assets/index-eqxng9X2.css">
+    <script type="module" crossorigin src="./assets/index-C_tgFedf.js"></script>
+    <link rel="stylesheet" crossorigin href="./assets/index-Dj3Db4OA.css">
   </head>
   <body class="bg-bg text-fg font-mono antialiased">
     <div id="root"></div>

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "claude-code-session-manager",
-  "version": "0.8.5",
-  "description": "Local cockpit for Claude Code CLI sessions — terminal + full config surface.",
+  "version": "0.10.0",
+  "description": "Local cockpit for the Claude Code CLI — multi-tab terminal, full config surface, scheduler, voice dictation, and live observability.",
   "type": "module",
   "main": "src/main/index.cjs",
   "bin": {
@@ -14,13 +14,13 @@
     "dist/index.html",
     "dist/assets/",
     "dist/vad/",
+    "screenshots/",
     "README.md"
   ],
   "scripts": {
     "dev": "concurrently -k -n vite,electron -c magenta,cyan \"npm:dev:renderer\" \"npm:dev:electron\"",
     "dev:renderer": "vite",
     "dev:electron": "wait-on http://localhost:5173 && SM_DEV=1 electron .",
-    "build:renderer": "vite build",
     "build": "vite build",
     "typecheck": "tsc --noEmit",
     "start": "electron .",
@@ -39,7 +39,15 @@
     "terminal",
     "electron",
     "session-manager",
-    "cli"
+    "cli",
+    "cockpit",
+    "mcp",
+    "agents",
+    "hooks",
+    "scheduler",
+    "voice",
+    "whisper",
+    "prd"
   ],
   "author": "bilkobibitkov",
   "license": "MIT",
@@ -63,7 +71,7 @@
     "linux"
   ],
   "dependencies": {
-    "@electron/rebuild": "^3.7.0",
+    "@electron/rebuild": "4.0.4",
     "@huggingface/transformers": "^4.1.0",
     "@monaco-editor/react": "^4.6.0",
     "@opentelemetry/api": "^1.9.0",
@@ -77,9 +85,12 @@
     "@xterm/addon-web-links": "^0.11.0",
     "@xterm/xterm": "^5.5.0",
     "chokidar": "^4.0.1",
-    "electron": "^33.2.0",
+    "electron": "42.1.0",
+    "framer-motion": "^12.38.0",
+    "monaco-editor": "0.55.1",
     "node-pty": "^1.2.0-beta.12",
     "onnxruntime-web": "^1.24.3",
+    "recharts": "^2.15.4",
     "zod": "^3.23.8",
     "zustand": "^5.0.0"
   },
@@ -91,15 +102,13 @@
     "@vitejs/plugin-react": "^4.3.3",
     "autoprefixer": "^10.4.20",
     "concurrently": "^9.1.0",
-    "framer-motion": "^12.38.0",
     "postcss": "^8.4.49",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "recharts": "^2.15.4",
     "tailwindcss": "^3.4.15",
     "typescript": "^5.6.3",
     "vite": "^6.0.1",
-    "vitest": "^2.1.9",
+    "vitest": "4.1.6",
     "wait-on": "^8.0.1"
   }
 }

package/screenshots/README-screenshots.md

@@ -0,0 +1,13 @@
+# Screenshots needed
+
+The repo README references these six screenshots. Each one is a TODO — the
+images do not exist yet. PNG, target 1500×950, under 200 KB each (pngquant).
+
+1. **`overview-cockpit.png`** — TODO: capture this view. Overview tab full window. Captures AppStatusBar pills at the top, CockpitStrip, the two-by-five instrument grid, TeamsCard (if enabled), system row, and the quick-actions footer.
+2. **`agent-view.png`** — TODO: capture this view. Agent-View tab with the animated workshop scene visible: subagent dock, plan whiteboard, todo board, and the SchedulerDock with at least one mini-bot active.
+3. **`command-palette.png`** — TODO: capture this view. CommandPalette open over any tab, ideally with the scheduler section expanded to show several scheduler commands (Run now / Force tick / Lint queue).
+4. **`scheduler.png`** — TODO: capture this view. Plans tab → PRDs sub-view. PRD list with multi-select checkboxes on the left, structured editor in the centre, queue-health findings panel visible.
+5. **`voice.png`** — TODO: capture this view. Voice subsystem — either the MicWizard first-run dialog with device picker and sample utterance UI, or the in-tab voice settings panel with a live VAD trace.
+6. **`hooks-events.png`** — TODO: capture this view. Hooks tab with the sidebar listing all 29 events and one event hovered to show the inline description tooltip from `hookEventDocs.ts`.
+
+Total image budget across all six: roughly 1 MB so the npm tarball does not bloat.

package/src/main/config.cjs

@@ -20,6 +20,8 @@ const fsp = require('node:fs/promises');
 const path = require('node:path');
 const os = require('node:os');
 const chokidar = require('chokidar');
+const logs = require('./logs.cjs');
+const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
 
 /** Map<absPath, {watcher, refCount}> — one chokidar watcher per path. */
 const watchers = new Map();
@@ -157,16 +159,29 @@ async function readText(abs) {
 
 /**
  * Atomic write — write to <path>.tmp-<pid>-<ts> then rename. Creates parent
- * directories if missing.
+ * directories if missing. Cleans up the tmp file on rename failure.
+ *
+ * opts.mode: optional POSIX permission bits, applied to the tmp file before
+ * rename. Used by voiceSettings/otelSettings for 0o600 credential storage.
  */
-async function writeTextAtomic(abs, text) {
+async function writeTextAtomic(abs, text, opts = {}) {
   const real = validatePath(expandHome(abs));
   validateWrite(real);
   const dir = path.dirname(real);
   await fsp.mkdir(dir, { recursive: true });
   const tmp = `${real}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
-  await fsp.writeFile(tmp, text, 'utf8');
-  await fsp.rename(tmp, real);
+  try {
+    await fsp.writeFile(tmp, text, opts.mode ? { encoding: 'utf8', mode: opts.mode } : 'utf8');
+    if (opts.mode) {
+      // chmod explicitly because some platforms ignore the mode arg on
+      // writeFile when the file pre-exists.
+      try { await fsp.chmod(tmp, opts.mode); } catch { /* */ }
+    }
+    await fsp.rename(tmp, real);
+  } catch (e) {
+    try { await fsp.unlink(tmp); } catch { /* tmp never created or already gone */ }
+    throw e;
+  }
   const stat = await fsp.stat(real);
   return { ok: true, mtimeMs: stat.mtimeMs };
 }
@@ -176,6 +191,28 @@ async function writeJson(abs, data) {
   return writeTextAtomic(abs, pretty);
 }
 
+/**
+ * Sync variant — only for child-exit handlers and similar callbacks where
+ * an event-loop yield would deadlock the caller. Use writeJson/writeTextAtomic
+ * for everything else.
+ */
+function writeJsonSync(abs, data) {
+  const real = validatePath(expandHome(abs));
+  validateWrite(real);
+  const dir = path.dirname(real);
+  fs.mkdirSync(dir, { recursive: true });
+  const tmp = `${real}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+  try {
+    fs.writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf8');
+    fs.renameSync(tmp, real);
+  } catch (e) {
+    try { fs.unlinkSync(tmp); } catch { /* tmp never created or already gone */ }
+    throw e;
+  }
+  const stat = fs.statSync(real);
+  return { ok: true, mtimeMs: stat.mtimeMs };
+}
+
 async function listDir(abs, { filesOnly = false, dirsOnly = false, includeHidden = false } = {}) {
   abs = validatePath(expandHome(abs));
   try {
@@ -257,9 +294,7 @@ function watch(paths) {
       } catch {
         /* file may have been deleted */
       }
-      if (window && !window.isDestroyed()) {
-        window.webContents.send('config:changed', { path: key, mtimeMs, kind });
-      }
+      sendIfAlive(window, 'config:changed', { path: key, mtimeMs, kind });
     };
     w.on('add', emit('add'));
     w.on('change', emit('change'));
@@ -299,8 +334,8 @@ function registerConfigHandlers() {
   ipcMain.handle('config:write-text', v(s.configWriteText, ({ path: p, text }) => writeTextAtomic(p, text)));
   ipcMain.handle('config:list-dir', v(s.configListDir, ({ path: p, opts }) => listDir(p, opts || {})));
   ipcMain.handle('config:exists', v(s.configPath, ({ path: p }) => exists(p)));
-  ipcMain.on('config:watch', (_e, { paths }) => { try { s.configWatch.parse(paths); watch(paths); } catch { /* ignore */ } });
-  ipcMain.on('config:unwatch', (_e, { paths }) => { try { s.configWatch.parse(paths); unwatch(paths); } catch { /* ignore */ } });
+  ipcMain.on('config:watch', (_e, { paths }) => { try { s.configWatch.parse(paths); watch(paths); } catch (e) { logs.writeLine({ level: 'warn', scope: 'config', message: 'config:watch schema reject', meta: { error: e?.message } }); } });
+  ipcMain.on('config:unwatch', (_e, { paths }) => { try { s.configWatch.parse(paths); unwatch(paths); } catch (e) { logs.writeLine({ level: 'warn', scope: 'config', message: 'config:unwatch schema reject', meta: { error: e?.message } }); } });
 }
 
 module.exports = {
@@ -311,8 +346,11 @@ module.exports = {
   readJson,
   readText,
   writeJson,
+  writeJsonSync,
   writeTextAtomic,
   listDir,
   exists,
   addAllowedRoot,
+  validatePath,
+  validateWrite,
 };

package/src/main/historyAggregator.cjs

@@ -4,6 +4,7 @@ const { ipcMain } = require('electron');
 const fsp = require('node:fs/promises');
 const path = require('node:path');
 const os = require('node:os');
+const { schemas } = require('./ipcSchemas.cjs');
 
 const PROJECTS_DIR = path.join(os.homedir(), '.claude', 'projects');
 const SLOW_THRESHOLD_MS = 2_000;
@@ -105,14 +106,18 @@ async function parseJSONL(filePath, stat) {
 }
 
 function registerHistoryAggregatorHandlers() {
-  ipcMain.handle('history:aggregate', async (_e, req) => {
+  ipcMain.handle('history:aggregate', async (_e, rawReq) => {
+    // Wire the historyAggregate schema (previously defined but never used).
+    // safeParse so a malformed payload still falls through to defaults
+    // (today − 30d) rather than throwing — matches the current "best-effort"
+    // semantics expected by the History tab.
+    const parsed = schemas.historyAggregate.safeParse(rawReq);
+    const req = parsed.success ? (parsed.data ?? {}) : {};
     const t0 = Date.now();
     const today = new Date().toISOString().slice(0, 10);
-    let effectiveTo = (req?.toDate && /^\d{4}-\d{2}-\d{2}$/.test(req.toDate)) ? req.toDate : today;
+    let effectiveTo = req?.toDate ? req.toDate : today;
     if (effectiveTo > today) effectiveTo = today;
-    const effectiveFrom = (req?.fromDate && /^\d{4}-\d{2}-\d{2}$/.test(req.fromDate))
-      ? req.fromDate
-      : subtractDays(today, 30);
+    const effectiveFrom = req?.fromDate ? req.fromDate : subtractDays(today, 30);
 
     const buckets = new Map();
     let partial = false;

package/src/main/index.cjs

@@ -4,7 +4,7 @@ const path = require('node:path');
 const fs = require('node:fs');
 const fsp = require('node:fs/promises');
 const os = require('node:os');
-const { schemas } = require('./ipcSchemas.cjs');
+const { schemas, validated } = require('./ipcSchemas.cjs');
 const { cleanChildEnv } = require('./lib/cleanEnv.cjs');
 const { manager: ptyManager, registerPtyHandlers } = require('./pty.cjs');
 const configMgr = require('./config.cjs');
@@ -17,9 +17,13 @@ const voiceWizard = require('./voiceWizard.cjs');
 const scheduler = require('./scheduler.cjs');
 const supervisor = require('./supervisor.cjs');
 const watchers = require('./watchers.cjs');
+const teams = require('./teams.cjs');
+const queueOps = require('./queueOps.cjs');
+const pluginInstall = require('./pluginInstall.cjs');
 const otel = require('./otel.cjs');
 const otelSettings = require('./otelSettings.cjs');
 const { registerHistoryAggregatorHandlers } = require('./historyAggregator.cjs');
+const memoryTool = require('./memoryTool.cjs');
 
 let mainWindow = null;
 let rebooting = false;
@@ -110,6 +114,7 @@ async function rebootApp() {
     });
     scheduler.attachWindow(mainWindow);
     watchers.attachWindow(mainWindow);
+    pluginInstall.attachWindow(mainWindow);
     rebooting = false;
     return;
   }
@@ -190,6 +195,10 @@ ipcMain.handle('app:home-dir', () => os.homedir());
 
 ipcMain.handle('app:cwd', () => process.cwd());
 
+// E2E plumbing: tests set SM_E2E=1 to suppress the voice wizard auto-trigger.
+// The renderer reads this once on mount.
+ipcMain.handle('app:is-e2e', () => process.env.SM_E2E === '1');
+
 ipcMain.handle('app:engage-rules-path', () => process.env.SESSION_MANAGER_ENGAGE_RULES || null);
 
 ipcMain.handle('app:pick-directory', async () => {
@@ -211,10 +220,18 @@ ipcMain.on('app:reboot-app', () => rebootApp());
 // string. Timeout is enforced via SIGKILL on a timer because spawn's built-in
 // `timeout` option only sends SIGTERM, which a wedged shell may ignore.
 ipcMain.handle('app:test-fire-hook', async (_e, payload) => {
-  const command = typeof payload?.command === 'string' ? payload.command : '';
-  const env = payload && typeof payload.env === 'object' && payload.env !== null ? payload.env : null;
-  const stdin = typeof payload?.payload === 'string' ? payload.payload : '';
-  const requested = Number(payload?.timeoutMs);
+  // Zod-validate up front so a malformed renderer payload can never reach the
+  // shell. We `safeParse` (not throw) because the existing return shape is
+  // `{ exitCode, stdout, stderr, durationMs }` — callers (Hooks.tsx) don't
+  // wrap the call in try/catch.
+  const parsed = schemas.appTestFireHook.safeParse(payload);
+  if (!parsed.success) {
+    return { exitCode: -1, stdout: '', stderr: `invalid payload: ${parsed.error.message}`, durationMs: 0 };
+  }
+  const command = parsed.data.command;
+  const env = parsed.data.env ?? null;
+  const stdin = typeof parsed.data.payload === 'string' ? parsed.data.payload : '';
+  const requested = parsed.data.timeoutMs;
   const timeoutMs = Number.isFinite(requested) && requested > 0
     ? Math.min(requested, 30_000)
     : 5_000;
@@ -322,8 +339,11 @@ ipcMain.handle('app:test-fire-hook', async (_e, payload) => {
 // render `—` without branching on error shape. 1s ceiling keeps a wedged git
 // (network filesystem, hung index lock) from blocking the renderer.
 ipcMain.handle('app:git-branch', async (_e, payload) => {
-  const cwd = payload && typeof payload.cwd === 'string' ? payload.cwd : null;
-  if (!cwd) return null;
+  // safeParse (not throw) so a malformed call resolves to null — matches the
+  // existing semantics where StatusBar renders `—` on any failure.
+  const parsed = schemas.appGitBranch.safeParse(payload);
+  if (!parsed.success) return null;
+  const { cwd } = parsed.data;
   return await new Promise((resolve) => {
     execFile('git', ['branch', '--show-current'], { cwd, timeout: 1000, windowsHide: true }, (err, stdout) => {
       if (err) { resolve(null); return; }
@@ -333,6 +353,44 @@ ipcMain.handle('app:git-branch', async (_e, payload) => {
   });
 });
 
+// Containment check used by the open-in-{editor,finder,terminal} handlers.
+// Bare `startsWith(home)` matches `/home/bilkoEVIL` when home=`/home/bilko` —
+// the classic prefix-trap. Resolve real paths (follow symlinks) and require
+// either exact equality or a separator boundary. Returns null on success or
+// an error string on failure. ENOENT (cwd doesn't exist) is a soft fail —
+// downstream `spawn`/`shell.openPath` will surface a more precise error.
+function checkInsideHome(cwd) {
+  if (typeof cwd !== 'string' || !cwd) return 'cwd outside home';
+  const home = os.homedir();
+  let realCwd;
+  let realHome;
+  try {
+    realHome = fs.realpathSync(home);
+  } catch {
+    return 'home directory unresolved';
+  }
+  try {
+    realCwd = fs.realpathSync(cwd);
+  } catch (err) {
+    if (err && err.code === 'ENOENT') {
+      // Fall through to the existing error path: the resolved-but-nonexistent
+      // path still has to be home-contained to avoid information disclosure
+      // via stat-probes (`/etc/secrets/...` → editor errors that reveal
+      // existence).
+      const resolved = path.resolve(cwd);
+      if (resolved !== realHome && !resolved.startsWith(realHome + path.sep)) {
+        return 'cwd outside home';
+      }
+      return null;
+    }
+    return 'cwd outside home';
+  }
+  if (realCwd !== realHome && !realCwd.startsWith(realHome + path.sep)) {
+    return 'cwd outside home';
+  }
+  return null;
+}
+
 // Returns the resolved path of a command, or null if not found on PATH.
 function findCommand(name) {
   try {
@@ -348,8 +406,8 @@ function findCommand(name) {
 
 ipcMain.handle('app:open-in-editor', async (_e, payload) => {
   const { cwd, editor } = schemas.openInEditor.parse(payload);
-  const home = os.homedir();
-  if (!path.resolve(cwd).startsWith(home)) throw new Error('cwd outside home');
+  const err = checkInsideHome(cwd);
+  if (err) throw new Error(err);
   const candidates = (editor && editor !== 'auto')
     ? [editor]
     : [process.env.VISUAL, process.env.EDITOR, 'code', 'cursor', 'subl', 'nano'].filter(Boolean);
@@ -364,16 +422,16 @@ ipcMain.handle('app:open-in-editor', async (_e, payload) => {
 
 ipcMain.handle('app:open-in-finder', async (_e, payload) => {
   const { cwd } = schemas.openInFinder.parse(payload);
-  const home = os.homedir();
-  if (!path.resolve(cwd).startsWith(home)) throw new Error('cwd outside home');
+  const err = checkInsideHome(cwd);
+  if (err) throw new Error(err);
   await shell.openPath(cwd);
   return { ok: true };
 });
 
 ipcMain.handle('app:open-in-terminal', async (_e, payload) => {
   const { cwd } = schemas.openInTerminal.parse(payload);
-  const home = os.homedir();
-  if (!path.resolve(cwd).startsWith(home)) throw new Error('cwd outside home');
+  const err = checkInsideHome(cwd);
+  if (err) throw new Error(err);
   if (process.platform === 'linux') {
     const terms = ['gnome-terminal', 'konsole', 'xfce4-terminal', 'xterm'];
     for (const t of terms) {
@@ -412,7 +470,11 @@ voiceHotkey.registerHotkeyHandlers();
 voiceWizard.registerWizardHandlers();
 scheduler.registerScheduleHandlers();
 watchers.registerWatcherHandlers();
+teams.registerTeamsHandlers();
+queueOps.registerQueueOpsHandlers();
 registerHistoryAggregatorHandlers();
+pluginInstall.registerPluginInstallHandlers();
+memoryTool.registerMemoryHandlers();
 
 // OTEL telemetry export (opt-in via ~/.config/session-manager/otel.json).
 ipcMain.handle('otel:get-config', async () => otelSettings.load());
@@ -497,15 +559,23 @@ app.whenReady().then(async () => {
   });
 
   // Inject Content-Security-Policy for all renderer responses.
+  // frame-src / frame-ancestors locked to 'none' — the app is a top-level
+  // Electron BrowserWindow; iframes/embedding have no legitimate use.
   const CSP = [
     "default-src 'self'",
     "script-src 'self' 'wasm-unsafe-eval'",
     "style-src 'self' 'unsafe-inline'",
     "img-src 'self' data: blob:",
     "font-src 'self' data:",
-    "connect-src 'self' https://api.anthropic.com",
+    // schemastore.org is used by Monaco for JSON schema validation
+    // (settings.json, keybindings.json — see App.tsx::installMonacoSchemas).
+    // The json.schemastore.org URL redirects to www.schemastore.org, so both
+    // hosts must be in the allowlist or CSP blocks the redirect.
+    "connect-src 'self' https://api.anthropic.com https://registry.npmjs.org https://json.schemastore.org https://www.schemastore.org",
     "media-src 'self' blob:",
     "worker-src 'self' blob:",
+    "frame-src 'none'",
+    "frame-ancestors 'none'",
   ].join('; ') + ';';
   session.defaultSession.webRequest.onHeadersReceived((details, cb) => {
     cb({
@@ -595,6 +665,7 @@ app.whenReady().then(async () => {
   });
   scheduler.attachWindow(mainWindow);
   watchers.attachWindow(mainWindow);
+  pluginInstall.attachWindow(mainWindow);
   scheduler.init().catch((e) => {
     logs.writeLine({ scope: 'scheduler', level: 'error', message: 'init failed', meta: { error: e?.message } });
   });