glove-foundry 0.3.2 → 0.4.0

package/dist/{chunk-P65RT7H5.js → chunk-25BGNRJN.js}

@@ -2,6 +2,7 @@ import {
   DEFAULT_FOUNDRY_CONFIG
 } from "./chunk-ZFNMFE3T.js";
 import {
+  EMPTY_AGENT_COMPOSITION,
   EMPTY_CAPABILITY_REGISTRY,
   EMPTY_FOUNDRY_APPLICATION,
   EMPTY_NATIVE_REGISTRY,
@@ -9,6 +10,8 @@ import {
   FOUNDRY_AGENT_FILE_ENV,
   FOUNDRY_AGENT_ROUTE_ENV,
   FOUNDRY_APPLICATION_ENV,
+  FOUNDRY_APPROVAL_DIRECTORY_ENV,
+  FOUNDRY_CORE_COMMAND_DIRECTORY_ENV,
   FOUNDRY_CORE_COMMAND_EVENT,
   FOUNDRY_EVENT_PREFIX,
   FOUNDRY_EXECUTION_MARKER,
@@ -19,6 +22,7 @@ import {
   FOUNDRY_SUBSCRIBER_BRAND,
   MemoryFoundryDataAdapter,
   bindFileIdentity,
+  claimFoundryCoreCommandRequest,
   compileAgentDefinition,
   createAgentInstance,
   createConversation,
@@ -26,16 +30,20 @@ import {
   definePlaybookSubscription,
   defineSharedTool,
   discoverAgents,
-  fileDefinitionKey,
-  fileDefinitionLabel,
+  freezeGloveMessage,
+  getFoundryCoreCommandRequest,
   id,
   installationKey,
+  listFoundryApprovals,
+  monitorFoundryCoreCommandRequest,
   normalizeAgentInstallations,
   reconstructPlaybook,
   reconstructPlaybookSubscription,
+  resolveFoundryApproval,
   routeFromInternalAgentName,
+  settleFoundryCoreCommandRequest,
   transmissionPredicate
-} from "./chunk-CRWY7M66.js";
+} from "./chunk-5LDW2N2E.js";
 
 // src/codegen.ts
 import { mkdir, writeFile } from "node:fs/promises";
@@ -64,87 +72,6 @@ ${routes}
   return { routesFile, manifestFile };
 }
 
-// src/composition.ts
-function addUnique(values, value, kind) {
-  const key = fileDefinitionKey(value);
-  if (values.some((candidate) => fileDefinitionKey(candidate) === key)) {
-    throw new Error(`Duplicate agent-local ${kind} "${fileDefinitionLabel(value)}".`);
-  }
-  values.push(value);
-}
-function composeAgent(...sources) {
-  const capabilities = {
-    tools: [...EMPTY_CAPABILITY_REGISTRY.tools],
-    applications: [...EMPTY_CAPABILITY_REGISTRY.applications],
-    mcp: [...EMPTY_CAPABILITY_REGISTRY.mcp],
-    memory: [...EMPTY_CAPABILITY_REGISTRY.memory]
-  };
-  const native = {
-    layers: [...EMPTY_NATIVE_REGISTRY.layers],
-    subscribers: [...EMPTY_NATIVE_REGISTRY.subscribers]
-  };
-  const visit = (source) => {
-    if (!source) return;
-    if (typeof source === "function") {
-      visit(source());
-      return;
-    }
-    if (Array.isArray(source)) {
-      for (const child of source) visit(child);
-      return;
-    }
-    if ("capabilities" in source && "native" in source) {
-      visit([
-        ...source.capabilities.tools,
-        ...source.capabilities.applications,
-        ...source.capabilities.mcp,
-        ...source.capabilities.memory,
-        ...source.native.layers,
-        ...source.native.subscribers
-      ]);
-      return;
-    }
-    const branded = source;
-    if (branded[FOUNDRY_SHARED_TOOL_BRAND] === true) {
-      addUnique(capabilities.tools, branded, "tool");
-    } else if (branded[FOUNDRY_AGENT_APPLICATION_BRAND] === true) {
-      addUnique(
-        capabilities.applications,
-        branded,
-        "application"
-      );
-    } else if (branded[FOUNDRY_MCP_BRAND] === true) {
-      addUnique(capabilities.mcp, branded, "MCP");
-    } else if (branded[FOUNDRY_MEMORY_BRAND] === true) {
-      addUnique(
-        capabilities.memory,
-        branded,
-        "memory"
-      );
-    } else if (branded[FOUNDRY_LAYER_BRAND] === true) {
-      addUnique(native.layers, branded, "layer");
-    } else if (branded[FOUNDRY_SUBSCRIBER_BRAND] === true) {
-      addUnique(native.subscribers, branded, "subscriber");
-    } else {
-      throw new Error("composeAgent received an unrecognized Foundry definition.");
-    }
-  };
-  for (const source of sources) visit(source);
-  return Object.freeze({
-    capabilities: Object.freeze({
-      tools: Object.freeze(capabilities.tools),
-      applications: Object.freeze(capabilities.applications),
-      mcp: Object.freeze(capabilities.mcp),
-      memory: Object.freeze(capabilities.memory)
-    }),
-    native: Object.freeze({
-      layers: Object.freeze(native.layers),
-      subscribers: Object.freeze(native.subscribers)
-    })
-  });
-}
-var EMPTY_AGENT_COMPOSITION = composeAgent();
-
 // src/domain.ts
 import { Schema } from "effect";
 var Slug = Schema.String.pipe(
@@ -753,6 +680,7 @@ var MemoryObservabilityAdapter = class {
   }
 };
 function categoryForAgentEvent(type) {
+  if (type === "foundry.guidance.state") return "memory";
   if (type.startsWith("tool_")) return "tool";
   if (type.startsWith("foundry.installation")) return "application";
   if (type.startsWith("foundry.layer") || type.startsWith("foundry.subscriber")) {
@@ -771,6 +699,17 @@ function categoryForAgentEvent(type) {
   }
   return "system";
 }
+function observableAgentEventData(type, data2) {
+  if (type !== "foundry.core.command" || !data2 || typeof data2 !== "object") return data2;
+  const command = data2;
+  if (command.type !== "transmit" || !("payload" in command)) return data2;
+  const { payload: _payload, observability, ...metadata } = command;
+  void _payload;
+  return {
+    ...metadata,
+    payload: observability ?? { redacted: true }
+  };
+}
 function encodedAgentEvent(message) {
   const start = message.indexOf(FOUNDRY_EVENT_PREFIX);
   if (start < 0) return null;
@@ -874,7 +813,7 @@ var FoundryObserver = class {
         agent: this.route(run.signalName),
         runId: run.id,
         ...encoded.timestamp ? { timestamp: encoded.timestamp } : {},
-        data: encoded.data
+        data: observableAgentEventData(encoded.type, encoded.data)
       });
       return;
     }
@@ -899,6 +838,10 @@ var FoundryObserver = class {
 
 // src/runtime.ts
 import { existsSync } from "node:fs";
+import { mkdir as mkdir2, rm } from "node:fs/promises";
+import { randomUUID as randomUUID2 } from "node:crypto";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { fileURLToPath } from "node:url";
 import {
   Effect as Effect5,
@@ -1023,6 +966,9 @@ var ApplicationConnectionSupervisor = class {
                 routeId: input.route.id,
                 eventId: input.eventId,
                 threadKey: input.threadKey,
+                ...input.conversationKey ? { conversationKey: input.conversationKey } : {},
+                ...input.conversationScope ? { conversationScope: input.conversationScope } : {},
+                ...input.awaitCompletion ? { awaitCompletion: true, signal } : {},
                 raw: input.raw
               });
             },
@@ -1174,7 +1120,7 @@ function assembleToolModule(route, module) {
     tool: { ...body, name }
   });
 }
-function addUnique2(target, values, label) {
+function addUnique(target, values, label) {
   const ids = new Set(target.map((value) => value.id));
   for (const value of values) {
     if (ids.has(value.id)) {
@@ -1220,17 +1166,17 @@ async function discoverFoundryRegistry(options) {
         );
       }
       if (config.kind === "tool") {
-        addUnique2(registry.tools, [value], "shared tool");
+        addUnique(registry.tools, [value], "shared tool");
       } else if (config.kind === "application") {
-        addUnique2(
+        addUnique(
           registry.applications,
           [value],
           "agent application"
         );
       } else if (config.kind === "mcp") {
-        addUnique2(registry.mcp, [value], "MCP");
+        addUnique(registry.mcp, [value], "MCP");
       } else if (config.kind === "memory") {
-        addUnique2(
+        addUnique(
           registry.memory,
           [value],
           "memory profile"
@@ -1275,9 +1221,9 @@ async function discoverFoundryRegistry(options) {
         );
       }
       if (config.kind === "layer") {
-        addUnique2(native.layers, [value], "layer");
+        addUnique(native.layers, [value], "layer");
       } else {
-        addUnique2(
+        addUnique(
           native.subscribers,
           [value],
           "subscriber"
@@ -1366,6 +1312,17 @@ var FoundryRuntime = class _FoundryRuntime {
   services;
   runnerLoops = [];
   materializedActivations = /* @__PURE__ */ new Set();
+  activationTimers = /* @__PURE__ */ new Map();
+  approvalDirectory = join(
+    tmpdir(),
+    "glove-foundry-approvals",
+    randomUUID2()
+  );
+  coreCommandDirectory = join(
+    tmpdir(),
+    "glove-foundry-core-commands",
+    randomUUID2()
+  );
   started = false;
   disposed = false;
   constructor(options) {
@@ -1444,7 +1401,27 @@ var FoundryRuntime = class _FoundryRuntime {
     );
     this.connectionSupervisor = new ApplicationConnectionSupervisor({
       receive: async (input) => {
-        await this.dispatchInbound(input);
+        const runs = await this.dispatchInbound(input);
+        if (!input.awaitCompletion || runs.length === 0) return;
+        if (input.signal?.aborted) return;
+        const completion = Promise.all(runs.map(
+          (run) => this.waitForRun(run.id, { timeoutMs: Math.max(1e3, run.timeoutMs + 1e3) })
+        ));
+        await new Promise((resolveWait) => {
+          let settled = false;
+          const finish = () => {
+            if (settled) return;
+            settled = true;
+            input.signal?.removeEventListener("abort", finish);
+            resolveWait();
+          };
+          if (input.signal?.aborted) {
+            finish();
+            return;
+          }
+          input.signal?.addEventListener("abort", finish, { once: true });
+          void completion.then(finish, finish);
+        });
       },
       emit: (event) => {
         this.observability.append({
@@ -1474,6 +1451,8 @@ var FoundryRuntime = class _FoundryRuntime {
           if (discovered) {
             resolvedEnvironment[FOUNDRY_AGENT_FILE_ENV] = discovered.filePath;
           }
+          resolvedEnvironment[FOUNDRY_APPROVAL_DIRECTORY_ENV] = this.approvalDirectory;
+          resolvedEnvironment[FOUNDRY_CORE_COMMAND_DIRECTORY_ENV] = this.coreCommandDirectory;
         }
         if (this.applicationFilePath) {
           resolvedEnvironment[FOUNDRY_APPLICATION_ENV] = this.applicationFilePath;
@@ -1562,6 +1541,10 @@ var FoundryRuntime = class _FoundryRuntime {
       }
       this.started = true;
       try {
+        await Promise.all([
+          mkdir2(this.approvalDirectory, { recursive: true, mode: 448 }),
+          mkdir2(this.coreCommandDirectory, { recursive: true, mode: 448 })
+        ]);
         await this.seedTopology();
         for (const instance of await this.listAgentInstances()) {
           if (!this.byRoute.has(instance.definitionId)) {
@@ -1602,9 +1585,15 @@ var FoundryRuntime = class _FoundryRuntime {
       if (this.disposed) return;
       if (!this.started) {
         await this.services.dispose();
+        await Promise.all([
+          rm(this.approvalDirectory, { recursive: true, force: true }),
+          rm(this.coreCommandDirectory, { recursive: true, force: true })
+        ]);
         this.disposed = true;
         return;
       }
+      for (const timer of this.activationTimers.values()) clearTimeout(timer);
+      this.activationTimers.clear();
       await this.connectionSupervisor.stopAll();
       this.observability.append({ type: "runtime.stop.signals", category: "system", data: {} });
       await this.signalRunner.stop({ graceful: true, timeoutMs: 1e4 });
@@ -1614,6 +1603,10 @@ var FoundryRuntime = class _FoundryRuntime {
       await this.envStore.close();
       await this.scheduleAdapter.close?.();
       await this.services.dispose();
+      await Promise.all([
+        rm(this.approvalDirectory, { recursive: true, force: true }),
+        rm(this.coreCommandDirectory, { recursive: true, force: true })
+      ]);
       this.started = false;
       this.disposed = true;
       this.observability.append({ type: "runtime.stopped", category: "system", data: {} });
@@ -1639,6 +1632,10 @@ var FoundryRuntime = class _FoundryRuntime {
       if (request.workspaceId !== agent.workspaceId || request.workspaceId !== conversation.workspaceId) {
         throw new Error("The request, agent instance, and conversation must share a workspace.");
       }
+      await Effect5.runPromise(this.data.putConversation(Object.freeze({
+        ...conversation,
+        updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+      })));
       const runId = await this.signalRunner.triggerSignal(
         discovered.executionName,
         await this.executionEnvelope(request)
@@ -1772,6 +1769,97 @@ var FoundryRuntime = class _FoundryRuntime {
   listConversations(agentId) {
     return Effect5.runPromise(this.data.listConversations(agentId));
   }
+  async updateConversation(agentId, conversationId, options) {
+    const agent = await Effect5.runPromise(this.data.getAgent(agentId));
+    if (!agent) throw new Error(`Foundry agent instance "${agentId}" was not found.`);
+    const current = await Effect5.runPromise(this.data.getConversation(conversationId));
+    if (!current || current.agentId !== agent.id) {
+      throw new Error(`Conversation "${conversationId}" does not belong to agent instance "${agent.id}".`);
+    }
+    const title = options.title?.trim();
+    if (options.title !== void 0 && (!title || title.length > 120)) {
+      throw new Error("A conversation title must contain 1 to 120 characters.");
+    }
+    const conversation = Object.freeze({
+      ...current,
+      ...title ? { title } : {},
+      ...options.context ? { context: Object.freeze(structuredClone(options.context)) } : {},
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    });
+    await Effect5.runPromise(this.data.putConversation(conversation));
+    this.observability.append({
+      type: "conversation.updated",
+      category: "agent",
+      agent: agent.definitionId,
+      data: { agentId, conversationId, titleChanged: options.title !== void 0 }
+    });
+    return conversation;
+  }
+  /**
+   * Read the same StoreAdapter the child agent process uses. Foundry never
+   * reconstructs chat history from runs or observability events: adapters stay
+   * the single source of truth for durable conversations.
+   */
+  async conversationTranscript(agentId, conversationId, options = {}) {
+    const agent = await Effect5.runPromise(this.data.getAgent(agentId));
+    if (!agent) throw new Error(`Foundry agent instance "${agentId}" was not found.`);
+    const conversation = await Effect5.runPromise(this.data.getConversation(conversationId));
+    if (!conversation || conversation.agentId !== agent.id) {
+      throw new Error(`Conversation "${conversationId}" does not belong to agent instance "${agent.id}".`);
+    }
+    if (conversation.workspaceId !== agent.workspaceId) {
+      throw new Error("The agent instance and conversation must share a workspace.");
+    }
+    const discovered = this.byRoute.get(agent.definitionId);
+    if (!discovered) {
+      throw new Error(`Foundry agent definition "${agent.definitionId}" was not found.`);
+    }
+    const storeFactory = discovered.definition.store ?? this.application.conversationStore;
+    const limit = Math.max(1, Math.min(500, Math.floor(options.limit ?? 100)));
+    if (!storeFactory) {
+      return Object.freeze({
+        conversation,
+        messages: Object.freeze([]),
+        turnCount: 0,
+        tokenCount: 0,
+        page: Object.freeze({ offset: 0, limit, total: 0, hasEarlier: false, hasLater: false }),
+        persisted: false
+      });
+    }
+    const store = await storeFactory({
+      definitionId: agent.definitionId,
+      agentId: agent.id,
+      conversationId: conversation.id,
+      workspaceId: conversation.workspaceId
+    });
+    const [messages, turnCount, tokenCount, tokenConsumption] = await Promise.all([
+      store.getMessages(),
+      store.getTurnCount(),
+      store.getTokenCount(),
+      store.getTokenConsumption?.()
+    ]);
+    const total = messages.length;
+    const offset = Math.max(0, Math.min(
+      total,
+      Math.floor(options.offset ?? Math.max(0, total - limit))
+    ));
+    const visibleMessages = messages.slice(offset, offset + limit);
+    return Object.freeze({
+      conversation,
+      messages: Object.freeze(visibleMessages.map(freezeGloveMessage)),
+      turnCount,
+      tokenCount,
+      ...tokenConsumption ? { tokenConsumption: Object.freeze({ ...tokenConsumption }) } : {},
+      page: Object.freeze({
+        offset,
+        limit,
+        total,
+        hasEarlier: offset > 0,
+        hasLater: offset + visibleMessages.length < total
+      }),
+      persisted: true
+    });
+  }
   listWorkspaceEntries(workspaceId) {
     return Effect5.runPromise(this.data.listWorkspaceEntries(workspaceId));
   }
@@ -1845,6 +1933,77 @@ var FoundryRuntime = class _FoundryRuntime {
   cancel(runId) {
     return this.signalRunner.cancel(runId);
   }
+  /**
+   * Change course at a run boundary.
+   *
+   * Foundry does not inject text into an arbitrary in-flight tool. If the
+   * source is active, steering cooperatively cancels it first, waits for that
+   * terminal boundary, then starts a replacement turn in the same durable
+   * conversation with explicit lineage in the request context.
+   */
+  async steer(runId, message) {
+    const source = await this.getRun(runId);
+    if (!source) throw new Error(`Foundry run "${runId}" was not found.`);
+    if (!source.agentId || !source.conversationId) {
+      throw new Error(`Foundry run "${runId}" does not expose an agent conversation to steer.`);
+    }
+    const active = source.status === "pending" || source.status === "running";
+    const interrupted = active ? await this.cancel(runId) : false;
+    if (interrupted) {
+      const terminal = await this.waitForRun(runId, {
+        pollMs: 25,
+        timeoutMs: Math.min(Math.max(source.timeoutMs, 1e3), 3e4)
+      });
+      if (!terminal || (terminal.status === "pending" || terminal.status === "running")) {
+        throw new Error(`Foundry could not reach a safe steering boundary for run "${runId}".`);
+      }
+    }
+    const run = await this.send(source.agentId, source.conversationId, message, {
+      context: {
+        protocol: "foundry-control",
+        steeredFromRunId: runId,
+        steeringMode: "interrupt-and-restart"
+      }
+    });
+    this.observability.append({
+      type: "run.steered",
+      category: "system",
+      agent: source.agent,
+      runId: run.id,
+      data: {
+        fromRunId: runId,
+        toRunId: run.id,
+        agentId: source.agentId,
+        conversationId: source.conversationId,
+        interrupted,
+        mode: "interrupt-and-restart"
+      }
+    });
+    return { fromRunId: runId, interrupted, run };
+  }
+  listApprovals(filter = {}) {
+    return listFoundryApprovals(this.approvalDirectory, filter);
+  }
+  async resolveApproval(approvalId, decision) {
+    const approval = await resolveFoundryApproval(
+      this.approvalDirectory,
+      approvalId,
+      decision
+    );
+    this.observability.append({
+      type: "approval.resolved",
+      category: "system",
+      agent: approval.definitionId,
+      runId: approval.runId,
+      data: {
+        approvalId: approval.id,
+        toolName: approval.toolName,
+        decision,
+        status: approval.status
+      }
+    });
+    return approval;
+  }
   capabilityManifest(definitionId) {
     if (!this.compositionByDefinition.has(definitionId)) {
       throw new Error(`Foundry agent definition "${definitionId}" was not found.`);
@@ -2116,12 +2275,27 @@ var FoundryRuntime = class _FoundryRuntime {
         }
       }
       for (const { agent, playbooks: matched } of matchedByAgent.values()) {
-        const conversationId = `transmission:${route.id}:${agent.id}:${input.threadKey}`;
-        let conversation = await Effect5.runPromise(this.data.getConversation(conversationId));
+        const conversationScope = input.conversationScope ?? "route";
+        const conversationKey = input.conversationKey?.trim() || input.threadKey;
+        const conversationId = conversationScope === "agent" ? `transmission:agent:${agent.id}:${encodeURIComponent(conversationKey)}` : `transmission:${route.id}:${agent.id}:${encodeURIComponent(conversationKey)}`;
+        const keyedConversations = conversationScope === "agent" ? (await Effect5.runPromise(this.data.listConversations(agent.id))).filter(
+          (candidate) => candidate.context.conversationKey === conversationKey
+        ) : [];
+        if (keyedConversations.length > 1) {
+          throw new Error(
+            `Agent "${agent.id}" has multiple conversations for key "${conversationKey}".`
+          );
+        }
+        let conversation = keyedConversations[0] ?? await Effect5.runPromise(this.data.getConversation(conversationId));
         if (!conversation) {
           conversation = await this.createConversation(agent.id, {
             id: conversationId,
-            context: { routeId: route.id, threadKey: input.threadKey }
+            context: {
+              routeId: route.id,
+              threadKey: input.threadKey,
+              conversationKey,
+              conversationScope
+            }
           });
         }
         const serializationContext = {
@@ -2189,8 +2363,11 @@ var FoundryRuntime = class _FoundryRuntime {
         `Outbound route "${route.id}" does not belong to transmission "${input.transmissionId}".`
       );
     }
+    const agent = await Effect5.runPromise(this.data.getAgent(input.agentId));
+    if (!agent) {
+      throw new Error(`Agent instance "${input.agentId}" does not exist.`);
+    }
     if (input.applicationId) {
-      const agent = await Effect5.runPromise(this.data.getAgent(input.agentId));
       const application = agent ? this.compositionByDefinition.get(agent.definitionId)?.capabilities.applications.find(
         (candidate) => candidate.id === input.applicationId
       ) : void 0;
@@ -2219,10 +2396,22 @@ var FoundryRuntime = class _FoundryRuntime {
       return yield* (yield* AccountDirectory).get(route.accountId);
     })) : void 0;
     const payload = await Schema3.decodeUnknownPromise(transmission.outbound.input)(input.payload);
+    const accountSessions = this.byRoute.get(agent.definitionId)?.definition.accountSessions;
+    const sourceRun = account && accountSessions ? await this.getRun(input.runId) : null;
     const output = await Effect5.runPromise(transmission.outbound.adapter.deliver(payload, {
       route,
       ...account ? { account } : {},
-      grant
+      grant,
+      signal: input.signal ?? new AbortController().signal,
+      ...account && accountSessions ? {
+        withAccountSession: (operation, use) => accountSessions.withSession({
+          accountId: account.id,
+          operation,
+          agentId: agent.id,
+          conversationId: sourceRun?.conversationId ?? `egress:${input.runId}`,
+          workspaceId: agent.workspaceId
+        }, use)
+      } : {}
     }));
     const validated = await Schema3.decodeUnknownPromise(transmission.outbound.output)(output);
     this.observability.append({
@@ -2251,8 +2440,8 @@ var FoundryRuntime = class _FoundryRuntime {
       environment,
       activations,
       agents: this.agents.length,
-      capabilities: this.registry.files.length,
-      surfaces: this.registry.nativeFiles.length
+      capabilities: this.registry.capabilities.tools.length + this.registry.capabilities.applications.length + this.registry.capabilities.mcp.length + this.registry.capabilities.memory.length,
+      surfaces: this.registry.native.layers.length + this.registry.native.subscribers.length
     };
   }
   async runsFromIds(runIds) {
@@ -2720,26 +2909,78 @@ var FoundryRuntime = class _FoundryRuntime {
       });
     }
   }
-  async enqueueCoreRequest(definitionId, request, runAt) {
+  async enqueueCoreRequest(definitionId, request) {
     const discovered = this.byRoute.get(definitionId);
     if (!discovered) throw new Error(`Foundry agent definition "${definitionId}" was not found.`);
     const agent = await Effect5.runPromise(this.data.getAgent(request.agentId));
     const conversation = await Effect5.runPromise(this.data.getConversation(request.conversationId));
     if (!agent || !conversation) throw new Error("Core command references an unknown agent instance or conversation.");
-    const runId = await this.signalRunner.triggerSignal(
+    return this.signalRunner.triggerSignal(
       discovered.executionName,
       await this.executionEnvelope(request)
     );
-    if (runAt) {
-      const date = new Date(runAt);
-      if (Number.isNaN(date.getTime())) throw new Error(`Invalid future run date "${runAt}".`);
-      await this.signalRunner.getAdapter().updateRun(runId, { nextRunAt: date });
-    }
-    return runId;
   }
   async executeCoreCommand(command, parentRunId) {
     if (command.type === "transmit") {
-      await this.deliverOutbound(command, parentRunId);
+      const request2 = await getFoundryCoreCommandRequest(
+        this.coreCommandDirectory,
+        command.id
+      );
+      if (!request2) {
+        if (command.payload && typeof command.payload === "object" && command.payload.privateRequest === true) {
+          throw new Error("Foundry transmission private request is missing or invalid.");
+        }
+        await this.deliverOutbound(command, parentRunId);
+        return;
+      }
+      const executable = request2.command ?? command;
+      const claimed = await claimFoundryCoreCommandRequest(
+        this.coreCommandDirectory,
+        command.id
+      );
+      if (!claimed) return;
+      const delivery = new AbortController();
+      const monitoring = new AbortController();
+      const monitor = monitorFoundryCoreCommandRequest(
+        this.coreCommandDirectory,
+        request2,
+        delivery,
+        monitoring.signal
+      );
+      try {
+        if (request2.runId !== parentRunId) {
+          throw new Error("Foundry transmission call does not belong to this run.");
+        }
+        if (executable.id !== command.id || executable.definitionId !== command.definitionId || executable.agentId !== command.agentId || executable.conversationId !== command.conversationId || executable.workspaceId !== command.workspaceId || executable.routeId !== command.routeId || executable.applicationId !== command.applicationId || executable.transmissionId !== command.transmissionId) {
+          throw new Error("Foundry transmission command metadata does not match its private request.");
+        }
+        if (Date.parse(request2.expiresAt) <= Date.now()) {
+          throw new Error("Foundry transmission call expired before delivery.");
+        }
+        const output = await this.deliverOutbound(
+          executable,
+          parentRunId,
+          delivery.signal
+        );
+        await settleFoundryCoreCommandRequest(
+          this.coreCommandDirectory,
+          command.id,
+          { status: "success", output }
+        );
+      } catch (cause) {
+        await settleFoundryCoreCommandRequest(
+          this.coreCommandDirectory,
+          command.id,
+          {
+            status: "error",
+            error: cause instanceof Error ? cause.message : String(cause)
+          }
+        );
+        throw cause;
+      } finally {
+        monitoring.abort();
+        await monitor;
+      }
       return;
     }
     if (command.type === "playbook.sync") {
@@ -2754,6 +2995,14 @@ var FoundryRuntime = class _FoundryRuntime {
       await this.updateScheduledActivation(command, parentRunId);
       return;
     }
+    if (command.type === "schedule.pause") {
+      await this.pauseScheduledActivation(command, parentRunId);
+      return;
+    }
+    if (command.type === "schedule.resume") {
+      await this.resumeScheduledActivation(command, parentRunId);
+      return;
+    }
     if (command.type === "schedule.cancel") {
       await this.cancelScheduledActivation(command, parentRunId);
       return;
@@ -2809,8 +3058,7 @@ var FoundryRuntime = class _FoundryRuntime {
     }
     const runId = await this.enqueueCoreRequest(
       command.definitionId,
-      request,
-      void 0
+      request
     );
     this.observability.append({
       type: "core.command.accepted",
@@ -2878,6 +3126,11 @@ var FoundryRuntime = class _FoundryRuntime {
     return `activation/${activationId.replaceAll("_", "-")}`;
   }
   async disarmActivation(activation) {
+    const timer = this.activationTimers.get(activation.id);
+    if (timer) {
+      clearTimeout(timer);
+      this.activationTimers.delete(activation.id);
+    }
     if (activation.timing.kind === "every" || activation.timing.kind === "cron") {
       await this.scheduleAdapter.delete(this.backendScheduleId(activation.id));
     } else if (activation.lastRunId) {
@@ -2946,13 +3199,13 @@ var FoundryRuntime = class _FoundryRuntime {
     const updated = {
       ...existing,
       ...command.patch,
-      status: "pending",
+      status: existing.status === "paused" ? "paused" : "pending",
       createdByRunId: parentRunId,
       lastRunId: void 0,
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
     await Effect5.runPromise(this.data.putActivation(updated));
-    await this.materializeActivation(updated);
+    if (updated.status !== "paused") await this.materializeActivation(updated);
     this.observability.append({
       type: "scheduled-action.updated",
       category: "activation",
@@ -2961,6 +3214,53 @@ var FoundryRuntime = class _FoundryRuntime {
       data: { commandId: command.id, activationId: updated.id }
     });
   }
+  async pauseScheduledActivation(command, parentRunId) {
+    const existing = await Effect5.runPromise(this.data.getActivation(command.activationId));
+    if (!existing) throw new Error(`Scheduled activation "${command.activationId}" was not found.`);
+    this.assertActivationOwnership(existing, command);
+    if (existing.status === "completed" || existing.status === "cancelled") {
+      throw new Error(`Scheduled activation "${command.activationId}" cannot be paused from status "${existing.status}".`);
+    }
+    if (existing.status !== "paused") {
+      await this.disarmActivation(existing);
+      await Effect5.runPromise(this.data.putActivation({
+        ...existing,
+        status: "paused",
+        updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+      }));
+    }
+    this.observability.append({
+      type: "scheduled-action.paused",
+      category: "activation",
+      agent: command.definitionId,
+      runId: parentRunId,
+      data: { commandId: command.id, activationId: existing.id }
+    });
+  }
+  async resumeScheduledActivation(command, parentRunId) {
+    const existing = await Effect5.runPromise(this.data.getActivation(command.activationId));
+    if (!existing) throw new Error(`Scheduled activation "${command.activationId}" was not found.`);
+    this.assertActivationOwnership(existing, command);
+    if (existing.status !== "paused") {
+      throw new Error(`Scheduled activation "${command.activationId}" is not paused.`);
+    }
+    const resumed = {
+      ...existing,
+      status: "pending",
+      createdByRunId: parentRunId,
+      lastRunId: void 0,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    await Effect5.runPromise(this.data.putActivation(resumed));
+    await this.materializeActivation(resumed);
+    this.observability.append({
+      type: "scheduled-action.resumed",
+      category: "activation",
+      agent: command.definitionId,
+      runId: parentRunId,
+      data: { commandId: command.id, activationId: existing.id }
+    });
+  }
   async cancelScheduledActivation(command, parentRunId) {
     const existing = await Effect5.runPromise(this.data.getActivation(command.activationId));
     if (!existing) throw new Error(`Scheduled activation "${command.activationId}" was not found.`);
@@ -2981,7 +3281,7 @@ var FoundryRuntime = class _FoundryRuntime {
   }
   async reconstructActivations() {
     for (const activation of await Effect5.runPromise(this.data.listActivations())) {
-      if (activation.status === "completed" || activation.status === "cancelled") continue;
+      if (activation.status === "paused" || activation.status === "completed" || activation.status === "cancelled") continue;
       await this.materializeActivation(activation);
     }
   }
@@ -3055,18 +3355,37 @@ var FoundryRuntime = class _FoundryRuntime {
         });
         return;
       }
-      const runId = await this.enqueueCoreRequest(
-        activation.definitionId,
-        request,
-        activation.timing.at
-      );
-      const active = {
-        ...activation,
+      await this.armOneShotActivation(activation, request);
+    } catch (cause) {
+      this.materializedActivations.delete(activation.id);
+      throw cause;
+    }
+  }
+  async armOneShotActivation(activation, request) {
+    if (activation.timing.kind !== "at") {
+      throw new Error(`Activation "${activation.id}" is not a one-shot activation.`);
+    }
+    const target = new Date(activation.timing.at).getTime();
+    const active = {
+      ...activation,
+      status: "active",
+      lastRunId: void 0,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    await Effect5.runPromise(this.data.putActivation(active));
+    const dispatch = async () => {
+      this.activationTimers.delete(activation.id);
+      if (this.disposed || !this.started) return;
+      const current = await Effect5.runPromise(this.data.getActivation(activation.id));
+      if (!current || current.status === "paused" || current.status === "cancelled" || current.status === "completed") return;
+      const runId = await this.enqueueCoreRequest(activation.definitionId, request);
+      const running = {
+        ...current,
         status: "active",
         lastRunId: runId,
         updatedAt: (/* @__PURE__ */ new Date()).toISOString()
       };
-      await Effect5.runPromise(this.data.putActivation(active));
+      await Effect5.runPromise(this.data.putActivation(running));
       this.observability.append({
         type: "core.command.accepted",
         category: "system",
@@ -3076,8 +3395,10 @@ var FoundryRuntime = class _FoundryRuntime {
       });
       void this.waitForRun(runId).then(async (run) => {
         if (!run || run.status !== "completed" && run.status !== "failed" && run.status !== "cancelled") return;
+        const latest = await Effect5.runPromise(this.data.getActivation(activation.id));
+        if (!latest || latest.status !== "active" || latest.lastRunId !== runId) return;
         await Effect5.runPromise(this.data.putActivation({
-          ...active,
+          ...latest,
           status: run.status === "cancelled" ? "cancelled" : "completed",
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
         }));
@@ -3090,20 +3411,45 @@ var FoundryRuntime = class _FoundryRuntime {
           data: { error: cause instanceof Error ? cause.message : String(cause) }
         });
       });
-    } catch (cause) {
-      this.materializedActivations.delete(activation.id);
-      throw cause;
-    }
+    };
+    const arm = () => {
+      const remaining = target - Date.now();
+      if (remaining <= 0) {
+        void dispatch().catch((cause) => {
+          this.materializedActivations.delete(activation.id);
+          this.observability.append({
+            type: "activation.dispatch.error",
+            category: "activation",
+            agent: activation.definitionId,
+            runId: activation.createdByRunId,
+            data: { error: cause instanceof Error ? cause.message : String(cause) }
+          });
+        });
+        return;
+      }
+      const timer = setTimeout(arm, Math.min(remaining, 2147483647));
+      this.activationTimers.set(activation.id, timer);
+    };
+    this.observability.append({
+      type: "scheduled-action.created",
+      category: "activation",
+      agent: activation.definitionId,
+      runId: activation.createdByRunId,
+      data: { commandId: activation.id, recurring: false, nextRunAt: activation.timing.at }
+    });
+    if (target <= Date.now()) await dispatch();
+    else arm();
   }
-  async deliverOutbound(command, parentRunId) {
-    await this.dispatchOutbound({
+  async deliverOutbound(command, parentRunId, signal) {
+    return this.dispatchOutbound({
       routeId: command.routeId,
       agentId: command.agentId,
       runId: parentRunId,
       payload: command.payload,
       commandId: command.id,
       ...command.applicationId ? { applicationId: command.applicationId } : {},
-      ...command.transmissionId ? { transmissionId: command.transmissionId } : {}
+      ...command.transmissionId ? { transmissionId: command.transmissionId } : {},
+      ...signal ? { signal } : {}
     });
   }
   async executionEnvelope(request) {
@@ -3142,18 +3488,24 @@ var FoundryRuntime = class _FoundryRuntime {
 import {
   createServer
 } from "node:http";
-import { Schema as Schema4 } from "effect";
+import { createHash, randomUUID as randomUUID3 } from "node:crypto";
+import { Effect as Effect6, Schema as Schema4 } from "effect";
 
 // src/dashboard-icons.ts
 var PHOSPHOR_ICON_PATHS = {
   overview: "M104,40H56A16,16,0,0,0,40,56v48a16,16,0,0,0,16,16h48a16,16,0,0,0,16-16V56A16,16,0,0,0,104,40Zm0,64H56V56h48v48Zm96-64H152a16,16,0,0,0-16,16v48a16,16,0,0,0,16,16h48a16,16,0,0,0,16-16V56A16,16,0,0,0,200,40Zm0,64H152V56h48v48Zm-96,32H56a16,16,0,0,0-16,16v48a16,16,0,0,0,16,16h48a16,16,0,0,0,16-16V152A16,16,0,0,0,104,136Zm0,64H56V152h48v48Zm96-64H152a16,16,0,0,0-16,16v48a16,16,0,0,0,16,16h48a16,16,0,0,0,16-16V152A16,16,0,0,0,200,136Zm0,64H152V152h48v48Z",
   agent: "M200,48H136V16a8,8,0,0,0-16,0V48H56A32,32,0,0,0,24,80V192a32,32,0,0,0,32,32H200a32,32,0,0,0,32-32V80A32,32,0,0,0,200,48Zm16,144a16,16,0,0,1-16,16H56a16,16,0,0,1-16-16V80A16,16,0,0,1,56,64H200a16,16,0,0,1,16,16Zm-52-56H92a28,28,0,0,0,0,56h72a28,28,0,0,0,0-56Zm-24,16v24H116V152ZM80,164a12,12,0,0,1,12-12h8v24H92A12,12,0,0,1,80,164Zm84,12h-8V152h8a12,12,0,0,1,0,24ZM72,108a12,12,0,1,1,12,12A12,12,0,0,1,72,108Zm88,0a12,12,0,1,1,12,12A12,12,0,0,1,160,108Z",
   runs: "M128,24A104,104,0,1,0,232,128,104.11,104.11,0,0,0,128,24Zm0,192a88,88,0,1,1,88-88A88.1,88.1,0,0,1,128,216Zm48.24-94.78-64-40A8,8,0,0,0,100,88v80a8,8,0,0,0,12.24,6.78l64-40a8,8,0,0,0,0-13.56ZM116,153.57V102.43L156.91,128Z",
+  chat: "M232,128a104,104,0,0,1-112.44,103.67,103.9,103.9,0,0,1-45.09-16.3L40.31,227.76a16,16,0,0,1-20.49-20.49l12.39-34.16A104,104,0,1,1,232,128ZM128,40a88,88,0,0,0-80.34,124,8,8,0,0,1,.26,6.21L34.87,206.13l35.92-13a8,8,0,0,1,6.21.26A88,88,0,1,0,128,40Zm-44,88a12,12,0,1,1-12-12A12,12,0,0,1,84,128Zm56,0a12,12,0,1,1-12-12A12,12,0,0,1,140,128Zm56,0a12,12,0,1,1-12-12A12,12,0,0,1,196,128Z",
   automations: "M232,136.66A104.12,104.12,0,1,1,119.34,24,8,8,0,0,1,120.66,40,88.12,88.12,0,1,0,216,135.34,8,8,0,0,1,232,136.66ZM120,72v56a8,8,0,0,0,8,8h56a8,8,0,0,0,0-16H136V72a8,8,0,0,0-16,0Zm40-24a12,12,0,1,0-12-12A12,12,0,0,0,160,48Zm36,24a12,12,0,1,0-12-12A12,12,0,0,0,196,72Zm24,36a12,12,0,1,0-12-12A12,12,0,0,0,220,108Z",
   integrations: "M237.66,18.34a8,8,0,0,0-11.32,0l-52.4,52.41-5.37-5.38a32.05,32.05,0,0,0-45.26,0L100,88.69l-6.34-6.35A8,8,0,0,0,82.34,93.66L88.69,100,65.37,123.31a32,32,0,0,0,0,45.26l5.38,5.37-52.41,52.4a8,8,0,0,0,11.32,11.32l52.4-52.41,5.37,5.38a32,32,0,0,0,45.26,0L156,167.31l6.34,6.35a8,8,0,0,0,11.32-11.32L167.31,156l23.32-23.31a32,32,0,0,0,0-45.26l-5.38-5.37,52.41-52.4A8,8,0,0,0,237.66,18.34Zm-116.29,161a16,16,0,0,1-22.62,0L76.69,157.25a16,16,0,0,1,0-22.62L100,111.31,144.69,156Zm57.94-57.94L156,144.69,111.31,100l23.32-23.31a16,16,0,0,1,22.62,0l22.06,22A16,16,0,0,1,179.31,121.37ZM88.57,35A8,8,0,0,1,103.43,29l8,20A8,8,0,0,1,96.57,55ZM24.57,93A8,8,0,0,1,35,88.57l20,8A8,8,0,0,1,49,111.43l-20-8A8,8,0,0,1,24.57,93ZM231.43,163a8,8,0,0,1-10.4,4.46l-20-8A8,8,0,1,1,207,144.57l20,8A8,8,0,0,1,231.43,163Zm-64,58.06A8,8,0,0,1,152.57,227l-8-20A8,8,0,0,1,159.43,201Z",
   workspaces: "M224,64H154.67L126.93,43.2a16.12,16.12,0,0,0-9.6-3.2H72A16,16,0,0,0,56,56V72H40A16,16,0,0,0,24,88V200a16,16,0,0,0,16,16H192.89A15.13,15.13,0,0,0,208,200.89V184h16.89A15.13,15.13,0,0,0,240,168.89V80A16,16,0,0,0,224,64ZM192,200H40V88H85.33l29.87,22.4A8,8,0,0,0,120,112h72Zm32-32H208V112a16,16,0,0,0-16-16H122.67L94.93,75.2a16.12,16.12,0,0,0-9.6-3.2H72V56h45.33L147.2,78.4A8,8,0,0,0,152,80h72Z",
   menu: "M224,128a8,8,0,0,1-8,8H40a8,8,0,0,1,0-16H216A8,8,0,0,1,224,128ZM40,72H216a8,8,0,0,0,0-16H40a8,8,0,0,0,0,16ZM216,184H40a8,8,0,0,0,0,16H216a8,8,0,0,0,0-16Z",
   plus: "M224,128a8,8,0,0,1-8,8H136v80a8,8,0,0,1-16,0V136H40a8,8,0,0,1,0-16h80V40a8,8,0,0,1,16,0v80h80A8,8,0,0,1,224,128Z",
+  paperclip: "M209.66,122.34l-82.75,82.75a52,52,0,0,1-73.54-73.54l89.76-89.75a36,36,0,0,1,50.91,50.91L104.28,182.46a20,20,0,0,1-28.28-28.28l83.09-83.09a8,8,0,0,1,11.31,11.32L87.31,165.49a4,4,0,0,0,5.66,5.66l89.76-89.75a20,20,0,0,0-28.29-28.29L64.69,142.86a36,36,0,0,0,50.91,50.91L198.34,111a8,8,0,0,1,11.32,11.31Z",
+  send: "M223.69,42.18l-72,176A16,16,0,0,1,137,228h-.94a16,16,0,0,1-14.41-11.5l-20.6-63.4-63.4-20.6A16,16,0,0,1,36,102.31l176-72a16,16,0,0,1,11.69,11.87ZM52.85,116.9l55.85,18.15L195.5,48.25Zm82.1,86.4,48.8-119.3-66.8,66.8Z",
+  stop: "M200,32H56A24,24,0,0,0,32,56V200a24,24,0,0,0,24,24H200a24,24,0,0,0,24-24V56A24,24,0,0,0,200,32Zm8,168a8,8,0,0,1-8,8H56a8,8,0,0,1-8-8V56a8,8,0,0,1,8-8H200a8,8,0,0,1,8,8Z",
+  redirect: "M229.66,109.66l-48,48a8,8,0,0,1-11.32-11.32L204.69,112H104a64,64,0,0,0-64,64,8,8,0,0,1-16,0,80,80,0,0,1,80-80H204.69l-34.35-34.34a8,8,0,0,1,11.32-11.32l48,48A8,8,0,0,1,229.66,109.66Z",
   close: "M205.66,194.34a8,8,0,0,1-11.32,11.32L128,139.31,61.66,205.66a8,8,0,0,1-11.32-11.32L116.69,128,50.34,61.66A8,8,0,0,1,61.66,50.34L128,116.69l66.34-66.35a8,8,0,0,1,11.32,11.32L139.31,128Z",
   caretRight: "M181.66,133.66l-80,80a8,8,0,0,1-11.32-11.32L164.69,128,90.34,53.66a8,8,0,0,1,11.32-11.32l80,80A8,8,0,0,1,181.66,133.66Z",
   search: "M229.66,218.34l-50.07-50.06a88.11,88.11,0,1,0-11.31,11.31l50.06,50.07a8,8,0,0,0,11.32-11.32ZM40,112a72,72,0,1,1,72,72A72.08,72.08,0,0,1,40,112Z",
@@ -3181,7 +3533,7 @@ function renderGloveMark() {
 var ICON_PATHS_JSON = JSON.stringify(PHOSPHOR_ICON_PATHS);
 var DASHBOARD_SCRIPT = String.raw`
 const ICON_PATHS=${ICON_PATHS_JSON};
-const state={manifest:null,instances:[],subscriptions:[],connections:[],runs:[],events:[],health:null,transmissions:[],accounts:[],routes:[],bindings:[],activations:[],conversations:{},workspaces:{},showAllEvents:false,eventCategory:"all",ready:false,cursor:-1,liveAt:null};
+const state={manifest:null,instances:[],subscriptions:[],connections:[],runs:[],events:[],health:null,transmissions:[],accounts:[],routes:[],bindings:[],activations:[],approvals:[],conversations:{},workspaces:{},chat:{agentId:"",conversationId:"",transcript:null,query:"",draft:"",files:[],sending:false,error:"",optimistic:null,historyOffset:null,renderedConversationId:"",scrollToBottom:false,scrollToTop:false},showAllEvents:false,eventCategory:"all",ready:false,cursor:-1,liveAt:null};
 const $=id=>document.getElementById(id);
 const esc=value=>String(value??"").replace(/[&<>"']/g,c=>({"&":"&amp;","<":"&lt;",">":"&gt;","\"":"&quot;","'":"&#39;"}[c]));
 const attr=value=>esc(value).replace(/\x60/g,"&#96;");
@@ -3189,7 +3541,8 @@ const fmtDate=iso=>iso?new Date(iso).toLocaleString([],{month:"short",day:"numer
 const fmtTime=iso=>iso?new Date(iso).toLocaleTimeString([],{hour:"2-digit",minute:"2-digit",second:"2-digit"}):"—";
 const short=value=>{const text=String(value??"");return text.length>22?text.slice(0,10)+"…"+text.slice(-7):text};
 const jsonText=value=>JSON.stringify(value,null,2);
-const count=(n,word)=>n+" "+word+(n===1?"":"s");
+const count=(n,word,plural=word+"s")=>n+" "+(n===1?word:plural);
+const fmtBytes=value=>{const n=Number(value)||0;if(n<1024)return n+" B";if(n<1048576)return(n/1024).toFixed(1)+" KB";return(n/1048576).toFixed(1)+" MB"};
 const icon=(name,className)=>'<svg class="'+(className||"icon")+'" data-phosphor="'+name+'" viewBox="0 0 256 256" fill="currentColor" aria-hidden="true"><path d="'+ICON_PATHS[name]+'"/></svg>';
 
 /* ---- Elapsed time. Operators read runs in "how long ago" and "how long did it take". ---- */
@@ -3258,12 +3611,14 @@ async function copyValue(button){
        actively using -- scroll, focus, caret, expanded rows -- survive it. ---- */
 function captureView(){
   const active=document.activeElement;
+  const chatScroll=$("message-scroll");
   return{
     scroll:window.scrollY,
     focus:active&&active.id?active.id:null,
     caret:active&&typeof active.selectionStart==="number"?active.selectionStart:null,
     open:[...document.querySelectorAll("[data-event-key].open")].map(node=>node.dataset.eventKey),
-    details:[...document.querySelectorAll("details[data-persist]")].filter(node=>node.open).map(node=>node.dataset.persist)
+    details:[...document.querySelectorAll("details[data-persist]")].filter(node=>node.open).map(node=>node.dataset.persist),
+    chatScroll:chatScroll?{top:chatScroll.scrollTop,nearBottom:chatScroll.scrollHeight-chatScroll.scrollTop-chatScroll.clientHeight<80}:null
   };
 }
 function restoreView(view){
@@ -3278,6 +3633,7 @@ function restoreView(view){
     }
   }
   if(view.scroll)window.scrollTo(0,view.scroll);
+  if(view.chatScroll){const scroll=$("message-scroll");if(scroll)scroll.scrollTop=view.chatScroll.nearBottom?scroll.scrollHeight:view.chatScroll.top}
 }
 function skeleton(rows){
   let html="";for(let index=0;index<(rows||5);index++)html+='<div class="skeleton-row"><span style="width:'+(46+index*7%34)+'%"></span><span style="width:'+(16+index*5%14)+'%"></span></div>';
@@ -3302,6 +3658,12 @@ function dataLinks(){
   document.querySelectorAll("[data-link]").forEach(node=>node.onclick=event=>{if(event.metaKey||event.ctrlKey||event.shiftKey||event.altKey)return;event.preventDefault();go(node.getAttribute("href"))});
   document.querySelectorAll("[data-go]").forEach(node=>node.onclick=event=>{if(event.target.closest("a,button"))return;go(node.dataset.go)});
   document.querySelectorAll("[data-copy]").forEach(node=>node.onclick=event=>{event.preventDefault();event.stopPropagation();void copyValue(node)});
+  document.querySelectorAll("[data-approval-decision]").forEach(node=>node.onclick=event=>{
+    event.preventDefault();event.stopPropagation();
+    const row=node.closest("[data-approval]");
+    row?.querySelectorAll("button").forEach(button=>button.disabled=true);
+    void resolveApproval(node.dataset.approvalId,node.dataset.approvalDecision);
+  });
   syncCursor();
 }
 /* ---- Row cursor. j/k walk a list and Enter opens it, without reaching for the mouse. ---- */
@@ -3332,12 +3694,20 @@ function definition(id){return state.manifest?.agents?.agents?.find(x=>x.id===id
 function eventsFor(runId){return state.events.filter(event=>event.runId===runId)}
 function isKeyRunEvent(event){
   const type=event.type;
-  if(/^run\./.test(type)||/^scheduled-action\./.test(type))return true;
+  if(/(?:^|\.)foundry\.guidance\.state$/.test(type))return true;
+  if(/^run\./.test(type)||/^scheduled-action\./.test(type)||/^(?:agent\.)?foundry\.approval\./.test(type)||/^approval\./.test(type))return true;
   return /(?:playbooks\.composed|definition\.schedules\.loaded|application\.transmission-tools\.mounted|working-environment\.(?:mounted|snapshot\.saved)|repl\.mounted|subscriber\.mounted|layer\.mounted|installation\.(?:started|completed|failed)|definition\.memory\.mounted|definition\.inboxes\.loaded|tool_use(?:_result)?|model_response_complete)$/.test(type);
 }
 function activeRuns(){return state.runs.filter(run=>run.status==="pending"||run.status==="running")}
 function failureRuns(){return state.runs.filter(run=>run.status==="failed")}
-function recent(array){return[...array].sort((a,b)=>String(b.createdAt||b.timestamp||b.updatedAt).localeCompare(String(a.createdAt||a.timestamp||a.updatedAt)))}
+function pendingApprovals(runId){return state.approvals.filter(item=>item.status==="pending"&&(!runId||item.runId===runId))}
+function recent(array){return[...array].sort((a,b)=>String(b.updatedAt||b.createdAt||b.timestamp).localeCompare(String(a.updatedAt||a.createdAt||a.timestamp)))}
+function approvalRail(approvals,heading){
+  if(!approvals.length)return"";
+  return'<section class="approval-rail" aria-label="Effect approvals"><header><div><span class="approval-kicker">Decision required</span><h2>'+esc(heading||"An agent is waiting for you")+'</h2><p>Review the exact tool input. Nothing runs unless you approve it.</p></div><span class="approval-count">'+count(approvals.length,"request")+'</span></header><div class="approval-list">'
+    +approvals.map(item=>'<article class="approval-item" data-approval="'+attr(item.id)+'"><div class="approval-context"><span class="approval-tool">'+esc(item.toolName)+'</span><a class="approval-run" href="/runs/'+attr(item.runId)+'" data-link>Run '+esc(short(item.runId))+'</a></div><pre class="approval-input">'+esc(jsonText(item.toolInput))+'</pre><div class="approval-foot"><span>Requested '+relCell(item.requestedAt)+' · expires '+relCell(item.expiresAt)+'</span><div class="approval-actions"><button class="button" type="button" data-approval-id="'+attr(item.id)+'" data-approval-decision="deny">Deny</button><button class="button approve" type="button" data-approval-id="'+attr(item.id)+'" data-approval-decision="approve">Approve this input</button></div></div></article>').join("")
+    +'</div></section>';
+}
 function explainRun(run){
   if(run.status==="failed")return run.error||"The runtime could not complete this run.";
   const source=run.input?.source?.kind;
@@ -3348,14 +3718,18 @@ function explainRun(run){
   if(run.status==="completed")return"The agent completed the requested work.";
   return"The agent is processing a direct message.";
 }
-function navState(section){const key=section==="overview"?"overview":section;document.querySelectorAll("[data-nav]").forEach(node=>node.classList.toggle("active",node.dataset.nav===key));$("sidebar").classList.remove("open")}
+function navState(section){
+  const key=section==="overview"?"overview":section;document.querySelectorAll("[data-nav]").forEach(node=>node.classList.toggle("active",node.dataset.nav===key));$("sidebar").classList.remove("open");
+  const action=$("new-run");const chatting=section==="chat";action.innerHTML=icon("plus")+' <span>'+(chatting?"New conversation":"New run")+'</span>';action.onclick=chatting?()=>{const agent=chatAgent();if(agent)void createChatConversation(agent.id);else toast("Create an agent instance first")}:()=>openRunDrawer();
+}
 function crumbs(items){$("breadcrumbs").innerHTML=items.map((item,index)=>index===items.length-1?'<span>'+esc(item.label)+'</span>':'<a href="'+attr(item.href)+'" data-link>'+esc(item.label)+'</a><span class="crumb-separator">'+icon("caretRight")+'</span>').join("")}
 
 function renderOverview(){
   crumbs([{label:"Overview"}]);
-  const recentRuns=recent(state.runs).slice(0,6);const definitions=state.manifest?.agents?.agents||[];const live=activeRuns();
+  const recentRuns=recent(state.runs).slice(0,6);const definitions=state.manifest?.agents?.agents||[];const live=activeRuns();const waiting=pendingApprovals();const attention=failureRuns().length+waiting.length;
   let html=pageHead("Runtime at a glance","What is happening now","Start here. Foundry separates code-defined agents from their runtime instances, then records every invocation as a run.",'<a class="button" href="/agents" data-link>Browse agents</a><button class="button primary" data-new-run>Start a run</button>');
-  html+='<div class="grid cols-4">'+metric("Agent definitions",definitions.length,"Discovered from the agents folder",true)+metric("Runtime instances",state.instances.length,"Persisted agent identities")+metric("Active work",live.length,live.length?"Runs currently pending or running":"No work in flight")+metric("Attention needed",failureRuns().length,"Failed runs in retained history")+'</div>';
+  html+=approvalRail(waiting,"Agents are waiting for a decision");
+  html+='<div class="grid cols-4">'+metric("Agent definitions",definitions.length,"Discovered from the agents folder",true)+metric("Runtime instances",state.instances.length,"Persisted agent identities")+metric("Active work",live.length,live.length?"Runs currently pending or running":"No work in flight")+metric("Attention needed",attention,waiting.length?count(waiting.length,"effect")+" waiting for approval":"Failed runs in retained history")+'</div>';
   html+='<div class="grid cols-2" style="margin-top:16px">';
   const activity=recentRuns.map(run=>'<tr class="clickable'+(run.status==="failed"?" row-failed":"")+(isLiveRun(run)?" row-live":"")+'" data-go="/runs/'+attr(run.id)+'"><td><span class="primary-cell">'+esc(run.agent)+'</span><span class="secondary">'+esc(explainRun(run))+'</span></td><td>'+status(run.status)+'</td><td>'+idCell(run.id)+'</td><td>'+durCell(run)+'</td><td>'+relCell(run.createdAt)+'</td></tr>').join("");
   html+=card("Recent runs",'<div class="table-wrap"><table class="table"><thead><tr><th>Agent</th><th>Status</th><th>Run</th><th>Duration</th><th>Started</th></tr></thead><tbody>'+activity+'</tbody></table></div>'+(activity?"":(state.ready?empty("No runs yet","Start a run to see its progress and trace here."):skeleton(4)))+'<div class="card-foot"><a class="link inline-icon" href="/runs" data-link>View all runs '+icon("external")+'</a></div>',count(state.runs.length,"run"),"span-2");
@@ -3391,7 +3765,7 @@ function renderDefinition(id){
   html+='</div>';$("content").innerHTML=html;document.querySelectorAll("[data-new-run]").forEach(x=>x.onclick=()=>openRunDrawer(id));document.querySelectorAll("[data-create-instance]").forEach(x=>x.onclick=()=>void createInstance(id));dataLinks();
 }
 
-async function ensureConversations(agentId){if(!state.conversations[agentId])state.conversations[agentId]=await api("/api/conversations?agent="+encodeURIComponent(agentId))}
+async function ensureConversations(agentId,force=false){if(force||!state.conversations[agentId])state.conversations[agentId]=await api("/api/conversations?agent="+encodeURIComponent(agentId))}
 function renderInstance(id){
   const instance=state.instances.find(x=>x.id===id);if(!instance)return renderNotFound("Agent instance");
   crumbs([{label:"Agents",href:"/agents"},{label:instance.definitionId,href:"/agents/"+instance.definitionId},{label:short(id)}]);
@@ -3399,7 +3773,7 @@ function renderInstance(id){
   let html=pageHead("Runtime instance",short(id),"Persisted runtime data assembled from "+instance.definitionId+". This identity can be updated without changing the code definition.",'<button class="button" data-copy="'+attr(id)+'">'+icon("copy")+'<span>Copy instance id</span></button><button class="button primary" data-instance-run>Send message</button>');
   html+='<div class="detail-strip"><div><label>Definition</label><strong><a class="link" href="/agents/'+attr(instance.definitionId)+'" data-link>'+esc(instance.definitionId)+'</a></strong></div><div><label>Workspace</label><strong><a class="link mono" href="/workspaces/'+attr(instance.workspaceId)+'" data-link>'+esc(instance.workspaceId)+'</a></strong></div><div><label>Conversations</label><strong>'+conversations.length+'</strong></div><div><label>Last updated</label><strong>'+relCell(instance.updatedAt)+'</strong></div></div>';
   html+='<div class="grid cols-2">';
-  const convRows=recent(conversations).map(c=>'<tr><td><span class="primary-cell">'+esc(c.title||"Untitled conversation")+'</span>'+idCell(c.id)+'</td><td>'+relCell(c.updatedAt)+'</td></tr>').join("");
+  const convRows=recent(conversations).map(c=>'<tr class="clickable" data-go="'+attr(chatPath(id,c.id))+'"><td><span class="primary-cell">'+esc(c.title||"Untitled conversation")+'</span>'+idCell(c.id)+'</td><td>'+relCell(c.updatedAt)+'</td></tr>').join("");
   html+=card("Conversations",'<div class="table-wrap"><table class="table"><thead><tr><th>Conversation</th><th>Updated</th></tr></thead><tbody>'+convRows+'</tbody></table></div>'+(convRows?"":empty("No conversations","The first message creates a conversation for this instance.")),count(conversations.length,"conversation"));
   const runRows=runs.slice(0,8).map(run=>'<tr class="clickable'+(run.status==="failed"?" row-failed":"")+(isLiveRun(run)?" row-live":"")+'" data-go="/runs/'+attr(run.id)+'"><td>'+idCell(run.id)+'<span class="secondary">'+esc(explainRun(run))+'</span></td><td>'+status(run.status)+'</td><td>'+durCell(run)+'</td><td>'+relCell(run.createdAt)+'</td></tr>').join("");
   html+=card("Recent runs",'<div class="table-wrap"><table class="table"><thead><tr><th>Run</th><th>Status</th><th>Duration</th><th>Started</th></tr></thead><tbody>'+runRows+'</tbody></table></div>'+(runRows?"":empty("No runs","Send this instance a message to begin."))+(runs.length>8?'<div class="card-foot"><a class="link inline-icon" href="/runs?q='+encodeURIComponent(instance.id)+'" data-link>View all '+count(runs.length,"run")+' '+icon("external")+'</a></div>':""),count(runs.length,"run"));
@@ -3408,6 +3782,137 @@ function renderInstance(id){
   html+='</div>';$("content").innerHTML=html;document.querySelector("[data-instance-run]").onclick=()=>openRunDrawer(instance.definitionId,id);dataLinks();
 }
 
+/* ---- WebChat. History comes from the agent's StoreAdapter, never UI state. ---- */
+function chatPath(agentId,conversationId){return"/chat"+(conversationId?"/"+encodeURIComponent(conversationId):"")+"?agent="+encodeURIComponent(agentId)}
+function chatAgent(){const requested=new URLSearchParams(location.search).get("agent");return state.instances.find(x=>x.id===requested)||state.instances.find(x=>x.id===state.chat.agentId)||state.instances[0]||null}
+function chatRuns(agentId,conversationId){return recent(state.runs.filter(run=>run.agentId===agentId&&run.conversationId===conversationId))}
+function activeChatRun(agentId,conversationId){return chatRuns(agentId,conversationId).find(isLiveRun)||null}
+function liveAssistantMessage(run){
+  if(!run)return null;
+  const text=eventsFor(run.id).filter(event=>event.type==="agent.text_delta"&&typeof event.data?.text==="string").map(event=>event.data.text).join("");
+  return text?{sender:"agent",text}:null;
+}
+function messageAttachments(message){return(message.content||[]).filter(part=>part.type!=="text")}
+function renderChatMessage(message,pending){
+  const internalTools=message.sender==="user"&&(message.tool_results||[]).length>0&&message.text==="tool results";
+  const kind=internalTools?"tool":message.sender;
+  const sender=internalTools?"Tools":message.sender==="user"?"You":"Agent";
+  const attachments=messageAttachments(message);
+  const attachmentHtml=attachments.length?'<div class="message-attachments">'+attachments.map(part=>'<span>'+icon(part.type==="image"?"overview":"paperclip")+'<b>'+esc(part.name||part.type)+'</b><small>'+esc(part.source?.media_type||part.type)+'</small></span>').join("")+'</div>':"";
+  const tools=(message.tool_calls||[]).length?'<details class="message-tools"><summary>'+count(message.tool_calls.length,"tool call")+'</summary><pre>'+esc(jsonText(message.tool_calls))+'</pre></details>':"";
+  const results=(message.tool_results||[]).length?'<details class="message-tools"><summary>'+count(message.tool_results.length,"tool result")+'</summary><pre>'+esc(jsonText(message.tool_results))+'</pre></details>':"";
+  const flags=[message.is_compaction?"compaction":null,message.is_skill_injection?"skill context":null,pending?"sending":null].filter(Boolean);
+  const text=internalTools?"":message.text||"";
+  return'<article class="chat-message '+attr(kind)+(pending?" optimistic":"")+'"><div class="message-avatar">'+(kind==="user"?esc(sender.slice(0,1)):icon(kind==="tool"?"runs":"agent"))+'</div><div class="message-body"><header><strong>'+esc(sender)+'</strong>'+(flags.length?'<span>'+esc(flags.join(" · "))+'</span>':"")+'</header>'+(text?'<div class="message-text">'+esc(text)+'</div>':"")+attachmentHtml+tools+results+'</div></article>';
+}
+function renderChatProgress(run){
+  if(!run)return"";
+  const events=eventsFor(run.id).filter(isKeyRunEvent).slice(-4);
+  return'<aside class="chat-progress"><div><span class="pulse-dot"></span><strong>'+esc(run.status==="pending"?"Queued":run.agent+" is working")+'</strong><small>'+esc(events.at(-1)?.type||"The runtime is assembling this turn.")+'</small></div><div class="chat-progress-actions"><a class="button" href="/runs/'+attr(run.id)+'" data-link>Open trace</a><button class="button danger" type="button" data-chat-stop>'+icon("stop")+' Stop</button></div></aside>';
+}
+async function loadChat(current){
+  const agent=chatAgent();
+  if(!agent){state.chat.agentId="";state.chat.conversationId="";state.chat.transcript=null;return}
+  const switchedAgent=Boolean(state.chat.agentId&&state.chat.agentId!==agent.id);
+  state.chat.agentId=agent.id;
+  await ensureConversations(agent.id,true);
+  const conversations=recent(state.conversations[agent.id]||[]);
+  const conversationId=current.id||state.chat.conversationId||conversations[0]?.id||"";
+  if(switchedAgent||(state.chat.conversationId&&state.chat.conversationId!==conversationId)){state.chat.draft="";state.chat.files=[];state.chat.error="";state.chat.optimistic=null;state.chat.historyOffset=null}
+  state.chat.conversationId=conversationId;
+  if(!conversationId){state.chat.transcript=null;return}
+  const historyQuery="&limit=100"+(state.chat.historyOffset===null?"":"&offset="+encodeURIComponent(state.chat.historyOffset));
+  const transcript=await api("/api/conversations/"+encodeURIComponent(conversationId)+"/messages?agent="+encodeURIComponent(agent.id)+historyQuery);
+  state.chat.transcript=transcript;
+  const optimistic=state.chat.optimistic;
+  if(optimistic){
+    const run=state.runs.find(item=>item.id===optimistic.runId);
+    if(transcript.messages.length>optimistic.baseCount||(run&&!isLiveRun(run)))state.chat.optimistic=null;
+  }
+}
+function renderChat(){
+  crumbs([{label:"Chat"}]);
+  const agent=chatAgent();
+  if(!agent){
+    $("content").innerHTML=pageHead("WebChat","Talk to your agents","A runtime instance owns conversations, installed capabilities, context, and durable history.")+empty("No agent instance exists","Create an instance before opening a conversation.")+'<div class="empty-action"><a class="button primary" href="/agents" data-link>Choose an agent</a></div>';
+    dataLinks();return;
+  }
+  const conversations=recent(state.conversations[agent.id]||[]);
+  const term=state.chat.query.trim().toLowerCase();
+  const visible=conversations.filter(item=>!term||(item.title||item.id).toLowerCase().includes(term));
+  const transcript=state.chat.transcript;
+  const conversation=transcript?.conversation||conversations.find(item=>item.id===state.chat.conversationId);
+  const run=conversation?activeChatRun(agent.id,conversation.id):null;
+  const lastRun=conversation?chatRuns(agent.id,conversation.id)[0]:null;
+  const messages=[...(transcript?.messages||[])];
+  if(state.chat.optimistic)messages.push(state.chat.optimistic.message);
+  const streaming=state.chat.historyOffset===null?liveAssistantMessage(run):null;if(streaming)messages.push(streaming);
+  let html='<section class="chat-shell">';
+  html+='<aside class="session-rail"><div class="session-head"><div><span class="eyebrow">WebChat</span><h1>Conversations</h1></div><button class="button icon-button" type="button" data-new-chat title="New conversation" aria-label="New conversation">'+icon("plus")+'</button></div>';
+  html+='<label class="session-agent"><span>Agent instance</span><select id="chat-agent">'+state.instances.map(item=>'<option value="'+attr(item.id)+'"'+(item.id===agent.id?" selected":"")+'>'+esc(item.definitionId)+" · "+esc(short(item.id))+'</option>').join("")+'</select></label>';
+  html+='<label class="session-search">'+icon("search")+'<input id="chat-search" value="'+attr(state.chat.query)+'" placeholder="Search conversations" /></label>';
+  html+='<div class="session-list">'+(visible.length?visible.map(item=>'<button type="button" class="chat-session'+(item.id===conversation?.id?" active":"")+'" data-chat-conversation="'+attr(item.id)+'"><span>'+esc(item.title||"Untitled conversation")+'</span><small>'+esc(relTime(item.updatedAt))+' · '+esc(short(item.id))+'</small></button>').join(""):empty(term?"No matching conversations":"No conversations yet",term?"Try another search.":"Create one to start talking with this instance."))+'</div></aside>';
+  html+='<section class="conversation-pane">';
+  if(!conversation){
+    html+='<div class="chat-empty">'+icon("chat","chat-empty-icon")+'<h2>Start a conversation</h2><p>Messages route to this exact runtime instance and become part of its durable context.</p><button class="button primary" type="button" data-new-chat>'+icon("plus")+' New conversation</button></div>';
+  }else{
+    html+='<header class="conversation-head"><div><span class="conversation-kicker">'+esc(agent.definitionId)+" · "+esc(short(agent.id))+'</span><h2>'+esc(conversation.title||"Untitled conversation")+'</h2></div><div class="conversation-meta">'+(run?status(run.status):lastRun?status(lastRun.status):'<span class="status">ready</span>')+'<span>'+esc(transcript?.turnCount??0)+' turns</span><span>'+esc(transcript?.tokenCount??0)+' tokens</span><button type="button" class="conversation-rename" data-export-chat>Export</button><button type="button" class="conversation-rename" data-rename-chat>Rename</button></div></header>';
+    if(transcript&&!transcript.persisted)html+='<div class="chat-store-warning">This agent has no conversation store. New turns can run, but history cannot be reopened after the worker exits.</div>';
+    const page=transcript?.page;const paging=page&&(page.hasEarlier||page.hasLater)?'<div class="load-history">'+(page.hasEarlier?'<button class="button" type="button" data-history-page="earlier">Earlier</button>':"")+'<span>Showing '+esc(page.offset+1)+'–'+esc(page.offset+(transcript?.messages?.length||0))+' of '+esc(page.total)+'</span>'+(page.hasLater?'<button class="button" type="button" data-history-page="later">Newer</button>':"")+'</div>':"";
+    html+='<div class="message-scroll" id="message-scroll">'+paging+(messages.length?messages.map((message,index)=>renderChatMessage(message,index===messages.length-1&&Boolean(state.chat.optimistic))).join(""):'<div class="chat-empty compact">'+icon("chat","chat-empty-icon")+'<h2>What should '+esc(agent.definitionId)+' work on?</h2><p>This conversation can include text, images, video, and documents.</p></div>')+'</div>';
+    html+=renderChatProgress(run);
+    html+='<form class="chat-composer" id="chat-form"><div class="selected-files">'+state.chat.files.map((file,index)=>'<span>'+icon("paperclip")+'<b>'+esc(file.name)+'</b><small>'+esc(fmtBytes(file.size))+'</small><button type="button" data-remove-file="'+index+'" aria-label="Remove '+attr(file.name)+'">'+icon("close")+'</button></span>').join("")+'</div><textarea id="chat-message" rows="1" placeholder="Message '+attr(agent.definitionId)+'…" aria-label="Message"'+(state.chat.sending?" disabled":"")+'>'+esc(state.chat.draft)+'</textarea><div class="composer-actions"><label class="attach-button" title="Attach files">'+icon("paperclip")+'<input id="chat-files" type="file" multiple'+(state.chat.sending?" disabled":"")+' /></label><span>Enter to send · Shift + Enter for a new line</span><button class="button primary" type="submit"'+(state.chat.sending?" disabled":"")+'>'+(run?icon("redirect")+' Redirect':icon("send")+' Send')+'</button></div><div class="form-error'+(state.chat.error?"":" hidden")+'" id="chat-error">'+esc(state.chat.error)+'</div></form>';
+  }
+  html+='</section></section>';
+  $("content").innerHTML=html;
+  document.querySelectorAll("[data-new-chat]").forEach(node=>node.onclick=()=>void createChatConversation(agent.id));
+  const selector=$("chat-agent");if(selector)selector.onchange=event=>void selectChatAgent(event.target.value);
+  const search=$("chat-search");if(search)search.oninput=event=>{state.chat.query=event.target.value;renderChat();const next=$("chat-search");if(next){next.focus();next.setSelectionRange(next.value.length,next.value.length)}};
+  document.querySelectorAll("[data-chat-conversation]").forEach(node=>node.onclick=()=>selectChatConversation(agent.id,node.dataset.chatConversation));
+  document.querySelectorAll("[data-remove-file]").forEach(node=>node.onclick=()=>{state.chat.files.splice(Number(node.dataset.removeFile),1);renderChat()});
+  const files=$("chat-files");if(files)files.onchange=event=>{const next=[...event.target.files];const bytes=[...state.chat.files,...next].reduce((total,file)=>total+file.size,0);if(bytes>28*1024*1024){toast("Attachments must total 28 MB or less");return}state.chat.files.push(...next);renderChat()};
+  const form=$("chat-form");if(form)form.onsubmit=event=>void sendChat(event,agent,conversation,run);
+  const message=$("chat-message");if(message){message.oninput=event=>{state.chat.draft=event.target.value};message.onkeydown=event=>{if(event.key==="Enter"&&!event.shiftKey){event.preventDefault();form.requestSubmit()}}}
+  const stop=document.querySelector("[data-chat-stop]");if(stop&&run)stop.onclick=()=>void stopChat(run.id);
+  const rename=document.querySelector("[data-rename-chat]");if(rename)rename.onclick=()=>void renameChat(agent,conversation);
+  const exportButton=document.querySelector("[data-export-chat]");if(exportButton&&transcript)exportButton.onclick=()=>exportChat(transcript);
+  document.querySelectorAll("[data-history-page]").forEach(node=>node.onclick=()=>void pageChatHistory(node.dataset.historyPage));
+  dataLinks();
+  const changed=state.chat.renderedConversationId!==conversation?.id;state.chat.renderedConversationId=conversation?.id||"";
+  requestAnimationFrame(()=>{const scroll=$("message-scroll");if(!scroll)return;if(state.chat.scrollToTop){scroll.scrollTop=0;state.chat.scrollToTop=false}else if(changed||state.chat.scrollToBottom){scroll.scrollTop=scroll.scrollHeight;state.chat.scrollToBottom=false}});
+}
+async function selectChatAgent(agentId){state.chat.agentId=agentId;state.chat.conversationId="";state.chat.transcript=null;state.chat.draft="";state.chat.files=[];state.chat.error="";state.chat.optimistic=null;state.chat.historyOffset=null;await ensureConversations(agentId,true);const first=recent(state.conversations[agentId]||[])[0];go(chatPath(agentId,first?.id))}
+function selectChatConversation(agentId,conversationId){if(conversationId!==state.chat.conversationId){state.chat.draft="";state.chat.files=[];state.chat.error="";state.chat.optimistic=null;state.chat.historyOffset=null}go(chatPath(agentId,conversationId))}
+async function createChatConversation(agentId){try{const conversation=await api("/api/conversations",{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({agentId,title:"New conversation"})});state.conversations[agentId]=[conversation,...(state.conversations[agentId]||[])];state.chat.conversationId=conversation.id;state.chat.transcript={conversation,messages:[],turnCount:0,tokenCount:0,page:{offset:0,limit:100,total:0,hasEarlier:false,hasLater:false},persisted:true};state.chat.draft="";state.chat.files=[];state.chat.error="";state.chat.historyOffset=null;state.chat.scrollToBottom=true;go(chatPath(agentId,conversation.id));setTimeout(()=>$("chat-message")?.focus(),20)}catch(error){toast(error.message)}}
+async function pageChatHistory(direction){const page=state.chat.transcript?.page;if(!page)return;state.chat.historyOffset=direction==="earlier"?Math.max(0,page.offset-page.limit):(page.offset+page.limit>=page.total?null:Math.min(Math.max(0,page.total-page.limit),page.offset+page.limit));state.chat.scrollToTop=true;try{await loadChat(route());renderChat()}catch(error){toast(error.message)}}
+async function renameChat(agent,conversation){const title=window.prompt("Conversation name",conversation.title||"");if(title===null||title.trim()===(conversation.title||""))return;try{const updated=await api("/api/conversations/"+encodeURIComponent(conversation.id),{method:"PATCH",headers:{"content-type":"application/json"},body:JSON.stringify({agentId:agent.id,title})});state.conversations[agent.id]=(state.conversations[agent.id]||[]).map(item=>item.id===updated.id?updated:item);if(state.chat.transcript)state.chat.transcript={...state.chat.transcript,conversation:updated};toast("Conversation renamed");renderChat()}catch(error){toast(error.message)}}
+function exportChat(transcript){const title=transcript.conversation.title||transcript.conversation.id;const file=title.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-|-$/g,"").slice(0,64)||"foundry-conversation";const blob=new Blob([JSON.stringify(transcript,null,2)+"\n"],{type:"application/json"});const url=URL.createObjectURL(blob);const link=document.createElement("a");link.href=url;link.download=file+".json";document.body.appendChild(link);link.click();link.remove();setTimeout(()=>URL.revokeObjectURL(url),1000);toast("Conversation exported")}
+function fileContent(file){return new Promise((resolveFile,rejectFile)=>{const reader=new FileReader();reader.onerror=()=>rejectFile(reader.error||new Error("Could not read "+file.name));reader.onload=()=>{const value=String(reader.result||"");resolveFile({type:file.type.startsWith("image/")?"image":file.type.startsWith("video/")?"video":"document",name:file.name,source:{type:"base64",media_type:file.type||"application/octet-stream",data:value.slice(value.indexOf(",")+1)}})};reader.readAsDataURL(file)})}
+async function sendChat(event,agent,conversation,activeRun){
+  event.preventDefault();if(state.chat.sending)return;
+  const text=state.chat.draft.trim();if(!text&&!state.chat.files.length)return;
+  state.chat.sending=true;state.chat.error="";state.chat.historyOffset=null;renderChat();
+  try{
+    const parts=await Promise.all(state.chat.files.map(fileContent));
+    const message=parts.length?[...(text?[{type:"text",text}]:[]),...parts]:text;
+    const baseCount=state.chat.transcript?.messages?.length||0;
+    const optimisticMessage={sender:"user",text:text||(parts.length?"[multimodal message]":""),content:parts.length?[...(text?[{type:"text",text}]:[]),...parts]:undefined};
+    let run;
+    if(conversation.title==="New conversation"&&text){
+      const title=text.replace(/\s+/g," ").slice(0,72);
+      const updated=await api("/api/conversations/"+encodeURIComponent(conversation.id),{method:"PATCH",headers:{"content-type":"application/json"},body:JSON.stringify({agentId:agent.id,title})});
+      state.conversations[agent.id]=(state.conversations[agent.id]||[]).map(item=>item.id===updated.id?updated:item);if(state.chat.transcript)state.chat.transcript={...state.chat.transcript,conversation:updated};
+    }
+    if(activeRun){const steered=await api("/api/runs/"+encodeURIComponent(activeRun.id)+"/steer",{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({message})});run=steered.run;toast("Direction updated")}
+    else{run=await api("/api/conversations/"+encodeURIComponent(conversation.id)+"/messages",{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({agentId:agent.id,message})});toast("Message sent")}
+    state.runs=[...state.runs.filter(item=>item.id!==run.id),run];
+    state.chat.optimistic={message:optimisticMessage,baseCount,runId:run.id};state.chat.draft="";state.chat.files=[];state.chat.scrollToBottom=true;
+    await ensureConversations(agent.id,true);
+  }catch(error){state.chat.error=error.message}
+  finally{state.chat.sending=false;renderChat()}
+}
+async function stopChat(runId){try{await cancelRun(runId);toast("Stopping this turn") }catch(error){toast(error.message)}}
+
 /* ---- Run filters live in the URL, so a filtered view is a link you can send. ---- */
 function runQuery(){
   const params=new URLSearchParams(location.search);
@@ -3513,6 +4018,18 @@ function runErrorText(run){
   if(run.error&&typeof run.error==="object")return run.error.message||jsonText(run.error);
   return"The runtime recorded a failure without a message.";
 }
+function guidanceCard(events){
+  const event=[...events].reverse().find(e=>/(?:^|\.)foundry\.guidance\.state$/.test(e.type));
+  if(!event||!event.data)return "";
+  const data=event.data;
+  const goals=data.goals;
+  const goalBody=goals?'<p><strong>'+esc(goals.status)+'</strong> · revision '+esc(goals.version)+'</p>'+goals.items.map(g=>'<p>'+esc(g.title||g.key)+' · '+esc(g.status)+' · '+esc(g.completed)+' / '+esc(g.total)+' done</p>').join(""):'<p class="muted">No goal set started.</p>';
+  const facts=data.facts;
+  const factBody=facts?'<p><strong>'+count(facts.revisions,"recorded revision")+'</strong></p><p>'+count(facts.claims,"evidence claim")+' · '+count(facts.urgent,"urgent revision")+'</p>':'<p class="muted">Facts not mounted.</p>';
+  const forms=data.forms;
+  const formBody=forms?.length?forms.map(f=>'<p><strong>'+esc(f.definitionId)+'</strong> · '+esc(f.status)+'</p><p>'+count(f.answered,"answered field")+' · '+count(f.pendingHooks,"pending effect batch","pending effect batches")+(f.blockedOn?' · waiting on '+esc(f.blockedOn):'')+'</p>').join(""):'<p class="muted">No form instances started.</p>';
+  return '<section class="card"><div class="card-head"><h2>Conversation guidance</h2><span class="meta">Observed '+esc(fmtTime(event.timestamp))+'</span></div><div class="card-body"><div class="grid cols-3"><div><h3>Goals</h3>'+goalBody+'</div><div><h3>Facts</h3>'+factBody+'</div><div><h3>Forms</h3>'+formBody+'</div></div><p class="muted">Latest state observed by this run, not a live database view. '+count(data.contextProviders||0,"custom context provider")+'. Answer values and fact bodies are not included in this summary.</p></div></section>';
+}
 function renderRun(id){
   const run=state.runs.find(x=>x.id===id);if(!run)return renderNotFound("Run");
   const events=eventsFor(id);
@@ -3527,6 +4044,8 @@ function renderRun(id){
   const failure=runErrorText(run);
   if(failure)html+='<div class="alert danger"><span class="symbol">'+icon("warning")+'</span><div><b>This run failed'+(run.attempts>1?" after "+count(run.attempts,"attempt"):"")+'.</b><p>'+esc(failure)+'</p></div></div>';
   if(isLiveRun(run))html+='<div class="alert live"><span class="symbol"><i class="pulse-dot"></i></span><div><b>This run is still '+esc(run.status)+'.</b><p>New events stream in below as the runtime records them.</p></div></div>';
+  html+=approvalRail(pendingApprovals(run.id),"This run is waiting for a decision");
+  html+=guidanceCard(events);
   html+='<div class="detail-strip">'
     +'<div><label>Status</label><strong>'+status(run.status)+'</strong></div>'
     +'<div><label>Duration</label><strong>'+durCell(run)+'</strong></div>'
@@ -3618,8 +4137,8 @@ function renderWorkspacePanel(data){
 
 function renderNotFound(label){crumbs([{label:"Not found"}]);$("content").innerHTML=pageHead("Inspector",label+" not found","The requested runtime record does not exist or is no longer retained.",'<a class="button" href="/" data-link>Return to overview</a>');dataLinks()}
 async function loadBase(){
-  const endpoints=["/api/manifest","/api/agent-instances","/api/playbook-subscriptions","/api/application-connections","/api/runs","/api/events","/health","/api/transmissions","/api/accounts","/api/routes","/api/bindings","/api/activations"];
-  const results=await Promise.all(endpoints.map(url=>api(url)));[state.manifest,state.instances,state.subscriptions,state.connections,state.runs,state.events,state.health,state.transmissions,state.accounts,state.routes,state.bindings,state.activations]=results;renderHealth();
+  const endpoints=["/api/manifest","/api/agent-instances","/api/playbook-subscriptions","/api/application-connections","/api/runs","/api/events","/health","/api/transmissions","/api/accounts","/api/routes","/api/bindings","/api/activations","/api/approvals"];
+  const results=await Promise.all(endpoints.map(url=>api(url)));[state.manifest,state.instances,state.subscriptions,state.connections,state.runs,state.events,state.health,state.transmissions,state.accounts,state.routes,state.bindings,state.activations,state.approvals]=results;renderHealth();
 }
 /* Every observability event used to trigger a full reload and repaint, which
    made a busy run unreadable. Events are coalesced into one refresh instead,
@@ -3640,9 +4159,9 @@ async function refreshActivity(){
   if(refreshing){refreshQueued=true;return}
   refreshing=true;
   try{
-    const endpoints=["/api/agent-instances","/api/playbook-subscriptions","/api/application-connections","/api/runs","/api/events","/api/activations","/health"];
+    const endpoints=["/api/agent-instances","/api/playbook-subscriptions","/api/application-connections","/api/runs","/api/events","/api/activations","/api/approvals","/health"];
     const values=await Promise.all(endpoints.map(url=>api(url)));
-    [state.instances,state.subscriptions,state.connections,state.runs,state.events,state.activations,state.health]=values;
+    [state.instances,state.subscriptions,state.connections,state.runs,state.events,state.activations,state.approvals,state.health]=values;
     renderHealth();
     $("event-state").textContent="Live updates";
     await navigate(false,true);
@@ -3655,11 +4174,13 @@ async function refreshActivity(){
 function renderHealth(){const ok=Boolean(state.health?.ok);$("runtime-state").classList.toggle("bad",!ok);$("runtime-state").querySelector("span").textContent=ok?"Runtime healthy":"Runtime needs attention"}
 async function navigate(load=true,preserve=false){
   const current=route();navState(current.section);
+  $("content").classList.toggle("chat-content",current.section==="chat");
   const view=preserve?captureView():null;
   try{
     if(load&&current.section==="instances"&&current.id)await ensureConversations(current.id);
     if(load&&current.section==="workspaces"&&current.id)await ensureWorkspace(current.id);
-    if(current.section==="overview")renderOverview();else if(current.section==="agents"&&!current.id)renderAgents();else if(current.section==="agents")renderDefinition(current.id);else if(current.section==="instances")renderInstance(current.id);else if(current.section==="runs"&&!current.id)renderRuns();else if(current.section==="runs")renderRun(current.id);else if(current.section==="automations")renderAutomations();else if(current.section==="integrations")renderIntegrations();else if(current.section==="workspaces")renderWorkspaces(current.id);else renderNotFound("Page");
+    if(current.section==="chat")await loadChat(current);
+    if(current.section==="overview")renderOverview();else if(current.section==="agents"&&!current.id)renderAgents();else if(current.section==="agents")renderDefinition(current.id);else if(current.section==="instances")renderInstance(current.id);else if(current.section==="chat")renderChat();else if(current.section==="runs"&&!current.id)renderRuns();else if(current.section==="runs")renderRun(current.id);else if(current.section==="automations")renderAutomations();else if(current.section==="integrations")renderIntegrations();else if(current.section==="workspaces")renderWorkspaces(current.id);else renderNotFound("Page");
   }catch(error){$("content").innerHTML='<div class="form-error">'+esc(error.message)+'</div>';console.error(error)}
   restoreView(view);
   tickTimes();
@@ -3696,9 +4217,16 @@ async function startRun(event){
   finally{setRunSubmitting(false)}
 }
 async function cancelRun(id){try{await api("/api/runs/"+encodeURIComponent(id)+"/cancel",{method:"POST"});toast("Cancellation requested");await refreshActivity()}catch(error){toast(error.message)}}
+async function resolveApproval(id,decision){
+  try{
+    await api("/api/approvals/"+encodeURIComponent(id),{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({decision})});
+    toast(decision==="approve"?"Approved this exact tool input":"Denied the tool request");
+    await refreshActivity();
+  }catch(error){toast(error.message);await refreshActivity()}
+}
 
 function searchItems(){
-  const items=[{label:"Overview",detail:"Runtime health and recent activity",path:"/"},{label:"Agents",detail:"Definitions and runtime instances",path:"/agents"},{label:"Runs",detail:"Execution history and traces",path:"/runs"},{label:"Automations",detail:"Schedules, sleeps, playbooks, and connections",path:"/automations"},{label:"Integrations",detail:"Transmissions, routes, accounts, and bindings",path:"/integrations"},{label:"Workspaces",detail:"Shared entries, inbox, tasks, and environment",path:"/workspaces"}];
+  const items=[{label:"Overview",detail:"Runtime health and recent activity",path:"/"},{label:"Agents",detail:"Definitions and runtime instances",path:"/agents"},{label:"Chat",detail:"Durable browser conversations with runtime agents",path:"/chat"},{label:"Runs",detail:"Execution history and traces",path:"/runs"},{label:"Automations",detail:"Schedules, sleeps, playbooks, and connections",path:"/automations"},{label:"Integrations",detail:"Transmissions, routes, accounts, and bindings",path:"/integrations"},{label:"Workspaces",detail:"Shared entries, inbox, tasks, and environment",path:"/workspaces"}];
   (state.manifest?.agents?.agents||[]).forEach(x=>items.push({label:x.id,detail:"Agent definition · "+x.description,path:"/agents/"+x.id}));state.instances.forEach(x=>items.push({label:short(x.id),detail:"Agent instance · "+x.definitionId,path:"/instances/"+x.id}));recent(state.runs).slice(0,100).forEach(x=>items.push({label:short(x.id),detail:"Run · "+x.agent+" · "+x.status,path:"/runs/"+x.id}));return items;
 }
 function renderSearch(){const term=$("search-input").value.trim().toLowerCase();const matches=searchItems().filter(x=>!term||(x.label+" "+x.detail).toLowerCase().includes(term)).slice(0,12);$("search-results").innerHTML=matches.map(x=>'<a class="search-result" href="'+attr(x.path)+'" data-search-link><strong>'+esc(x.label)+'</strong><small>'+esc(x.detail)+'</small></a>').join("")||empty("No matches","Try an agent id, instance id, run id, or page name.");document.querySelectorAll("[data-search-link]").forEach(x=>x.onclick=e=>{e.preventDefault();closeSearch();go(x.getAttribute("href"))})}
@@ -3715,7 +4243,7 @@ document.addEventListener("keydown",e=>{
   else if(e.key==="k"){e.preventDefault();moveCursor(-1)}
   else if(e.key==="Enter"||e.key==="o"){if(state.cursor>=0){e.preventDefault();openCursor()}}
   else if(e.key==="/"){const box=$("run-search");if(box){e.preventDefault();box.focus();box.select()}else{e.preventDefault();openSearch()}}
-  else if(e.key==="c"){e.preventDefault();openRunDrawer()}
+  else if(e.key==="c"){e.preventDefault();const current=route();if(current.section==="chat"){const agent=chatAgent();if(agent)void createChatConversation(agent.id)}else openRunDrawer()}
   else if(e.key==="r"){e.preventDefault();void refreshActivity()}
 });
 setInterval(tickTimes,1000);
@@ -3760,7 +4288,7 @@ button,input,textarea,select{font:inherit;color:inherit}button,a{touch-action:ma
 .page-head{display:flex;align-items:flex-end;gap:24px;margin-bottom:28px}.eyebrow{display:flex;align-items:center;gap:8px;font:10px var(--mono);color:var(--accent-soft);text-transform:uppercase;letter-spacing:.14em;margin-bottom:12px}.eyebrow:before{content:"";width:18px;height:1px;background:var(--accent-line)}.page-head h1{font-size:34px;font-weight:400;line-height:1.08;letter-spacing:-.035em;margin:0}.page-head p{margin:9px 0 0;color:var(--text-secondary);max-width:690px;font-size:14px;font-weight:300;line-height:1.6}.page-head .actions{margin-left:auto;display:flex;gap:8px;align-items:center}.page-rule{width:42px;height:2px;background:var(--accent);margin-bottom:16px}
 .grid{display:grid;gap:14px}.cols-4{grid-template-columns:repeat(4,1fr)}.cols-3{grid-template-columns:repeat(3,1fr)}.cols-2{grid-template-columns:repeat(2,1fr)}.span-2{grid-column:span 2}.card{background:rgba(15,22,19,.92);border:1px solid var(--border-subtle);border-radius:var(--radius);min-width:0;margin-bottom:14px;overflow:hidden}.card-head{padding:14px 16px;border-bottom:1px solid var(--border-subtle);display:flex;align-items:center;gap:12px;background:rgba(20,29,24,.3)}.card-head h2{font-size:13px;font-weight:500;margin:0}.card-head .meta{margin-left:auto;color:var(--text-tertiary);font:9px var(--mono)}.card-body{padding:16px}.metric{padding:18px;min-height:124px;margin-bottom:0}.metric label{display:block;color:var(--text-tertiary);font:9px var(--mono);text-transform:uppercase;letter-spacing:.12em}.metric strong{display:block;font-size:30px;font-weight:400;letter-spacing:-.035em;margin-top:15px}.metric small{display:block;color:var(--text-secondary);font-size:11px;font-weight:300;margin-top:6px}.metric.accent{border-top:2px solid var(--accent)}
 .table-wrap{overflow:auto}.table{width:100%;border-collapse:collapse;min-width:650px}.table th{padding:11px 15px;text-align:left;color:var(--text-tertiary);font:9px var(--mono);text-transform:uppercase;letter-spacing:.1em;border-bottom:1px solid var(--border-subtle);white-space:nowrap}.table td{padding:13px 15px;border-bottom:1px solid var(--border-subtle);font-size:12px;vertical-align:top}.table tr:last-child td{border-bottom:0}.table tbody tr.clickable{cursor:pointer}.table tbody tr.clickable:hover{background:var(--accent-glow)}.primary-cell{font-weight:500;color:var(--text-primary)}.secondary{display:block;color:var(--text-tertiary);font:9px/1.55 var(--mono);margin-top:4px;overflow-wrap:anywhere}
-.status{display:inline-flex;align-items:center;gap:6px;border-radius:999px;padding:4px 8px;background:var(--bg-surface-2);color:var(--text-secondary);font:8px var(--mono);text-transform:uppercase;letter-spacing:.06em;white-space:nowrap;border:1px solid var(--border)}.status:before{content:"";width:5px;height:5px;border-radius:50%;background:var(--text-tertiary)}.status.completed,.status.connected,.status.active,.status.enabled,.status.resolved{background:rgba(140,196,148,.08);color:var(--success);border-color:rgba(140,196,148,.18)}.status.completed:before,.status.connected:before,.status.active:before,.status.enabled:before,.status.resolved:before{background:var(--success)}.status.running,.status.pending,.status.connecting,.status.reconnecting,.status.in-progress{background:rgba(131,179,226,.08);color:var(--network);border-color:rgba(131,179,226,.18)}.status.running:before,.status.pending:before,.status.connecting:before,.status.reconnecting:before,.status.in-progress:before{background:var(--network)}.status.failed,.status.cancelled,.status.disconnected,.status.dismissed{background:rgba(226,155,168,.08);color:var(--danger);border-color:rgba(226,155,168,.18)}.status.failed:before,.status.cancelled:before,.status.disconnected:before,.status.dismissed:before{background:var(--danger)}
+.status{display:inline-flex;align-items:center;gap:6px;border-radius:999px;padding:4px 8px;background:var(--bg-surface-2);color:var(--text-secondary);font:8px var(--mono);text-transform:uppercase;letter-spacing:.06em;white-space:nowrap;border:1px solid var(--border)}.status:before{content:"";width:5px;height:5px;border-radius:50%;background:var(--text-tertiary)}.status.completed,.status.connected,.status.active,.status.enabled,.status.resolved{background:rgba(140,196,148,.08);color:var(--success);border-color:rgba(140,196,148,.18)}.status.completed:before,.status.connected:before,.status.active:before,.status.enabled:before,.status.resolved:before{background:var(--success)}.status.running,.status.pending,.status.connecting,.status.reconnecting,.status.in-progress{background:rgba(131,179,226,.08);color:var(--network);border-color:rgba(131,179,226,.18)}.status.running:before,.status.pending:before,.status.connecting:before,.status.reconnecting:before,.status.in-progress:before{background:var(--network)}.status.paused{background:rgba(226,187,131,.08);color:var(--warning);border-color:rgba(226,187,131,.18)}.status.paused:before{background:var(--warning)}.status.failed,.status.cancelled,.status.disconnected,.status.dismissed{background:rgba(226,155,168,.08);color:var(--danger);border-color:rgba(226,155,168,.18)}.status.failed:before,.status.cancelled:before,.status.disconnected:before,.status.dismissed:before{background:var(--danger)}
 .tag{display:inline-block;border:1px solid var(--border);border-radius:4px;padding:3px 6px;font:8px var(--mono);color:var(--text-secondary);margin:2px 4px 2px 0;background:var(--bg-surface)}.link{color:var(--accent);text-decoration:none;font-weight:500}.link:hover{text-decoration:underline;text-decoration-color:var(--accent-line)}.inline-icon{display:inline-flex;align-items:center;gap:5px}.inline-icon .icon{width:12px;height:12px}.empty{padding:38px 22px;text-align:center;color:var(--text-secondary);font-size:12px;line-height:1.6}.empty strong{display:block;color:var(--text-primary);font-size:14px;font-weight:500;margin-bottom:5px}.filters{display:flex;gap:8px;margin-bottom:14px}.filters input,.filters select{background:var(--bg-elevated);border:1px solid var(--border);border-radius:7px;padding:10px 12px;font-size:12px}.filters input{min-width:280px}
 .definition-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:14px;margin-bottom:16px}.definition-card{display:block;color:inherit;text-decoration:none;background:var(--bg-elevated);border:1px solid var(--border-subtle);border-radius:var(--radius-lg);padding:19px;min-height:196px;position:relative;overflow:hidden;transition:transform .2s ease,border-color .2s ease,background .2s}.definition-card:before{content:"";position:absolute;inset:0;opacity:0;background:radial-gradient(110% 80% at 100% 0%,var(--accent-dim),transparent 60%);transition:opacity .2s}.definition-card:hover{transform:translateY(-2px);border-color:var(--accent-line);background:var(--bg-surface)}.definition-card:hover:before{opacity:1}.definition-icon{width:31px;height:31px;display:grid;place-items:center;border:1px solid var(--accent-line);border-radius:8px;color:var(--accent);background:var(--accent-dim);margin-bottom:15px;position:relative}.definition-icon .icon{width:17px;height:17px}.definition-open{position:absolute;right:17px;top:17px;color:var(--text-tertiary);transition:color .18s,transform .18s}.definition-open .icon{width:14px;height:14px}.definition-card:hover .definition-open{color:var(--accent);transform:translate(1px,-1px)}.definition-card h3{margin:0;font-size:17px;font-weight:500;position:relative}.definition-card p{color:var(--text-secondary);font-size:12px;font-weight:300;line-height:1.6;margin:9px 0 18px;position:relative}.definition-meta{position:absolute;left:19px;right:19px;bottom:17px;display:flex;justify-content:space-between;align-items:end}.definition-meta b{font:9px var(--mono);color:var(--accent-soft)}
 .cap-list{display:flex;flex-wrap:wrap;gap:6px}.cap{border:1px solid var(--border);background:var(--bg-surface);border-radius:5px;padding:7px 9px;font:9px var(--mono);margin-bottom:6px;color:var(--text-secondary)}.detail-strip{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));border:1px solid var(--border-subtle);border-radius:var(--radius);background:var(--bg-elevated);margin-bottom:14px;overflow:hidden}.detail-strip>div{padding:15px;border-right:1px solid var(--border-subtle);min-width:0}.detail-strip>div:last-child{border-right:0}.detail-strip label{display:block;color:var(--text-tertiary);font:8px var(--mono);text-transform:uppercase;letter-spacing:.1em}.detail-strip strong{display:block;margin-top:8px;font-size:12px;font-weight:500;overflow-wrap:anywhere}.json{margin:0;background:#070A09;color:var(--text-secondary);border:1px solid var(--border-subtle);border-radius:7px;padding:14px;font:9px/1.65 var(--mono);white-space:pre-wrap;overflow:auto;max-height:360px}.summary-box{font-size:12px;line-height:1.65;overflow-wrap:anywhere}.summary-box dl{display:grid;grid-template-columns:130px 1fr;gap:9px 14px;margin:0}.summary-box dt{color:var(--text-tertiary);font:8px var(--mono);text-transform:uppercase;letter-spacing:.08em}.summary-box dd{margin:0;color:var(--text-secondary)}
@@ -3837,6 +4365,13 @@ tr.cursor,.definition-card.cursor{outline:1px solid var(--accent-soft);outline-o
 .live-chip.pulse i{animation:live-ping .7s ease-out}
 @keyframes live-ping{0%{transform:scale(1);opacity:1}45%{transform:scale(2.1);opacity:.45}100%{transform:scale(1);opacity:1}}
 
+/* ---- Effect approvals. One warm decision rail breaks the cool runtime surface. ---- */
+.approval-rail{position:relative;border:1px solid rgba(228,184,121,.28);border-left:3px solid var(--warn);border-radius:var(--radius);background:linear-gradient(100deg,rgba(228,184,121,.075),rgba(15,22,19,.96) 38%);margin-bottom:16px;overflow:hidden;box-shadow:0 16px 36px rgba(0,0,0,.16)}
+.approval-rail>header{display:flex;align-items:flex-start;gap:20px;padding:16px 18px;border-bottom:1px solid rgba(228,184,121,.16)}
+.approval-rail h2{margin:4px 0 0;font-size:16px;font-weight:500;letter-spacing:-.015em}.approval-rail header p{margin:5px 0 0;color:var(--text-secondary);font-size:11px;line-height:1.5}.approval-kicker{font:8px var(--mono);text-transform:uppercase;letter-spacing:.15em;color:var(--warn)}.approval-count{margin-left:auto;border:1px solid rgba(228,184,121,.24);border-radius:999px;padding:4px 8px;color:var(--warn);font:8px var(--mono);text-transform:uppercase;letter-spacing:.08em;white-space:nowrap}
+.approval-list{display:grid}.approval-item{padding:16px 18px;border-top:1px solid var(--border-subtle)}.approval-item:first-child{border-top:0}.approval-context{display:flex;align-items:center;gap:10px;margin-bottom:10px}.approval-tool{font:10px var(--mono);color:var(--text-primary);background:rgba(228,184,121,.08);border:1px solid rgba(228,184,121,.18);border-radius:5px;padding:5px 8px}.approval-run{margin-left:auto;color:var(--text-secondary);font:9px var(--mono);text-decoration:none}.approval-run:hover{color:var(--warn)}
+.approval-input{margin:0;max-height:220px;overflow:auto;white-space:pre-wrap;overflow-wrap:anywhere;border:1px solid var(--border-subtle);border-radius:7px;background:#070A09;padding:12px;color:var(--text-secondary);font:9px/1.65 var(--mono)}.approval-foot{display:flex;align-items:center;gap:16px;margin-top:12px;color:var(--text-tertiary);font:9px var(--mono)}.approval-actions{display:flex;gap:8px;margin-left:auto}.button.approve{border-color:var(--warn);background:var(--warn);color:#14110A;font-weight:600}.button.approve:hover{border-color:#F0C98D;background:#F0C98D;transform:translateY(-1px)}.approval-actions button:disabled{opacity:.55;cursor:wait;transform:none}
+
 /* ---- Event trace ---- */
 .event-controls{display:flex;align-items:center;gap:12px;flex-wrap:wrap;padding:12px 15px;border-bottom:1px solid var(--border-subtle)}
 .event-controls-right{display:flex;align-items:center;gap:12px;margin-left:auto;flex-wrap:wrap}
@@ -3869,12 +4404,39 @@ tr.cursor,.definition-card.cursor{outline:1px solid var(--accent-soft);outline-o
 .button.danger{color:var(--danger);border-color:rgba(226,155,168,.3)}
 .button.danger:hover{background:rgba(226,155,168,.09);border-color:var(--danger)}
 
+/* ---- WebChat. A focused conversation surface backed by native Glove history. ---- */
+.content.chat-content{max-width:none;height:calc(100vh - 72px);padding:0;overflow:hidden}
+.content.chat-content:before{display:none}
+.chat-shell{display:grid;grid-template-columns:290px minmax(0,1fr);height:100%;background:var(--bg)}
+.session-rail{min-width:0;border-right:1px solid var(--border-subtle);background:rgba(15,22,19,.7);display:flex;flex-direction:column;overflow:hidden}
+.session-head{height:76px;padding:18px;display:flex;align-items:center;border-bottom:1px solid var(--border-subtle)}
+.session-head>div{min-width:0}.session-head .eyebrow{font-size:8px;margin:0 0 5px}.session-head h1{margin:0;font-size:18px;font-weight:500;letter-spacing:-.02em}.session-head .button{margin-left:auto;color:var(--accent);background:var(--accent-dim);border-color:var(--accent-line)}
+.session-agent{padding:14px 15px 8px}.session-agent>span{display:block;margin-bottom:6px;color:var(--text-tertiary);font:8px var(--mono);text-transform:uppercase;letter-spacing:.1em}.session-agent select{width:100%;border:1px solid var(--border);background:var(--bg);border-radius:7px;padding:9px 10px;font-size:11px}
+.session-search{position:relative;margin:4px 15px 10px;display:flex;align-items:center;color:var(--text-tertiary)}.session-search>.icon{position:absolute;left:10px;width:13px;height:13px}.session-search input{width:100%;border:1px solid var(--border-subtle);background:var(--bg);border-radius:7px;padding:9px 10px 9px 31px;font-size:11px}.session-search input::placeholder{color:var(--text-tertiary)}
+.session-list{padding:2px 8px 18px;overflow:auto;min-height:0}.chat-session{position:relative;width:100%;border:1px solid transparent;background:transparent;color:var(--text-secondary);padding:11px 12px;border-radius:7px;text-align:left;cursor:pointer;margin:1px 0}.chat-session:hover{background:var(--accent-glow);color:var(--text-primary)}.chat-session.active{background:var(--accent-dim);border-color:var(--accent-line);color:var(--text-primary)}.chat-session.active:before{content:"";position:absolute;left:0;top:10px;bottom:10px;width:2px;background:var(--accent)}.chat-session span{display:block;font-size:12px;font-weight:500;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.chat-session small{display:block;margin-top:5px;color:var(--text-tertiary);font:8px var(--mono);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.conversation-pane{min-width:0;min-height:0;display:flex;flex-direction:column;background:radial-gradient(70% 38% at 50% 0%,var(--accent-glow),transparent 75%)}
+.conversation-head{height:76px;flex:0 0 auto;border-bottom:1px solid var(--border-subtle);padding:14px 22px;display:flex;align-items:center;gap:20px;background:rgba(8,11,10,.5)}.conversation-head>div:first-child{min-width:0}.conversation-kicker{display:block;color:var(--accent-soft);font:8px var(--mono);text-transform:uppercase;letter-spacing:.1em;margin-bottom:5px}.conversation-head h2{margin:0;font-size:17px;font-weight:500;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.conversation-meta{margin-left:auto;display:flex;align-items:center;gap:10px;color:var(--text-tertiary);font:8px var(--mono);white-space:nowrap}.conversation-rename{border:0;background:transparent;color:var(--text-tertiary);padding:5px 7px;border-radius:5px;font:8px var(--mono);cursor:pointer}.conversation-rename:hover{color:var(--accent);background:var(--accent-dim)}
+.chat-store-warning{flex:0 0 auto;border-bottom:1px solid rgba(228,184,121,.22);background:rgba(228,184,121,.07);color:var(--warn);padding:9px 20px;font-size:10px;text-align:center}
+.message-scroll{flex:1;min-height:0;overflow:auto;padding:32px max(24px,calc((100% - 920px)/2)) 22px;scrollbar-gutter:stable}
+.load-history{display:flex;align-items:center;justify-content:center;gap:10px;margin:-12px auto 24px}.load-history .button{font-size:10px}.load-history>span{color:var(--text-tertiary);font:8px var(--mono)}
+.chat-message{display:flex;align-items:flex-start;gap:12px;margin:0 auto 24px;max-width:920px}.chat-message.user{flex-direction:row-reverse}.message-avatar{width:29px;height:29px;flex:0 0 auto;border:1px solid var(--border);border-radius:8px;background:var(--bg-surface);color:var(--text-secondary);display:grid;place-items:center;font:10px var(--mono)}.message-avatar .icon{width:16px;height:16px;color:var(--accent)}.chat-message.user .message-avatar{background:var(--accent);border-color:var(--accent);color:var(--bg);font-weight:700}
+.message-body{min-width:0;max-width:min(780px,82%)}.message-body>header{display:flex;align-items:center;gap:8px;margin:0 2px 6px}.message-body>header strong{font-size:11px;font-weight:600}.message-body>header span{color:var(--text-tertiary);font:8px var(--mono);text-transform:uppercase}.chat-message.user .message-body>header{justify-content:flex-end}.message-text{white-space:pre-wrap;overflow-wrap:anywhere;border:1px solid var(--border-subtle);background:var(--bg-elevated);border-radius:4px 12px 12px 12px;padding:12px 14px;color:var(--text-primary);font-size:13px;font-weight:300;line-height:1.62}.chat-message.user .message-text{border-color:var(--accent-line);background:var(--accent-dim);border-radius:12px 4px 12px 12px}.chat-message.optimistic{opacity:.65}
+.chat-message.tool .message-avatar .icon{color:var(--network)}.chat-message.tool .message-body>header strong{color:var(--network)}
+.message-attachments{display:flex;flex-wrap:wrap;gap:7px;margin-top:8px}.message-attachments>span{display:grid;grid-template-columns:18px minmax(0,1fr);column-gap:7px;align-items:center;min-width:160px;border:1px solid var(--border);background:var(--bg-surface);border-radius:7px;padding:8px 10px}.message-attachments .icon{grid-row:1/3;color:var(--accent);width:16px;height:16px}.message-attachments b{font-size:10px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.message-attachments small{color:var(--text-tertiary);font:8px var(--mono)}
+.message-tools{margin-top:7px;border:1px solid var(--border-subtle);border-radius:7px;background:#070A09;overflow:hidden}.message-tools summary{padding:8px 10px;color:var(--network);font:9px var(--mono);cursor:pointer}.message-tools pre{margin:0;border-top:1px solid var(--border-subtle);padding:10px;max-height:260px;overflow:auto;color:var(--text-secondary);white-space:pre-wrap;font:8px/1.55 var(--mono)}
+.chat-progress{flex:0 0 auto;margin:0 max(24px,calc((100% - 920px)/2)) 10px;border:1px solid var(--accent-line);background:linear-gradient(90deg,var(--accent-dim),var(--bg-elevated));border-radius:9px;padding:11px 13px;display:flex;align-items:center;gap:14px}.chat-progress>div:first-child{display:grid;grid-template-columns:17px minmax(0,1fr);align-items:center;min-width:0}.chat-progress .pulse-dot{grid-row:1/3}.chat-progress strong{font-size:11px}.chat-progress small{margin-top:2px;color:var(--text-tertiary);font:8px var(--mono);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.chat-progress-actions{display:flex;gap:7px;margin-left:auto}.chat-progress .button{padding:7px 9px;font-size:10px}
+.chat-composer{flex:0 0 auto;margin:0 max(24px,calc((100% - 920px)/2)) 20px;border:1px solid var(--border-strong);background:var(--bg-elevated);border-radius:11px;box-shadow:0 18px 42px rgba(0,0,0,.24);overflow:hidden}.chat-composer textarea{display:block;width:100%;min-height:56px;max-height:180px;resize:vertical;border:0;background:transparent;padding:14px 15px 8px;font-size:13px;line-height:1.5}.chat-composer textarea:focus{outline:0}.composer-actions{display:flex;align-items:center;gap:10px;padding:6px 8px 8px}.composer-actions>span{color:var(--text-tertiary);font:8px var(--mono)}.composer-actions>.button{margin-left:auto}.attach-button{width:31px;height:31px;border:1px solid var(--border);border-radius:7px;color:var(--text-secondary);display:grid;place-items:center;cursor:pointer}.attach-button:hover{border-color:var(--border-strong);color:var(--accent);background:var(--accent-dim)}.attach-button .icon{width:15px;height:15px}.attach-button input{display:none}
+.selected-files{display:flex;flex-wrap:wrap;gap:5px;padding:8px 10px 0}.selected-files:empty{display:none}.selected-files>span{display:flex;align-items:center;gap:6px;max-width:260px;border:1px solid var(--border);border-radius:6px;background:var(--bg-surface);padding:5px 6px;color:var(--text-secondary)}.selected-files .icon{width:12px;height:12px;color:var(--accent)}.selected-files b{font-size:9px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.selected-files small{color:var(--text-tertiary);font:8px var(--mono);white-space:nowrap}.selected-files button{border:0;background:transparent;color:var(--text-tertiary);padding:2px;cursor:pointer}.selected-files button .icon{color:inherit;width:10px;height:10px}.chat-composer .form-error{margin:0;border-width:1px 0 0;border-radius:0}
+.chat-empty{margin:auto;max-width:430px;padding:40px 24px;text-align:center}.chat-empty.compact{min-height:100%;display:flex;flex-direction:column;align-items:center;justify-content:center}.chat-empty-icon{width:36px;height:36px;color:var(--accent);margin:0 auto 17px}.chat-empty h2{margin:0;font-size:20px;font-weight:400;letter-spacing:-.02em}.chat-empty p{margin:9px 0 20px;color:var(--text-secondary);font-size:12px;line-height:1.6}.empty-action{text-align:center;margin-top:-24px}
+
 @media(max-width:760px){
   .toolbar-right{margin-left:0;width:100%}
   .search-field,.search-field input{width:100%;min-width:0}
   .event-toggle{grid-template-columns:60px 54px minmax(0,1fr) auto!important}
   .event-toggle .event-category{display:none}
+  .approval-rail>header,.approval-foot{display:block}.approval-count{display:inline-flex;margin:10px 0 0}.approval-context{align-items:flex-start}.approval-run{margin-left:0}.approval-actions{margin:12px 0 0}.approval-actions .button{flex:1}
   .hint{display:none}
+  .content.chat-content{height:calc(100vh - 72px);padding:0}.chat-shell{grid-template-columns:1fr;grid-template-rows:auto minmax(0,1fr)}.session-rail{max-height:235px;border-right:0;border-bottom:1px solid var(--border-subtle)}.session-head{height:58px;padding:10px 14px}.session-head .eyebrow{display:none}.session-head h1{font-size:15px}.session-agent{padding:8px 12px 4px}.session-search{margin:4px 12px 7px}.session-list{display:flex;gap:5px;padding:2px 10px 10px;overflow:auto}.chat-session{min-width:180px;margin:0}.conversation-head{height:62px;padding:10px 14px}.conversation-meta span:not(.status){display:none}.message-scroll{padding:20px 13px}.message-body{max-width:88%}.chat-progress{margin:0 10px 8px}.chat-progress-actions a{display:none}.chat-composer{margin:0 10px 10px}.composer-actions>span{display:none}
 }
 @media(prefers-reduced-motion:reduce){*{scroll-behavior:auto!important;transition:none!important}}
 `;
@@ -3883,32 +4445,42 @@ tr.cursor,.definition-card.cursor{outline:1px solid var(--accent-soft);outline-o
 var NAV_ICONS = {
   overview: renderPhosphorIcon("overview"),
   agents: renderPhosphorIcon("agent"),
+  chat: renderPhosphorIcon("chat"),
   runs: renderPhosphorIcon("runs"),
   automations: renderPhosphorIcon("automations"),
   integrations: renderPhosphorIcon("integrations"),
   workspaces: renderPhosphorIcon("workspaces")
 };
-function renderDashboard() {
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function renderDashboard(branding = {}) {
+  const name = escapeHtml(branding.name?.trim() || "Glove Foundry");
+  const label = escapeHtml(branding.label?.trim() || "Runtime inspector");
+  const descriptor = escapeHtml(branding.descriptor?.trim() || "Inspector");
+  const accent = /^#[0-9a-f]{6}$/i.test(branding.accent ?? "") ? branding.accent : void 0;
   return `<!doctype html>
 <html lang="en">
 <head>
   <meta charset="utf-8" />
   <meta name="viewport" content="width=device-width,initial-scale=1" />
   <meta name="color-scheme" content="dark" />
-  <title>Glove Foundry \xB7 Inspector</title>
+  <title>${name} \xB7 ${descriptor}</title>
   <style>${DASHBOARD_STYLES}</style>
+  ${accent ? `<style>:root{--accent:${accent};--accent-soft:${accent};--accent-strong:${accent}}</style>` : ""}
 </head>
 <body>
   <div class="app">
     <aside class="sidebar" id="sidebar">
       <a class="brand" href="/" data-link>
         ${renderGloveMark()}
-        <span><strong>Glove Foundry</strong><small>Runtime inspector</small></span>
+        <span><strong>${name}</strong><small>${label}</small></span>
       </a>
       <nav class="nav">
         <div class="nav-label">Inspect</div>
         <a href="/" data-link data-nav="overview"><span class="nav-icon">${NAV_ICONS.overview}</span>Overview</a>
         <a href="/agents" data-link data-nav="agents"><span class="nav-icon">${NAV_ICONS.agents}</span>Agents</a>
+        <a href="/chat" data-link data-nav="chat"><span class="nav-icon">${NAV_ICONS.chat}</span>Chat</a>
         <a href="/runs" data-link data-nav="runs"><span class="nav-icon">${NAV_ICONS.runs}</span>Runs</a>
         <a href="/automations" data-link data-nav="automations"><span class="nav-icon">${NAV_ICONS.automations}</span>Automations</a>
         <a href="/integrations" data-link data-nav="integrations"><span class="nav-icon">${NAV_ICONS.integrations}</span>Integrations</a>
@@ -3916,7 +4488,7 @@ function renderDashboard() {
       </nav>
       <div class="sidebar-foot">
         <div class="runtime-state" id="runtime-state"><i></i><span>Connecting to runtime\u2026</span></div>
-        <button class="shortcut" id="open-search"><span class="shortcut-label">${renderPhosphorIcon("search")}Search Foundry</span><kbd>\u2318K</kbd></button>
+        <button class="shortcut" id="open-search"><span class="shortcut-label">${renderPhosphorIcon("search")}Search ${name}</span><kbd>\u2318K</kbd></button>
       </div>
     </aside>
     <section class="main">
@@ -3952,7 +4524,7 @@ function renderDashboard() {
 
   <div class="search-modal" id="search-modal">
     <div class="search-box" role="dialog" aria-modal="true">
-      <div class="search-input-wrap">${renderPhosphorIcon("search")}<input id="search-input" aria-label="Search Foundry" placeholder="Search pages, agents, instances, and runs\u2026" autocomplete="off" /></div>
+      <div class="search-input-wrap">${renderPhosphorIcon("search")}<input id="search-input" aria-label="Search ${name}" placeholder="Search pages, agents, instances, and runs\u2026" autocomplete="off" /></div>
       <div class="search-results" id="search-results"></div>
     </div>
   </div>
@@ -3964,6 +4536,10 @@ function renderDashboard() {
 
 // src/server.ts
 var MAX_BODY_BYTES = 1024 * 1024;
+function isLoopbackHost(host) {
+  const normalized = host.trim().toLowerCase().replace(/^\[|\]$/g, "");
+  return normalized === "localhost" || normalized === "localhost." || normalized === "::1" || /^127(?:\.\d{1,3}){3}$/.test(normalized);
+}
 function isFoundryMessageInput(value) {
   if (typeof value === "string") return true;
   if (!Array.isArray(value)) return false;
@@ -3974,6 +4550,7 @@ function isFoundryMessageInput(value) {
       return false;
     }
     if (candidate.text !== void 0 && typeof candidate.text !== "string") return false;
+    if (candidate.name !== void 0 && typeof candidate.name !== "string") return false;
     if (candidate.source === void 0) return true;
     if (!candidate.source || typeof candidate.source !== "object") return false;
     const source = candidate.source;
@@ -3994,14 +4571,14 @@ function json(response, status, value) {
   });
   response.end(JSON.stringify(value));
 }
-async function readJson(request) {
+async function readJson(request, maxBytes = MAX_BODY_BYTES) {
   const chunks = [];
   let size = 0;
   for await (const chunk of request) {
     const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
     size += buffer.length;
-    if (size > MAX_BODY_BYTES) {
-      throw new RequestError(413, "Request body exceeds the 1 MB limit.");
+    if (size > maxBytes) {
+      throw new RequestError(413, `Request body exceeds the ${maxBytes}-byte limit.`);
     }
     chunks.push(buffer);
   }
@@ -4088,10 +4665,216 @@ function foundryRequestFrom(value) {
   }
   return body;
 }
+function openAiChatRequestFrom(value) {
+  if (!value || typeof value !== "object") {
+    throw new RequestError(400, "Chat completion body must be an object.");
+  }
+  const body = value;
+  if (typeof body.model !== "string" || !body.model) {
+    throw new RequestError(400, "model is required and must name a Foundry agent instance.");
+  }
+  if (!Array.isArray(body.messages) || body.messages.length === 0) {
+    throw new RequestError(400, "messages must be a non-empty array.");
+  }
+  const messages = body.messages.map((item) => {
+    if (!item || typeof item !== "object") throw new RequestError(400, "Every message must be an object.");
+    const message = item;
+    if (!["system", "user", "assistant", "tool"].includes(String(message.role))) {
+      throw new RequestError(400, "Every message must have a supported role.");
+    }
+    if (typeof message.content !== "string" && !Array.isArray(message.content)) {
+      throw new RequestError(400, "Every message must have string or array content.");
+    }
+    return message;
+  });
+  if (![...messages].reverse().some((message) => message.role === "user")) {
+    throw new RequestError(400, "messages must include a user message.");
+  }
+  return {
+    model: body.model,
+    messages,
+    stream: body.stream === true,
+    ...typeof body.user === "string" && body.user ? { user: body.user } : {},
+    ...typeof body.conversation_id === "string" && body.conversation_id ? { conversationId: body.conversation_id } : {}
+  };
+}
+function openAiPartText(message) {
+  if (typeof message.content === "string") return message.content;
+  return message.content.filter((part) => part.type === "text" && typeof part.text === "string").map((part) => part.text).join("\n");
+}
+function openAiCurrentInput(messages, includePrior) {
+  let userIndex = messages.length - 1;
+  while (userIndex >= 0 && messages[userIndex]?.role !== "user") userIndex--;
+  const current = messages[userIndex];
+  const prior = includePrior ? messages.slice(0, userIndex).map(
+    (message) => `<message role="${message.role}">
+${openAiPartText(message)}
+</message>`
+  ).join("\n") : "";
+  if (typeof current.content === "string") {
+    return prior ? `${prior}
+<current-user-message>
+${current.content}
+</current-user-message>` : current.content;
+  }
+  const parts = [];
+  if (prior) parts.push({ type: "text", text: prior });
+  for (const part of current.content) {
+    if (part.type === "text" && typeof part.text === "string") {
+      parts.push({ type: "text", text: part.text });
+      continue;
+    }
+    if (part.type === "image_url") {
+      const url = typeof part.image_url === "string" ? part.image_url : part.image_url?.url;
+      if (url) parts.push({ type: "image", source: { type: "url", media_type: "image/*", url } });
+    }
+  }
+  if (parts.length === 0) throw new RequestError(400, "The current user message has no supported content.");
+  return parts;
+}
+function openAiOutput(value) {
+  if (typeof value === "string") return value;
+  if (value === void 0) return "";
+  return JSON.stringify(value);
+}
+function responseContentPart(value) {
+  if (!value || typeof value !== "object") return null;
+  const part = value;
+  if ((part.type === "input_text" || part.type === "text") && typeof part.text === "string") {
+    return { type: "text", text: part.text };
+  }
+  if (part.type === "input_image" || part.type === "image_url") {
+    const image = typeof part.image_url === "string" ? part.image_url : part.image_url && typeof part.image_url === "object" ? part.image_url.url : void 0;
+    if (typeof image === "string" && image) {
+      return { type: "image", source: { type: "url", media_type: "image/*", url: image } };
+    }
+  }
+  if (part.type === "input_file") {
+    if (typeof part.file_url === "string" && part.file_url) {
+      return {
+        type: "document",
+        source: { type: "url", media_type: "application/octet-stream", url: part.file_url }
+      };
+    }
+    if (typeof part.file_data === "string" && part.file_data) {
+      const dataUrl = part.file_data.match(/^data:([^;,]+);base64,(.+)$/s);
+      return {
+        type: "document",
+        source: dataUrl ? { type: "base64", media_type: dataUrl[1], data: dataUrl[2] } : { type: "base64", media_type: "application/octet-stream", data: part.file_data }
+      };
+    }
+  }
+  return null;
+}
+function responsesInput(value, instructions) {
+  const prefix = typeof instructions === "string" && instructions.trim() ? `<instructions>
+${instructions}
+</instructions>` : "";
+  if (typeof value === "string") return prefix ? `${prefix}
+${value}` : value;
+  if (!Array.isArray(value) || value.length === 0) {
+    throw new RequestError(400, "input must be a non-empty string or array.");
+  }
+  const messages = value.filter((item) => Boolean(item && typeof item === "object"));
+  let userIndex = messages.length - 1;
+  while (userIndex >= 0 && messages[userIndex]?.role !== "user") userIndex--;
+  const selected = userIndex >= 0 ? messages[userIndex] : messages[messages.length - 1];
+  const prior = messages.slice(0, Math.max(userIndex, 0)).map((item) => {
+    const content2 = typeof item.content === "string" ? item.content : Array.isArray(item.content) ? item.content.map((part) => {
+      const normalized = responseContentPart(part);
+      return normalized?.type === "text" ? normalized.text : normalized ? `[${normalized.type}]` : "";
+    }).filter(Boolean).join("\n") : "";
+    return `<message role="${typeof item.role === "string" ? item.role : "user"}">
+${content2}
+</message>`;
+  }).join("\n");
+  const content = selected.content ?? selected;
+  const parts = typeof content === "string" ? [{ type: "text", text: content }] : Array.isArray(content) ? content.map(responseContentPart).filter((part) => part !== null) : [responseContentPart(content)].filter((part) => part !== null);
+  const context = [prefix, prior].filter(Boolean).join("\n");
+  if (context) parts.unshift({ type: "text", text: context });
+  if (parts.length === 0) throw new RequestError(400, "input has no supported text, image, or file content.");
+  return parts;
+}
+function openAiResponsesRequestFrom(value) {
+  if (!value || typeof value !== "object") {
+    throw new RequestError(400, "Responses body must be an object.");
+  }
+  const body = value;
+  if (typeof body.model !== "string" || !body.model) {
+    throw new RequestError(400, "model is required and must name a Foundry agent instance.");
+  }
+  return {
+    model: body.model,
+    input: responsesInput(body.input, body.instructions),
+    stream: body.stream === true,
+    store: body.store !== false,
+    ...typeof body.instructions === "string" ? { instructions: body.instructions } : {},
+    ...typeof body.user === "string" && body.user ? { user: body.user } : {},
+    ...typeof body.conversation_id === "string" && body.conversation_id ? { conversationId: body.conversation_id } : {},
+    ...body.context && typeof body.context === "object" ? { context: body.context } : {}
+  };
+}
+function foundryControlRunRequestFrom(value) {
+  if (!value || typeof value !== "object") {
+    throw new RequestError(400, "Run body must be an object.");
+  }
+  const body = value;
+  const model = typeof body.model === "string" ? body.model : body.agent_id;
+  const input = body.input ?? body.message;
+  if (typeof model !== "string" || !model) {
+    throw new RequestError(400, "model or agent_id is required.");
+  }
+  if (!isFoundryMessageInput(input)) {
+    throw new RequestError(400, "input or message must be a supported Foundry message.");
+  }
+  return {
+    model,
+    input,
+    ...typeof body.conversation_id === "string" && body.conversation_id ? { conversationId: body.conversation_id } : {},
+    ...typeof body.user === "string" && body.user ? { user: body.user } : {},
+    ...body.context && typeof body.context === "object" ? { context: body.context } : {}
+  };
+}
+function foundrySteerInputFrom(value) {
+  if (!value || typeof value !== "object") {
+    throw new RequestError(400, "Steering body must be an object.");
+  }
+  const body = value;
+  const input = body.input ?? body.message ?? body.guidance;
+  if (!isFoundryMessageInput(input)) {
+    throw new RequestError(400, "input, message, or guidance must be a supported Foundry message.");
+  }
+  return input;
+}
+function approvalDecisionFrom(value) {
+  if (!value || typeof value !== "object") {
+    throw new RequestError(400, "Approval body must be an object.");
+  }
+  const decision = value.decision;
+  if (decision !== "approve" && decision !== "deny") {
+    throw new RequestError(400, 'decision must be "approve" or "deny".');
+  }
+  return decision;
+}
+function approvalFilter(url) {
+  const runId = url.searchParams.get("runId") ?? url.searchParams.get("run_id") ?? void 0;
+  const rawStatus = url.searchParams.get("status");
+  const statuses = ["pending", "approved", "denied", "expired", "cancelled"];
+  if (rawStatus && !statuses.includes(rawStatus)) {
+    throw new RequestError(400, "Unknown approval status filter.");
+  }
+  return {
+    ...runId ? { runId } : {},
+    ...rawStatus ? { status: rawStatus } : {}
+  };
+}
 var FoundryServer = class {
   constructor(runtime, options = {}) {
     this.runtime = runtime;
     this.options = options;
+    if (options.messageBodyBytes !== void 0 && (!Number.isInteger(options.messageBodyBytes) || options.messageBodyBytes < MAX_BODY_BYTES || options.messageBodyBytes > 128 * 1024 * 1024)) {
+      throw new Error("Foundry messageBodyBytes must be an integer from 1048576 to 134217728.");
+    }
     this.server = createServer((request, response) => {
       void this.handle(request, response);
     });
@@ -4102,6 +4885,11 @@ var FoundryServer = class {
   async listen() {
     const host = this.options.host ?? "127.0.0.1";
     const port = this.options.port ?? 4141;
+    if (!isLoopbackHost(host) && !this.runtime.application.requestAuthorization) {
+      throw new Error(
+        `Foundry refuses to bind ${host} without application.requestAuthorization. Keep the runtime on loopback or provide a user-owned authorization adapter.`
+      );
+    }
     await new Promise((resolve3, reject) => {
       this.server.once("error", reject);
       this.server.listen(port, host, () => {
@@ -4120,19 +4908,46 @@ var FoundryServer = class {
     if (!this.server.listening) return;
     for (const stream of this.eventStreams) stream.end();
     this.eventStreams.clear();
-    await new Promise(
-      (resolve3, reject) => this.server.close((error) => error ? reject(error) : resolve3())
-    );
+    await new Promise((resolve3, reject) => {
+      this.server.close((error) => error ? reject(error) : resolve3());
+      this.server.closeAllConnections();
+    });
     this.addressInfo = null;
   }
   address() {
     return this.addressInfo;
   }
+  async authorizeRequest(request, response, url, method) {
+    const adapter = this.runtime.application.requestAuthorization;
+    if (!adapter) return true;
+    let authorized = false;
+    try {
+      authorized = await Effect6.runPromise(adapter.authorize({
+        method,
+        path: url.pathname,
+        query: url.search,
+        ...typeof request.headers.authorization === "string" ? { authorization: request.headers.authorization } : {},
+        ...typeof request.headers.cookie === "string" ? { cookie: request.headers.cookie } : {},
+        ...request.socket.remoteAddress ? { remoteAddress: request.socket.remoteAddress } : {}
+      }));
+    } catch {
+    }
+    if (authorized) return true;
+    response.writeHead(401, {
+      "content-type": "application/json; charset=utf-8",
+      "cache-control": "no-store",
+      "x-content-type-options": "nosniff",
+      "www-authenticate": adapter.challenge ?? 'Bearer realm="Glove Foundry"'
+    });
+    response.end('{"error":"Foundry authorization is required."}');
+    return false;
+  }
   async handle(request, response) {
     try {
       const url = new URL(request.url ?? "/", "http://foundry.local");
       const method = request.method ?? "GET";
-      if (method === "GET" && !url.pathname.startsWith("/api/") && url.pathname !== "/health") {
+      if (!await this.authorizeRequest(request, response, url, method)) return;
+      if (method === "GET" && !url.pathname.startsWith("/api/") && !url.pathname.startsWith("/v1/") && url.pathname !== "/health" && url.pathname !== "/health/detailed") {
         response.writeHead(200, {
           "content-type": "text/html; charset=utf-8",
           "cache-control": "no-store",
@@ -4150,13 +4965,127 @@ var FoundryServer = class {
           "x-content-type-options": "nosniff",
           "x-frame-options": "DENY"
         });
-        response.end(renderDashboard());
+        response.end(renderDashboard(this.options.branding));
         return;
       }
       if (method === "GET" && url.pathname === "/health") {
         json(response, 200, await this.runtime.health());
         return;
       }
+      if (method === "GET" && url.pathname === "/health/detailed") {
+        const health = await this.runtime.health();
+        json(response, 200, {
+          ...health,
+          connections: this.runtime.listApplicationConnections(),
+          runs: await this.runtime.listRuns()
+        });
+        return;
+      }
+      if (method === "GET" && url.pathname === "/v1/models") {
+        const instances = await this.runtime.listAgentInstances();
+        json(response, 200, {
+          object: "list",
+          data: instances.map((instance) => ({
+            id: instance.id,
+            object: "model",
+            created: Math.floor(Date.parse(instance.createdAt) / 1e3),
+            owned_by: `glove-foundry:${instance.definitionId}`
+          }))
+        });
+        return;
+      }
+      if (method === "POST" && url.pathname === "/v1/chat/completions") {
+        await this.handleOpenAiChat(request, response, openAiChatRequestFrom(await readJson(request, this.options.messageBodyBytes)));
+        return;
+      }
+      if (method === "POST" && url.pathname === "/v1/responses") {
+        await this.handleOpenAiResponse(request, response, openAiResponsesRequestFrom(await readJson(request, this.options.messageBodyBytes)));
+        return;
+      }
+      if (method === "GET" && url.pathname === "/v1/capabilities") {
+        json(response, 200, {
+          object: "foundry.capabilities",
+          protocols: {
+            native: true,
+            openaiChatCompletions: { streaming: true, multimodalInput: true },
+            openaiResponses: { streaming: true, multimodalInput: true },
+            runControl: {
+              create: true,
+              status: true,
+              events: true,
+              stop: true,
+              steer: true,
+              steeringMode: "interrupt-and-restart"
+            },
+            approvals: { list: true, resolve: true, default: "deny" }
+          },
+          runtime: await this.runtime.health()
+        });
+        return;
+      }
+      if (method === "POST" && url.pathname === "/v1/runs") {
+        const body = foundryControlRunRequestFrom(await readJson(request, this.options.messageBodyBytes));
+        const agent = await this.resolveAgent(body.model);
+        const conversation = await this.resolveConversation(
+          request,
+          agent,
+          "control",
+          body.conversationId ?? body.user
+        );
+        const run = await this.runtime.send(agent.id, conversation.id, body.input, {
+          ...body.context ? { context: { ...body.context, protocol: "foundry-control" } } : {
+            context: { protocol: "foundry-control" }
+          }
+        });
+        response.setHeader("x-foundry-conversation-id", conversation.id);
+        json(response, 202, run);
+        return;
+      }
+      const v1RunEvents = url.pathname.match(/^\/v1\/runs\/([^/]+)\/events$/);
+      if (v1RunEvents && method === "GET") {
+        const runId = decodeURIComponent(v1RunEvents[1]);
+        if (!await this.runtime.getRun(runId)) throw new RequestError(404, "Foundry run was not found.");
+        const filter = { ...eventFilter(url), runId, limit: 5e3 };
+        if (request.headers.accept?.includes("text/event-stream")) {
+          this.streamEvents(request, response, filter, { closeOnTerminalRun: true });
+        } else {
+          json(response, 200, this.runtime.observability.list(filter));
+        }
+        return;
+      }
+      const v1RunStop = url.pathname.match(/^\/v1\/runs\/([^/]+)\/stop$/);
+      if (v1RunStop && method === "POST") {
+        const runId = decodeURIComponent(v1RunStop[1]);
+        if (!await this.runtime.getRun(runId)) throw new RequestError(404, "Foundry run was not found.");
+        json(response, 200, { id: runId, stopped: await this.runtime.cancel(runId) });
+        return;
+      }
+      const v1RunSteer = url.pathname.match(/^\/v1\/runs\/([^/]+)\/steer$/);
+      if (v1RunSteer && method === "POST") {
+        const runId = decodeURIComponent(v1RunSteer[1]);
+        if (!await this.runtime.getRun(runId)) throw new RequestError(404, "Foundry run was not found.");
+        json(response, 202, await this.runtime.steer(runId, foundrySteerInputFrom(await readJson(request, this.options.messageBodyBytes))));
+        return;
+      }
+      const v1Run = url.pathname.match(/^\/v1\/runs\/([^/]+)$/);
+      if (v1Run && method === "GET") {
+        const run = await this.runtime.getRun(decodeURIComponent(v1Run[1]));
+        if (!run) throw new RequestError(404, "Foundry run was not found.");
+        json(response, 200, run);
+        return;
+      }
+      if (method === "GET" && url.pathname === "/v1/approvals") {
+        json(response, 200, await this.runtime.listApprovals(approvalFilter(url)));
+        return;
+      }
+      const v1Approval = url.pathname.match(/^\/v1\/approvals\/([^/]+)$/);
+      if (v1Approval && method === "POST") {
+        json(response, 200, await this.runtime.resolveApproval(
+          decodeURIComponent(v1Approval[1]),
+          approvalDecisionFrom(await readJson(request))
+        ));
+        return;
+      }
       if (method === "GET" && url.pathname === "/api/manifest") {
         const definitions = Object.fromEntries(
           this.runtime.agents.map((agent) => [
@@ -4275,9 +5204,55 @@ var FoundryServer = class {
         }));
         return;
       }
+      const conversationItem = url.pathname.match(/^\/api\/conversations\/([^/]+)$/);
+      if (conversationItem && method === "PATCH") {
+        const body = await readJson(request);
+        if (typeof body.agentId !== "string") throw new RequestError(400, "agentId is required.");
+        if (body.title !== void 0 && typeof body.title !== "string") {
+          throw new RequestError(400, "title must be a string.");
+        }
+        if (typeof body.title === "string" && (!body.title.trim() || body.title.trim().length > 120)) {
+          throw new RequestError(400, "title must contain 1 to 120 characters.");
+        }
+        if (body.context !== void 0 && (!body.context || typeof body.context !== "object" || Array.isArray(body.context))) {
+          throw new RequestError(400, "context must be an object.");
+        }
+        json(response, 200, await this.runtime.updateConversation(
+          body.agentId,
+          decodeURIComponent(conversationItem[1]),
+          {
+            ...typeof body.title === "string" ? { title: body.title } : {},
+            ...body.context && typeof body.context === "object" ? { context: body.context } : {}
+          }
+        ));
+        return;
+      }
       const conversationMessage = url.pathname.match(/^\/api\/conversations\/([^/]+)\/messages$/);
+      if (conversationMessage && method === "GET") {
+        const agentId = url.searchParams.get("agent");
+        if (!agentId) throw new RequestError(400, "agent query is required.");
+        const limitValue = url.searchParams.get("limit");
+        const offsetValue = url.searchParams.get("offset");
+        const limit = limitValue === null ? void 0 : Number(limitValue);
+        const offset = offsetValue === null ? void 0 : Number(offsetValue);
+        if (limit !== void 0 && (!Number.isInteger(limit) || limit < 1 || limit > 500)) {
+          throw new RequestError(400, "limit must be an integer from 1 to 500.");
+        }
+        if (offset !== void 0 && (!Number.isInteger(offset) || offset < 0)) {
+          throw new RequestError(400, "offset must be a non-negative integer.");
+        }
+        json(response, 200, await this.runtime.conversationTranscript(
+          agentId,
+          decodeURIComponent(conversationMessage[1]),
+          {
+            ...offset !== void 0 ? { offset } : {},
+            ...limit !== void 0 ? { limit } : {}
+          }
+        ));
+        return;
+      }
       if (conversationMessage && method === "POST") {
-        const body = await readJson(request);
+        const body = await readJson(request, this.options.messageBodyBytes);
         if (typeof body.agentId !== "string" || !isFoundryMessageInput(body.message)) {
           throw new RequestError(400, "agentId and message are required.");
         }
@@ -4497,6 +5472,18 @@ var FoundryServer = class {
         }
         return;
       }
+      if (url.pathname === "/api/approvals" && method === "GET") {
+        json(response, 200, await this.runtime.listApprovals(approvalFilter(url)));
+        return;
+      }
+      const approvalMatch = url.pathname.match(/^\/api\/approvals\/([^/]+)$/);
+      if (approvalMatch && method === "POST") {
+        json(response, 200, await this.runtime.resolveApproval(
+          decodeURIComponent(approvalMatch[1]),
+          approvalDecisionFrom(await readJson(request))
+        ));
+        return;
+      }
       const transmissionFire = url.pathname.match(/^\/api\/transmissions\/([^/]+)\/fire$/);
       if (transmissionFire && method === "POST") {
         const body = await readJson(request);
@@ -4507,6 +5494,8 @@ var FoundryServer = class {
           routeId: decodeURIComponent(transmissionFire[1]),
           eventId: body.eventId,
           threadKey: body.threadKey,
+          ...typeof body.conversationKey === "string" ? { conversationKey: body.conversationKey } : {},
+          ...body.conversationScope === "route" || body.conversationScope === "agent" ? { conversationScope: body.conversationScope } : {},
           raw: body.raw
         }));
         return;
@@ -4537,6 +5526,22 @@ var FoundryServer = class {
         });
         return;
       }
+      const steerMatch = url.pathname.match(/^\/api\/runs\/([^/]+)\/steer$/);
+      if (steerMatch && method === "POST") {
+        const runId = decodeURIComponent(steerMatch[1]);
+        if (!await this.runtime.getRun(runId)) {
+          throw new RequestError(404, "Foundry run was not found.");
+        }
+        json(
+          response,
+          202,
+          await this.runtime.steer(
+            runId,
+            foundrySteerInputFrom(await readJson(request, this.options.messageBodyBytes))
+          )
+        );
+        return;
+      }
       const eventsMatch = url.pathname.match(/^\/api\/runs\/([^/]+)\/events$/);
       if (eventsMatch && method === "GET") {
         json(
@@ -4564,35 +5569,306 @@ var FoundryServer = class {
       else response.end();
     }
   }
-  streamEvents(request, response, filter) {
+  async handleOpenAiChat(request, response, body) {
+    const agent = await this.resolveAgent(body.model);
+    const requestedConversation = request.headers["x-foundry-conversation-id"] ?? body.conversationId ?? body.user;
+    const conversations = await this.runtime.listConversations(agent.id);
+    const conversation = await this.resolveConversation(request, agent, "openai", requestedConversation);
+    const existing = conversations.some((item) => item.id === conversation.id);
+    const run = await this.runtime.send(
+      agent.id,
+      conversation.id,
+      openAiCurrentInput(body.messages, !existing),
+      { context: { protocol: "openai-chat-completions" } }
+    );
+    const completionId = `chatcmpl-${run.id}`;
+    const created = Math.floor(Date.now() / 1e3);
+    response.setHeader("x-foundry-conversation-id", conversation.id);
+    if (!body.stream) {
+      const completed = await this.runtime.waitForRun(run.id, { timeoutMs: run.timeoutMs });
+      if (!completed || completed.status !== "completed") {
+        throw new RequestError(502, completed?.error ?? "Foundry did not complete the chat request.");
+      }
+      json(response, 200, {
+        id: completionId,
+        object: "chat.completion",
+        created,
+        model: agent.id,
+        choices: [{
+          index: 0,
+          message: { role: "assistant", content: openAiOutput(completed.output?.value) },
+          finish_reason: "stop"
+        }],
+        system_fingerprint: "glove-foundry"
+      });
+      return;
+    }
     response.writeHead(200, {
       "content-type": "text/event-stream; charset=utf-8",
       "cache-control": "no-cache, no-transform",
       connection: "keep-alive",
-      "x-accel-buffering": "no"
+      "x-accel-buffering": "no",
+      "x-foundry-conversation-id": conversation.id
     });
     this.eventStreams.add(response);
-    response.write(": glove-foundry\n\n");
-    for (const event of this.runtime.observability.list(filter)) {
-      response.write(`id: ${event.sequence}
-data: ${JSON.stringify(event)}
+    const seen = /* @__PURE__ */ new Set();
+    let emittedText = false;
+    const chunk = (delta, finishReason = null) => {
+      response.write(`data: ${JSON.stringify({
+        id: completionId,
+        object: "chat.completion.chunk",
+        created,
+        model: agent.id,
+        choices: [{ index: 0, delta, finish_reason: finishReason }]
+      })}
 
 `);
+    };
+    chunk({ role: "assistant" });
+    const emitEvent = (event) => {
+      if (event.runId !== run.id || seen.has(event.id)) return;
+      seen.add(event.id);
+      if (event.type.endsWith("text_delta")) {
+        const data2 = event.data;
+        if (typeof data2.text === "string" && data2.text) {
+          emittedText = true;
+          chunk({ content: data2.text });
+        }
+      }
+    };
+    const unsubscribe = this.runtime.observability.subscribe(emitEvent);
+    for (const event of this.runtime.observability.list({ runId: run.id, limit: 5e3 })) emitEvent(event);
+    try {
+      const completed = await this.runtime.waitForRun(run.id, { timeoutMs: run.timeoutMs });
+      if (!completed || completed.status !== "completed") {
+        chunk({ content: `Foundry error: ${completed?.error ?? "run did not complete"}` }, "stop");
+      } else {
+        if (!emittedText) chunk({ content: openAiOutput(completed.output?.value) });
+        chunk({}, "stop");
+      }
+      response.write("data: [DONE]\n\n");
+      response.end();
+    } finally {
+      unsubscribe();
+      this.eventStreams.delete(response);
     }
-    const unsubscribe = this.runtime.observability.subscribe((event) => {
-      if (matches(event, filter)) {
-        response.write(`id: ${event.sequence}
-data: ${JSON.stringify(event)}
+  }
+  async resolveAgent(model) {
+    const instances = await this.runtime.listAgentInstances();
+    const exact = instances.find((instance) => instance.id === model);
+    const byDefinition = instances.filter((instance) => instance.definitionId === model);
+    const agent = exact ?? (byDefinition.length === 1 ? byDefinition[0] : void 0);
+    if (!agent) {
+      throw new RequestError(404, `Foundry model "${model}" does not resolve to one agent instance.`);
+    }
+    return agent;
+  }
+  async resolveConversation(request, agent, protocol, requested) {
+    const header = request.headers["x-foundry-conversation-id"];
+    const key = typeof header === "string" && header ? header : typeof requested === "string" && requested ? requested : void 0;
+    const prefix = protocol === "openai" ? "openai" : protocol;
+    const conversationId = key?.startsWith(`${prefix}-`) && key.length < 128 ? key : key ? `${prefix}-${createHash("sha256").update(`${agent.id}\0${key}`).digest("hex").slice(0, 32)}` : `${prefix}-${randomUUID3()}`;
+    const conversations = await this.runtime.listConversations(agent.id);
+    const existing = conversations.find((conversation) => conversation.id === conversationId);
+    if (existing) return existing;
+    return this.runtime.createConversation(agent.id, {
+      id: conversationId,
+      title: protocol === "control" ? "Hercules control session" : "OpenAI-compatible session",
+      context: { protocol: protocol === "responses" ? "openai-responses" : protocol === "openai" ? "openai-chat-completions" : "foundry-control" }
+    });
+  }
+  responseObject(run, request, conversationId) {
+    const text = openAiOutput(run.output?.value);
+    const status = run.status === "pending" ? "queued" : run.status === "running" ? "in_progress" : run.status;
+    const completed = status === "completed";
+    return {
+      id: `resp_${run.id}`,
+      object: "response",
+      created_at: Math.floor(Date.parse(run.createdAt) / 1e3),
+      completed_at: run.completedAt ? Math.floor(Date.parse(run.completedAt) / 1e3) : null,
+      background: false,
+      status,
+      error: run.error ? { message: run.error, type: "foundry_run_error" } : null,
+      incomplete_details: completed || status === "failed" || status === "cancelled" ? null : { reason: run.status },
+      instructions: request.instructions ?? null,
+      max_output_tokens: null,
+      max_tool_calls: null,
+      model: request.model,
+      output: completed ? [{
+        id: `msg_${run.id}`,
+        type: "message",
+        status: "completed",
+        role: "assistant",
+        content: [{ type: "output_text", text, annotations: [], logprobs: [] }]
+      }] : [],
+      parallel_tool_calls: true,
+      previous_response_id: null,
+      reasoning: { effort: null, summary: null },
+      service_tier: "default",
+      store: request.store,
+      temperature: 1,
+      text: { format: { type: "text" } },
+      tool_choice: "auto",
+      tools: [],
+      top_p: 1,
+      truncation: "disabled",
+      user: request.user ?? null,
+      metadata: {
+        "glove.foundry.run_id": run.id,
+        "glove.foundry.conversation_id": conversationId
+      },
+      usage: completed ? {
+        input_tokens: 0,
+        input_tokens_details: { cached_tokens: 0 },
+        output_tokens: 0,
+        output_tokens_details: { reasoning_tokens: 0 },
+        total_tokens: 0
+      } : null
+    };
+  }
+  async handleOpenAiResponse(request, response, body) {
+    const agent = await this.resolveAgent(body.model);
+    const conversation = await this.resolveConversation(
+      request,
+      agent,
+      "responses",
+      body.conversationId ?? body.user
+    );
+    const run = await this.runtime.send(agent.id, conversation.id, body.input, {
+      context: { ...body.context ?? {}, protocol: "openai-responses" }
+    });
+    response.setHeader("x-foundry-conversation-id", conversation.id);
+    if (!body.stream) {
+      const completed = await this.runtime.waitForRun(run.id, { timeoutMs: run.timeoutMs });
+      if (!completed) throw new RequestError(502, "Foundry did not complete the response request.");
+      json(response, completed.status === "completed" ? 200 : 502, this.responseObject(completed, body, conversation.id));
+      return;
+    }
+    response.writeHead(200, {
+      "content-type": "text/event-stream; charset=utf-8",
+      "cache-control": "no-cache, no-transform",
+      connection: "keep-alive",
+      "x-accel-buffering": "no",
+      "x-foundry-conversation-id": conversation.id
+    });
+    this.eventStreams.add(response);
+    const messageId = `msg_${run.id}`;
+    let sequence = 0;
+    const emit = (type, data2) => {
+      response.write(`event: ${type}
+data: ${JSON.stringify({ type, sequence_number: sequence++, ...data2 })}
 
 `);
+    };
+    const inProgress = this.responseObject({ ...run, status: "running" }, body, conversation.id);
+    emit("response.created", { response: inProgress });
+    emit("response.in_progress", { response: inProgress });
+    emit("response.output_item.added", {
+      output_index: 0,
+      item: { id: messageId, type: "message", status: "in_progress", role: "assistant", content: [] }
+    });
+    emit("response.content_part.added", {
+      item_id: messageId,
+      output_index: 0,
+      content_index: 0,
+      part: { type: "output_text", text: "", annotations: [] }
+    });
+    const seen = /* @__PURE__ */ new Set();
+    let text = "";
+    const emitEvent = (event) => {
+      if (event.runId !== run.id || seen.has(event.id) || !event.type.endsWith("text_delta")) return;
+      seen.add(event.id);
+      const value = event.data;
+      if (typeof value.text !== "string" || !value.text) return;
+      text += value.text;
+      emit("response.output_text.delta", {
+        item_id: messageId,
+        output_index: 0,
+        content_index: 0,
+        delta: value.text
+      });
+    };
+    const unsubscribe = this.runtime.observability.subscribe(emitEvent);
+    for (const event of this.runtime.observability.list({ runId: run.id, limit: 5e3 })) emitEvent(event);
+    try {
+      const completed = await this.runtime.waitForRun(run.id, { timeoutMs: run.timeoutMs });
+      if (!completed) throw new Error("Foundry did not complete the response request.");
+      const output = openAiOutput(completed.output?.value);
+      if (!text && output) {
+        text = output;
+        emit("response.output_text.delta", {
+          item_id: messageId,
+          output_index: 0,
+          content_index: 0,
+          delta: output
+        });
       }
+      emit("response.output_text.done", {
+        item_id: messageId,
+        output_index: 0,
+        content_index: 0,
+        text
+      });
+      emit("response.content_part.done", {
+        item_id: messageId,
+        output_index: 0,
+        content_index: 0,
+        part: { type: "output_text", text, annotations: [], logprobs: [] }
+      });
+      emit("response.output_item.done", {
+        output_index: 0,
+        item: {
+          id: messageId,
+          type: "message",
+          status: completed.status === "completed" ? "completed" : "incomplete",
+          role: "assistant",
+          content: [{ type: "output_text", text, annotations: [], logprobs: [] }]
+        }
+      });
+      emit(completed.status === "completed" ? "response.completed" : "response.failed", {
+        response: this.responseObject(completed, body, conversation.id)
+      });
+      response.end();
+    } finally {
+      unsubscribe();
+      this.eventStreams.delete(response);
+    }
+  }
+  streamEvents(request, response, filter, options = {}) {
+    response.writeHead(200, {
+      "content-type": "text/event-stream; charset=utf-8",
+      "cache-control": "no-cache, no-transform",
+      connection: "keep-alive",
+      "x-accel-buffering": "no"
     });
-    const heartbeat = setInterval(() => response.write(": heartbeat\n\n"), 15e3);
-    const close = () => {
-      clearInterval(heartbeat);
+    this.eventStreams.add(response);
+    response.write(": glove-foundry\n\n");
+    const seen = /* @__PURE__ */ new Set();
+    let closed = false;
+    let heartbeat;
+    let unsubscribe = () => void 0;
+    const close = (end = false) => {
+      if (closed) return;
+      closed = true;
+      if (heartbeat) clearInterval(heartbeat);
       unsubscribe();
       this.eventStreams.delete(response);
+      if (end && !response.writableEnded) response.end();
     };
+    const emit = (event) => {
+      if (!matches(event, filter) || seen.has(event.id) || closed) return;
+      seen.add(event.id);
+      response.write(`id: ${event.sequence}
+data: ${JSON.stringify(event)}
+
+`);
+      if (options.closeOnTerminalRun && ["run.completed", "run.failed", "run.cancelled", "run.timeout", "run.skipped"].includes(event.type)) {
+        queueMicrotask(() => close(true));
+      }
+    };
+    unsubscribe = this.runtime.observability.subscribe(emit);
+    for (const event of this.runtime.observability.list(filter)) emit(event);
+    if (!closed) heartbeat = setInterval(() => response.write(": heartbeat\n\n"), 15e3);
     request.once("close", close);
     response.once("close", close);
   }
@@ -4600,8 +5876,6 @@ data: ${JSON.stringify(event)}
 
 export {
   writeGeneratedTypes,
-  composeAgent,
-  EMPTY_AGENT_COMPOSITION,
   TransmissionId,
   AgentDefinitionId,
   AgentId,