npm - coxpit - Versions diffs - 5.17.1 → 5.20.0 - Mend

coxpit 5.17.1 → 5.20.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "coxpit",
-  "version": "5.17.1",
+  "version": "5.20.0",
   "description": "Self-hosted cockpit for running a fleet of AI coding agents across your own machines — parallel worktree runs, live board, compare & merge, web terminal, design capture.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -51,6 +51,7 @@
     "dotenv": "^16",
     "drizzle-orm": "^0.38",
     "fastify": "^5",
+    "marked": "^14.1.4",
     "node-pty": "^1.1.0",
     "tsx": "^4"
   },

package/src/cockpit.ts CHANGED Viewed

@@ -136,6 +136,23 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   .term-host .xterm-viewport::-webkit-scrollbar-thumb{background:var(--line-hi);border-radius:4px}
   .term-host .xterm-viewport::-webkit-scrollbar-thumb:hover{background:var(--faint)}
+  /* ── 파일 뷰어 페인(비터미널 탭) ── */
+  .view-host{flex:1;min-height:0;min-width:0;display:flex;flex-direction:column;background:var(--bg)}
+  .view-bar{display:flex;align-items:center;gap:8px;height:26px;padding:0 8px;background:var(--surface2);border-bottom:1px solid var(--line);font-family:var(--mono);font-size:11px;color:var(--muted);flex:none}
+  .view-bar .vp{flex:1;overflow:hidden;white-space:nowrap;text-overflow:ellipsis;direction:rtl;text-align:left;color:var(--faint)}
+  .view-bar button{font:inherit;font-family:var(--mono);font-size:11px;color:var(--ink);background:var(--panel);border:1px solid var(--line-hi);border-radius:5px;padding:1px 8px;cursor:pointer}
+  .view-bar button:hover{border-color:var(--brand)}
+  .view-bar .prim{color:var(--brand-ink);background:var(--brand);border-color:var(--brand)}
+  .view-body{flex:1;min-height:0;overflow:auto;background:var(--bg);position:relative}
+  .view-body:has(iframe){overflow:hidden}   /* iframe 이 자체 스크롤 — 바깥 view-body 는 스크롤 금지(이중 스크롤바 방지) */
+  .view-body iframe{display:block;width:100%;height:100%;border:0;background:#fff}
+  .view-body img{max-width:100%;display:block;margin:0 auto;padding:12px}
+  .view-body pre.vtext{margin:0;padding:12px 14px;font-family:var(--mono);font-size:12px;line-height:1.55;color:var(--ink);white-space:pre-wrap;word-break:break-word}
+  .view-body textarea.vedit{width:100%;height:100%;box-sizing:border-box;border:0;outline:none;resize:none;padding:12px 14px;font-family:var(--mono);font-size:12.5px;line-height:1.55;color:var(--ink);background:var(--bg)}
+  .view-msg{padding:24px;text-align:center;color:var(--faint);font-family:var(--mono);font-size:12px}
+  .view-msg a{color:var(--brand)}
+  .st.vdoc{background:none;color:var(--faint);width:auto;font-size:11px}
   .empty{flex:1;display:flex;align-items:center;justify-content:center;text-align:center;padding:24px}
   .empty .card{max-width:440px}
   .empty .glyph{font-family:var(--mono);font-size:24px;color:#2c3444;letter-spacing:5px;margin-bottom:14px}
@@ -173,7 +190,11 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   .pick-h .x{margin-left:auto;background:none;border:none;color:var(--faint);font-size:16px;cursor:pointer}
   .pick-h .x:hover{color:var(--ink)}
   .pick-path{padding:8px 15px;font-size:11.5px;color:var(--brand);border-bottom:1px solid var(--line);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;direction:rtl;text-align:left}
+  .fp-search{padding:8px 12px;border-bottom:1px solid var(--line)}
+  .fp-search input{width:100%;box-sizing:border-box;font-family:var(--mono);font-size:12px;color:var(--ink);background:var(--panel);border:1px solid var(--line-hi);border-radius:7px;padding:7px 10px;outline:none}
+  .fp-search input:focus{border-color:var(--brand)}
   .pick-list{flex:1;overflow:auto;padding:6px}
+  .pick-row .rel{margin-left:auto;font-size:10px;color:var(--faint);overflow:hidden;text-overflow:ellipsis;white-space:nowrap;direction:rtl;max-width:60%}
   .pick-row{display:flex;align-items:center;gap:9px;padding:7px 10px;border-radius:7px;cursor:pointer;font-size:12.5px;color:var(--muted)}
   .pick-row:hover{background:var(--surface2);color:var(--ink)}
   .pick-row .ic{width:14px;text-align:center;color:var(--faint)}
@@ -200,6 +221,9 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   .tnode.session{padding-left:20px;cursor:pointer} .tnode.session:hover{background:var(--surface)}
   .tnode.session.open{background:var(--brand-dim);color:var(--ink);box-shadow:inset 0 0 0 1px rgba(78,201,176,.22)}
   .tnode.session .p{color:var(--faint);font-size:10.5px;overflow:hidden;text-overflow:ellipsis}
+  .tnode.session .del{margin-left:auto;color:var(--faint);border:none;background:none;cursor:pointer;font-size:13px;line-height:1;padding:0 3px;opacity:0;flex:none}
+  .tnode.session:hover .del{opacity:1} .tnode.session .del:hover{color:var(--failed)}
+  body.touch .tnode.session .del{opacity:.65}
   .toast{position:fixed;bottom:64px;left:50%;transform:translateX(-50%);background:var(--surface2);border:1px solid var(--line-hi);color:var(--ink);
     font-family:var(--mono);font-size:12px;padding:8px 14px;border-radius:9px;opacity:0;transition:opacity .2s;pointer-events:none;z-index:40;max-width:80vw}
@@ -326,6 +350,7 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
         <button class="tc-btn" id="splitRow" title="세로 분할 — 포커스 페인을 좌우로" disabled>▐ split</button>
         <button class="tc-btn" id="splitCol" title="가로 분할 — 포커스 페인을 상하로" disabled>▬ split</button>
         <button class="tc-btn session" id="sessionBtn" title="자유 세션(폴더 지정 터미널) 열기">＋<span class="b-txt"> Session</span></button>
+        <button class="tc-btn" id="fileBtn" title="파일 보기 — md·html·pdf·이미지·텍스트 뷰어(터미널 옆 페인)">▤<span class="b-txt"> File</span></button>
         <button class="tc-btn" id="closeBtn" title="포커스 페인 닫기(탭은 유지)" disabled>×<span class="b-txt"> pane</span></button>
       </div>
     </div>
@@ -411,6 +436,19 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   </div>
 </div>
+<div class="modal" id="fpickModal">
+  <div class="pick">
+    <div class="pick-h"><span class="t">파일 보기</span><button class="x" id="fpClose" title="닫기">×</button></div>
+    <div class="pick-path" id="fpPath">…</div>
+    <div class="fp-search"><input id="fpSearch" placeholder="이 폴더 아래에서 이름으로 검색 (2자 이상)" autocomplete="off" spellcheck="false" /></div>
+    <div class="pick-list" id="fpList"></div>
+    <div class="pick-f">
+      <button class="home" id="fpHome" title="홈으로">⌂ home</button>
+      <span id="fpHint" style="flex:1;font-size:11px;color:var(--faint)">폴더=이동 · 파일=뷰어로 열기</span>
+    </div>
+  </div>
+</div>
 <div class="modal" id="secretsModal">
   <div class="pick" style="width:min(520px,92vw)">
     <div class="pick-h"><span class="t">시크릿 (env 주입)</span><button class="x" id="secretsClose" title="닫기">×</button></div>
@@ -444,6 +482,7 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
 <script src="/vendor/addon-fit.js"></script>
 <script src="/vendor/addon-unicode11.js"></script>
 <script src="/vendor/addon-web-links.js"></script>
+<script src="/vendor/marked.js"></script>
 <script>
   // 모바일 = 터미널 우선을 유지하되 좁은 화면에 맞춤(드로어 트리 + 단일 터미널 + IME 입력바).
   // (이전엔 보드로 리다이렉트했지만, 이제 cockpit 을 모바일 대응)
@@ -514,7 +553,8 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
       sessRuns.forEach(function(s){
         var r=s.run; var open = tabs[r.id] ? ' open' : '';
         html += '<div class="tnode session'+open+'" data-run="'+r.id+'"><span class="st '+esc(r.status)+'"></span>'
-          + '<span class="n">'+esc(s.title||'session')+'</span><span class="p">'+esc((r.worktreePath||'').replace(/^.*\\/([^/]+\\/[^/]+)$/,'…/$1'))+'</span></div>';
+          + '<span class="n">'+esc(s.title||'session')+'</span><span class="p">'+esc((r.worktreePath||'').replace(/^.*\\/([^/]+\\/[^/]+)$/,'…/$1'))+'</span>'
+          + '<button class="del" data-delsession="'+r.id+'" title="세션 삭제 — 터미널만 종료, 폴더·파일은 보존">×</button></div>';
       });
     } else {
       html += '<div class="tnode empty" style="padding-left:14px">열린 세션 없음 — ＋ Session 으로 폴더 지정</div>';
@@ -556,6 +596,8 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   }
   $('tree').addEventListener('click', function(e){
     if (e.target.closest('[data-newsession]')){ openSession(); return; }
+    var del = e.target.closest('[data-delsession]');
+    if (del){ e.stopPropagation(); deleteSession(+del.dataset.delsession); return; }
     var run = e.target.closest('[data-run]');
     if (run){ openRunPane(+run.dataset.run); if (isMobile()) setDrawer(false); return; }
     var fn = e.target.closest('[data-fold]');
@@ -576,9 +618,14 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   var layout = { leaf:true, id:'L0', tab:null };  // 분할 트리 루트
   var focusLeaf = 'L0';
   var leafSeq = 1;
+  var viewerSeq = 1;         // 뷰어 탭 키(문자열 'v#')
   var MAX_LEAVES = 6;
   var dragRunId = null;
+  // 뷰어 탭은 문자열 키('v1'…), 터미널 탭은 숫자 runId. 이벤트 핸들러에서 강제 숫자화 금지.
+  function isViewer(id){ return typeof id==='string' && id.charAt(0)==='v'; }
+  function tabIdOf(el){ var v=el.dataset.tab; return (v && v.charAt(0)==='v') ? v : +v; }
   function newLeafId(){ return 'L'+(leafSeq++); }
   function eachLeaf(node, fn){ if(node.leaf){ fn(node); } else { eachLeaf(node.a,fn); eachLeaf(node.b,fn); } }
   function findLeaf(id, node){ node=node||layout; if(node.leaf) return node.id===id?node:null; return findLeaf(id,node.a)||findLeaf(id,node.b); }
@@ -609,6 +656,26 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
     try{ term.loadAddon(new window.Unicode11Addon.Unicode11Addon()); term.unicode.activeVersion='11'; }catch(e){}
     // URL 링크 클릭 가능(웹=새 탭, 데스크톱 앱=시스템 브라우저 — setWindowOpenHandler 가 external 로).
     try{ term.loadAddon(new window.WebLinksAddon.WebLinksAddon(function(ev, uri){ window.open(uri, '_blank', 'noopener'); })); }catch(e){}
+    // 파일 경로 링크: 에이전트가 찍는 경로(src/x.ts:12 · /Users/…/README.md 등)를 클릭하면 뷰어 페인으로.
+    try{ term.registerLinkProvider({ provideLinks: function(y, cb){
+      var ln; try{ ln=term.buffer.active.getLine(y-1); }catch(e){ cb(undefined); return; }
+      if(!ln){ cb(undefined); return; }
+      var s=ln.translateToString(true);
+      var re=/(?:~\\/|\\.{0,2}\\/)?[\\w.\\-\\/]*\\.[A-Za-z0-9]{1,8}(?::\\d+(?::\\d+)?)?/g;
+      var links=[], m;
+      while((m=re.exec(s))){
+        var raw=m[0]; if(!raw || raw.indexOf('://')>=0 || raw.slice(0,2)==='//') continue;   // URL 은 WebLinksAddon 담당
+        var before = m.index>0 ? s.charAt(m.index-1) : ' ';
+        if(before===':' || before==='/' || /[A-Za-z0-9]/.test(before)) continue;   // URL 조각·토큰 중간 배제
+        var pathPart=raw.replace(/:\\d+(?::\\d+)?$/,'');
+        var ext=(pathPart.split('.').pop()||'').toLowerCase();
+        if(!(VIEW_EXT[ext] || pathPart.indexOf('/')>=0)) continue;  // 오탐 축소: 알려진 확장자거나 경로형
+        var sx=m.index+1, ex=m.index+raw.length;
+        links.push({ text:raw, range:{ start:{x:sx,y:y}, end:{x:ex,y:y} },
+          activate:function(ev, txt){ openPathFromTerm(runId, txt); } });
+      }
+      cb(links.length?links:undefined);
+    }}); }catch(e){}
     // 복사 배선: xterm 은 user-select:none 이라 네이티브 선택이 없다 → term.getSelection() 을 직접 클립보드로.
     // ① 드래그 놓으면 자동 복사(select-to-copy) ② Cmd/Ctrl+C 로도 복사(선택 없으면 통과 → SIGINT).
     var copySel=function(){ var s=''; try{ s=term.getSelection(); }catch(e){} if(!s) return false;
@@ -629,6 +696,102 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
     tabs[runId]=t; tabOrder.push(runId);
     return t;   // open·connect 는 attachHosts 에서(Phase 2 순서: open → connect)
   }
+  // ── 파일 뷰어 탭(비터미널) — md/html/pdf/이미지/텍스트 보기 + .env 등 편집 ──
+  function ensureViewer(path, name){
+    var id='v'+(viewerSeq++);
+    var host=document.createElement('div'); host.className='view-host';
+    var t={ runId:id, name:name||(path.split('/').pop()||path), kind:'viewer', term:null, ws:null, host:host, path:path, closing:false, opened:false };
+    tabs[id]=t; tabOrder.push(id);
+    renderViewer(t);
+    return t;
+  }
+  function openViewer(path, name){ var t=ensureViewer(path, name); openTab(t.runId); }
+  // 뷰어 대상 확장자(터미널 경로 링크 오탐 축소용)
+  var VIEW_EXT = (function(){ var o={}; ('md markdown mdx html htm pdf png jpg jpeg gif webp svg bmp ico avif txt env json jsonc yaml yml toml ini conf cfg log csv tsv xml sql sh bash zsh js cjs mjs ts tsx jsx css scss less py rb php go rs java c h cpp hpp swift kt lua pl r dart vue svelte').split(' ').forEach(function(e){o[e]=1;}); return o; })();
+  var fsHome = '';
+  try{ fetch('/api/fs/list').then(function(r){return r.json();}).then(function(d){ fsHome=d.home||''; }).catch(function(){}); }catch(e){}
+  // 터미널에서 클릭한 경로 → 절대경로로 해석 후 뷰어 페인. 상대경로는 그 run 의 작업폴더(cwd) 기준.
+  function openPathFromTerm(runId, raw){
+    var p=(raw||'').replace(/:\\d+(?::\\d+)?$/,'');   // :line:col 제거
+    var abs;
+    if(p.charAt(0)==='/') abs=p;
+    else if(p.slice(0,2)==='~/') abs=(fsHome||'').replace(/\\/$/,'')+p.slice(1);
+    else { var r=runById[runId]; var cwd=r&&r.worktreePath; if(!cwd){ toast('작업 폴더를 몰라 경로를 열 수 없습니다'); return; } abs=cwd.replace(/\\/$/,'')+'/'+p; }
+    openViewer(abs);
+  }
+  function fmtSize(n){ return n<1024?(n+' B'):n<1048576?((n/1024).toFixed(1)+' KB'):((n/1048576).toFixed(1)+' MB'); }
+  var MD_FRAME_CSS = 'body{margin:0 auto;padding:40px 28px 80px;background:#0b0d12;color:#dee4ec;font:14px/1.7 -apple-system,BlinkMacSystemFont,\\'Apple SD Gothic Neo\\',\\'Noto Sans KR\\',sans-serif;max-width:740px}'
+    + 'a{color:#4ec9b0}h1,h2,h3{color:#fff;line-height:1.3}h1{border-bottom:1px solid #2c3444;padding-bottom:.3em}h2{border-bottom:1px solid #232a36;padding-bottom:.25em}'
+    + 'code{background:#1c212c;padding:.15em .4em;border-radius:4px;font-family:ui-monospace,Menlo,monospace;font-size:.9em}'
+    + 'pre{background:#12161d;padding:12px 14px;border-radius:8px;overflow:auto}pre code{background:none;padding:0}'
+    + 'blockquote{margin:0;padding:.2em 1em;border-left:3px solid #4ec9b0;color:#9aa4b2}'
+    + 'table{border-collapse:collapse}th,td{border:1px solid #2c3444;padding:6px 10px}img{max-width:100%}hr{border:0;border-top:1px solid #2c3444}';
+  function renderViewer(t){
+    var host=t.host;
+    host.innerHTML='<div class="view-bar"><span class="vp"></span></div><div class="view-body"><div class="view-msg">불러오는 중…</div></div>';
+    var bar=host.querySelector('.view-bar'), body=host.querySelector('.view-body');
+    bar.querySelector('.vp').textContent=t.path;
+    var rawUrl='/api/fs/raw?path='+encodeURIComponent(t.path);
+    fetch('/api/fs/read?path='+encodeURIComponent(t.path)).then(function(r){ return r.json(); }).then(function(d){
+      if(d.error){ body.innerHTML='<div class="view-msg">열 수 없습니다: '+esc(d.error)+'</div>'; return; }
+      // 공통 액션: 원본 열기(새 탭/시스템)
+      var actions='<button data-act="raw" title="원본을 새 탭/시스템 뷰어로">↗ 원본</button>';
+      if(d.kind==='md' || d.kind==='html' || d.kind==='pdf' || d.kind==='image'){
+        bar.innerHTML='<span class="vp"></span>'+actions; bar.querySelector('.vp').textContent=t.path;
+      }
+      if(d.kind==='md'){
+        var html='<!doctype html><html><head><meta charset="utf-8"><base target="_blank"><style>'+MD_FRAME_CSS+'</style></head><body>'
+          + ((window.marked&&window.marked.parse)?window.marked.parse(d.text||''):esc(d.text||'')) + '</body></html>';
+        var f=document.createElement('iframe'); f.setAttribute('sandbox','allow-popups allow-popups-to-escape-sandbox'); f.srcdoc=html;
+        body.innerHTML=''; body.appendChild(f);
+      } else if(d.kind==='html'){
+        // 저장된/임의 HTML 은 신뢰 불가 → same-origin 금지 sandbox(불투명 출처라 쿠키·API 접근 차단)
+        var fh=document.createElement('iframe'); fh.setAttribute('sandbox','allow-scripts allow-popups allow-popups-to-escape-sandbox'); fh.src=rawUrl;
+        body.innerHTML=''; body.appendChild(fh);
+      } else if(d.kind==='pdf'){
+        var fp=document.createElement('iframe'); fp.src=rawUrl;   // 브라우저/Electron 내장 PDF 뷰어(수동적 — sandbox 불필요)
+        body.innerHTML=''; body.appendChild(fp);
+      } else if(d.kind==='image'){
+        body.innerHTML=''; var im=document.createElement('img'); im.src=rawUrl; im.alt=t.name; body.appendChild(im);
+      } else if(d.kind==='binary'){
+        body.innerHTML='<div class="view-msg">미리보기 불가 · '+fmtSize(d.size||0)+(d.note?(' · '+esc(d.note)):'')+'<br><br><a href="'+rawUrl+'" target="_blank">원본 열기 / 내려받기</a></div>';
+      } else { // text
+        if(d.editable){ actions='<button data-act="edit" class="prim">편집</button>'+actions; }
+        bar.innerHTML='<span class="vp"></span>'+actions; bar.querySelector('.vp').textContent=t.path;
+        var pre=document.createElement('pre'); pre.className='vtext'; pre.textContent=d.text||''; body.innerHTML=''; body.appendChild(pre);
+        t._text=d.text||''; t._editable=!!d.editable;
+      }
+    }).catch(function(){ body.innerHTML='<div class="view-msg">불러오기 실패</div>'; });
+    // 바 액션(위임)
+    bar.addEventListener('click', function(e){
+      var b=e.target.closest('button[data-act]'); if(!b) return;
+      var act=b.getAttribute('data-act');
+      if(act==='raw'){ window.open(rawUrl,'_blank','noopener'); return; }
+      if(act==='edit'){ startEdit(t); return; }
+      if(act==='save'){ saveEdit(t); return; }
+      if(act==='cancel'){ renderViewer(t); return; }
+    });
+  }
+  function startEdit(t){
+    var bar=t.host.querySelector('.view-bar'), body=t.host.querySelector('.view-body');
+    bar.innerHTML='<span class="vp"></span><button data-act="save" class="prim">저장</button><button data-act="cancel">취소</button>';
+    bar.querySelector('.vp').textContent=t.path;
+    var ta=document.createElement('textarea'); ta.className='vedit'; ta.value=t._text||''; ta.spellcheck=false;
+    body.innerHTML=''; body.appendChild(ta); ta.focus();
+    ta.addEventListener('keydown', function(e){ if((e.metaKey||e.ctrlKey)&&e.key==='s'){ e.preventDefault(); saveEdit(t); } });
+    t._ta=ta;
+  }
+  function saveEdit(t){
+    var ta=t._ta; if(!ta) return; var content=ta.value;
+    fetch('/api/fs/write',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({path:t.path,content:content})})
+      .then(function(r){ return r.json(); }).then(function(d){
+        if(d.error){ toast('저장 실패: '+d.error); return; }
+        t._text=content; toast('저장됨 · '+t.name+' ('+fmtSize(d.size||0)+')'); renderViewer(t);
+      }).catch(function(){ toast('저장 실패'); });
+  }
   function connectTab(t){
     if (t.closing || !t.term) return;
     try{ t.fit.fit(); }catch(e){}
@@ -652,14 +815,22 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   }
   function fitTab(t){ if(!t||!t.fit||!t.term) return; try{ t.fit.fit(); if(t.ws&&t.ws.readyState===1) t.ws.send(JSON.stringify({t:'r',cols:t.term.cols,rows:t.term.rows})); }catch(e){} }
-  function fitAllVisible(){ eachLeaf(layout,function(l){ if(l.tab!=null && tabs[l.tab] && tabs[l.tab].host.isConnected) fitTab(tabs[l.tab]); }); }
+  function fitAllVisible(){ eachLeaf(layout,function(l){ if(l.tab!=null && tabs[l.tab] && tabs[l.tab].kind!=='viewer' && tabs[l.tab].host.isConnected) fitTab(tabs[l.tab]); }); }
   // ── 탭 바 렌더(터미널 없음 — 언제든 안전) ──
   function renderTabs(){
     var shown={}; eachLeaf(layout,function(l){ if(l.tab!=null) shown[l.tab]=true; });
     var html='';
     tabOrder.forEach(function(runId){
-      var t=tabs[runId]; if(!t) return; var r=runById[runId];
+      var t=tabs[runId]; if(!t) return;
+      if(t.kind==='viewer'){
+        html += '<div class="tab'+(shown[runId]?' shown':'')+'" draggable="true" data-tab="'+runId+'" title="파일 뷰어 · 드래그=페인에 배치">'
+          + '<span class="st vdoc">▤</span>'
+          + '<span class="nm">'+esc(t.name)+'</span>'
+          + '<button class="x" title="뷰어 닫기">×</button></div>';
+        return;
+      }
+      var r=runById[runId];
       html += '<div class="tab'+(shown[runId]?' shown':'')+'" draggable="true" data-tab="'+runId+'" title="더블클릭=이름변경 · 드래그=페인에 배치">'
         + '<span class="st '+esc(r?r.status:'')+'"></span>'
         + '<span class="nm">'+esc(t.name)+'</span>'
@@ -673,11 +844,14 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
       var t=node.tab!=null?tabs[node.tab]:null; var r=node.tab!=null?runById[node.tab]:null;
       var head=document.createElement('div'); head.className='leaf-h'; head.dataset.leafhead=node.id;
       head.innerHTML = t
-        ? '<span class="st '+esc(r?r.status:'')+'"></span><span class="nm">'+esc(t.name)+'</span>'
-          + '<span data-role="chip" class="chip '+esc(r?r.status:'')+'">'+esc(r?r.status:'')+'</span>'
-          + '<span data-role="vslot">'+vbadge(r&&r.verifyStatus)+'</span>'
-          + '<button class="lock" data-lock="'+node.id+'" title="이 페인에 시크릿/비밀번호 전송(터미널에 안 찍힘)">⊟</button>'
-          + '<button class="x" title="이 페인 닫기(탭은 유지)">×</button>'
+        ? (t.kind==='viewer'
+          ? '<span class="st vdoc">▤</span><span class="nm">'+esc(t.name)+'</span>'
+            + '<button class="x" title="이 페인 닫기(뷰어 유지)">×</button>'
+          : '<span class="st '+esc(r?r.status:'')+'"></span><span class="nm">'+esc(t.name)+'</span>'
+            + '<span data-role="chip" class="chip '+esc(r?r.status:'')+'">'+esc(r?r.status:'')+'</span>'
+            + '<span data-role="vslot">'+vbadge(r&&r.verifyStatus)+'</span>'
+            + '<button class="lock" data-lock="'+node.id+'" title="이 페인에 시크릿/비밀번호 전송(터미널에 안 찍힘)">⊟</button>'
+            + '<button class="x" title="이 페인 닫기(탭은 유지)">×</button>')
         : '<span class="nm" style="color:var(--faint)">빈 페인</span><button class="x" title="이 페인 닫기">×</button>';
       var body=document.createElement('div'); body.className='leaf-body'; body.dataset.leafbody=node.id;
       if (!t){ var em=document.createElement('div'); em.className='leaf-empty'; em.textContent='탭을 여기로 드래그하거나 탭을 클릭하세요'; body.appendChild(em); }
@@ -692,6 +866,7 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   }
   // host 를 DOM 에 붙이고, 최초 1회 open → connect(Phase 2 순서). fit 은 render 의 rAF 에서.
   function attachHosts(){ eachLeaf(layout,function(l){ if(l.tab==null||!tabs[l.tab]) return; var t=tabs[l.tab]; var body=$('panes').querySelector('[data-leafbody="'+l.id+'"]'); if(!body) return; body.appendChild(t.host);
+    if(t.kind==='viewer') return;   // 뷰어는 DOM 만 붙이면 끝(터미널 open/connect 없음)
     if(!t.opened){ try{ t.term.open(t.host); t.opened=true; }catch(e){} }
     if(!t.connected){ t.connected=true; connectTab(t); }
   }); }
@@ -715,14 +890,14 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   function setLeafFocus(id){
     focusLeaf=id;
     Array.prototype.forEach.call($('panes').querySelectorAll('.leaf'),function(el){ el.classList.toggle('focus', el.dataset.leaf===id); });
-    var rid=focusedRunId(); if(rid!=null && tabs[rid]) try{ tabs[rid].term.focus(); }catch(e){}
+    var rid=focusedRunId(); if(rid!=null && tabs[rid] && tabs[rid].term) try{ tabs[rid].term.focus(); }catch(e){}
     updateControls();
     if (typeof reqMode!=='undefined' && reqMode!=='new') setMode(reqMode);
   }
   // 탭 열기 = 포커스 슬롯에 표시(강제 분할 없음). 기존 호출부(openRunPane) 호환.
   function openTab(runId){
-    ensureTab(runId);
+    if(!tabs[runId]) ensureTab(runId);   // 뷰어 탭은 ensureViewer 로 이미 생성됨 → 터미널로 오생성 방지
     var l=leafOfTab(runId);
     if (l){ setLeafFocus(l.id); return; }
     var f=findLeaf(focusLeaf) || firstLeaf();
@@ -757,7 +932,7 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
     var t=tabs[runId]; if(!t) return; t.closing=true;
     try{ if(t.ws) t.ws.close(); }catch(e){}
     try{ if(t.ro) t.ro.disconnect(); }catch(e){}
-    try{ t.term.dispose(); }catch(e){}
+    try{ if(t.term) t.term.dispose(); }catch(e){}
     eachLeaf(layout,function(l){ if(l.tab===runId) l.tab=null; });
     delete tabs[runId]; tabOrder=tabOrder.filter(function(x){return x!==runId;});
     render(); renderTree();
@@ -779,8 +954,8 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   // fleet 갱신 시 라벨·상태만 갱신(페인 DOM 재구성 X — 터미널 유지). 사라진 run 탭 정리.
   function syncPanes(){
-    tabOrder.slice().forEach(function(runId){ if(!runById[runId]) closeTab(runId); });
-    tabOrder.forEach(function(runId){ var t=tabs[runId]; if(t) t.name=tabName(runId); });
+    tabOrder.slice().forEach(function(runId){ if(!isViewer(runId) && !runById[runId]) closeTab(runId); });   // 뷰어는 run 이 없어도 유지
+    tabOrder.forEach(function(runId){ var t=tabs[runId]; if(t && t.kind!=='viewer') t.name=tabName(runId); });
     renderTabs();
     eachLeaf(layout,function(l){
       if(l.tab==null) return; var r=runById[l.tab]; if(!r) return;
@@ -819,12 +994,12 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   // ── 탭 바 이벤트 ──
   $('tabs').addEventListener('click', function(e){
-    var tabEl=e.target.closest('[data-tab]'); if(!tabEl) return; var runId=+tabEl.dataset.tab;
+    var tabEl=e.target.closest('[data-tab]'); if(!tabEl) return; var runId=tabIdOf(tabEl);
     if (e.target.closest('.x')){ closeTab(runId); return; }
     openTab(runId);
   });
-  $('tabs').addEventListener('dblclick', function(e){ var tabEl=e.target.closest('[data-tab]'); if(tabEl) startRename(+tabEl.dataset.tab, tabEl); });
-  $('tabs').addEventListener('dragstart', function(e){ var tabEl=e.target.closest('[data-tab]'); if(!tabEl) return; dragRunId=+tabEl.dataset.tab; tabEl.classList.add('drag'); try{ e.dataTransfer.effectAllowed='move'; e.dataTransfer.setData('text/plain', String(dragRunId)); }catch(_){} });
+  $('tabs').addEventListener('dblclick', function(e){ var tabEl=e.target.closest('[data-tab]'); if(tabEl) startRename(tabIdOf(tabEl), tabEl); });
+  $('tabs').addEventListener('dragstart', function(e){ var tabEl=e.target.closest('[data-tab]'); if(!tabEl) return; dragRunId=tabIdOf(tabEl); tabEl.classList.add('drag'); try{ e.dataTransfer.effectAllowed='move'; e.dataTransfer.setData('text/plain', String(dragRunId)); }catch(_){} });
   $('tabs').addEventListener('dragend', function(e){ var tabEl=e.target.closest('[data-tab]'); if(tabEl) tabEl.classList.remove('drag'); dragRunId=null; });
   // ── 페인(슬롯) 이벤트: 포커스·닫기·드롭·리사이즈 ──
@@ -884,7 +1059,7 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   // ── 뷰어 — 위 내용을 (대화) Claude Code 로그 / (터미널) 스크롤백 으로 읽기(읽기 전용) ──
   var histMode='chat';
-  function openHistory(){ var rid=focusedRunId(); if(rid==null){ toast('포커스한 세션이 없습니다'); return; } $('histModal').classList.add('on'); loadHist(); }
+  function openHistory(){ var rid=focusedRunId(); if(rid==null||isViewer(rid)){ toast('포커스한 세션이 없습니다'); return; } $('histModal').classList.add('on'); loadHist(); }
   function closeHistory(){ $('histModal').classList.remove('on'); }
   function setHistMode(m){
     histMode=m; $('hmChat').classList.toggle('on',m==='chat'); $('hmRaw').classList.toggle('on',m==='raw');
@@ -925,6 +1100,15 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   // ── 자유 세션 — 폴더를 지정해 tmux 셸(프로젝트 비소속). ──
   var pickPathCur = '';
   function machineSlug(){ return (fleet.machines && fleet.machines[0] && fleet.machines[0].slug) || 'local'; }
+  async function deleteSession(runId){
+    if(!confirm('이 세션을 삭제할까요?\\n터미널만 종료됩니다 · 폴더와 파일은 그대로 보존됩니다.')) return;
+    try{
+      var res=await fetch('/api/runs/'+runId,{method:'DELETE'});
+      var j=await res.json().catch(function(){return{};});
+      if(res.ok){ if(tabs[runId]) closeTab(runId); toast('세션 삭제됨 (폴더 보존)'); await hydrate(); }
+      else toast('삭제 실패: '+(j.error||res.status));
+    }catch(e){ toast('삭제 실패: '+e); }
+  }
   function openSession(){ $('pickModal').classList.add('on'); $('pickName').value=''; browseTo(''); }
   function closePicker(){ $('pickModal').classList.remove('on'); }
   async function browseTo(p){
@@ -962,6 +1146,55 @@ export const COCKPIT_HTML = /* html */ `<!doctype html>
   });
   $('pickName').addEventListener('keydown', function(e){ if(e.key==='Enter'){ e.preventDefault(); $('pickGo').click(); } });
   $('sessionBtn').addEventListener('click', openSession);
+  // ── 파일 피커(뷰어로 열기) — 폴더=이동, 파일=뷰어 ──
+  var fpDirCur = '';
+  function openFilePicker(){ $('fpickModal').classList.add('on'); $('fpSearch').value=''; fpTo(fpDirCur||''); setTimeout(function(){ try{ $('fpSearch').focus(); }catch(e){} },30); }
+  function closeFilePicker(){ $('fpickModal').classList.remove('on'); }
+  function fpIcon(kind){ return kind==='md'?'M':kind==='html'?'H':kind==='pdf'?'P':kind==='image'?'I':kind==='binary'?'·':'T'; }
+  async function fpTo(p){
+    try{
+      var d = await (await fetch('/api/fs/list'+(p?('?path='+encodeURIComponent(p)):''))).json();
+      fpDirCur = d.path; $('fpPath').textContent = d.path; if($('fpHint')) $('fpHint').textContent='폴더=이동 · 파일=뷰어로 열기';
+      var html='';
+      if (d.parent && d.parent!==d.path) html += '<div class="pick-row up" data-dir="'+esc(d.parent)+'"><span class="ic">↑</span><span>..</span></div>';
+      (d.entries||[]).forEach(function(e){
+        var full = d.path==='/' ? '/'+e.name : d.path+'/'+e.name;
+        if (e.dir) html += '<div class="pick-row" data-dir="'+esc(full)+'"><span class="ic">▸</span><span>'+esc(e.name)+'</span></div>';
+        else html += '<div class="pick-row" data-file="'+esc(full)+'"><span class="ic">'+fpIcon(e.kind)+'</span><span>'+esc(e.name)+'</span></div>';
+      });
+      if (!(d.entries||[]).length) html += '<div class="pick-row" style="cursor:default;color:var(--faint)">'+(d.error?'읽을 수 없습니다':'항목 없음')+'</div>';
+      $('fpList').innerHTML = html;
+    }catch(e){ $('fpList').innerHTML = '<div class="pick-row" style="color:var(--failed)">읽을 수 없습니다</div>'; }
+  }
+  var fpFindT=null, fpFindSeq=0;
+  async function fpFind(q){
+    var seq=++fpFindSeq;
+    try{
+      var d = await (await fetch('/api/fs/find?path='+encodeURIComponent(fpDirCur||'')+'&q='+encodeURIComponent(q))).json();
+      if(seq!==fpFindSeq) return;   // 뒤늦게 도착한 오래된 응답 무시
+      if($('fpHint')) $('fpHint').textContent = d.error ? d.error : (d.results.length+'개'+(d.truncated?'+':'')+' · '+ (fpDirCur||'') +' 아래');
+      if(d.error){ $('fpList').innerHTML='<div class="pick-row" style="cursor:default;color:var(--faint)">'+esc(d.error)+'</div>'; return; }
+      if(!d.results.length){ $('fpList').innerHTML='<div class="pick-row" style="cursor:default;color:var(--faint)">일치하는 파일 없음</div>'; return; }
+      $('fpList').innerHTML = d.results.map(function(e){
+        return '<div class="pick-row" data-file="'+esc(e.path)+'"><span class="ic">'+fpIcon(e.kind)+'</span><span>'+esc(e.name)+'</span><span class="rel">'+esc(e.rel)+'</span></div>';
+      }).join('');
+    }catch(e){ if(seq===fpFindSeq) $('fpList').innerHTML='<div class="pick-row" style="color:var(--failed)">검색 실패</div>'; }
+  }
+  $('fpSearch').addEventListener('input', function(){
+    var q=this.value.trim();
+    if(fpFindT){ clearTimeout(fpFindT); fpFindT=null; }
+    if(q.length<2){ fpTo(fpDirCur); return; }   // 비우면 현재 폴더 목록으로 복귀
+    fpFindT=setTimeout(function(){ fpFindT=null; fpFind(q); }, 220);
+  });
+  $('fpList').addEventListener('click', function(e){
+    var dir=e.target.closest('[data-dir]'); if(dir){ $('fpSearch').value=''; fpTo(dir.dataset.dir); return; }
+    var file=e.target.closest('[data-file]'); if(file){ closeFilePicker(); openViewer(file.dataset.file); if(isMobile()) setDrawer(false); }
+  });
+  $('fpClose').addEventListener('click', closeFilePicker);
+  $('fpHome').addEventListener('click', function(){ $('fpSearch').value=''; fpTo(''); });
+  $('fpickModal').addEventListener('click', function(e){ if(e.target===this) closeFilePicker(); });
+  $('fileBtn').addEventListener('click', openFilePicker);
   $('sessionCta').addEventListener('click', openSession);
   // ── (A) 시크릿 볼트 — 세션 env 주입 ──

package/src/files.ts ADDED Viewed

@@ -0,0 +1,159 @@
+// File viewer/edit backing (owner-only tool). Scoped to the daemon user's home
+// directory — reading file *contents* is higher-risk than /api/browse's dir listing,
+// so we jail here. All real work (repos, worktrees, sessions, ~/services) lives under ~.
+import { readdir, stat, readFile, writeFile, realpath } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { resolve as presolve, dirname as pdirname, join as pjoin, basename as pbasename, extname as pextname } from 'node:path';
+const HOME = presolve(homedir());
+const MAX_TEXT = 2 * 1024 * 1024;      // read as text up to 2MB
+const MAX_WRITE = 512 * 1024;          // edit-save cap (.env etc. are tiny)
+export type FileKind = 'md' | 'html' | 'pdf' | 'image' | 'text' | 'binary';
+const IMAGE_EXT = new Set(['.png', '.jpg', '.jpeg', '.gif', '.webp', '.svg', '.bmp', '.ico', '.avif']);
+const MD_EXT = new Set(['.md', '.markdown', '.mdx']);
+const HTML_EXT = new Set(['.html', '.htm']);
+// recognized text families (default is a NUL-byte sniff, this just short-circuits)
+const TEXT_EXT = new Set([
+  '.txt', '.env', '.json', '.jsonc', '.yaml', '.yml', '.toml', '.ini', '.conf', '.cfg',
+  '.log', '.csv', '.tsv', '.xml', '.sql', '.sh', '.bash', '.zsh', '.fish',
+  '.js', '.cjs', '.mjs', '.ts', '.tsx', '.jsx', '.css', '.scss', '.less',
+  '.py', '.rb', '.php', '.go', '.rs', '.java', '.c', '.h', '.cpp', '.hpp', '.cc',
+  '.swift', '.kt', '.lua', '.pl', '.r', '.dart', '.vue', '.svelte', '.gradle',
+  '.gitignore', '.dockerignore', '.editorconfig', '.properties', '.svg',
+]);
+const TEXT_BASENAME = new Set(['dockerfile', 'makefile', 'readme', 'license', 'procfile', '.env', '.gitignore', '.npmrc', '.prettierrc', '.eslintrc']);
+const MIME: Record<string, string> = {
+  '.pdf': 'application/pdf', '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg',
+  '.gif': 'image/gif', '.webp': 'image/webp', '.svg': 'image/svg+xml', '.bmp': 'image/bmp',
+  '.ico': 'image/x-icon', '.avif': 'image/avif', '.html': 'text/html', '.htm': 'text/html',
+};
+function ext(p: string) { return pextname(p).toLowerCase(); }
+export function classify(p: string): FileKind {
+  const e = ext(p);
+  const base = pbasename(p).toLowerCase();
+  if (MD_EXT.has(e)) return 'md';
+  if (HTML_EXT.has(e)) return 'html';
+  if (e === '.pdf') return 'pdf';
+  if (e === '.svg') return 'image';       // render, but also text-editable via read()
+  if (IMAGE_EXT.has(e)) return 'image';
+  if (TEXT_EXT.has(e) || TEXT_BASENAME.has(base) || base.startsWith('.env')) return 'text';
+  return 'binary';                        // decided for real in read() via NUL sniff
+}
+export function mimeFor(p: string): string {
+  return MIME[ext(p)] || 'application/octet-stream';
+}
+// Reject anything that escapes HOME (symlink-safe via realpath on the closest existing ancestor).
+async function jail(input?: string): Promise<string> {
+  const p = presolve(input && input.startsWith('/') ? input : HOME);
+  // realpath the deepest existing ancestor so a missing leaf (new file) still validates its dir
+  let probe = p;
+  for (;;) {
+    try { const rp = await realpath(probe); const rest = p.slice(probe.length); const full = presolve(rp + rest);
+      if (full !== HOME && !full.startsWith(HOME + '/')) throw new Error('outside home');
+      return full;
+    } catch (e: any) {
+      if (e && e.message === 'outside home') throw e;
+      const parent = pdirname(probe);
+      if (parent === probe) { if (p !== HOME && !p.startsWith(HOME + '/')) throw new Error('outside home'); return p; }
+      probe = parent;
+    }
+  }
+}
+export async function listDir(input?: string) {
+  const path = await jail(input);
+  const entries: Array<{ name: string; dir: boolean; size: number; kind?: FileKind }> = [];
+  let error: string | undefined;
+  try {
+    const items = await readdir(path, { withFileTypes: true });
+    for (const it of items) {
+      // hide most dotfiles, but keep .env* visible (the one text file they edit)
+      if (it.name.startsWith('.') && !it.name.startsWith('.env')) continue;
+      const dir = it.isDirectory();
+      let size = 0;
+      if (!dir) { try { size = (await stat(pjoin(path, it.name))).size; } catch { size = 0; } }
+      entries.push({ name: it.name, dir, size, kind: dir ? undefined : classify(it.name) });
+      if (entries.length >= 500) break;
+    }
+    entries.sort((a, b) => (b.dir ? 1 : 0) - (a.dir ? 1 : 0) || a.name.localeCompare(b.name));
+  } catch { error = 'cannot read directory'; }
+  return { path, parent: pdirname(path), home: HOME, entries, error };
+}
+// Recursive filename search under a folder (bounded). For the picker's search box.
+const FIND_SKIP = new Set(['node_modules', '.git', 'dist', 'build', '.next', '.cache', 'venv', '.venv', '__pycache__', '.turbo', 'coverage', '.gradle', 'target']);
+export async function findFiles(input: string | undefined, q: string, limit = 300) {
+  const root = await jail(input);
+  const needle = (q || '').trim().toLowerCase();
+  if (needle.length < 2) return { root, q: needle, results: [] as any[], error: 'query too short (min 2 chars)' };
+  const out: Array<{ path: string; rel: string; name: string; size: number; kind: FileKind }> = [];
+  async function walk(dir: string, depth: number): Promise<void> {
+    if (out.length >= limit || depth > 6) return;
+    let items;
+    try { items = await readdir(dir, { withFileTypes: true }); } catch { return; }
+    for (const it of items) {
+      if (out.length >= limit) return;
+      if (it.name.startsWith('.') && !it.name.startsWith('.env')) continue;
+      const full = pjoin(dir, it.name);
+      if (it.isDirectory()) { if (!FIND_SKIP.has(it.name)) await walk(full, depth + 1); continue; }
+      if (it.name.toLowerCase().includes(needle)) {
+        let size = 0; try { size = (await stat(full)).size; } catch { /* skip */ }
+        out.push({ path: full, rel: full.slice(root.length + 1), name: it.name, size, kind: classify(it.name) });
+      }
+    }
+  }
+  await walk(root, 0);
+  const truncated = out.length >= limit;
+  out.sort((a, b) => a.rel.length - b.rel.length || a.rel.localeCompare(b.rel));
+  return { root, q: needle, results: out, truncated };
+}
+export async function readForView(input?: string) {
+  const path = await jail(input);
+  const st = await stat(path);
+  if (st.isDirectory()) throw new Error('is a directory');
+  const name = pbasename(path);
+  let kind = classify(path);
+  const size = st.size;
+  // For pdf/image/html the client fetches /api/fs/raw; no body needed here.
+  if (kind === 'pdf' || kind === 'image' || kind === 'html') {
+    return { path, name, kind, size, editable: false };
+  }
+  // text / md / unknown → try to read as text (NUL sniff decides 'binary')
+  if (size > MAX_TEXT) return { path, name, kind: 'binary' as FileKind, size, editable: false, note: 'too large to preview' };
+  const buf = await readFile(path);
+  if (buf.includes(0)) return { path, name, kind: 'binary' as FileKind, size, editable: false };
+  const text = buf.toString('utf8');
+  if (kind === 'binary') kind = 'text';   // unknown ext but no NUL → treat as text
+  const editable = (kind === 'text' || kind === 'md') && size <= MAX_WRITE;
+  return { path, name, kind, size, editable, text };
+}
+// Raw bytes with correct content-type — this is what makes PDFs/images/html render.
+export async function readRaw(input?: string) {
+  const path = await jail(input);
+  const st = await stat(path);
+  if (st.isDirectory()) throw new Error('is a directory');
+  return { path, name: pbasename(path), mime: mimeFor(path), buf: await readFile(path) };
+}
+export async function writeText(input: string, content: string) {
+  const path = await jail(input);
+  const st = await stat(path).catch(() => null);
+  if (st && st.isDirectory()) throw new Error('is a directory');
+  if (st && st.size > MAX_WRITE) throw new Error('file too large to edit here');
+  if (Buffer.byteLength(content, 'utf8') > MAX_WRITE) throw new Error('content exceeds edit cap (512KB)');
+  const kind = classify(path);
+  if (kind === 'pdf' || kind === 'image' || kind === 'binary') throw new Error('not an editable text file');
+  await writeFile(path, content, 'utf8');
+  return { path, name: pbasename(path), size: Buffer.byteLength(content, 'utf8') };
+}

package/src/orchestrator.ts CHANGED Viewed

@@ -1158,6 +1158,28 @@ export async function openSessionAt(machineSlug: string, path: string, title: st
   return { ok: true, detail: 'session open', taskId: task.id, runId };
 }
+/**
+ * 세션 삭제 — tmux 종료 + run/task 레코드 제거(폴더는 보존). sessions 버킷 run 에만 허용.
+ * (일반 task run 은 cleanup/reclaim 을 쓴다 — 삭제로 이력이 사라지면 안 되므로.)
+ */
+export async function deleteSession(runId: number): Promise<{ ok: boolean; detail: string }> {
+  const rr = await db.select().from(agentRuns).where(eq(agentRuns.id, runId)).limit(1);
+  const run = rr[0];
+  if (!run) return { ok: false, detail: 'not found' };
+  const tr = await db.select().from(tasks).where(eq(tasks.id, run.taskId)).limit(1);
+  const task = tr[0];
+  const rp = task ? (await db.select().from(repos).where(eq(repos.id, task.repoId)).limit(1))[0] : undefined;
+  if (!rp || rp.kind !== 'sessions') return { ok: false, detail: 'not a session (use cleanup/reclaim for task runs)' };
+  await cleanupRun(runId).catch(() => { /* tmux kill + 포인터 비움; 실패해도 레코드는 지운다 */ });
+  await db.delete(agentEvents).where(eq(agentEvents.runId, runId));
+  await db.delete(agentRuns).where(eq(agentRuns.id, runId));
+  // 세션 task 는 run 과 1:1 — 남은 run 이 없으면 task 도 제거해 트리에서 사라지게.
+  const siblings = await db.select().from(agentRuns).where(eq(agentRuns.taskId, run.taskId));
+  if (task && siblings.length === 0) await db.delete(tasks).where(eq(tasks.id, task.id));
+  broadcast({ type: 'run', runId, deleted: true });   // 모든 콘솔이 재하이드레이트 → 행 제거
+  return { ok: true, detail: 'session deleted (folder preserved)' };
+}
 /**
  * 그룹에 속한 태스크 1개를 만들고 run 1개를 발사한다(공용 helper).
  * planFanout(plan 형제) 과 /api/groups/:id/spawn(＋New attempt) 이 공유하는

package/src/server.ts CHANGED Viewed

@@ -19,13 +19,14 @@ import { db } from './db';
 import { machines, repos, tasks, agentRuns, agentEvents, designCaptures, shareLinks, taskGroups, secrets } from './db/schema';
 import { BOOKMARKLET_JS } from './design';
 import { runShellOn, shq } from './exec';
-import { launchRun, cleanupRun, stopRun, getRunDiff, loadRunDocs, mergeRun, getRunTermInfo, steerRun, exportRun, prRun, integrateRuns, planFanout, reviewTask, syncRun, openWorkbench, spawnSubtasks, listSubtasks, resolveAgentToken, taskCloseRisk, launchGroupTask, isRunLive, askGroupCoordinator, computeRunOutputs, normalizeOutputs, listReclaimableWorktrees, pruneWorktrees, noopSignal, groupOverlap, landTarget, mergePreview, startLandResolve, listDocuments, verifyRun, openSessionAt, getScrollback, getSessionChat } from './orchestrator';
+import { launchRun, cleanupRun, stopRun, getRunDiff, loadRunDocs, mergeRun, getRunTermInfo, steerRun, exportRun, prRun, integrateRuns, planFanout, reviewTask, syncRun, openWorkbench, spawnSubtasks, listSubtasks, resolveAgentToken, taskCloseRisk, launchGroupTask, isRunLive, askGroupCoordinator, computeRunOutputs, normalizeOutputs, listReclaimableWorktrees, pruneWorktrees, noopSignal, groupOverlap, landTarget, mergePreview, startLandResolve, listDocuments, verifyRun, openSessionAt, deleteSession, getScrollback, getSessionChat } from './orchestrator';
 import { openTerm } from './term';
 import { addSink, removeSink, broadcast } from './hub';
 import { getProvider, listProviders } from './providers';
 import { remoteState, setServe, setFunnel } from './remote';
 import { BOARD_HTML } from './board';
 import { COCKPIT_HTML } from './cockpit';
+import { listDir as fsListDir, readForView as fsReadForView, readRaw as fsReadRaw, writeText as fsWriteText, findFiles as fsFindFiles } from './files';
 const require_ = createRequire(import.meta.url);
@@ -36,6 +37,7 @@ const VENDOR: Record<string, { pkg: string; rel: string; type: string }> = {
   'addon-fit.js': { pkg: '@xterm/addon-fit/package.json', rel: 'lib/addon-fit.js', type: 'text/javascript' },
   'addon-unicode11.js': { pkg: '@xterm/addon-unicode11/package.json', rel: 'lib/addon-unicode11.js', type: 'text/javascript' },
   'addon-web-links.js': { pkg: '@xterm/addon-web-links/package.json', rel: 'lib/addon-web-links.js', type: 'text/javascript' },
+  'marked.js': { pkg: 'marked/package.json', rel: 'marked.min.js', type: 'text/javascript' },
 };
 // ─── 읽기 전용 공유 페이지 (서버 렌더 스냅샷 — 스크립트 0, 액션 0) ───────────
@@ -743,6 +745,43 @@ export async function buildServer(): Promise<FastifyInstance> {
     return { path: p, parent: pdirname(p), home: homedir(), isRepo: existsSync(pjoin(p, '.git')), dirs, error };
   });
+  // ─── File viewer (md/html/pdf/image/text 보기 + .env 등 작은 텍스트 편집) ──────
+  // 홈 디렉터리로 감옥(files.ts). owner 전용 도구지만 파일 *내용* 읽기는 browse 보다 위험 → 잼.
+  app.get('/api/fs/list', async (req) => {
+    const q = (req.query ?? {}) as { path?: string };
+    try { return await fsListDir(q.path); }
+    catch { return { path: q.path ?? '', parent: '', home: homedir(), entries: [], error: 'outside home or unreadable' }; }
+  });
+  app.get('/api/fs/find', async (req) => {
+    const q = (req.query ?? {}) as { path?: string; q?: string };
+    try { return await fsFindFiles(q.path, q.q ?? ''); }
+    catch { return { root: q.path ?? '', q: q.q ?? '', results: [], error: 'outside home or unreadable' }; }
+  });
+  app.get('/api/fs/read', async (req, reply) => {
+    const q = (req.query ?? {}) as { path?: string };
+    if (!q.path) return reply.code(400).send({ error: 'path required' });
+    try { return await fsReadForView(q.path); }
+    catch (e: any) { return reply.code(400).send({ error: String(e?.message || e) }); }
+  });
+  app.get('/api/fs/raw', async (req, reply) => {
+    const q = (req.query ?? {}) as { path?: string };
+    if (!q.path) return reply.code(400).send({ error: 'path required' });
+    try {
+      const { name, mime, buf } = await fsReadRaw(q.path);
+      // inline so the browser/Electron renders (PDF plugin, <img>, sandboxed <iframe>) instead of downloading
+      return reply.type(mime)
+        .header('content-disposition', 'inline; filename="' + name.replace(/[^\w.\- ]/g, '_') + '"')
+        .header('x-content-type-options', 'nosniff')
+        .send(buf);
+    } catch (e: any) { return reply.code(400).send({ error: String(e?.message || e) }); }
+  });
+  app.post('/api/fs/write', async (req, reply) => {
+    const b = (req.body ?? {}) as { path?: string; content?: string };
+    if (!b.path || typeof b.content !== 'string') return reply.code(400).send({ error: 'path and content required' });
+    try { return await fsWriteText(b.path, b.content); }
+    catch (e: any) { return reply.code(400).send({ error: String(e?.message || e) }); }
+  });
   // ─── Design Mode ───────────────────────────────────────────────
   // 캡처 키: 인증 off 면 자유, on 이면 ?k=<COXPIT_AUTH_PASS> (북마클릿은 basic 헤더 불가)
   const captureKeyOk = (req: { query?: unknown }): boolean => {
@@ -964,6 +1003,15 @@ export async function buildServer(): Promise<FastifyInstance> {
     return res;
   });
+  // 세션 삭제(tmux 종료 + 레코드 제거, 폴더 보존). sessions 버킷 run 에만 허용.
+  app.delete('/api/runs/:id', async (req, reply) => {
+    const id = Number((req.params as { id: string }).id);
+    if (!Number.isInteger(id)) return reply.code(400).send({ error: 'bad id' });
+    const res = await deleteSession(id);
+    if (!res.ok) return reply.code(res.detail === 'not found' ? 404 : 400).send({ error: res.detail });
+    return res;
+  });
   // v5.1 Part C foundation — resolve the land target + base drift for a run.
   // ?fetch=1 refreshes the remote first (network) so ahead/behind are current.
   app.get('/api/runs/:id/land-target', async (req, reply) => {