leglas 1.0.0 → 1.1.0

package/dist/bin.js

@@ -2,729 +2,313 @@
 
 // src/bin.ts
 import { spawn as spawn4 } from "child_process";
+import { realpathSync as realpathSync2 } from "fs";
 import { createRequire as createRequire2 } from "module";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
-// src/args.ts
-var VALUE_FLAGS = /* @__PURE__ */ new Set(["--port", "--user-port", "--config"]);
-var BOOLEAN_FLAGS = /* @__PURE__ */ new Set(["--no-open", "--json"]);
-var MIN_SHOW_WIDTH = 320;
-var MAX_SHOW_WIDTH = 3840;
-function parsePort(flag, raw) {
-  if (!/^\d+$/.test(raw)) {
-    return { error: `${flag} needs a number, received ${JSON.stringify(raw)}.` };
-  }
-  const port = Number(raw);
-  if (port < 1 || port > 65535) {
-    return { error: `${flag} must be between 1 and 65535, received ${port}.` };
-  }
-  return port;
+// ../server/dist/log.js
+var DEFAULT_LOG_DIR = "design-log";
+function slugify(value) {
+  return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "untitled";
 }
-function parseNew(rest) {
-  let surface;
-  let print = false;
-  let json = false;
-  let from;
-  for (let index = 0; index < rest.length; index += 1) {
-    const argument = rest[index];
-    if (argument === "--from" || argument.startsWith("--from=")) {
-      from = argument.includes("=") ? argument.split("=").slice(1).join("=") : rest[index += 1];
-      if (from === void 0 || from === "") {
-        return { kind: "error", message: "--from needs a path, for example --from src/Hero.tsx" };
-      }
+function frameFor(title, requests) {
+  let found = null;
+  for (const request of requests) {
+    if (request.title !== title)
       continue;
+    for (const attachment of request.attachments ?? []) {
+      if (attachment.kind === "frame")
+        found = attachment;
     }
-    if (argument === "--print") {
-      print = true;
-      continue;
+  }
+  return found;
+}
+function askedOf(title, requests) {
+  return requests.filter((request) => request.title === title && request.status !== "failed" && request.intent.trim() !== "").map((request) => request.intent.trim());
+}
+function composeEntry(input) {
+  const slug = `${input.date}-${slugify(input.surface)}`;
+  const pictures = [];
+  const lines2 = [];
+  lines2.push(`# ${input.surface}, ${input.date}`);
+  lines2.push("");
+  lines2.push(`**${input.won.title}** won and became \`${input.won.to}\`. ${input.previews.length === 1 ? "It was the only direction." : `${input.previews.length} directions were compared.`}`);
+  lines2.push("");
+  for (const preview of input.previews) {
+    const won = preview.title === input.won.title;
+    lines2.push(`## ${preview.title}${won ? " \u2014 kept" : ""}`);
+    lines2.push("");
+    if (preview.note !== void 0 && preview.note.trim() !== "") {
+      lines2.push(preview.note.trim());
+      lines2.push("");
     }
-    if (argument === "--json") {
-      json = true;
-      continue;
+    const frame = frameFor(preview.title, input.requests);
+    if (frame !== null) {
+      const name = `${slugify(preview.title)}.png`;
+      pictures.push({ from: frame.file, to: name });
+      lines2.push(`![${preview.title}](${slug}/${name})`);
+      lines2.push("");
     }
-    if (argument === "--help" || argument === "-h") return { kind: "help" };
-    if (argument.startsWith("-")) {
-      return { kind: "error", message: `leglas new does not take ${argument}.` };
+    if (preview.basedOn !== void 0) {
+      lines2.push(`A variant of ${preview.basedOn}.`);
+      lines2.push("");
     }
-    if (surface !== void 0) {
-      return { kind: "error", message: `leglas new takes one surface name, received ${JSON.stringify(argument)} as well.` };
+    const asked = askedOf(preview.title, input.requests);
+    if (asked.length > 0) {
+      lines2.push("Asked for:");
+      lines2.push("");
+      for (const words of asked)
+        lines2.push(`- ${words}`);
+      lines2.push("");
+    }
+    const notes = input.annotations.filter((note) => note.title === preview.title);
+    if (notes.length > 0) {
+      lines2.push("Marked on the design:");
+      lines2.push("");
+      for (const note of notes)
+        lines2.push(`- ${note.note}`);
+      lines2.push("");
     }
-    surface = argument;
   }
-  if (surface === void 0) {
-    return {
-      kind: "error",
-      message: "leglas new needs a surface name, for example: npx leglas new hero"
-    };
+  const failed = input.requests.filter((request) => request.status === "failed");
+  if (failed.length > 0) {
+    lines2.push("## Changes that did not land");
+    lines2.push("");
+    for (const request of failed) {
+      const why = request.failure?.message;
+      lines2.push(`- ${request.title}: ${request.intent}${why === void 0 ? "" : ` (${why})`}`);
+    }
+    lines2.push("");
   }
-  return { kind: "new", surface, print, json, from };
+  return { slug, markdown: `${lines2.join("\n").trimEnd()}
+`, pictures };
 }
-function parseAdd(rest) {
-  let title;
-  let url;
-  let note;
-  let branch;
-  let file;
-  let basedOn;
-  let askedFor;
-  const tags = [];
-  let json = false;
-  for (let index = 0; index < rest.length; index += 1) {
-    const argument = rest[index];
-    if (argument === "--json") {
-      json = true;
-      continue;
+
+// ../server/dist/config.js
+var DEFAULT_DEV_SERVER = "http://localhost:3000";
+var DEFAULT_INSTALL_COMMAND = "npm install";
+var IMPLICIT_PREVIEW = { title: "App", url: "/" };
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isValidOrigin(value) {
+  try {
+    const url = new URL(value);
+    return url.protocol === "http:" || url.protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+function isSafeBranch(value) {
+  if (value === "" || value.startsWith("-"))
+    return false;
+  if (value.split("/").some((segment) => segment === "." || segment === ".."))
+    return false;
+  return /^[A-Za-z0-9._/-]+$/.test(value);
+}
+function isValidPreviewUrl(value) {
+  return value.startsWith("/") || isValidOrigin(value);
+}
+function isSafePreviewFile(value) {
+  if (value === "" || value.startsWith("/") || value.startsWith("\\"))
+    return false;
+  if (/^[A-Za-z]:/.test(value))
+    return false;
+  return !value.split(/[/\\]/).some((segment) => segment === "..");
+}
+function normalizeConfig(raw, options = {}) {
+  const requireDevCommand = options.requireDevCommand ?? true;
+  const errors = [];
+  const source = raw === void 0 || raw === null ? {} : raw;
+  if (!isRecord(source)) {
+    return { config: null, errors: ["Config must export an object."] };
+  }
+  const devServer = source["devServer"] ?? DEFAULT_DEV_SERVER;
+  if (typeof devServer !== "string" || !isValidOrigin(devServer)) {
+    errors.push(`devServer must be an http(s) URL, received ${JSON.stringify(devServer)}.`);
+  }
+  const rawPreviews = source["previews"] ?? [IMPLICIT_PREVIEW];
+  if (!Array.isArray(rawPreviews)) {
+    errors.push(`previews must be an array, received ${JSON.stringify(rawPreviews)}.`);
+    return { config: null, errors };
+  }
+  const previews = [];
+  const seenTitles = /* @__PURE__ */ new Set();
+  rawPreviews.forEach((entry2, index) => {
+    const at = `previews[${index}]`;
+    if (!isRecord(entry2)) {
+      errors.push(`${at} must be an object.`);
+      return;
     }
-    if (argument === "--help" || argument === "-h") return { kind: "help" };
-    const equals = argument.indexOf("=");
-    const flag = equals === -1 ? argument : argument.slice(0, equals);
-    let value;
-    if (equals === -1) {
-      value = rest[index + 1];
-      index += 1;
+    const title = entry2["title"];
+    const url = entry2["url"];
+    const file = entry2["file"];
+    if (typeof title !== "string" || title.trim() === "") {
+      errors.push(`${at} needs a title; the rail has nothing to show without one.`);
+    } else if (seenTitles.has(title)) {
+      errors.push(`${at} repeats the title ${JSON.stringify(title)}; titles must be unique.`);
     } else {
-      value = argument.slice(equals + 1);
+      seenTitles.add(title);
     }
-    if (!["--title", "--url", "--note", "--tag", "--branch", "--file", "--based-on", "--asked-for"].includes(
-      flag
-    )) {
-      return { kind: "error", message: `leglas add does not take ${flag}.` };
+    if (file !== void 0) {
+      if (typeof file !== "string" || !isSafePreviewFile(file)) {
+        errors.push(`${at} has an unusable file ${JSON.stringify(file)}; use a path inside the project, like "directions/hero.html".`);
+      }
+      if (url !== void 0) {
+        errors.push(`${at} names a file and a url; a file preview's url is assigned by Leglas.`);
+      }
+    } else if (typeof url !== "string" || url.trim() === "") {
+      errors.push(`${at} needs a url.`);
+    } else if (!isValidPreviewUrl(url)) {
+      errors.push(`${at} has url ${JSON.stringify(url)}; use a root-relative path ("/pricing") or a full URL.`);
     }
-    if (value === void 0 || value === "") {
-      return { kind: "error", message: `${flag} needs a value.` };
+    const branch = entry2["branch"];
+    if (branch !== void 0) {
+      if (typeof branch !== "string" || !isSafeBranch(branch)) {
+        errors.push(`${at} has an unusable branch ${JSON.stringify(branch)}; use a plain git branch name.`);
+      } else if (typeof url === "string" && !url.startsWith("/")) {
+        errors.push(`${at} names a branch and an absolute url; a branch preview is served by Leglas, so its url must be a path.`);
+      }
+      if (file !== void 0) {
+        errors.push(`${at} names a branch and a file; a file preview is served by Leglas itself and has no checkout.`);
+      }
     }
-    if (flag === "--title") title = value;
-    else if (flag === "--url") url = value;
-    else if (flag === "--note") note = value;
-    else if (flag === "--branch") branch = value;
-    else if (flag === "--file") file = value;
-    else if (flag === "--based-on") basedOn = value;
-    else if (flag === "--asked-for") askedFor = value;
-    else tags.push(value);
+    const basedOn = entry2["basedOn"];
+    if (basedOn !== void 0 && (typeof basedOn !== "string" || basedOn.trim() === "")) {
+      errors.push(`${at} has a basedOn that is not a direction title.`);
+    }
+    const askedFor = entry2["askedFor"];
+    if (askedFor !== void 0 && (typeof askedFor !== "string" || askedFor.trim() === "")) {
+      errors.push(`${at} has an askedFor that is not a change request.`);
+    }
+    const tags = entry2["tags"];
+    previews.push({
+      title: typeof title === "string" ? title : "",
+      url: typeof url === "string" ? url : "",
+      note: typeof entry2["note"] === "string" ? entry2["note"] : void 0,
+      tags: Array.isArray(tags) ? tags.filter((tag) => typeof tag === "string") : [],
+      ...typeof branch === "string" ? { branch } : {},
+      ...typeof file === "string" ? { file } : {},
+      ...typeof basedOn === "string" && basedOn.trim() !== "" ? { basedOn } : {},
+      ...typeof askedFor === "string" && askedFor.trim() !== "" ? { askedFor } : {}
+    });
+  });
+  const devCommand = source["devCommand"];
+  if (devCommand !== void 0 && typeof devCommand !== "string") {
+    errors.push("devCommand must be a string.");
+  } else if (typeof devCommand === "string" && !devCommand.includes("{port}")) {
+    errors.push(`devCommand must include {port}, so Leglas can start each checkout on a free port. Received ${JSON.stringify(devCommand)}.`);
   }
-  if (title === void 0) {
-    return { kind: "error", message: "leglas add needs --title, which is how the preview is identified." };
+  if (requireDevCommand && previews.some((preview) => preview.branch !== void 0) && devCommand === void 0) {
+    errors.push("A preview names a branch, so devCommand is required: Leglas has to start that checkout itself.");
   }
-  if (url === void 0 && file === void 0) {
-    return {
-      kind: "error",
-      message: "leglas add needs --url (for example --url '/?v-hero=aurora') or --file for a page Leglas serves itself."
-    };
+  const logDir = source["logDir"] ?? DEFAULT_LOG_DIR;
+  if (typeof logDir !== "string" || logDir.trim() === "") {
+    errors.push("logDir must be a non-empty string.");
+  }
+  const installCommand = source["installCommand"] ?? DEFAULT_INSTALL_COMMAND;
+  if (typeof installCommand !== "string" || installCommand.trim() === "") {
+    errors.push("installCommand must be a non-empty string.");
   }
+  const scanPreviews = source["scanPreviews"] ?? true;
+  if (typeof scanPreviews !== "boolean") {
+    errors.push("scanPreviews must be a boolean.");
+  }
+  if (errors.length > 0)
+    return { config: null, errors };
   return {
-    kind: "add",
-    preview: {
-      title,
-      url,
-      note,
-      tags: tags.length > 0 ? tags : void 0,
-      branch,
-      file,
-      basedOn,
-      askedFor
+    config: {
+      devServer,
+      previews,
+      scanPreviews,
+      devCommand: typeof devCommand === "string" ? devCommand : void 0,
+      installCommand,
+      logDir
     },
-    json
+    errors: []
   };
 }
-function parseClassify(rest) {
-  const changes = [];
-  let json = false;
-  for (let index = 0; index < rest.length; index += 1) {
-    const argument = rest[index];
-    if (argument === "--json") {
-      json = true;
+
+// ../server/dist/agent-command.js
+var WATCH_PATH = ".leglas/watch.json";
+var PROMPT_TOKEN = "{prompt}";
+var EXAMPLE = `npx leglas watch --run "claude -p ${PROMPT_TOKEN}"`;
+function tokenize(template) {
+  const tokens = [];
+  let current = "";
+  let started = false;
+  let quote = null;
+  for (const character of template) {
+    if (quote !== null) {
+      if (character === quote)
+        quote = null;
+      else
+        current += character;
       continue;
     }
-    if (argument === "--help" || argument === "-h") return { kind: "help" };
-    const equals = argument.indexOf("=");
-    const flag = equals === -1 ? argument : argument.slice(0, equals);
-    if (flag !== "--change" && flag !== "--rewrite") {
-      return { kind: "error", message: `leglas classify does not take ${argument}.` };
+    if (character === '"' || character === "'") {
+      quote = character;
+      started = true;
+      continue;
     }
-    const value = equals === -1 ? rest[index += 1] : argument.slice(equals + 1);
-    if (value === void 0 || value === "") {
-      return { kind: "error", message: `${flag} needs a path, for example ${flag} package.json` };
+    if (/\s/.test(character)) {
+      if (started)
+        tokens.push(current);
+      current = "";
+      started = false;
+      continue;
     }
-    changes.push({ path: value, kind: flag === "--change" ? "change" : "rewrite" });
+    current += character;
+    started = true;
   }
-  if (changes.length === 0) {
-    return {
-      kind: "error",
-      message: "leglas classify needs what the direction will touch, for example: npx leglas classify --change package.json --rewrite src/theme.css"
-    };
+  if (quote !== null) {
+    return { ok: false, error: `The agent command has an unclosed ${quote} quote.` };
   }
-  return { kind: "classify", changes, json };
+  if (started)
+    tokens.push(current);
+  return { ok: true, tokens };
 }
-function parseWatch(rest) {
-  let run4;
-  let port;
-  for (let index = 0; index < rest.length; index += 1) {
-    const argument = rest[index];
-    if (argument === "--help" || argument === "-h") return { kind: "help" };
-    const equals = argument.indexOf("=");
-    const flag = equals === -1 ? argument : argument.slice(0, equals);
-    if (flag !== "--run" && flag !== "--port") {
-      return { kind: "error", message: `leglas watch does not take ${argument}.` };
-    }
-    const value = equals === -1 ? rest[index += 1] : argument.slice(equals + 1);
-    if (value === void 0 || value === "") {
-      return {
-        kind: "error",
-        message: flag === "--run" ? '--run needs an agent command, for example --run "claude -p {prompt}"' : "--port needs a value."
-      };
-    }
-    if (flag === "--run") {
-      run4 = value;
-      continue;
-    }
-    const parsed2 = parsePort(flag, value);
-    if (typeof parsed2 !== "number") return { kind: "error", message: parsed2.error };
-    port = parsed2;
+function parseTemplate(raw) {
+  const tokenized = tokenize(raw);
+  if (!tokenized.ok)
+    return tokenized;
+  const { tokens } = tokenized;
+  const [command, ...args] = tokens;
+  if (command === void 0) {
+    return { ok: false, error: `Watch needs an agent command, for example: ${EXAMPLE}` };
   }
-  return { kind: "watch", run: run4, port };
-}
-function parseArgs(argv) {
-  if (argv[0] === "new") return parseNew(argv.slice(1));
-  if (argv[0] === "watch") return parseWatch(argv.slice(1));
-  if (argv[0] === "add") return parseAdd(argv.slice(1));
-  if (argv[0] === "classify") return parseClassify(argv.slice(1));
-  if (argv[0] === "init") {
-    const rest = argv.slice(1);
-    const unknown = rest.find((argument) => argument !== "--force" && argument !== "--json");
-    if (unknown !== void 0) {
-      return { kind: "error", message: `leglas init does not take ${unknown}.` };
-    }
-    return { kind: "init", force: rest.includes("--force"), json: rest.includes("--json") };
+  if (tokens.some((token) => token !== PROMPT_TOKEN && token.includes(PROMPT_TOKEN))) {
+    return {
+      ok: false,
+      error: `${PROMPT_TOKEN} must stand as a word of its own, for example: ${EXAMPLE}`
+    };
   }
-  if (argv[0] === "keep") {
-    const rest = argv.slice(1);
-    let title;
-    let to;
-    let json = false;
-    for (let index = 0; index < rest.length; index += 1) {
-      const argument = rest[index];
-      if (argument === "--json") {
-        json = true;
-        continue;
-      }
-      if (argument === "--to" || argument.startsWith("--to=")) {
-        to = argument.includes("=") ? argument.split("=").slice(1).join("=") : rest[index += 1];
-        if (to === void 0 || to === "") {
-          return { kind: "error", message: "--to needs a path, for example --to src/components/hero.tsx" };
-        }
-        continue;
-      }
-      if (argument.startsWith("-")) {
-        return { kind: "error", message: `leglas keep does not take ${argument}.` };
-      }
-      if (title !== void 0) {
-        return { kind: "error", message: "leglas keep takes one direction title." };
-      }
-      title = argument;
-    }
-    if (title === void 0) {
-      return {
-        kind: "error",
-        message: 'leglas keep needs a direction title, for example: npx leglas keep "Aurora" --to src/components/hero.tsx'
-      };
-    }
-    if (to === void 0) {
-      return { kind: "error", message: "leglas keep needs --to, the path the winner should live at." };
-    }
-    return { kind: "keep", title, to, json };
+  const placeholders = tokens.filter((token) => token === PROMPT_TOKEN).length;
+  if (placeholders > 1) {
+    return {
+      ok: false,
+      error: `The agent command takes ${PROMPT_TOKEN} once, for example: ${EXAMPLE}`
+    };
   }
-  if (argv[0] === "explore") {
-    const rest = argv.slice(1);
-    let surface;
-    let count = 3;
-    let basedOn = null;
-    let json = false;
-    for (let index = 0; index < rest.length; index += 1) {
-      const argument = rest[index];
-      if (argument === "--json") {
-        json = true;
-        continue;
-      }
-      if (argument === "--count" || argument.startsWith("--count=")) {
-        const raw = argument.includes("=") ? argument.split("=")[1] : rest[index += 1];
-        if (raw === void 0 || !/^\d+$/.test(raw)) {
-          return { kind: "error", message: "--count needs a number, for example --count 6." };
-        }
-        count = Number(raw);
-        continue;
-      }
-      if (argument === "--based-on" || argument.startsWith("--based-on=")) {
-        const raw = argument.includes("=") ? argument.split("=")[1] : rest[index += 1];
-        if (raw === void 0 || raw === "") {
-          return {
-            kind: "error",
-            message: '--based-on needs a direction title, for example --based-on "Aurora".'
-          };
-        }
-        basedOn = raw;
-        continue;
-      }
-      if (argument.startsWith("-")) {
-        return { kind: "error", message: `leglas explore does not take ${argument}.` };
-      }
-      if (surface !== void 0) {
-        return { kind: "error", message: "leglas explore takes one surface name." };
-      }
-      surface = argument;
-    }
-    if (surface === void 0) {
-      return {
-        kind: "error",
-        message: "leglas explore needs a surface name, for example: npx leglas explore hero --count 6"
-      };
-    }
-    return { kind: "explore", surface, count, basedOn, json };
+  if (command === PROMPT_TOKEN) {
+    return {
+      ok: false,
+      error: `The agent command must name a program before ${PROMPT_TOKEN}, for example: ${EXAMPLE}`
+    };
   }
-  if (argv[0] === "requests") {
-    const rest = argv.slice(1);
-    const unknown = rest.find((argument) => argument !== "--json" && argument !== "--clear");
-    if (unknown !== void 0) {
-      return { kind: "error", message: `leglas requests does not take ${unknown}.` };
-    }
-    return { kind: "requests", json: rest.includes("--json"), clear: rest.includes("--clear") };
+  return { ok: true, template: { command, args } };
+}
+function commandFor(template, prompt) {
+  if (!template.args.includes(PROMPT_TOKEN)) {
+    return { command: template.command, args: [...template.args, prompt] };
   }
-  if (argv[0] === "log") {
-    const rest = argv.slice(1);
-    const flags = rest.filter((argument) => argument.startsWith("--"));
-    const unknown = flags.find((flag) => flag !== "--json");
-    if (unknown !== void 0) {
-      return { kind: "error", message: `leglas log does not take ${unknown}.` };
-    }
-    const names = rest.filter((argument) => !argument.startsWith("--"));
-    if (names.length > 1) {
-      return { kind: "error", message: "leglas log takes one entry at most." };
-    }
-    return { kind: "log", entry: names[0] ?? null, json: flags.includes("--json") };
-  }
-  if (argv[0] === "list") {
-    const rest = argv.slice(1);
-    const unknown = rest.find((argument) => argument !== "--json");
-    if (unknown !== void 0) {
-      return { kind: "error", message: `leglas list does not take ${unknown}.` };
-    }
-    return { kind: "list", json: rest.includes("--json") };
-  }
-  if (argv[0] === "show") {
-    const rest = argv.slice(1);
-    let title;
-    let json = false;
-    let screenshot = false;
-    let width = null;
-    let port = null;
-    for (let index = 0; index < rest.length; index += 1) {
-      const argument = rest[index];
-      if (argument === "--json") {
-        json = true;
-        continue;
-      }
-      if (argument === "--screenshot") {
-        screenshot = true;
-        continue;
-      }
-      if (argument === "--width" || argument.startsWith("--width=") || argument === "--port" || argument.startsWith("--port=")) {
-        const equals = argument.indexOf("=");
-        const flag = equals === -1 ? argument : argument.slice(0, equals);
-        const raw = equals === -1 ? rest[index += 1] : argument.slice(equals + 1);
-        if (raw === void 0 || raw === "") {
-          return { kind: "error", message: `${flag} needs a value.` };
-        }
-        if (flag === "--port") {
-          const parsed2 = parsePort(flag, raw);
-          if (typeof parsed2 !== "number") return { kind: "error", message: parsed2.error };
-          port = parsed2;
-          continue;
-        }
-        if (!/^\d+$/.test(raw)) {
-          return { kind: "error", message: `--width needs a number, received ${JSON.stringify(raw)}.` };
-        }
-        width = Number(raw);
-        if (width < MIN_SHOW_WIDTH || width > MAX_SHOW_WIDTH) {
-          return {
-            kind: "error",
-            message: `--width must be between ${MIN_SHOW_WIDTH} and ${MAX_SHOW_WIDTH}, received ${width}.`
-          };
-        }
-        continue;
-      }
-      if (argument.startsWith("-")) {
-        return { kind: "error", message: `leglas show does not take ${argument}.` };
-      }
-      if (title !== void 0) {
-        return { kind: "error", message: "leglas show takes one direction title." };
-      }
-      title = argument;
-    }
-    if (title === void 0) {
-      return {
-        kind: "error",
-        message: 'leglas show needs a direction title, for example: npx leglas show "Aurora" --json'
-      };
-    }
-    if (width !== null && !screenshot) {
-      return { kind: "error", message: "leglas show --width needs --screenshot." };
-    }
-    if (port !== null && !screenshot) {
-      return { kind: "error", message: "leglas show --port needs --screenshot." };
-    }
-    return { kind: "show", title, json, screenshot, width, port };
-  }
-  const options = {
-    port: void 0,
-    userPort: void 0,
-    configPath: void 0,
-    open: true,
-    json: false
+  return {
+    command: template.command,
+    args: template.args.map((argument) => argument === PROMPT_TOKEN ? prompt : argument)
   };
-  for (let index = 0; index < argv.length; index += 1) {
-    const argument = argv[index];
-    if (argument === "--help" || argument === "-h") return { kind: "help" };
-    if (argument === "--version" || argument === "-v") return { kind: "version" };
-    if (BOOLEAN_FLAGS.has(argument)) {
-      if (argument === "--no-open") options.open = false;
-      if (argument === "--json") options.json = true;
-      continue;
-    }
-    const equals = argument.indexOf("=");
-    const flag = equals === -1 ? argument : argument.slice(0, equals);
-    if (!VALUE_FLAGS.has(flag)) {
-      return {
-        kind: "error",
-        message: argument.startsWith("-") ? `Unknown flag ${argument}. Run leglas --help to see the options.` : `Unexpected argument ${JSON.stringify(argument)}. leglas takes flags only.`
-      };
-    }
-    let value;
-    if (equals === -1) {
-      value = argv[index + 1];
-      index += 1;
-    } else {
-      value = argument.slice(equals + 1);
-    }
-    if (value === void 0 || value === "" || value.startsWith("--")) {
-      return { kind: "error", message: `${flag} needs a value.` };
-    }
-    if (flag === "--config") {
-      options.configPath = value;
-      continue;
-    }
-    const port = parsePort(flag, value);
-    if (typeof port !== "number") return { kind: "error", message: port.error };
-    if (flag === "--port") options.port = port;
-    else options.userPort = port;
-  }
-  return { kind: "run", options };
-}
-
-// src/run-classify.ts
-import { stat as stat4 } from "fs/promises";
-import { join as join13 } from "path";
-
-// ../server/dist/log.js
-var DEFAULT_LOG_DIR = "design-log";
-function slugify(value) {
-  return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "untitled";
-}
-function frameFor(title, requests) {
-  let found = null;
-  for (const request of requests) {
-    if (request.title !== title)
-      continue;
-    for (const attachment of request.attachments ?? []) {
-      if (attachment.kind === "frame")
-        found = attachment;
-    }
-  }
-  return found;
-}
-function askedOf(title, requests) {
-  return requests.filter((request) => request.title === title && request.status !== "failed" && request.intent.trim() !== "").map((request) => request.intent.trim());
 }
-function composeEntry(input) {
-  const slug = `${input.date}-${slugify(input.surface)}`;
-  const pictures = [];
-  const lines2 = [];
-  lines2.push(`# ${input.surface}, ${input.date}`);
-  lines2.push("");
-  lines2.push(`**${input.won.title}** won and became \`${input.won.to}\`. ${input.previews.length === 1 ? "It was the only direction." : `${input.previews.length} directions were compared.`}`);
-  lines2.push("");
-  for (const preview of input.previews) {
-    const won = preview.title === input.won.title;
-    lines2.push(`## ${preview.title}${won ? " \u2014 kept" : ""}`);
-    lines2.push("");
-    if (preview.note !== void 0 && preview.note.trim() !== "") {
-      lines2.push(preview.note.trim());
-      lines2.push("");
-    }
-    const frame = frameFor(preview.title, input.requests);
-    if (frame !== null) {
-      const name = `${slugify(preview.title)}.png`;
-      pictures.push({ from: frame.file, to: name });
-      lines2.push(`![${preview.title}](${slug}/${name})`);
-      lines2.push("");
-    }
-    if (preview.basedOn !== void 0) {
-      lines2.push(`A variant of ${preview.basedOn}.`);
-      lines2.push("");
-    }
-    const asked = askedOf(preview.title, input.requests);
-    if (asked.length > 0) {
-      lines2.push("Asked for:");
-      lines2.push("");
-      for (const words of asked)
-        lines2.push(`- ${words}`);
-      lines2.push("");
-    }
-    const notes = input.annotations.filter((note) => note.title === preview.title);
-    if (notes.length > 0) {
-      lines2.push("Marked on the design:");
-      lines2.push("");
-      for (const note of notes)
-        lines2.push(`- ${note.note}`);
-      lines2.push("");
-    }
-  }
-  const failed = input.requests.filter((request) => request.status === "failed");
-  if (failed.length > 0) {
-    lines2.push("## Changes that did not land");
-    lines2.push("");
-    for (const request of failed) {
-      const why = request.failure?.message;
-      lines2.push(`- ${request.title}: ${request.intent}${why === void 0 ? "" : ` (${why})`}`);
-    }
-    lines2.push("");
-  }
-  return { slug, markdown: `${lines2.join("\n").trimEnd()}
-`, pictures };
-}
-
-// ../server/dist/config.js
-var DEFAULT_DEV_SERVER = "http://localhost:3000";
-var DEFAULT_INSTALL_COMMAND = "npm install";
-var IMPLICIT_PREVIEW = { title: "App", url: "/" };
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isValidOrigin(value) {
-  try {
-    const url = new URL(value);
-    return url.protocol === "http:" || url.protocol === "https:";
-  } catch {
-    return false;
-  }
-}
-function isSafeBranch(value) {
-  if (value === "" || value.startsWith("-"))
-    return false;
-  if (value.split("/").some((segment) => segment === "." || segment === ".."))
-    return false;
-  return /^[A-Za-z0-9._/-]+$/.test(value);
-}
-function isValidPreviewUrl(value) {
-  return value.startsWith("/") || isValidOrigin(value);
-}
-function isSafePreviewFile(value) {
-  if (value === "" || value.startsWith("/") || value.startsWith("\\"))
-    return false;
-  if (/^[A-Za-z]:/.test(value))
-    return false;
-  return !value.split(/[/\\]/).some((segment) => segment === "..");
-}
-function normalizeConfig(raw, options = {}) {
-  const requireDevCommand = options.requireDevCommand ?? true;
-  const errors = [];
-  const source = raw === void 0 || raw === null ? {} : raw;
-  if (!isRecord(source)) {
-    return { config: null, errors: ["Config must export an object."] };
-  }
-  const devServer = source["devServer"] ?? DEFAULT_DEV_SERVER;
-  if (typeof devServer !== "string" || !isValidOrigin(devServer)) {
-    errors.push(`devServer must be an http(s) URL, received ${JSON.stringify(devServer)}.`);
-  }
-  const rawPreviews = source["previews"] ?? [IMPLICIT_PREVIEW];
-  if (!Array.isArray(rawPreviews)) {
-    errors.push(`previews must be an array, received ${JSON.stringify(rawPreviews)}.`);
-    return { config: null, errors };
-  }
-  const previews = [];
-  const seenTitles = /* @__PURE__ */ new Set();
-  rawPreviews.forEach((entry, index) => {
-    const at = `previews[${index}]`;
-    if (!isRecord(entry)) {
-      errors.push(`${at} must be an object.`);
-      return;
-    }
-    const title = entry["title"];
-    const url = entry["url"];
-    const file = entry["file"];
-    if (typeof title !== "string" || title.trim() === "") {
-      errors.push(`${at} needs a title; the rail has nothing to show without one.`);
-    } else if (seenTitles.has(title)) {
-      errors.push(`${at} repeats the title ${JSON.stringify(title)}; titles must be unique.`);
-    } else {
-      seenTitles.add(title);
-    }
-    if (file !== void 0) {
-      if (typeof file !== "string" || !isSafePreviewFile(file)) {
-        errors.push(`${at} has an unusable file ${JSON.stringify(file)}; use a path inside the project, like "directions/hero.html".`);
-      }
-      if (url !== void 0) {
-        errors.push(`${at} names a file and a url; a file preview's url is assigned by Leglas.`);
-      }
-    } else if (typeof url !== "string" || url.trim() === "") {
-      errors.push(`${at} needs a url.`);
-    } else if (!isValidPreviewUrl(url)) {
-      errors.push(`${at} has url ${JSON.stringify(url)}; use a root-relative path ("/pricing") or a full URL.`);
-    }
-    const branch = entry["branch"];
-    if (branch !== void 0) {
-      if (typeof branch !== "string" || !isSafeBranch(branch)) {
-        errors.push(`${at} has an unusable branch ${JSON.stringify(branch)}; use a plain git branch name.`);
-      } else if (typeof url === "string" && !url.startsWith("/")) {
-        errors.push(`${at} names a branch and an absolute url; a branch preview is served by Leglas, so its url must be a path.`);
-      }
-      if (file !== void 0) {
-        errors.push(`${at} names a branch and a file; a file preview is served by Leglas itself and has no checkout.`);
-      }
-    }
-    const basedOn = entry["basedOn"];
-    if (basedOn !== void 0 && (typeof basedOn !== "string" || basedOn.trim() === "")) {
-      errors.push(`${at} has a basedOn that is not a direction title.`);
-    }
-    const askedFor = entry["askedFor"];
-    if (askedFor !== void 0 && (typeof askedFor !== "string" || askedFor.trim() === "")) {
-      errors.push(`${at} has an askedFor that is not a change request.`);
-    }
-    const tags = entry["tags"];
-    previews.push({
-      title: typeof title === "string" ? title : "",
-      url: typeof url === "string" ? url : "",
-      note: typeof entry["note"] === "string" ? entry["note"] : void 0,
-      tags: Array.isArray(tags) ? tags.filter((tag) => typeof tag === "string") : [],
-      ...typeof branch === "string" ? { branch } : {},
-      ...typeof file === "string" ? { file } : {},
-      ...typeof basedOn === "string" && basedOn.trim() !== "" ? { basedOn } : {},
-      ...typeof askedFor === "string" && askedFor.trim() !== "" ? { askedFor } : {}
-    });
-  });
-  const devCommand = source["devCommand"];
-  if (devCommand !== void 0 && typeof devCommand !== "string") {
-    errors.push("devCommand must be a string.");
-  } else if (typeof devCommand === "string" && !devCommand.includes("{port}")) {
-    errors.push(`devCommand must include {port}, so Leglas can start each checkout on a free port. Received ${JSON.stringify(devCommand)}.`);
-  }
-  if (requireDevCommand && previews.some((preview) => preview.branch !== void 0) && devCommand === void 0) {
-    errors.push("A preview names a branch, so devCommand is required: Leglas has to start that checkout itself.");
-  }
-  const logDir = source["logDir"] ?? DEFAULT_LOG_DIR;
-  if (typeof logDir !== "string" || logDir.trim() === "") {
-    errors.push("logDir must be a non-empty string.");
-  }
-  const installCommand = source["installCommand"] ?? DEFAULT_INSTALL_COMMAND;
-  if (typeof installCommand !== "string" || installCommand.trim() === "") {
-    errors.push("installCommand must be a non-empty string.");
-  }
-  const scanPreviews = source["scanPreviews"] ?? true;
-  if (typeof scanPreviews !== "boolean") {
-    errors.push("scanPreviews must be a boolean.");
-  }
-  if (errors.length > 0)
-    return { config: null, errors };
-  return {
-    config: {
-      devServer,
-      previews,
-      scanPreviews,
-      devCommand: typeof devCommand === "string" ? devCommand : void 0,
-      installCommand,
-      logDir
-    },
-    errors: []
-  };
-}
-
-// ../server/dist/agent-command.js
-var WATCH_PATH = ".leglas/watch.json";
-var PROMPT_TOKEN = "{prompt}";
-var EXAMPLE = `npx leglas watch --run "claude -p ${PROMPT_TOKEN}"`;
-function tokenize(template) {
-  const tokens = [];
-  let current = "";
-  let started = false;
-  let quote = null;
-  for (const character of template) {
-    if (quote !== null) {
-      if (character === quote)
-        quote = null;
-      else
-        current += character;
-      continue;
-    }
-    if (character === '"' || character === "'") {
-      quote = character;
-      started = true;
-      continue;
-    }
-    if (/\s/.test(character)) {
-      if (started)
-        tokens.push(current);
-      current = "";
-      started = false;
-      continue;
-    }
-    current += character;
-    started = true;
-  }
-  if (quote !== null) {
-    return { ok: false, error: `The agent command has an unclosed ${quote} quote.` };
-  }
-  if (started)
-    tokens.push(current);
-  return { ok: true, tokens };
-}
-function parseTemplate(raw) {
-  const tokenized = tokenize(raw);
-  if (!tokenized.ok)
-    return tokenized;
-  const { tokens } = tokenized;
-  const [command, ...args] = tokens;
-  if (command === void 0) {
-    return { ok: false, error: `Watch needs an agent command, for example: ${EXAMPLE}` };
-  }
-  if (tokens.some((token) => token !== PROMPT_TOKEN && token.includes(PROMPT_TOKEN))) {
-    return {
-      ok: false,
-      error: `${PROMPT_TOKEN} must stand as a word of its own, for example: ${EXAMPLE}`
-    };
-  }
-  const placeholders = tokens.filter((token) => token === PROMPT_TOKEN).length;
-  if (placeholders > 1) {
-    return {
-      ok: false,
-      error: `The agent command takes ${PROMPT_TOKEN} once, for example: ${EXAMPLE}`
-    };
-  }
-  if (command === PROMPT_TOKEN) {
-    return {
-      ok: false,
-      error: `The agent command must name a program before ${PROMPT_TOKEN}, for example: ${EXAMPLE}`
-    };
-  }
-  return { ok: true, template: { command, args } };
-}
-function commandFor(template, prompt) {
-  if (!template.args.includes(PROMPT_TOKEN)) {
-    return { command: template.command, args: [...template.args, prompt] };
-  }
-  return {
-    command: template.command,
-    args: template.args.map((argument) => argument === PROMPT_TOKEN ? prompt : argument)
-  };
-}
-function nextRequest(requests, failed) {
-  return requests.find((request) => request.status === "queued" && !failed.has(request.id)) ?? null;
+function nextRequest(requests, failed) {
+  return requests.find((request) => request.status === "queued" && !failed.has(request.id)) ?? null;
 }
 
 // ../server/dist/agents.js
@@ -857,13 +441,21 @@ var KNOWN_AGENTS = {
     name: "Cursor",
     binary: "cursor-agent",
     efforts: [],
+    // `--trust` on every invocation. Without it, print mode stops at a
+    // "Workspace Trust Required" prompt nothing can answer and exits 1 with
+    // no events, in any directory Cursor has not been trusted for by hand:
+    // measured against cursor-agent 2026.09.02, one second, zero output. The
+    // project is the one the user pointed Leglas at, which is the trust the
+    // flag grants. It is the only permission the run needs: with it alone,
+    // the edit and the shell command in the same run both executed.
     args: (prompt, _effort = null, _images = []) => [
       "-p",
       prompt,
       "--output-format",
-      "stream-json"
+      "stream-json",
+      "--trust"
     ],
-    terminalArgs: (prompt, _effort = null, _images = []) => ["-p", prompt],
+    terminalArgs: (prompt, _effort = null, _images = []) => ["-p", prompt, "--trust"],
     // `--resume [chatId]` is documented alongside `--continue` in the CLI
     // parameter reference, and every stream-json event carries the
     // `session_id` to feed it. Cursor exposes no persistent transport the way
@@ -874,11 +466,16 @@ var KNOWN_AGENTS = {
     // Images are accepted and ignored, like its other argument builders:
     // `cursor-agent` documents no flag for them, and the capture paths reach
     // it as text in the prompt either way.
-    resumeArgs: (sessionId, prompt, _effort = null, _images = []) => ["-p", "--resume", sessionId, prompt, "--output-format", "stream-json"],
+    resumeArgs: (sessionId, prompt, _effort = null, _images = []) => ["-p", "--resume", sessionId, prompt, "--output-format", "stream-json", "--trust"],
     sessionFrom: (event) => typeof event.session_id === "string" && event.session_id !== "" ? event.session_id : null,
+    // Read against cursor-agent 2026.09.02: every event carries the id, a
+    // resume in this argument order answers under the same id and remembers
+    // the earlier turn.
+    activityVerified: true,
     authArgs: ["status"],
-    // UNVERIFIED: cursor-agent was not available on the build machine. The
-    // reading is deliberately loose, and anything ambiguous stays unknown.
+    // The signed-in form was read from the CLI: "✓ Logged in as <email>",
+    // exit 0. The signed-out form has not been, so that side of the reading
+    // stays loose, and anything ambiguous stays unknown.
     authVerdict: (result2) => {
       if (/logged in|signed in/i.test(result2.stdout))
         return "ok";
@@ -931,7 +528,7 @@ function agentSearchPath(env = process.env, platform = process.platform) {
   const npmPrefix = env.NPM_CONFIG_PREFIX;
   const versionBins = (root, suffix) => {
     try {
-      return readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => join(root, entry.name, ...suffix));
+      return readdirSync(root, { withFileTypes: true }).filter((entry2) => entry2.isDirectory()).map((entry2) => join(root, entry2.name, ...suffix));
     } catch {
       return [];
     }
@@ -962,19 +559,19 @@ function agentSearchPath(env = process.env, platform = process.platform) {
     platform === "darwin" ? "/usr/local/bin" : void 0,
     platform === "darwin" ? "/Applications/Codex.app/Contents/Resources" : void 0,
     platform === "darwin" ? "/Applications/Codex++.app/Contents/Resources" : void 0
-  ].filter((entry) => typeof entry === "string" && entry !== "");
+  ].filter((entry2) => typeof entry2 === "string" && entry2 !== "");
   return [...new Set(candidates)].join(delimiter);
 }
 function agentEnvironment(env = process.env) {
   return { ...env, PATH: agentSearchPath(env) };
 }
 async function pathLookup(binary, env = process.env, platform = process.platform) {
-  const entries = agentSearchPath(env, platform).split(delimiter).filter((entry) => entry !== "");
-  const extensions = platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter((entry) => entry !== "") : [""];
-  for (const entry of entries) {
+  const entries = agentSearchPath(env, platform).split(delimiter).filter((entry2) => entry2 !== "");
+  const extensions = platform === "win32" ? (env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter((entry2) => entry2 !== "") : [""];
+  for (const entry2 of entries) {
     for (const extension of extensions) {
       try {
-        await access(join(entry, `${binary}${extension}`), constants.X_OK);
+        await access(join(entry2, `${binary}${extension}`), constants.X_OK);
         return true;
       } catch {
       }
@@ -1082,15 +679,15 @@ function cursorActivity(event, cwd) {
   const wrapper = record(event.tool_call);
   if (wrapper === null)
     return null;
-  const key = Object.keys(wrapper)[0];
+  const key = Object.keys(wrapper).find((name) => name.endsWith("ToolCall"));
   if (key === void 0)
     return null;
   const call = record(wrapper[key]);
   const args = record(call?.args);
   const tool = key.replace(/ToolCall$/, "");
-  if (tool === "write") {
+  if (tool === "edit" || tool === "write") {
     const path2 = shownPath(args?.path, cwd);
-    return path2 === null ? "using write" : `editing ${path2}`;
+    return path2 === null ? "editing a file" : `editing ${path2}`;
   }
   if (tool === "read") {
     const path2 = shownPath(args?.path, cwd);
@@ -1418,7 +1015,7 @@ var SHARE_COOKIE = "leglas-share";
 function withoutShareCookie(cookie) {
   if (cookie === void 0)
     return void 0;
-  const kept = (Array.isArray(cookie) ? cookie.join("; ") : cookie).split(";").map((entry) => entry.trim()).filter((entry) => entry !== "" && !entry.startsWith(`${SHARE_COOKIE}=`));
+  const kept = (Array.isArray(cookie) ? cookie.join("; ") : cookie).split(";").map((entry2) => entry2.trim()).filter((entry2) => entry2 !== "" && !entry2.startsWith(`${SHARE_COOKIE}=`));
   return kept.length === 0 ? void 0 : kept.join("; ");
 }
 function createProxyHandler(options) {
@@ -1633,8 +1230,8 @@ var HEADLESS_SHELL = [
   ["chrome-headless-shell-linux64", "chrome-headless-shell"],
   ["chrome-headless-shell-win64", "chrome-headless-shell.exe"]
 ];
-function buildNumber(entry) {
-  const digits = /(\d+)\s*$/.exec(entry)?.[1];
+function buildNumber(entry2) {
+  const digits = /(\d+)\s*$/.exec(entry2)?.[1];
   return digits === void 0 ? 0 : Number(digits);
 }
 function cacheRoots(platform, home, readdir5 = readableDirectories) {
@@ -1645,7 +1242,7 @@ function cacheRoots(platform, home, readdir5 = readableDirectories) {
     entries: readdir5(dir).filter(keep).sort((left, right) => buildNumber(right) - buildNumber(left))
   });
   return [
-    newestFirst(playwright, (entry) => entry.startsWith("chromium-") || entry.startsWith("chromium_headless_shell-")),
+    newestFirst(playwright, (entry2) => entry2.startsWith("chromium-") || entry2.startsWith("chromium_headless_shell-")),
     newestFirst(join4(puppeteer, "chrome-headless-shell")),
     newestFirst(join4(puppeteer, "chrome"))
   ];
@@ -1670,7 +1267,7 @@ function findBrowser(search = {}) {
       return candidate;
   }
   const caches = cacheRoots(platform, home, readdir5);
-  const shell = firstExisting(caches.flatMap(({ root, entries }) => entries.flatMap((entry) => HEADLESS_SHELL.map((rest) => join4(root, entry, ...rest)))));
+  const shell = firstExisting(caches.flatMap(({ root, entries }) => entries.flatMap((entry2) => HEADLESS_SHELL.map((rest) => join4(root, entry2, ...rest)))));
   if (shell !== null)
     return shell;
   if (platform === "darwin") {
@@ -1692,15 +1289,15 @@ function findBrowser(search = {}) {
       return installed;
   }
   if (platform === "win32") {
-    const roots = [env.PROGRAMFILES, env["PROGRAMFILES(X86)"], env.LOCALAPPDATA].filter((entry) => typeof entry === "string" && entry !== "");
+    const roots = [env.PROGRAMFILES, env["PROGRAMFILES(X86)"], env.LOCALAPPDATA].filter((entry2) => typeof entry2 === "string" && entry2 !== "");
     const installed = firstExisting(roots.flatMap((root) => WINDOWS_BROWSERS.map((browser) => join4(root, browser))));
     if (installed !== null)
       return installed;
   }
   if (platform === "darwin" || platform === "linux") {
     const playwrightRoot = platform === "darwin" ? join4(home, "Library", "Caches", "ms-playwright") : join4(home, ".cache", "ms-playwright");
-    const playwright = readdir5(playwrightRoot).filter((entry) => entry.startsWith("chromium-") || entry.startsWith("chromium_headless_shell-")).sort((left, right) => buildNumber(right) - buildNumber(left)).flatMap((entry) => {
-      const root = join4(playwrightRoot, entry);
+    const playwright = readdir5(playwrightRoot).filter((entry2) => entry2.startsWith("chromium-") || entry2.startsWith("chromium_headless_shell-")).sort((left, right) => buildNumber(right) - buildNumber(left)).flatMap((entry2) => {
+      const root = join4(playwrightRoot, entry2);
       return [
         ...FOR_TESTING.map((rest) => join4(root, ...rest)),
         ...HEADLESS_SHELL.map((rest) => join4(root, ...rest)),
@@ -1716,8 +1313,8 @@ function findBrowser(search = {}) {
     const puppeteerCache = join4(home, ".cache", "puppeteer");
     for (const kind of ["chrome", "chrome-headless-shell"]) {
       const kindRoot = join4(puppeteerCache, kind);
-      const found = firstExisting(readdir5(kindRoot).sort((left, right) => buildNumber(right) - buildNumber(left)).flatMap((entry) => {
-        const root = join4(kindRoot, entry);
+      const found = firstExisting(readdir5(kindRoot).sort((left, right) => buildNumber(right) - buildNumber(left)).flatMap((entry2) => {
+        const root = join4(kindRoot, entry2);
         return [...FOR_TESTING, ...HEADLESS_SHELL].map((rest) => join4(root, ...rest));
       }));
       if (found !== null)
@@ -1840,12 +1437,12 @@ async function closeOrphan(url, connect) {
 async function reapOrphanedBrowsers(deps = {}) {
   const root = deps.tmpdir ?? osTmpdir();
   const clock = deps.now ?? (() => Date.now());
-  const list = deps.list ?? (async (path) => (await readdir(path, { withFileTypes: true })).filter((entry) => entry.isDirectory()).map((entry) => entry.name));
+  const list = deps.list ?? (async (path) => (await readdir(path, { withFileTypes: true })).filter((entry2) => entry2.isDirectory()).map((entry2) => entry2.name));
   const read = deps.read ?? ((path) => readFile4(path, "utf8"));
   const alive = deps.alive ?? livePid;
   const profileOf = deps.profile ?? (async (path) => {
-    const entry = await stat(path);
-    return { createdAt: entry.birthtimeMs, uid: entry.uid };
+    const entry2 = await stat(path);
+    return { createdAt: entry2.birthtimeMs, uid: entry2.uid };
   });
   const currentUid = deps.uid ?? (() => nodeProcess.getuid?.() ?? null);
   const connect = deps.connect ?? connectWebSocket;
@@ -2335,7 +1932,7 @@ function validBox(value) {
   if (typeof value !== "object" || value === null)
     return false;
   const box = value;
-  return [box.x, box.y, box.width, box.height].every((entry) => typeof entry === "number" && Number.isFinite(entry));
+  return [box.x, box.y, box.width, box.height].every((entry2) => typeof entry2 === "number" && Number.isFinite(entry2));
 }
 function locatorExpression(focus) {
   return `${LOCATOR}(${JSON.stringify(focus.selector)}, ${JSON.stringify(focus.text)}, ${JSON.stringify(focus.tag)})`;
@@ -2778,8 +2375,8 @@ function rehomeText(text2, from, to) {
 async function ownCapturesRoot(cwd) {
   const root = join5(cwd, CAPTURES_DIR);
   try {
-    const entry = await lstat(root);
-    return entry.isDirectory() ? root : null;
+    const entry2 = await lstat(root);
+    return entry2.isDirectory() ? root : null;
   } catch {
     return null;
   }
@@ -2800,7 +2397,7 @@ async function pruneCaptures(cwd, keep) {
     return void await pruneReferences(cwd);
   try {
     const entries = await readdir2(root, { withFileTypes: true });
-    await Promise.all(entries.filter((entry) => entry.isDirectory() && !kept.has(entry.name)).map((entry) => rm2(join5(root, entry.name), { recursive: true, force: true })));
+    await Promise.all(entries.filter((entry2) => entry2.isDirectory() && !kept.has(entry2.name)).map((entry2) => rm2(join5(root, entry2.name), { recursive: true, force: true })));
   } catch {
   }
   await pruneReferences(cwd);
@@ -2812,8 +2409,8 @@ async function pruneReferences(cwd) {
       return;
     const entries = await readdir2(references, { withFileTypes: true });
     const old = Date.now() - 60 * 60 * 1e3;
-    await Promise.all(entries.filter((entry) => entry.isFile()).map(async (entry) => {
-      const file = join5(references, entry.name);
+    await Promise.all(entries.filter((entry2) => entry2.isFile()).map(async (entry2) => {
+      const file = join5(references, entry2.name);
       if ((await stat2(file)).mtimeMs < old)
         await unlink(file).catch(() => {
         });
@@ -3096,7 +2693,7 @@ function createBranchRegistry(options) {
       clearInterval(sweepTimer);
       stopPromise = Promise.allSettled([...inflight.values()]).then(async () => {
         await Promise.allSettled([...stopping.values()]);
-        const ready = [...states.entries()].filter((entry) => entry[1].status === "ready" && proxies.has(entry[0]));
+        const ready = [...states.entries()].filter((entry2) => entry2[1].status === "ready" && proxies.has(entry2[0]));
         await Promise.all(ready.map(([title, state]) => stopReady(title, state, false)));
       });
       return stopPromise;
@@ -3204,7 +2801,7 @@ function anchorFrom(value) {
   if (selector === "")
     return null;
   const rect = isRecord2(value["rect"]) ? value["rect"] : {};
-  const classes = Array.isArray(value["classes"]) ? value["classes"].filter((entry) => typeof entry === "string").slice(0, CLASS_CAP).map((entry) => entry.slice(0, CLASS_LENGTH_CAP)) : [];
+  const classes = Array.isArray(value["classes"]) ? value["classes"].filter((entry2) => typeof entry2 === "string").slice(0, CLASS_CAP).map((entry2) => entry2.slice(0, CLASS_LENGTH_CAP)) : [];
   const rawRegion = isRecord2(value["region"]) ? value["region"] : null;
   const region = rawRegion === null ? null : {
     height: fraction(rawRegion["height"]),
@@ -3212,9 +2809,9 @@ function anchorFrom(value) {
     x: fraction(rawRegion["x"]),
     y: fraction(rawRegion["y"])
   };
-  const covers = Array.isArray(value["covers"]) ? value["covers"].filter(isRecord2).slice(0, COVERS_CAP).map((entry) => ({
-    tag: text(entry["tag"], TAG_CAP) || "element",
-    text: text(entry["text"], TEXT_CAP)
+  const covers = Array.isArray(value["covers"]) ? value["covers"].filter(isRecord2).slice(0, COVERS_CAP).map((entry2) => ({
+    tag: text(entry2["tag"], TAG_CAP) || "element",
+    text: text(entry2["text"], TEXT_CAP)
   })) : [];
   return {
     classes,
@@ -3242,18 +2839,18 @@ async function readAnnotations(cwd) {
     const parsed2 = JSON.parse(raw);
     if (!Array.isArray(parsed2.annotations))
       return [];
-    return parsed2.annotations.flatMap((entry, index) => {
-      if (!isRecord2(entry))
+    return parsed2.annotations.flatMap((entry2, index) => {
+      if (!isRecord2(entry2))
         return [];
-      const anchor = anchorFrom(entry["anchor"]);
-      const title = text(entry["title"], TAG_CAP * 4);
+      const anchor = anchorFrom(entry2["anchor"]);
+      const title = text(entry2["title"], TAG_CAP * 4);
       if (anchor === null || title === "")
         return [];
       return [
         {
           anchor,
-          id: typeof entry["id"] === "string" ? entry["id"] : String(index),
-          note: text(entry["note"], NOTE_CAP),
+          id: typeof entry2["id"] === "string" ? entry2["id"] : String(index),
+          note: text(entry2["note"], NOTE_CAP),
           title
         }
       ];
@@ -3284,7 +2881,7 @@ async function addAnnotation(cwd, input) {
 async function updateAnnotation(cwd, id, note) {
   return inTurn(async () => {
     const annotations = await readAnnotations(cwd);
-    const found = annotations.find((entry) => entry.id === id);
+    const found = annotations.find((entry2) => entry2.id === id);
     if (found === void 0)
       return null;
     const words = text(note, NOTE_CAP);
@@ -3295,7 +2892,7 @@ async function updateAnnotation(cwd, id, note) {
       id: randomBytes2(6).toString("base64url"),
       note: words
     };
-    await write(cwd, annotations.map((entry) => entry.id === id ? revised : entry));
+    await write(cwd, annotations.map((entry2) => entry2.id === id ? revised : entry2));
     return revised;
   });
 }
@@ -3303,7 +2900,7 @@ async function removeAnnotations(cwd, ids) {
   return inTurn(async () => {
     const wanted = new Set(ids);
     const annotations = await readAnnotations(cwd);
-    const remaining = annotations.filter((entry) => !wanted.has(entry.id));
+    const remaining = annotations.filter((entry2) => !wanted.has(entry2.id));
     const dropped = annotations.length - remaining.length;
     if (dropped > 0)
       await write(cwd, remaining);
@@ -3311,12 +2908,12 @@ async function removeAnnotations(cwd, ids) {
   });
 }
 function annotationsFor(annotations, title) {
-  return annotations.filter((entry) => entry.title === title);
+  return annotations.filter((entry2) => entry2.title === title);
 }
 function describeAnchor(anchor) {
   const where = `about ${anchor.rect.width}\xD7${anchor.rect.height} at (${anchor.rect.x}, ${anchor.rect.y}) in a ${anchor.viewport}px-wide viewport`;
   if (anchor.region !== void 0) {
-    const covered = (anchor.covers ?? []).map((entry) => entry.text === "" ? `<${entry.tag}>` : `<${entry.tag}> \u201C${entry.text}\u201D`).join(", ");
+    const covered = (anchor.covers ?? []).map((entry2) => entry2.text === "" ? `<${entry2.tag}>` : `<${entry2.tag}> \u201C${entry2.text}\u201D`).join(", ");
     const inside = covered === "" ? "" : ` covering ${covered};`;
     return `an area inside <${anchor.tag}>;${inside} path ${anchor.selector}; ${where}`;
   }
@@ -3368,7 +2965,7 @@ function composeRequest(preview, intent, mode, notes = [], leglasCommand = "npx
   const target = preview.file ?? targetFor(preview.url);
   const cleaned = intent.trim();
   const asked = changeBlock(cleaned, notes);
-  const recorded = cleaned === "" ? notes.map((entry) => entry.note).filter((entry) => entry !== "").join("; ") : cleaned;
+  const recorded = cleaned === "" ? notes.map((entry2) => entry2.note).filter((entry2) => entry2 !== "").join("; ") : cleaned;
   const prompt = mode === "variant" ? variantPrompt(preview, recorded, asked, target, leglasCommand, captured) : replacePrompt(preview, asked, target, leglasCommand, captured);
   return { prompt, target, mode };
 }
@@ -3505,12 +3102,12 @@ var FAILURE_CODES = [
 function failureOf(value) {
   if (typeof value !== "object" || value === null)
     return null;
-  const entry = value;
-  if (typeof entry.message !== "string" || entry.message === "")
+  const entry2 = value;
+  if (typeof entry2.message !== "string" || entry2.message === "")
     return null;
-  if (entry.code === void 0 || !FAILURE_CODES.includes(entry.code))
+  if (entry2.code === void 0 || !FAILURE_CODES.includes(entry2.code))
     return null;
-  return { code: entry.code, message: entry.message };
+  return { code: entry2.code, message: entry2.message };
 }
 async function readRequests(cwd) {
   try {
@@ -3520,17 +3117,17 @@ async function readRequests(cwd) {
       return [];
     return parsed2.requests.map((request, index) => {
       const source = typeof request === "object" && request !== null ? request : {};
-      const { failure: rawFailure, attachments: rawAttachments, captureNote: rawCaptureNote, compare: rawCompare, references: rawReferences, ...entry } = source;
-      const status = entry.status === "picked-up" || entry.status === "failed" || entry.status === "cancelled" ? entry.status : "queued";
+      const { failure: rawFailure, attachments: rawAttachments, captureNote: rawCaptureNote, compare: rawCompare, references: rawReferences, ...entry2 } = source;
+      const status = entry2.status === "picked-up" || entry2.status === "failed" || entry2.status === "cancelled" ? entry2.status : "queued";
       const failure = isTerminal(status) ? failureOf(rawFailure) : null;
-      const id = typeof entry.id === "string" && REQUEST_ID.test(entry.id) ? entry.id : String(index);
+      const id = typeof entry2.id === "string" && REQUEST_ID.test(entry2.id) ? entry2.id : String(index);
       const ownFile = new RegExp(`^\\.leglas/captures/${id}/[A-Za-z0-9][A-Za-z0-9_.-]*$`);
       const attachments = Array.isArray(rawAttachments) ? rawAttachments.filter((attachment) => typeof attachment === "object" && attachment !== null && !Array.isArray(attachment) && typeof attachment.file === "string" && ownFile.test(attachment.file) && !attachment.file.includes("..") && ["frame", "note", "compare", "reference"].includes(String(attachment.kind))) : null;
       return {
-        ...entry,
+        ...entry2,
         id,
         status,
-        mode: entry.mode === "variant" ? "variant" : "replace",
+        mode: entry2.mode === "variant" ? "variant" : "replace",
         ...failure === null ? {} : { failure },
         ...attachments === null || attachments.length === 0 ? {} : { attachments },
         ...typeof rawCaptureNote === "string" ? { captureNote: rawCaptureNote } : {},
@@ -5608,10 +5205,10 @@ function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function stringArray(value) {
-  return Array.isArray(value) && value.every((entry) => typeof entry === "string");
+  return Array.isArray(value) && value.every((entry2) => typeof entry2 === "string");
 }
 function stringRecord(value) {
-  return isRecord3(value) && Object.values(value).every((entry) => typeof entry === "string");
+  return isRecord3(value) && Object.values(value).every((entry2) => typeof entry2 === "string");
 }
 function layoutFrom(value) {
   if (!isRecord3(value))
@@ -6505,7 +6102,7 @@ async function readRenames(cwd) {
     const parsed2 = JSON.parse(raw);
     if (parsed2.renames === null || typeof parsed2.renames !== "object")
       return {};
-    return Object.fromEntries(Object.entries(parsed2.renames).filter((entry) => typeof entry[1] === "string" && entry[1] !== ""));
+    return Object.fromEntries(Object.entries(parsed2.renames).filter((entry2) => typeof entry2[1] === "string" && entry2[1] !== ""));
   } catch {
     return {};
   }
@@ -7072,86 +6669,670 @@ async function startServer(options) {
       void probeAgents().catch(() => {
       });
     }
-    return Promise.resolve(agentsCache.agents);
-  };
-  const livePreviewDefinitions = async () => {
-    const localRead = await readLocalPreviews(cwd).catch(() => null);
-    const local = localRead?.errors.length === 0 ? localRead.previews : [];
-    const localTitles = new Set(local.map((entry) => entry.title));
-    const bootConfig = config?.previews ?? [];
-    const boot = localRead === null || localRead.errors.length > 0 ? bootConfig : bootConfig.filter((entry) => entry.local !== true || localTitles.has(entry.title));
-    const known = new Set(boot.map((entry) => entry.title));
-    const fresh = local.filter((entry) => !known.has(entry.title) && entry.branch === void 0 && entry.file === void 0);
-    return [...boot, ...fresh];
-  };
-  const livePreviews = async () => (await livePreviewDefinitions()).map(readyPreview).filter((preview) => preview !== null);
-  void probeAgents().catch(() => {
-  });
-  const readShareBody = (req, res, run4) => {
-    let body = "";
-    req.on("data", (chunk) => body += chunk);
-    req.on("end", () => {
-      const parsed2 = jsonBody(body);
-      if (parsed2 === null)
-        return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
-      void Promise.resolve(run4(parsed2)).then((result2) => {
-        if (result2 === void 0) {
-          return sendJson2(res, 500, { ok: false, error: "Sharing is not available." });
+    return Promise.resolve(agentsCache.agents);
+  };
+  const livePreviewDefinitions = async () => {
+    const localRead = await readLocalPreviews(cwd).catch(() => null);
+    const local = localRead?.errors.length === 0 ? localRead.previews : [];
+    const localTitles = new Set(local.map((entry2) => entry2.title));
+    const bootConfig = config?.previews ?? [];
+    const boot = localRead === null || localRead.errors.length > 0 ? bootConfig : bootConfig.filter((entry2) => entry2.local !== true || localTitles.has(entry2.title));
+    const known = new Set(boot.map((entry2) => entry2.title));
+    const fresh = local.filter((entry2) => !known.has(entry2.title) && entry2.branch === void 0 && entry2.file === void 0);
+    return [...boot, ...fresh];
+  };
+  const livePreviews = async () => (await livePreviewDefinitions()).map(readyPreview).filter((preview) => preview !== null);
+  void probeAgents().catch(() => {
+  });
+  const readShareBody = (req, res, run4) => {
+    let body = "";
+    req.on("data", (chunk) => body += chunk);
+    req.on("end", () => {
+      const parsed2 = jsonBody(body);
+      if (parsed2 === null)
+        return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+      void Promise.resolve(run4(parsed2)).then((result2) => {
+        if (result2 === void 0) {
+          return sendJson2(res, 500, { ok: false, error: "Sharing is not available." });
+        }
+        return result2.ok ? sendJson2(res, 200, result2) : sendJson2(res, result2.status, { ok: false, error: result2.error });
+      });
+    });
+  };
+  const handleRequest = (req, res, context) => {
+    const url = req.url ?? "/";
+    const path = url.split("?")[0] ?? "/";
+    const query = new URLSearchParams(url.includes("?") ? url.slice(url.indexOf("?") + 1) : "");
+    if (!context.remote && req.method === "POST" && path.startsWith(`${LEGLAS_PREFIX}/api/`) && !isTrustedMutation(req)) {
+      return sendJson2(res, 403, { ok: false, error: "Cross-origin API mutations are refused." });
+    }
+    if (context.remote && path === `${LEGLAS_PREFIX}/api/config`) {
+      return void shares?.viewerConfig(context.grantId ?? "").then((payload) => {
+        if (payload === null) {
+          return sendJson2(res, 403, { ok: false, error: "This link isn't active." });
+        }
+        sendConditionalJson(req, res, payload);
+      });
+    }
+    if (context.remote && path === `${LEGLAS_PREFIX}/api/health`) {
+      const known = liveHealth?.reachable() ?? null;
+      return void (known === null ? probe(target) : Promise.resolve(known)).then((reachable) => sendConditionalJson(req, res, { reachable }));
+    }
+    if (context.remote && path.startsWith(`${LEGLAS_PREFIX}/api/`)) {
+      return sendJson2(res, 403, { error: "Not available to viewers." });
+    }
+    if (path === `${LEGLAS_PREFIX}/api/update` && req.method === "GET" || req.method === "POST" && ["check", "skip", "install"].some((action) => path === `${LEGLAS_PREFIX}/api/update/${action}`)) {
+      const updates2 = options.updates;
+      if (updates2 === void 0) {
+        return sendJson2(res, 404, { ok: false, error: "Updates are not available here." });
+      }
+      if (req.method === "GET")
+        return sendJson2(res, 200, updates2.status());
+      if (path.endsWith("/check")) {
+        return void updates2.check({ force: true }).then((status) => sendJson2(res, 200, status));
+      }
+      if (path.endsWith("/install")) {
+        return void updates2.update().then((status) => sendJson2(res, 200, status), (error) => sendJson2(res, 409, {
+          ok: false,
+          error: error instanceof Error ? error.message : String(error)
+        }));
+      }
+      if (!hasJsonBody(req))
+        return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+      let body = "";
+      req.on("data", (chunk) => body += chunk);
+      return void req.on("end", () => {
+        const parsed2 = jsonBody(body);
+        if (parsed2 === null)
+          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+        if (typeof parsed2.version !== "string" || parsed2.version.trim() === "") {
+          return sendJson2(res, 400, { ok: false, error: "Body needs a version." });
+        }
+        void updates2.skip(parsed2.version).then((status) => sendJson2(res, 200, status), (error) => sendJson2(res, 400, {
+          ok: false,
+          error: error instanceof Error ? error.message : String(error)
+        }));
+      });
+    }
+    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share` && req.method === "GET") {
+      return void shares?.tunnels().then((tunnels) => sendJson2(res, 200, { share: shares?.status() ?? null, tunnels }));
+    }
+    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share` && req.method === "POST") {
+      if (!hasJsonBody(req)) {
+        return sendJson2(res, 400, { ok: false, error: "Share details must be JSON." });
+      }
+      let body = "";
+      req.on("data", (chunk) => body += chunk);
+      return void req.on("end", async () => {
+        const parsed2 = jsonBody(body);
+        if (parsed2 === null) {
+          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+        }
+        const result2 = await shares?.create(parsed2).catch((error) => ({
+          ok: false,
+          status: 500,
+          error: `Leglas could not start the share (${error instanceof Error ? error.message : String(error)}).`
+        }));
+        if (result2 === void 0) {
+          return sendJson2(res, 500, { ok: false, error: "Sharing is not available." });
+        }
+        return result2.ok ? sendJson2(res, 200, result2) : sendJson2(res, result2.status, { ok: false, error: result2.error });
+      });
+    }
+    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/update` && req.method === "POST") {
+      if (!hasJsonBody(req)) {
+        return sendJson2(res, 400, { ok: false, error: "Share details must be JSON." });
+      }
+      let body = "";
+      req.on("data", (chunk) => body += chunk);
+      return void req.on("end", async () => {
+        const parsed2 = jsonBody(body);
+        if (parsed2 === null) {
+          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+        }
+        const result2 = await shares?.update(parsed2);
+        if (result2 === void 0) {
+          return sendJson2(res, 500, { ok: false, error: "Sharing is not available." });
+        }
+        return result2.ok ? sendJson2(res, 200, result2) : sendJson2(res, result2.status, { ok: false, error: result2.error });
+      });
+    }
+    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/grants` && req.method === "POST") {
+      return void readShareBody(req, res, (body) => shares?.createGrant(body));
+    }
+    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/grants/revoke` && req.method === "POST") {
+      return void readShareBody(req, res, (body) => shares?.revokeGrant(body));
+    }
+    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/grants/extend` && req.method === "POST") {
+      return void readShareBody(req, res, (body) => shares?.extendGrant(body));
+    }
+    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/allow` && req.method === "POST") {
+      return void readShareBody(req, res, (body) => shares?.allowRoute(body));
+    }
+    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/rotate` && req.method === "POST") {
+      return void readShareBody(req, res, () => shares?.rotate());
+    }
+    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/stop` && req.method === "POST") {
+      return void (shares?.stop() ?? Promise.resolve()).then(() => sendJson2(res, 200, { ok: true }));
+    }
+    if (path === `${LEGLAS_PREFIX}/api/config`) {
+      const boot = config?.previews ?? [];
+      const errors = [...configErrors];
+      const notice = configStalenessNotice(cwd, bootConfigSnapshot, snapshotConfig(cwd));
+      if (notice !== null)
+        errors.push(notice);
+      return void readLocalPreviews(cwd).then(({ previews: local, errors: localErrors }) => {
+        if (localErrors.length > 0) {
+          return sendConditionalJson(req, res, {
+            project,
+            devServer: target,
+            scanPreviews: config?.scanPreviews ?? true,
+            previews: previewsForConfig(boot),
+            errors,
+            warnings: configWarnings
+          });
+        }
+        const localTitles = new Set(local.map((preview) => preview.title));
+        const currentBoot = boot.filter((preview) => preview.local !== true || localTitles.has(preview.title));
+        const known = new Set(currentBoot.map((preview) => preview.title));
+        const fresh = local.filter((preview) => !known.has(preview.title) && preview.branch === void 0 && preview.file === void 0);
+        sendConditionalJson(req, res, {
+          project,
+          devServer: target,
+          scanPreviews: config?.scanPreviews ?? true,
+          previews: previewsForConfig([...currentBoot, ...fresh]),
+          errors,
+          warnings: configWarnings
+        });
+      }).catch(() => sendConditionalJson(req, res, {
+        project,
+        devServer: target,
+        scanPreviews: config?.scanPreviews ?? true,
+        previews: previewsForConfig(boot),
+        errors,
+        warnings: configWarnings
+      }));
+    }
+    if (path === `${LEGLAS_PREFIX}/api/previews/start` && req.method === "POST") {
+      let body = "";
+      req.on("data", (chunk) => body += chunk);
+      return void req.on("end", async () => {
+        const parsed2 = jsonBody(body);
+        if (parsed2 === null) {
+          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+        }
+        if (typeof parsed2.title !== "string" || parsed2.title.trim() === "") {
+          return sendJson2(res, 400, { ok: false, error: "Body needs a direction title." });
+        }
+        const preview = (await livePreviewDefinitions()).find((entry2) => entry2.title === parsed2.title);
+        if (preview === void 0) {
+          return sendJson2(res, 404, { ok: false, error: "No such direction." });
+        }
+        if (preview.branch === void 0) {
+          return sendJson2(res, 400, {
+            ok: false,
+            error: `"${preview.title}" is not a branch preview.`
+          });
+        }
+        if (config?.devCommand === void 0) {
+          return sendJson2(res, 400, {
+            ok: false,
+            error: `"${preview.title}" cannot start because the config sets no devCommand.`
+          });
+        }
+        void branches.start(preview.title);
+        const state = branches.state(preview.title);
+        if (state === void 0) {
+          return sendJson2(res, 404, { ok: false, error: "No such branch preview." });
+        }
+        return sendJson2(res, 200, { ok: true, state: publicBranchState(state) });
+      });
+    }
+    if (path === `${LEGLAS_PREFIX}/api/previews/delete` && req.method === "POST") {
+      let body = "";
+      req.on("data", (chunk) => body += chunk);
+      return void req.on("end", async () => {
+        const parsed2 = jsonBody(body);
+        if (parsed2 === null) {
+          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+        }
+        const titles = parsed2.titles;
+        if (!Array.isArray(titles) || titles.length === 0 || titles.some((title) => typeof title !== "string" || title.trim() === "")) {
+          return sendJson2(res, 400, {
+            ok: false,
+            error: "Body needs a non-empty array of direction titles."
+          });
+        }
+        const unique = [...new Set(titles)];
+        try {
+          const local = await readLocalPreviews(cwd);
+          if (local.errors.length > 0) {
+            return sendJson2(res, 409, { ok: false, error: local.errors.join(" ") });
+          }
+          const localTitles = new Set(local.previews.map((preview) => preview.title));
+          const unknown = unique.filter((title) => !localTitles.has(title));
+          if (unknown.length > 0) {
+            return sendJson2(res, 400, {
+              ok: false,
+              error: "Only machine-local directions can be deleted from the registry."
+            });
+          }
+          const deleted = await dropLocalPreviews(cwd, unique);
+          return sendJson2(res, 200, { ok: true, deleted });
+        } catch {
+          return sendJson2(res, 500, {
+            ok: false,
+            error: "The directions could not be deleted from Leglas."
+          });
+        }
+      });
+    }
+    if (path === `${LEGLAS_PREFIX}/api/references` && req.method === "POST") {
+      const declaredLength = req.headers["content-length"];
+      if (typeof declaredLength === "string" && Number(declaredLength) > REFERENCE_MAX_BYTES) {
+        return sendJson2(res, 413, { ok: false, error: "That image is over 10MB." });
+      }
+      const chunks = [];
+      let bytes = 0;
+      let refused = false;
+      req.on("data", (chunk) => {
+        if (refused)
+          return;
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        bytes += buffer.length;
+        if (bytes > REFERENCE_MAX_BYTES) {
+          refused = true;
+          req.pause();
+          res.once("finish", () => req.socket.destroy());
+          sendJson2(res, 413, { ok: false, error: "That image is over 10MB." });
+          return;
+        }
+        chunks.push(buffer);
+      });
+      return void req.once("end", async () => {
+        if (refused)
+          return;
+        if (bytes === 0) {
+          return sendJson2(res, 400, { ok: false, error: "The upload was empty." });
+        }
+        const body = Buffer.concat(chunks, bytes);
+        const image = sniffImage(body);
+        if (image === null) {
+          return sendJson2(res, 415, {
+            ok: false,
+            error: "Only PNG, JPEG, WebP and GIF images can be attached."
+          });
+        }
+        const id = newRequestId();
+        const file = `${REFERENCES_DIR}/${id}.${image.kind}`;
+        try {
+          await mkdir8(join12(cwd, REFERENCES_DIR), { recursive: true });
+          await writeFile8(join12(cwd, file), body);
+          void pruneReferences(cwd).catch(() => {
+          });
+          return sendJson2(res, 200, {
+            ok: true,
+            reference: {
+              id,
+              file,
+              name: referenceName(req.headers["x-leglas-filename"]),
+              width: image.width,
+              height: image.height,
+              bytes
+            }
+          });
+        } catch {
+          return sendJson2(res, 500, {
+            ok: false,
+            error: "The image could not be attached."
+          });
+        }
+      });
+    }
+    if (path === `${LEGLAS_PREFIX}/api/request` && req.method === "POST") {
+      let body = "";
+      req.on("data", (chunk) => body += chunk);
+      return void req.on("end", async () => {
+        const parsed2 = jsonBody(body);
+        if (parsed2 === null) {
+          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+        }
+        if (parsed2.mode !== void 0 && parsed2.mode !== "variant" && parsed2.mode !== "replace") {
+          return sendJson2(res, 400, {
+            ok: false,
+            error: 'mode must be "variant" or "replace".'
+          });
+        }
+        const mode = parsed2.mode === "replace" ? "replace" : "variant";
+        if (parsed2.references !== void 0 && (!Array.isArray(parsed2.references) || parsed2.references.some((reference) => typeof reference !== "string" || !/^[A-Za-z0-9_-]{1,32}$/.test(reference)))) {
+          return sendJson2(res, 400, { ok: false, error: "references must be uploaded image ids." });
+        }
+        const references = parsed2.references ?? [];
+        if (references.length > 0) {
+          const present = new Set((await readdir3(join12(cwd, REFERENCES_DIR)).catch(() => [])).map((name) => name.slice(0, name.indexOf(".") === -1 ? name.length : name.indexOf("."))));
+          const gone = references.filter((id2) => !present.has(id2));
+          if (gone.length > 0) {
+            return sendJson2(res, 410, {
+              ok: false,
+              error: gone.length === 1 ? "An attached image is gone: it was pasted over an hour ago and never sent. Attach it again." : "Some attached images are gone: they were pasted over an hour ago and never sent. Attach them again."
+            });
+          }
+        }
+        const width = typeof parsed2.width === "number" && Number.isFinite(parsed2.width) ? Math.min(MAX_WIDTH, Math.max(MIN_WIDTH, Math.round(parsed2.width))) : 1440;
+        const previews = await livePreviews();
+        const preview = previews.find((entry2) => entry2.title === parsed2.title);
+        if (!preview) {
+          return sendJson2(res, 400, { ok: false, error: "Unknown preview, or empty request." });
+        }
+        const notes = annotationsFor(await readAnnotations(cwd).catch(() => []), preview.title);
+        if (!parsed2.intent?.trim() && notes.length === 0) {
+          return sendJson2(res, 400, { ok: false, error: "Unknown preview, or empty request." });
+        }
+        const intent = (parsed2.intent ?? "").trim();
+        const live2 = (await readRequests(cwd).catch(() => [])).filter((entry2) => entry2.status === "queued" || entry2.status === "picked-up");
+        const sameNotes = (entry2) => {
+          const before = [...entry2.notes ?? []].sort().join(",");
+          return before === notes.map((note) => note.id).sort().join(",");
+        };
+        const compare = typeof parsed2.compare === "string" && parsed2.compare !== preview.title ? previews.find((entry2) => entry2.title === parsed2.compare) ?? null : null;
+        const sameContext = (entry2) => (entry2.compare ?? null) === (compare?.title ?? null) && [...entry2.references ?? []].sort().join(",") === [...references].sort().join(",");
+        if (live2.some((entry2) => entry2.title === preview.title && entry2.intent === intent && // The same words in the other mode are not the same request:
+        // one forks the direction and the other rewrites it. Only a
+        // genuine repeat is refused.
+        (entry2.mode ?? "replace") === mode && sameNotes(entry2) && sameContext(entry2))) {
+          return sendJson2(res, 409, {
+            ok: false,
+            duplicate: true,
+            error: `That exact change to ${preview.title} is already waiting.`
+          });
+        }
+        const address = server.address();
+        const requestPort = typeof address === "object" && address !== null ? address.port : options.port ?? DEFAULT_PORT;
+        const id = newRequestId();
+        const captured = await attachRequest(cwd, id, {
+          origin: `http://127.0.0.1:${requestPort}`,
+          preview,
+          width,
+          notes,
+          compare,
+          references
+        }, { pool: browserPool });
+        const composed = composeRequest(preview, intent, mode, notes, leglasCommand, captured);
+        try {
+          await appendRequest(cwd, {
+            title: preview.title,
+            url: preview.url,
+            intent,
+            // The ids travel with the request so a change made in place can
+            // forget the notes it answered. A fork leaves them where they are:
+            // the direction they point at was not touched.
+            ...notes.length === 0 ? {} : { notes: notes.map((entry2) => entry2.id) },
+            ...captured.attachments.length === 0 ? {} : { attachments: captured.attachments },
+            ...captured.skipped === null ? {} : { captureNote: captured.skipped },
+            ...compare === null ? {} : { compare: compare.title },
+            ...references.length === 0 ? {} : { references },
+            ...composed
+          }, id);
+          runner?.nudge();
+          return sendJson2(res, 200, {
+            ok: true,
+            ...composed,
+            attachments: captured.attachments
+          });
+        } catch {
+          return sendJson2(res, 200, {
+            ok: true,
+            ...composed,
+            attachments: captured.attachments,
+            queued: false
+          });
+        }
+      });
+    }
+    if (path === `${LEGLAS_PREFIX}/api/capture` && req.method === "POST") {
+      if (!hasJsonBody(req)) {
+        return sendJson2(res, 400, { ok: false, error: "Capture must be JSON." });
+      }
+      let body = "";
+      req.on("data", (chunk) => body += chunk);
+      return void req.on("end", async () => {
+        const parsed2 = jsonBody(body);
+        if (parsed2 === null) {
+          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+        }
+        if (typeof parsed2.title !== "string" || parsed2.title === "") {
+          return sendJson2(res, 400, { ok: false, error: "Capture needs a direction title." });
+        }
+        if (parsed2.note !== void 0 && typeof parsed2.note !== "string") {
+          return sendJson2(res, 400, { ok: false, error: "The note id must be a string." });
+        }
+        const preview = (await livePreviews()).find((entry2) => entry2.title === parsed2.title);
+        if (preview === void 0) {
+          return sendJson2(res, 404, { ok: false, error: "No such direction." });
+        }
+        const width = typeof parsed2.width === "number" && Number.isFinite(parsed2.width) ? Math.min(MAX_WIDTH, Math.max(MIN_WIDTH, Math.round(parsed2.width))) : 1440;
+        const browser = await browserPool.acquire();
+        if (browser === null) {
+          return sendJson2(res, 503, {
+            ok: false,
+            error: browserPool.reason() ?? NO_BROWSER
+          });
+        }
+        const annotations = typeof parsed2.note === "string" ? (await readAnnotations(cwd).catch(() => [])).filter((entry2) => entry2.id === parsed2.note && entry2.title === preview.title) : [];
+        const address = server.address();
+        const capturePort = typeof address === "object" && address !== null ? address.port : options.port ?? DEFAULT_PORT;
+        const controller = new AbortController();
+        const timeoutMarker = /* @__PURE__ */ Symbol("capture timeout");
+        let timedOut2;
+        const timeout = new Promise((resolve5) => {
+          timedOut2 = () => resolve5(timeoutMarker);
+        });
+        const timer = setTimeout(() => {
+          timedOut2();
+          controller.abort();
+        }, CAPTURE_DEADLINE_MS);
+        timer.unref?.();
+        try {
+          const work = capturePage(browser, {
+            url: previewUrl(`http://127.0.0.1:${capturePort}`, preview),
+            width,
+            ...annotations.length === 0 ? {} : {
+              focuses: annotations.map((entry2) => ({
+                selector: entry2.anchor.selector,
+                text: entry2.anchor.text,
+                tag: entry2.anchor.tag,
+                ...entry2.anchor.region === void 0 ? {} : { region: entry2.anchor.region },
+                rect: entry2.anchor.rect
+              }))
+            },
+            timeoutMs: CAPTURE_LOAD_MS,
+            signal: controller.signal
+          });
+          const result2 = await Promise.race([work, timeout]);
+          if (result2 === timeoutMarker) {
+            return sendJson2(res, 504, { ok: false, error: "The page did not load in time." });
+          }
+          clearTimeout(timer);
+          const crop = annotations.length > 0 ? result2.crops[0] : null;
+          const shot = crop?.shot ?? result2.frame;
+          const noteSuffix = typeof parsed2.note === "string" ? `-${parsed2.note.replace(/[^A-Za-z0-9_-]+/g, "-")}` : "";
+          const name = `${captureSlug(preview.title)}-${result2.frame.width}${noteSuffix}.png`;
+          const relativeFile = `${CAPTURES_DIR}/show/${name}`;
+          await mkdir8(join12(cwd, CAPTURES_DIR, "show"), { recursive: true });
+          await writeFile8(join12(cwd, relativeFile), shot.png);
+          return sendJson2(res, 200, {
+            ok: true,
+            file: relativeFile,
+            width: shot.width,
+            height: shot.height,
+            viewport: result2.frame.width,
+            errors: result2.errors,
+            hydration: result2.hydration,
+            cut: result2.cut
+          });
+        } catch (error) {
+          clearTimeout(timer);
+          return sendJson2(res, 502, {
+            ok: false,
+            error: error instanceof Error ? error.message : String(error)
+          });
         }
-        return result2.ok ? sendJson2(res, 200, result2) : sendJson2(res, result2.status, { ok: false, error: result2.error });
       });
-    });
-  };
-  const handleRequest = (req, res, context) => {
-    const url = req.url ?? "/";
-    const path = url.split("?")[0] ?? "/";
-    const query = new URLSearchParams(url.includes("?") ? url.slice(url.indexOf("?") + 1) : "");
-    if (!context.remote && req.method === "POST" && path.startsWith(`${LEGLAS_PREFIX}/api/`) && !isTrustedMutation(req)) {
-      return sendJson2(res, 403, { ok: false, error: "Cross-origin API mutations are refused." });
     }
-    if (context.remote && path === `${LEGLAS_PREFIX}/api/config`) {
-      return void shares?.viewerConfig(context.grantId ?? "").then((payload) => {
-        if (payload === null) {
-          return sendJson2(res, 403, { ok: false, error: "This link isn't active." });
+    if (path === `${LEGLAS_PREFIX}/api/agents/warm` && req.method === "POST") {
+      return void readAgentChoice(cwd).then((choice) => {
+        if (choice.agent !== null)
+          runner?.prepare(choice.agent);
+        sendJson2(res, 200, { ok: true });
+      }, () => sendJson2(res, 200, { ok: true }));
+    }
+    if (path === `${LEGLAS_PREFIX}/api/agents` && req.method === "GET") {
+      return void Promise.all([
+        currentAgents(query.get("refresh") === "1"),
+        readAgentChoice(cwd)
+      ]).then(([agents, choice]) => sendJson2(res, 200, {
+        agents,
+        choice: choice.agent,
+        customRun: choice.run,
+        effort: choice.effort
+      }));
+    }
+    if (path === `${LEGLAS_PREFIX}/api/agent` && req.method === "POST") {
+      if (!isLoopbackAddress(req.socket.remoteAddress)) {
+        return sendJson2(res, 403, {
+          ok: false,
+          error: "The agent choice can only be made from the machine running Leglas."
+        });
+      }
+      if (!hasJsonBody(req)) {
+        return sendJson2(res, 400, { ok: false, error: "Agent choice must be JSON." });
+      }
+      let body = "";
+      req.on("data", (chunk) => body += chunk);
+      return void req.on("end", () => {
+        const parsed2 = jsonBody(body);
+        if (parsed2 === null) {
+          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
         }
-        sendConditionalJson(req, res, payload);
+        if (!isKnownAgent(parsed2.agent) && parsed2.agent !== "custom") {
+          return sendJson2(res, 400, { ok: false, error: "Body needs a known agent." });
+        }
+        if (parsed2.run !== void 0 && typeof parsed2.run !== "string") {
+          return sendJson2(res, 400, { ok: false, error: "The custom run command must be a string." });
+        }
+        const effort = parsed2.effort === null || isAgentEffort(parsed2.effort) ? parsed2.effort : void 0;
+        if (parsed2.effort !== void 0 && effort === void 0) {
+          return sendJson2(res, 400, { ok: false, error: "Effort must be a supported level or null." });
+        }
+        if (parsed2.agent === "custom") {
+          if (effort !== void 0) {
+            return sendJson2(res, 400, {
+              ok: false,
+              error: "Custom agents manage effort in their own command."
+            });
+          }
+          if (typeof parsed2.run !== "string") {
+            return sendJson2(res, 400, { ok: false, error: "A custom agent needs a run command." });
+          }
+          const template = parseTemplate(parsed2.run);
+          if (!template.ok)
+            return sendJson2(res, 400, { ok: false, error: template.error });
+          return void saveAgentChoice(cwd, { agent: "custom", run: parsed2.run }).then(() => sendJson2(res, 200, { ok: true }), () => sendJson2(res, 500, { ok: false, error: "Agent choice could not be saved." }));
+        }
+        if (effort !== void 0 && effort !== null && !KNOWN_AGENTS[parsed2.agent].efforts.includes(effort)) {
+          return sendJson2(res, 400, {
+            ok: false,
+            error: `${KNOWN_AGENTS[parsed2.agent].name} does not expose an effort override.`
+          });
+        }
+        return void saveAgentChoice(cwd, {
+          agent: parsed2.agent,
+          ...effort === void 0 ? {} : { effort }
+        }).then(() => {
+          runner?.prepare(parsed2.agent);
+          sendJson2(res, 200, { ok: true });
+        }, () => sendJson2(res, 500, { ok: false, error: "Agent choice could not be saved." }));
       });
     }
-    if (context.remote && path === `${LEGLAS_PREFIX}/api/health`) {
-      const known = liveHealth?.reachable() ?? null;
-      return void (known === null ? probe(target) : Promise.resolve(known)).then((reachable) => sendConditionalJson(req, res, { reachable }));
-    }
-    if (context.remote && path.startsWith(`${LEGLAS_PREFIX}/api/`)) {
-      return sendJson2(res, 403, { error: "Not available to viewers." });
+    if (path === `${LEGLAS_PREFIX}/api/watch` && req.method === "POST") {
+      let body = "";
+      req.on("data", (chunk) => body += chunk);
+      return void req.on("end", () => {
+        const parsed2 = jsonBody(body);
+        if (parsed2 === null) {
+          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+        }
+        if (typeof parsed2.watching !== "boolean") {
+          return sendJson2(res, 400, { ok: false, error: "Body needs a watching boolean." });
+        }
+        lastSeen = parsed2.watching ? Date.now() : null;
+        sendJson2(res, 200, { ok: true });
+      });
     }
-    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share` && req.method === "GET") {
-      return void shares?.tunnels().then((tunnels) => sendJson2(res, 200, { share: shares?.status() ?? null, tunnels }));
+    if (path === `${LEGLAS_PREFIX}/api/requests` && req.method === "GET") {
+      const snapshot = runner?.snapshot() ?? {
+        running: false,
+        requestId: null,
+        agent: null,
+        activity: null,
+        startedAt: null,
+        stopping: false,
+        waiting: null,
+        failedIds: []
+      };
+      return void readRequests(cwd).then((requests) => sendConditionalJson(req, res, {
+        requests: requests.map(({ id, title, intent, mode, status, failure, notes }) => ({
+          id,
+          title,
+          intent,
+          // A fork leaves its parent's document alone; the interface keeps
+          // the parent's duplicate verdict on the strength of this.
+          mode,
+          // Which pins this change speaks for. The interface marks them, so
+          // a note already sitting in a prompt an agent holds does not look
+          // like one nobody has read.
+          notes: notes ?? [],
+          // The run in flight is the one thing the file cannot know. After
+          // that the file is the record, including across a restart, and the
+          // process-local failed set only covers a request whose verdict
+          // could not be written.
+          status: snapshot.running && snapshot.requestId === id ? "running" : status === "queued" && snapshot.failedIds.includes(id) ? "failed" : status,
+          failure: failure ?? null
+        })),
+        agent: {
+          attached: externallyAttached(),
+          running: snapshot.running,
+          name: snapshot.running ? snapshot.agent : null,
+          activity: snapshot.running ? snapshot.activity : null,
+          startedAt: snapshot.running ? snapshot.startedAt : null,
+          // A stop that has been asked for but not yet obeyed. The card
+          // says so rather than going on describing a live run.
+          stopping: snapshot.running && snapshot.stopping,
+          // Why a run that looks stalled is stalled, while it is stalled.
+          waiting: snapshot.running ? snapshot.waiting : null
+        }
+      }));
     }
-    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share` && req.method === "POST") {
+    if (path === `${LEGLAS_PREFIX}/api/requests/cancel` && req.method === "POST") {
       if (!hasJsonBody(req)) {
-        return sendJson2(res, 400, { ok: false, error: "Share details must be JSON." });
+        return sendJson2(res, 200, { ok: true, cancelled: runner?.cancel() ?? false });
       }
       let body = "";
       req.on("data", (chunk) => body += chunk);
-      return void req.on("end", async () => {
+      return void req.on("end", () => {
         const parsed2 = jsonBody(body);
         if (parsed2 === null) {
           return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
         }
-        const result2 = await shares?.create(parsed2).catch((error) => ({
-          ok: false,
-          status: 500,
-          error: `Leglas could not start the share (${error instanceof Error ? error.message : String(error)}).`
-        }));
-        if (result2 === void 0) {
-          return sendJson2(res, 500, { ok: false, error: "Sharing is not available." });
+        if (parsed2.id !== void 0 && typeof parsed2.id !== "string") {
+          return sendJson2(res, 400, { ok: false, error: "The request id must be a string." });
         }
-        return result2.ok ? sendJson2(res, 200, result2) : sendJson2(res, result2.status, { ok: false, error: result2.error });
+        return sendJson2(res, 200, { ok: true, cancelled: runner?.cancel(parsed2.id) ?? false });
       });
     }
-    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/update` && req.method === "POST") {
+    if (path === `${LEGLAS_PREFIX}/api/requests/retry` && req.method === "POST") {
       if (!hasJsonBody(req)) {
-        return sendJson2(res, 400, { ok: false, error: "Share details must be JSON." });
+        return sendJson2(res, 400, { ok: false, error: "Retry must be JSON." });
       }
       let body = "";
       req.on("data", (chunk) => body += chunk);
@@ -7160,70 +7341,54 @@ async function startServer(options) {
         if (parsed2 === null) {
           return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
         }
-        const result2 = await shares?.update(parsed2);
-        if (result2 === void 0) {
-          return sendJson2(res, 500, { ok: false, error: "Sharing is not available." });
+        if (typeof parsed2.id !== "string") {
+          return sendJson2(res, 400, { ok: false, error: "Body needs a request id." });
+        }
+        const request = (await readRequests(cwd)).find((entry2) => entry2.id === parsed2.id);
+        if (request === void 0) {
+          return sendJson2(res, 404, { ok: false, error: "No such request." });
+        }
+        if (!isEnded(request, runner?.snapshot().failedIds ?? [])) {
+          return sendJson2(res, 400, { ok: false, error: "Only an ended request can be run again." });
+        }
+        try {
+          const retryId = newRequestId();
+          const attachments = await rehomeCaptures(cwd, request.id, retryId, request.attachments ?? []).catch(() => []);
+          if (!await removeRequest(cwd, request.id)) {
+            return sendJson2(res, 404, { ok: false, error: "No such request." });
+          }
+          await appendRequest(cwd, {
+            title: request.title,
+            url: request.url,
+            intent: request.intent,
+            target: request.target,
+            // The prompt names the captures by path, and the embedded pipes
+            // are not its only readers: watch, a custom command and
+            // `requests --json` all hand the text over as it stands.
+            prompt: attachments.length === 0 ? request.prompt : rehomeText(request.prompt, request.id, retryId),
+            // The stored prompt already carries the mode's instructions;
+            // its notes and visual context travel with the retry too.
+            ...request.mode === void 0 ? {} : { mode: request.mode },
+            ...request.notes === void 0 ? {} : { notes: request.notes },
+            ...attachments.length === 0 ? {} : { attachments },
+            ...request.captureNote === void 0 ? {} : { captureNote: request.captureNote },
+            ...request.compare === void 0 ? {} : { compare: request.compare },
+            ...request.references === void 0 ? {} : { references: request.references }
+          }, retryId);
+          runner?.nudge();
+          return sendJson2(res, 200, { ok: true });
+        } catch {
+          return sendJson2(res, 500, { ok: false, error: "The request could not be retried." });
         }
-        return result2.ok ? sendJson2(res, 200, result2) : sendJson2(res, result2.status, { ok: false, error: result2.error });
       });
     }
-    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/grants` && req.method === "POST") {
-      return void readShareBody(req, res, (body) => shares?.createGrant(body));
-    }
-    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/grants/revoke` && req.method === "POST") {
-      return void readShareBody(req, res, (body) => shares?.revokeGrant(body));
-    }
-    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/grants/extend` && req.method === "POST") {
-      return void readShareBody(req, res, (body) => shares?.extendGrant(body));
-    }
-    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/allow` && req.method === "POST") {
-      return void readShareBody(req, res, (body) => shares?.allowRoute(body));
-    }
-    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/rotate` && req.method === "POST") {
-      return void readShareBody(req, res, () => shares?.rotate());
-    }
-    if (!context.remote && path === `${LEGLAS_PREFIX}/api/share/stop` && req.method === "POST") {
-      return void (shares?.stop() ?? Promise.resolve()).then(() => sendJson2(res, 200, { ok: true }));
-    }
-    if (path === `${LEGLAS_PREFIX}/api/config`) {
-      const boot = config?.previews ?? [];
-      const errors = [...configErrors];
-      const notice = configStalenessNotice(cwd, bootConfigSnapshot, snapshotConfig(cwd));
-      if (notice !== null)
-        errors.push(notice);
-      return void readLocalPreviews(cwd).then(({ previews: local, errors: localErrors }) => {
-        if (localErrors.length > 0) {
-          return sendConditionalJson(req, res, {
-            project,
-            devServer: target,
-            scanPreviews: config?.scanPreviews ?? true,
-            previews: previewsForConfig(boot),
-            errors,
-            warnings: configWarnings
-          });
-        }
-        const localTitles = new Set(local.map((preview) => preview.title));
-        const currentBoot = boot.filter((preview) => preview.local !== true || localTitles.has(preview.title));
-        const known = new Set(currentBoot.map((preview) => preview.title));
-        const fresh = local.filter((preview) => !known.has(preview.title) && preview.branch === void 0 && preview.file === void 0);
-        sendConditionalJson(req, res, {
-          project,
-          devServer: target,
-          scanPreviews: config?.scanPreviews ?? true,
-          previews: previewsForConfig([...currentBoot, ...fresh]),
-          errors,
-          warnings: configWarnings
-        });
-      }).catch(() => sendConditionalJson(req, res, {
-        project,
-        devServer: target,
-        scanPreviews: config?.scanPreviews ?? true,
-        previews: previewsForConfig(boot),
-        errors,
-        warnings: configWarnings
-      }));
+    if (path === `${LEGLAS_PREFIX}/api/annotations` && req.method === "GET") {
+      return void readAnnotations(cwd).then((annotations) => sendConditionalJson(req, res, { annotations }));
     }
-    if (path === `${LEGLAS_PREFIX}/api/previews/start` && req.method === "POST") {
+    if (path === `${LEGLAS_PREFIX}/api/annotations` && req.method === "POST") {
+      if (!hasJsonBody(req)) {
+        return sendJson2(res, 400, { ok: false, error: "A note must be JSON." });
+      }
       let body = "";
       req.on("data", (chunk) => body += chunk);
       return void req.on("end", async () => {
@@ -7232,33 +7397,28 @@ async function startServer(options) {
           return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
         }
         if (typeof parsed2.title !== "string" || parsed2.title.trim() === "") {
-          return sendJson2(res, 400, { ok: false, error: "Body needs a direction title." });
-        }
-        const preview = (await livePreviewDefinitions()).find((entry) => entry.title === parsed2.title);
-        if (preview === void 0) {
-          return sendJson2(res, 404, { ok: false, error: "No such direction." });
+          return sendJson2(res, 400, { ok: false, error: "A note needs a direction." });
         }
-        if (preview.branch === void 0) {
-          return sendJson2(res, 400, {
-            ok: false,
-            error: `"${preview.title}" is not a branch preview.`
-          });
+        const anchor = anchorFrom(parsed2.anchor);
+        if (anchor === null) {
+          return sendJson2(res, 400, { ok: false, error: "A note needs something to point at." });
         }
-        if (config?.devCommand === void 0) {
-          return sendJson2(res, 400, {
-            ok: false,
-            error: `"${preview.title}" cannot start because the config sets no devCommand.`
+        try {
+          const annotation = await addAnnotation(cwd, {
+            anchor,
+            note: typeof parsed2.note === "string" ? parsed2.note.trim() : "",
+            title: parsed2.title
           });
+          return sendJson2(res, 200, { ok: true, annotation });
+        } catch {
+          return sendJson2(res, 500, { ok: false, error: "The note could not be kept." });
         }
-        void branches.start(preview.title);
-        const state = branches.state(preview.title);
-        if (state === void 0) {
-          return sendJson2(res, 404, { ok: false, error: "No such branch preview." });
-        }
-        return sendJson2(res, 200, { ok: true, state: publicBranchState(state) });
       });
     }
-    if (path === `${LEGLAS_PREFIX}/api/previews/delete` && req.method === "POST") {
+    if (path === `${LEGLAS_PREFIX}/api/annotations/update` && req.method === "POST") {
+      if (!hasJsonBody(req)) {
+        return sendJson2(res, 400, { ok: false, error: "A note must be JSON." });
+      }
       let body = "";
       req.on("data", (chunk) => body += chunk);
       return void req.on("end", async () => {
@@ -7266,100 +7426,27 @@ async function startServer(options) {
         if (parsed2 === null) {
           return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
         }
-        const titles = parsed2.titles;
-        if (!Array.isArray(titles) || titles.length === 0 || titles.some((title) => typeof title !== "string" || title.trim() === "")) {
-          return sendJson2(res, 400, {
-            ok: false,
-            error: "Body needs a non-empty array of direction titles."
-          });
-        }
-        const unique = [...new Set(titles)];
-        try {
-          const local = await readLocalPreviews(cwd);
-          if (local.errors.length > 0) {
-            return sendJson2(res, 409, { ok: false, error: local.errors.join(" ") });
-          }
-          const localTitles = new Set(local.previews.map((preview) => preview.title));
-          const unknown = unique.filter((title) => !localTitles.has(title));
-          if (unknown.length > 0) {
-            return sendJson2(res, 400, {
-              ok: false,
-              error: "Only machine-local directions can be deleted from the registry."
-            });
-          }
-          const deleted = await dropLocalPreviews(cwd, unique);
-          return sendJson2(res, 200, { ok: true, deleted });
-        } catch {
-          return sendJson2(res, 500, {
-            ok: false,
-            error: "The directions could not be deleted from Leglas."
-          });
-        }
-      });
-    }
-    if (path === `${LEGLAS_PREFIX}/api/references` && req.method === "POST") {
-      const declaredLength = req.headers["content-length"];
-      if (typeof declaredLength === "string" && Number(declaredLength) > REFERENCE_MAX_BYTES) {
-        return sendJson2(res, 413, { ok: false, error: "That image is over 10MB." });
-      }
-      const chunks = [];
-      let bytes = 0;
-      let refused = false;
-      req.on("data", (chunk) => {
-        if (refused)
-          return;
-        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        bytes += buffer.length;
-        if (bytes > REFERENCE_MAX_BYTES) {
-          refused = true;
-          req.pause();
-          res.once("finish", () => req.socket.destroy());
-          sendJson2(res, 413, { ok: false, error: "That image is over 10MB." });
-          return;
-        }
-        chunks.push(buffer);
-      });
-      return void req.once("end", async () => {
-        if (refused)
-          return;
-        if (bytes === 0) {
-          return sendJson2(res, 400, { ok: false, error: "The upload was empty." });
+        if (typeof parsed2.id !== "string" || parsed2.id === "") {
+          return sendJson2(res, 400, { ok: false, error: "Body needs the note to reword." });
         }
-        const body = Buffer.concat(chunks, bytes);
-        const image = sniffImage(body);
-        if (image === null) {
-          return sendJson2(res, 415, {
-            ok: false,
-            error: "Only PNG, JPEG, WebP and GIF images can be attached."
-          });
+        if (typeof parsed2.note !== "string") {
+          return sendJson2(res, 400, { ok: false, error: "A reworded note needs its words." });
         }
-        const id = newRequestId();
-        const file = `${REFERENCES_DIR}/${id}.${image.kind}`;
         try {
-          await mkdir8(join12(cwd, REFERENCES_DIR), { recursive: true });
-          await writeFile8(join12(cwd, file), body);
-          void pruneReferences(cwd).catch(() => {
-          });
-          return sendJson2(res, 200, {
-            ok: true,
-            reference: {
-              id,
-              file,
-              name: referenceName(req.headers["x-leglas-filename"]),
-              width: image.width,
-              height: image.height,
-              bytes
-            }
-          });
-        } catch {
-          return sendJson2(res, 500, {
-            ok: false,
-            error: "The image could not be attached."
-          });
+          const annotation = await updateAnnotation(cwd, parsed2.id, parsed2.note);
+          if (annotation === null) {
+            return sendJson2(res, 404, { ok: false, error: "That note has gone." });
+          }
+          return sendJson2(res, 200, { ok: true, annotation });
+        } catch {
+          return sendJson2(res, 500, { ok: false, error: "The note could not be reworded." });
         }
       });
     }
-    if (path === `${LEGLAS_PREFIX}/api/request` && req.method === "POST") {
+    if (path === `${LEGLAS_PREFIX}/api/annotations/delete` && req.method === "POST") {
+      if (!hasJsonBody(req)) {
+        return sendJson2(res, 400, { ok: false, error: "Delete must be JSON." });
+      }
       let body = "";
       req.on("data", (chunk) => body += chunk);
       return void req.on("end", async () => {
@@ -7367,101 +7454,20 @@ async function startServer(options) {
         if (parsed2 === null) {
           return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
         }
-        if (parsed2.mode !== void 0 && parsed2.mode !== "variant" && parsed2.mode !== "replace") {
-          return sendJson2(res, 400, {
-            ok: false,
-            error: 'mode must be "variant" or "replace".'
-          });
-        }
-        const mode = parsed2.mode === "replace" ? "replace" : "variant";
-        if (parsed2.references !== void 0 && (!Array.isArray(parsed2.references) || parsed2.references.some((reference) => typeof reference !== "string" || !/^[A-Za-z0-9_-]{1,32}$/.test(reference)))) {
-          return sendJson2(res, 400, { ok: false, error: "references must be uploaded image ids." });
-        }
-        const references = parsed2.references ?? [];
-        if (references.length > 0) {
-          const present = new Set((await readdir3(join12(cwd, REFERENCES_DIR)).catch(() => [])).map((name) => name.slice(0, name.indexOf(".") === -1 ? name.length : name.indexOf("."))));
-          const gone = references.filter((id2) => !present.has(id2));
-          if (gone.length > 0) {
-            return sendJson2(res, 410, {
-              ok: false,
-              error: gone.length === 1 ? "An attached image is gone: it was pasted over an hour ago and never sent. Attach it again." : "Some attached images are gone: they were pasted over an hour ago and never sent. Attach them again."
-            });
-          }
-        }
-        const width = typeof parsed2.width === "number" && Number.isFinite(parsed2.width) ? Math.min(MAX_WIDTH, Math.max(MIN_WIDTH, Math.round(parsed2.width))) : 1440;
-        const previews = await livePreviews();
-        const preview = previews.find((entry) => entry.title === parsed2.title);
-        if (!preview) {
-          return sendJson2(res, 400, { ok: false, error: "Unknown preview, or empty request." });
-        }
-        const notes = annotationsFor(await readAnnotations(cwd).catch(() => []), preview.title);
-        if (!parsed2.intent?.trim() && notes.length === 0) {
-          return sendJson2(res, 400, { ok: false, error: "Unknown preview, or empty request." });
-        }
-        const intent = (parsed2.intent ?? "").trim();
-        const live2 = (await readRequests(cwd).catch(() => [])).filter((entry) => entry.status === "queued" || entry.status === "picked-up");
-        const sameNotes = (entry) => {
-          const before = [...entry.notes ?? []].sort().join(",");
-          return before === notes.map((note) => note.id).sort().join(",");
-        };
-        const compare = typeof parsed2.compare === "string" && parsed2.compare !== preview.title ? previews.find((entry) => entry.title === parsed2.compare) ?? null : null;
-        const sameContext = (entry) => (entry.compare ?? null) === (compare?.title ?? null) && [...entry.references ?? []].sort().join(",") === [...references].sort().join(",");
-        if (live2.some((entry) => entry.title === preview.title && entry.intent === intent && // The same words in the other mode are not the same request:
-        // one forks the direction and the other rewrites it. Only a
-        // genuine repeat is refused.
-        (entry.mode ?? "replace") === mode && sameNotes(entry) && sameContext(entry))) {
-          return sendJson2(res, 409, {
-            ok: false,
-            duplicate: true,
-            error: `That exact change to ${preview.title} is already waiting.`
-          });
+        const ids = Array.isArray(parsed2.ids) ? parsed2.ids.filter((entry2) => typeof entry2 === "string") : [];
+        if (ids.length === 0) {
+          return sendJson2(res, 400, { ok: false, error: "Body needs the notes to forget." });
         }
-        const address = server.address();
-        const requestPort = typeof address === "object" && address !== null ? address.port : options.port ?? DEFAULT_PORT;
-        const id = newRequestId();
-        const captured = await attachRequest(cwd, id, {
-          origin: `http://127.0.0.1:${requestPort}`,
-          preview,
-          width,
-          notes,
-          compare,
-          references
-        }, { pool: browserPool });
-        const composed = composeRequest(preview, intent, mode, notes, leglasCommand, captured);
         try {
-          await appendRequest(cwd, {
-            title: preview.title,
-            url: preview.url,
-            intent,
-            // The ids travel with the request so a change made in place can
-            // forget the notes it answered. A fork leaves them where they are:
-            // the direction they point at was not touched.
-            ...notes.length === 0 ? {} : { notes: notes.map((entry) => entry.id) },
-            ...captured.attachments.length === 0 ? {} : { attachments: captured.attachments },
-            ...captured.skipped === null ? {} : { captureNote: captured.skipped },
-            ...compare === null ? {} : { compare: compare.title },
-            ...references.length === 0 ? {} : { references },
-            ...composed
-          }, id);
-          runner?.nudge();
-          return sendJson2(res, 200, {
-            ok: true,
-            ...composed,
-            attachments: captured.attachments
-          });
+          return sendJson2(res, 200, { ok: true, deleted: await removeAnnotations(cwd, ids) });
         } catch {
-          return sendJson2(res, 200, {
-            ok: true,
-            ...composed,
-            attachments: captured.attachments,
-            queued: false
-          });
+          return sendJson2(res, 500, { ok: false, error: "The notes could not be forgotten." });
         }
       });
     }
-    if (path === `${LEGLAS_PREFIX}/api/capture` && req.method === "POST") {
+    if (path === `${LEGLAS_PREFIX}/api/requests/dismiss` && req.method === "POST") {
       if (!hasJsonBody(req)) {
-        return sendJson2(res, 400, { ok: false, error: "Capture must be JSON." });
+        return sendJson2(res, 400, { ok: false, error: "Dismiss must be JSON." });
       }
       let body = "";
       req.on("data", (chunk) => body += chunk);
@@ -7470,113 +7476,24 @@ async function startServer(options) {
         if (parsed2 === null) {
           return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
         }
-        if (typeof parsed2.title !== "string" || parsed2.title === "") {
-          return sendJson2(res, 400, { ok: false, error: "Capture needs a direction title." });
-        }
-        if (parsed2.note !== void 0 && typeof parsed2.note !== "string") {
-          return sendJson2(res, 400, { ok: false, error: "The note id must be a string." });
-        }
-        const preview = (await livePreviews()).find((entry) => entry.title === parsed2.title);
-        if (preview === void 0) {
-          return sendJson2(res, 404, { ok: false, error: "No such direction." });
+        if (typeof parsed2.id !== "string") {
+          return sendJson2(res, 400, { ok: false, error: "Body needs a request id." });
         }
-        const width = typeof parsed2.width === "number" && Number.isFinite(parsed2.width) ? Math.min(MAX_WIDTH, Math.max(MIN_WIDTH, Math.round(parsed2.width))) : 1440;
-        const browser = await browserPool.acquire();
-        if (browser === null) {
-          return sendJson2(res, 503, {
-            ok: false,
-            error: browserPool.reason() ?? NO_BROWSER
-          });
+        const target2 = (await readRequests(cwd)).find((entry2) => entry2.id === parsed2.id);
+        if (target2 === void 0 || !isEnded(target2, runner?.snapshot().failedIds ?? [])) {
+          return sendJson2(res, 400, { ok: false, error: "Only an ended request can be dismissed." });
         }
-        const annotations = typeof parsed2.note === "string" ? (await readAnnotations(cwd).catch(() => [])).filter((entry) => entry.id === parsed2.note && entry.title === preview.title) : [];
-        const address = server.address();
-        const capturePort = typeof address === "object" && address !== null ? address.port : options.port ?? DEFAULT_PORT;
-        const controller = new AbortController();
-        const timeoutMarker = /* @__PURE__ */ Symbol("capture timeout");
-        let timedOut;
-        const timeout = new Promise((resolve5) => {
-          timedOut = () => resolve5(timeoutMarker);
-        });
-        const timer = setTimeout(() => {
-          timedOut();
-          controller.abort();
-        }, CAPTURE_DEADLINE_MS);
-        timer.unref?.();
         try {
-          const work = capturePage(browser, {
-            url: previewUrl(`http://127.0.0.1:${capturePort}`, preview),
-            width,
-            ...annotations.length === 0 ? {} : {
-              focuses: annotations.map((entry) => ({
-                selector: entry.anchor.selector,
-                text: entry.anchor.text,
-                tag: entry.anchor.tag,
-                ...entry.anchor.region === void 0 ? {} : { region: entry.anchor.region },
-                rect: entry.anchor.rect
-              }))
-            },
-            timeoutMs: CAPTURE_LOAD_MS,
-            signal: controller.signal
-          });
-          const result2 = await Promise.race([work, timeout]);
-          if (result2 === timeoutMarker) {
-            return sendJson2(res, 504, { ok: false, error: "The page did not load in time." });
+          if (!await removeRequest(cwd, parsed2.id)) {
+            return sendJson2(res, 404, { ok: false, error: "No such request." });
           }
-          clearTimeout(timer);
-          const crop = annotations.length > 0 ? result2.crops[0] : null;
-          const shot = crop?.shot ?? result2.frame;
-          const noteSuffix = typeof parsed2.note === "string" ? `-${parsed2.note.replace(/[^A-Za-z0-9_-]+/g, "-")}` : "";
-          const name = `${captureSlug(preview.title)}-${result2.frame.width}${noteSuffix}.png`;
-          const relativeFile = `${CAPTURES_DIR}/show/${name}`;
-          await mkdir8(join12(cwd, CAPTURES_DIR, "show"), { recursive: true });
-          await writeFile8(join12(cwd, relativeFile), shot.png);
-          return sendJson2(res, 200, {
-            ok: true,
-            file: relativeFile,
-            width: shot.width,
-            height: shot.height,
-            viewport: result2.frame.width,
-            errors: result2.errors,
-            hydration: result2.hydration,
-            cut: result2.cut
-          });
-        } catch (error) {
-          clearTimeout(timer);
-          return sendJson2(res, 502, {
-            ok: false,
-            error: error instanceof Error ? error.message : String(error)
-          });
+          return sendJson2(res, 200, { ok: true });
+        } catch {
+          return sendJson2(res, 500, { ok: false, error: "The request could not be dismissed." });
         }
       });
     }
-    if (path === `${LEGLAS_PREFIX}/api/agents/warm` && req.method === "POST") {
-      return void readAgentChoice(cwd).then((choice) => {
-        if (choice.agent !== null)
-          runner?.prepare(choice.agent);
-        sendJson2(res, 200, { ok: true });
-      }, () => sendJson2(res, 200, { ok: true }));
-    }
-    if (path === `${LEGLAS_PREFIX}/api/agents` && req.method === "GET") {
-      return void Promise.all([
-        currentAgents(query.get("refresh") === "1"),
-        readAgentChoice(cwd)
-      ]).then(([agents, choice]) => sendJson2(res, 200, {
-        agents,
-        choice: choice.agent,
-        customRun: choice.run,
-        effort: choice.effort
-      }));
-    }
-    if (path === `${LEGLAS_PREFIX}/api/agent` && req.method === "POST") {
-      if (!isLoopbackAddress(req.socket.remoteAddress)) {
-        return sendJson2(res, 403, {
-          ok: false,
-          error: "The agent choice can only be made from the machine running Leglas."
-        });
-      }
-      if (!hasJsonBody(req)) {
-        return sendJson2(res, 400, { ok: false, error: "Agent choice must be JSON." });
-      }
+    if (path === `${LEGLAS_PREFIX}/api/renames` && req.method === "POST") {
       let body = "";
       req.on("data", (chunk) => body += chunk);
       return void req.on("end", () => {
@@ -7584,448 +7501,1192 @@ async function startServer(options) {
         if (parsed2 === null) {
           return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
         }
-        if (!isKnownAgent(parsed2.agent) && parsed2.agent !== "custom") {
-          return sendJson2(res, 400, { ok: false, error: "Body needs a known agent." });
-        }
-        if (parsed2.run !== void 0 && typeof parsed2.run !== "string") {
-          return sendJson2(res, 400, { ok: false, error: "The custom run command must be a string." });
-        }
-        const effort = parsed2.effort === null || isAgentEffort(parsed2.effort) ? parsed2.effort : void 0;
-        if (parsed2.effort !== void 0 && effort === void 0) {
-          return sendJson2(res, 400, { ok: false, error: "Effort must be a supported level or null." });
-        }
-        if (parsed2.agent === "custom") {
-          if (effort !== void 0) {
-            return sendJson2(res, 400, {
-              ok: false,
-              error: "Custom agents manage effort in their own command."
-            });
-          }
-          if (typeof parsed2.run !== "string") {
-            return sendJson2(res, 400, { ok: false, error: "A custom agent needs a run command." });
-          }
-          const template = parseTemplate(parsed2.run);
-          if (!template.ok)
-            return sendJson2(res, 400, { ok: false, error: template.error });
-          return void saveAgentChoice(cwd, { agent: "custom", run: parsed2.run }).then(() => sendJson2(res, 200, { ok: true }), () => sendJson2(res, 500, { ok: false, error: "Agent choice could not be saved." }));
-        }
-        if (effort !== void 0 && effort !== null && !KNOWN_AGENTS[parsed2.agent].efforts.includes(effort)) {
-          return sendJson2(res, 400, {
-            ok: false,
-            error: `${KNOWN_AGENTS[parsed2.agent].name} does not expose an effort override.`
-          });
+        if (parsed2.renames === null || typeof parsed2.renames !== "object") {
+          return sendJson2(res, 400, { ok: false, error: "Body needs a renames object." });
         }
-        return void saveAgentChoice(cwd, {
-          agent: parsed2.agent,
-          ...effort === void 0 ? {} : { effort }
-        }).then(() => {
-          runner?.prepare(parsed2.agent);
-          sendJson2(res, 200, { ok: true });
-        }, () => sendJson2(res, 500, { ok: false, error: "Agent choice could not be saved." }));
+        const renames = Object.fromEntries(Object.entries(parsed2.renames).filter((entry2) => typeof entry2[1] === "string" && entry2[1] !== ""));
+        void writeRenames(cwd, renames).then(() => sendJson2(res, 200, { ok: true }), () => sendJson2(res, 200, { ok: false }));
+      });
+    }
+    if (path === `${LEGLAS_PREFIX}/api/health`) {
+      return void probe(target).then((reachable) => sendConditionalJson(req, res, { devServer: target, reachable, cwd }));
+    }
+    if (path.startsWith(`${FILES_PREFIX}/`)) {
+      const rest = path.slice(FILES_PREFIX.length + 1);
+      const slash = rest.indexOf("/");
+      const slug = slash === -1 ? rest : rest.slice(0, slash);
+      let relative6 = slash === -1 ? "" : rest.slice(slash + 1);
+      try {
+        relative6 = decodeURIComponent(relative6);
+      } catch {
+        relative6 = "";
+      }
+      const dir = fileMounts.get(slug);
+      const serveMount = () => {
+        if (dir !== void 0 && relative6 !== "" && serveFrom(res, dir, relative6))
+          return;
+        res.writeHead(404, { "content-type": "text/plain; charset=utf-8", "cache-control": "no-store" });
+        res.end("Leglas: no such preview file.");
+      };
+      if (!context.remote)
+        return serveMount();
+      if (relative6.split("/").some((segment) => segment.startsWith("."))) {
+        return sendJson2(res, 403, { ok: false, error: "Not available to viewers." });
+      }
+      return void (shares?.fileSlugAllowed(slug, context.grantId ?? "") ?? Promise.resolve(false)).then((allowed) => {
+        if (!allowed)
+          return sendJson2(res, 403, { ok: false, error: "Not available to viewers." });
+        serveMount();
       });
     }
-    if (path === `${LEGLAS_PREFIX}/api/watch` && req.method === "POST") {
-      let body = "";
-      req.on("data", (chunk) => body += chunk);
-      return void req.on("end", () => {
-        const parsed2 = jsonBody(body);
-        if (parsed2 === null) {
-          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
-        }
-        if (typeof parsed2.watching !== "boolean") {
-          return sendJson2(res, 400, { ok: false, error: "Body needs a watching boolean." });
-        }
-        lastSeen = parsed2.watching ? Date.now() : null;
-        sendJson2(res, 200, { ok: true });
+    if (path.startsWith(`${LEGLAS_PREFIX}/api/`)) {
+      return sendJson2(res, 404, { error: "No such Leglas API path." });
+    }
+    if (path === LEGLAS_PREFIX || path.startsWith(`${LEGLAS_PREFIX}/`)) {
+      if (shellDir !== null && serveShellFile(res, shellDir, path))
+        return;
+      if (shellDir !== null) {
+        res.writeHead(404, { "content-type": "text/plain; charset=utf-8", "cache-control": "no-store" });
+        res.end("Leglas: no such path.");
+        return;
+      }
+      res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
+      res.end(PLACEHOLDER);
+      return;
+    }
+    return proxy.request(req, res, context.publicOrigin);
+  };
+  let port = 0;
+  const server = http4.createServer((req, res) => handleRequest(req, res, {
+    remote: false,
+    publicOrigin: `http://localhost:${port}`
+  }));
+  const sockets = /* @__PURE__ */ new Set();
+  server.on("connection", (socket) => {
+    sockets.add(socket);
+    socket.once("close", () => sockets.delete(socket));
+  });
+  const handleUpgrade = (req, socket, head, context) => {
+    const liveUpgrade = context.remote ? live.upgrade(req, socket, head, { viewer: true }) : live.upgrade(req, socket, head);
+    if (liveUpgrade)
+      return true;
+    const path = (req.url ?? "/").split("?")[0] ?? "/";
+    if (path.startsWith(`${LEGLAS_PREFIX}/`)) {
+      socket.destroy();
+      return false;
+    }
+    proxy.upgrade(req, socket, head);
+    return false;
+  };
+  server.on("upgrade", (req, socket, head) => {
+    handleUpgrade(req, socket, head, { remote: false });
+  });
+  shares = createShareManager({
+    live,
+    previews: livePreviewDefinitions,
+    previewsForConfig,
+    viewerConfig: {
+      project,
+      devServer: target,
+      scanPreviews: config?.scanPreviews ?? true
+    },
+    request: (req, res, context) => handleRequest(req, res, {
+      remote: true,
+      publicOrigin: context.publicOrigin,
+      grantId: context.grantId
+    }),
+    upgrade: (req, socket, head) => handleUpgrade(req, socket, head, { remote: true }),
+    ...options.detectTunnels === void 0 ? {} : { detectTunnels: options.detectTunnels },
+    ...options.startTunnel === void 0 ? {} : { startTunnel: options.startTunnel }
+  });
+  port = await bind2(server, options.port ?? DEFAULT_PORT);
+  options.updates?.setPort(port);
+  const liveFiles = watchLiveFiles(cwd, bootConfigPath, live);
+  liveHealth = watchHealth(target, live);
+  await pruneCaptures(cwd, (await readRequests(cwd).catch(() => [])).map((request) => request.id)).catch(() => {
+  });
+  await writeServerInfo(cwd, {
+    port,
+    url: `http://localhost:${port}`,
+    pid: process.pid
+  }).catch(() => {
+  });
+  runner = startRunner({
+    cwd,
+    externallyAttached,
+    onChange: () => live.nudge("requests"),
+    leglasCommand,
+    ...options.codexAppServer === void 0 ? {} : { codexAppServer: options.codexAppServer },
+    ...options.claudeAgentSession === void 0 ? {} : { claudeAgentSession: options.claudeAgentSession }
+  });
+  options.updates?.onBusy(() => runner?.snapshot().running ?? false);
+  options.updates?.onChange(() => live.nudge("update"));
+  let closePromise = null;
+  return {
+    port,
+    url: `http://localhost:${port}`,
+    close: () => {
+      if (closePromise !== null)
+        return closePromise;
+      closePromise = (async () => {
+        liveFiles.close();
+        liveHealth?.close();
+        await options.updates?.close();
+        await Promise.all([
+          shares?.close() ?? Promise.resolve(),
+          branches.stop(),
+          runner.stop(),
+          browserPool.close(),
+          live.close()
+        ]);
+        await new Promise((done) => {
+          for (const socket of sockets)
+            socket.destroy();
+          sockets.clear();
+          server.closeAllConnections();
+          server.close(() => done());
+        });
+        await removeServerInfo(cwd, { port, pid: process.pid }).catch(() => {
+        });
+      })();
+      return closePromise;
+    }
+  };
+}
+
+// ../server/dist/update.js
+import { spawn as spawnChild2 } from "child_process";
+import { existsSync as existsSync4, readFileSync, realpathSync } from "fs";
+import { lstat as lstat3, mkdir as mkdir9, mkdtemp, rename as rename3, rm as rm5, writeFile as writeFile9 } from "fs/promises";
+import { homedir as homedir2 } from "os";
+import { dirname as dirname9, join as join13, posix as posix2, win32 } from "path";
+var DAY_MS = 24 * 60 * 60 * 1e3;
+var INSTALL_DEADLINE_MS = 5 * 60 * 1e3;
+var REGISTRY = "https://registry.npmjs.org";
+var RELEASES = "https://leglas.vercel.app/releases.json";
+var CHECKOUT_NOTICE = "You run Leglas from a checkout, so pull to update.";
+var releaseUrl = (version2) => `https://leglas.vercel.app/changelog/#v${version2}`;
+function normalized(path) {
+  return posix2.normalize(path.replaceAll("\\", "/"));
+}
+function realPath(path) {
+  try {
+    return realpathSync(path);
+  } catch {
+    return null;
+  }
+}
+var COMMANDS = {
+  npx: { npm: ["npx"], pnpm: ["pnpm", "dlx"], bun: ["bunx"], yarn: ["yarn", "dlx"] },
+  global: { npm: ["npm", "i", "-g"], pnpm: ["pnpm", "add", "-g"], bun: ["bun", "add", "-g"], yarn: ["yarn", "global", "add"] },
+  project: { npm: ["npm", "install"], pnpm: ["pnpm", "up"], bun: ["bun", "update"], yarn: ["yarn", "up"] }
+};
+var YARN_CLASSIC = ["yarn", "upgrade"];
+function commandParts(kind, manager, version2, classic = false) {
+  return [...classic ? YARN_CLASSIC : COMMANDS[kind][manager], `leglas@${version2}`];
+}
+function installation(kind, manager, root, classic = false) {
+  return { kind, manager, command: commandParts(kind, manager, "latest", classic).join(" "), ...root === void 0 ? {} : { root } };
+}
+function* ancestors(directory) {
+  const paths = /^[a-z]:\//i.test(directory) ? win32 : posix2;
+  let current = directory;
+  while (true) {
+    yield current;
+    const parent = normalized(paths.dirname(current));
+    if (parent === current)
+      return;
+    current = parent;
+  }
+}
+function environmentManager(env) {
+  const manager = /^(npm|pnpm|bun|yarn)\//.exec(env.npm_config_user_agent ?? "")?.[1];
+  return manager === "pnpm" || manager === "bun" || manager === "yarn" || manager === "npm" ? manager : null;
+}
+function projectInstall(root, exists) {
+  for (const directory of ancestors(root)) {
+    if (exists(posix2.join(directory, "pnpm-lock.yaml")))
+      return installation("project", "pnpm", root);
+    if (exists(posix2.join(directory, "yarn.lock"))) {
+      return installation("project", "yarn", root, !exists(posix2.join(directory, ".yarnrc.yml")));
+    }
+    if (exists(posix2.join(directory, "bun.lock")) || exists(posix2.join(directory, "bun.lockb")))
+      return installation("project", "bun", root);
+    if (exists(posix2.join(directory, "package-lock.json")) || exists(posix2.join(directory, "npm-shrinkwrap.json")))
+      return installation("project", "npm", root);
+  }
+  return installation("project", "npm", root);
+}
+function detectInstall(entry2, cwd, exists, realpath5 = realPath, env = process.env) {
+  const path = normalized(entry2);
+  const directory = normalized(realpath5(cwd) ?? cwd);
+  const manager = environmentManager(env);
+  if (path.includes("/_npx/"))
+    return installation("npx", "npm");
+  if (path.includes("/pnpm/") && path.includes("/dlx/"))
+    return installation("npx", "pnpm");
+  if (/\/bunx-[^/]+\//.test(path))
+    return installation("npx", "bun");
+  if (/\/dlx-[^/]+\//.test(path))
+    return installation("npx", "yarn");
+  const berry = /\/\.yarn\/(?:berry\/)?cache\//.test(path) || path.includes("/.yarn/unplugged/");
+  const packageIndex = path.lastIndexOf("/node_modules/leglas/");
+  const cached = /\/(?:tmp|temp|cache|\.cache)\//i.test(path) || path.includes("/Library/Caches/") || /\/var\/folders\/[^/]+\/[^/]+\/T\//.test(path) || [env.TMPDIR, env.TEMP, env.TMP].some((temp) => temp !== void 0 && path.startsWith(`${normalized(temp).replace(/\/$/, "")}/`));
+  if (!berry && packageIndex !== -1 && cached && manager !== null && manager !== "npm") {
+    return installation("npx", manager);
+  }
+  if (berry) {
+    for (const root of ancestors(directory)) {
+      if (exists(posix2.join(root, "yarn.lock")) && exists(posix2.join(root, ".yarnrc.yml")))
+        return installation("project", "yarn", root);
+    }
+    return { kind: "source", manager: "yarn", command: null };
+  }
+  if (packageIndex === -1)
+    return { kind: "source", manager: "npm", command: null };
+  const packageDirectory = path.slice(0, packageIndex + "/node_modules/leglas".length);
+  const windows = /^[a-z]:\//i.test(path) || entry2.startsWith("\\\\");
+  const comparable = (value) => windows ? normalized(value).toLowerCase() : normalized(value);
+  for (const root of ancestors(directory)) {
+    const dependency = realpath5(posix2.join(root, "node_modules/leglas"));
+    if (dependency !== null && comparable(dependency) === comparable(packageDirectory))
+      return projectInstall(root, exists);
+  }
+  if (path.includes("/pnpm/") && /\/store\/[^/]+\/links\//.test(path) && manager === "pnpm")
+    return installation("npx", "pnpm");
+  if (path.includes("/pnpm/"))
+    return installation("global", "pnpm");
+  if (path.includes("/yarn/global/") || path.includes("/.yarn/global/"))
+    return installation("global", "yarn");
+  if (path.includes("/.bun/"))
+    return installation("global", "bun");
+  return installation("global", manager ?? "npm");
+}
+function parsedVersion(value) {
+  const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/.exec(value);
+  if (match === null)
+    return null;
+  const pre = match[4]?.split(".") ?? [];
+  if (pre.some((part) => /^0\d+$/.test(part)))
+    return null;
+  return { core: match.slice(1, 4).map((part) => BigInt(part)), pre };
+}
+function compareVersions(a, b) {
+  const left = parsedVersion(a);
+  const right = parsedVersion(b);
+  if (left === null || right === null)
+    return 0;
+  for (let i = 0; i < 3; i += 1) {
+    if (left.core[i] < right.core[i])
+      return -1;
+    if (left.core[i] > right.core[i])
+      return 1;
+  }
+  if (left.pre.length === 0)
+    return right.pre.length === 0 ? 0 : 1;
+  if (right.pre.length === 0)
+    return -1;
+  for (let i = 0; i < Math.max(left.pre.length, right.pre.length); i += 1) {
+    const l = left.pre[i];
+    const r = right.pre[i];
+    if (l === void 0)
+      return -1;
+    if (r === void 0)
+      return 1;
+    if (l === r)
+      continue;
+    const ln = /^\d+$/.test(l);
+    const rn = /^\d+$/.test(r);
+    if (ln && rn)
+      return BigInt(l) < BigInt(r) ? -1 : 1;
+    if (ln !== rn)
+      return ln ? -1 : 1;
+    return l < r ? -1 : 1;
+  }
+  return 0;
+}
+function windowsLine(parts) {
+  return parts.map((part) => {
+    if (part !== "" && !/[\s"&|<>^()]/.test(part))
+      return part;
+    return `"${part.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/g, "$1$1")}"`;
+  }).join(" ");
+}
+function spawnCommand(parts, platform) {
+  if (platform === "win32")
+    return { file: windowsLine(parts), args: [], shell: true };
+  return { file: parts[0], args: parts.slice(1), shell: false };
+}
+function restartCommand(install, argv, latest, port, options) {
+  const rest = [];
+  for (let i = 2; i < argv.length; i += 1) {
+    const argument = argv[i];
+    if (argument === "--port")
+      i += 1;
+    else if (!argument.startsWith("--port=") && argument !== "--no-open")
+      rest.push(argument);
+  }
+  rest.push("--port", String(port), "--no-open");
+  const windows = options.platform === "win32";
+  if (install.kind === "npx") {
+    const runner = [...COMMANDS.npx[install.manager], ...install.manager === "npm" ? ["-y"] : [], `leglas@${latest}`];
+    return spawnCommand([...runner, ...rest], options.platform);
+  }
+  if (install.kind === "global") {
+    if (argv[1] !== void 0 && options.exists(argv[1]))
+      return { file: options.execPath, args: [argv[1], ...rest], shell: false };
+    return spawnCommand(["leglas", ...rest], options.platform);
+  }
+  if (install.kind === "project" && install.root !== void 0) {
+    const shim = (windows ? win32.join : join13)(install.root, "node_modules", ".bin", windows ? "leglas.cmd" : "leglas");
+    return spawnCommand(options.exists(shim) ? [shim, ...rest] : ["yarn", "leglas", ...rest], options.platform);
+  }
+  throw new Error(CHECKOUT_NOTICE);
+}
+function object(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function readState(path) {
+  const empty = { checkedAt: null, latest: null, skipped: null };
+  if (path === null)
+    return empty;
+  try {
+    const value = JSON.parse(readFileSync(path, "utf8"));
+    if (!object(value))
+      return empty;
+    if (value.checkedAt !== null && (typeof value.checkedAt !== "string" || !Number.isFinite(Date.parse(value.checkedAt))))
+      return empty;
+    if (value.skipped !== null && (typeof value.skipped !== "string" || parsedVersion(value.skipped) === null))
+      return empty;
+    let latest = null;
+    if (value.latest !== null) {
+      const release = value.latest;
+      if (!object(release) || typeof release.version !== "string" || parsedVersion(release.version) === null || release.title !== null && typeof release.title !== "string" || typeof release.url !== "string")
+        return empty;
+      latest = { version: release.version, title: release.title, url: releaseUrl(release.version) };
+    }
+    return { checkedAt: value.checkedAt, latest, skipped: value.skipped };
+  } catch {
+    return empty;
+  }
+}
+function defaultStatePath(home) {
+  try {
+    return join13(home(), ".leglas", "update.json");
+  } catch {
+    return null;
+  }
+}
+function mergeState(current, saved) {
+  const checked = (state) => state.checkedAt === null ? -Infinity : Date.parse(state.checkedAt);
+  const newest = checked(saved) > checked(current) ? saved : current;
+  let skipped = current.skipped;
+  if (saved.skipped !== null && (skipped === null || compareVersions(saved.skipped, skipped) > 0))
+    skipped = saved.skipped;
+  if (skipped !== null && newest.latest !== null && compareVersions(newest.latest.version, skipped) > 0)
+    skipped = null;
+  return { latest: newest.latest, checkedAt: newest.checkedAt, skipped };
+}
+async function writeState(path, state) {
+  let temporary = null;
+  try {
+    const directory = dirname9(path);
+    await mkdir9(directory, { recursive: true });
+    if (!(await lstat3(directory)).isDirectory())
+      return;
+    const existing = await lstat3(path).catch(() => null);
+    if (existing !== null && !existing.isFile())
+      return;
+    temporary = await mkdtemp(join13(directory, ".update-"));
+    const file = join13(temporary, "update.json");
+    await writeFile9(file, `${JSON.stringify(state, null, 2)}
+`, "utf8");
+    await rename3(file, path);
+  } catch {
+  } finally {
+    if (temporary !== null)
+      await rm5(temporary, { recursive: true, force: true }).catch(() => {
       });
+  }
+}
+function timedOut(error) {
+  return error instanceof Error && (error.name === "TimeoutError" || error.name === "AbortError");
+}
+async function registryVersion(fetcher, timeoutMs, registry) {
+  let response;
+  try {
+    response = await fetcher(`${registry}/leglas/latest`, {
+      signal: AbortSignal.timeout(timeoutMs),
+      headers: { accept: "application/json" }
+    });
+  } catch (error) {
+    throw new Error(timedOut(error) ? "npm took too long to answer." : "Could not reach npm.");
+  }
+  if (response.status !== 200)
+    throw new Error(`npm answered ${response.status}.`);
+  let body;
+  try {
+    body = await response.json();
+  } catch (error) {
+    throw new Error(timedOut(error) ? "npm took too long to answer." : "npm's answer made no sense.");
+  }
+  if (!object(body) || typeof body.version !== "string" || parsedVersion(body.version) === null) {
+    throw new Error("npm's answer made no sense.");
+  }
+  return body.version;
+}
+async function releaseTitles(fetcher, timeoutMs) {
+  const titles = /* @__PURE__ */ new Map();
+  try {
+    const response = await fetcher(RELEASES, {
+      signal: AbortSignal.timeout(timeoutMs),
+      headers: { accept: "application/json" }
+    });
+    if (response.status !== 200)
+      return titles;
+    const body = await response.json();
+    if (!Array.isArray(body))
+      return titles;
+    for (const entry2 of body) {
+      if (object(entry2) && typeof entry2.version === "string" && typeof entry2.title === "string") {
+        titles.set(entry2.version, entry2.title);
+      }
     }
-    if (path === `${LEGLAS_PREFIX}/api/requests` && req.method === "GET") {
-      const snapshot = runner?.snapshot() ?? {
-        running: false,
-        requestId: null,
-        agent: null,
-        activity: null,
-        startedAt: null,
-        stopping: false,
-        waiting: null,
-        failedIds: []
-      };
-      return void readRequests(cwd).then((requests) => sendConditionalJson(req, res, {
-        requests: requests.map(({ id, title, intent, mode, status, failure, notes }) => ({
-          id,
-          title,
-          intent,
-          // A fork leaves its parent's document alone; the interface keeps
-          // the parent's duplicate verdict on the strength of this.
-          mode,
-          // Which pins this change speaks for. The interface marks them, so
-          // a note already sitting in a prompt an agent holds does not look
-          // like one nobody has read.
-          notes: notes ?? [],
-          // The run in flight is the one thing the file cannot know. After
-          // that the file is the record, including across a restart, and the
-          // process-local failed set only covers a request whose verdict
-          // could not be written.
-          status: snapshot.running && snapshot.requestId === id ? "running" : status === "queued" && snapshot.failedIds.includes(id) ? "failed" : status,
-          failure: failure ?? null
-        })),
-        agent: {
-          attached: externallyAttached(),
-          running: snapshot.running,
-          name: snapshot.running ? snapshot.agent : null,
-          activity: snapshot.running ? snapshot.activity : null,
-          startedAt: snapshot.running ? snapshot.startedAt : null,
-          // A stop that has been asked for but not yet obeyed. The card
-          // says so rather than going on describing a live run.
-          stopping: snapshot.running && snapshot.stopping,
-          // Why a run that looks stalled is stalled, while it is stalled.
-          waiting: snapshot.running ? snapshot.waiting : null
-        }
-      }));
+  } catch {
+  }
+  return titles;
+}
+function installerReason(stdout, stderr) {
+  const lines2 = (output2) => output2.split(/\r?\n/).filter((line) => !/^\s+at /.test(line) && !/A complete log of this run|info Visit https:\/\/yarnpkg\.com/.test(line)).map((line) => line.trim()).filter(Boolean);
+  const errors = lines2(stderr);
+  const output = lines2(stdout);
+  const npm = [...errors, ...output].find((line) => /^npm error\s+\S/.test(line) && !/^npm error code\s/.test(line));
+  return npm?.replace(/^npm error\s+/, "") ?? errors[0] ?? output[0] ?? null;
+}
+function installVersion(install, version2, deps) {
+  if (install.kind !== "global" && install.kind !== "project")
+    throw new Error(CHECKOUT_NOTICE);
+  const classic = install.command === commandParts("project", "yarn", "latest", true).join(" ");
+  const parts = commandParts(install.kind, install.manager, version2, classic);
+  const command = parts.join(" ");
+  const invocation = spawnCommand(parts, deps.platform);
+  deps.log(`Updating Leglas to ${version2} with ${command}\u2026`);
+  const child = deps.spawn(invocation.file, invocation.args, {
+    stdio: ["ignore", "pipe", "pipe"],
+    shell: invocation.shell,
+    detached: deps.platform !== "win32",
+    env: deps.env,
+    ...install.kind === "project" ? { cwd: install.root } : {}
+  });
+  let settle;
+  let reject;
+  const result2 = new Promise((resolve5, fail) => {
+    settle = resolve5;
+    reject = fail;
+  });
+  let markGone;
+  const gone = new Promise((resolve5) => {
+    markGone = resolve5;
+  });
+  let settled = false;
+  let exited = false;
+  let stopping = false;
+  let stdout = "";
+  let stderr = "";
+  const readOut = (chunk) => {
+    stdout = (stdout + chunk.toString()).slice(-64e3);
+  };
+  const readErr = (chunk) => {
+    stderr = (stderr + chunk.toString()).slice(-64e3);
+  };
+  const finish = (error) => {
+    if (settled)
+      return;
+    settled = true;
+    clearTimeout(timer);
+    if (error === void 0)
+      settle();
+    else
+      reject(error);
+  };
+  const stop = () => {
+    if (stopping || exited)
+      return;
+    stopping = true;
+    try {
+      if (child.pid === void 0)
+        child.kill("SIGKILL");
+      else if (deps.platform === "win32") {
+        const killer = deps.spawn("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", shell: false });
+        killer.once("error", () => child.kill("SIGKILL"));
+      } else
+        deps.kill(-child.pid, "SIGKILL");
+    } catch {
     }
-    if (path === `${LEGLAS_PREFIX}/api/requests/cancel` && req.method === "POST") {
-      if (!hasJsonBody(req)) {
-        return sendJson2(res, 200, { ok: true, cancelled: runner?.cancel() ?? false });
+  };
+  const timer = setTimeout(() => {
+    finish(new Error(`${command} took longer than five minutes.`));
+    stop();
+  }, INSTALL_DEADLINE_MS);
+  timer.unref?.();
+  child.stdout?.on("data", readOut);
+  child.stderr?.on("data", readErr);
+  const onGone = () => {
+    exited = true;
+    clearTimeout(timer);
+    child.stdout?.off("data", readOut);
+    child.stderr?.off("data", readErr);
+    markGone();
+  };
+  child.once("error", (error) => {
+    finish(error);
+    if (child.pid === void 0)
+      onGone();
+  });
+  child.once("close", (code) => {
+    const reason = installerReason(stdout, stderr);
+    finish(code === 0 ? void 0 : new Error(`${command} exited ${code ?? 1}.${reason === null ? "" : ` ${reason}`}`));
+    onGone();
+  });
+  return { result: result2, gone, stop };
+}
+function createUpdateService(input) {
+  const deps = input.deps ?? {};
+  const fetcher = deps.fetch ?? fetch;
+  const now = deps.now ?? Date.now;
+  const timeoutMs = deps.timeoutMs ?? 4e3;
+  const statePath = deps.statePath === void 0 ? defaultStatePath(deps.homedir ?? homedir2) : deps.statePath;
+  const exists = deps.exists ?? existsSync4;
+  const env = deps.env ?? process.env;
+  const install = detectInstall(input.entry, input.cwd, exists, deps.realpath ?? realPath, env);
+  const spawn5 = deps.spawn ?? spawnChild2;
+  const kill = deps.kill ?? process.kill.bind(process);
+  const platform = deps.platform ?? process.platform;
+  const execPath = deps.execPath ?? process.execPath;
+  const log = deps.log ?? console.log;
+  const registry = (env.npm_config_registry || REGISTRY).replace(/\/+$/, "");
+  const argv = [...input.argv];
+  let state = {
+    ...readState(statePath),
+    checkError: null,
+    phase: { status: "idle" }
+  };
+  let checking = null;
+  let writing2 = Promise.resolve();
+  let port = DEFAULT_PORT;
+  let busy = () => false;
+  let restart = null;
+  let installer = null;
+  let pending = null;
+  let waiting = null;
+  let resume = null;
+  let closed = false;
+  let closing = null;
+  const listeners = /* @__PURE__ */ new Set();
+  const change = (next) => {
+    if (Object.entries(next).every(([key, value]) => JSON.stringify(state[key]) === JSON.stringify(value)))
+      return;
+    state = { ...state, ...next };
+    for (const listener of listeners) {
+      try {
+        listener();
+      } catch {
       }
-      let body = "";
-      req.on("data", (chunk) => body += chunk);
-      return void req.on("end", () => {
-        const parsed2 = jsonBody(body);
-        if (parsed2 === null) {
-          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
-        }
-        if (parsed2.id !== void 0 && typeof parsed2.id !== "string") {
-          return sendJson2(res, 400, { ok: false, error: "The request id must be a string." });
-        }
-        return sendJson2(res, 200, { ok: true, cancelled: runner?.cancel(parsed2.id) ?? false });
+    }
+  };
+  const available = () => state.latest !== null && compareVersions(state.latest.version, input.version) > 0;
+  const inFlight = () => ["installing", "waiting", "restarting"].includes(state.phase.status) || installer !== null;
+  const status = () => ({
+    version: input.version,
+    install: { ...install },
+    latest: state.latest === null ? null : { ...state.latest },
+    checkedAt: state.checkedAt,
+    checkError: state.checkError,
+    skipped: state.skipped,
+    available: available(),
+    phase: { ...state.phase },
+    busy: busy()
+  });
+  const persist = () => {
+    if (statePath === null)
+      return Promise.resolve();
+    writing2 = writing2.then(async () => {
+      const merged = mergeState(state, readState(statePath));
+      change(merged);
+      await writeState(statePath, merged);
+    });
+    return writing2;
+  };
+  const waitForIdle = async (version2) => {
+    if (!busy() || closed)
+      return;
+    change({ phase: { status: "waiting", version: version2 } });
+    while (!closed && busy()) {
+      await new Promise((resolve5) => {
+        resume = resolve5;
+        waiting = setTimeout(() => {
+          waiting = null;
+          resume = null;
+          resolve5();
+        }, 1e3);
+        waiting.unref?.();
       });
     }
-    if (path === `${LEGLAS_PREFIX}/api/requests/retry` && req.method === "POST") {
-      if (!hasJsonBody(req)) {
-        return sendJson2(res, 400, { ok: false, error: "Retry must be JSON." });
+  };
+  const performUpdate = async (version2, handoff) => {
+    try {
+      if (closed)
+        return;
+      if (install.kind !== "npx") {
+        const running = installVersion(install, version2, { spawn: spawn5, kill, platform, env, log });
+        installer = running;
+        void running.gone.then(() => {
+          if (installer === running)
+            installer = null;
+        });
+        await running.result;
       }
-      let body = "";
-      req.on("data", (chunk) => body += chunk);
-      return void req.on("end", async () => {
-        const parsed2 = jsonBody(body);
-        if (parsed2 === null) {
-          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
-        }
-        if (typeof parsed2.id !== "string") {
-          return sendJson2(res, 400, { ok: false, error: "Body needs a request id." });
-        }
-        const request = (await readRequests(cwd)).find((entry) => entry.id === parsed2.id);
-        if (request === void 0) {
-          return sendJson2(res, 404, { ok: false, error: "No such request." });
-        }
-        if (!isEnded(request, runner?.snapshot().failedIds ?? [])) {
-          return sendJson2(res, 400, { ok: false, error: "Only an ended request can be run again." });
-        }
+      await waitForIdle(version2);
+      if (closed)
+        return;
+      change({ phase: { status: "restarting", version: version2 } });
+      log(`Restarting Leglas with ${version2}\u2026`);
+      await handoff(restartCommand(install, argv, version2, port, { execPath, platform, exists }));
+    } catch (error) {
+      if (!closed)
+        change({ phase: { status: "failed", version: version2, reason: error instanceof Error ? error.message : String(error) } });
+    }
+  };
+  return {
+    status,
+    check(options = {}) {
+      if (closed)
+        return Promise.resolve(status());
+      if (checking !== null)
+        return checking;
+      if (!options.force && state.latest !== null && state.checkedAt !== null) {
+        const age = now() - Date.parse(state.checkedAt);
+        if (age >= 0 && age < DAY_MS)
+          return Promise.resolve(status());
+      }
+      if (!inFlight())
+        change({ phase: { status: "checking" } });
+      checking = (async () => {
         try {
-          const retryId = newRequestId();
-          const attachments = await rehomeCaptures(cwd, request.id, retryId, request.attachments ?? []).catch(() => []);
-          if (!await removeRequest(cwd, request.id)) {
-            return sendJson2(res, 404, { ok: false, error: "No such request." });
+          const [version2, titles] = await Promise.all([
+            registryVersion(fetcher, timeoutMs, registry),
+            releaseTitles(fetcher, timeoutMs)
+          ]);
+          if (!closed) {
+            change({
+              latest: { version: version2, title: titles.get(version2) ?? null, url: releaseUrl(version2) },
+              checkedAt: new Date(now()).toISOString(),
+              checkError: null,
+              skipped: state.skipped !== null && compareVersions(version2, state.skipped) > 0 ? null : state.skipped
+            });
+            await persist();
           }
-          await appendRequest(cwd, {
-            title: request.title,
-            url: request.url,
-            intent: request.intent,
-            target: request.target,
-            // The prompt names the captures by path, and the embedded pipes
-            // are not its only readers: watch, a custom command and
-            // `requests --json` all hand the text over as it stands.
-            prompt: attachments.length === 0 ? request.prompt : rehomeText(request.prompt, request.id, retryId),
-            // The stored prompt already carries the mode's instructions;
-            // its notes and visual context travel with the retry too.
-            ...request.mode === void 0 ? {} : { mode: request.mode },
-            ...request.notes === void 0 ? {} : { notes: request.notes },
-            ...attachments.length === 0 ? {} : { attachments },
-            ...request.captureNote === void 0 ? {} : { captureNote: request.captureNote },
-            ...request.compare === void 0 ? {} : { compare: request.compare },
-            ...request.references === void 0 ? {} : { references: request.references }
-          }, retryId);
-          runner?.nudge();
-          return sendJson2(res, 200, { ok: true });
-        } catch {
-          return sendJson2(res, 500, { ok: false, error: "The request could not be retried." });
+        } catch (error) {
+          if (!closed)
+            change({ checkError: error instanceof Error ? error.message : "Could not reach npm." });
+        } finally {
+          if (state.phase.status === "checking")
+            change({ phase: { status: "idle" } });
+          checking = null;
         }
+        return status();
+      })();
+      return checking;
+    },
+    async skip(version2) {
+      if (state.latest?.version !== version2)
+        throw new Error("That is not the newest version.");
+      change({ skipped: version2 });
+      await persist();
+      return status();
+    },
+    async update() {
+      if (closed)
+        throw new Error("Updates are not available here.");
+      if (inFlight())
+        throw new Error("An update is already running.");
+      if (!available())
+        throw new Error("You have the newest version.");
+      if (install.kind === "source")
+        throw new Error(CHECKOUT_NOTICE);
+      if (busy())
+        throw new Error("A change is running. Wait for it to finish.");
+      if (restart === null)
+        throw new Error("Updates are not available here.");
+      const version2 = state.latest.version;
+      const handoff = restart;
+      change({ phase: { status: "installing", version: version2 } });
+      pending = setImmediate(() => {
+        pending = null;
+        void performUpdate(version2, handoff);
       });
+      return status();
+    },
+    notice() {
+      const { latest, skipped } = state;
+      if (!available() || latest === null || latest.version === skipped)
+        return null;
+      const title = latest.title === null ? "" : `: ${latest.title}`;
+      const next = install.kind === "source" ? CHECKOUT_NOTICE : install.kind === "npx" ? `Update from the interface, or start Leglas again with ${install.command}` : `Update from the interface, or run ${install.command}`;
+      return `update   ${latest.version} is out, you have ${input.version}${title}
+         ${next}`;
+    },
+    onRestart(handler) {
+      restart = handler;
+    },
+    onBusy(handler) {
+      busy = handler;
+    },
+    setPort(value) {
+      port = value;
+    },
+    onChange(listener) {
+      listeners.add(listener);
+    },
+    close() {
+      if (closing !== null)
+        return closing;
+      closed = true;
+      if (pending !== null)
+        clearImmediate(pending);
+      if (waiting !== null)
+        clearTimeout(waiting);
+      resume?.();
+      listeners.clear();
+      installer?.stop();
+      closing = installer?.gone ?? Promise.resolve();
+      return closing;
+    }
+  };
+}
+
+// src/args.ts
+var VALUE_FLAGS = /* @__PURE__ */ new Set(["--port", "--user-port", "--config"]);
+var BOOLEAN_FLAGS = /* @__PURE__ */ new Set(["--no-open", "--json"]);
+var MIN_SHOW_WIDTH = 320;
+var MAX_SHOW_WIDTH = 3840;
+function parsePort(flag, raw) {
+  if (!/^\d+$/.test(raw)) {
+    return { error: `${flag} needs a number, received ${JSON.stringify(raw)}.` };
+  }
+  const port = Number(raw);
+  if (port < 1 || port > 65535) {
+    return { error: `${flag} must be between 1 and 65535, received ${port}.` };
+  }
+  return port;
+}
+function parseNew(rest) {
+  let surface;
+  let print = false;
+  let json = false;
+  let from;
+  for (let index = 0; index < rest.length; index += 1) {
+    const argument = rest[index];
+    if (argument === "--from" || argument.startsWith("--from=")) {
+      from = argument.includes("=") ? argument.split("=").slice(1).join("=") : rest[index += 1];
+      if (from === void 0 || from === "") {
+        return { kind: "error", message: "--from needs a path, for example --from src/Hero.tsx" };
+      }
+      continue;
+    }
+    if (argument === "--print") {
+      print = true;
+      continue;
+    }
+    if (argument === "--json") {
+      json = true;
+      continue;
+    }
+    if (argument === "--help" || argument === "-h") return { kind: "help" };
+    if (argument.startsWith("-")) {
+      return { kind: "error", message: `leglas new does not take ${argument}.` };
+    }
+    if (surface !== void 0) {
+      return { kind: "error", message: `leglas new takes one surface name, received ${JSON.stringify(argument)} as well.` };
+    }
+    surface = argument;
+  }
+  if (surface === void 0) {
+    return {
+      kind: "error",
+      message: "leglas new needs a surface name, for example: npx leglas new hero"
+    };
+  }
+  return { kind: "new", surface, print, json, from };
+}
+function parseAdd(rest) {
+  let title;
+  let url;
+  let note;
+  let branch;
+  let file;
+  let basedOn;
+  let askedFor;
+  const tags = [];
+  let json = false;
+  for (let index = 0; index < rest.length; index += 1) {
+    const argument = rest[index];
+    if (argument === "--json") {
+      json = true;
+      continue;
+    }
+    if (argument === "--help" || argument === "-h") return { kind: "help" };
+    const equals = argument.indexOf("=");
+    const flag = equals === -1 ? argument : argument.slice(0, equals);
+    let value;
+    if (equals === -1) {
+      value = rest[index + 1];
+      index += 1;
+    } else {
+      value = argument.slice(equals + 1);
+    }
+    if (!["--title", "--url", "--note", "--tag", "--branch", "--file", "--based-on", "--asked-for"].includes(
+      flag
+    )) {
+      return { kind: "error", message: `leglas add does not take ${flag}.` };
+    }
+    if (value === void 0 || value === "") {
+      return { kind: "error", message: `${flag} needs a value.` };
+    }
+    if (flag === "--title") title = value;
+    else if (flag === "--url") url = value;
+    else if (flag === "--note") note = value;
+    else if (flag === "--branch") branch = value;
+    else if (flag === "--file") file = value;
+    else if (flag === "--based-on") basedOn = value;
+    else if (flag === "--asked-for") askedFor = value;
+    else tags.push(value);
+  }
+  if (title === void 0) {
+    return { kind: "error", message: "leglas add needs --title, which is how the preview is identified." };
+  }
+  if (url === void 0 && file === void 0) {
+    return {
+      kind: "error",
+      message: "leglas add needs --url (for example --url '/?v-hero=aurora') or --file for a page Leglas serves itself."
+    };
+  }
+  return {
+    kind: "add",
+    preview: {
+      title,
+      url,
+      note,
+      tags: tags.length > 0 ? tags : void 0,
+      branch,
+      file,
+      basedOn,
+      askedFor
+    },
+    json
+  };
+}
+function parseClassify(rest) {
+  const changes = [];
+  let json = false;
+  for (let index = 0; index < rest.length; index += 1) {
+    const argument = rest[index];
+    if (argument === "--json") {
+      json = true;
+      continue;
+    }
+    if (argument === "--help" || argument === "-h") return { kind: "help" };
+    const equals = argument.indexOf("=");
+    const flag = equals === -1 ? argument : argument.slice(0, equals);
+    if (flag !== "--change" && flag !== "--rewrite") {
+      return { kind: "error", message: `leglas classify does not take ${argument}.` };
+    }
+    const value = equals === -1 ? rest[index += 1] : argument.slice(equals + 1);
+    if (value === void 0 || value === "") {
+      return { kind: "error", message: `${flag} needs a path, for example ${flag} package.json` };
+    }
+    changes.push({ path: value, kind: flag === "--change" ? "change" : "rewrite" });
+  }
+  if (changes.length === 0) {
+    return {
+      kind: "error",
+      message: "leglas classify needs what the direction will touch, for example: npx leglas classify --change package.json --rewrite src/theme.css"
+    };
+  }
+  return { kind: "classify", changes, json };
+}
+function parseWatch(rest) {
+  let run4;
+  let port;
+  for (let index = 0; index < rest.length; index += 1) {
+    const argument = rest[index];
+    if (argument === "--help" || argument === "-h") return { kind: "help" };
+    const equals = argument.indexOf("=");
+    const flag = equals === -1 ? argument : argument.slice(0, equals);
+    if (flag !== "--run" && flag !== "--port") {
+      return { kind: "error", message: `leglas watch does not take ${argument}.` };
     }
-    if (path === `${LEGLAS_PREFIX}/api/annotations` && req.method === "GET") {
-      return void readAnnotations(cwd).then((annotations) => sendConditionalJson(req, res, { annotations }));
+    const value = equals === -1 ? rest[index += 1] : argument.slice(equals + 1);
+    if (value === void 0 || value === "") {
+      return {
+        kind: "error",
+        message: flag === "--run" ? '--run needs an agent command, for example --run "claude -p {prompt}"' : "--port needs a value."
+      };
     }
-    if (path === `${LEGLAS_PREFIX}/api/annotations` && req.method === "POST") {
-      if (!hasJsonBody(req)) {
-        return sendJson2(res, 400, { ok: false, error: "A note must be JSON." });
-      }
-      let body = "";
-      req.on("data", (chunk) => body += chunk);
-      return void req.on("end", async () => {
-        const parsed2 = jsonBody(body);
-        if (parsed2 === null) {
-          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
-        }
-        if (typeof parsed2.title !== "string" || parsed2.title.trim() === "") {
-          return sendJson2(res, 400, { ok: false, error: "A note needs a direction." });
-        }
-        const anchor = anchorFrom(parsed2.anchor);
-        if (anchor === null) {
-          return sendJson2(res, 400, { ok: false, error: "A note needs something to point at." });
-        }
-        try {
-          const annotation = await addAnnotation(cwd, {
-            anchor,
-            note: typeof parsed2.note === "string" ? parsed2.note.trim() : "",
-            title: parsed2.title
-          });
-          return sendJson2(res, 200, { ok: true, annotation });
-        } catch {
-          return sendJson2(res, 500, { ok: false, error: "The note could not be kept." });
-        }
-      });
+    if (flag === "--run") {
+      run4 = value;
+      continue;
     }
-    if (path === `${LEGLAS_PREFIX}/api/annotations/update` && req.method === "POST") {
-      if (!hasJsonBody(req)) {
-        return sendJson2(res, 400, { ok: false, error: "A note must be JSON." });
+    const parsed2 = parsePort(flag, value);
+    if (typeof parsed2 !== "number") return { kind: "error", message: parsed2.error };
+    port = parsed2;
+  }
+  return { kind: "watch", run: run4, port };
+}
+function parseArgs(argv) {
+  if (argv[0] === "new") return parseNew(argv.slice(1));
+  if (argv[0] === "watch") return parseWatch(argv.slice(1));
+  if (argv[0] === "add") return parseAdd(argv.slice(1));
+  if (argv[0] === "classify") return parseClassify(argv.slice(1));
+  if (argv[0] === "init") {
+    const rest = argv.slice(1);
+    const unknown = rest.find((argument) => argument !== "--force" && argument !== "--json");
+    if (unknown !== void 0) {
+      return { kind: "error", message: `leglas init does not take ${unknown}.` };
+    }
+    return { kind: "init", force: rest.includes("--force"), json: rest.includes("--json") };
+  }
+  if (argv[0] === "keep") {
+    const rest = argv.slice(1);
+    let title;
+    let to;
+    let json = false;
+    for (let index = 0; index < rest.length; index += 1) {
+      const argument = rest[index];
+      if (argument === "--json") {
+        json = true;
+        continue;
       }
-      let body = "";
-      req.on("data", (chunk) => body += chunk);
-      return void req.on("end", async () => {
-        const parsed2 = jsonBody(body);
-        if (parsed2 === null) {
-          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
-        }
-        if (typeof parsed2.id !== "string" || parsed2.id === "") {
-          return sendJson2(res, 400, { ok: false, error: "Body needs the note to reword." });
-        }
-        if (typeof parsed2.note !== "string") {
-          return sendJson2(res, 400, { ok: false, error: "A reworded note needs its words." });
-        }
-        try {
-          const annotation = await updateAnnotation(cwd, parsed2.id, parsed2.note);
-          if (annotation === null) {
-            return sendJson2(res, 404, { ok: false, error: "That note has gone." });
-          }
-          return sendJson2(res, 200, { ok: true, annotation });
-        } catch {
-          return sendJson2(res, 500, { ok: false, error: "The note could not be reworded." });
+      if (argument === "--to" || argument.startsWith("--to=")) {
+        to = argument.includes("=") ? argument.split("=").slice(1).join("=") : rest[index += 1];
+        if (to === void 0 || to === "") {
+          return { kind: "error", message: "--to needs a path, for example --to src/components/hero.tsx" };
         }
-      });
+        continue;
+      }
+      if (argument.startsWith("-")) {
+        return { kind: "error", message: `leglas keep does not take ${argument}.` };
+      }
+      if (title !== void 0) {
+        return { kind: "error", message: "leglas keep takes one direction title." };
+      }
+      title = argument;
     }
-    if (path === `${LEGLAS_PREFIX}/api/annotations/delete` && req.method === "POST") {
-      if (!hasJsonBody(req)) {
-        return sendJson2(res, 400, { ok: false, error: "Delete must be JSON." });
+    if (title === void 0) {
+      return {
+        kind: "error",
+        message: 'leglas keep needs a direction title, for example: npx leglas keep "Aurora" --to src/components/hero.tsx'
+      };
+    }
+    if (to === void 0) {
+      return { kind: "error", message: "leglas keep needs --to, the path the winner should live at." };
+    }
+    return { kind: "keep", title, to, json };
+  }
+  if (argv[0] === "explore") {
+    const rest = argv.slice(1);
+    let surface;
+    let count = 3;
+    let basedOn = null;
+    let json = false;
+    for (let index = 0; index < rest.length; index += 1) {
+      const argument = rest[index];
+      if (argument === "--json") {
+        json = true;
+        continue;
       }
-      let body = "";
-      req.on("data", (chunk) => body += chunk);
-      return void req.on("end", async () => {
-        const parsed2 = jsonBody(body);
-        if (parsed2 === null) {
-          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
-        }
-        const ids = Array.isArray(parsed2.ids) ? parsed2.ids.filter((entry) => typeof entry === "string") : [];
-        if (ids.length === 0) {
-          return sendJson2(res, 400, { ok: false, error: "Body needs the notes to forget." });
+      if (argument === "--count" || argument.startsWith("--count=")) {
+        const raw = argument.includes("=") ? argument.split("=")[1] : rest[index += 1];
+        if (raw === void 0 || !/^\d+$/.test(raw)) {
+          return { kind: "error", message: "--count needs a number, for example --count 6." };
         }
-        try {
-          return sendJson2(res, 200, { ok: true, deleted: await removeAnnotations(cwd, ids) });
-        } catch {
-          return sendJson2(res, 500, { ok: false, error: "The notes could not be forgotten." });
+        count = Number(raw);
+        continue;
+      }
+      if (argument === "--based-on" || argument.startsWith("--based-on=")) {
+        const raw = argument.includes("=") ? argument.split("=")[1] : rest[index += 1];
+        if (raw === void 0 || raw === "") {
+          return {
+            kind: "error",
+            message: '--based-on needs a direction title, for example --based-on "Aurora".'
+          };
         }
-      });
+        basedOn = raw;
+        continue;
+      }
+      if (argument.startsWith("-")) {
+        return { kind: "error", message: `leglas explore does not take ${argument}.` };
+      }
+      if (surface !== void 0) {
+        return { kind: "error", message: "leglas explore takes one surface name." };
+      }
+      surface = argument;
     }
-    if (path === `${LEGLAS_PREFIX}/api/requests/dismiss` && req.method === "POST") {
-      if (!hasJsonBody(req)) {
-        return sendJson2(res, 400, { ok: false, error: "Dismiss must be JSON." });
+    if (surface === void 0) {
+      return {
+        kind: "error",
+        message: "leglas explore needs a surface name, for example: npx leglas explore hero --count 6"
+      };
+    }
+    return { kind: "explore", surface, count, basedOn, json };
+  }
+  if (argv[0] === "requests") {
+    const rest = argv.slice(1);
+    const unknown = rest.find((argument) => argument !== "--json" && argument !== "--clear");
+    if (unknown !== void 0) {
+      return { kind: "error", message: `leglas requests does not take ${unknown}.` };
+    }
+    return { kind: "requests", json: rest.includes("--json"), clear: rest.includes("--clear") };
+  }
+  if (argv[0] === "log") {
+    const rest = argv.slice(1);
+    const flags = rest.filter((argument) => argument.startsWith("--"));
+    const unknown = flags.find((flag) => flag !== "--json");
+    if (unknown !== void 0) {
+      return { kind: "error", message: `leglas log does not take ${unknown}.` };
+    }
+    const names = rest.filter((argument) => !argument.startsWith("--"));
+    if (names.length > 1) {
+      return { kind: "error", message: "leglas log takes one entry at most." };
+    }
+    return { kind: "log", entry: names[0] ?? null, json: flags.includes("--json") };
+  }
+  if (argv[0] === "list") {
+    const rest = argv.slice(1);
+    const unknown = rest.find((argument) => argument !== "--json");
+    if (unknown !== void 0) {
+      return { kind: "error", message: `leglas list does not take ${unknown}.` };
+    }
+    return { kind: "list", json: rest.includes("--json") };
+  }
+  if (argv[0] === "show") {
+    const rest = argv.slice(1);
+    let title;
+    let json = false;
+    let screenshot = false;
+    let width = null;
+    let port = null;
+    for (let index = 0; index < rest.length; index += 1) {
+      const argument = rest[index];
+      if (argument === "--json") {
+        json = true;
+        continue;
       }
-      let body = "";
-      req.on("data", (chunk) => body += chunk);
-      return void req.on("end", async () => {
-        const parsed2 = jsonBody(body);
-        if (parsed2 === null) {
-          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
-        }
-        if (typeof parsed2.id !== "string") {
-          return sendJson2(res, 400, { ok: false, error: "Body needs a request id." });
-        }
-        const target2 = (await readRequests(cwd)).find((entry) => entry.id === parsed2.id);
-        if (target2 === void 0 || !isEnded(target2, runner?.snapshot().failedIds ?? [])) {
-          return sendJson2(res, 400, { ok: false, error: "Only an ended request can be dismissed." });
+      if (argument === "--screenshot") {
+        screenshot = true;
+        continue;
+      }
+      if (argument === "--width" || argument.startsWith("--width=") || argument === "--port" || argument.startsWith("--port=")) {
+        const equals = argument.indexOf("=");
+        const flag = equals === -1 ? argument : argument.slice(0, equals);
+        const raw = equals === -1 ? rest[index += 1] : argument.slice(equals + 1);
+        if (raw === void 0 || raw === "") {
+          return { kind: "error", message: `${flag} needs a value.` };
         }
-        try {
-          if (!await removeRequest(cwd, parsed2.id)) {
-            return sendJson2(res, 404, { ok: false, error: "No such request." });
-          }
-          return sendJson2(res, 200, { ok: true });
-        } catch {
-          return sendJson2(res, 500, { ok: false, error: "The request could not be dismissed." });
+        if (flag === "--port") {
+          const parsed2 = parsePort(flag, raw);
+          if (typeof parsed2 !== "number") return { kind: "error", message: parsed2.error };
+          port = parsed2;
+          continue;
         }
-      });
-    }
-    if (path === `${LEGLAS_PREFIX}/api/renames` && req.method === "POST") {
-      let body = "";
-      req.on("data", (chunk) => body += chunk);
-      return void req.on("end", () => {
-        const parsed2 = jsonBody(body);
-        if (parsed2 === null) {
-          return sendJson2(res, 400, { ok: false, error: "Body must be JSON." });
+        if (!/^\d+$/.test(raw)) {
+          return { kind: "error", message: `--width needs a number, received ${JSON.stringify(raw)}.` };
         }
-        if (parsed2.renames === null || typeof parsed2.renames !== "object") {
-          return sendJson2(res, 400, { ok: false, error: "Body needs a renames object." });
+        width = Number(raw);
+        if (width < MIN_SHOW_WIDTH || width > MAX_SHOW_WIDTH) {
+          return {
+            kind: "error",
+            message: `--width must be between ${MIN_SHOW_WIDTH} and ${MAX_SHOW_WIDTH}, received ${width}.`
+          };
         }
-        const renames = Object.fromEntries(Object.entries(parsed2.renames).filter((entry) => typeof entry[1] === "string" && entry[1] !== ""));
-        void writeRenames(cwd, renames).then(() => sendJson2(res, 200, { ok: true }), () => sendJson2(res, 200, { ok: false }));
-      });
-    }
-    if (path === `${LEGLAS_PREFIX}/api/health`) {
-      return void probe(target).then((reachable) => sendConditionalJson(req, res, { devServer: target, reachable, cwd }));
-    }
-    if (path.startsWith(`${FILES_PREFIX}/`)) {
-      const rest = path.slice(FILES_PREFIX.length + 1);
-      const slash = rest.indexOf("/");
-      const slug = slash === -1 ? rest : rest.slice(0, slash);
-      let relative6 = slash === -1 ? "" : rest.slice(slash + 1);
-      try {
-        relative6 = decodeURIComponent(relative6);
-      } catch {
-        relative6 = "";
+        continue;
       }
-      const dir = fileMounts.get(slug);
-      const serveMount = () => {
-        if (dir !== void 0 && relative6 !== "" && serveFrom(res, dir, relative6))
-          return;
-        res.writeHead(404, { "content-type": "text/plain; charset=utf-8", "cache-control": "no-store" });
-        res.end("Leglas: no such preview file.");
-      };
-      if (!context.remote)
-        return serveMount();
-      if (relative6.split("/").some((segment) => segment.startsWith("."))) {
-        return sendJson2(res, 403, { ok: false, error: "Not available to viewers." });
+      if (argument.startsWith("-")) {
+        return { kind: "error", message: `leglas show does not take ${argument}.` };
       }
-      return void (shares?.fileSlugAllowed(slug, context.grantId ?? "") ?? Promise.resolve(false)).then((allowed) => {
-        if (!allowed)
-          return sendJson2(res, 403, { ok: false, error: "Not available to viewers." });
-        serveMount();
-      });
+      if (title !== void 0) {
+        return { kind: "error", message: "leglas show takes one direction title." };
+      }
+      title = argument;
     }
-    if (path.startsWith(`${LEGLAS_PREFIX}/api/`)) {
-      return sendJson2(res, 404, { error: "No such Leglas API path." });
+    if (title === void 0) {
+      return {
+        kind: "error",
+        message: 'leglas show needs a direction title, for example: npx leglas show "Aurora" --json'
+      };
     }
-    if (path === LEGLAS_PREFIX || path.startsWith(`${LEGLAS_PREFIX}/`)) {
-      if (shellDir !== null && serveShellFile(res, shellDir, path))
-        return;
-      if (shellDir !== null) {
-        res.writeHead(404, { "content-type": "text/plain; charset=utf-8", "cache-control": "no-store" });
-        res.end("Leglas: no such path.");
-        return;
-      }
-      res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
-      res.end(PLACEHOLDER);
-      return;
+    if (width !== null && !screenshot) {
+      return { kind: "error", message: "leglas show --width needs --screenshot." };
     }
-    return proxy.request(req, res, context.publicOrigin);
-  };
-  let port = 0;
-  const server = http4.createServer((req, res) => handleRequest(req, res, {
-    remote: false,
-    publicOrigin: `http://localhost:${port}`
-  }));
-  const sockets = /* @__PURE__ */ new Set();
-  server.on("connection", (socket) => {
-    sockets.add(socket);
-    socket.once("close", () => sockets.delete(socket));
-  });
-  const handleUpgrade = (req, socket, head, context) => {
-    const liveUpgrade = context.remote ? live.upgrade(req, socket, head, { viewer: true }) : live.upgrade(req, socket, head);
-    if (liveUpgrade)
-      return true;
-    const path = (req.url ?? "/").split("?")[0] ?? "/";
-    if (path.startsWith(`${LEGLAS_PREFIX}/`)) {
-      socket.destroy();
-      return false;
+    if (port !== null && !screenshot) {
+      return { kind: "error", message: "leglas show --port needs --screenshot." };
     }
-    proxy.upgrade(req, socket, head);
-    return false;
+    return { kind: "show", title, json, screenshot, width, port };
+  }
+  const options = {
+    port: void 0,
+    userPort: void 0,
+    configPath: void 0,
+    open: true,
+    json: false
   };
-  server.on("upgrade", (req, socket, head) => {
-    handleUpgrade(req, socket, head, { remote: false });
-  });
-  shares = createShareManager({
-    live,
-    previews: livePreviewDefinitions,
-    previewsForConfig,
-    viewerConfig: {
-      project,
-      devServer: target,
-      scanPreviews: config?.scanPreviews ?? true
-    },
-    request: (req, res, context) => handleRequest(req, res, {
-      remote: true,
-      publicOrigin: context.publicOrigin,
-      grantId: context.grantId
-    }),
-    upgrade: (req, socket, head) => handleUpgrade(req, socket, head, { remote: true }),
-    ...options.detectTunnels === void 0 ? {} : { detectTunnels: options.detectTunnels },
-    ...options.startTunnel === void 0 ? {} : { startTunnel: options.startTunnel }
-  });
-  port = await bind2(server, options.port ?? DEFAULT_PORT);
-  const liveFiles = watchLiveFiles(cwd, bootConfigPath, live);
-  liveHealth = watchHealth(target, live);
-  await pruneCaptures(cwd, (await readRequests(cwd).catch(() => [])).map((request) => request.id)).catch(() => {
-  });
-  await writeServerInfo(cwd, {
-    port,
-    url: `http://localhost:${port}`,
-    pid: process.pid
-  }).catch(() => {
-  });
-  runner = startRunner({
-    cwd,
-    externallyAttached,
-    onChange: () => live.nudge("requests"),
-    leglasCommand,
-    ...options.codexAppServer === void 0 ? {} : { codexAppServer: options.codexAppServer },
-    ...options.claudeAgentSession === void 0 ? {} : { claudeAgentSession: options.claudeAgentSession }
-  });
-  let closePromise = null;
-  return {
-    port,
-    url: `http://localhost:${port}`,
-    close: () => {
-      if (closePromise !== null)
-        return closePromise;
-      closePromise = (async () => {
-        liveFiles.close();
-        liveHealth?.close();
-        await Promise.all([
-          shares?.close() ?? Promise.resolve(),
-          branches.stop(),
-          runner.stop(),
-          browserPool.close(),
-          live.close()
-        ]);
-        await new Promise((done) => {
-          for (const socket of sockets)
-            socket.destroy();
-          sockets.clear();
-          server.closeAllConnections();
-          server.close(() => done());
-        });
-        await removeServerInfo(cwd, { port, pid: process.pid }).catch(() => {
-        });
-      })();
-      return closePromise;
+  for (let index = 0; index < argv.length; index += 1) {
+    const argument = argv[index];
+    if (argument === "--help" || argument === "-h") return { kind: "help" };
+    if (argument === "--version" || argument === "-v") return { kind: "version" };
+    if (BOOLEAN_FLAGS.has(argument)) {
+      if (argument === "--no-open") options.open = false;
+      if (argument === "--json") options.json = true;
+      continue;
     }
-  };
+    const equals = argument.indexOf("=");
+    const flag = equals === -1 ? argument : argument.slice(0, equals);
+    if (!VALUE_FLAGS.has(flag)) {
+      return {
+        kind: "error",
+        message: argument.startsWith("-") ? `Unknown flag ${argument}. Run leglas --help to see the options.` : `Unexpected argument ${JSON.stringify(argument)}. leglas takes flags only.`
+      };
+    }
+    let value;
+    if (equals === -1) {
+      value = argv[index + 1];
+      index += 1;
+    } else {
+      value = argument.slice(equals + 1);
+    }
+    if (value === void 0 || value === "" || value.startsWith("--")) {
+      return { kind: "error", message: `${flag} needs a value.` };
+    }
+    if (flag === "--config") {
+      options.configPath = value;
+      continue;
+    }
+    const port = parsePort(flag, value);
+    if (typeof port !== "number") return { kind: "error", message: port.error };
+    if (flag === "--port") options.port = port;
+    else options.userPort = port;
+  }
+  return { kind: "run", options };
 }
 
 // src/run-classify.ts
+import { stat as stat4 } from "fs/promises";
+import { join as join14 } from "path";
 async function runClassify(options, deps) {
   const declared = await Promise.all(
     options.changes.map(async (change) => ({
       ...change,
-      exists: await stat4(join13(options.cwd, change.path)).then(
+      exists: await stat4(join14(options.cwd, change.path)).then(
         () => true,
         () => false
       )
@@ -8292,8 +8953,8 @@ function runExplore(options, deps) {
 }
 
 // src/run-init.ts
-import { readFile as readFile12, writeFile as writeFile9 } from "fs/promises";
-import { join as join14 } from "path";
+import { readFile as readFile12, writeFile as writeFile10 } from "fs/promises";
+import { join as join15 } from "path";
 
 // src/init.ts
 var AGENTS_MARKER_START = "<!-- leglas:start -->";
@@ -8462,18 +9123,18 @@ async function readIfPresent(path) {
 async function runInit(options, deps) {
   const existingConfig = findConfigFile(options.cwd);
   const plan = planInit({
-    agents: await readIfPresent(join14(options.cwd, "AGENTS.md")),
+    agents: await readIfPresent(join15(options.cwd, "AGENTS.md")),
     config: existingConfig === null ? null : "present",
-    gitignore: await readIfPresent(join14(options.cwd, ".gitignore")),
+    gitignore: await readIfPresent(join15(options.cwd, ".gitignore")),
     force: options.force
   });
   const touched = [];
   for (const write2 of plan.writes) {
-    await writeFile9(join14(options.cwd, write2.path), write2.contents, "utf8");
+    await writeFile10(join15(options.cwd, write2.path), write2.contents, "utf8");
     touched.push(write2.path);
   }
   if (plan.gitignore !== null) {
-    await writeFile9(join14(options.cwd, ".gitignore"), plan.gitignore, "utf8");
+    await writeFile10(join15(options.cwd, ".gitignore"), plan.gitignore, "utf8");
     touched.push(".gitignore");
   }
   if (options.json) {
@@ -8492,9 +9153,9 @@ async function runInit(options, deps) {
 }
 
 // src/run-keep.ts
-import { existsSync as existsSync4 } from "fs";
-import { copyFile as copyFile2, mkdir as mkdir9, readFile as readFile13, rm as rm5, writeFile as writeFile10 } from "fs/promises";
-import { dirname as dirname9, join as join15 } from "path";
+import { existsSync as existsSync5 } from "fs";
+import { copyFile as copyFile2, mkdir as mkdir10, readFile as readFile13, rm as rm6, writeFile as writeFile11 } from "fs/promises";
+import { dirname as dirname10, join as join16 } from "path";
 
 // src/keep.ts
 import { basename as basename4, extname as extname4, normalize as normalize2 } from "path";
@@ -8577,7 +9238,7 @@ function renameExport(source, to) {
   );
 }
 async function writeLogEntry(options) {
-  const entry = composeEntry({
+  const entry2 = composeEntry({
     surface: options.surface,
     won: options.won,
     previews: options.previews,
@@ -8585,19 +9246,19 @@ async function writeLogEntry(options) {
     annotations: await readAnnotations(options.cwd),
     date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10)
   });
-  const dir = join15(options.cwd, options.logDir);
-  await mkdir9(dir, { recursive: true });
-  const file = join15(dir, `${entry.slug}.md`);
-  await writeFile10(file, entry.markdown, "utf8");
-  if (entry.pictures.length > 0) {
-    const pictureDir = join15(dir, entry.slug);
-    await mkdir9(pictureDir, { recursive: true });
-    for (const picture of entry.pictures) {
-      await copyFile2(join15(options.cwd, picture.from), join15(pictureDir, picture.to)).catch(() => {
+  const dir = join16(options.cwd, options.logDir);
+  await mkdir10(dir, { recursive: true });
+  const file = join16(dir, `${entry2.slug}.md`);
+  await writeFile11(file, entry2.markdown, "utf8");
+  if (entry2.pictures.length > 0) {
+    const pictureDir = join16(dir, entry2.slug);
+    await mkdir10(pictureDir, { recursive: true });
+    for (const picture of entry2.pictures) {
+      await copyFile2(join16(options.cwd, picture.from), join16(pictureDir, picture.to)).catch(() => {
       });
     }
   }
-  return `${options.logDir}/${entry.slug}.md`;
+  return `${options.logDir}/${entry2.slug}.md`;
 }
 async function runKeep(options, deps) {
   const loaded = await loadConfig(options.cwd);
@@ -8616,17 +9277,17 @@ async function runKeep(options, deps) {
   if (!resolved.ok) return fail(resolved.error);
   const plan = planKeep({ title: resolved.title, previews, to: options.to });
   if (!plan.ok) return fail(plan.error);
-  const from = join15(options.cwd, plan.move.from);
-  const to = join15(options.cwd, plan.move.to);
-  if (!existsSync4(from)) {
+  const from = join16(options.cwd, plan.move.from);
+  const to = join16(options.cwd, plan.move.to);
+  if (!existsSync5(from)) {
     return fail(`${plan.move.from} does not exist. Nothing to keep.`);
   }
-  if (existsSync4(to)) {
+  if (existsSync5(to)) {
     return fail(`${plan.move.to} already exists. Choose another destination or move it aside.`);
   }
   const source = await readFile13(from, "utf8");
-  await mkdir9(dirname9(to), { recursive: true });
-  await writeFile10(to, renameExport(source, plan.exportName), "utf8");
+  await mkdir10(dirname10(to), { recursive: true });
+  await writeFile11(to, renameExport(source, plan.exportName), "utf8");
   const surface = plan.removeDir.slice(plan.removeDir.lastIndexOf("/") + 1);
   let logged = null;
   let logError = null;
@@ -8641,7 +9302,7 @@ async function runKeep(options, deps) {
   } catch (error) {
     logError = error instanceof Error ? error.message : String(error);
   }
-  await rm5(join15(options.cwd, plan.removeDir), { recursive: true, force: true });
+  await rm6(join16(options.cwd, plan.removeDir), { recursive: true, force: true });
   const dropped = await dropLocalPreviews(options.cwd, plan.dropTitles);
   if (options.json) {
     deps.log(
@@ -8679,9 +9340,9 @@ async function runKeep(options, deps) {
 }
 
 // src/run-new.ts
-import { existsSync as existsSync5 } from "fs";
-import { mkdir as mkdir10, readFile as readFile14, writeFile as writeFile11 } from "fs/promises";
-import { dirname as dirname10, join as join16 } from "path";
+import { existsSync as existsSync6 } from "fs";
+import { mkdir as mkdir11, readFile as readFile14, writeFile as writeFile12 } from "fs/promises";
+import { dirname as dirname11, join as join17 } from "path";
 async function readIfPresent2(path) {
   try {
     return await readFile14(path, "utf8");
@@ -8692,7 +9353,7 @@ async function readIfPresent2(path) {
 async function runNew(options, deps) {
   let from;
   if (options.from !== void 0) {
-    const contents = await readIfPresent2(join16(options.cwd, options.from));
+    const contents = await readIfPresent2(join17(options.cwd, options.from));
     if (contents === null) {
       const message2 = `${options.from} does not exist, so there is nothing to use as the baseline.`;
       if (options.json) deps.log(JSON.stringify({ ok: false, error: message2 }));
@@ -8703,8 +9364,8 @@ async function runNew(options, deps) {
   }
   const plan = planNew({
     surface: options.surface,
-    packageJson: await readIfPresent2(join16(options.cwd, "package.json")),
-    gitignore: await readIfPresent2(join16(options.cwd, ".gitignore")),
+    packageJson: await readIfPresent2(join17(options.cwd, "package.json")),
+    gitignore: await readIfPresent2(join17(options.cwd, ".gitignore")),
     from
   });
   const fail = (error) => {
@@ -8727,19 +9388,19 @@ async function runNew(options, deps) {
     deps.log(plan.instructions);
     return { exitCode: 0, written: [] };
   }
-  const existing = plan.writes.filter((write2) => existsSync5(join16(options.cwd, write2.path)));
+  const existing = plan.writes.filter((write2) => existsSync6(join17(options.cwd, write2.path)));
   if (existing.length > 0) {
     return fail(`${existing[0]?.path} already exists. Delete it first, or pick another surface name.`);
   }
   const written = [];
   for (const write2 of plan.writes) {
-    const target = join16(options.cwd, write2.path);
-    await mkdir10(dirname10(target), { recursive: true });
-    await writeFile11(target, write2.contents, "utf8");
+    const target = join17(options.cwd, write2.path);
+    await mkdir11(dirname11(target), { recursive: true });
+    await writeFile12(target, write2.contents, "utf8");
     written.push(write2.path);
   }
   if (plan.gitignore !== null) {
-    await writeFile11(join16(options.cwd, ".gitignore"), plan.gitignore, "utf8");
+    await writeFile12(join17(options.cwd, ".gitignore"), plan.gitignore, "utf8");
     written.push(".gitignore");
   }
   if (options.json) {
@@ -8761,7 +9422,7 @@ async function runNew(options, deps) {
 
 // src/run-log.ts
 import { readFile as readFile15, readdir as readdir4 } from "fs/promises";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 function headline(markdown) {
   const first = markdown.split("\n", 1)[0] ?? "";
   return first.replace(/^#\s*/, "").trim();
@@ -8771,7 +9432,7 @@ async function runLog(options, deps) {
   const dir = loaded.config?.logDir ?? DEFAULT_LOG_DIR;
   let names;
   try {
-    names = (await readdir4(join17(options.cwd, dir))).filter((name) => name.endsWith(".md")).sort().reverse();
+    names = (await readdir4(join18(options.cwd, dir))).filter((name) => name.endsWith(".md")).sort().reverse();
   } catch {
     names = [];
   }
@@ -8784,7 +9445,7 @@ async function runLog(options, deps) {
       else deps.error(error);
       return { exitCode: 1 };
     }
-    const markdown = await readFile15(join17(options.cwd, dir, found), "utf8");
+    const markdown = await readFile15(join18(options.cwd, dir, found), "utf8");
     if (options.json) deps.log(JSON.stringify({ ok: true, entry: wanted, markdown }));
     else deps.log(markdown.trimEnd());
     return { exitCode: 0 };
@@ -8792,7 +9453,7 @@ async function runLog(options, deps) {
   const entries = await Promise.all(
     names.map(async (name) => ({
       entry: name.replace(/\.md$/, ""),
-      title: headline(await readFile15(join17(options.cwd, dir, name), "utf8")),
+      title: headline(await readFile15(join18(options.cwd, dir, name), "utf8")),
       file: `${dir}/${name}`
     }))
   );
@@ -8804,19 +9465,19 @@ async function runLog(options, deps) {
     deps.log(`  No decisions recorded yet. One is written each time you run leglas keep.`);
     return { exitCode: 0 };
   }
-  const width = Math.max(...entries.map((entry) => entry.entry.length));
-  for (const entry of entries) deps.log(`  ${entry.entry.padEnd(width)}  ${entry.title}`);
+  const width = Math.max(...entries.map((entry2) => entry2.entry.length));
+  for (const entry2 of entries) deps.log(`  ${entry2.entry.padEnd(width)}  ${entry2.title}`);
   return { exitCode: 0 };
 }
 
 // src/run-previews.ts
-import { readFile as readFile16, writeFile as writeFile12 } from "fs/promises";
-import { join as join18 } from "path";
+import { readFile as readFile16, writeFile as writeFile13 } from "fs/promises";
+import { join as join19 } from "path";
 function envelope(deps, ok, body) {
   deps.log(JSON.stringify({ ok, ...body }));
 }
 async function ensureIgnored(cwd) {
-  const path = join18(cwd, ".gitignore");
+  const path = join19(cwd, ".gitignore");
   let current = null;
   try {
     current = await readFile16(path, "utf8");
@@ -8824,7 +9485,7 @@ async function ensureIgnored(cwd) {
     current = null;
   }
   const next = ignoreEntry(current);
-  if (next !== null) await writeFile12(path, next, "utf8");
+  if (next !== null) await writeFile13(path, next, "utf8");
 }
 async function runAdd(options, deps) {
   const loaded = await loadConfig(options.cwd);
@@ -9156,12 +9817,12 @@ async function runShow(options, deps) {
 
 // src/run-watch.ts
 import { spawn as spawn3 } from "child_process";
-import { mkdir as mkdir11, readFile as readFile17, writeFile as writeFile13 } from "fs/promises";
-import { dirname as dirname11, join as join19 } from "path";
+import { mkdir as mkdir12, readFile as readFile17, writeFile as writeFile14 } from "fs/promises";
+import { dirname as dirname12, join as join20 } from "path";
 var POLL_MS2 = 2e3;
 var HEARTBEAT_TIMEOUT_MS = 1e3;
 async function saveTemplate(cwd, run4) {
-  const path = join19(cwd, WATCH_PATH);
+  const path = join20(cwd, WATCH_PATH);
   let config = {};
   try {
     const parsed2 = JSON.parse(await readFile17(path, "utf8"));
@@ -9171,8 +9832,8 @@ async function saveTemplate(cwd, run4) {
   } catch {
   }
   config.run = run4;
-  await mkdir11(dirname11(path), { recursive: true });
-  await writeFile13(path, `${JSON.stringify(config, null, 2)}
+  await mkdir12(dirname12(path), { recursive: true });
+  await writeFile14(path, `${JSON.stringify(config, null, 2)}
 `, "utf8");
 }
 function spawnAgent(command, args, cwd) {
@@ -9310,10 +9971,10 @@ async function runWatch(options, deps) {
 }
 
 // src/run.ts
-import { existsSync as existsSync6 } from "fs";
+import { existsSync as existsSync7 } from "fs";
 import { realpath as realpath4 } from "fs/promises";
 import { createRequire } from "module";
-import { basename as basename6, dirname as dirname12, join as join20, relative as relative5, resolve as resolve4 } from "path";
+import { basename as basename6, dirname as dirname13, join as join21, relative as relative5, resolve as resolve4 } from "path";
 import { fileURLToPath } from "url";
 
 // src/dev-server-owner.ts
@@ -9399,11 +10060,11 @@ function devServerOwnerWarning(origin, projectRoot, owners) {
 
 // src/run.ts
 function findShellDir() {
-  const bundled = join20(dirname12(fileURLToPath(import.meta.url)), "shell");
-  if (existsSync6(join20(bundled, "index.html"))) return bundled;
+  const bundled = join21(dirname13(fileURLToPath(import.meta.url)), "shell");
+  if (existsSync7(join21(bundled, "index.html"))) return bundled;
   try {
     const require2 = createRequire(import.meta.url);
-    return dirname12(require2.resolve("@leglas/shell/dist/index.html"));
+    return dirname13(require2.resolve("@leglas/shell/dist/index.html"));
   } catch {
     return null;
   }
@@ -9414,9 +10075,13 @@ function shellWord(value) {
   return `'${value.replaceAll("'", `'\\''`)}'`;
 }
 function embeddedLeglasCommand() {
-  const entry = join20(dirname12(fileURLToPath(import.meta.url)), "bin.js");
-  if (!existsSync6(entry)) return "npx -y leglas";
-  return [process.execPath, entry].map(shellWord).join(" ");
+  const entry2 = join21(dirname13(fileURLToPath(import.meta.url)), "bin.js");
+  if (!existsSync7(entry2)) return "npx -y leglas";
+  return [process.execPath, entry2].map(shellWord).join(" ");
+}
+function skipStartupCheck(env) {
+  const off = (value) => value === void 0 || value === "" || value === "0" || value === "false";
+  return env.CI !== void 0 && env.CI !== "" && env.CI !== "false" || !off(env.LEGLAS_NO_UPDATE_CHECK);
 }
 async function run3(options, deps) {
   const loaded = await loadConfig(options.cwd);
@@ -9446,8 +10111,8 @@ async function run3(options, deps) {
   const fileMounts = /* @__PURE__ */ new Map();
   for (const preview of merged?.previews ?? []) {
     if (preview.file !== void 0) {
-      const absolute = join20(options.cwd, preview.file);
-      if (!existsSync6(absolute)) {
+      const absolute = join21(options.cwd, preview.file);
+      if (!existsSync7(absolute)) {
         previewErrors.push(
           `"${preview.title}" names file ${preview.file}, which does not exist. The preview is skipped.`
         );
@@ -9457,7 +10122,7 @@ async function run3(options, deps) {
       for (let suffix = 2; fileMounts.has(slug); suffix += 1) {
         slug = `${worktreeSlug(preview.title) || "file"}-${suffix}`;
       }
-      fileMounts.set(slug, dirname12(absolute));
+      fileMounts.set(slug, dirname13(absolute));
       previews.push({
         ...preview,
         url: `${FILES_PREFIX}/${slug}/${encodeURIComponent(basename6(absolute))}`
@@ -9468,8 +10133,8 @@ async function run3(options, deps) {
   }
   const config = merged === null ? null : { ...merged, previews };
   const configWarnings = [];
-  const projectRoot = await realpath4(loaded.path === null ? options.cwd : dirname12(loaded.path)).catch(
-    () => resolve4(loaded.path === null ? options.cwd : dirname12(loaded.path))
+  const projectRoot = await realpath4(loaded.path === null ? options.cwd : dirname13(loaded.path)).catch(
+    () => resolve4(loaded.path === null ? options.cwd : dirname13(loaded.path))
   );
   const ownerWarning = needsApp && app === null ? inspectLocalDevServer(devServer).then((owners) => devServerOwnerWarning(devServer, projectRoot, owners)).catch(() => null) : Promise.resolve(null);
   const serverPromise = startServer({
@@ -9483,6 +10148,7 @@ async function run3(options, deps) {
     project: loaded.path ?? options.cwd,
     cwd: options.cwd,
     leglasCommand: embeddedLeglasCommand(),
+    ...deps.updates === void 0 ? {} : { updates: deps.updates },
     ...options.port === void 0 ? {} : { port: options.port }
   });
   const [server, warning] = await Promise.all([serverPromise, ownerWarning]);
@@ -9532,12 +10198,26 @@ async function run3(options, deps) {
     }
   }
   if (options.open) await deps.open(url);
+  let stopped = false;
+  let updateTimer = null;
+  if (!options.json && deps.updates !== void 0 && !skipStartupCheck(process.env)) {
+    void deps.updates.check().then(() => {
+      if (stopped) return;
+      const line = deps.updates?.notice();
+      if (line !== null && line !== void 0) deps.log(line);
+    });
+    const updates2 = deps.updates;
+    updateTimer = setInterval(() => void updates2.check(), 60 * 6e4);
+    updateTimer.unref?.();
+  }
   return {
     exitCode: 0,
     url,
     devServer,
     previewCount,
     stop: async () => {
+      stopped = true;
+      if (updateTimer !== null) clearInterval(updateTimer);
       await app?.stop().catch(() => {
       });
       await server.close();
@@ -9557,6 +10237,61 @@ function installShutdown(stop, target = process) {
   return shutdown;
 }
 
+// src/restart.ts
+function createHandoff() {
+  let transferred = false;
+  function handedOff2() {
+    return transferred;
+  }
+  async function handOff2(command, stop, deps) {
+    transferred = true;
+    let child = null;
+    let cancelled = false;
+    let exited = false;
+    const listeners = SHUTDOWN_SIGNALS.map((signal) => {
+      const listener = () => {
+        if (child === null) cancelled = true;
+        else child.kill(signal);
+      };
+      deps.target.on(signal, listener);
+      return { signal, listener };
+    });
+    const cleanup = () => {
+      for (const { signal, listener } of listeners) deps.target.off(signal, listener);
+    };
+    const exit = (code) => {
+      if (exited) return;
+      exited = true;
+      cleanup();
+      deps.exit(code);
+    };
+    try {
+      await stop();
+    } catch (error) {
+      if (cancelled) return exit(0);
+      cleanup();
+      transferred = false;
+      throw error;
+    }
+    if (cancelled) return exit(0);
+    const failed = (error) => {
+      if (exited) return;
+      const message2 = (error instanceof Error ? error.message : String(error)).replace(/[.!?]+$/, "");
+      process.stderr.write(`Could not start Leglas again: ${message2}. Start it from your terminal.
+`);
+      exit(1);
+    };
+    try {
+      child = deps.spawn(command.file, command.args, { stdio: "inherit", shell: command.shell });
+      child.once("error", failed);
+      child.once("exit", (code) => exit(code ?? 1));
+    } catch (error) {
+      failed(error);
+    }
+  }
+  return { handOff: handOff2, handedOff: handedOff2 };
+}
+
 // src/bin.ts
 var HELP = `leglas - compare design directions inside your own running app
 
@@ -9739,12 +10474,32 @@ if (parsed.kind === "new") {
   );
   process.exit(outcome.exitCode);
 }
+var entry = fileURLToPath2(import.meta.url);
+try {
+  entry = realpathSync2(entry);
+} catch {
+}
+var updates = createUpdateService({
+  version: version(),
+  entry,
+  argv: process.argv,
+  cwd: process.cwd(),
+  deps: { log: (line) => (parsed.options.json ? process.stderr : process.stdout).write(`${line}
+`) }
+});
 var result = await run3(
   { ...parsed.options, cwd: process.cwd() },
   { open: openBrowser, log: (line) => process.stdout.write(`${line}
-`) }
+`), updates }
 );
+var { handOff, handedOff } = createHandoff();
+updates.onRestart((command) => handOff(command, result.stop, {
+  spawn: spawn4,
+  exit: (code) => process.exit(code),
+  target: process
+}));
 installShutdown(async () => {
+  if (handedOff()) return;
   await result.stop();
   process.exit(0);
 });