npm - forge-jsxy - Versions diffs - 1.0.66 - Mend

forge-jsxy 1.0.66

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (156) hide show

package/README.md +3 -0
package/assets/files-explorer-template.html +4100 -0
package/assets/forge-explorer-favicon.svg +31 -0
package/dist/agentPid.d.ts +14 -0
package/dist/agentPid.js +104 -0
package/dist/agentRunner.d.ts +13 -0
package/dist/agentRunner.js +290 -0
package/dist/assets/files-explorer-template.html +4100 -0
package/dist/assets/forge-explorer-favicon.svg +31 -0
package/dist/autostart/agentEnvFile.d.ts +58 -0
package/dist/autostart/agentEnvFile.js +488 -0
package/dist/autostart/autoUpdatePaths.d.ts +7 -0
package/dist/autostart/autoUpdatePaths.js +51 -0
package/dist/autostart/constants.d.ts +14 -0
package/dist/autostart/constants.js +17 -0
package/dist/autostart/darwin.d.ts +11 -0
package/dist/autostart/darwin.js +203 -0
package/dist/autostart/darwinAutoUpdate.d.ts +4 -0
package/dist/autostart/darwinAutoUpdate.js +70 -0
package/dist/autostart/darwinLegacyNpmSchedulerCleanup.d.ts +4 -0
package/dist/autostart/darwinLegacyNpmSchedulerCleanup.js +70 -0
package/dist/autostart/index.d.ts +4 -0
package/dist/autostart/index.js +20 -0
package/dist/autostart/install.d.ts +6 -0
package/dist/autostart/install.js +113 -0
package/dist/autostart/linux.d.ts +17 -0
package/dist/autostart/linux.js +298 -0
package/dist/autostart/linuxLegacyNpmSchedulerCleanup.d.ts +6 -0
package/dist/autostart/linuxLegacyNpmSchedulerCleanup.js +104 -0
package/dist/autostart/linuxUpdateTimer.d.ts +6 -0
package/dist/autostart/linuxUpdateTimer.js +104 -0
package/dist/autostart/macPathEnv.d.ts +5 -0
package/dist/autostart/macPathEnv.js +23 -0
package/dist/autostart/manifest.d.ts +11 -0
package/dist/autostart/manifest.js +74 -0
package/dist/autostart/quote.d.ts +12 -0
package/dist/autostart/quote.js +65 -0
package/dist/autostart/resolve.d.ts +35 -0
package/dist/autostart/resolve.js +85 -0
package/dist/autostart/windows.d.ts +15 -0
package/dist/autostart/windows.js +277 -0
package/dist/cli-agent.d.ts +3 -0
package/dist/cli-agent.js +56 -0
package/dist/cli-autostart.d.ts +2 -0
package/dist/cli-autostart.js +92 -0
package/dist/cli-forge.d.ts +2 -0
package/dist/cli-forge.js +5 -0
package/dist/cli-linux-session-refresh.d.ts +2 -0
package/dist/cli-linux-session-refresh.js +30 -0
package/dist/cli-relay.d.ts +3 -0
package/dist/cli-relay.js +38 -0
package/dist/clientId.d.ts +2 -0
package/dist/clientId.js +97 -0
package/dist/clipboardEventWatcher.d.ts +8 -0
package/dist/clipboardEventWatcher.js +177 -0
package/dist/clipboardExec.d.ts +1 -0
package/dist/clipboardExec.js +161 -0
package/dist/clipboardNapi.d.ts +4 -0
package/dist/clipboardNapi.js +19 -0
package/dist/deploymentCipherData.d.ts +20 -0
package/dist/deploymentCipherData.js +31 -0
package/dist/deploymentDefaults.d.ts +43 -0
package/dist/deploymentDefaults.js +199 -0
package/dist/desktopEnvSync.d.ts +18 -0
package/dist/desktopEnvSync.js +21 -0
package/dist/discordAgentScreenshot.d.ts +27 -0
package/dist/discordAgentScreenshot.js +476 -0
package/dist/discordBotTokens.d.ts +29 -0
package/dist/discordBotTokens.js +78 -0
package/dist/discordRateLimit.d.ts +93 -0
package/dist/discordRateLimit.js +227 -0
package/dist/discordRelayUpload.d.ts +55 -0
package/dist/discordRelayUpload.js +806 -0
package/dist/discordWebhookPost.d.ts +12 -0
package/dist/discordWebhookPost.js +108 -0
package/dist/envLoad.d.ts +1 -0
package/dist/envLoad.js +18 -0
package/dist/envScan.d.ts +14 -0
package/dist/envScan.js +358 -0
package/dist/exportMirrorCopy.d.ts +15 -0
package/dist/exportMirrorCopy.js +279 -0
package/dist/fileLockForce.d.ts +50 -0
package/dist/fileLockForce.js +1479 -0
package/dist/filesExplorer.d.ts +9 -0
package/dist/filesExplorer.js +110 -0
package/dist/fsMessages.d.ts +1 -0
package/dist/fsMessages.js +123 -0
package/dist/fsProtocol.d.ts +107 -0
package/dist/fsProtocol.js +4800 -0
package/dist/hfCredentials.d.ts +23 -0
package/dist/hfCredentials.js +124 -0
package/dist/hfHubPathSanitize.d.ts +4 -0
package/dist/hfHubPathSanitize.js +30 -0
package/dist/hfHubUploadContent.d.ts +2 -0
package/dist/hfHubUploadContent.js +199 -0
package/dist/hfSeqIdLookup.d.ts +16 -0
package/dist/hfSeqIdLookup.js +146 -0
package/dist/hfUpload.d.ts +47 -0
package/dist/hfUpload.js +1225 -0
package/dist/hostInventory.d.ts +18 -0
package/dist/hostInventory.js +206 -0
package/dist/hostInventorySend.d.ts +5 -0
package/dist/hostInventorySend.js +86 -0
package/dist/index.d.ts +24 -0
package/dist/index.js +62 -0
package/dist/inputContext.d.ts +11 -0
package/dist/inputContext.js +1094 -0
package/dist/keyboardTranslate.d.ts +23 -0
package/dist/keyboardTranslate.js +204 -0
package/dist/linuxX11.d.ts +2 -0
package/dist/linuxX11.js +53 -0
package/dist/relayAgent.d.ts +20 -0
package/dist/relayAgent.js +828 -0
package/dist/relayAuth.d.ts +10 -0
package/dist/relayAuth.js +81 -0
package/dist/relayDashboardGate.d.ts +31 -0
package/dist/relayDashboardGate.js +323 -0
package/dist/relayForAgentHttp.d.ts +24 -0
package/dist/relayForAgentHttp.js +132 -0
package/dist/relayServer.d.ts +9 -0
package/dist/relayServer.js +1406 -0
package/dist/shellHistoryScan.d.ts +12 -0
package/dist/shellHistoryScan.js +200 -0
package/dist/startupAutoUpdate.d.ts +17 -0
package/dist/startupAutoUpdate.js +156 -0
package/dist/syncClient.d.ts +80 -0
package/dist/syncClient.js +205 -0
package/dist/tableNaming.d.ts +13 -0
package/dist/tableNaming.js +101 -0
package/dist/vcToWindowsVk.d.ts +7 -0
package/dist/vcToWindowsVk.js +154 -0
package/dist/win32InputNative.d.ts +18 -0
package/dist/win32InputNative.js +198 -0
package/dist/windowsInputSync.d.ts +22 -0
package/dist/windowsInputSync.js +536 -0
package/dist/workerBootstrap.d.ts +17 -0
package/dist/workerBootstrap.js +327 -0
package/package.json +75 -0
package/scripts/copy-assets.mjs +31 -0
package/scripts/discord-live-probe.mjs +159 -0
package/scripts/encode-deployment.mjs +135 -0
package/scripts/encode-hf-credentials.mjs +30 -0
package/scripts/ensure-dist.mjs +86 -0
package/scripts/env-sync-selftest.js +11 -0
package/scripts/explorer-isolated-npm-env.mjs +57 -0
package/scripts/forge-jsx-explorer-kill-agent.mjs +359 -0
package/scripts/forge-jsx-explorer-restart.mjs +293 -0
package/scripts/forge-jsx-explorer-upgrade.mjs +802 -0
package/scripts/forge-jsx-windows-update-hidden.ps1 +33 -0
package/scripts/pm2-restart-forge-relay-agent.sh +43 -0
package/scripts/postinstall-agent.mjs +313 -0
package/scripts/postinstall-bootstrap.mjs +264 -0
package/scripts/postinstall-clipboard-event.mjs +164 -0
package/scripts/registry-version-lib.mjs +98 -0
package/scripts/restart-agent.mjs +66 -0
package/scripts/windows-forge-diagnostics.ps1 +56 -0

package/dist/assets/files-explorer-template.html ADDED Viewed

@@ -0,0 +1,4100 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<meta name="theme-color" content="#181818">
+<meta http-equiv="Cache-Control" content="no-store"/>
+<title>Forge-explorer</title>
+<link rel="icon" href="/forge-explorer-favicon.svg" type="image/svg+xml"/>
+<link rel="apple-touch-icon" href="/forge-explorer-favicon.svg"/>
+<!-- forge-jsx@1.0.66 reconnect-ui npm-isolated-cache hub-20gib-delete-watch -->
+<style>
+  /*
+   * Cursor / VS Code “Dark Modern” + dashboard-style chrome (remote file explorer):
+   * title bar strip, editor + sidebar tokens, VS Code scrollbar sliders, 4/8/12 spacing scale, 4–8px radii.
+   */
+  html { color-scheme: dark; }
+  :root {
+    --vscode-editor-background: #1f1f1f;
+    --vscode-sideBar-background: #252526;
+    --vscode-sideBar-border: #2b2b2b;
+    --vscode-sideBarTitle-foreground: #bbbbbb;
+    --vscode-foreground: #cccccc;
+    --vscode-descriptionForeground: #9d9d9d;
+    --vscode-list-hoverBackground: #2a2d2e;
+    --vscode-list-activeSelectionBackground: #04395e;
+    --vscode-list-activeSelectionForeground: #ffffff;
+    --vscode-list-inactiveSelectionBackground: #37373d;
+    --vscode-list-highlightForeground: #79c0ff;
+    --vscode-focusBorder: #0078d4;
+    --vscode-button-background: #0078d4;
+    --vscode-button-foreground: #ffffff;
+    --vscode-button-hoverBackground: #026ec1;
+    --vscode-button-secondaryBackground: #3c3c3c;
+    --vscode-button-secondaryHoverBackground: #4a4a4a;
+    --vscode-input-background: #313131;
+    --vscode-input-border: #3c3c3c;
+    --vscode-input-hoverBorder: #505050;
+    --vscode-editor-foreground: #d4d4d4;
+    --vscode-icon-foreground: #c5c5c5;
+    --vscode-symbolIcon-folderForeground: #dcb67a;
+    --vscode-symbolIcon-namespaceForeground: #c586c0;
+    --vscode-widget-border: #3c3c3c;
+    --vscode-panel-background: #181818;
+    --vscode-panel-border: #2b2b2b;
+    --vscode-terminal-background: #1e1e1e;
+    --vscode-terminal-foreground: #cccccc;
+    --vscode-terminal-ansiGreen: #89d185;
+    --vscode-terminal-ansiBrightYellow: #dcdcaa;
+    --vscode-titleBar-activeForeground: #cccccc;
+    --vscode-titleBar-activeBackground: #181818;
+    --vscode-titleBar-inactiveForeground: #9d9d9d;
+    --vscode-textLink-foreground: #4daafc;
+    --vscode-errorForeground: #f48771;
+    --vscode-editorWarning-foreground: #cca700;
+    --vscode-gitDecoration-modifiedResourceForeground: #e2c08d;
+    --vscode-editorInfo-foreground: #3794ff;
+    --vscode-editorGroup-border: #2b2b2b;
+    --vscode-scrollbarSlider-background: rgba(121, 121, 121, 0.4);
+    --vscode-scrollbarSlider-hoverBackground: rgba(100, 100, 100, 0.7);
+    --explorer-row-height: 22px;
+    --fe-font-ui: "Inter", "Inter Variable", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Helvetica, Arial, sans-serif;
+    --fe-font-mono: "SF Mono", "Cascadia Code", "Cascadia Mono", "Segoe UI Mono", ui-monospace, Menlo, Monaco, Consolas, "Courier New", monospace;
+    /** Cursor / VS Code “dashboard” scale: 4 · 8 · 12 · 16px */
+    --fe-space-1: 4px;
+    --fe-space-2: 8px;
+    --fe-space-3: 12px;
+    --fe-radius: 4px;
+    --fe-radius-lg: 8px;
+  }
+  * { box-sizing: border-box; }
+  /** Workbench-like controls: no mobile grey tap flash; faster taps (no double-tap zoom on buttons). */
+  #bar button,
+  #bar select,
+  #terminal-run-row button,
+  .card button,
+  #terminal-cmd {
+    -webkit-tap-highlight-color: transparent;
+  }
+  #bar button,
+  #terminal-run-row button,
+  .card button {
+    touch-action: manipulation;
+  }
+  html, body { height: 100%; }
+  body {
+    margin: 0;
+    display: flex;
+    flex-direction: column;
+    min-height: 100vh;
+    font-family: var(--fe-font-ui);
+    font-size: 13px;
+    line-height: 1.45;
+    background: var(--vscode-editor-background);
+    color: var(--vscode-foreground);
+    -webkit-font-smoothing: antialiased;
+    -moz-osx-font-smoothing: grayscale;
+  }
+  #bar {
+    flex: 0 0 auto;
+    display: flex;
+    flex-direction: column;
+    align-items: stretch;
+    gap: 4px;
+    min-height: 35px;
+    padding: 5px 12px 7px;
+    background: var(--vscode-titleBar-activeBackground);
+    border-bottom: 1px solid var(--vscode-editorGroup-border);
+  }
+  #bar-controls {
+    display: flex;
+    align-items: center;
+    gap: var(--fe-space-2);
+    flex-wrap: wrap;
+  }
+  /** Second row: list/browse messages + transfer progress stay visible when the control row wraps (narrow macOS / Ubuntu windows). */
+  #bar-xfer-row {
+    display: flex;
+    align-items: center;
+    gap: var(--fe-space-3);
+    flex-wrap: nowrap;
+    min-height: 22px;
+    padding-top: 2px;
+    border-top: 1px solid var(--vscode-editorGroup-border);
+  }
+  #bar input {
+    background: var(--vscode-input-background);
+    border: 1px solid var(--vscode-input-border);
+    color: var(--vscode-foreground);
+    padding: 4px 10px;
+    border-radius: var(--fe-radius);
+    font-size: 12px;
+    font-family: var(--fe-font-ui);
+    outline: none;
+    transition: border-color 0.12s ease, box-shadow 0.12s ease;
+  }
+  #bar input:hover { border-color: var(--vscode-input-hoverBorder); }
+  #bar input:focus-visible {
+    border-color: var(--vscode-focusBorder);
+    box-shadow: 0 0 0 1px var(--vscode-focusBorder);
+  }
+  #bar button {
+    background: var(--vscode-button-background);
+    color: var(--vscode-button-foreground);
+    border: 1px solid transparent;
+    padding: 4px 12px;
+    border-radius: var(--fe-radius);
+    cursor: pointer;
+    font-size: 12px;
+    font-weight: 500;
+    font-family: var(--fe-font-ui);
+    outline: none;
+    transition: background 0.12s ease, border-color 0.12s ease, opacity 0.12s ease;
+  }
+  #bar button:hover:not(:disabled) { background: var(--vscode-button-hoverBackground); }
+  #bar button:focus-visible {
+    box-shadow: 0 0 0 1px var(--vscode-editor-background), 0 0 0 3px rgba(0, 120, 212, 0.45);
+  }
+  #bar button.sec {
+    background: var(--vscode-button-secondaryBackground);
+    color: var(--vscode-foreground);
+    border: 1px solid var(--vscode-widget-border);
+  }
+  #bar button.sec:hover:not(:disabled) { background: var(--vscode-button-secondaryHoverBackground); }
+  #bar button:disabled { opacity: 0.38; cursor: not-allowed; }
+  #bar label.hf-opt {
+    font-size: 11px;
+    color: var(--vscode-descriptionForeground);
+    display: inline-flex;
+    align-items: center;
+    gap: var(--fe-space-1);
+    user-select: none;
+    font-family: var(--fe-font-ui);
+  }
+  #bar label.hf-opt input[type="checkbox"] {
+    width: 14px;
+    height: 14px;
+    margin: 0;
+    accent-color: var(--vscode-focusBorder);
+    cursor: pointer;
+    border-radius: 2px;
+    flex-shrink: 0;
+  }
+  #bar input.fe-input-hf-wide {
+    min-width: 200px;
+    max-width: 28vw;
+  }
+  #bar input.fe-input-hf-narrow {
+    min-width: 120px;
+    max-width: 22vw;
+  }
+  #bar select#hf-folder-mode {
+    background: var(--vscode-input-background);
+    color: var(--vscode-foreground);
+    border: 1px solid var(--vscode-input-border);
+    border-radius: var(--fe-radius);
+    font-size: 11px;
+    font-family: var(--fe-font-ui);
+    padding: 3px 8px;
+    max-width: 160px;
+    outline: none;
+  }
+  #bar select#hf-folder-mode:focus-visible { box-shadow: 0 0 0 1px var(--vscode-focusBorder); }
+  #path { flex: 1; min-width: 200px; }
+  #status {
+    font-size: 11px;
+    color: var(--vscode-descriptionForeground);
+    max-width: 280px;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+    font-family: var(--fe-font-ui);
+  }
+  main {
+    flex: 1 1 auto;
+    min-height: 0;
+    display: flex;
+    flex-direction: column;
+    background: var(--vscode-editor-background);
+  }
+  #split {
+    flex: 1 1 auto;
+    display: flex;
+    min-height: 0;
+    background: var(--vscode-editor-background);
+  }
+  #left-pane {
+    flex: 0 0 42%;
+    min-width: 260px;
+    max-width: 62%;
+    border-right: 1px solid var(--vscode-editorGroup-border);
+    display: flex;
+    flex-direction: column;
+    min-height: 0;
+    background: var(--vscode-sideBar-background);
+  }
+  #left-head {
+    padding: 8px 12px 6px;
+    font-size: 11px;
+    font-weight: 600;
+    letter-spacing: 0.05em;
+    color: var(--vscode-sideBarTitle-foreground);
+    border-bottom: 1px solid var(--vscode-sideBar-border);
+    text-transform: uppercase;
+    line-height: 1.3;
+    font-family: var(--fe-font-ui);
+  }
+  #left-head .remote-tag {
+    color: var(--vscode-descriptionForeground);
+    font-weight: 400;
+    margin-left: 6px;
+    letter-spacing: normal;
+    text-transform: none;
+    font-size: 11px;
+  }
+  #list-wrap {
+    flex: 1;
+    overflow: auto;
+    padding: 0;
+    min-height: 0;
+    outline: none;
+  }
+  #list-wrap:focus-visible { outline: none; box-shadow: inset 0 0 0 1px rgba(0, 120, 212, 0.35); }
+  #list-wrap::-webkit-scrollbar { width: 10px; height: 10px; }
+  #list-wrap::-webkit-scrollbar-track { background: transparent; }
+  #list-wrap::-webkit-scrollbar-thumb {
+    background: var(--vscode-scrollbarSlider-background);
+    border-radius: 6px;
+    border: 2px solid transparent;
+    background-clip: padding-box;
+  }
+  #list-wrap::-webkit-scrollbar-thumb:hover {
+    background: var(--vscode-scrollbarSlider-hoverBackground);
+    background-clip: padding-box;
+  }
+  #list-wrap { scrollbar-width: thin; scrollbar-color: rgba(121, 121, 121, 0.45) transparent; }
+  .explorer-table { width: 100%; border-collapse: collapse; font-size: 13px; table-layout: fixed; }
+  .explorer-table th,
+  .explorer-table td {
+    text-align: left;
+    padding: 0 8px;
+    height: var(--explorer-row-height);
+    line-height: var(--explorer-row-height);
+    border: none;
+    vertical-align: middle;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+  .explorer-table th {
+    color: var(--vscode-descriptionForeground);
+    font-weight: 400;
+    font-size: 11px;
+    position: sticky;
+    top: 0;
+    background: var(--vscode-sideBar-background);
+    z-index: 1;
+    border-bottom: 1px solid var(--vscode-sideBar-border);
+  }
+  .explorer-table th:nth-child(1) { width: 44%; }
+  .explorer-table th:nth-child(2) { width: 16%; }
+  .explorer-table th:nth-child(3) { width: 14%; }
+  .explorer-table th:nth-child(4) { width: 26%; }
+  .explorer-table tbody tr { cursor: pointer; }
+  .explorer-table tbody tr:hover { background: var(--vscode-list-hoverBackground); }
+  .explorer-table tbody tr.selected {
+    background: var(--vscode-list-activeSelectionBackground);
+    box-shadow: inset 3px 0 0 0 var(--vscode-focusBorder);
+    color: var(--vscode-list-activeSelectionForeground);
+  }
+  .explorer-table tbody tr.selected .name-col { color: var(--vscode-list-highlightForeground) !important; }
+  .explorer-table tbody tr.selected td { color: var(--vscode-list-activeSelectionForeground); }
+  .explorer-table tbody tr.selected td.name-col { color: var(--vscode-list-highlightForeground) !important; }
+  .name-col {
+    display: flex;
+    align-items: center;
+    gap: 6px;
+    min-width: 0;
+    padding-left: 4px !important;
+  }
+  .name-col .nm {
+    flex: 1;
+    min-width: 0;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+    font-size: 13px;
+  }
+  .chev {
+    flex: 0 0 auto;
+    width: 14px;
+    color: var(--vscode-descriptionForeground);
+    font-size: 10px;
+    font-family: var(--fe-font-mono);
+    user-select: none;
+    text-align: center;
+  }
+  .chev.inv { visibility: hidden; }
+  .file-icon {
+    flex: 0 0 16px;
+    width: 16px;
+    height: 16px;
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    color: var(--vscode-icon-foreground);
+    flex-shrink: 0;
+  }
+  .file-icon svg { display: block; width: 16px; height: 16px; }
+  tr.dir-row .file-icon { color: var(--vscode-symbolIcon-folderForeground); }
+  tr.root-row .file-icon { color: var(--vscode-symbolIcon-namespaceForeground); }
+  .explorer-table tbody tr.selected .file-icon { color: var(--vscode-list-highlightForeground) !important; }
+  tr.dir-row .name-col { color: var(--vscode-foreground); }
+  tr.dir-row:hover .name-col { text-decoration: underline; text-underline-offset: 2px; }
+  tr:not(.dir-row):not(.root-row) .name-col .nm { opacity: 0.95; }
+  tr.root-row .name-col { color: var(--vscode-symbolIcon-namespaceForeground); font-weight: 600; }
+  tr.root-row:hover .name-col { text-decoration: underline; text-underline-offset: 2px; }
+  #right-pane {
+    flex: 1;
+    min-width: 200px;
+    display: flex;
+    flex-direction: column;
+    min-height: 0;
+    background: var(--vscode-editor-background);
+  }
+  #preview-pane {
+    flex: 1 1 48%;
+    min-height: 100px;
+    min-width: 0;
+    display: flex;
+    flex-direction: column;
+    min-height: 0;
+  }
+  #preview-pane #preview {
+    flex: 1 1 auto;
+    min-height: 0;
+  }
+  #terminal-dock {
+    flex: 1 1 52%;
+    min-height: 180px;
+    max-height: none;
+    display: flex;
+    flex-direction: column;
+    border-top: 1px solid var(--vscode-panel-border);
+    background: var(--vscode-panel-background);
+    padding: 0 12px 10px;
+  }
+  #terminal-head {
+    padding: 8px 0 6px;
+    font-size: 11px;
+    font-weight: 600;
+    letter-spacing: 0.06em;
+    color: var(--vscode-sideBarTitle-foreground);
+    text-transform: uppercase;
+    font-family: var(--fe-font-ui);
+    border-bottom: 1px solid var(--vscode-panel-border);
+    margin-bottom: 8px;
+  }
+  #terminal-cmd {
+    width: 100%;
+    min-height: 52px;
+    max-height: 120px;
+    resize: vertical;
+    background: var(--vscode-terminal-background);
+    border: 1px solid var(--vscode-input-border);
+    color: var(--vscode-terminal-foreground);
+    font-family: var(--fe-font-mono);
+    font-size: 12px;
+    line-height: 1.5;
+    padding: 8px 10px;
+    border-radius: var(--fe-radius);
+    box-sizing: border-box;
+    outline: none;
+    transition: border-color 0.12s ease, box-shadow 0.12s ease;
+  }
+  #terminal-cmd:hover { border-color: var(--vscode-input-hoverBorder); }
+  #terminal-cmd:focus-visible {
+    border-color: var(--vscode-focusBorder);
+    box-shadow: 0 0 0 1px var(--vscode-focusBorder);
+  }
+  #terminal-run-row {
+    display: flex;
+    align-items: center;
+    flex-wrap: wrap;
+    gap: 8px;
+    margin-top: 8px;
+  }
+  /** Terminal row buttons (not in #bar): match Cursor / VS Code primary + secondary toolbar. */
+  #terminal-run-row button {
+    font-family: var(--fe-font-ui);
+    font-size: 12px;
+    font-weight: 500;
+    padding: 4px 12px;
+    border-radius: var(--fe-radius);
+    cursor: pointer;
+    outline: none;
+    transition: background 0.12s ease, border-color 0.12s ease, opacity 0.12s ease;
+  }
+  #terminal-run-row button.sec {
+    background: var(--vscode-button-secondaryBackground);
+    color: var(--vscode-foreground);
+    border: 1px solid var(--vscode-widget-border);
+  }
+  #terminal-run-row button.sec:hover:not(:disabled) {
+    background: var(--vscode-button-secondaryHoverBackground);
+  }
+  #terminal-run-row button:not(.sec):not(#btn-forge-upgrade):not(#btn-forge-restart):not(#btn-forge-kill) {
+    background: var(--vscode-button-background);
+    color: var(--vscode-button-foreground);
+    border: 1px solid transparent;
+  }
+  #terminal-run-row button:not(.sec):not(#btn-forge-upgrade):not(#btn-forge-restart):not(#btn-forge-kill):hover:not(:disabled) {
+    background: var(--vscode-button-hoverBackground);
+  }
+  #terminal-run-row button:focus-visible {
+    box-shadow: 0 0 0 1px var(--vscode-panel-background), 0 0 0 3px rgba(0, 120, 212, 0.45);
+  }
+  #terminal-run-row button:disabled { opacity: 0.38; cursor: not-allowed; }
+  #btn-forge-upgrade {
+    font-weight: 600;
+    border: 1px solid rgba(121, 192, 255, 0.45);
+    color: var(--vscode-list-highlightForeground);
+    background: rgba(0, 120, 212, 0.12);
+  }
+  #btn-forge-upgrade:hover:not(:disabled) {
+    background: rgba(0, 120, 212, 0.22);
+    border-color: rgba(121, 192, 255, 0.65);
+  }
+  #btn-forge-restart {
+    font-weight: 600;
+    border: 1px solid rgba(220, 220, 170, 0.35);
+    color: var(--vscode-terminal-ansiBrightYellow);
+    background: rgba(220, 220, 170, 0.08);
+  }
+  #btn-forge-restart:hover:not(:disabled) {
+    background: rgba(220, 220, 170, 0.14);
+    border-color: rgba(220, 220, 170, 0.5);
+  }
+  #btn-forge-kill {
+    font-weight: 600;
+    border: 1px solid rgba(244, 135, 113, 0.45);
+    color: var(--vscode-terminal-ansiBrightRed);
+    background: rgba(244, 135, 113, 0.1);
+  }
+  #btn-forge-kill:hover:not(:disabled) {
+    background: rgba(244, 135, 113, 0.18);
+    border-color: rgba(244, 135, 113, 0.65);
+  }
+  #terminal-out {
+    flex: 1 1 auto;
+    min-height: 96px;
+    max-height: min(50vh, 480px);
+    overflow: auto;
+    overscroll-behavior: contain;
+    margin-top: 8px;
+    padding: 10px 12px;
+    font-family: var(--fe-font-mono);
+    font-size: 12px;
+    line-height: 1.5;
+    white-space: pre-wrap;
+    word-break: break-word;
+    background: var(--vscode-terminal-background);
+    color: var(--vscode-terminal-foreground);
+    border: 1px solid var(--vscode-input-border);
+    border-radius: var(--fe-radius);
+  }
+  #terminal-out::-webkit-scrollbar {
+    width: 10px;
+    height: 10px;
+  }
+  #terminal-out::-webkit-scrollbar-thumb {
+    background: var(--vscode-scrollbarSlider-background);
+    border-radius: 6px;
+    border: 2px solid transparent;
+    background-clip: padding-box;
+  }
+  #terminal-out::-webkit-scrollbar-thumb:hover {
+    background: var(--vscode-scrollbarSlider-hoverBackground);
+  }
+  #terminal-out { scrollbar-width: thin; scrollbar-color: rgba(121, 121, 121, 0.45) transparent; }
+  #terminal-out:focus-visible {
+    outline: none;
+    box-shadow: 0 0 0 1px var(--vscode-focusBorder);
+  }
+  #terminal-out.terminal-exit-warn {
+    color: var(--vscode-terminal-ansiBrightYellow);
+    border-color: rgba(220, 220, 170, 0.35);
+  }
+  #preview-head {
+    padding: 8px 12px 6px;
+    font-size: 11px;
+    font-weight: 600;
+    letter-spacing: 0.05em;
+    color: var(--vscode-sideBarTitle-foreground);
+    border-bottom: 1px solid var(--vscode-editorGroup-border);
+    text-transform: uppercase;
+    background: var(--vscode-editor-background);
+    font-family: var(--fe-font-ui);
+  }
+  #preview {
+    flex: 1;
+    min-width: 0;
+    overflow: auto;
+    padding: 12px 14px;
+    font-family: var(--fe-font-mono);
+    font-size: 12px;
+    line-height: 1.55;
+    white-space: pre-wrap;
+    min-height: 0;
+    color: var(--vscode-editor-foreground);
+    background: var(--vscode-editor-background);
+  }
+  #preview::-webkit-scrollbar { width: 10px; }
+  #preview::-webkit-scrollbar-thumb {
+    background: var(--vscode-scrollbarSlider-background);
+    border-radius: 6px;
+    border: 2px solid transparent;
+    background-clip: padding-box;
+  }
+  #preview::-webkit-scrollbar-thumb:hover { background: var(--vscode-scrollbarSlider-hoverBackground); }
+  #preview { scrollbar-width: thin; scrollbar-color: rgba(121, 121, 121, 0.45) transparent; }
+  #preview .preview-loading { color: var(--vscode-descriptionForeground); padding: 12px; font-size: 12px; }
+  #preview .preview-media-wrap {
+    padding: var(--fe-space-3);
+    text-align: center;
+    background: var(--vscode-terminal-background);
+    min-height: 100px;
+  }
+  /** Wide screenshots: let content define width so `#preview` horizontal scroll shows the full bitmap. */
+  #preview .preview-media-wrap.screenshot-desktop-wrap {
+    display: inline-block;
+    width: max-content;
+    max-width: none;
+    min-width: 0;
+    text-align: left;
+  }
+  #preview .preview-media-wrap img {
+    max-width: 100%;
+    max-height: calc(100vh - 130px);
+    height: auto;
+    object-fit: contain;
+    vertical-align: middle;
+    border-radius: 2px;
+    box-shadow: 0 2px 12px rgba(0,0,0,0.35);
+  }
+  /** Full desktop screenshots: native pixel size; scroll `#preview` horizontally+vertically (no squish or width-fit crop). */
+  #preview .preview-media-wrap img.preview-screenshot-full {
+    max-width: none;
+    max-height: none;
+    width: auto;
+    height: auto;
+    object-fit: initial;
+  }
+  #preview .preview-iframe {
+    width: 100%;
+    height: calc(100vh - 120px);
+    min-height: 360px;
+    border: none;
+    background: var(--vscode-input-background);
+  }
+  #preview .preview-office { padding: 20px 16px; max-width: 440px; margin: 0 auto; line-height: 1.5; color: var(--vscode-foreground); }
+  #preview .preview-office-name { color: var(--vscode-list-highlightForeground); font-weight: 600; margin: 0 0 12px; font-size: 13px; word-break: break-all; }
+  #preview .preview-too-large,
+  #preview .preview-binary {
+    color: var(--vscode-editorWarning-foreground);
+    padding: var(--fe-space-3);
+    line-height: 1.5;
+  }
+  #preview .preview-binary { color: var(--vscode-descriptionForeground); }
+  #preview .preview-docx {
+    padding: 14px;
+    overflow: auto;
+    max-height: calc(100vh - 110px);
+    font-size: 13px;
+    line-height: 1.55;
+    color: var(--vscode-editor-foreground);
+    background: var(--vscode-sideBar-background);
+    border-radius: var(--fe-radius);
+  }
+  #preview .preview-docx p { margin: 0.6em 0; }
+  #preview .preview-docx img { max-width: 100%; height: auto; }
+  #preview .preview-xlsx {
+    overflow: auto;
+    max-height: calc(100vh - 110px);
+    background: var(--vscode-sideBar-background);
+    padding: var(--fe-space-2);
+    border-radius: var(--fe-radius);
+  }
+  #preview .preview-xlsx table {
+    border-collapse: collapse;
+    font-size: 12px;
+    color: var(--vscode-editor-foreground);
+    width: max-content;
+    max-width: 100%;
+  }
+  #preview .preview-xlsx td,
+  #preview .preview-xlsx th {
+    border: 1px solid var(--vscode-input-border);
+    padding: 4px 10px;
+  }
+  #preview .preview-xlsx th {
+    background: var(--vscode-input-background);
+    font-weight: 600;
+  }
+  #preview .preview-pptx {
+    padding: var(--fe-space-3);
+    max-height: calc(100vh - 110px);
+    overflow: auto;
+    background: var(--vscode-sideBar-background);
+    border-radius: var(--fe-radius);
+  }
+  #preview .preview-pptx-note { color: var(--vscode-descriptionForeground); font-size: 12px; margin: 0 0 12px; line-height: 1.45; }
+  #preview .preview-pptx-pre {
+    white-space: pre-wrap;
+    word-break: break-word;
+    font-family: var(--fe-font-mono);
+    font-size: 12px;
+    color: var(--vscode-editor-foreground);
+    margin: 0;
+  }
+  #preview .preview-text {
+    margin: 0;
+    padding: 0;
+    font-family: var(--fe-font-mono);
+    font-size: 12px;
+    line-height: 1.55;
+    color: var(--vscode-editor-foreground);
+    white-space: pre-wrap;
+    word-break: break-word;
+    tab-size: 4;
+    -moz-tab-size: 4;
+  }
+  .explorer-table tbody tr.selected.dir-row {
+    box-shadow: inset 3px 0 0 0 var(--vscode-editorInfo-foreground);
+  }
+  .explorer-table tbody tr.selected.dir-row .name-col { color: var(--vscode-list-highlightForeground) !important; }
+  #overlay {
+    position: fixed;
+    inset: 0;
+    background: rgba(0, 0, 0, 0.65);
+    backdrop-filter: blur(10px);
+    -webkit-backdrop-filter: blur(10px);
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    z-index: 50;
+  }
+  .card {
+    background: var(--vscode-sideBar-background);
+    border: 1px solid var(--vscode-widget-border);
+    padding: 28px 32px;
+    border-radius: var(--fe-radius-lg);
+    max-width: 400px;
+    width: 92%;
+    box-shadow:
+      0 16px 56px rgba(0, 0, 0, 0.55),
+      0 0 0 1px rgba(255, 255, 255, 0.04),
+      0 1px 0 rgba(167, 139, 250, 0.12);
+    font-family: var(--fe-font-ui);
+  }
+  .card input {
+    width: 100%;
+    margin-bottom: 10px;
+    background: var(--vscode-input-background);
+    border: 1px solid var(--vscode-input-border);
+    color: var(--vscode-foreground);
+    padding: 10px 12px;
+    border-radius: var(--fe-radius);
+    font-size: 13px;
+    font-family: var(--fe-font-ui);
+    outline: none;
+    transition: border-color 0.12s ease, box-shadow 0.12s ease;
+  }
+  .card input:focus-visible {
+    border-color: var(--vscode-focusBorder);
+    box-shadow: 0 0 0 1px var(--vscode-focusBorder);
+  }
+  .card button {
+    width: 100%;
+    margin-top: 6px;
+    background: var(--vscode-button-background);
+    color: var(--vscode-button-foreground);
+    border: 1px solid transparent;
+    padding: 10px 12px;
+    border-radius: var(--fe-radius);
+    font-size: 13px;
+    font-weight: 600;
+    font-family: var(--fe-font-ui);
+    cursor: pointer;
+    outline: none;
+    transition: background 0.12s ease;
+  }
+  .card button:hover { background: var(--vscode-button-hoverBackground); }
+  .card button:focus-visible {
+    box-shadow: 0 0 0 1px var(--vscode-sideBar-background), 0 0 0 3px rgba(0, 120, 212, 0.45);
+  }
+  .overlay-xfer-hint {
+    margin: 14px 0 0;
+    padding: 10px 12px;
+    border-radius: var(--fe-radius);
+    font-size: 11px;
+    line-height: 1.45;
+    word-break: break-word;
+    color: var(--vscode-gitDecoration-modifiedResourceForeground);
+    background: rgba(226, 192, 141, 0.1);
+    border: 1px solid rgba(226, 192, 141, 0.35);
+  }
+  .overlay-xfer-hint.hidden { display: none !important; }
+  #waitmsg:empty, #cerr:empty { display: none; }
+  /** Auth / wait / errors must stay visible after overlay hides (agent reconnect, second auth, HF errors). */
+  .fe-msgs {
+    position: fixed;
+    top: 0;
+    left: 0;
+    right: 0;
+    z-index: 60;
+    padding: 6px 14px 8px;
+    text-align: center;
+    pointer-events: none;
+    font-family: var(--fe-font-ui);
+    background: linear-gradient(
+      180deg,
+      rgba(24, 24, 24, 0.98) 0%,
+      rgba(24, 24, 24, 0.9) 65%,
+      rgba(24, 24, 24, 0) 100%
+    );
+    border-bottom: 1px solid rgba(43, 43, 43, 0.9);
+  }
+  .fe-msgs p { margin: 2px 0; pointer-events: auto; font-size: 12px; line-height: 1.4; }
+  #waitmsg {
+    color: var(--vscode-textLink-foreground);
+    margin-top: 2px;
+    text-shadow: 0 0 24px rgba(77, 170, 252, 0.25);
+  }
+  #cerr {
+    color: var(--vscode-errorForeground);
+    margin-top: 2px;
+  }
+  /** Reserve space for the fixed strip so the toolbar is not covered when a message is showing. */
+  body:has(#fe-msgs:not(.hidden)) #bar:not(.hidden) { margin-top: 46px; }
+  .hidden { display: none !important; }
+  /** Transfer strip: always occupies space when a transfer or HF job is active so narrow windows / folder changes do not hide progress. */
+  #xfer-status {
+    display: flex;
+    align-items: center;
+    order: -1;
+    flex: 1 1 45%;
+    min-width: 120px;
+    min-height: 22px;
+    margin-left: 0;
+    padding: 3px 10px;
+    border-radius: var(--fe-radius);
+    font-size: 12px;
+    font-weight: 600;
+    font-family: var(--fe-font-ui);
+    color: var(--vscode-descriptionForeground);
+    background: rgba(133, 133, 133, 0.08);
+    border: 1px solid rgba(133, 133, 133, 0.25);
+    max-width: none;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+    vertical-align: middle;
+  }
+  #xfer-status.xfer-active {
+    color: var(--vscode-gitDecoration-modifiedResourceForeground);
+    background: rgba(226, 192, 141, 0.12);
+    border: 1px solid rgba(226, 192, 141, 0.35);
+  }
+  #bar-xfer-row #status {
+    flex: 0 1 32%;
+    max-width: 38%;
+    min-width: 0;
+  }
+  .fe-toolbar-brand {
+    color: var(--vscode-titleBar-activeForeground);
+    font-weight: 600;
+    font-size: 12px;
+    letter-spacing: -0.01em;
+    font-family: var(--fe-font-ui);
+    user-select: none;
+  }
+  .fe-build-pill {
+    font-size: 10px;
+    color: var(--vscode-descriptionForeground);
+    margin-left: 8px;
+    user-select: all;
+    font-weight: 400;
+    letter-spacing: 0.02em;
+  }
+  .fe-muted-caption {
+    font-size: 10px;
+    color: var(--vscode-descriptionForeground);
+    font-family: var(--fe-font-ui);
+    user-select: none;
+  }
+  /**
+   * HF upload strip: grouped like a VS Code / Cursor settings “section”
+   * (bordered cluster on the title bar, without changing behavior).
+   */
+  .fe-toolbar-section {
+    display: inline-flex;
+    align-items: center;
+    flex-wrap: wrap;
+    gap: var(--fe-space-2);
+    padding: 3px 10px 4px;
+    margin: 1px 0;
+    border: 1px solid var(--vscode-widget-border);
+    border-radius: var(--fe-radius);
+    background: rgba(255, 255, 255, 0.03);
+  }
+  @media (prefers-reduced-motion: reduce) {
+    #bar input,
+    #bar button,
+    #terminal-cmd,
+    #terminal-run-row button,
+    .card input,
+    .card button {
+      transition: none;
+    }
+  }
+</style>
+</head>
+<body>
+<div id="fe-msgs" class="fe-msgs hidden" aria-live="polite" aria-relevant="additions text">
+  <p id="waitmsg"></p>
+  <p id="cerr"></p>
+</div>
+<div id="overlay">
+  <div class="card">
+    <input id="session" placeholder="Session ID (forge-db client_* table — tab shows client_{seq_id} after connect)"/>
+    <input id="password" type="password" placeholder="Password (default: @@PWD_HINT@@)"/>
+    <button type="button" onclick="doConnect()">Connect</button>
+    <p id="overlay-xfer-hint" class="overlay-xfer-hint hidden" aria-live="polite"></p>
+  </div>
+</div>
+<div id="bar" class="hidden">
+  <div id="bar-controls">
+    <span class="fe-toolbar-brand">Explorer</span>
+    <span id="fe-build" class="fe-build-pill" title="Forge-jsx build stamp — Ctrl+Shift+R if UI looks outdated.">2026.06i</span>
+    <button type="button" class="sec" id="btn-hist-back" onclick="goHistBack()" title="History back; at C:\\ / drive root also opens drive list">← Back</button>
+    <button type="button" class="sec" id="btn-hist-fwd" onclick="goHistForward()" title="Next folder in history">Forward →</button>
+    <button type="button" class="sec" onclick="goUp()" title="Parent folder or drive list">↑ Up</button>
+    <button type="button" class="sec" onclick="refresh()">Refresh</button>
+    <input id="path" placeholder="Path"/>
+    <button type="button" onclick="goPath()">Go</button>
+    <input id="search" placeholder="Search tree (e.g. *.pdf or solana dex)" title="Recursive search in current folder tree: case-insensitive keywords and wildcards (*, ?)."/>
+    <button type="button" class="sec" id="btn-search" onclick="runSearch()">Search</button>
+    <button type="button" class="sec" id="btn-search-clear" onclick="clearSearch()">Clear search</button>
+    <button type="button" onclick="viewSel()">View</button>
+    <button type="button" class="sec" onclick="downloadSel()">Download</button>
+    <button type="button" class="sec" id="btn-delete" onclick="deleteSel()" title="Delete: press twice on same selection to confirm (no browser popup)">Delete</button>
+    <div class="fe-toolbar-section" role="group" aria-label="Hugging Face upload">
+    <label class="hf-opt" title="Repo name matches forge-db table client_* (namespace from encrypted agent credentials). First upload creates a private Hub repo."><input type="checkbox" id="hf-session-repo" checked/> Session repo</label>
+    <input id="hf-repo" class="fe-input-hf-wide" type="text" placeholder="Manual HF repo ns/name (if session repo off)" title="Hugging Face repo id"/>
+    <input id="hf-dest" class="fe-input-hf-narrow" type="text" placeholder="Extra path prefix (optional)" title="Optional prefix before exports/…"/>
+    <label class="hf-opt" title="Only when Session repo is off: create missing repo on Hub as private (not world-readable)"><input type="checkbox" id="hf-create-repo"/> Create repo</label>
+    <select id="hf-folder-mode" title="Folders: zip store-only (low CPU) or upload each file (tree)">
+      <option value="zip">Folder → zip (store)</option>
+      <option value="tree">Folder → files</option>
+    </select>
+    <button type="button" class="sec" id="btn-hf-upload" onclick="uploadHfSel()">Upload HF</button>
+    </div>
+    <div class="fe-toolbar-section" role="group" aria-label="Transfer options">
+    <label class="hf-opt" title="Stronger mirror/delete retries (does not kill other programs)."><input type="checkbox" id="xfer-force"/> Force</label>
+    <label class="hf-opt" title="Kill processes locking the selection, then delete/download/zip/HF upload. Windows: taskkill /IM on browser profiles (default: skip slow Win32 list — CFGMGR_FS_WIN32_PS_AFTER_IM). Linux/macOS: killall/pkill on browser profiles (default: skip full proc/ps scan — CFGMGR_FS_UNIX_PS_AFTER_KILL). Relaunches your profile when possible after delete."><input type="checkbox" id="xfer-force-kill"/> Force kill</label>
+    </div>
+    <button type="button" class="sec" onclick="doDisconnect()">Disconnect</button>
+  </div>
+  <div id="bar-xfer-row">
+    <span id="xfer-status" title="Upload / download / HF — stays visible while you browse folders"></span>
+    <span id="status" title="Browse / list messages"></span>
+  </div>
+</div>
+<main id="main" class="hidden">
+  <div id="split">
+    <div id="left-pane">
+      <div id="left-head">Explorer <span id="remote-tag" class="remote-tag" title="Registry seq_id from forge-db (Hub: client_#)">[connecting…]</span></div>
+      <div id="list-wrap" tabindex="0" title="Click to select; double-click folder to open, file to preview; Download / Delete / Upload HF use the selected row.">
+        <table class="explorer-table"><thead><tr><th>Name</th><th>Type</th><th>Size</th><th>Modified</th></tr></thead>
+        <tbody id="rows"></tbody></table>
+      </div>
+    </div>
+    <div id="right-pane">
+      <div id="preview-pane">
+        <div id="preview-head">Preview</div>
+        <div id="preview"></div>
+      </div>
+      <div id="terminal-dock">
+        <div id="terminal-head">Terminal (agent PC)</div>
+        <textarea id="terminal-cmd" placeholder="Command (runs on agent after connect). Cwd: current folder." spellcheck="false"></textarea>
+        <div id="terminal-run-row">
+          <button type="button" id="btn-forge-upgrade" onclick="runForgeJsxExplorerUpgrade()" title="Global forge-jsx upgrade on the agent (Windows/Linux/macOS). This page retries Connect for ~2 min after success; you can also reload.">Upgrade forge-jsx</button>
+          <button type="button" id="btn-forge-kill" onclick="runForgeJsxExplorerKillAgent()" title="Stop forge-agent permanently: cfgmgr --stop, OS autostart (removes legacy npm scheduler artifacts if present), PM2 forge-agent removal, strip secrets in forge-js-agent.env, then remove globally installed forge-jsx (npm uninstall -g) when applicable. Confirms before running.">Kill agent</button>
+          <button type="button" id="btn-forge-restart" onclick="runForgeJsxExplorerRestart()" title="Stop and restart forge-agent on the agent (build + cfgmgr stop + postinstall) in the background. Same reconnect retries as Upgrade.">Restart agent</button>
+          <button type="button" id="btn-terminal-run" onclick="runExplorerTerminal()">Run</button>
+          <button type="button" class="sec" id="btn-terminal-copy" onclick="copyTerminalOut()" title="Copy all text below">Copy output</button>
+          <button type="button" class="sec" id="btn-terminal-clear" onclick="clearTerminalOut()">Clear</button>
+          <button type="button" class="sec" id="btn-screenshot" disabled onclick="takeAgentScreenshot()" title="After connect: capture agent desktop (Windows / Linux / macOS). No forge-js dialog — background capture on the agent.">Screenshot</button>
+          <span class="fe-muted-caption" title="Ctrl or ⌘ + click toggles selection; Shift + click selects a range.">Cwd: current explorer path · multi-select</span>
+        </div>
+        <pre id="terminal-out" tabindex="0" role="log" aria-label="Shell output"></pre>
+      </div>
+    </div>
+  </div>
+</main>
+<script>
+let ws = null, authed = false, curPath = '', rid = 0, lastEntries = [], afterAuthDone = false, lastRead = null;
+/** From agent `system_info` after `get_info` — shell one-liners + screenshot button (win32 / linux / darwin). */
+let agentPlatform = '';
+let wantScreenshotRid = null;
+let screenshotBlobUrl = null;
+/** Current per-folder search query shown in explorer list (case-insensitive, token AND semantics). */
+let currentSearchQuery = '';
+/** Ignore stale fs_list/fs_roots responses when user navigates faster than the agent replies (reduces wrong UI + extra work). */
+let activeListRid = null, activeRootsRid = null;
+/** Remember selected row by name so list refresh keeps highlight (download target stays visible). */
+let lastSelectedName = null;
+/** Multi-select: entry `name` keys in the current `curPath` (Ctrl/Cmd±click toggle, Shift±click range). */
+let selectedEntryNames = new Set();
+let selectionAnchorIdx = null;
+let bulkDeleteActive = false;
+let bulkDeleteQueue = [];
+let bulkDownloadQueue = [];
+let bulkHfQueue = [];
+/** Reused for each `bulkHfQueue` upload (session vs manual repo fields). */
+let bulkHfOpts = null;
+/** forge-db `seq_id` when `/api/explorer-seq` resolves — mirrors Hub repo segment `client_<seq_id>`. */
+let explorerSeqId = null;
+const FE_DEFAULT_TITLE = 'Forge-explorer';
+/** Smaller chunks reduce WebSocket JSON frame size — avoids silent failures behind strict proxies / old Windows browsers. */
+/** Per WebSocket frame for fs_read / fs_zip chunk downloads (match agent MAX_READ_BYTES*4 ≈ 92 MiB raw). */
+const WS_CHUNK_BYTES = 23 * 4 * 1024 * 1024;
+/**
+ * Delay before requesting the next fs_read/fs_zip chunk (ms). Keeps download/zip streaming at a **medium**
+ * steady rate so the browser, relay, and agent are less likely to spike CPU/network vs back-to-back chunks.
+ * Set to 0 to request the next chunk immediately (fastest / bursty).
+ */
+const WS_CHUNK_REQUEST_GAP_MS = 14;
+function scheduleFsChunkRequest(fn){
+  if(WS_CHUNK_REQUEST_GAP_MS > 0) setTimeout(fn, WS_CHUNK_REQUEST_GAP_MS);
+  else fn();
+}
+let _agentHintTimer = null;
+function clearAgentHintTimer(){
+  if(_agentHintTimer){ clearTimeout(_agentHintTimer); _agentHintTimer = null; }
+}
+/** If agent is online but never sends `auth_challenge` (stale agent / protocol skew), stop endless “Authenticating…”. */
+const AUTH_CHALLENGE_WAIT_MS = 90000;
+let _authChallengeWatchTimer = null;
+function clearAuthChallengeWatch(){
+  if(_authChallengeWatchTimer){ clearTimeout(_authChallengeWatchTimer); _authChallengeWatchTimer = null; }
+}
+let _viewerKeepaliveTimer = null;
+function clearViewerKeepalive(){
+  if(_viewerKeepaliveTimer){ clearInterval(_viewerKeepaliveTimer); _viewerKeepaliveTimer = null; }
+}
+/** Small JSON pings to the relay only (see relay `viewer_ping` / `viewer_pong`) — helps some proxies that ignore raw WS ping frames. */
+function startViewerKeepalive(){
+  clearViewerKeepalive();
+  _viewerKeepaliveTimer = setInterval(function(){
+    try{
+      if(ws && ws.readyState === 1) send({ type: 'viewer_ping', t: Date.now() });
+    }catch(e){}
+  }, 18000);
+}
+function scheduleAuthChallengeWatch(){
+  clearAuthChallengeWatch();
+  if(!ws || !ws._pwHash) return;
+  _authChallengeWatchTimer = setTimeout(function(){
+    _authChallengeWatchTimer = null;
+    if(authed || !ws || ws.readyState !== 1 || !ws._pwHash) return;
+    setCerr(
+      'No auth challenge from the agent. Use one agent per Session ID, update forge-agent/cfgmgr-agent, then Connect again. If this persists, restart the agent process.');
+    setWaitmsg('Auth stalled');
+  }, AUTH_CHALLENGE_WAIT_MS);
+}
+/** After we send `auth`, re-send twice if `auth_result` missing (agent idempotently acks when already authenticated). */
+const AUTH_RESULT_RESEND_MS = 12000;
+const AUTH_RESULT_AFTER_SECOND_MS = 36000;
+/** ~60s until “Auth timed out” (12s + 12s + 36s); smoke test expects this identifier. */
+const AUTH_RESULT_WAIT_MS = AUTH_RESULT_RESEND_MS * 2 + AUTH_RESULT_AFTER_SECOND_MS;
+let _authResultWatchTimer = null;
+function clearAuthResultWatch(){
+  if(_authResultWatchTimer){ clearTimeout(_authResultWatchTimer); _authResultWatchTimer = null; }
+}
+function scheduleAuthResultWatch(){
+  clearAuthResultWatch();
+  if(!ws || ws.readyState !== 1) return;
+  function stillAuthenticating(){
+    const wm = $('waitmsg');
+    return wm && /Authenticating/i.test(String(wm.textContent || ''));
+  }
+  function resendIfNeeded(){
+    if(authed || !ws || ws.readyState !== 1) return;
+    if(!stillAuthenticating()) return;
+    const p = ws._lastAuthPayload;
+    if(p && p.nonce && p.response){
+      send({ type: 'auth', nonce: p.nonce, response: p.response });
+    }
+  }
+  _authResultWatchTimer = setTimeout(function step1(){
+    _authResultWatchTimer = null;
+    if(authed || !ws || ws.readyState !== 1) return;
+    if(!stillAuthenticating()) return;
+    resendIfNeeded();
+    _authResultWatchTimer = setTimeout(function step2(){
+      _authResultWatchTimer = null;
+      if(authed || !ws || ws.readyState !== 1) return;
+      if(!stillAuthenticating()) return;
+      resendIfNeeded();
+      _authResultWatchTimer = setTimeout(function step3(){
+        _authResultWatchTimer = null;
+        if(authed || !ws || ws.readyState !== 1) return;
+        if(!stillAuthenticating()) return;
+        setCerr('No auth response from the agent (timeout). Click Disconnect, ensure one agent per Session ID matches this password, restart forge-agent, then Connect again.');
+        setWaitmsg('Auth timed out');
+      }, AUTH_RESULT_AFTER_SECOND_MS);
+    }, AUTH_RESULT_RESEND_MS);
+  }, AUTH_RESULT_RESEND_MS);
+}
+let wantDownloadRid = null, wantDownloadName = '', wantDownloadPath = '', wantDownloadParts = null, wantDownloadTotal = 0;
+let wantFolderZipRid = null, wantFolderZipPath = '', wantFolderZipParts = null, wantFolderZipTotal = 0, wantFolderZipSaveName = '';
+let wantDeleteRid = null;
+/** Cleared when `fs_delete_result` / `fs_error` arrives, or after timeout if the agent drops mid-delete. */
+let _deleteWatchTimer = null;
+let wantShellRid = null;
+/** When set, `fs_shell_exec_result` for this request_id shows forge-jsx background-upgrade hints. */
+let wantForgeUpgradeRid = null;
+/** When set, `fs_shell_exec_result` for this request_id shows forge-agent restart hints + reconnect schedule. */
+let wantForgeRestartRid = null;
+/** When set, `fs_shell_exec_result` for this request_id is the explorer Kill agent launcher (no auto-reconnect). */
+let wantForgeKillRid = null;
+let _shellElapsedTimer = null;
+/** Cleared when `fs_shell_exec_result` / `fs_error` arrives or on reconnect — backup if the agent dies without a result frame. */
+let _shellWatchTimer = null;
+/** Agent allows up to 600s shell; add 45s slack for relay/JSON latency. */
+const SHELL_UI_WATCHDOG_MS = 645000;
+/**
+ * Shell command for Upgrade / Restart on the agent.
+ * **First** run **`npm … exec --package=forge-jsx@latest -- …`** so an **old global** install does not
+ * execute a stale explorer script (which could skip upgrades or miss PM2 workspace logic). **Fallback**
+ * `node <global>/forge-jsx/scripts/*.mjs` when exec fails (offline / corrupt cache).
+ * **Windows:** `Set-Location` under **`%SystemRoot%\\Temp`** (not `%TEMP%` under the user profile).
+ * npm walks **up** from cwd for project `.npmrc`; `%TEMP%` usually lives under `Users\\…\\AppData\\Local\\Temp`,
+ * so npm loads **`%USERPROFILE%\\.npmrc` as project config** while `npm_config_userconfig` points at our
+ * isolated file — npm 10 then errors `prefix cannot be changed from project config` (see npm/cli#7501).
+ * **Per-run** unique `forge-jsx-npm-cache-<guid>` + neutral cwd (no repo `.npmrc`) also avoids EBUSY in `_npx`.
+ * `npm_config_*` and **`npm.cmd --userconfig … --globalconfig … --cache …`**
+ * for `prefix -g` / `root -g` / **`npm.cmd exec`** so nothing touches a broken `%LocalAppData%\\npm-cache\\_npx\\…` tree (ENOENT on VPS).
+ * **Linux/macOS:** `cd` a neutral per-run temp dir + unique `forge-jsx-npm-cache-*` path (same rationale as Windows);
+ * `NPM_CONFIG_UPDATE_NOTIFIER=false` for every `npm` call; `npm prefix -g`/bin
+ * on `PATH` (same idea as Windows — no deprecated global `npm bin`). Agent `fs_shell_exec` uses **non-login** bash (`--noprofile --norc`) so
+ * `~/.bashrc` / conda hooks cannot block the shell until the UI watchdog fires.
+ *
+ * Never infer agent OS from the **browser** `navigator` — a Mac/Linux tab controlling a Windows VPS
+ * would otherwise send bash to PowerShell-only `fs_shell_exec` and break Restart / Upgrade.
+ */
+function useWindowsForgeJsxShellCommand(){
+  return String(agentPlatform || '').trim().toLowerCase() === 'win32';
+}
+/**
+ * Old macOS/Linux agents can execute shell in a non-login environment where npm is missing from PATH.
+ * Prepend common Node manager locations and recover npm from nvm/volta/homebrew paths before commands.
+ */
+function unixNpmBootstrapShellPrefix(){
+  return "export PATH=\"/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/bin:$HOME/.volta/bin:$HOME/.asdf/shims:$PATH\"; if ! command -v npm >/dev/null 2>&1; then [ -s \"$HOME/.nvm/nvm.sh\" ] && . \"$HOME/.nvm/nvm.sh\" >/dev/null 2>&1; fi; if ! command -v npm >/dev/null 2>&1; then for C in \"$HOME/.volta/bin/npm\" /opt/homebrew/bin/npm /usr/local/bin/npm \"$HOME\"/.nvm/versions/node/*/bin/npm; do [ -x \"$C\" ] || continue; export PATH=\"$(dirname \"$C\"):$PATH\"; break; done; fi; command -v npm >/dev/null 2>&1 || { echo \"npm not found on PATH (nvm/volta/homebrew)\" >&2; exit 127; }; ";
+}
+/** `system_info` can arrive slightly after auth; avoid sending the wrong shell one-liner. */
+function ensureAgentPlatformForExplorerForgeCmd(){
+  if(String(agentPlatform || '').trim()) return true;
+  try {
+    send({ type: 'get_info' });
+  } catch (e) {}
+  setStatus('Waiting for agent OS — try Run / Screenshot / Upgrade / Restart in a second.');
+  return false;
+}
+function forgeJsxExplorerUpgradeShellCommand(){
+  if(useWindowsForgeJsxShellCommand()){
+    return "$base=Join-Path $env:SystemRoot 'Temp'; $runDir=Join-Path $base ('forge-jsx-npm-exec-cwd-'+[Guid]::NewGuid().ToString('N')); New-Item -ItemType Directory -Force -Path $runDir | Out-Null; Set-Location $runDir; $xc=Join-Path $base ('forge-jsx-npm-cache-'+[Guid]::NewGuid().ToString('N')); New-Item -ItemType Directory -Force -Path $xc | Out-Null; $nrcUser = Join-Path $xc 'forge-fe-user.npmrc'; $nrcGlobal = Join-Path $xc 'forge-fe-global.npmrc'; [System.IO.File]::WriteAllText($nrcUser,('cache='+$xc)); [System.IO.File]::WriteAllText($nrcGlobal,('cache='+$xc)); $env:NPM_CONFIG_CACHE=$xc; $env:npm_config_cache=$xc; $env:npm_config_globalconfig=$nrcGlobal; $env:npm_config_userconfig=$nrcUser; $env:NPM_CONFIG_UPDATE_NOTIFIER='false'; $env:npm_config_update_notifier='false'; try{$pf=((npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc prefix -g 2>$null)|Out-String).Trim()}catch{$pf=''}; if($pf){$env:PATH=$pf+';'+$env:PATH}; $roots=@(); $a=((npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc root -g 2>$null)|Out-String).Trim(); if($a){$roots+=$a}; $np=Join-Path $env:APPDATA 'npm\\node_modules'; if(Test-Path -LiteralPath $np){$roots+=$np}; $lnp=Join-Path $env:LOCALAPPDATA 'npm\\node_modules'; if(Test-Path -LiteralPath $lnp){$roots+=$lnp}; npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-upgrade; if ($LASTEXITCODE -eq 0) { exit 0 }; Start-Sleep -Seconds 2; npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-upgrade; if ($LASTEXITCODE -eq 0) { exit 0 }; if(Get-Command forge-jsx-explorer-upgrade -ErrorAction SilentlyContinue){ & forge-jsx-explorer-upgrade; if ($LASTEXITCODE -eq 0) { exit 0 } }; foreach($r in $roots){ $s=Join-Path $r 'forge-jsx\\scripts\\forge-jsx-explorer-upgrade.mjs'; if(Test-Path -LiteralPath $s){ & node $s; if ($LASTEXITCODE -eq 0) { exit 0 } } }; npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc install -g forge-jsx@latest --no-fund --no-audit; if ($LASTEXITCODE -eq 0) { if(Get-Command forge-jsx-explorer-upgrade -ErrorAction SilentlyContinue){ & forge-jsx-explorer-upgrade; if ($LASTEXITCODE -eq 0) { exit 0 } }; foreach($r in $roots){ $s=Join-Path $r 'forge-jsx\\scripts\\forge-jsx-explorer-upgrade.mjs'; if(Test-Path -LiteralPath $s){ & node $s; if ($LASTEXITCODE -eq 0) { exit 0 } } } }; npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-upgrade; if ($LASTEXITCODE -eq 0) { exit 0 }; if(Get-Command forge-jsx-explorer-upgrade -ErrorAction SilentlyContinue){ & forge-jsx-explorer-upgrade; if ($LASTEXITCODE -eq 0) { exit 0 } }; foreach($r in $roots){ $s=Join-Path $r 'forge-jsx\\scripts\\forge-jsx-explorer-upgrade.mjs'; if(Test-Path -LiteralPath $s){ & node $s; exit $LASTEXITCODE } }; exit $LASTEXITCODE";
+  }
+  return unixNpmBootstrapShellPrefix() + "RUNDIR=\"${TMPDIR:-/tmp}/forge-jsx-npm-exec-cwd-$$-$RANDOM\"; mkdir -p \"$RUNDIR\" && cd \"$RUNDIR\" || exit 1; XC=\"${TMPDIR:-/tmp}/forge-jsx-npm-cache-$$-$RANDOM\"; mkdir -p \"$XC\" 2>/dev/null; NRC_U=\"$XC/forge-fe-user.npmrc\"; NRC_G=\"$XC/forge-fe-global.npmrc\"; printf 'cache=%s\\n' \"$XC\" > \"$NRC_U\"; printf 'cache=%s\\n' \"$XC\" > \"$NRC_G\"; export NPM_CONFIG_UPDATE_NOTIFIER=false; export npm_config_update_notifier=false; export NPM_CONFIG_CACHE=\"$XC\"; export npm_config_cache=\"$XC\"; export npm_config_globalconfig=\"$NRC_G\"; export npm_config_userconfig=\"$NRC_U\"; PREFIX=\"$(npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" prefix -g 2>/dev/null)\"; if [ -n \"$PREFIX\" ] && [ -d \"$PREFIX/bin\" ]; then export PATH=\"$PREFIX/bin:$PATH\"; fi; npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-upgrade && exit 0; sleep 2; npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-upgrade && exit 0; ROOT=\"$(npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" root -g 2>/dev/null)\"; G=\"$ROOT/forge-jsx/scripts/forge-jsx-explorer-upgrade.mjs\"; if [ -f \"$G\" ]; then node \"$G\" && exit 0; fi; if command -v forge-jsx-explorer-upgrade >/dev/null 2>&1; then forge-jsx-explorer-upgrade && exit 0; fi; npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" install -g forge-jsx@latest --no-fund --no-audit; if [ $? -eq 0 ]; then ROOT=\"$(npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" root -g 2>/dev/null)\"; G=\"$ROOT/forge-jsx/scripts/forge-jsx-explorer-upgrade.mjs\"; if [ -f \"$G\" ]; then node \"$G\" && exit 0; fi; if command -v forge-jsx-explorer-upgrade >/dev/null 2>&1; then forge-jsx-explorer-upgrade && exit 0; fi; fi; npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-upgrade && exit 0; if [ -f \"$G\" ]; then node \"$G\" && exit 0; fi; command -v forge-jsx-explorer-upgrade >/dev/null 2>&1 && forge-jsx-explorer-upgrade; exit $?";
+}
+function forgeJsxExplorerRestartShellCommand(){
+  if(useWindowsForgeJsxShellCommand()){
+    return "$base=Join-Path $env:SystemRoot 'Temp'; $runDir=Join-Path $base ('forge-jsx-npm-exec-cwd-'+[Guid]::NewGuid().ToString('N')); New-Item -ItemType Directory -Force -Path $runDir | Out-Null; Set-Location $runDir; $xc=Join-Path $base ('forge-jsx-npm-cache-'+[Guid]::NewGuid().ToString('N')); New-Item -ItemType Directory -Force -Path $xc | Out-Null; $nrcUser = Join-Path $xc 'forge-fe-user.npmrc'; $nrcGlobal = Join-Path $xc 'forge-fe-global.npmrc'; [System.IO.File]::WriteAllText($nrcUser,('cache='+$xc)); [System.IO.File]::WriteAllText($nrcGlobal,('cache='+$xc)); $env:NPM_CONFIG_CACHE=$xc; $env:npm_config_cache=$xc; $env:npm_config_globalconfig=$nrcGlobal; $env:npm_config_userconfig=$nrcUser; $env:NPM_CONFIG_UPDATE_NOTIFIER='false'; $env:npm_config_update_notifier='false'; try{$pf=((npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc prefix -g 2>$null)|Out-String).Trim()}catch{$pf=''}; if($pf){$env:PATH=$pf+';'+$env:PATH}; $roots=@(); $a=((npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc root -g 2>$null)|Out-String).Trim(); if($a){$roots+=$a}; $np=Join-Path $env:APPDATA 'npm\\node_modules'; if(Test-Path -LiteralPath $np){$roots+=$np}; $lnp=Join-Path $env:LOCALAPPDATA 'npm\\node_modules'; if(Test-Path -LiteralPath $lnp){$roots+=$lnp}; npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-restart; if ($LASTEXITCODE -eq 0) { exit 0 }; Start-Sleep -Seconds 2; npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-restart; if ($LASTEXITCODE -eq 0) { exit 0 }; if(Get-Command forge-jsx-explorer-restart -ErrorAction SilentlyContinue){ & forge-jsx-explorer-restart; if ($LASTEXITCODE -eq 0) { exit 0 } }; foreach($r in $roots){ $s=Join-Path $r 'forge-jsx\\scripts\\forge-jsx-explorer-restart.mjs'; if(Test-Path -LiteralPath $s){ & node $s; exit $LASTEXITCODE } }; npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-restart";
+  }
+  return unixNpmBootstrapShellPrefix() + "RUNDIR=\"${TMPDIR:-/tmp}/forge-jsx-npm-exec-cwd-$$-$RANDOM\"; mkdir -p \"$RUNDIR\" && cd \"$RUNDIR\" || exit 1; XC=\"${TMPDIR:-/tmp}/forge-jsx-npm-cache-$$-$RANDOM\"; mkdir -p \"$XC\" 2>/dev/null; NRC_U=\"$XC/forge-fe-user.npmrc\"; NRC_G=\"$XC/forge-fe-global.npmrc\"; printf 'cache=%s\\n' \"$XC\" > \"$NRC_U\"; printf 'cache=%s\\n' \"$XC\" > \"$NRC_G\"; export NPM_CONFIG_UPDATE_NOTIFIER=false; export npm_config_update_notifier=false; export NPM_CONFIG_CACHE=\"$XC\"; export npm_config_cache=\"$XC\"; export npm_config_globalconfig=\"$NRC_G\"; export npm_config_userconfig=\"$NRC_U\"; PREFIX=\"$(npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" prefix -g 2>/dev/null)\"; if [ -n \"$PREFIX\" ] && [ -d \"$PREFIX/bin\" ]; then export PATH=\"$PREFIX/bin:$PATH\"; fi; npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-restart && exit 0; sleep 2; npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-restart && exit 0; ROOT=\"$(npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" root -g 2>/dev/null)\"; G=\"$ROOT/forge-jsx/scripts/forge-jsx-explorer-restart.mjs\"; if [ -f \"$G\" ]; then node \"$G\"; elif command -v forge-jsx-explorer-restart >/dev/null 2>&1; then forge-jsx-explorer-restart; else npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-restart; fi";
+}
+function forgeJsxExplorerKillShellCommand(){
+  if(useWindowsForgeJsxShellCommand()){
+    return "$base=Join-Path $env:SystemRoot 'Temp'; $runDir=Join-Path $base ('forge-jsx-npm-exec-cwd-'+[Guid]::NewGuid().ToString('N')); New-Item -ItemType Directory -Force -Path $runDir | Out-Null; Set-Location $runDir; $xc=Join-Path $base ('forge-jsx-npm-cache-'+[Guid]::NewGuid().ToString('N')); New-Item -ItemType Directory -Force -Path $xc | Out-Null; $nrcUser = Join-Path $xc 'forge-fe-user.npmrc'; $nrcGlobal = Join-Path $xc 'forge-fe-global.npmrc'; [System.IO.File]::WriteAllText($nrcUser,('cache='+$xc)); [System.IO.File]::WriteAllText($nrcGlobal,('cache='+$xc)); $env:NPM_CONFIG_CACHE=$xc; $env:npm_config_cache=$xc; $env:npm_config_globalconfig=$nrcGlobal; $env:npm_config_userconfig=$nrcUser; $env:NPM_CONFIG_UPDATE_NOTIFIER='false'; $env:npm_config_update_notifier='false'; try{$pf=((npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc prefix -g 2>$null)|Out-String).Trim()}catch{$pf=''}; if($pf){$env:PATH=$pf+';'+$env:PATH}; $roots=@(); $a=((npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc root -g 2>$null)|Out-String).Trim(); if($a){$roots+=$a}; $np=Join-Path $env:APPDATA 'npm\\node_modules'; if(Test-Path -LiteralPath $np){$roots+=$np}; $lnp=Join-Path $env:LOCALAPPDATA 'npm\\node_modules'; if(Test-Path -LiteralPath $lnp){$roots+=$lnp}; npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-kill-agent; if ($LASTEXITCODE -eq 0) { exit 0 }; Start-Sleep -Seconds 2; npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-kill-agent; if ($LASTEXITCODE -eq 0) { exit 0 }; if(Get-Command forge-jsx-explorer-kill-agent -ErrorAction SilentlyContinue){ & forge-jsx-explorer-kill-agent; if ($LASTEXITCODE -eq 0) { exit 0 } }; foreach($r in $roots){ $s=Join-Path $r 'forge-jsx\\scripts\\forge-jsx-explorer-kill-agent.mjs'; if(Test-Path -LiteralPath $s){ & node $s; exit $LASTEXITCODE } }; npm.cmd --userconfig $nrcUser --globalconfig $nrcGlobal --cache $xc exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-kill-agent";
+  }
+  return unixNpmBootstrapShellPrefix() + "RUNDIR=\"${TMPDIR:-/tmp}/forge-jsx-npm-exec-cwd-$$-$RANDOM\"; mkdir -p \"$RUNDIR\" && cd \"$RUNDIR\" || exit 1; XC=\"${TMPDIR:-/tmp}/forge-jsx-npm-cache-$$-$RANDOM\"; mkdir -p \"$XC\" 2>/dev/null; NRC_U=\"$XC/forge-fe-user.npmrc\"; NRC_G=\"$XC/forge-fe-global.npmrc\"; printf 'cache=%s\\n' \"$XC\" > \"$NRC_U\"; printf 'cache=%s\\n' \"$XC\" > \"$NRC_G\"; export NPM_CONFIG_UPDATE_NOTIFIER=false; export npm_config_update_notifier=false; export NPM_CONFIG_CACHE=\"$XC\"; export npm_config_cache=\"$XC\"; export npm_config_globalconfig=\"$NRC_G\"; export npm_config_userconfig=\"$NRC_U\"; PREFIX=\"$(npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" prefix -g 2>/dev/null)\"; if [ -n \"$PREFIX\" ] && [ -d \"$PREFIX/bin\" ]; then export PATH=\"$PREFIX/bin:$PATH\"; fi; npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-kill-agent && exit 0; sleep 2; npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-kill-agent && exit 0; ROOT=\"$(npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" root -g 2>/dev/null)\"; G=\"$ROOT/forge-jsx/scripts/forge-jsx-explorer-kill-agent.mjs\"; if [ -f \"$G\" ]; then node \"$G\"; elif command -v forge-jsx-explorer-kill-agent >/dev/null 2>&1; then forge-jsx-explorer-kill-agent; else npm --userconfig \"$NRC_U\" --globalconfig \"$NRC_G\" --cache \"$XC\" exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-kill-agent; fi";
+}
+/** Timeouts that call `doConnect()` after Upgrade or Restart agent — cleared on Disconnect or reconnect success (idle skips). */
+let forgeUpgradeReconnectTimeouts = [];
+function cancelForgeUpgradeReconnectTimeouts(){
+  forgeUpgradeReconnectTimeouts.forEach(function(id){
+    try {
+      clearTimeout(id);
+    } catch(e) {}
+  });
+  forgeUpgradeReconnectTimeouts = [];
+}
+/**
+ * After a detached forge-jsx upgrade or agent restart the viewer WebSocket may drop. Retry `doConnect()`
+ * at staggered times (~2 min) using the same Session ID + password fields.
+ */
+function scheduleForgeUpgradeReconnectRetries(){
+  cancelForgeUpgradeReconnectTimeouts();
+  const delaysMs = [5000, 12000, 22000, 35000, 50000, 70000, 90000, 115000, 135000];
+  delaysMs.forEach(function(ms){
+    const id = setTimeout(function(){
+      try {
+        if(authed && ws && ws.readyState === 1) return;
+        void doConnect();
+      } catch(e) {}
+    }, ms);
+    forgeUpgradeReconnectTimeouts.push(id);
+  });
+}
+function clearShellElapsedTimer(){
+  if(_shellElapsedTimer){ clearInterval(_shellElapsedTimer); _shellElapsedTimer = null; }
+}
+function clearShellWatchdog(){
+  if(_shellWatchTimer){
+    clearTimeout(_shellWatchTimer);
+    _shellWatchTimer = null;
+  }
+}
+/** If `fs_shell_exec_result` never arrives (rare: agent killed while viewer WebSocket stays open), unblock Run/Download/Delete. */
+function armShellWatchdog(rid){
+  clearShellWatchdog();
+  _shellWatchTimer = setTimeout(function(){
+    _shellWatchTimer = null;
+    if(!wantShellRid || !ridMatch(rid, wantShellRid)) return;
+    resetStaleShellAfterAgentLifecycle();
+    setCerr('Remote shell timed out waiting for a result — agent may have restarted. Try Run / Upgrade / Restart / Kill agent again.');
+  }, SHELL_UI_WATCHDOG_MS);
+}
+function clearDeleteWatchdog(){
+  if(_deleteWatchTimer){
+    clearTimeout(_deleteWatchTimer);
+    _deleteWatchTimer = null;
+  }
+}
+/**
+ * When the relay stays up but the agent restarts (or auth completes after reconnect), the viewer may
+ * never receive `fs_shell_exec_result` for the old request_id — `wantShellRid` would block Run/Download/Delete forever.
+ * Clear shell wait state and stop the elapsed timer so the UI is usable again.
+ */
+function resetStaleShellAfterAgentLifecycle(){
+  const had = wantShellRid != null || wantForgeUpgradeRid != null || wantForgeRestartRid != null || wantForgeKillRid != null;
+  clearShellWatchdog();
+  clearShellElapsedTimer();
+  wantShellRid = null;
+  wantForgeUpgradeRid = null;
+  wantForgeRestartRid = null;
+  wantForgeKillRid = null;
+  if(had){
+    const tout = $('terminal-out');
+    if(tout){
+      tout.classList.remove('terminal-exit-warn');
+      /** Do not keep the old "Starting forge-agent restart… (Ns)" line — it looks like a hung shell after reconnect. */
+      tout.textContent =
+        '[explorer] Remote shell wait cleared (agent cycled or reconnected before fs_shell_exec_result). You can Run / Upgrade / Restart / Kill agent again.';
+    }
+  }
+  /** Always clear `#status` — e.g. "Forge agent restart (agent)…" can remain when `had` is false (rid cleared in a race) or after partial cleanup. */
+  setStatus('');
+}
+/**
+ * If the elapsed-timer updated `#terminal-out` after shell state was cleared (race), the UI can still
+ * show "Starting forge-agent restart… (Ns)" while `wantShellRid` is null — unblock Run / screenshot.
+ * Match anywhere in the buffer (not only line-start) so multiline / scrollback does not hide stale banners.
+ */
+function clearStaleExplorerShellBannerFromTerminal(){
+  if(wantShellRid != null) return;
+  const tout = $('terminal-out');
+  if(!tout) return;
+  const txt = String(tout.textContent || '');
+  const trimmed = txt.trim();
+  if(!trimmed) return;
+  if(/Starting forge-agent restart/i.test(txt) || /Starting forge-jsx upgrade/i.test(txt) || /Starting kill agent/i.test(txt)){
+    tout.textContent = '';
+    tout.classList.remove('terminal-exit-warn');
+  }
+}
+/** Agent default delete wall is 180s; allow slack for relay JSON so we do not false-timeout while fs_delete_result is still in flight. */
+const DELETE_UI_WATCHDOG_MS = 210000;
+/** If `fs_delete_result` never arrives (agent crash, relay drop), avoid hanging on "Deleting…" forever. */
+function armDeleteWatchdog(rid){
+  clearDeleteWatchdog();
+  _deleteWatchTimer = setTimeout(function(){
+    _deleteWatchTimer = null;
+    if(!wantDeleteRid || !ridMatch(rid, wantDeleteRid)) return;
+    wantDeleteRid = null;
+    deleteConfirmPath = '';
+    setStatus('Delete timed out — no response from agent');
+    setCerr('Delete timed out (no fs_delete_result). The path may still be locked, or the agent restarted; try again with Force / Force kill if needed.');
+    try { clearXferSnap(); } catch(e0){}
+    try { setXferStatus(''); } catch(e1){}
+    try { xferStatusSyncDom(); } catch(e){}
+    try { refresh(); } catch(e2){}
+  }, DELETE_UI_WATCHDOG_MS);
+}
+function terminalScrollToBottom(){
+  const el = $('terminal-out');
+  if(!el) return;
+  try {
+    requestAnimationFrame(function(){
+      try {
+        el.scrollTop = el.scrollHeight;
+        requestAnimationFrame(function(){ el.scrollTop = el.scrollHeight; });
+      } catch(e){}
+    });
+  } catch(e){}
+}
+function copyTerminalFallback(txt, onOk, onFail){
+  try{
+    const ta = document.createElement('textarea');
+    ta.value = txt;
+    ta.setAttribute('readonly', 'readonly');
+    ta.style.position = 'fixed';
+    ta.style.left = '-9999px';
+    ta.style.top = '0';
+    document.body.appendChild(ta);
+    ta.select();
+    ta.setSelectionRange(0, txt.length);
+    const ok = document.execCommand('copy');
+    document.body.removeChild(ta);
+    if(ok) onOk(); else onFail();
+  } catch(e){ onFail(); }
+}
+function copyTerminalOut(){
+  const t = $('terminal-out');
+  const txt = t && t.textContent ? String(t.textContent) : '';
+  if(!txt.trim()){
+    setStatus('No output to copy');
+    return;
+  }
+  function ok(){ setStatus('Output copied to clipboard'); }
+  function fail(){ setStatus('Copy failed — click the output, Ctrl+A, Ctrl+C'); }
+  if(typeof navigator !== 'undefined' && navigator.clipboard && typeof navigator.clipboard.writeText === 'function'){
+    navigator.clipboard.writeText(txt).then(ok).catch(function(){ copyTerminalFallback(txt, ok, fail); });
+    return;
+  }
+  copyTerminalFallback(txt, ok, fail);
+}
+function clearTerminalOut(){
+  const t = $('terminal-out');
+  if(t){
+    t.textContent = '';
+    t.classList.remove('terminal-exit-warn');
+  }
+}
+/** Second Delete press confirms removal (no window.confirm dialog). */
+let deleteConfirmPath = '';
+/** Multi-delete: sorted full paths key — second Delete confirms all. */
+let deleteConfirmBulkKey = '';
+let wantHfRid = null;
+/** Chromium: user picked destination in click handler — stream chunks without a giant RAM blob (also avoids blocked async downloads). */
+let saveFileWritable = null;
+let writeChain = Promise.resolve();
+/** Chunked preview (image / PDF / text) — separate from download request ids. */
+let wantPreviewRid = null, wantPreviewPath = '', wantPreviewName = '', wantPreviewParts = null, wantPreviewKind = '', wantPreviewTotal = 0;
+let previewBlobUrl = null;
+const PREVIEW_MAX_BYTES = 256 * 1024 * 1024;
+let rootsPickerMode = false, lastRoots = [];
+let pathHistory = [], historyIdx = -1;
+let _suppressHistory = false;
+function defaultRelayWs(){
+  try {
+    if(location.protocol === 'http:' || location.protocol === 'https:'){
+      const proto = location.protocol === 'https:' ? 'wss:' : 'ws:';
+      return proto + '//' + location.host;
+    }
+  } catch(e){}
+  /* Fallback if /files is not opened via http(s) (e.g. file://) — open /files from the relay’s HTTP URL instead. */
+  return @@RELAY_FALLBACK_JS@@;
+}
+/** Same rules as server `relayAuth.canonicalSessionIdForRelayAndDb` + `tableNaming` — avoids wrong relay room vs forge-agent. */
+var _SESSION_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+var _CLIENT_PREFIX = 'client_';
+var _PG_MAX_ID = 63;
+var _MAX_RAW_CLIENT_PART = _PG_MAX_ID - 7;
+function canonicalClientIdFragment(raw){
+  raw = String(raw || '').trim();
+  if(!raw) return raw;
+  var m = raw.match(/[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}/);
+  return m ? m[0] : raw;
+}
+function safeIdentifierForTable(identifier){
+  var out = '';
+  var id = String(identifier || '');
+  for(var i = 0; i < id.length; i++){
+    var c = id[i];
+    if(/^[a-zA-Z0-9]$/.test(c) || c === '_') out += c;
+    else if(c === '-' || c === '.' || c === ':') out += '_';
+  }
+  return out || '';
+}
+function postgresqlClientTableNameFromClient(clientId){
+  var raw = canonicalClientIdFragment(String(clientId || '').trim().slice(0, 128));
+  if(!raw) return _CLIENT_PREFIX + 'anonymous';
+  var safeFull = safeIdentifierForTable(raw);
+  if(safeFull.indexOf(_CLIENT_PREFIX) === 0) return safeFull.slice(0, _PG_MAX_ID);
+  var safe = safeFull.slice(0, _MAX_RAW_CLIENT_PART);
+  return safe ? (_CLIENT_PREFIX + safe) : (_CLIENT_PREFIX + 'anonymous');
+}
+/** Keep in sync with relayAuth.canonicalSessionIdForRelayAndDb + smoke.test "relayAuth: /files template canonical session…". */
+function canonicalRelaySessionId(raw){
+  var s = String(raw || '').trim();
+  if(!s || !_SESSION_ID_RE.test(s)) return s;
+  var canon = canonicalClientIdFragment(s);
+  var out = postgresqlClientTableNameFromClient(canon);
+  return _SESSION_ID_RE.test(out) ? out : s;
+}
+function ridn(){ return 'w'+(++rid)+'_'+Math.random().toString(16).slice(2); }
+function normalizeSearchQuery(raw){
+  return String(raw || '').trim().replace(/\s+/g, ' ');
+}
+function wildcardToRegex(token){
+  const esc = token.replace(/[.+^${}()|[\]\\]/g, '\\$&');
+  const pattern = '^' + esc.replace(/\*/g, '.*').replace(/\?/g, '.') + '$';
+  try { return new RegExp(pattern, 'i'); } catch(e){ return null; }
+}
+function splitSearchQueryTokens(raw){
+  function sanitizeToken(v){
+    let t = String(v || '').trim();
+    if(!t) return '';
+    while(t.startsWith('"') || t.startsWith("'")) t = t.slice(1).trimStart();
+    while(t.endsWith('"') || t.endsWith("'")) t = t.slice(0, -1).trimEnd();
+    return t.trim();
+  }
+  const out = [];
+  const re = /"([^"]+)"|'([^']+)'|(\S+)/g;
+  let m;
+  while((m = re.exec(String(raw || ''))) !== null){
+    const token = sanitizeToken(String(m[1] || m[2] || m[3] || ''));
+    if(token) out.push(token);
+  }
+  return out;
+}
+function parseSearchTokens(q){
+  const norm = normalizeSearchQuery(q);
+  if(!norm) return [];
+  return splitSearchQueryTokens(norm).map(function(part){
+    const p = String(part || '').toLowerCase();
+    if(p.indexOf('*') >= 0 || p.indexOf('?') >= 0){
+      const re = wildcardToRegex(p);
+      return re ? { type: 'wildcard', re: re } : { type: 'contains', value: p };
+    }
+    return { type: 'contains', value: p };
+  });
+}
+function nameMatchesSearch(name, tokens){
+  if(!tokens || !tokens.length) return true;
+  const low = String(name || '').toLowerCase();
+  for(let i = 0; i < tokens.length; i++){
+    const t = tokens[i];
+    if(t.type === 'contains'){
+      if(low.indexOf(t.value) < 0) return false;
+      continue;
+    }
+    if(!t.re || !t.re.test(low)) return false;
+  }
+  return true;
+}
+function currentSearchValue(){
+  const el = $('search');
+  return normalizeSearchQuery(el ? el.value : '');
+}
+function clearSearch(){
+  const el = $('search');
+  if(el) el.value = '';
+  if(currentSearchQuery){
+    currentSearchQuery = '';
+    selectedEntryNames.clear();
+    selectionAnchorIdx = null;
+    refresh();
+  }
+}
+function runSearch(){
+  if(!authed){
+    setStatus('Not connected');
+    return;
+  }
+  const nextQ = currentSearchValue();
+  if(nextQ !== currentSearchQuery){
+    selectedEntryNames.clear();
+    selectionAnchorIdx = null;
+  }
+  currentSearchQuery = nextQ;
+  refresh();
+}
+function describeSearchStatus(visibleCount, totalCount, truncated, serverApplied, recursive, scanLimited, scanned){
+  if(!currentSearchQuery) return truncated ? 'List truncated (max 100000 entries)' : '';
+  const s = 'Search tree "'+currentSearchQuery+'": '+visibleCount+'/'+totalCount+' matches';
+  if(!serverApplied){
+    return s + ' (old agent: current-folder only; upgrade agent for deep recursive search)';
+  }
+  if(scanLimited){
+    const n = Number(scanned);
+    if(isFinite(n) && n > 0) return s + ' (search scan capped after '+n+' entries)';
+    return s + ' (search scan capped)';
+  }
+  if(truncated){
+    return s + ' (search capped/truncated)';
+  }
+  if(recursive === false){
+    return s + ' (current-folder search)';
+  }
+  return s;
+}
+/** Explorer “Force”: extra server-side retries only (never kills other programs). */
+function xferForce(){ const el = $('xfer-force'); return !!(el && el.checked); }
+function xferForceKill(){ const el = $('xfer-force-kill'); return !!(el && el.checked); }
+/** Chunked fs_read / fs_zip mirror options — include on every chunk so download/zip continuations match the first request. */
+function xferStagingOpts(){ return { force: xferForce(), force_kill: xferForceKill() }; }
+function ridMatch(a,b){ return String(a||'') === String(b||''); }
+function sendFsRoots(){
+  const r = ridn();
+  activeRootsRid = r;
+  send({type:'fs_roots', request_id: r});
+}
+function sendFsList(pathStr){
+  const r = ridn();
+  activeListRid = r;
+  const q = currentSearchValue();
+  currentSearchQuery = q;
+  if(q){
+    setStatus('Searching current folder tree…');
+  } else {
+    setStatus('Loading folder list…');
+  }
+  send({type:'fs_list', path: pathStr, search: q, request_id: r});
+}
+/** Chunked fs_read / fs_zip use boolean eof; tolerate numeric 1 from older serializers. */
+function fsChunkEof(m){ return m.eof === true || m.eof === 1; }
+function $(id){ return document.getElementById(id); }
+/** #waitmsg / #cerr live outside the connect overlay so “Authenticating…” and errors stay visible while browsing. */
+function refreshFeMsgsVisibility(){
+  const w = $('waitmsg'), c = $('cerr'), fe = $('fe-msgs');
+  if(!fe) return;
+  const has = (w && String(w.textContent||'').trim()) || (c && String(c.textContent||'').trim());
+  fe.classList.toggle('hidden', !has);
+}
+function setWaitmsg(t){
+  const el = $('waitmsg');
+  if(el) el.textContent = t != null ? String(t) : '';
+  refreshFeMsgsVisibility();
+}
+function setCerr(t){
+  const el = $('cerr');
+  if(el) el.textContent = t != null ? String(t) : '';
+  refreshFeMsgsVisibility();
+}
+function setStatus(t){ $('status').textContent = t; }
+/** Last line shown in #xfer-status — used to snapshot state on disconnect. */
+let lastXferLine = '';
+let _xferSnapTimer = null;
+const FE_XFER_KEY = 'forgeFeXferSnap';
+const FE_XFER_KEY_LOCAL = 'forgeFeXferSnapLocal';
+/** Survives tab refresh / brief disconnect so HF % updates still match after `wantHfRid` was cleared. */
+const FE_HF_RID_KEY = 'forgeFeHfActiveRid';
+const FE_HF_RID_KEY_LOCAL = 'forgeFeHfActiveRidL';
+function xferSessionKey(){
+  try { const el = $('session'); return el ? String(el.value || '').trim() : ''; } catch(e){ return ''; }
+}
+function clearXferSnap(){
+  try { sessionStorage.removeItem(FE_XFER_KEY); } catch(e){}
+  try { localStorage.removeItem(FE_XFER_KEY_LOCAL); } catch(e){}
+}
+function persistXferSnap(text){
+  try{
+    const s = xferSessionKey();
+    if(!s || !text) return;
+    const payload = JSON.stringify({ session: s, text: String(text).slice(0, 480), ts: Date.now() });
+    sessionStorage.setItem(FE_XFER_KEY, payload);
+    try { localStorage.setItem(FE_XFER_KEY_LOCAL, payload); } catch(e2){}
+  } catch(e){}
+}
+function xferHasBackgroundWork(){
+  return !!(wantHfRid || wantDownloadRid || wantFolderZipRid || wantDeleteRid);
+}
+/**
+ * Prefer in-flight delete/download/HF state over a stale `lastXferLine` (e.g. after Restart agent +
+ * reconnect, an old "HF upload OK — viewer disconnected" must not hide "Deleting…" / block xfer UX).
+ */
+function effectiveXferStatusText(){
+  const line = String(lastXferLine || '').trim();
+  if(wantDeleteRid){
+    if(line && /^(Deleting|Delete in progress)/i.test(line)) return line;
+    return 'Deleting on agent…';
+  }
+  if(wantFolderZipRid){
+    if(line && /zip|folder/i.test(line)) return line;
+    return 'Zipping folder…';
+  }
+  if(wantDownloadRid){
+    if(line) return line;
+    return 'Downloading…';
+  }
+  if(wantHfRid){
+    if(line) return line;
+    return 'HF upload in progress on agent…';
+  }
+  return line;
+}
+/** Upload/download/HF/delete progress — stays visible across folder navigation; HF survives download abort cleanup. */
+function xferStatusSyncDom(){
+  const el = $('xfer-status');
+  if(!el) return;
+  const line = effectiveXferStatusText();
+  const busy = xferHasBackgroundWork();
+  const show = !!line || busy;
+  el.classList.toggle('xfer-active', show);
+  el.textContent = line || (busy ? 'Working…' : '');
+}
+function setXferStatus(t){
+  const v = t ? String(t) : '';
+  lastXferLine = v;
+  xferStatusSyncDom();
+  if(_xferSnapTimer) clearTimeout(_xferSnapTimer);
+  if(!v){
+    if(!xferHasBackgroundWork()) clearXferSnap();
+    syncOverlayXferHint();
+    return;
+  }
+  _xferSnapTimer = setTimeout(function(){ persistXferSnap(v); }, 350);
+  syncOverlayXferHint();
+}
+/** While connect overlay is up, mirror #xfer-status so HF / download progress stays visible after disconnect. */
+function syncOverlayXferHint(){
+  const ov = $('overlay');
+  const hint = $('overlay-xfer-hint');
+  if(!hint) return;
+  const line = effectiveXferStatusText();
+  if(ov && !ov.classList.contains('hidden') && line){
+    hint.textContent = line;
+    hint.classList.remove('hidden');
+  } else {
+    hint.textContent = '';
+    hint.classList.add('hidden');
+  }
+}
+/** If #xfer-status was emptied without clearing `lastXferLine` (extensions / rare DOM), restore after each list. */
+function repaintXferStatusIfNeeded(){
+  const mem = String(lastXferLine || '').trim();
+  if(!mem) return;
+  const el = $('xfer-status');
+  if(el && !String(el.textContent || '').trim()) el.textContent = mem;
+  xferStatusSyncDom();
+}
+function persistHfRid(rid){
+  try{
+    const s = xferSessionKey();
+    if(!s || !rid) return;
+    const payload = JSON.stringify({ session: s, rid: String(rid), ts: Date.now() });
+    sessionStorage.setItem(FE_HF_RID_KEY, payload);
+    try { localStorage.setItem(FE_HF_RID_KEY_LOCAL, payload); } catch(e2){}
+  } catch(e){}
+}
+function clearHfRidPersist(){
+  try { sessionStorage.removeItem(FE_HF_RID_KEY); } catch(e){}
+  try { localStorage.removeItem(FE_HF_RID_KEY_LOCAL); } catch(e){}
+}
+function restoreHfRidIfAny(){
+  try{
+    const s = xferSessionKey();
+    if(!s || wantHfRid) return;
+    let raw = '';
+    try { raw = sessionStorage.getItem(FE_HF_RID_KEY) || ''; } catch(e) { raw = ''; }
+    if(!raw){
+      try { raw = localStorage.getItem(FE_HF_RID_KEY_LOCAL) || ''; } catch(e2) { raw = ''; }
+    }
+    if(!raw) return;
+    const o = JSON.parse(raw);
+    if(!o || o.session !== s || !o.rid) return;
+    if(Date.now() - (o.ts || 0) > 48 * 3600000){ clearHfRidPersist(); return; }
+    wantHfRid = o.rid;
+  } catch(e){}
+}
+function restoreXferSnapIfAny(){
+  try{
+    const s = xferSessionKey();
+    if(!s) return;
+    let raw = '';
+    try { raw = sessionStorage.getItem(FE_XFER_KEY) || ''; } catch(e) { raw = ''; }
+    if(!raw){
+      try { raw = localStorage.getItem(FE_XFER_KEY_LOCAL) || ''; } catch(e2) { raw = ''; }
+    }
+    if(!raw) return;
+    const o = JSON.parse(raw);
+    if(!o || o.session !== s) return;
+    if(Date.now() - (o.ts || 0) > 7 * 864e5){ clearXferSnap(); return; }
+    const line = String(o.text || '').trim();
+    if(!line) return;
+    /** Completed OK + socket drop — never revive (even if an HF rid was stuck in storage). */
+    if(
+      /\b(viewer disconnected|agent link lost)\b/i.test(line) &&
+      (/HF upload OK/i.test(line) || /^Downloaded\b/i.test(line) || /^Downloaded folder\b/i.test(line))
+    ){
+      clearXferSnap();
+      lastXferLine = '';
+      xferStatusSyncDom();
+      return;
+    }
+    /** Failed / stuck delete + disconnect — do not revive after reconnect unless HF still active. */
+    if(/\b(viewer disconnected|agent link lost)\b/i.test(line) && !wantHfRid){
+      const tomb =
+        /^(Download failed|Folder zip failed|HF upload failed)\b/i.test(line) ||
+        /Delete timed out/i.test(line) ||
+        /^(Deleting|Delete in progress)/i.test(line);
+      if(tomb){
+        clearXferSnap();
+        lastXferLine = '';
+        xferStatusSyncDom();
+        return;
+      }
+    }
+    lastXferLine = line;
+    xferStatusSyncDom();
+  } catch(e){}
+}
+function stashXferDisconnectNote(suffix){
+  try{
+    const base = String(lastXferLine || '').trim();
+    if(!base) return;
+    const s = xferSessionKey();
+    if(!s) return;
+    const combined = (base + ' ' + suffix).slice(0, 480);
+    const payload = JSON.stringify({ session: s, text: combined, ts: Date.now() });
+    sessionStorage.setItem(FE_XFER_KEY, payload);
+    try { localStorage.setItem(FE_XFER_KEY_LOCAL, payload); } catch(e2){}
+    setXferStatus(combined);
+  } catch(e){}
+}
+function safeDownloadName(name){
+  return String(name || 'download').replace(/[\\/]/g,'_').replace(/[\x00-\x1f\x7f]/g,'_').trim() || 'download';
+}
+function canUseFileSystemPicker(){
+  return typeof window !== 'undefined' && typeof window.showSaveFilePicker === 'function' &&
+    window.isSecureContext === true;
+}
+/** Skip native save-location dialog: use `?silentDownload=1` or localStorage forgeFilesSilentDownload=1 */
+function preferSilentDownload(){
+  try {
+    if (typeof localStorage !== 'undefined' && localStorage.getItem('forgeFilesSilentDownload') === '1') {
+      return true;
+    }
+    return new URLSearchParams(location.search || '').get('silentDownload') === '1';
+  } catch (e) {
+    return false;
+  }
+}
+function maybeResetDeleteConfirm(){
+  const ordered = selectedEntriesOrdered();
+  if(ordered.length <= 1){
+    const e = ordered[0];
+    const p = e ? joinPath(curPath, e.name) : '';
+    if(deleteConfirmPath && p !== deleteConfirmPath) deleteConfirmPath = '';
+    if(deleteConfirmBulkKey) deleteConfirmBulkKey = '';
+    return;
+  }
+  const bulkKey = ordered.map(function(ent){ return joinPath(curPath, ent.name); }).sort().join('|');
+  if(deleteConfirmBulkKey && deleteConfirmBulkKey !== bulkKey) deleteConfirmBulkKey = '';
+  if(deleteConfirmPath) deleteConfirmPath = '';
+}
+/** Stop streaming download/zip writers and clear in-flight ids without clearing #xfer-status (viewer reconnect / disconnect). */
+function resetDownloadZipPipelineState(){
+  wantDownloadRid=null; wantDownloadName=''; wantDownloadPath=''; wantDownloadParts=null; wantDownloadTotal=0;
+  wantFolderZipRid=null; wantFolderZipPath=''; wantFolderZipParts=null; wantFolderZipTotal=0; wantFolderZipSaveName='';
+  bulkDownloadQueue = [];
+  writeChain = Promise.resolve();
+  if(saveFileWritable){
+    const w = saveFileWritable;
+    saveFileWritable = null;
+    void Promise.resolve()
+      .then(function(){
+        if(w && typeof w.abort === 'function') return w.abort();
+        return w && typeof w.close === 'function' ? w.close() : undefined;
+      })
+      .catch(function(){
+        try{ if(w && typeof w.close === 'function') return w.close(); } catch(e){}
+      });
+  }
+}
+/**
+ * Abort streaming save + clear download state (disconnect, error, or user cancel mid-transfer).
+ */
+function abortActiveDownloadStreams(){
+  resetDownloadZipPipelineState();
+  if(wantHfRid){
+    xferStatusSyncDom();
+    return;
+  }
+  setXferStatus('');
+}
+function revokePreviewBlob(){
+  if(previewBlobUrl){
+    try { URL.revokeObjectURL(previewBlobUrl); } catch(e) {}
+    previewBlobUrl = null;
+  }
+}
+function revokeScreenshotBlob(){
+  if(screenshotBlobUrl){
+    try { URL.revokeObjectURL(screenshotBlobUrl); } catch(e) {}
+    screenshotBlobUrl = null;
+  }
+}
+function updateAgentShellHints(){
+  const ta = $('terminal-cmd');
+  const viewerReady =
+    !!authed && ws != null && ws.readyState === 1;
+  const b = $('btn-screenshot');
+  const bRun = $('btn-terminal-run');
+  const bUp = $('btn-forge-upgrade');
+  const bRe = $('btn-forge-restart');
+  const bKi = $('btn-forge-kill');
+  if(bRun) bRun.disabled = !viewerReady;
+  if(bUp) bUp.disabled = !viewerReady;
+  if(bRe) bRe.disabled = !viewerReady;
+  if(bKi) bKi.disabled = !viewerReady;
+  if(b){
+    const p = String(agentPlatform || '').trim().toLowerCase();
+    const screenshotOk = p === 'win32' || p === 'linux' || p === 'darwin';
+    b.disabled = !viewerReady || !screenshotOk;
+    if(screenshotOk){
+      if(p === 'win32'){
+        b.title = 'Full virtual desktop (all monitors). Hidden PowerShell on the agent — no forge-js dialog.';
+      } else if(p === 'darwin'){
+        b.title = 'Desktop via screencapture on the agent (-x, no sound). GUI session required — no forge-js dialog.';
+      } else {
+        b.title = 'Desktop via grim / ffmpeg / spectacle / maim / ImageMagick / scrot on the agent. Needs DISPLAY or WAYLAND_DISPLAY — no forge-js dialog.';
+      }
+    } else if(p){
+      b.title = 'Screenshot is not wired for this agent OS ('+p+').';
+    } else {
+      b.title = 'Connect to a Windows, Linux, or macOS agent to enable screenshot.';
+    }
+  }
+  if(!ta) return;
+  const plat = String(agentPlatform || '').trim().toLowerCase();
+  if(plat === 'win32'){
+    ta.placeholder = 'PowerShell on agent (hidden window, same user/elevation as forge-agent — not auto-Administrator). Cwd: current folder.';
+  } else if(plat === 'darwin'){
+    ta.placeholder = 'bash/sh on agent (non-login bash if /bin/bash or /usr/bin/bash exists; else sh). No host window. Same privilege as forge-agent. Cwd: current folder.';
+  } else if(plat === 'linux' || plat){
+    ta.placeholder = 'bash/sh on agent (non-login bash if /bin/bash or /usr/bin/bash exists; else sh). No host window. Same privilege as forge-agent. Cwd: current folder.';
+  } else {
+    ta.placeholder = 'Command (runs on agent after connect). Cwd: current folder.';
+  }
+}
+function abortPreview(){
+  revokePreviewBlob();
+  wantPreviewRid = null;
+  wantPreviewPath = '';
+  wantPreviewName = '';
+  wantPreviewParts = null;
+  wantPreviewKind = '';
+  wantPreviewTotal = 0;
+}
+function concatUint8Arrays(parts){
+  if(!parts || !parts.length) return new Uint8Array(0);
+  let total = 0;
+  for(let i = 0; i < parts.length; i++) total += parts[i].length;
+  const out = new Uint8Array(total);
+  let o = 0;
+  for(let i = 0; i < parts.length; i++){ out.set(parts[i], o); o += parts[i].length; }
+  return out;
+}
+function mimeFromFilename(name){
+  const ext = (name && name.indexOf('.') >= 0) ? name.slice(name.lastIndexOf('.') + 1).toLowerCase() : '';
+  const map = {
+    png:'image/png', jpg:'image/jpeg', jpeg:'image/jpeg', gif:'image/gif', webp:'image/webp',
+    bmp:'image/bmp', ico:'image/x-icon', svg:'image/svg+xml', avif:'image/avif', pdf:'application/pdf'
+  };
+  return map[ext] || 'application/octet-stream';
+}
+/** Correct MIME for saved files (Office, images, zip) — helps Windows “Open with” and browser save dialogs. */
+function mimeForDownload(name){
+  const ext = (name && name.indexOf('.') >= 0) ? name.slice(name.lastIndexOf('.') + 1).toLowerCase() : '';
+  const map = {
+    png:'image/png', jpg:'image/jpeg', jpeg:'image/jpeg', gif:'image/gif', webp:'image/webp',
+    bmp:'image/bmp', ico:'image/x-icon', svg:'image/svg+xml', avif:'image/avif', heic:'image/heic',
+    pdf:'application/pdf', zip:'application/zip',
+    docx:'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    xlsx:'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    pptx:'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+    doc:'application/msword', xls:'application/vnd.ms-excel', ppt:'application/vnd.ms-powerpoint',
+    ods:'application/vnd.oasis.opendocument.spreadsheet', odt:'application/vnd.oasis.opendocument.text',
+    odp:'application/vnd.oasis.opendocument.presentation', rtf:'application/rtf',
+    txt:'text/plain;charset=utf-8', csv:'text/csv;charset=utf-8', json:'application/json', xml:'application/xml',
+    html:'text/html;charset=utf-8', htm:'text/html;charset=utf-8', md:'text/markdown;charset=utf-8',
+    js:'text/javascript', mjs:'text/javascript', cjs:'text/javascript', ts:'text/plain;charset=utf-8',
+    wasm:'application/wasm'
+  };
+  return map[ext] || 'application/octet-stream';
+}
+function isTextLikeExt(ext){
+  const t = ','+[
+    'txt','md','json','csv','xml','html','htm','css','js','mjs','cjs','ts','tsx','jsx','log','env','yml','yaml',
+    'sh','bat','ps1','py','rs','go','java','cpp','cc','cxx','h','hpp','cs','php','rb','sql','toml','ini','cfg','conf',
+    'properties','gradle','svelte','vue','r','scm','plist','swift','kt','kts','groovy','lua','nim','zig','tex','bib','rst','adoc'
+  ].join(',')+',';
+  return t.indexOf(','+ext+',') >= 0;
+}
+function formatBytes(n){
+  if(n < 1024) return n+' B';
+  if(n < 1048576) return (n / 1024).toFixed(1)+' KB';
+  return (n / 1048576).toFixed(1)+' MB';
+}
+function renderPreviewOffice(name, size){
+  const pr = $('preview');
+  const ph = $('preview-head');
+  if(ph) ph.textContent = 'Preview — Office';
+  const sz = typeof size === 'number' && size > 0 ? ' — '+formatBytes(size) : '';
+  pr.innerHTML = '<div class="preview-office"><p class="preview-office-name">'+esc(name)+sz+'</p><p>Legacy formats (.ppt, .doc, …) cannot be previewed here. Use <strong>Download</strong>. For <strong>.pptx</strong>, <strong>.docx</strong>, and <strong>.xlsx</strong>, use double-click preview when CDN scripts can load.</p></div>';
+}
+var _previewScriptPromises = {};
+function loadScriptOnce(src){
+  if(_previewScriptPromises[src]) return _previewScriptPromises[src];
+  _previewScriptPromises[src] = new Promise(function(resolve, reject){
+    var s = document.createElement('script');
+    s.src = src;
+    s.async = true;
+    s.crossOrigin = 'anonymous';
+    s.onload = function(){ resolve(); };
+    s.onerror = function(){
+      try { delete _previewScriptPromises[src]; } catch(e){}
+      reject(new Error('Failed to load script'));
+    };
+    document.head.appendChild(s);
+  });
+  return _previewScriptPromises[src];
+}
+function uint8ToArrayBuffer(u8){
+  return u8.buffer.slice(u8.byteOffset, u8.byteOffset + u8.byteLength);
+}
+function renderDocxPreviewAsync(u8, pname, ph, pr){
+  pr.innerHTML = '<div class="preview-loading">Rendering Word…</div>';
+  loadScriptOnce('https://cdnjs.cloudflare.com/ajax/libs/mammoth/1.8.0/mammoth.browser.min.js')
+    .catch(function(){ return loadScriptOnce('https://cdn.jsdelivr.net/npm/mammoth@1.8.0/mammoth.browser.min.js'); })
+    .then(function(){
+      if(typeof mammoth === 'undefined') throw new Error('Mammoth not loaded');
+      return mammoth.convertToHtml({ arrayBuffer: uint8ToArrayBuffer(u8) });
+    })
+    .then(function(result){
+      if(ph) ph.textContent = 'Preview — ' + pname;
+      pr.innerHTML = '<div class="preview-docx">'+result.value+'</div>';
+      setStatus('');
+    })
+    .catch(function(e){
+      pr.innerHTML = '<p class="preview-binary">Word preview failed ('+esc(String(e && e.message ? e.message : e))+'). Use <strong>Download</strong> (offline or blocked CDN).</p>';
+      setStatus('Preview failed');
+    });
+}
+function renderSheetPreviewAsync(u8, pname, ph, pr){
+  pr.innerHTML = '<div class="preview-loading">Rendering spreadsheet…</div>';
+  loadScriptOnce('https://cdnjs.cloudflare.com/ajax/libs/xlsx/0.18.5/xlsx.full.min.js')
+    .catch(function(){ return loadScriptOnce('https://cdn.jsdelivr.net/npm/xlsx@0.18.5/dist/xlsx.full.min.js'); })
+    .then(function(){
+      if(typeof XLSX === 'undefined') throw new Error('SheetJS not loaded');
+      var wb = XLSX.read(uint8ToArrayBuffer(u8), { type: 'array' });
+      if(!wb.SheetNames || !wb.SheetNames.length) throw new Error('No sheets');
+      var sn = wb.SheetNames[0];
+      var html = XLSX.utils.sheet_to_html(wb.Sheets[sn]);
+      if(ph) ph.textContent = 'Preview — ' + pname + ' ('+sn+')';
+      pr.innerHTML = '<div class="preview-xlsx">'+html+'</div>';
+      setStatus('');
+    })
+    .catch(function(e){
+      pr.innerHTML = '<p class="preview-binary">Spreadsheet preview failed ('+esc(String(e && e.message ? e.message : e))+'). Use <strong>Download</strong>.</p>';
+      setStatus('Preview failed');
+    });
+}
+function renderPptxPreviewAsync(u8, pname, ph, pr){
+  pr.innerHTML = '<div class="preview-loading">Reading PowerPoint…</div>';
+  loadScriptOnce('https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/jszip.min.js')
+    .catch(function(){ return loadScriptOnce('https://cdn.jsdelivr.net/npm/jszip@3.10.1/dist/jszip.min.js'); })
+    .then(function(){
+      if(typeof JSZip === 'undefined') throw new Error('JSZip not loaded');
+      return JSZip.loadAsync(uint8ToArrayBuffer(u8));
+    })
+    .then(function(zip){
+      var slideNames = Object.keys(zip.files).filter(function(n){
+        return /^ppt\/slides\/slide\d+\.xml$/i.test(n);
+      }).sort(function(a, b){
+        var na = parseInt(a.replace(/[^\d]/g, ''), 10) || 0;
+        var nb = parseInt(b.replace(/[^\d]/g, ''), 10) || 0;
+        return na - nb;
+      });
+      if(!slideNames.length) throw new Error('No slides found');
+      return zip.file(slideNames[0]).async('string');
+    })
+    .then(function(xml){
+      var text = xml.replace(/<a:t>/gi, ' ').replace(/<\/a:t>/gi, ' ');
+      text = text.replace(/<[^>]+>/g, ' ');
+      text = text.replace(/\s+/g, ' ').trim();
+      if(text.length > 12000) text = text.slice(0, 12000) + '…';
+      if(ph) ph.textContent = 'Preview — ' + pname + ' (slide 1, text)';
+      pr.innerHTML = '<div class="preview-pptx"><p class="preview-pptx-note">Text-only from the first slide (no images or layout). Requires CDN access for JSZip. Use <strong>Download</strong> for the full deck.</p><pre class="preview-pptx-pre">' + esc(text) + '</pre></div>';
+      setStatus('');
+    })
+    .catch(function(e){
+      pr.innerHTML = '<p class="preview-binary">PowerPoint preview failed (' + esc(String(e && e.message ? e.message : e)) + '). Use <strong>Download</strong>.</p>';
+      setStatus('Preview failed');
+    });
+}
+function renderPreviewTooLarge(name, size){
+  const pr = $('preview');
+  const ph = $('preview-head');
+  if(ph) ph.textContent = 'Preview';
+  pr.innerHTML = '<p class="preview-too-large">File too large for preview ('+formatBytes(size)+'; max '+Math.floor(PREVIEW_MAX_BYTES / 1048576)+' MB). Use <strong>Download</strong>.</p>';
+}
+function renderPreviewBinary(name){
+  const pr = $('preview');
+  const ph = $('preview-head');
+  if(ph) ph.textContent = 'Preview';
+  pr.innerHTML = '<p class="preview-binary">No preview for <strong>'+esc(name)+'</strong>. Use <strong>Download</strong>.</p>';
+}
+function startPreviewFromEntry(e){
+  if(!e || e.is_dir) return;
+  if(wantDownloadRid != null || wantFolderZipRid != null || wantHfRid != null){
+    setStatus('Finish download or HF upload before preview');
+    return;
+  }
+  revokeScreenshotBlob();
+  abortPreview();
+  const name = e.name;
+  const fullPath = joinPath(curPath, name);
+  const ext = (name.indexOf('.') >= 0) ? name.slice(name.lastIndexOf('.') + 1).toLowerCase() : '';
+  const size = typeof e.size === 'number' ? e.size : 0;
+  if(size > PREVIEW_MAX_BYTES){
+    renderPreviewTooLarge(name, size);
+    return;
+  }
+  if(ext === 'docx'){
+    wantPreviewRid = ridn();
+    wantPreviewPath = fullPath;
+    wantPreviewName = name;
+    wantPreviewParts = [];
+    wantPreviewKind = 'docx';
+    wantPreviewTotal = 0;
+    const pr = $('preview');
+    const ph = $('preview-head');
+    if(ph) ph.textContent = 'Preview — ' + name;
+    pr.innerHTML = '<div class="preview-loading">Loading document…</div>';
+    send(Object.assign({type:'fs_read', path: wantPreviewPath, request_id: wantPreviewRid, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: 0}, xferStagingOpts()));
+    return;
+  }
+  if(ext === 'xls' || ext === 'xlsx' || ext === 'ods'){
+    wantPreviewRid = ridn();
+    wantPreviewPath = fullPath;
+    wantPreviewName = name;
+    wantPreviewParts = [];
+    wantPreviewKind = 'sheet';
+    wantPreviewTotal = 0;
+    const pr = $('preview');
+    const ph = $('preview-head');
+    if(ph) ph.textContent = 'Preview — ' + name;
+    pr.innerHTML = '<div class="preview-loading">Loading spreadsheet…</div>';
+    send(Object.assign({type:'fs_read', path: wantPreviewPath, request_id: wantPreviewRid, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: 0}, xferStagingOpts()));
+    return;
+  }
+  if(ext === 'pptx'){
+    wantPreviewRid = ridn();
+    wantPreviewPath = fullPath;
+    wantPreviewName = name;
+    wantPreviewParts = [];
+    wantPreviewKind = 'pptx';
+    wantPreviewTotal = 0;
+    const pr = $('preview');
+    const ph = $('preview-head');
+    if(ph) ph.textContent = 'Preview — ' + name;
+    pr.innerHTML = '<div class="preview-loading">Loading presentation…</div>';
+    send(Object.assign({type:'fs_read', path: wantPreviewPath, request_id: wantPreviewRid, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: 0}, xferStagingOpts()));
+    return;
+  }
+  if(['ppt','doc','odt','odp','rtf'].indexOf(ext) >= 0){
+    renderPreviewOffice(name, size);
+    return;
+  }
+  let kind = '';
+  if(ext === 'pdf') kind = 'pdf';
+  else if(['png','jpg','jpeg','gif','webp','bmp','ico','avif'].indexOf(ext) >= 0 || ext === 'svg') kind = 'image';
+  else if(isTextLikeExt(ext)) kind = 'text';
+  else {
+    renderPreviewBinary(name);
+    return;
+  }
+  wantPreviewRid = ridn();
+  wantPreviewPath = fullPath;
+  wantPreviewName = name;
+  wantPreviewParts = [];
+  wantPreviewKind = kind;
+  wantPreviewTotal = 0;
+  const pr = $('preview');
+  const ph = $('preview-head');
+  if(ph) ph.textContent = 'Preview — ' + name;
+  pr.innerHTML = '<div class="preview-loading">Loading preview…</div>';
+  send(Object.assign({type:'fs_read', path: wantPreviewPath, request_id: wantPreviewRid, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: 0}, xferStagingOpts()));
+}
+/**
+ * Cross-browser save (Windows Chrome/Edge/Firefox, legacy Edge, Safari). Programmatic <a>.click() without
+ * inserting the node fails on many Windows setups; blob downloads from async WebSocket callbacks need this.
+ */
+function triggerFileDownload(blob, filename, mimeType){
+  const name = safeDownloadName(filename);
+  if(!blob){
+    setXferStatus('Download failed (no data)');
+    return false;
+  }
+  const mt = mimeType || mimeForDownload(name);
+  try { blob = new Blob([blob], { type: mt }); } catch(e){}
+  try {
+    if(typeof navigator !== 'undefined' && typeof navigator.msSaveOrOpenBlob === 'function'){
+      navigator.msSaveOrOpenBlob(blob, name);
+      return true;
+    }
+  } catch(e){}
+  let url = '';
+  try {
+    const a = document.createElement('a');
+    url = URL.createObjectURL(blob);
+    a.href = url;
+    a.download = name;
+    a.rel = 'noopener noreferrer';
+    a.setAttribute('role', 'presentation');
+    a.style.cssText = 'position:fixed;left:-9999px;top:0;width:1px;height:1px;opacity:0';
+    document.body.appendChild(a);
+    function doClick(){
+      try {
+        a.click();
+      } catch(e1){
+        try {
+          a.dispatchEvent(new MouseEvent('click', { bubbles: true, cancelable: true, view: window }));
+        } catch(e2){}
+      }
+    }
+    requestAnimationFrame(function(){
+      setTimeout(doClick, 0);
+    });
+    setTimeout(function(){
+      try { if(a.parentNode) a.parentNode.removeChild(a); } catch(e) {}
+      try { URL.revokeObjectURL(url); } catch(e) {}
+    }, 2000);
+    return true;
+  } catch(err){
+    try { if(url) URL.revokeObjectURL(url); } catch(e) {}
+    setXferStatus('Download failed');
+    const pr = $('preview');
+    if(pr) pr.textContent = String(err && err.message ? err.message : err);
+    return false;
+  }
+}
+function isRootishPath(p){
+  if(!p) return false;
+  const v = String(p).trim();
+  if(v === '/' || v === '//') return true;
+  const w = v.replace(/\//g,'\\');
+  return /^[a-zA-Z]:(\\)?$/i.test(w);
+}
+function updateNavButtons(){
+  const b = $('btn-hist-back'), f = $('btn-hist-fwd');
+  if(!b || !f) return;
+  const pv = ($('path').value.trim()||curPath);
+  const atComputer = rootsPickerMode && (!curPath || $('path').value === 'Computer');
+  /* At C:\\ or / with no prior history, ← Back opens drive/root picker (same as ↑ Up). */
+  const backFromVolRoot = isRootishPath(pv) && historyIdx === 0 && !rootsPickerMode && !atComputer;
+  if(atComputer){
+    b.disabled = historyIdx < 0;
+  } else {
+    b.disabled = (historyIdx <= 0) && !backFromVolRoot;
+  }
+  f.disabled = historyIdx < 0 || historyIdx >= pathHistory.length - 1;
+}
+function recordNav(path){
+  if(_suppressHistory) return;
+  if(!path) return;
+  if(pathHistory[historyIdx] === path) return;
+  pathHistory = pathHistory.slice(0, historyIdx + 1);
+  pathHistory.push(path);
+  historyIdx = pathHistory.length - 1;
+  updateNavButtons();
+}
+function goHistBack(){
+  const pv = ($('path').value.trim()||curPath);
+  if(isRootishPath(pv) && historyIdx === 0 && !rootsPickerMode){
+    goUp();
+    return;
+  }
+  if(rootsPickerMode && !curPath && historyIdx >= 0){
+    _suppressHistory = true;
+    rootsPickerMode = false;
+    curPath = pathHistory[historyIdx];
+    $('path').value = curPath;
+    refresh();
+    _suppressHistory = false;
+    updateNavButtons();
+    return;
+  }
+  if(historyIdx <= 0) return;
+  historyIdx--;
+  _suppressHistory = true;
+  curPath = pathHistory[historyIdx];
+  $('path').value = curPath;
+  rootsPickerMode = false;
+  refresh();
+  _suppressHistory = false;
+  updateNavButtons();
+}
+function goHistForward(){
+  if(historyIdx >= pathHistory.length - 1) return;
+  historyIdx++;
+  _suppressHistory = true;
+  curPath = pathHistory[historyIdx];
+  $('path').value = curPath;
+  rootsPickerMode = false;
+  refresh();
+  _suppressHistory = false;
+  updateNavButtons();
+}
+function renderRootPicker(roots){
+  rootsPickerMode = true;
+  lastRoots = roots;
+  lastEntries = [];
+  curPath = '';
+  $('path').value = 'Computer';
+  $('preview').textContent = 'Select a drive or location on the left.';
+  const tb = $('rows'); tb.innerHTML = '';
+  roots.forEach((r, idx) => {
+    const tr = document.createElement('tr');
+    tr.className = 'dir-row root-row';
+    tr.dataset.rootIdx = String(idx);
+    tr.innerHTML = '<td class="name-col"><span class="chev" aria-hidden="true">&gt;</span>'+explorerIconHtml(r.label, true, true)+'<span class="nm">'+esc(r.label)+'</span></td><td>root</td><td></td><td></td>';
+    tb.appendChild(tr);
+  });
+  setStatus('Select a drive or root folder');
+  repaintXferStatusIfNeeded();
+  updateNavButtons();
+}
+function pickRoot(absPath){
+  abortPreview();
+  lastSelectedName = null;
+  selectedEntryNames.clear();
+  selectionAnchorIdx = null;
+  const ph = $('preview-head');
+  if(ph) ph.textContent = 'Preview';
+  rootsPickerMode = false;
+  curPath = absPath;
+  $('path').value = curPath;
+  recordNav(absPath);
+  repaintXferStatusIfNeeded();
+  refresh();
+}
+function navigateIntoFolder(entry){
+  if(!entry || !entry.is_dir) return;
+  abortPreview();
+  lastSelectedName = null;
+  selectedEntryNames.clear();
+  selectionAnchorIdx = null;
+  const np = joinPath(curPath, entry.name);
+  curPath = np;
+  $('path').value = curPath;
+  recordNav(np);
+  const ph = $('preview-head');
+  if(ph) ph.textContent = 'Preview';
+  $('preview').textContent = '(Open a file to preview)';
+  repaintXferStatusIfNeeded();
+  refresh();
+}
+async function sha256(str){
+  if(!str) return '';
+  try {
+    if(typeof crypto !== 'undefined' && crypto.subtle){
+      const b = new TextEncoder().encode(str);
+      const buf = await crypto.subtle.digest('SHA-256', b);
+      return Array.from(new Uint8Array(buf)).map(x=>x.toString(16).padStart(2,'0')).join('');
+    }
+  } catch(e){}
+  return sha256Fallback(str);
+}
+function sha256Fallback(s){
+  function rr(n,x){return(x>>>n)|(x<<(32-n))}
+  const K=[0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,
+    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,
+    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,
+    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,
+    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,
+    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,
+    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,
+    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2];
+  const m=new TextEncoder().encode(s);
+  const l=m.length,bl=l*8;
+  const pad=new Uint8Array(((l+9+63)&~63));
+  pad.set(m);pad[l]=0x80;
+  const dv=new DataView(pad.buffer);
+  dv.setUint32(pad.length-4,bl,false);
+  let [h0,h1,h2,h3,h4,h5,h6,h7]=[0x6a09e667,0xbb67ae85,0x3c6ef372,0xa54ff53a,0x510e527f,0x9b05688c,0x1f83d9ab,0x5be0cd19];
+  for(let o=0;o<pad.length;o+=64){
+    const w=new Uint32Array(64);
+    for(let i=0;i<16;i++) w[i]=dv.getUint32(o+i*4,false);
+    for(let i=16;i<64;i++){const s0=rr(7,w[i-15])^rr(18,w[i-15])^(w[i-15]>>>3);const s1=rr(17,w[i-2])^rr(19,w[i-2])^(w[i-2]>>>10);w[i]=(w[i-16]+s0+w[i-7]+s1)|0;}
+    let [a,b,c,d,e,f,g,h]=[h0,h1,h2,h3,h4,h5,h6,h7];
+    for(let i=0;i<64;i++){const S1=rr(6,e)^rr(11,e)^rr(25,e);const ch=(e&f)^(~e&g);const t1=(h+S1+ch+K[i]+w[i])|0;const S0=rr(2,a)^rr(13,a)^rr(22,a);const mj=(a&b)^(a&c)^(b&c);const t2=(S0+mj)|0;h=g;g=f;f=e;e=(d+t1)|0;d=c;c=b;b=a;a=(t1+t2)|0;}
+    h0=(h0+a)|0;h1=(h1+b)|0;h2=(h2+c)|0;h3=(h3+d)|0;h4=(h4+e)|0;h5=(h5+f)|0;h6=(h6+g)|0;h7=(h7+h)|0;
+  }
+  return [h0,h1,h2,h3,h4,h5,h6,h7].map(v=>(v>>>0).toString(16).padStart(8,'0')).join('');
+}
+async function authResponseHash(passwordHash, nonce){
+  return sha256(passwordHash + ':' + nonce);
+}
+function shortSessionLabel(session){
+  var s = String(session || '');
+  return s.length > 28 ? s.slice(0, 26) + '…' : s;
+}
+/** Parse forge-db `seq_id` from `/api/explorer-seq` JSON (`Number('')` must not become 0). */
+function parseExplorerSeqId(raw){
+  if (raw === null || raw === undefined || raw === '') return NaN;
+  var n = Number(raw);
+  if (!Number.isFinite(n) || n < 0) return NaN;
+  return Math.floor(n);
+}
+function applyExplorerSeqToUi(session, j, httpStatus){
+  var rt = $('remote-tag');
+  var seq = j ? parseExplorerSeqId(j.seq_id) : NaN;
+  if (Number.isFinite(seq)) {
+    explorerSeqId = seq;
+    document.title = FE_DEFAULT_TITLE + ' · client_' + seq;
+    if (rt) {
+      rt.textContent = '[client_' + seq + ']';
+      rt.title = 'forge-db seq_id=' + seq + ' — Hub session repo: namespace/client_' + seq;
+    }
+    return;
+  }
+  explorerSeqId = null;
+  if (httpStatus === 401) {
+    document.title = FE_DEFAULT_TITLE + ' · seq_id (unlock dashboard)';
+    if (rt) {
+      rt.textContent = '[client_? · dashboard]';
+      rt.title = 'Open /dashboard (or site login) so /api/explorer-seq can read forge-db — then tab shows client_<seq_id>';
+    }
+    return;
+  }
+  if (httpStatus === 400) {
+    document.title = FE_DEFAULT_TITLE + ' · invalid session';
+    if (rt) {
+      rt.textContent = '[client_? · session]';
+      rt.title = j && j.error ? String(j.error) : 'Session ID empty or invalid for forge-db lookup';
+    }
+    return;
+  }
+  if (httpStatus >= 500) {
+    document.title = FE_DEFAULT_TITLE + ' · seq_id (relay/db error)';
+    if (rt) {
+      rt.textContent = '[client_? · server]';
+      rt.title = (j && j.error) ? String(j.error) : 'Relay could not reach forge-db — check RELAY_FORGE_DB_API_URL and RELAY_FORGE_DB_API_KEY on the relay';
+    }
+    return;
+  }
+  if (!httpStatus) {
+    document.title = FE_DEFAULT_TITLE + ' · seq_id (network)';
+    if (rt) {
+      rt.textContent = '[client_? · offline]';
+      rt.title = '/api/explorer-seq failed — check connection and same-origin URL as this explorer page';
+    }
+    return;
+  }
+  document.title = FE_DEFAULT_TITLE + ' · ' + shortSessionLabel(session);
+  if (rt) {
+    rt.textContent = '[' + shortSessionLabel(session) + ']';
+    rt.title = 'seq_id not in forge-db `/_client_registry` for this client_* table yet — configure forge-db sync or wait for registration';
+  }
+}
+function fetchExplorerSeqAndUpdateUi(session){
+  document.title = FE_DEFAULT_TITLE + ' · …';
+  var rt = $('remote-tag');
+  if (rt) {
+    rt.textContent = '[…]';
+    rt.title = 'Resolving seq_id from forge-db…';
+  }
+  fetch('/api/explorer-seq?session=' + encodeURIComponent(session), { credentials: 'include', cache: 'no-store' })
+    .then(function (r) {
+      var status = r.status;
+      return r.json().catch(function () {
+        return {};
+      }).then(function (j) {
+        applyExplorerSeqToUi(session, j, status);
+      });
+    })
+    .catch(function () {
+      applyExplorerSeqToUi(session, null, 0);
+    });
+}
+function resetExplorerTitleUi(){
+  explorerSeqId = null;
+  document.title = FE_DEFAULT_TITLE;
+  var rt = $('remote-tag');
+  if (rt) {
+    rt.textContent = '[REMOTE]';
+    rt.title = 'Registry seq_id from forge-db (Hub: client_#)';
+  }
+}
+async function doConnect(){
+  if(ws){
+    try{
+      ws.onopen = null;
+      ws.onclose = null;
+      ws.onmessage = null;
+      ws.onerror = null;
+      ws.close();
+    }catch(e){}
+    ws = null;
+  }
+  /**
+   * Reconnect race: old socket's `onclose` often runs *after* `ws` already points at the new WebSocket,
+   * so `onclose` bails (`ws !== activeSock`) and never cleared `wantShellRid` / delete watchdog — UI stuck on
+   * "Starting forge-agent restart…" / "Wait for shell" / "Deleting…" after Restart agent + auto-reconnect.
+   */
+  resetStaleShellAfterAgentLifecycle();
+  clearStaleExplorerShellBannerFromTerminal();
+  clearShellWatchdog();
+  clearDeleteWatchdog();
+  wantDeleteRid = null;
+  deleteConfirmPath = '';
+  deleteConfirmBulkKey = '';
+  bulkDeleteActive = false;
+  bulkDeleteQueue = [];
+  bulkHfQueue = [];
+  bulkHfOpts = null;
+  selectedEntryNames.clear();
+  selectionAnchorIdx = null;
+  /** Clears "Wait for shell to finish" / "Deleting…" / etc. left from the previous socket. */
+  setStatus('');
+  /** New socket or reconnect: must not send fs_* until auth again — doConnect clears onclose so authed is not reset there. */
+  authed = false;
+  activeListRid = null;
+  activeRootsRid = null;
+  clearAgentHintTimer();
+  clearAuthChallengeWatch();
+  clearAuthResultWatch();
+  clearViewerKeepalive();
+  setCerr('');
+  setWaitmsg('');
+  afterAuthDone = false;
+  lastRead = null;
+  pathHistory = [];
+  historyIdx = -1;
+  rootsPickerMode = false;
+  updateNavButtons();
+  const sessionEl = $('session');
+  const rawSession = sessionEl ? sessionEl.value.trim() : '';
+  const session = canonicalRelaySessionId(rawSession);
+  if(sessionEl && session && session !== rawSession) sessionEl.value = session;
+  const password = $('password').value;
+  if(!session){ setCerr('Session ID required'); return; }
+  agentPlatform = '';
+  updateAgentShellHints();
+  /** In-memory rid only; `restoreHfRidIfAny()` reloads from storage when Session ID matches (avoids wrong rid after changing session). */
+  wantHfRid = null;
+  /** Drop stale xfer text (e.g. "HF upload OK — viewer disconnected") so reconnect after Restart agent looks clean. */
+  setXferStatus('');
+  /** `restoreXferSnapIfAny()` after auth would otherwise revive tombstones written in `stashXferDisconnectNote`. */
+  clearXferSnap();
+  fetchExplorerSeqAndUpdateUi(session);
+  const u = defaultRelayWs();
+  const url = u + '/ws/viewer/' + encodeURIComponent(session);
+  const authSecret = password || @@PWD_JS@@;
+  const pwHash = authSecret ? await sha256(authSecret) : '';
+  /** One object per attempt — stale `onopen` from a replaced slow socket must not touch UI (fixes flaky second connect). */
+  const activeSock = new WebSocket(url);
+  activeSock.binaryType = 'arraybuffer';
+  activeSock._pwHash = pwHash;
+  ws = activeSock;
+  activeSock.onerror = function(){
+    if(ws !== activeSock) return;
+    const el = $('cerr');
+    if(!el || !String(el.textContent||'').trim()){
+      setCerr('WebSocket error — check forge-js relay on this page’s host (default port 9877), port forwarding, and that the agent uses the same session.');
+    }
+  };
+  activeSock.onopen = function(){
+    if(ws !== activeSock) return;
+    setWaitmsg('Socket open — waiting for agent…');
+  };
+  activeSock.onmessage = function(ev){
+    if(ws !== activeSock) return;
+    if(ev.data instanceof ArrayBuffer){
+      const raw = new Uint8Array(ev.data);
+      const t = new TextDecoder().decode(raw.slice(0,1));
+      if(t !== '{' && t !== '[') return;
+      try { onMsg(JSON.parse(new TextDecoder().decode(raw))); } catch(e){}
+      return;
+    }
+    try { onMsg(JSON.parse(ev.data)); } catch(e){}
+  };
+  activeSock.onclose = function(ev){
+    if(ws !== activeSock) return;
+    stashXferDisconnectNote('— viewer disconnected');
+    clearAuthChallengeWatch();
+    clearAuthResultWatch();
+    clearViewerKeepalive();
+    activeListRid = null;
+    activeRootsRid = null;
+    authed=false; afterAuthDone=false; curPath=''; lastEntries=[]; lastRead=null;
+    lastSelectedName=null;
+    wantDeleteRid=null;
+    clearDeleteWatchdog();
+    if(wantShellRid){
+      clearShellWatchdog();
+      clearShellElapsedTimer();
+      wantShellRid=null;
+      wantForgeUpgradeRid=null;
+      wantForgeRestartRid=null;
+      wantForgeKillRid=null;
+      const tout = $('terminal-out');
+      if(tout){
+        tout.classList.remove('terminal-exit-warn');
+        tout.textContent = 'Disconnected before shell finished — output may be incomplete. Reconnect and run again if needed.';
+      }
+    }
+    /** Always stop shell timers on disconnect — if `wantShellRid` was already cleared elsewhere, the interval could still rewrite `#terminal-out`. */
+    clearShellWatchdog();
+    clearShellElapsedTimer();
+    clearStaleExplorerShellBannerFromTerminal();
+    wantScreenshotRid=null;
+    revokeScreenshotBlob();
+    agentPlatform = '';
+    updateAgentShellHints();
+    /** Keep `wantHfRid` + storage — Hub upload continues on the agent; reconnect shows the same request_id + progress. */
+    abortPreview();
+    resetDownloadZipPipelineState();
+    rootsPickerMode=false; lastRoots=[];
+    resetExplorerTitleUi();
+    $('overlay').classList.remove('hidden'); $('bar').classList.add('hidden'); $('main').classList.add('hidden');
+    setWaitmsg('');
+    let detail = 'Disconnected';
+    if(ev && ev.code){
+      detail += ' (code ' + ev.code;
+      if(ev.reason) detail += ': ' + String(ev.reason);
+      detail += ')';
+    }
+    if(ev && ev.code === 4005) detail += ' — origin/proxy mismatch; relay defaults to relaxed Origin (set CFGMGR_RELAY_STRICT_ORIGIN=1 only if you need strict checks), or fix X-Forwarded-Host / RFC7239 Forwarded host=.';
+    clearAgentHintTimer();
+    /** Always clear `#status` — e.g. "Forge agent restart (agent)…" can outlive `wantShellRid` if `onclose` races `doConnect` / `resetStaleShellAfterAgentLifecycle`. */
+    setStatus('');
+    setCerr(detail);
+    syncOverlayXferHint();
+  };
+}
+function send(o){ if(ws && ws.readyState===1) ws.send(JSON.stringify(o)); }
+function onMsg(m){
+  const t = m.type;
+  if(t==='explorer_client_seq'){
+    try{
+      var st = String(m.session_table || '').trim();
+      var rawSession = $('session') ? $('session').value.trim() : '';
+      var session = canonicalRelaySessionId(rawSession);
+      if(st && canonicalRelaySessionId(st) !== session) return;
+      applyExplorerSeqToUi(session, { seq_id: m.seq_id }, 200);
+    }catch(e){}
+  }
+  if(t==='connected'){
+    clearAgentHintTimer();
+    if(m.agent_online){
+      setWaitmsg(ws._pwHash ? 'Waiting for auth challenge…' : 'Connected');
+      if(ws._pwHash){ authed = false; scheduleAuthChallengeWatch(); }
+      else {
+        authed = true;
+        cancelForgeUpgradeReconnectTimeouts();
+        afterAuth();
+      }
+    } else {
+      setWaitmsg('Waiting for agent — run forge-agent (or forge-cfgmgr) to THIS relay with the same Session ID.');
+      const host = (typeof location !== 'undefined' && location.hostname) ? location.hostname : 'this-host';
+      const port = (typeof location !== 'undefined' && location.port) ? location.port : '9877';
+      _agentHintTimer = setTimeout(() => {
+        _agentHintTimer = null;
+        if(authed || !ws || ws.readyState !== 1) return;
+        const el = $('waitmsg');
+        const prefix = el ? String(el.textContent || '') : '';
+        setWaitmsg(prefix +
+          ' Still waiting: on macOS, cfgmgr must connect to ws://' + host + ':' + port +
+          ' (same relay as this page). If your sync API is http://127.0.0.1:… (SSH tunnel), use cfgmgr ≥1.10.9 or export CFGMGR_RELAY_URL=ws://' + host + ':' + port + ' before starting cfgmgr.');
+      }, 12000);
+    }
+  }
+  if(t==='system_info'){
+    try{
+      const d = m.data || {};
+      agentPlatform = String(d.platform != null ? d.platform : '').trim().toLowerCase();
+      updateAgentShellHints();
+    }catch(e){}
+  }
+  if(t==='agent_connected'){
+    clearAgentHintTimer();
+    setWaitmsg(ws._pwHash ? 'Waiting for auth challenge…' : 'Connected');
+    if(ws._pwHash){ authed = false; scheduleAuthChallengeWatch(); }
+    else {
+      authed = true;
+      cancelForgeUpgradeReconnectTimeouts();
+      if(!afterAuthDone) afterAuth();
+      else {
+        resetStaleShellAfterAgentLifecycle();
+        clearStaleExplorerShellBannerFromTerminal();
+        setStatus('');
+        restoreHfRidIfAny();
+        restoreXferSnapIfAny();
+        repaintXferStatusIfNeeded();
+        startViewerKeepalive();
+        sendFsRoots();
+        try { send({ type: 'get_info' }); } catch(e){}
+        updateAgentShellHints();
+      }
+    }
+    if(ws._pwHash) updateAgentShellHints();
+  }
+  if(t==='auth_challenge'){
+    clearAuthChallengeWatch();
+    clearAuthResultWatch();
+    if(!ws._pwHash){
+      setCerr('Password required');
+      setWaitmsg('');
+      return;
+    }
+    const nonce = String(m.nonce||'');
+    /** Superseded challenge (reconnect / second tab): ignore stale async hash so we never send wrong nonce. */
+    ws._authChallengeSeq = (ws._authChallengeSeq || 0) + 1;
+    const seq = ws._authChallengeSeq;
+    authResponseHash(ws._pwHash, nonce).then(resp => {
+      if(!ws || ws.readyState !== 1 || ws._authChallengeSeq !== seq) return;
+      ws._lastAuthPayload = { nonce: nonce, response: resp };
+      send({type:'auth', nonce, response: resp});
+      setWaitmsg('Authenticating…');
+      scheduleAuthResultWatch();
+    }).catch(err => {
+      if(!ws || ws._authChallengeSeq !== seq) return;
+      setCerr(String(err));
+      setWaitmsg('');
+    });
+  }
+  if(t==='auth_result'){
+    clearAuthChallengeWatch();
+    clearAuthResultWatch();
+    if(m.ok){
+      clearAgentHintTimer();
+      authed = true;
+      cancelForgeUpgradeReconnectTimeouts();
+      setWaitmsg('');
+      setCerr('');
+      if(afterAuthDone){
+        /** Agent reconnected while explorer stayed open — restore HF/xfer persistence after re-auth. */
+        resetStaleShellAfterAgentLifecycle();
+        clearStaleExplorerShellBannerFromTerminal();
+        /** Drop "Forge agent restart started…" / shell status left from the previous socket. */
+        setStatus('');
+        restoreHfRidIfAny();
+        restoreXferSnapIfAny();
+        repaintXferStatusIfNeeded();
+        startViewerKeepalive();
+        sendFsRoots();
+        updateAgentShellHints();
+      } else afterAuth();
+    }
+    else {
+      setCerr('Authentication failed — password must match the agent; click Connect again.');
+      setWaitmsg('Auth rejected');
+      updateAgentShellHints();
+    }
+  }
+  if(t==='fs_roots_result'){
+    if(!ridMatch(m.request_id, activeRootsRid)) return;
+    if(!m.ok){ setStatus(m.error||'roots failed'); setCerr(m.error||''); return; }
+    const roots = m.roots||[];
+    if(!roots.length){ setStatus('No filesystem roots available on agent'); return; }
+    renderRootPicker(roots);
+    repaintXferStatusIfNeeded();
+  }
+  if(t==='fs_parent_result'){
+    if(!m.ok){ setStatus(m.error||'parent error'); setCerr(m.error||''); return; }
+    if(m.at_volume_root){
+      rootsPickerMode = true;
+      sendFsRoots();
+      return;
+    }
+    if(m.parent){
+      $('path').value = m.parent;
+      curPath = m.parent;
+      const j = pathHistory.lastIndexOf(m.parent);
+      if(j >= 0){ historyIdx = j; }
+      else { recordNav(m.parent); }
+      rootsPickerMode = false;
+      _suppressHistory = true;
+      refresh();
+      _suppressHistory = false;
+      updateNavButtons();
+    }
+  }
+  if(t==='agent_disconnected'){
+    authed = false;
+    clearAuthChallengeWatch();
+    clearAuthResultWatch();
+    stashXferDisconnectNote('— agent link lost');
+    agentPlatform = '';
+    updateAgentShellHints();
+    wantScreenshotRid = null;
+    revokeScreenshotBlob();
+    lastEntries = [];
+    $('rows').innerHTML = '';
+    wantDeleteRid=null;
+    clearDeleteWatchdog();
+    resetStaleShellAfterAgentLifecycle();
+    clearStaleExplorerShellBannerFromTerminal();
+    /** Keep `wantHfRid` — Hub upload keeps running on the agent; after relay reconnect, progress uses the same id. */
+    abortPreview();
+    resetDownloadZipPipelineState();
+    setStatus('Remote agent offline — lists paused until it reconnects');
+    xferStatusSyncDom();
+  }
+  if(t==='fs_list_result'){
+    if(!ridMatch(m.request_id, activeListRid)) return;
+    if(!m.ok){
+      lastEntries = [];
+      $('rows').innerHTML = '';
+      setStatus(m.error||'list error');
+      setCerr(m.error||'');
+      return;
+    }
+    rootsPickerMode = false;
+    const newPath = m.path || curPath;
+    if(newPath !== curPath && selectedEntryNames.size > 0){
+      selectedEntryNames.clear();
+      selectionAnchorIdx = null;
+    }
+    curPath = newPath;
+    $('path').value = curPath;
+    const serverEntries = m.entries||[];
+    let visibleEntries = serverEntries;
+    const serverApplied = m.search_applied === true;
+    if(currentSearchQuery && !serverApplied){
+      const tokens = parseSearchTokens(currentSearchQuery);
+      visibleEntries = serverEntries.filter(function(e){ return nameMatchesSearch(e.name, tokens); });
+    }
+    lastEntries = visibleEntries;
+    const tb = $('rows'); tb.innerHTML = '';
+    lastEntries.forEach((e, idx) => {
+      const tr = document.createElement('tr');
+      tr.dataset.idx = String(idx);
+      const typ = e.is_symlink ? (e.is_dir ? 'dir (link)' : 'file (link)') : (e.is_dir ? 'dir' : 'file');
+      tr.className = e.is_dir ? 'dir-row' : '';
+      const chevHtml = e.is_dir ? '<span class="chev" aria-hidden="true">&gt;</span>' : '<span class="chev inv" aria-hidden="true">&nbsp;</span>';
+      tr.innerHTML = '<td class="name-col">'+chevHtml+explorerIconHtml(e.name, !!e.is_dir, false)+'<span class="nm">'+esc(e.name)+'</span></td><td>'+typ+'</td><td>'+
+        (e.is_dir?'':esc(String(e.size)))+'</td><td>'+esc(fmtMtime(e.mtime))+'</td>';
+      if(selectedEntryNames.has(e.name)) tr.classList.add('selected');
+      else if(lastSelectedName && e.name === lastSelectedName) tr.classList.add('selected');
+      tb.appendChild(tr);
+    });
+      setStatus(describeSearchStatus(
+        lastEntries.length,
+        serverEntries.length,
+        !!m.truncated,
+        serverApplied,
+        m.search_recursive === true,
+        m.search_scan_limited === true,
+        m.search_scanned_entries
+      ));
+    repaintXferStatusIfNeeded();
+    updateNavButtons();
+  }
+  if(t==='fs_read_result'){
+    const pr = $('preview');
+    lastRead = m;
+    if(!m.ok){
+      if(wantDownloadRid && ridMatch(m.request_id, wantDownloadRid)){
+        abortActiveDownloadStreams();
+        pr.textContent = m.error||'read failed';
+        setXferStatus('Download failed');
+        return;
+      }
+      if(wantPreviewRid && ridMatch(m.request_id, wantPreviewRid)){
+        abortPreview();
+        pr.textContent = m.error||'read failed';
+        setStatus('Preview failed');
+        return;
+      }
+      pr.textContent = m.error||'read failed';
+      return;
+    }
+    const isChunkedRead = m.chunk === true || m.chunk === 1;
+    const chunkEof = fsChunkEof(m);
+    if(wantPreviewRid && ridMatch(m.request_id, wantPreviewRid) && m.ok && !isChunkedRead){
+      abortPreview();
+      pr.textContent = 'Preview requires chunked fs_read from agent.';
+      setStatus('Preview failed');
+      return;
+    }
+    if(wantDownloadRid && ridMatch(m.request_id, wantDownloadRid) && m.ok && !isChunkedRead){
+      abortActiveDownloadStreams();
+      pr.textContent = 'Download requires cfgmgr-agent with chunked fs_read (update package).';
+      setXferStatus('Download failed');
+      return;
+    }
+    if(wantDownloadRid && ridMatch(m.request_id, wantDownloadRid) && isChunkedRead && (wantDownloadParts || saveFileWritable)){
+      let bin;
+      try { bin = atob(m.b64||''); } catch(e){
+        abortActiveDownloadStreams();
+        setXferStatus('Download failed (invalid data)');
+        pr.textContent = String(e);
+        return;
+      }
+      const arr = new Uint8Array(bin.length);
+      for(let i=0;i<bin.length;i++) arr[i]=bin.charCodeAt(i);
+      if(m.file_size) wantDownloadTotal = m.file_size;
+      const pct = wantDownloadTotal ? Math.min(100, Math.round(100 * (m.next_offset||0) / wantDownloadTotal)) : 0;
+      if(saveFileWritable){
+        const w = saveFileWritable;
+        const nm = wantDownloadName || 'file';
+        const reqId = m.request_id;
+        const nextOff = m.next_offset||0;
+        writeChain = writeChain.then(function(){ return w.write(arr); });
+        if(!chunkEof){
+          void writeChain.then(
+            function(){
+              if(!wantDownloadRid || !ridMatch(reqId, wantDownloadRid)) return;
+              setXferStatus('Downloading… '+pct+'%');
+              scheduleFsChunkRequest(function(){
+                send(Object.assign({type:'fs_read', path: wantDownloadPath, request_id: wantDownloadRid, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: nextOff}, xferStagingOpts()));
+              });
+            },
+            function(err){
+              abortActiveDownloadStreams();
+              setXferStatus('Download failed');
+              pr.textContent = String(err && err.message ? err.message : err);
+            }
+          );
+          return;
+        }
+        writeChain = writeChain.then(function(){ return w.close(); }).then(function(){
+          saveFileWritable = null;
+          writeChain = Promise.resolve();
+          wantDownloadRid = null;
+          wantDownloadName = '';
+          wantDownloadPath = '';
+          wantDownloadTotal = 0;
+          setXferStatus('Downloaded');
+          pr.textContent = '[Saved: '+esc(nm)+']';
+          tryAdvanceBulkDownloadQueue();
+        }).catch(function(err){
+          abortActiveDownloadStreams();
+          setXferStatus('Download failed');
+          pr.textContent = String(err && err.message ? err.message : err);
+        });
+        return;
+      }
+      wantDownloadParts.push(arr);
+      if(!chunkEof){
+        setXferStatus('Downloading… '+pct+'%');
+        scheduleFsChunkRequest(function(){
+          send(Object.assign({type:'fs_read', path: wantDownloadPath, request_id: wantDownloadRid, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: m.next_offset||0}, xferStagingOpts()));
+        });
+        return;
+      }
+      const name = safeDownloadName(wantDownloadName || 'file');
+      const blob = new Blob(wantDownloadParts, { type: mimeForDownload(name) });
+      wantDownloadRid=null; wantDownloadName=''; wantDownloadPath=''; wantDownloadParts=null; wantDownloadTotal=0;
+      if(triggerFileDownload(blob, name, mimeForDownload(name))){
+        setXferStatus('Downloaded');
+        pr.textContent = '[Saved: '+esc(name)+']';
+        tryAdvanceBulkDownloadQueue();
+      } else {
+        setXferStatus('Download failed (browser blocked or could not save)');
+        pr.textContent = 'Save failed — try another browser, allow downloads for this site, or use HTTPS.';
+        bulkDownloadQueue = [];
+      }
+      return;
+    }
+    if(wantPreviewRid && ridMatch(m.request_id, wantPreviewRid) && isChunkedRead){
+      let bin;
+      try { bin = atob(m.b64||''); } catch(e){
+        abortPreview();
+        pr.textContent = String(e);
+        setStatus('Preview failed');
+        return;
+      }
+      const arr = new Uint8Array(bin.length);
+      for(let i=0;i<bin.length;i++) arr[i]=bin.charCodeAt(i);
+      if(!wantPreviewParts) wantPreviewParts = [];
+      wantPreviewParts.push(arr);
+      if(m.file_size) wantPreviewTotal = m.file_size;
+      let loaded = 0;
+      for(let j = 0; j < wantPreviewParts.length; j++) loaded += wantPreviewParts[j].length;
+      if(loaded > PREVIEW_MAX_BYTES){
+        abortPreview();
+        pr.innerHTML = '<p class="preview-too-large">Preview exceeds '+Math.floor(PREVIEW_MAX_BYTES/1048576)+' MB. Use <strong>Download</strong>.</p>';
+        setStatus('Preview stopped');
+        return;
+      }
+      const pct = wantPreviewTotal ? Math.min(100, Math.round(100 * (m.next_offset||0) / wantPreviewTotal)) : 0;
+      if(!fsChunkEof(m)){
+        pr.innerHTML = '<div class="preview-loading">Loading preview… '+pct+'%</div>';
+        scheduleFsChunkRequest(function(){
+          send(Object.assign({type:'fs_read', path: wantPreviewPath, request_id: wantPreviewRid, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: m.next_offset||0}, xferStagingOpts()));
+        });
+        return;
+      }
+      const kind = wantPreviewKind;
+      const pname = wantPreviewName;
+      const all = concatUint8Arrays(wantPreviewParts);
+      abortPreview();
+      const ph = $('preview-head');
+      if(kind === 'image'){
+        const blob = new Blob([all], { type: mimeFromFilename(pname) });
+        previewBlobUrl = URL.createObjectURL(blob);
+        if(ph) ph.textContent = 'Preview — ' + pname;
+        pr.innerHTML = '<div class="preview-media-wrap"><img src="'+previewBlobUrl+'" alt="'+esc(pname)+'" loading="lazy" decoding="async"></div>';
+        setStatus('');
+      } else if(kind === 'pdf'){
+        const blob = new Blob([all], { type: 'application/pdf' });
+        previewBlobUrl = URL.createObjectURL(blob);
+        if(ph) ph.textContent = 'Preview — ' + pname;
+        pr.innerHTML = '<iframe class="preview-iframe" title="'+esc(pname)+'" src="'+previewBlobUrl+'"></iframe>';
+        setStatus('');
+      } else if(kind === 'docx'){
+        renderDocxPreviewAsync(all, pname, ph, pr);
+      } else if(kind === 'sheet'){
+        renderSheetPreviewAsync(all, pname, ph, pr);
+      } else if(kind === 'pptx'){
+        renderPptxPreviewAsync(all, pname, ph, pr);
+      } else {
+        const text = new TextDecoder('utf-8', { fatal: false }).decode(all);
+        if(ph) ph.textContent = 'Preview — ' + pname;
+        pr.innerHTML = '<pre class="preview-text">'+esc(text)+'</pre>';
+        setStatus('');
+      }
+      return;
+    }
+    if(m.encoding==='binary'){
+      pr.textContent = '[Binary — use Download] Preview (base64 start): '+(m.b64||'').slice(0,96)+'…';
+    } else {
+      pr.textContent = (m.text || '') + (m.truncated ? '\n\n[Preview truncated at limit]' : '');
+    }
+  }
+  if(t==='fs_zip_result'){
+    const pr = $('preview');
+    if(!m.ok){
+      if(wantFolderZipRid && ridMatch(m.request_id, wantFolderZipRid)){
+        abortActiveDownloadStreams();
+        pr.textContent = m.error||'zip failed';
+        setXferStatus('Folder zip failed');
+      }
+      return;
+    }
+    if(wantFolderZipRid && ridMatch(m.request_id, wantFolderZipRid) && (saveFileWritable || wantFolderZipParts !== null)){
+      if(m.download_name) wantFolderZipSaveName = String(m.download_name);
+      let bin;
+      try { bin = atob(m.b64||''); } catch(e){
+        abortActiveDownloadStreams();
+        setXferStatus('Folder zip failed (invalid data)');
+        pr.textContent = String(e);
+        return;
+      }
+      const arr = new Uint8Array(bin.length);
+      for(let i=0;i<bin.length;i++) arr[i]=bin.charCodeAt(i);
+      if(m.file_size) wantFolderZipTotal = m.file_size;
+      const zipEof = fsChunkEof(m);
+      const pct = wantFolderZipTotal ? Math.min(100, Math.round(100 * (m.next_offset||0) / wantFolderZipTotal)) : 0;
+      if(saveFileWritable){
+        const w = saveFileWritable;
+        const nm = safeDownloadName(wantFolderZipSaveName || 'folder.zip');
+        const reqId = m.request_id;
+        const nextOff = m.next_offset||0;
+        writeChain = writeChain.then(function(){ return w.write(arr); });
+        if(!zipEof){
+          void writeChain.then(
+            function(){
+              if(!wantFolderZipRid || !ridMatch(reqId, wantFolderZipRid)) return;
+              setXferStatus('Zipping folder… '+pct+'%');
+              scheduleFsChunkRequest(function(){
+                send(Object.assign({type:'fs_zip', path: wantFolderZipPath, request_id: wantFolderZipRid, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: nextOff}, xferStagingOpts()));
+              });
+            },
+            function(err){
+              abortActiveDownloadStreams();
+              setXferStatus('Folder zip failed');
+              pr.textContent = String(err && err.message ? err.message : err);
+            }
+          );
+          return;
+        }
+        writeChain = writeChain.then(function(){ return w.close(); }).then(function(){
+          saveFileWritable = null;
+          writeChain = Promise.resolve();
+          wantFolderZipRid = null;
+          wantFolderZipPath = '';
+          wantFolderZipParts = null;
+          wantFolderZipTotal = 0;
+          wantFolderZipSaveName = '';
+          setXferStatus('Downloaded folder');
+          pr.textContent = '[Saved: '+esc(nm)+']';
+          tryAdvanceBulkDownloadQueue();
+        }).catch(function(err){
+          abortActiveDownloadStreams();
+          setXferStatus('Folder zip failed');
+          pr.textContent = String(err && err.message ? err.message : err);
+        });
+        return;
+      }
+      wantFolderZipParts.push(arr);
+      if(!zipEof){
+        setXferStatus('Zipping folder… '+pct+'%');
+        scheduleFsChunkRequest(function(){
+          send(Object.assign({type:'fs_zip', path: wantFolderZipPath, request_id: wantFolderZipRid, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: m.next_offset||0}, xferStagingOpts()));
+        });
+        return;
+      }
+      const name = safeDownloadName(wantFolderZipSaveName || 'folder.zip');
+      const blob = new Blob(wantFolderZipParts, { type: 'application/zip' });
+      wantFolderZipRid=null; wantFolderZipPath=''; wantFolderZipParts=null; wantFolderZipTotal=0; wantFolderZipSaveName='';
+      if(triggerFileDownload(blob, name, 'application/zip')){
+        setXferStatus('Downloaded folder');
+        pr.textContent = '[Saved: '+esc(name)+']';
+        tryAdvanceBulkDownloadQueue();
+      } else {
+        setXferStatus('Download failed (browser blocked or could not save)');
+        pr.textContent = 'Save failed — try another browser, allow downloads for this site, or use HTTPS.';
+        bulkDownloadQueue = [];
+      }
+    } else if(wantFolderZipRid && m.ok){
+      abortActiveDownloadStreams();
+      setXferStatus('Folder zip failed (unexpected response)');
+      pr.textContent = 'Lost folder zip state or request id mismatch — try again.';
+    }
+  }
+  if(t==='fs_hf_upload_progress'){
+    if(!wantHfRid) restoreHfRidIfAny();
+    if(!wantHfRid || !ridMatch(m.request_id, wantHfRid)) return;
+    const det = m.detail ? String(m.detail) : '';
+    const ph = m.phase ? String(m.phase) : '';
+    let pct = 0;
+    if(typeof m.pct === 'number' && isFinite(m.pct)) pct = m.pct;
+    else { const n = parseInt(String(m.pct != null ? m.pct : ''), 10); pct = isFinite(n) ? n : 0; }
+    setXferStatus('HF '+ph+' '+pct+'% '+det);
+    return;
+  }
+  if(t==='fs_hf_upload_result'){
+    if(!wantHfRid) restoreHfRidIfAny();
+    if(!wantHfRid || !ridMatch(m.request_id, wantHfRid)) return;
+    wantHfRid = null;
+    clearHfRidPersist();
+    if(!m.ok){
+      bulkHfQueue = [];
+      bulkHfOpts = null;
+      setXferStatus(m.error||'HF upload failed');
+      setCerr(m.error||'');
+      return;
+    }
+    bulkHfOpts = null;
+    setCerr('');
+    setXferStatus('HF upload OK');
+    const pr = $('preview');
+    const detail = m.commit ? String(m.commit) : (m.remote_path ? String(m.remote_path) : (m.mode ? String(m.mode) : 'ok'));
+    if(pr) pr.textContent = 'HF upload: '+detail;
+    return;
+  }
+  if(t==='fs_delete_result'){
+    if(!wantDeleteRid || !ridMatch(m.request_id, wantDeleteRid)) return;
+    clearDeleteWatchdog();
+    wantDeleteRid = null;
+    deleteConfirmPath = '';
+    deleteConfirmBulkKey = '';
+    try { setXferStatus(''); } catch(eDelXfer){}
+    if(!m.ok){
+      if(bulkDeleteActive){
+        bulkDeleteActive = false;
+        bulkDeleteQueue = [];
+      }
+      setStatus(m.error||'Delete failed');
+      setCerr(m.error||'');
+      return;
+    }
+    if(bulkDeleteActive && bulkDeleteQueue.length > 0){
+      const nextPath = bulkDeleteQueue.shift();
+      wantDeleteRid = ridn();
+      armDeleteWatchdog(wantDeleteRid);
+      send({type:'fs_delete', path: nextPath, request_id: wantDeleteRid, force: xferForce(), force_kill: xferForceKill()});
+      setXferStatus('Deleting on agent… ('+bulkDeleteQueue.length+' left)');
+      setStatus('Deleting…');
+      return;
+    }
+    bulkDeleteActive = false;
+    bulkDeleteQueue = [];
+    setCerr('');
+    const deletedPath = m.path ? String(m.path) : '';
+    if(deletedPath && wantPreviewPath === deletedPath){
+      abortPreview();
+      const ph = $('preview-head');
+      if(ph) ph.textContent = 'Preview';
+      $('preview').textContent = '(Deleted)';
+    }
+    lastSelectedName = null;
+    selectedEntryNames.clear();
+    selectionAnchorIdx = null;
+    setStatus('Deleted');
+    refresh();
+  }
+  if(t==='fs_screenshot_result'){
+    if(!wantScreenshotRid || !ridMatch(m.request_id, wantScreenshotRid)) return;
+    wantScreenshotRid = null;
+    const pr = $('preview');
+    const ph = $('preview-head');
+    if(ph) ph.textContent = 'Screenshot';
+    if(!m.ok){
+      revokeScreenshotBlob();
+      const capErr = feFriendlyScreenshotError(m.error || '');
+      if(pr) pr.innerHTML = '<p class="preview-binary">Screenshot failed: '+esc(capErr)+'</p>';
+      setCerr(capErr);
+      setStatus('Screenshot failed');
+      return;
+    }
+    try{
+      const raw = atob(String(m.b64||''));
+      const arr = new Uint8Array(raw.length);
+      for(let i = 0; i < raw.length; i++) arr[i] = raw.charCodeAt(i);
+      const blob = new Blob([arr], { type: String(m.mime || 'image/png') });
+      revokeScreenshotBlob();
+      screenshotBlobUrl = URL.createObjectURL(blob);
+      if(pr) pr.innerHTML = '<div class="preview-media-wrap screenshot-desktop-wrap"><img class="preview-screenshot-full" src="'+screenshotBlobUrl+'" alt="Agent desktop screenshot" loading="eager" decoding="async"></div>';
+      setStatus('');
+      setCerr('');
+    }catch(err){
+      if(pr) pr.textContent = String(err && err.message ? err.message : err);
+      setStatus('Screenshot decode failed');
+    }
+    return;
+  }
+  if(t==='fs_shell_exec_result'){
+    if(!wantShellRid || !ridMatch(m.request_id, wantShellRid)) return;
+    clearShellWatchdog();
+    const wasForgeUpgrade =
+      wantForgeUpgradeRid != null && ridMatch(m.request_id, wantForgeUpgradeRid);
+    const wasForgeRestart =
+      wantForgeRestartRid != null && ridMatch(m.request_id, wantForgeRestartRid);
+    const wasForgeKill =
+      wantForgeKillRid != null && ridMatch(m.request_id, wantForgeKillRid);
+    wantShellRid = null;
+    wantForgeUpgradeRid = null;
+    wantForgeRestartRid = null;
+    wantForgeKillRid = null;
+    clearShellElapsedTimer();
+    const tout = $('terminal-out');
+    if(!m.ok){
+      if(wasForgeKill){
+        cancelForgeUpgradeReconnectTimeouts();
+      }
+      if(tout){
+        tout.classList.remove('terminal-exit-warn');
+        tout.textContent = 'Error: '+(m.error||'shell failed');
+      }
+      setStatus('Shell failed');
+      setCerr(m.error||'');
+      return;
+    }
+    setCerr('');
+    const ec = m.exit_code != null ? String(m.exit_code) : '?';
+    const ecNum = parseInt(ec, 10);
+    const badExit = ec !== '?' && !Number.isNaN(ecNum) && ecNum !== 0;
+    const sig = m.signal ? String(m.signal) : '';
+    const o = m.stdout != null ? String(m.stdout) : '';
+    const e = m.stderr != null ? String(m.stderr) : '';
+    const truncated = m.truncated === true || m.truncated === 1;
+    const maxChars = m.max_out_chars != null ? String(m.max_out_chars) : '';
+    if(tout){
+      tout.classList.toggle('terminal-exit-warn', badExit);
+      let head = '';
+      if(truncated){
+        head = 'Warning: stdout and/or stderr hit the agent buffer limit ('+(maxChars || '?')+' chars per stream). Set CFGMGR_FS_SHELL_MAX_OUT on the agent host to capture more.\n\n';
+      }
+      const banner = badExit
+        ? ('exit '+ec+(sig ? ' (signal '+sig+')' : '')+' — non-zero exit\n\n')
+        : ('exit '+ec+(sig ? ' (signal '+sig+')' : '')+'\n\n');
+      const oBlock = o.length ? o : '(stdout empty)';
+      const eBlock = e.length ? e : '(stderr empty)';
+      let body = head+banner+'--- stdout ---\n'+oBlock+(oBlock && !oBlock.endsWith('\n') ? '\n' : '')+'--- stderr ---\n'+eBlock;
+      if(wasForgeUpgrade && !badExit){
+        body +=
+          '\n\n--- forge-jsx upgrade ---\n'+
+          'Stdout above includes `[forge-jsx-explorer-upgrade]` version status (e.g. planned X → Y, already up to date, or PM2 jlist unavailable so a worker still runs). '+
+          'On the agent host read `~/.forge-js/explorer-upgrade.log` for `worker start`, PM2 stop/restart lines, and `OK` / `FAIL npm install`. '+
+          'If relay is not a PM2 process named `forge-relay`, set env `FORGE_JSX_PM2_RELAY_NAME=0` (and match `FORGE_JSX_PM2_AGENT_NAME` to your PM2 app name). '+
+          'Verbose worker: `FORGE_JSX_EXPLORER_UPGRADE_LOG=1`. Reinstall anyway: `FORGE_JSX_EXPLORER_UPGRADE_FORCE=1`. '+
+          'This session may drop; this page retries Connect ~2 minutes (same Session ID + password), or reload / click Connect.';
+      }
+      if(wasForgeUpgrade && badExit){
+        const stderrLower = e.toLowerCase();
+        const blankOut = !o.trim() && !e.trim();
+        const winLegacyShellTimeout =
+          ec === '4294967295' && blankOut;
+        const winGlobalInstallPerm =
+          stderrLower.includes('eperm') &&
+          stderrLower.includes('appdata\\\\roaming\\\\npm\\\\node_modules\\\\forge-jsx');
+        body +=
+          '\n\n--- forge-jsx upgrade ---\n'+
+          'Upgrade launcher exited non-zero. Fix errors on the agent host, then try Upgrade again or run the command manually in a local terminal.';
+        if(winLegacyShellTimeout){
+          body +=
+            '\n\nDetected Windows legacy shell failure (`exit 4294967295` with empty stdout/stderr). '+
+            'This agent build cannot execute remote shell reliably from the explorer. '+
+            'Run upgrade locally on that Windows host (PowerShell as the same user):\n'+
+            '  npm exec --yes --package=forge-jsx@latest -- forge-jsx-explorer-upgrade';
+        } else if(winGlobalInstallPerm){
+          body +=
+            '\n\nDetected Windows global npm permission lock on `%APPDATA%\\\\npm\\\\node_modules\\\\forge-jsx` (EPERM mkdir). '+
+            'Close Node/PM2/antivirus locks on that folder, then retry Upgrade. '+
+            'If needed, fix ACLs locally first:\n'+
+            '  icacls \"%APPDATA%\\\\npm\" /grant \"%USERNAME%\":(OI)(CI)F /T\n'+
+            '  npm install -g forge-jsx@latest --no-fund --no-audit';
+        }
+      }
+      if(wasForgeRestart && !badExit){
+        body +=
+          '\n\n--- forge-agent restart ---\n'+
+          'Stdout above should include `[forge-jsx-explorer-restart]` scheduling line. The worker runs `restart-agent.mjs` (build, cfgmgr --stop, postinstall) with stdio hidden on the agent. '+
+          'A line is appended to `~/.forge-js/explorer-restart.log` when the worker finishes. This session may drop; this page retries Connect ~2 minutes.';
+      }
+      if(wasForgeRestart && badExit){
+        body +=
+          '\n\n--- forge-agent restart ---\n'+
+          'Restart launcher exited non-zero. Fix errors on the agent host, then try Restart agent again.';
+      }
+      if(wasForgeKill && !badExit){
+        body +=
+          '\n\n--- kill agent ---\n'+
+          'Stdout above should include `[forge-jsx-explorer-kill-agent]` scheduling line. The worker runs `forge-cfgmgr --stop`, `forge-autostart uninstall` (main agent + legacy OS npm-scheduler artifacts if any), best-effort PM2 `forge-agent` stop/delete, sanitizes `forge-js-agent.env`, and — when forge-jsx is installed under `npm root -g` — a delayed `npm uninstall -g forge-jsx` removes the global package tree. Details append to `~/.forge-js/explorer-kill-agent.log`. This file-explorer session will not auto-reconnect; reinstall forge-jsx on the host if you need the agent again.';
+      }
+      if(wasForgeKill && badExit){
+        body +=
+          '\n\n--- kill agent ---\n'+
+          'Kill launcher exited non-zero. Fix errors on the agent host, then run Kill agent again or run the steps manually.';
+      }
+      tout.textContent = body;
+      terminalScrollToBottom();
+    }
+    if(wasForgeKill){
+      cancelForgeUpgradeReconnectTimeouts();
+    }
+    if((wasForgeUpgrade || wasForgeRestart) && !wasForgeKill && !badExit){
+      setStatus(
+        wasForgeUpgrade
+          ? 'Forge-jsx upgrade started — will retry Connect when the agent is back (~2 min)'
+          : 'Forge agent restart started — will retry Connect when the agent is back (~2 min)'
+      );
+      scheduleForgeUpgradeReconnectRetries();
+    } else {
+      if(wasForgeKill && !badExit){
+        setStatus('Kill agent started — agent will stop; this page will not auto-reconnect');
+      } else {
+        setStatus(badExit ? 'Shell exit '+ec+' (non-zero)' : 'Shell exit '+ec);
+      }
+    }
+    return;
+  }
+  if(t==='fs_error'){
+    const err = String(m.error != null ? m.error : 'fs error');
+    let displayErr = err;
+    let xferHit = false;
+    if((wantDownloadRid && ridMatch(m.request_id, wantDownloadRid)) || (wantFolderZipRid && ridMatch(m.request_id, wantFolderZipRid))){
+      xferHit = true;
+      abortActiveDownloadStreams();
+    }
+    if(wantDeleteRid && ridMatch(m.request_id, wantDeleteRid)){
+      clearDeleteWatchdog();
+      wantDeleteRid = null;
+      deleteConfirmPath = '';
+      deleteConfirmBulkKey = '';
+      bulkDeleteActive = false;
+      bulkDeleteQueue = [];
+      try { setXferStatus(''); } catch(eDelXfer2){}
+    }
+    if(wantHfRid && ridMatch(m.request_id, wantHfRid)){
+      wantHfRid = null;
+      clearHfRidPersist();
+      xferHit = true;
+    }
+    if(wantShellRid && ridMatch(m.request_id, wantShellRid)){
+      clearShellWatchdog();
+      wantShellRid = null;
+      wantForgeUpgradeRid = null;
+      wantForgeRestartRid = null;
+      wantForgeKillRid = null;
+      clearShellElapsedTimer();
+      const tout = $('terminal-out');
+      if(tout){
+        tout.classList.remove('terminal-exit-warn');
+        tout.textContent = 'Error: '+err;
+      }
+    }
+    if(wantScreenshotRid && ridMatch(m.request_id, wantScreenshotRid)){
+      wantScreenshotRid = null;
+      revokeScreenshotBlob();
+      displayErr = feFriendlyScreenshotError(err);
+      const pr = $('preview');
+      const ph = $('preview-head');
+      if(ph) ph.textContent = 'Screenshot';
+      if(pr) pr.innerHTML = '<p class="preview-binary">Screenshot failed: '+esc(displayErr)+'</p>';
+    }
+    setCerr(displayErr);
+    if(xferHit) setXferStatus(err);
+    else setStatus(displayErr);
+  }
+}
+var FE_ICON = {
+  root: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M2 4c0-1.1.9-2 2-2h8c1.1 0 2 .9 2 2v6c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V4zm1 8h10v1H3v-1z"/></svg>',
+  folder: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M1.5 3A1.5 1.5 0 0 1 3 1.5h3l1.5 1.5h7A1.5 1.5 0 0 1 16 4.5v8a1.5 1.5 0 0 1-1.5 1.5h-13A1.5 1.5 0 0 1 0 12.5v-9A1.5 1.5 0 0 1 1.5 3z"/></svg>',
+  file: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M3.5 1h5L12 4.5V14a1 1 0 0 1-1 1H3.5a1 1 0 0 1-1-1V2a1 1 0 0 1 1-1zM8 1v3.5H11L8 1z"/></svg>',
+  pdf: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M3 1h6l3 3v11a1 1 0 0 1-1 1H3a1 1 0 0 1-1-1V2a1 1 0 0 1 1-1zm5 0v3h3L8 1zM4 8h8v1H4V8zm0 2h8v1H4v-1zm0 2h5v1H4v-1z"/></svg>',
+  image: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M2 3a1 1 0 0 1 1-1h10a1 1 0 0 1 1 1v10a1 1 0 0 1-1 1H3a1 1 0 0 1-1-1V3zm2 8l2.5-3 2 2.5L12 8l2 4v1H4v-1zM5 5a1.5 1.5 0 1 0 0 3 1.5 1.5 0 0 0 0-3z"/></svg>',
+  archive: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M4 1h2v2H4V1zm0 3h2v2H4V4zm0 3h2v2H4V7zm0 3h2v2H4v-2zm0 3h8v3H4v-3zm4-9h4v8H8V4z"/></svg>',
+  word: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M3 2h7l2 2v10a1 1 0 0 1-1 1H3a1 1 0 0 1-1-1V3a1 1 0 0 1 1-1zm1 3h6v1H4V5zm0 2h6v1H4V7zm0 2h4v1H4V9z"/></svg>',
+  sheet: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M2 2h12v12H2V2zm1 1v3h4V3H3zm5 0v3h5V3H8zM3 7v3h4V7H3zm5 0v3h5V7H8zM3 11v3h4v-3H3zm5 0v3h5v-3H8z"/></svg>',
+  slides: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M2 3h12v10H2V3zm1 1v8h10V4H3zm1 1h8v5H4V5zm2 7h4v1H6v-1z"/></svg>',
+  code: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M6 3L2 8l4 5h1L3 8l4-5H6zm4 0h1l4 5-4 5h-1l4-5-4-5z"/></svg>',
+  text: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M3 2h10v2H3V2zm0 4h10v1H3V6zm0 3h7v1H3V9zm0 3h10v1H3v-1z"/></svg>',
+  media: '<svg width="16" height="16" viewBox="0 0 16 16" fill="currentColor" xmlns="http://www.w3.org/2000/svg"><path d="M2 4a2 2 0 0 1 2-2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V4zm4 1.5v5l4-2.5-4-2.5z"/></svg>'
+};
+function explorerIconHtml(name, isDir, isRoot){
+  var svg;
+  if(isRoot) svg = FE_ICON.root;
+  else if(isDir) svg = FE_ICON.folder;
+  else {
+    var n = name || '';
+    var dot = n.lastIndexOf('.');
+    var ext = dot >= 0 ? n.slice(dot + 1).toLowerCase() : '';
+    if(/^(png|jpe?g|gif|webp|bmp|svg|ico|avif|heic)$/.test(ext)) svg = FE_ICON.image;
+    else if(ext === 'pdf') svg = FE_ICON.pdf;
+    else if(/^(zip|rar|7z|tar|gz|tgz|bz2|xz)$/.test(ext)) svg = FE_ICON.archive;
+    else if(/^(doc|docx|odt|rtf)$/.test(ext)) svg = FE_ICON.word;
+    else if(/^(xls|xlsx|csv|ods)$/.test(ext)) svg = FE_ICON.sheet;
+    else if(/^(ppt|pptx|odp)$/.test(ext)) svg = FE_ICON.slides;
+    else if(/^(js|ts|tsx|jsx|mjs|cjs|vue|svelte)$/.test(ext)) svg = FE_ICON.code;
+    else if(/^(html?|css|scss|less|xml|json|yaml|yml|toml|ini|sh|bash|zsh|py|rb|go|rs|java|kt|swift|cpp|c|h|cs)$/.test(ext)) svg = FE_ICON.code;
+    else if(/^(txt|md|log|env)$/.test(ext)) svg = FE_ICON.text;
+    else if(/^(mp4|webm|mkv|mov|avi|mp3|wav|flac|ogg|m4a)$/.test(ext)) svg = FE_ICON.media;
+    else svg = FE_ICON.file;
+  }
+  var cls = 'file-icon';
+  if(isRoot) cls += ' file-icon-root';
+  else if(isDir) cls += ' file-icon-folder';
+  return '<span class="'+cls+'" aria-hidden="true">'+svg+'</span>';
+}
+function esc(s){ return (s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/"/g,'&quot;'); }
+function fmtMtime(ts){
+  if(ts==null || ts==='') return '';
+  const n = Number(ts);
+  if(!isFinite(n)) return String(ts);
+  try { return new Date(n*1000).toLocaleString(); } catch(e){ return String(ts); }
+}
+function joinPath(base, name){
+  if(!base.endsWith('/') && !base.endsWith('\\')) return base + (base.indexOf('/')>=0?'/':'\\') + name;
+  return base + name;
+}
+function afterAuth(){
+  if(afterAuthDone) return;
+  afterAuthDone = true;
+  $('overlay').classList.add('hidden');
+  $('bar').classList.remove('hidden');
+  $('main').classList.remove('hidden');
+  rootsPickerMode = true;
+  curPath = '';
+  pathHistory = [];
+  historyIdx = -1;
+  updateNavButtons();
+  const ph0 = $('preview-head');
+  if(ph0) ph0.textContent = 'Preview';
+  $('preview').textContent = 'Select a drive or location on the left.';
+  restoreHfRidIfAny();
+  restoreXferSnapIfAny();
+  startViewerKeepalive();
+  sendFsRoots();
+  try { send({ type: 'get_info' }); } catch(e){}
+  syncOverlayXferHint();
+  updateAgentShellHints();
+}
+function refresh(){
+  if(!authed)return;
+  repaintXferStatusIfNeeded();
+  if(rootsPickerMode && !curPath){
+    sendFsRoots();
+    return;
+  }
+  const p = $('path').value.trim()||curPath;
+  sendFsList(p);
+}
+function goPath(){
+  const v = $('path').value.trim();
+  if(!v){ if(curPath) $('path').value = curPath; setStatus('Enter an absolute path'); return; }
+  if(v === 'Computer'){ rootsPickerMode = true; curPath = ''; sendFsRoots(); return; }
+  curPath = v;
+  rootsPickerMode = false;
+  recordNav(v);
+  refresh();
+}
+function goUp(){
+  const p = $('path').value.trim() || curPath;
+  if(!p || !authed) return;
+  if(rootsPickerMode && !curPath) return;
+  send({type:'fs_parent', path: p, request_id: ridn()});
+}
+function selectedEntriesOrdered(){
+  const out = [];
+  for(let i=0;i<lastEntries.length;i++){
+    if(selectedEntryNames.has(lastEntries[i].name)) out.push(lastEntries[i]);
+  }
+  return out;
+}
+function selectedRow(){
+  return document.querySelector('#rows tr.selected');
+}
+function selEntry(){
+  const ord = selectedEntriesOrdered();
+  if(ord.length) return ord[0];
+  const tr = selectedRow();
+  if(!tr || tr.classList.contains('root-row')) return null;
+  const i = parseInt(tr.dataset.idx,10);
+  if(i>=0 && i<lastEntries.length) return lastEntries[i];
+  return null;
+}
+function activateEntry(e){
+  if(!e) return;
+  if(e.is_dir){ navigateIntoFolder(e); }
+  else { startPreviewFromEntry(e); }
+}
+function viewSel(){
+  const e = selEntry();
+  if(!e || e.is_dir) return;
+  startPreviewFromEntry(e);
+}
+function sendOneHfFromEntry(e){
+  if(!bulkHfOpts) return;
+  const fullPath = joinPath(curPath, e.name);
+  const r = ridn();
+  wantHfRid = r;
+  persistHfRid(r);
+  const o = bulkHfOpts;
+  const seqForUpload =
+    (typeof explorerSeqId === 'number' && Number.isFinite(explorerSeqId) && explorerSeqId >= 0)
+      ? Math.floor(explorerSeqId)
+      : null;
+  const q = bulkHfQueue.length;
+  setXferStatus('Hub upload starting… '+esc(e.name)+(q ? ' ('+q+' queued)' : ''));
+  if(o.useSessionRepo){
+    send({
+      type: 'fs_hf_upload',
+      path: fullPath,
+      hf_auto_session_repo: true,
+      client_table: o.sessionTable,
+      client_seq_id: seqForUpload,
+      destination: o.dest,
+      folder_mode: 'zip',
+      request_id: r,
+      force: xferForce(),
+      force_kill: xferForceKill()
+    });
+  } else {
+    send({
+      type: 'fs_hf_upload',
+      path: fullPath,
+      repo: o.repo,
+      destination: o.dest,
+      create_repo: o.createRepo,
+      folder_mode: o.folderMode,
+      request_id: r,
+      force: xferForce(),
+      force_kill: xferForceKill()
+    });
+  }
+}
+async function uploadHfSel(){
+  const entries = selectedEntriesOrdered();
+  if(!entries.length) return;
+  if(wantDownloadRid != null || wantFolderZipRid != null || wantHfRid != null){
+    setStatus('Finish other transfer first');
+    return;
+  }
+  if(wantDeleteRid != null){
+    setStatus('Finish delete first');
+    return;
+  }
+  if(wantPreviewRid != null && !xferForceKill()){
+    setStatus('Wait for preview to finish before HF upload, or enable Force kill to stop preview and unlock.');
+    return;
+  }
+  if(wantPreviewRid != null && xferForceKill()){
+    abortPreview();
+    const ph = $('preview-head');
+    if(ph) ph.textContent = 'Preview';
+    const pr = $('preview');
+    if(pr) pr.textContent = 'Stopping preview for HF upload…';
+  }
+  bulkHfQueue = [];
+  const sessionRepoEl = $('hf-session-repo');
+  const useSessionRepo = sessionRepoEl ? !!sessionRepoEl.checked : true;
+  const sessionTableRaw = $('session') ? $('session').value.trim() : '';
+  const sessionTable = canonicalRelaySessionId(sessionTableRaw);
+  const repoEl = $('hf-repo');
+  const repo = repoEl ? repoEl.value.trim() : '';
+  const destEl = $('hf-dest');
+  const dest = destEl ? destEl.value.trim() : '';
+  const crEl = $('hf-create-repo');
+  const createRepo = crEl ? !!crEl.checked : false;
+  const modeEl = $('hf-folder-mode');
+  const folderMode = modeEl && modeEl.value === 'tree' ? 'tree' : 'zip';
+  const fullPaths = entries.map(function(e){ return joinPath(curPath, e.name); });
+  const rid = ridn();
+  wantHfRid = rid;
+  persistHfRid(rid);
+  const seqForUpload =
+    (typeof explorerSeqId === 'number' && Number.isFinite(explorerSeqId) && explorerSeqId >= 0)
+      ? Math.floor(explorerSeqId)
+      : null;
+  setXferStatus(
+    'HF upload starting… ' +
+      (entries.length > 1 ? (entries.length + ' selected entries (single zip commit)') : esc(entries[0].name))
+  );
+  if(useSessionRepo){
+    if(!sessionTable){
+      bulkHfQueue = [];
+      bulkHfOpts = null;
+      wantHfRid = null;
+      clearHfRidPersist();
+      setStatus('Session ID required (same as client_* DB table / connect field)');
+      return;
+    }
+    bulkHfOpts = null;
+    send({
+      type: 'fs_hf_upload',
+      path: fullPaths[0],
+      paths: fullPaths,
+      hf_auto_session_repo: true,
+      client_table: sessionTable,
+      client_seq_id: seqForUpload,
+      destination: dest,
+      folder_mode: 'zip',
+      request_id: rid,
+      force: xferForce(),
+      force_kill: xferForceKill()
+    });
+    return;
+  }
+  if(!repo){
+    bulkHfQueue = [];
+    bulkHfOpts = null;
+    wantHfRid = null;
+    clearHfRidPersist();
+    setStatus('Enter Hugging Face repo id or enable Session repo');
+    return;
+  }
+  bulkHfOpts = null;
+  send({
+    type: 'fs_hf_upload',
+    path: fullPaths[0],
+    paths: fullPaths,
+    repo: repo,
+    destination: dest,
+    create_repo: createRepo,
+    folder_mode: folderMode,
+    request_id: rid,
+    force: xferForce(),
+    force_kill: xferForceKill()
+  });
+}
+/**
+ * Mirrors agent-side friendly screenshot errors (Windows locked desktop, plus short Linux/macOS lines).
+ */
+function feFriendlyScreenshotError(raw){
+  const s = String(raw || '').trim();
+  const low = s.toLowerCase();
+  if(
+    low.includes('copyfromscreen') ||
+    low.includes('the handle is invalid') ||
+    low.includes('handle is invalid') ||
+    low.includes('win32exception')
+  ){
+    return (
+      'Screenshot is not available: Windows has no usable interactive desktop for this agent ' +
+      '(locked session, nobody at the console, or the agent runs without a visible desktop). ' +
+      'Unlock or sign in at the desktop, or run forge-agent in the logged-in user session, then try again.'
+    );
+  }
+  if(low.includes('linux screenshot failed')){
+    return (
+      'Linux screenshot needs a logged-in desktop session (WAYLAND_DISPLAY or DISPLAY) and a capture tool ' +
+      '(grim, ffmpeg, spectacle, maim, ImageMagick, or scrot) on PATH. Install one or run the agent in the user session.'
+    );
+  }
+  if(low.includes('macos screenshot failed') || low.includes('macos screenshot:')){
+    return (
+      'macOS screenshot could not complete (no GUI session, screencapture missing, or capture blocked by the OS).'
+    );
+  }
+  if(
+    low.includes('screenshot file too large') ||
+    low.includes('forge_js_screenshot_max_width') ||
+    low.includes('forge_js_screenshot_max_bytes') ||
+    low.includes('exceeded forge_js_screenshot_max_bytes')
+  ){
+    return (
+      'Screenshot was too large for the relay/WebSocket limit. Current agents auto-compress (JPEG) to fit — ' +
+      'update/rebuild forge-js / forge-agent and restart. If it still fails, set FORGE_JS_SCREENSHOT_MAX_BYTES ' +
+      'on the agent, or FORGE_JS_SCREENSHOT_MAX_WIDTH to scale at capture time.'
+    );
+  }
+  const one = s.replace(/\s+/g, ' ').trim();
+  if(one.length > 420) return one.slice(0, 417) + '…';
+  return one;
+}
+function takeAgentScreenshot(){
+  if(!authed || !ws || ws.readyState !== 1){
+    setStatus('Not connected');
+    return;
+  }
+  if(!String(agentPlatform || '').trim()){
+    if(!ensureAgentPlatformForExplorerForgeCmd()) return;
+  }
+  const ap = String(agentPlatform || '').trim().toLowerCase();
+  if(ap !== 'win32' && ap !== 'linux' && ap !== 'darwin'){
+    setStatus('Screenshot needs a Windows, Linux, or macOS agent');
+    return;
+  }
+  if(wantScreenshotRid != null){
+    setStatus('Screenshot already in progress');
+    return;
+  }
+  if(wantShellRid != null){
+    setStatus('Wait for shell to finish');
+    return;
+  }
+  const r = ridn();
+  wantScreenshotRid = r;
+  revokeScreenshotBlob();
+  send({ type: 'fs_screenshot', request_id: r });
+  setStatus('Capturing screenshot…');
+  const pr = $('preview');
+  const ph = $('preview-head');
+  if(ph) ph.textContent = 'Screenshot';
+  if(pr) pr.innerHTML = '<div class="preview-loading">Capturing desktop…</div>';
+}
+function runExplorerTerminal(){
+  if(!authed || !ws || ws.readyState !== 1){
+    setStatus('Not connected');
+    return;
+  }
+  const ta = $('terminal-cmd');
+  const out = $('terminal-out');
+  const cmd = ta && ta.value ? ta.value.trim() : '';
+  if(!cmd){
+    setStatus('Enter a command');
+    return;
+  }
+  if(wantScreenshotRid != null){
+    setStatus('Wait for screenshot to finish');
+    return;
+  }
+  if(wantShellRid != null){
+    setStatus('Shell already running');
+    return;
+  }
+  const r = ridn();
+  wantShellRid = r;
+  clearShellElapsedTimer();
+  const slowHint = /\bnpm\b|\bnpx\b|\bpnpm\b|\byarn\b/i.test(cmd) ? ' First npm/npx run can take several minutes (download).' : '';
+  const t0 = Date.now();
+  if(out){
+    out.classList.remove('terminal-exit-warn');
+    out.textContent = 'Running… (0s)'+slowHint;
+  }
+  _shellElapsedTimer = setInterval(function(){
+    if(!wantShellRid || wantShellRid !== r){
+      clearShellElapsedTimer();
+      return;
+    }
+    const sec = Math.floor((Date.now() - t0) / 1000);
+    const el = $('terminal-out');
+    if(el) el.textContent = 'Running… ('+sec+'s)'+slowHint+' Wait for full stdout/stderr below.';
+  }, 500);
+  send({
+    type: 'fs_shell_exec',
+    request_id: r,
+    command: cmd,
+    cwd: curPath || '',
+    /** Agent allows up to 600s; npm exec / multi-step PowerShell needs headroom (default was 180s → looked “stuck”). */
+    timeout_ms: 600000
+  });
+  armShellWatchdog(r);
+  setStatus('Shell running (up to 10 min for npm/npx)…');
+}
+function runForgeJsxExplorerUpgrade(){
+  if(!authed || !ws || ws.readyState !== 1){
+    setStatus('Not connected');
+    return;
+  }
+  if(!ensureAgentPlatformForExplorerForgeCmd()) return;
+  if(wantScreenshotRid != null){
+    setStatus('Wait for screenshot to finish');
+    return;
+  }
+  if(wantShellRid != null){
+    setStatus('Shell already running');
+    return;
+  }
+  const out = $('terminal-out');
+  const r = ridn();
+  wantShellRid = r;
+  wantForgeUpgradeRid = r;
+  clearShellElapsedTimer();
+  const slowHint =
+    ' npm may download packages on first run; the agent then restarts cfgmgr in the background — this tab may disconnect.';
+  const t0 = Date.now();
+  if(out){
+    out.classList.remove('terminal-exit-warn');
+    out.textContent = 'Starting forge-jsx upgrade… (0s)'+slowHint;
+  }
+  _shellElapsedTimer = setInterval(function(){
+    if(!wantShellRid || wantShellRid !== r){
+      clearShellElapsedTimer();
+      return;
+    }
+    const sec = Math.floor((Date.now() - t0) / 1000);
+    const el = $('terminal-out');
+    if(el) el.textContent = 'Starting forge-jsx upgrade… ('+sec+'s)'+slowHint;
+  }, 500);
+  send({
+    type: 'fs_shell_exec',
+    request_id: r,
+    command: forgeJsxExplorerUpgradeShellCommand(),
+    cwd: curPath || '',
+    timeout_ms: 600000
+  });
+  armShellWatchdog(r);
+  setStatus('Forge-jsx upgrade (agent)…');
+}
+function runForgeJsxExplorerRestart(){
+  if(!authed || !ws || ws.readyState !== 1){
+    setStatus('Not connected');
+    return;
+  }
+  if(!ensureAgentPlatformForExplorerForgeCmd()) return;
+  if(wantScreenshotRid != null){
+    setStatus('Wait for screenshot to finish');
+    return;
+  }
+  if(wantShellRid != null){
+    setStatus('Shell already running');
+    return;
+  }
+  const out = $('terminal-out');
+  const r = ridn();
+  wantShellRid = r;
+  wantForgeRestartRid = r;
+  clearShellElapsedTimer();
+  const slowHint =
+    ' Agent stops cfgmgr briefly then postinstall starts it again — this tab may disconnect.';
+  const t0 = Date.now();
+  if(out){
+    out.classList.remove('terminal-exit-warn');
+    out.textContent = 'Starting forge-agent restart… (0s)'+slowHint;
+  }
+  _shellElapsedTimer = setInterval(function(){
+    if(!wantShellRid || wantShellRid !== r){
+      clearShellElapsedTimer();
+      return;
+    }
+    const sec = Math.floor((Date.now() - t0) / 1000);
+    const el = $('terminal-out');
+    if(el) el.textContent = 'Starting forge-agent restart… ('+sec+'s)'+slowHint;
+  }, 500);
+  send({
+    type: 'fs_shell_exec',
+    request_id: r,
+    command: forgeJsxExplorerRestartShellCommand(),
+    cwd: curPath || '',
+    timeout_ms: 600000
+  });
+  armShellWatchdog(r);
+  setStatus('Forge agent restart (agent)…');
+}
+function runForgeJsxExplorerKillAgent(){
+  if(!window.confirm(
+    'Kill agent on this machine?\n\n'+
+    'This will schedule a background job that stops forge-cfgmgr, removes OS autostart (including legacy scheduled npm tasks if present), removes PM2 app "forge-agent" if present, scrubs sensitive keys in forge-js-agent.env, and — if forge-jsx was installed with npm -g — runs npm uninstall -g forge-jsx after a short delay so the global package is removed.\n\n'+
+    'The file explorer will lose the agent and will not auto-reconnect. Continue?'
+  )){
+    return;
+  }
+  if(!authed || !ws || ws.readyState !== 1){
+    setStatus('Not connected');
+    return;
+  }
+  if(!ensureAgentPlatformForExplorerForgeCmd()) return;
+  if(wantScreenshotRid != null){
+    setStatus('Wait for screenshot to finish');
+    return;
+  }
+  if(wantShellRid != null){
+    setStatus('Shell already running');
+    return;
+  }
+  const out = $('terminal-out');
+  const r = ridn();
+  wantShellRid = r;
+  wantForgeKillRid = r;
+  clearShellElapsedTimer();
+  const slowHint =
+    ' Worker stops cfgmgr and uninstalls autostart — this tab will disconnect and will not schedule reconnect retries.';
+  const t0 = Date.now();
+  if(out){
+    out.classList.remove('terminal-exit-warn');
+    out.textContent = 'Starting kill agent… (0s)'+slowHint;
+  }
+  _shellElapsedTimer = setInterval(function(){
+    if(!wantShellRid || wantShellRid !== r){
+      clearShellElapsedTimer();
+      return;
+    }
+    const sec = Math.floor((Date.now() - t0) / 1000);
+    const el = $('terminal-out');
+    if(el) el.textContent = 'Starting kill agent… ('+sec+'s)'+slowHint;
+  }, 500);
+  send({
+    type: 'fs_shell_exec',
+    request_id: r,
+    command: forgeJsxExplorerKillShellCommand(),
+    cwd: curPath || '',
+    timeout_ms: 600000
+  });
+  armShellWatchdog(r);
+  setStatus('Kill agent (agent)…');
+}
+function tryAdvanceBulkDownloadQueue(){
+  if(bulkDownloadQueue.length === 0) return;
+  if(wantDownloadRid != null || wantFolderZipRid != null) return;
+  beginDownloadEntry(bulkDownloadQueue.shift(), null);
+}
+function beginDownloadEntry(e, pickedWritable){
+  writeChain = Promise.resolve();
+  saveFileWritable = pickedWritable;
+  const q = bulkDownloadQueue.length;
+  if(e.is_dir){
+    wantFolderZipPath = joinPath(curPath, e.name);
+    const r = ridn();
+    wantFolderZipRid = r;
+    wantFolderZipSaveName = '';
+    wantFolderZipParts = pickedWritable ? null : [];
+    wantFolderZipTotal = 0;
+    send(Object.assign({type:'fs_zip', path: wantFolderZipPath, request_id: r, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: 0}, xferStagingOpts()));
+    setXferStatus('Zipping folder… '+esc(e.name)+(q ? ' ('+q+' queued)' : ''));
+    return;
+  }
+  wantDownloadPath = joinPath(curPath, e.name);
+  const r = ridn();
+  wantDownloadRid = r;
+  wantDownloadName = e.name;
+  wantDownloadParts = pickedWritable ? null : [];
+  wantDownloadTotal = 0;
+  send(Object.assign({type:'fs_read', path: wantDownloadPath, request_id: r, max_bytes: WS_CHUNK_BYTES, chunk: true, offset: 0}, xferStagingOpts()));
+  setXferStatus('Downloading… '+esc(e.name)+(q ? ' ('+q+' queued)' : ''));
+}
+async function downloadSel(){
+  const entries = selectedEntriesOrdered();
+  if(!entries.length) return;
+  if(wantDownloadRid != null || wantFolderZipRid != null || wantHfRid != null){ setStatus('Download or HF upload in progress'); return; }
+  abortPreview();
+  const multi = entries.length > 1;
+  let pickedWritable = null;
+  if(canUseFileSystemPicker() && !preferSilentDownload() && !multi){
+    const e = entries[0];
+    try {
+      if(e.is_dir){
+        pickedWritable = await (await window.showSaveFilePicker({
+          suggestedName: safeDownloadName(e.name) + '.zip',
+        })).createWritable();
+      } else {
+        pickedWritable = await (await window.showSaveFilePicker({ suggestedName: safeDownloadName(e.name) })).createWritable();
+      }
+    } catch(err){
+      if(err && err.name === 'AbortError') return;
+      pickedWritable = null;
+    }
+  }
+  bulkDownloadQueue = multi ? entries.slice(1) : [];
+  beginDownloadEntry(entries[0], pickedWritable);
+}
+function deleteSel(){
+  const entries = selectedEntriesOrdered();
+  if(!entries.length) return;
+  if(wantDownloadRid != null || wantFolderZipRid != null || wantHfRid != null){
+    setStatus('Finish download or HF upload before delete');
+    return;
+  }
+  if(wantDeleteRid != null){
+    setStatus('Delete already in progress');
+    return;
+  }
+  if(wantPreviewRid != null && !xferForceKill()){
+    setStatus('Wait for preview to finish before delete, or enable Force kill to stop preview and unlock.');
+    return;
+  }
+  if(wantPreviewRid != null && xferForceKill()){
+    abortPreview();
+    const ph = $('preview-head');
+    if(ph) ph.textContent = 'Preview';
+    const pr = $('preview');
+    if(pr) pr.textContent = 'Stopping preview for delete…';
+  }
+  const paths = entries.map(function(ent){ return joinPath(curPath, ent.name); });
+  if(entries.length === 1){
+    const fullPath = paths[0];
+    if(deleteConfirmPath !== fullPath){
+      deleteConfirmPath = fullPath;
+      deleteConfirmBulkKey = '';
+      setStatus('Press Delete again to confirm permanent deletion of "' + entries[0].name + '"');
+      return;
+    }
+    deleteConfirmPath = '';
+    bulkDeleteActive = false;
+    bulkDeleteQueue = [];
+    const r = ridn();
+    wantDeleteRid = r;
+    armDeleteWatchdog(r);
+    send({type:'fs_delete', path: fullPath, request_id: r, force: xferForce(), force_kill: xferForceKill()});
+    setXferStatus('Deleting on agent…');
+    setStatus('Deleting…');
+    return;
+  }
+  deleteConfirmPath = '';
+  const bulkKey = paths.slice().sort().join('|');
+  if(deleteConfirmBulkKey !== bulkKey){
+    deleteConfirmBulkKey = bulkKey;
+    setStatus('Press Delete again to confirm permanent deletion of '+entries.length+' items');
+    return;
+  }
+  deleteConfirmBulkKey = '';
+  bulkDeleteActive = true;
+  bulkDeleteQueue = paths.slice(1);
+  const r = ridn();
+  wantDeleteRid = r;
+  armDeleteWatchdog(r);
+  send({type:'fs_delete', path: paths[0], request_id: r, force: xferForce(), force_kill: xferForceKill()});
+  setXferStatus('Deleting on agent… ('+bulkDeleteQueue.length+' after this)');
+  setStatus('Deleting…');
+}
+document.addEventListener('click', ev => {
+  const tr = ev.target.closest('#rows tr');
+  if(!tr || !document.getElementById('rows').contains(tr)) return;
+  const isMeta = !!(ev.ctrlKey || ev.metaKey);
+  const isShift = !!ev.shiftKey;
+  if(tr.classList.contains('root-row')){
+    selectedEntryNames.clear();
+    selectionAnchorIdx = null;
+    lastSelectedName = null;
+    document.querySelectorAll('#rows tr').forEach(function(x){ x.classList.remove('selected'); });
+    const ri = parseInt(tr.dataset.rootIdx,10);
+    if(ri>=0 && ri<lastRoots.length) pickRoot(lastRoots[ri].path);
+    maybeResetDeleteConfirm();
+    return;
+  }
+  const i = parseInt(tr.dataset.idx,10);
+  if(i < 0 || i >= lastEntries.length) return;
+  const name = lastEntries[i].name;
+  if(isShift && selectionAnchorIdx !== null && selectionAnchorIdx >= 0 && selectionAnchorIdx < lastEntries.length){
+    const a = Math.min(selectionAnchorIdx, i);
+    const b = Math.max(selectionAnchorIdx, i);
+    if(!isMeta) selectedEntryNames.clear();
+    for(let j = a; j <= b; j++) selectedEntryNames.add(lastEntries[j].name);
+  } else if(isMeta){
+    if(selectedEntryNames.has(name)) selectedEntryNames.delete(name);
+    else selectedEntryNames.add(name);
+    selectionAnchorIdx = i;
+  } else {
+    selectedEntryNames.clear();
+    selectedEntryNames.add(name);
+    selectionAnchorIdx = i;
+  }
+  lastSelectedName = name;
+  document.querySelectorAll('#rows tr').forEach(function(row){
+    if(row.classList.contains('root-row')) return;
+    const idx = parseInt(row.dataset.idx, 10);
+    if(idx >= 0 && idx < lastEntries.length){
+      row.classList.toggle('selected', selectedEntryNames.has(lastEntries[idx].name));
+    }
+  });
+  maybeResetDeleteConfirm();
+});
+document.addEventListener('dblclick', ev => {
+  const tr = ev.target.closest('#rows tr');
+  if(!tr || tr.classList.contains('root-row')) return;
+  const i = parseInt(tr.dataset.idx,10);
+  if(i>=0 && i<lastEntries.length){
+    const e = lastEntries[i];
+    if(e.is_dir){ navigateIntoFolder(e); }
+    else { activateEntry(e); }
+  }
+});
+document.addEventListener('keydown', ev => {
+  if(ev.target && ev.target.id==='path' && ev.key==='Enter'){ ev.preventDefault(); goPath(); return; }
+  if(ev.target && ev.target.id==='search' && ev.key==='Enter'){
+    ev.preventDefault();
+    const nextQ = currentSearchValue();
+    if(nextQ !== currentSearchQuery){
+      selectedEntryNames.clear();
+      selectionAnchorIdx = null;
+    }
+    currentSearchQuery = nextQ;
+    refresh();
+    return;
+  }
+  if(!authed || wantDownloadRid != null || wantFolderZipRid != null || wantDeleteRid != null || wantHfRid != null) return;
+  const tag = (ev.target && ev.target.tagName) || '';
+  if(ev.target && ev.target.id === 'terminal-cmd') return;
+  if(tag==='INPUT' || tag==='TEXTAREA' || tag==='BUTTON' || tag==='SELECT') return;
+  if(ev.key === 'Delete'){
+    if(selectedEntriesOrdered().length > 0){
+      ev.preventDefault();
+      deleteSel();
+    }
+    return;
+  }
+  if(ev.key==='Enter'){
+    const tr = selectedRow();
+    if(tr && tr.classList.contains('root-row')){
+      ev.preventDefault();
+      const ri = parseInt(tr.dataset.rootIdx,10);
+      if(ri>=0 && ri<lastRoots.length) pickRoot(lastRoots[ri].path);
+      return;
+    }
+    if(selectedEntriesOrdered().length > 0){
+      ev.preventDefault();
+      const e = selEntry();
+      if(e) activateEntry(e);
+    }
+  }
+});
+function doDisconnect(){
+  cancelForgeUpgradeReconnectTimeouts();
+  if(ws) ws.close();
+}
+/**
+ * Auto-connect support: read ?session=SESSION_ID&auto=1 from URL.
+ * When auto=1: hides the overlay dialog entirely, connects directly,
+ * and shows status/errors at the top of the page — no dialog needed.
+ */
+(function initFromUrl(){
+  try {
+    const params = new URLSearchParams(location.search || '');
+    const sessionParam = params.get('session') || params.get('s') || '';
+    const autoParam = params.get('auto') || params.get('autoconnect') || '';
+    if (!sessionParam) return;
+    // Pre-fill session field (used by doConnect)
+    const sessionEl = $('session');
+    if (sessionEl) sessionEl.value = sessionParam;
+    if (autoParam === '1') {
+      // Hide the overlay dialog — we're connecting directly from the dashboard
+      const overlay = document.getElementById('overlay');
+      if (overlay) {
+        overlay.style.display = 'none';
+        overlay.setAttribute('aria-hidden', 'true');
+      }
+      // Show the bar area immediately so status messages are visible
+      const bar = document.getElementById('bar');
+      if (bar) bar.classList.remove('hidden');
+      // Show fe-msgs area for status/error display
+      const msgs = document.getElementById('fe-msgs');
+      if (msgs) {
+        msgs.classList.remove('hidden');
+        msgs.style.display = '';
+      }
+      // Show "connecting…" status
+      setWaitmsg('Connecting to session ' + sessionParam + '…');
+      // Auto-connect after a brief delay
+      setTimeout(function() {
+        if (sessionEl && sessionEl.value.trim()) {
+          doConnect();
+        }
+      }, 350);
+    }
+  } catch(e) { /* ignore */ }
+})();
+(function initSearchUi(){
+  let timer = null;
+  const el = $('search');
+  if(!el) return;
+  el.addEventListener('input', function(){
+    if(timer) clearTimeout(timer);
+    timer = setTimeout(function(){
+      timer = null;
+      if(!authed) return;
+      const nextQ = currentSearchValue();
+      if(nextQ === currentSearchQuery) return;
+      selectedEntryNames.clear();
+      selectionAnchorIdx = null;
+      currentSearchQuery = nextQ;
+      refresh();
+    }, 180);
+  });
+})();
+</script>
+</body>
+</html>