kira-wallet 0.1.0

package/viewer/server.py

@@ -0,0 +1,153 @@
+"""Loopback viewer with explicitly enabled, session-protected local controls."""
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+from pathlib import Path
+import argparse
+import json
+import os
+import threading
+import secrets
+import sys
+import signal
+from urllib.parse import urlparse, parse_qs
+sys.path.insert(0,str(Path(__file__).resolve().parents[1]))
+from kira_jobs import JobStore, JobError
+from kira_agent import AgentStore
+from model import ROOT, load_state, within
+from token_images import IMAGE_HOSTS
+
+STATIC=Path(__file__).resolve().parent/'static'
+lock=threading.Lock()
+last_good=None
+
+class Handler(BaseHTTPRequestHandler):
+    def local_request(self):
+        expected='127.0.0.1:'+str(self.server.server_port)
+        if self.headers.get('Host')!=expected or self.headers.get('Origin', 'http://'+expected)!='http://'+expected or self.headers.get('Sec-Fetch-Site') in ('cross-site','same-site'):
+            self.send_error(403,'Local origin required.');return False
+        return True
+
+    def authenticated(self):
+        if not getattr(self.server,'controls',False):self.send_error(403,'Local controls are disabled.');return False
+        if not secrets.compare_digest(self.headers.get('X-Kira-Session','').encode(),self.server.session_token.encode()):self.send_error(403,'Local session required.');return False
+        return True
+
+    def json(self,value,status=200):
+        self.respond(json.dumps(value).encode(),'application/json; charset=utf-8',status=status)
+
+    def do_POST(self):
+        if not self.local_request():return
+        if not getattr(self.server,'controls',False):self.send_error(501,'Local controls are disabled.');return
+        if not self.authenticated():return
+        expected='http://127.0.0.1:'+str(self.server.server_port)
+        if self.headers.get('Origin')!=expected:self.send_error(403,'Same origin required.');return
+        if self.headers.get('Content-Type')!='application/json':self.send_error(415);return
+        path=urlparse(self.path).path
+        if path not in ('/api/operations','/api/agent/test','/api/agent/settings','/api/chat/send','/api/chat/reset','/api/chat/cancel'):self.send_error(404);return
+        try:
+            self.connection.settimeout(5)
+            length=int(self.headers.get('Content-Length','0'))
+            if not 0<length<=65536:self.send_error(413);return
+            request=json.loads(self.rfile.read(length),parse_constant=lambda _: (_ for _ in ()).throw(ValueError()))
+            if not isinstance(request,dict):raise ValueError()
+            if path!='/api/operations':
+                if path in ('/api/agent/test','/api/chat/send') and json.loads((ROOT/'wallets.json').read_text()).get('demo'):
+                    raise JobError('demo_read_only','The synthetic demo does not contact model services. Run kira setup with your personal data directory.')
+                if path=='/api/agent/test':result=self.server.agent.start(request,test=True)
+                elif path=='/api/agent/settings':result=self.server.agent.configure(request)
+                elif path=='/api/chat/send':result=self.server.agent.start(request)
+                elif path=='/api/chat/reset':
+                    if request:raise ValueError()
+                    result=self.server.agent.reset()
+                else:
+                    if set(request)!={'id'}:raise ValueError()
+                    result=self.server.agent.cancel(request['id'])
+                self.json(result,202 if path in ('/api/agent/test','/api/chat/send') else 200);return
+            if json.loads((ROOT/'wallets.json').read_text()).get('demo'):
+                operation=request.get('operation')
+                if operation=='job.resume' and isinstance(request.get('input'),dict):
+                    operation=self.server.jobs.get(request['input'].get('job_id'))['operation']
+                if operation in ('wallet.add','wallet.refresh','prices.refresh'):
+                    raise JobError('demo_read_only','Sample research cannot contact providers. Use a separate personal data directory.')
+            job=self.server.jobs.submit(request)
+            if job['state']=='queued':self.server.jobs.launch()
+            self.json(job,202)
+        except JobError as error:self.json({'error':{'code':error.code,'message':str(error)}},409 if error.code=='idempotency_conflict' else 400)
+        except (ValueError,TypeError):self.json({'error':{'code':'invalid_request','message':'Expected a valid operation request.'}},400)
+        except OSError:self.json({'error':{'code':'unavailable','message':'Local storage is temporarily unavailable.'}},503)
+
+    def do_GET(self):
+        global last_good
+        if not self.local_request():return
+        path=urlparse(self.path).path
+        try:
+            if path=='/api/health':
+                self.json({'instance':os.environ.get('KIRA_INSTANCE_ID'),'read_only':not getattr(self.server,'controls',False),'controls':getattr(self.server,'controls',False)});return
+            if path=='/api/session':
+                self.json({'controls':getattr(self.server,'controls',False),'token':self.server.session_token if getattr(self.server,'controls',False) else None});return
+            if path.startswith('/api/jobs') or path.startswith('/api/chat/turn/') or path in ('/api/agent','/api/chat','/api/snapshots','/api/snapshot','/api/compare','/api/settings'):
+                if not self.authenticated():return
+                query=parse_qs(urlparse(self.path).query)
+                if path in ('/api/agent','/api/chat'):
+                    if json.loads((ROOT/'wallets.json').read_text()).get('demo'):
+                        self.json({'config':None,'providers':[],'conversation_id':None,'messages':[],'active_turn':None})
+                    else:self.json(self.server.agent.status(query.get('recheck')==['1']))
+                elif path.startswith('/api/chat/turn/'):self.json(self.server.agent.read(path.removeprefix('/api/chat/turn/')))
+                elif path=='/api/jobs':self.json(self.server.jobs.list())
+                elif path.startswith('/api/jobs/'):self.json(self.server.jobs.get(path.removeprefix('/api/jobs/')))
+                elif path=='/api/snapshots':self.json(self.server.jobs.snapshots(query.get('wallet',[''])[0]))
+                elif path=='/api/snapshot':self.json(self.server.jobs.snapshot(query.get('id',[''])[0]))
+                elif path=='/api/compare':self.json(self.server.jobs.compare(query.get('before',[''])[0],query.get('after',[''])[0]))
+                elif path=='/api/settings':
+                    from kira_config import load_config
+                    config=load_config();self.json({key:config[key] for key in ('schema_version','rpc','discovery')})
+                else:self.send_error(404)
+                return
+            if path=='/api/state':
+                with lock:
+                    try:
+                        _,body,etag=load_state();last_good=(body,etag)
+                    except (json.JSONDecodeError,FileNotFoundError):
+                        if last_good is None:raise
+                        body,etag=last_good
+                if self.headers.get('If-None-Match')=='"'+etag+'"':
+                    self.send_response(304);self.send_header('ETag','"'+etag+'"');self.send_header('Cache-Control','no-cache');self.end_headers();return
+                self.respond(body,'application/json; charset=utf-8',etag);return
+            if path.startswith('/api/report/'):
+                key=path.removeprefix('/api/report/')
+                registry=json.loads((ROOT/'wallets.json').read_text())
+                entry=next((w for w in registry['wallets'] if w['address_key']==key),None)
+                if not entry or not entry.get('latest_snapshot',{}).get('report'):self.send_error(404);return
+                body=within(ROOT,entry['latest_snapshot']['report']).read_bytes()
+                self.respond(body,'text/plain; charset=utf-8');return
+            files={'/':'index.html','/index.html':'index.html','/app.js':'app.js','/jobs.js':'jobs.js','/workspace.js':'workspace.js','/workspace-model.js':'workspace-model.js','/workspace.css':'workspace.css','/agent.js':'agent.js','/agent.css':'agent.css','/watching.js':'watching.js','/watching-model.js':'watching-model.js','/style.css':'style.css','/favicon.svg':'favicon.svg','/kira.png':'kira.png','/kira-logo.png':'kira-logo.png',**{f'/kira-{pose}.png':f'kira-{pose}.png' for pose in ('research','explain','review','attention')}}
+            if path not in files:self.send_error(404);return
+            file=STATIC/files[path]
+            content={'html':'text/html; charset=utf-8','js':'text/javascript; charset=utf-8','css':'text/css; charset=utf-8','svg':'image/svg+xml','png':'image/png'}[file.suffix[1:]]
+            self.respond(file.read_bytes(),content)
+        except JobError as error:self.json({'error':{'code':error.code,'message':str(error)}},400)
+        except (ValueError,OSError,json.JSONDecodeError):self.send_error(503,'Research data is being updated. Try again shortly.')
+
+    def respond(self,body,content,etag=None,status=200):
+        self.send_response(status);self.send_header('Content-Type',content);self.send_header('Content-Length',str(len(body)))
+        self.send_header('Cache-Control','no-cache');self.send_header('X-Content-Type-Options','nosniff')
+        self.send_header('Referrer-Policy','no-referrer');self.send_header('X-Frame-Options','DENY')
+        image_origins=' '.join('https://'+host for host in IMAGE_HOSTS)
+        self.send_header('Content-Security-Policy',"default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data: "+image_origins+"; connect-src 'self'; frame-ancestors 'none'")
+        if etag:self.send_header('ETag','"'+etag+'"')
+        self.end_headers();self.wfile.write(body)
+
+    def log_message(self,*args): pass
+
+if __name__=='__main__':
+    parser=argparse.ArgumentParser();parser.add_argument('--port',type=int,default=8765);parser.add_argument('--controls',action='store_true');args=parser.parse_args()
+    server=ThreadingHTTPServer(('127.0.0.1',args.port),Handler)
+    server.controls=args.controls;server.session_token=secrets.token_urlsafe(32)
+    if args.controls:server.jobs=JobStore(ROOT);server.agent=AgentStore(ROOT)
+    def stop_viewer(*_):raise KeyboardInterrupt()
+    signal.signal(signal.SIGTERM,stop_viewer)
+    print(f'Wallet viewer: http://127.0.0.1:{args.port}',flush=True)
+    try:server.serve_forever()
+    except KeyboardInterrupt:pass
+    finally:
+        if args.controls:server.agent.shutdown()
+        server.server_close()

package/viewer/static/agent.css

@@ -0,0 +1,100 @@
+/* A distinct, reachable composer and a deliberate account setup flow. */
+.composer { padding: 16px 18px 14px; background: #f8f6fb; }
+.composer-top { display: flex; align-items: center; justify-content: space-between; gap: 12px; margin-bottom: 9px; }
+.composer-top label { font-size: 13px; line-height: 20px; font-weight: 600; color: #493254; }
+#chat-status { color: #715c7d; font-size: 11px; line-height: 18px; }
+.composer-box { background: #fff; border: 1px solid #bcb0c8; border-radius: 14px; box-shadow: 0 2px 8px #3a294708; transition: border-color .15s, box-shadow .15s; }
+.composer-box:focus-within { border-color: #79558d; box-shadow: 0 0 0 3px #79558d1a; }
+.composer textarea { resize: none; min-height: 78px; max-height: 160px; padding: 13px 14px 6px; font-size: 14px; line-height: 1.6; outline: none; }
+.composer textarea::placeholder { color: #74677e; }
+.composer-footer { padding: 4px 8px 8px 10px; gap: 8px; }
+.model-button { display: inline-flex; align-items: center; gap: 7px; min-width: 0; min-height: 44px; max-width: calc(100% - 52px); padding: 6px 9px; border: 0; background: transparent; color: #574164; font-size: 12px; line-height: 18px; border-radius: 8px; }
+.model-button:hover { background: #f0edf5; }
+.model-button > span:nth-child(2) { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.model-button .ui-icon { width: 16px; height: 16px; }
+.model-dot { width: 6px; height: 6px; flex: none; border-radius: 50%; background: #9e90a7; }
+.model-button.connected .model-dot { background: #52795e; }
+.send-button { display: inline-flex; align-items: center; justify-content: center; width: 44px; height: 44px; flex: none; border-radius: 11px; padding: 0; background: #6b477d; color: white; opacity: 1; }
+.send-button:hover:not(:disabled) { background: #50305f; }
+.send-button:disabled { background: #eee8f3; color: #9c8aaa; cursor: default; }
+.send-button .ui-icon { width: 20px; height: 20px; stroke-width: 1.8; }
+.stop-button { background: #574164; }
+.composer-context { display: grid; gap: 4px; margin-top: 9px; color: #766480; font-size: 11px; line-height: 16px; }
+#chat-context { font-weight: 500; overflow-wrap: anywhere; }
+#chat-hint { color: #766480; font-size: 11px; }
+.composer .form-error:empty { display: none; }
+.chat-new { width: 44px; height: 44px; display: flex; align-items: center; justify-content: center; background: #ffffff60; border: 1px solid #dcd2e4; color: #654378; border-radius: 10px; flex: none; }
+.chat-new .ui-icon { width: 19px; height: 19px; }
+.chat-messages { display: grid; gap: 18px; }
+.chat-message { font-size: 14px; line-height: 1.7; color: #48374f; overflow-wrap: anywhere; }
+.chat-message p { margin: 6px 0 0; white-space: pre-wrap; }
+.chat-message strong { font-size: 11px; font-weight: 600; color: #745c81; }
+.chat-message.user { margin-left: 24px; padding: 12px 14px; border-radius: 13px 13px 3px 13px; background: #e6deed; }
+.chat-message.assistant { padding: 0 1px; }
+.chat-message.pending { color: #80688c; font-size: 13px; }
+.kira-panel.chatting .kira-scene { height: 72px; }
+.kira-panel.chatting .kira-scene img { width: 76px; height: 86px; bottom: -8px; }
+.kira-panel.chatting .scene-caption { max-width: 70%; padding-top: 16px; gap: 6px; }
+.kira-panel.chatting .scene-caption > span:first-child { font-size: 17px; line-height: 22px; }
+.kira-panel.chatting .scene-rule { display: none; }
+.kira-panel.chatting .scene-caption small { font-size: 11px; max-width: none; }
+.kira-panel.chatting #kira-note, .kira-panel.chatting .kira-quick-actions, .kira-panel.chatting .briefing-meta { display: none; }
+.kira-panel.chatting .kira-conversation { padding-top: 18px; }
+.agent-dialog { width: min(590px, calc(100% - 32px)); max-height: calc(100dvh - 40px); padding: 28px; border-radius: 20px; }
+.agent-dialog .dialog-heading { margin-bottom: 22px; align-items: flex-start; }
+.agent-dialog h2 { font-size: 27px; line-height: 1.25; letter-spacing: -.03em; font-weight: 600; }
+.agent-dialog .eyebrow { font-size: 10px; letter-spacing: .08em; color: #785e85; }
+.agent-dialog .dialog-heading { justify-content: space-between; }
+.agent-dialog h3 { font-size: 19px; line-height: 1.4; letter-spacing: -.02em; font-weight: 600; margin: 6px 0 10px; }
+.setup-progress { list-style: none; padding: 0; display: flex; justify-content: space-between; gap: 12px; margin: 0 0 24px; }
+.setup-progress li { display: flex; align-items: center; gap: 7px; font-size: 12px; color: #715c7d; }
+.setup-progress span { display: grid; place-items: center; width: 24px; height: 24px; border: 1px solid #d7cedd; border-radius: 50%; font-size: 11px; }
+.setup-progress [aria-current] { color: #5b356e; font-weight: 600; }
+.setup-progress [aria-current] span { color: white; background: #6b477d; border-color: #6b477d; }
+.setup-intro { font-size: 14px; color: #6a5d71; line-height: 1.65; margin: 0 0 18px; }
+.provider-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 12px; }
+.provider-card { padding: 18px 15px; min-height: 116px; border: 1px solid #ded5e5; border-radius: 13px; background: #fcfafc; text-align: left; color: #4f3c59; display: grid; gap: 7px; }
+.provider-card[aria-pressed=true] { border-color: #856497; background: #f0eaf5; box-shadow: 0 0 0 1px #856497; }
+.provider-card strong { font-size: 15px; line-height: 22px; font-weight: 600; }
+.provider-card small { color: #796a82; font-size: 11px; line-height: 17px; }
+.provider-card .provider-status { font-size: 12px; line-height: 18px; }
+.provider-status.ready { color: #3e7050; }
+.cli-help { margin-top: 12px; font-size: 12px; line-height: 1.6; color: #796a82; }
+.cli-command { display: flex; align-items: center; gap: 8px; margin-top: 8px; padding: 9px 12px; background: #f4f0f7; border-radius: 8px; }
+.cli-command code { flex: 1; min-width: 0; overflow-wrap: anywhere; font-size: 11px; }
+.cli-command button { min-height: 44px; border: 0; background: none; color: #654378; font-size: 12px; }
+.agent-dialog label { font-size: 13px; line-height: 1.5; }
+.model-field { margin-top: 12px; }
+.model-field span { font-weight: 400; color: #715c7d; }
+.scope-choices { border: 0; margin: 0; padding: 0; display: grid; gap: 9px; }
+.scope-choices label { display: flex; gap: 11px; align-items: flex-start; margin: 0; padding: 13px 14px; border: 1px solid #dfd6e6; border-radius: 11px; background: #fcfafc; }
+.scope-choices label:has(input:checked) { background: #f1ebf6; border-color: #9478a3; }
+.scope-choices input, .permission-choice input { width: 16px; height: 16px; flex: none; margin: 3px 0 0; accent-color: #6b477d; }
+.agent-dialog .scope-choices input[type=radio] { width: 16px; height: 16px; min-height: 16px; flex: 0 0 16px; padding: 0; }
+.agent-dialog .permission-choice input[type=checkbox] { width: 16px; height: 16px; min-height: 16px; flex: 0 0 16px; padding: 0; }
+.scope-choices strong, .permission-choice strong { display: block; font-size: 13px; font-weight: 500; line-height: 20px; }
+.scope-choices small, .permission-choice small { display: block; font-size: 12px; color: #796a82; line-height: 1.6; margin-top: 3px; }
+.agent-dialog .permission-choice { display: flex; align-items: flex-start; gap: 11px; margin: 17px 0 0; }
+.native-trust { padding-top: 16px; border-top: 1px solid #e8e0ed; }
+.setup-footer { border-top: 1px solid #e8e0ed; margin-top: 22px; padding-top: 18px; display: flex; gap: 10px; justify-content: flex-end; }
+.setup-footer button { min-height: 44px; }
+.ready-art { margin: 5px 0 10px; }
+.ready-art img { display: block; border-radius: 16px; }
+.agent-review { display: grid; grid-template-columns: 90px 1fr; gap: 10px 16px; padding: 16px; background: #f6f2f8; border-radius: 12px; font-size: 13px; line-height: 20px; margin: 16px 0; }
+.agent-review dt { color: #766480; }
+.agent-review dd { margin: 0; color: #543d60; overflow-wrap: anywhere; }
+#agent-test-status { font-size: 13px; line-height: 1.6; color: #4e7359; }
+@media (max-width: 600px) {
+  .agent-dialog { padding: 22px 18px; }
+  .agent-dialog h2 { font-size: 25px; }
+  .provider-grid { gap: 10px; }
+  .provider-card { padding: 14px 12px; }
+  .composer textarea { font-size: 16px; }
+  #chat-hint { display: none; }
+  .setup-progress { gap: 8px; }
+}
+@media (prefers-reduced-motion: reduce) { .composer-box { transition: none; } }
+@media (min-width: 981px) and (max-height: 760px) {
+  .kira-panel { position: static; height: auto; min-height: 620px; max-height: none; }
+  .kira-conversation { flex: none; overflow: visible; }
+}

package/viewer/static/agent.js

@@ -0,0 +1,203 @@
+'use strict';
+let agentState = null, agentProvider = 'codex', agentStep = 1, setupRevision = 0, agentVerified = false;
+let chatTurn = null, chatEpoch = 0, chatRequest = null, chatRetry = null, agentLoading = false, setupTesting = false, setupTurn = null, draftRevision = 0;
+let chatSignature = '', agentReady = false, chatDraftRevision = 0;
+const scopeNames = {none: 'No wallet context', wallet: 'One approved wallet', portfolio: 'Whole portfolio'};
+const agentPost = (path, body) => localAPI(path, {method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify(body)});
+function currentSetup() {
+  return {provider: agentProvider, model: $('agent-model').value.trim(), scope: document.querySelector('[name="agent-scope"]:checked').value,
+    wallet: $('agent-wallet').value || null, retain_history: $('agent-retain').checked, trust_native_cli: $('agent-trust').checked};
+}
+function invalidateSetup() { setupRevision++; agentVerified = false; $('agent-save').disabled = true; $('agent-test-status').textContent = ''; }
+function scopeLabel(config) {
+  if (!config) return 'No wallet context shared';
+  if (config.scope === 'wallet') return 'Context: ' + (state?.wallets.find(w => w.key === config.wallet)?.name || 'approved wallet');
+  return config.scope === 'portfolio' ? 'Context: whole portfolio' : 'No wallet context shared';
+}
+function renderAgent() {
+  const config = agentState?.config;
+  $('chat-model-label').textContent = config ? (config.provider === 'codex' ? 'Codex' : 'Claude') + ' · ' + (config.model || 'CLI default') : 'Connect a model';
+  $('chat-setup').classList.toggle('connected', Boolean(config));
+  $('chat-context').textContent = scopeLabel(config);
+  $('chat-status').textContent = chatTurn ? 'Kira is thinking…' : config ? (config.retain_history ? 'History saved locally' : 'History in memory') : 'Connect your account';
+  $('chat-send').hidden = Boolean(chatTurn); $('chat-stop').hidden = !chatTurn;
+  $('chat-send').disabled = !config || !localSession?.controls || !$('kira-draft').value.trim() || Boolean(chatRequest);
+  const messages = agentState?.messages || [];
+  $('kira-panel').classList.toggle('chatting', Boolean(messages.length || chatTurn));
+  const signature = JSON.stringify([messages, chatTurn, chatRequest?.message]);
+  if (signature !== chatSignature) {
+    chatSignature = signature;
+    $('chat-messages').innerHTML = messages.map(message => `<article class="chat-message ${message.role === 'user' ? 'user' : 'assistant'}"><strong>${message.role === 'user' ? 'YOU' : 'KIRA'}</strong><p>${escapeHTML(message.text)}</p></article>`).join('') + (chatTurn && chatRequest?.message ? `<article class="chat-message user"><strong>YOU</strong><p>${escapeHTML(chatRequest.message)}</p></article>` : '') + (chatTurn ? '<div class="chat-message pending"><span class="spinner" aria-hidden="true"></span> Reading the context you approved…</div>' : '');
+  }
+}
+function renderProviders() {
+  $('agent-providers').innerHTML = (agentState?.providers || []).map(row => {
+    const ready = row.installed && row.supported && row.logged_in;
+    const label = !row.installed ? 'Install CLI' : !row.supported ? 'Unsupported version' : !row.logged_in ? 'Login needed' : 'Account detected';
+    return `<button class="provider-card" type="button" data-provider="${row.id}" aria-pressed="${agentProvider === row.id}"><strong>${escapeHTML(row.name)}</strong><small>${row.id === 'codex' ? 'Your ChatGPT account' : 'Your Claude account'}${row.version ? ' · ' + escapeHTML(row.version) : ''}</small><span class="provider-status ${ready ? 'ready' : ''}">${label}</span></button>`;
+  }).join('');
+  const selected = agentState?.providers.find(p => p.id === agentProvider);
+  $('agent-cli-help').innerHTML = !selected ? '' : selected.installed && selected.supported && selected.logged_in ? 'Your native account is ready for a response check. Kira never copies its credentials.' :
+    `<p>${!selected.installed ? 'Install the official CLI in your terminal, then sign in.' : !selected.supported ? 'Use a verified version: Codex 0.158.x or Claude Code 2.1.259–2.1.x.' : 'Sign in through the official CLI in your terminal.'} <a href="${selected.url}" target="_blank" rel="noreferrer">Official setup ↗</a></p>${(!selected.installed ? [selected.install, selected.login] : [selected.login]).map(command => `<div class="cli-command"><code>${escapeHTML(command)}</code><button type="button" data-copy-cli="${escapeHTML(command)}">Copy</button></div>`).join('')}`;
+  updateStep();
+}
+function updateStep() {
+  for (let step = 1; step <= 3; step++) {
+    $('agent-step-' + step).hidden = step !== agentStep;
+    const node = document.querySelector('.setup-progress [data-step="' + step + '"]');
+    if (step === agentStep) node.setAttribute('aria-current', 'step'); else node.removeAttribute('aria-current');
+  }
+  $('agent-back').hidden = agentStep === 1; $('agent-next').hidden = agentStep === 3; $('agent-save').hidden = agentStep !== 3;
+  const selected = agentState?.providers.find(p => p.id === agentProvider);
+  $('agent-next').disabled = agentStep === 1 ? !(selected?.installed && selected.supported && selected.logged_in) : !$('agent-trust').checked || (currentSetup().scope === 'wallet' && !$('agent-wallet').value);
+  $('agent-wallet-field').hidden = currentSetup().scope !== 'wallet';
+  if (agentStep === 3) {
+    const config = currentSetup();
+    $('agent-review').innerHTML = '<dt>Account</dt><dd>' + escapeHTML(selected?.name || '') + '</dd><dt>Model</dt><dd>' + escapeHTML(config.model || 'CLI default') + '</dd><dt>Context</dt><dd>' + escapeHTML(scopeLabel(config)) + '</dd><dt>History</dt><dd>' + (config.retain_history ? 'Saved on this computer' : 'Memory only') + '</dd>';
+  }
+}
+async function loadAgent(recheck = false) {
+  if (!localSession?.controls) return;
+  const epoch = chatEpoch;
+  const status = await localAPI('/api/agent' + (recheck ? '?recheck=1' : ''));
+  if (epoch !== chatEpoch) return;
+  agentState = status; renderAgent();
+  if (agentState.active_turn && !chatTurn && !chatRequest && !setupTesting) {
+    const id = agentState.active_turn;
+    // Keep Stop available even when the first recovery lookup loses its response.
+    chatTurn = id; chatDraftRevision = draftRevision; renderAgent();
+    let turn;
+    try { turn = await localAPI('/api/chat/turn/' + encodeURIComponent(id)); }
+    catch { if (epoch === chatEpoch) { recoverResponse(id, epoch); agentReady = true; } return; }
+    if (epoch !== chatEpoch) return;
+    if (turn.state === 'running') {
+      chatTurn = turn.id; chatRequest = turn.test ? null : {message: turn.message, conversation_id: turn.conversation_id, idempotency_key: turn.id}; renderAgent();
+      recoverResponse(turn.id, epoch);
+    } else {
+      await recoverResponse(id, epoch);
+    }
+  }
+  agentReady = true;
+}
+async function openAgent() {
+  if (state?.demo) { toast('The sample workspace does not contact model services. Run kira setup for your personal workspace.'); return; }
+  if (!localSession?.controls) { toast('Start your local workspace with kira setup to enable connection settings.'); return; }
+  $('agent-error').textContent = ''; $('agent-providers').innerHTML = '<p>Checking installed accounts…</p>';
+  $('agent-dialog').showModal(); agentStep = 1; invalidateSetup();
+  try {
+    await loadAgent();
+    const config = agentState.config;
+    agentProvider = config?.provider || agentState.providers.find(p => p.installed && p.supported && p.logged_in)?.id || 'codex';
+    $('agent-model').value = config?.model || '';
+    document.querySelector('[name="agent-scope"][value="' + (config?.scope || 'none') + '"]').checked = true;
+    $('agent-wallet').innerHTML = '<option value="">Choose a wallet</option>' + (state?.wallets || []).map(w => `<option value="${escapeHTML(w.key)}">${escapeHTML(w.name)}</option>`).join('');
+    $('agent-wallet').value = config?.wallet || ''; $('agent-retain').checked = config?.retain_history || false; $('agent-trust').checked = config?.trust_native_cli || false;
+    renderProviders();
+  } catch (error) { $('agent-error').textContent = error.message; }
+}
+$('chat-setup').addEventListener('click', openAgent);
+$('settings-agent').addEventListener('click', () => { $('settings-dialog').close(); openAgent(); });
+$('agent-providers').addEventListener('click', event => {
+  const button = event.target.closest('[data-provider]'); if (!button || setupTesting) return;
+  if (agentProvider !== button.dataset.provider) { agentProvider = button.dataset.provider; $('agent-model').value = ''; invalidateSetup(); renderProviders(); }
+});
+$('agent-cli-help').addEventListener('click', async event => {
+  const button = event.target.closest('[data-copy-cli]'); if (!button) return;
+  try { await navigator.clipboard.writeText(button.dataset.copyCli); button.textContent = 'Copied'; } catch { toast('Select and copy the command in your terminal.'); }
+});
+for (const id of ['agent-model', 'agent-wallet', 'agent-retain', 'agent-trust']) $(id).addEventListener('input', () => { invalidateSetup(); updateStep(); });
+document.querySelectorAll('[name="agent-scope"]').forEach(input => input.addEventListener('change', () => { invalidateSetup(); updateStep(); }));
+$('agent-next').addEventListener('click', () => { if (!$('agent-next').disabled) { agentStep++; updateStep(); $('agent-dialog').scrollTop = 0; } });
+$('agent-back').addEventListener('click', () => { agentStep--; updateStep(); });
+$('agent-recheck').addEventListener('click', async () => {
+  $('agent-recheck').disabled = true; $('agent-error').textContent = '';
+  try { await loadAgent(true); invalidateSetup(); renderProviders(); } catch (error) { $('agent-error').textContent = error.message; }
+  finally { $('agent-recheck').disabled = false; }
+});
+async function waitTurn(id, valid) {
+  while (valid()) {
+    const turn = await localAPI('/api/chat/turn/' + encodeURIComponent(id));
+    if (turn.state !== 'running') return turn;
+    await new Promise(resolve => setTimeout(resolve, 700));
+  }
+  return null;
+}
+$('agent-test').addEventListener('click', async () => {
+  if (setupTesting) return;
+  setupTesting = true; const revision = setupRevision; $('agent-test').disabled = true; $('agent-back').disabled = true; $('agent-error').textContent = ''; $('agent-test-status').textContent = 'Checking a response with no wallet data…';
+  const id = crypto.randomUUID(); setupTurn = id;
+  try {
+    const turn = await agentPost('/api/agent/test', {config: currentSetup(), idempotency_key: id});
+    if (revision !== setupRevision) { await agentPost('/api/chat/cancel', {id: turn.id}); return; }
+    const result = await waitTurn(turn.id, () => revision === setupRevision);
+    if (!result) return;
+    if (result.state !== 'succeeded') throw new Error(result.error?.message || 'Connection check stopped. Retry before saving.');
+    if (revision === setupRevision) { agentVerified = true; $('agent-save').disabled = false; $('agent-test-status').textContent = 'Connected. Kira received a real response.'; }
+  } catch (error) { await agentPost('/api/chat/cancel', {id}).catch(() => {}); if (revision === setupRevision) { $('agent-test-status').textContent = ''; $('agent-error').textContent = error.message; } }
+  finally { setupTesting = false; setupTurn = null; $('agent-test').disabled = false; $('agent-back').disabled = false; }
+});
+$('agent-dialog').addEventListener('close', () => {
+  invalidateSetup(); if (setupTurn) agentPost('/api/chat/cancel', {id: setupTurn}).catch(() => {});
+});
+$('agent-save').addEventListener('click', async () => {
+  if (!agentVerified) return; $('agent-save').disabled = true; $('agent-error').textContent = '';
+  try {
+    await agentPost('/api/agent/settings', currentSetup()); chatEpoch++; chatTurn = null; chatRequest = null;
+    await loadAgent(); $('agent-dialog').close(); $('kira-draft').focus();
+  } catch (error) { $('agent-error').textContent = error.message; $('agent-save').disabled = false; }
+});
+$('kira-draft').addEventListener('input', () => { draftRevision++; $('draft-status').textContent = 'Draft stays in memory until sent.'; renderAgent(); });
+$('kira-draft').addEventListener('keydown', event => {
+  if (event.key === 'Enter' && !event.shiftKey && !event.isComposing && event.keyCode !== 229) { event.preventDefault(); if (!$('chat-send').disabled) $('chat-form').requestSubmit(); }
+});
+async function sendChat(event) {
+  event.preventDefault(); if (!agentState?.config || chatTurn || chatRequest) return;
+  const message = $('kira-draft').value.trim(); if (!message) return;
+  const epoch = chatEpoch, draftAtSend = draftRevision;
+  chatDraftRevision = draftAtSend;
+  chatRequest = chatRetry?.message === message && chatRetry.conversation_id === agentState.conversation_id ? chatRetry : {message, conversation_id: agentState.conversation_id, idempotency_key: crypto.randomUUID()}; chatRetry = chatRequest; renderAgent(); $('chat-error').textContent = '';
+  try {
+    const turn = await agentPost('/api/chat/send', chatRequest);
+    if (epoch !== chatEpoch) return;
+    chatTurn = turn.id; if (draftRevision === draftAtSend) $('kira-draft').value = ''; renderAgent();
+    const result = await waitTurn(turn.id, () => epoch === chatEpoch);
+    if (!result || epoch !== chatEpoch) return;
+    if (result.state !== 'succeeded') { if (!$('kira-draft').value && draftRevision === draftAtSend) $('kira-draft').value = message; chatRetry = null; throw new Error(result.error?.message || 'Response stopped. You can edit and send your message again.'); }
+    await loadAgent(); chatRetry = null; $('conversation-scroll').scrollTop = $('conversation-scroll').scrollHeight;
+  } catch (error) { if (epoch === chatEpoch) { $('chat-error').textContent = error.message; if (chatTurn && chatRetry) { recoverResponse(chatTurn, epoch); return; } } }
+  finally { if (epoch === chatEpoch && !(chatTurn && chatRetry)) { chatTurn = null; chatRequest = null; renderAgent(); if (chatRetry) loadAgent().catch(() => {}); } }
+}
+async function recoverResponse(id, epoch) {
+  try {
+    const result = await waitTurn(id, () => epoch === chatEpoch);
+    if (epoch !== chatEpoch || !result) return;
+    if (result.state !== 'succeeded') {
+      if (!$('kira-draft').value && !result.test && draftRevision === chatDraftRevision) $('kira-draft').value = chatRequest?.message || result.message || '';
+      $('chat-error').textContent = result.error?.message || 'Response stopped. You can edit and resend your message.';
+    } else $('chat-error').textContent = '';
+    const status = await localAPI('/api/agent');
+    if (epoch !== chatEpoch || chatTurn !== id) return;
+    agentState = status; chatTurn = null; chatRequest = null; chatRetry = null;
+  } catch (error) { if (epoch === chatEpoch) { $('chat-error').textContent = 'Reconnecting. ' + error.message; setTimeout(() => { if (epoch === chatEpoch && chatTurn === id) recoverResponse(id, epoch); }, 1500); } }
+  finally { if (epoch === chatEpoch) renderAgent(); }
+}
+$('chat-form').addEventListener('submit', sendChat);
+$('chat-stop').addEventListener('click', async () => {
+  const id = chatTurn; if (!id) return;
+  $('chat-stop').disabled = true;
+  try { const result = await agentPost('/api/chat/cancel', {id}); chatEpoch++; chatTurn = null; if (result.state !== 'succeeded' && chatRequest && !$('kira-draft').value) $('kira-draft').value = chatRequest.message; chatRequest = null; chatRetry = null; await loadAgent(); $('chat-error').textContent = result.state === 'succeeded' ? '' : 'Response stopped. You can edit and resend your message.'; }
+  catch (error) { $('chat-error').textContent = error.message; }
+  finally { $('chat-stop').disabled = false; renderAgent(); }
+});
+$('chat-new').addEventListener('click', async () => {
+  if (!localSession?.controls || chatRequest && !chatTurn) return;
+  try { await agentPost('/api/chat/reset', {}); chatEpoch++; chatTurn = null; chatRequest = null; chatRetry = null; await loadAgent(); $('chat-error').textContent = ''; $('kira-draft').focus(); }
+  catch (error) { $('chat-error').textContent = error.message; }
+});
+async function initialAgent() {
+  if (agentLoading || agentReady || !localSession?.controls) return; agentLoading = true;
+  try { await loadAgent(); if (new URLSearchParams(location.search).get('setup') === '1') { history.replaceState(null, '', '/#/home'); await openAgent(); } }
+  catch { /* The normal local session polling can reconnect. */ }
+  finally { agentLoading = false; }
+}
+renderAgent(); initialAgent(); const agentStartup = setInterval(() => { initialAgent(); if (agentReady) clearInterval(agentStartup); }, 1000);