npm - meshy-node - Versions diffs - 0.3.3 → 0.3.4 - Mend

meshy-node 0.3.3 → 0.3.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (20) hide show

package/README.md +1 -1
package/dashboard/assets/DashboardPage-CJ55N6Jh.js +124 -0
package/dashboard/assets/{DashboardShared-C9XLT05J.js → DashboardShared-BdW5P7SR.js} +1 -1
package/dashboard/assets/{DiffTab-BBoqxtBo.js → DiffTab-BQZgk5X1.js} +3 -3
package/dashboard/assets/{FilesTab-8j_HSIrt.js → FilesTab-BO5dV6XO.js} +7 -7
package/dashboard/assets/PreviewTab-B0Kmn8YC.js +26 -0
package/dashboard/assets/SharedConversationPage-BocsZBPi.js +12 -0
package/dashboard/assets/{file-DgdB9H7_.js → file-D9zXUdI6.js} +1 -1
package/dashboard/assets/{folder-5L-FBUD2.js → folder-gwCJ2sbc.js} +1 -1
package/dashboard/assets/{index-D2dDklXI.js → index-D8EsMsvI.js} +59 -59
package/dashboard/assets/index-DvQBsfbb.css +1 -0
package/dashboard/assets/input-Cdu3B_SQ.js +1 -0
package/dashboard/index.html +2 -2
package/main.cjs +1322 -371
package/package.json +1 -1
package/runtime-metadata.json +5 -5
package/dashboard/assets/DashboardPage-vg1FNZ-b.js +0 -124
package/dashboard/assets/PreviewTab-CcfSJBUg.js +0 -16
package/dashboard/assets/SharedConversationPage-CNmEk_vb.js +0 -12
package/dashboard/assets/index-XG2bTevi.css +0 -1

package/main.cjs CHANGED Viewed

@@ -6629,8 +6629,8 @@ var require_node2 = __commonJS({
           }
           break;
         case "FILE":
-          var fs21 = require("fs");
-          stream2 = new fs21.SyncWriteStream(fd2, { autoClose: false });
+          var fs22 = require("fs");
+          stream2 = new fs22.SyncWriteStream(fd2, { autoClose: false });
           stream2._type = "fs";
           break;
         case "PIPE":
@@ -10057,13 +10057,13 @@ var require_extend_node = __commonJS({
           return length;
         };
         if (iconv.supportsStreams) {
-          var Readable = require("stream").Readable;
-          original.ReadableSetEncoding = Readable.prototype.setEncoding;
-          Readable.prototype.setEncoding = function setEncoding(enc, options) {
+          var Readable3 = require("stream").Readable;
+          original.ReadableSetEncoding = Readable3.prototype.setEncoding;
+          Readable3.prototype.setEncoding = function setEncoding(enc, options) {
             this._readableState.decoder = iconv.getDecoder(enc, options);
             this._readableState.encoding = enc;
           };
-          Readable.prototype.collect = iconv._collect;
+          Readable3.prototype.collect = iconv._collect;
         }
       };
       iconv.undoExtendNodeEncodings = function undoExtendNodeEncodings() {
@@ -10080,9 +10080,9 @@ var require_extend_node = __commonJS({
         Buffer2.prototype.toString = original.BufferToString;
         Buffer2.prototype.write = original.BufferWrite;
         if (iconv.supportsStreams) {
-          var Readable = require("stream").Readable;
-          Readable.prototype.setEncoding = original.ReadableSetEncoding;
-          delete Readable.prototype.collect;
+          var Readable3 = require("stream").Readable;
+          Readable3.prototype.setEncoding = original.ReadableSetEncoding;
+          delete Readable3.prototype.collect;
         }
         original = void 0;
       };
@@ -19420,11 +19420,11 @@ var require_mime_types = __commonJS({
       }
       return exts[0];
     }
-    function lookup(path22) {
-      if (!path22 || typeof path22 !== "string") {
+    function lookup(path23) {
+      if (!path23 || typeof path23 !== "string") {
         return false;
       }
-      var extension2 = extname3("x." + path22).toLowerCase().substr(1);
+      var extension2 = extname3("x." + path23).toLowerCase().substr(1);
       if (!extension2) {
         return false;
       }
@@ -22624,8 +22624,8 @@ var require_escape_html = __commonJS({
   "../../node_modules/.pnpm/escape-html@1.0.3/node_modules/escape-html/index.js"(exports2, module2) {
     "use strict";
     var matchHtmlRegExp = /["'&<>]/;
-    module2.exports = escapeHtml;
-    function escapeHtml(string) {
+    module2.exports = escapeHtml2;
+    function escapeHtml2(string) {
       var str = "" + string;
       var match = matchHtmlRegExp.exec(str);
       if (!match) {
@@ -22756,7 +22756,7 @@ var require_finalhandler = __commonJS({
     "use strict";
     var debug = require_src2()("finalhandler");
     var encodeUrl = require_encodeurl();
-    var escapeHtml = require_escape_html();
+    var escapeHtml2 = require_escape_html();
     var onFinished = require_on_finished();
     var parseUrl = require_parseurl();
     var statuses = require_statuses();
@@ -22768,7 +22768,7 @@ var require_finalhandler = __commonJS({
     };
     var isFinished = onFinished.isFinished;
     function createHtmlDocument(message) {
-      var body = escapeHtml(message).replace(NEWLINE_REGEXP, "<br>").replace(DOUBLE_SPACE_REGEXP, " &nbsp;");
+      var body = escapeHtml2(message).replace(NEWLINE_REGEXP, "<br>").replace(DOUBLE_SPACE_REGEXP, " &nbsp;");
       return '<!DOCTYPE html>\n<html lang="en">\n<head>\n<meta charset="utf-8">\n<title>Error</title>\n</head>\n<body>\n<pre>' + body + "</pre>\n</body>\n</html>\n";
     }
     module2.exports = finalhandler;
@@ -22942,7 +22942,7 @@ var require_path_to_regexp = __commonJS({
     "use strict";
     module2.exports = pathToRegexp;
     var MATCHING_GROUP_REGEXP = /\\.|\((?:\?<(.*?)>)?(?!\?)/g;
-    function pathToRegexp(path22, keys, options) {
+    function pathToRegexp(path23, keys, options) {
       options = options || {};
       keys = keys || [];
       var strict = options.strict;
@@ -22956,8 +22956,8 @@ var require_path_to_regexp = __commonJS({
       var pos = 0;
       var backtrack = "";
       var m;
-      if (path22 instanceof RegExp) {
-        while (m = MATCHING_GROUP_REGEXP.exec(path22.source)) {
+      if (path23 instanceof RegExp) {
+        while (m = MATCHING_GROUP_REGEXP.exec(path23.source)) {
           if (m[0][0] === "\\") continue;
           keys.push({
             name: m[1] || name2++,
@@ -22965,18 +22965,18 @@ var require_path_to_regexp = __commonJS({
             offset: m.index
           });
         }
-        return path22;
+        return path23;
       }
-      if (Array.isArray(path22)) {
-        path22 = path22.map(function(value) {
+      if (Array.isArray(path23)) {
+        path23 = path23.map(function(value) {
           return pathToRegexp(value, keys, options).source;
         });
-        return new RegExp(path22.join("|"), flags);
+        return new RegExp(path23.join("|"), flags);
       }
-      if (typeof path22 !== "string") {
+      if (typeof path23 !== "string") {
         throw new TypeError("path must be a string, array of strings, or regular expression");
       }
-      path22 = path22.replace(
+      path23 = path23.replace(
         /\\.|(\/)?(\.)?:(\w+)(\(.*?\))?(\*)?(\?)?|[.*]|\/\(/g,
         function(match, slash, format, key, capture, star, optional, offset) {
           if (match[0] === "\\") {
@@ -22993,7 +22993,7 @@ var require_path_to_regexp = __commonJS({
           if (slash || format) {
             backtrack = "";
           } else {
-            backtrack += path22.slice(pos, offset);
+            backtrack += path23.slice(pos, offset);
           }
           pos = offset + match.length;
           if (match === "*") {
@@ -23023,7 +23023,7 @@ var require_path_to_regexp = __commonJS({
           return result;
         }
       );
-      while (m = MATCHING_GROUP_REGEXP.exec(path22)) {
+      while (m = MATCHING_GROUP_REGEXP.exec(path23)) {
         if (m[0][0] === "\\") continue;
         if (keysOffset + i === keys.length || keys[keysOffset + i].offset > m.index) {
           keys.splice(keysOffset + i, 0, {
@@ -23035,13 +23035,13 @@ var require_path_to_regexp = __commonJS({
         }
         i++;
       }
-      path22 += strict ? "" : path22[path22.length - 1] === "/" ? "?" : "/?";
+      path23 += strict ? "" : path23[path23.length - 1] === "/" ? "?" : "/?";
       if (end) {
-        path22 += "$";
-      } else if (path22[path22.length - 1] !== "/") {
-        path22 += lookahead ? "(?=/|$)" : "(?:/|$)";
+        path23 += "$";
+      } else if (path23[path23.length - 1] !== "/") {
+        path23 += lookahead ? "(?=/|$)" : "(?:/|$)";
       }
-      return new RegExp("^" + path22, flags);
+      return new RegExp("^" + path23, flags);
     }
   }
 });
@@ -23054,19 +23054,19 @@ var require_layer = __commonJS({
     var debug = require_src2()("express:router:layer");
     var hasOwnProperty = Object.prototype.hasOwnProperty;
     module2.exports = Layer;
-    function Layer(path22, options, fn) {
+    function Layer(path23, options, fn) {
       if (!(this instanceof Layer)) {
-        return new Layer(path22, options, fn);
+        return new Layer(path23, options, fn);
       }
-      debug("new %o", path22);
+      debug("new %o", path23);
       var opts = options || {};
       this.handle = fn;
       this.name = fn.name || "<anonymous>";
       this.params = void 0;
       this.path = void 0;
-      this.regexp = pathRegexp(path22, this.keys = [], opts);
-      this.regexp.fast_star = path22 === "*";
-      this.regexp.fast_slash = path22 === "/" && opts.end === false;
+      this.regexp = pathRegexp(path23, this.keys = [], opts);
+      this.regexp.fast_star = path23 === "*";
+      this.regexp.fast_slash = path23 === "/" && opts.end === false;
     }
     Layer.prototype.handle_error = function handle_error(error, req, res, next) {
       var fn = this.handle;
@@ -23090,20 +23090,20 @@ var require_layer = __commonJS({
         next(err);
       }
     };
-    Layer.prototype.match = function match(path22) {
+    Layer.prototype.match = function match(path23) {
       var match2;
-      if (path22 != null) {
+      if (path23 != null) {
         if (this.regexp.fast_slash) {
           this.params = {};
           this.path = "";
           return true;
         }
         if (this.regexp.fast_star) {
-          this.params = { "0": decode_param(path22) };
-          this.path = path22;
+          this.params = { "0": decode_param(path23) };
+          this.path = path23;
           return true;
         }
-        match2 = this.regexp.exec(path22);
+        match2 = this.regexp.exec(path23);
       }
       if (!match2) {
         this.params = void 0;
@@ -23196,10 +23196,10 @@ var require_route = __commonJS({
     var slice = Array.prototype.slice;
     var toString = Object.prototype.toString;
     module2.exports = Route;
-    function Route(path22) {
-      this.path = path22;
+    function Route(path23) {
+      this.path = path23;
       this.stack = [];
-      debug("new %o", path22);
+      debug("new %o", path23);
       this.methods = {};
     }
     Route.prototype._handles_method = function _handles_method(method) {
@@ -23412,8 +23412,8 @@ var require_router = __commonJS({
         if (++sync > 100) {
           return setImmediate(next, err);
         }
-        var path22 = getPathname(req);
-        if (path22 == null) {
+        var path23 = getPathname(req);
+        if (path23 == null) {
           return done(layerError);
         }
         var layer;
@@ -23421,7 +23421,7 @@ var require_router = __commonJS({
         var route;
         while (match !== true && idx < stack.length) {
           layer = stack[idx++];
-          match = matchLayer(layer, path22);
+          match = matchLayer(layer, path23);
           route = layer.route;
           if (typeof match !== "boolean") {
             layerError = layerError || match;
@@ -23459,18 +23459,18 @@ var require_router = __commonJS({
           } else if (route) {
             layer.handle_request(req, res, next);
           } else {
-            trim_prefix(layer, layerError, layerPath, path22);
+            trim_prefix(layer, layerError, layerPath, path23);
           }
           sync = 0;
         });
       }
-      function trim_prefix(layer, layerError, layerPath, path22) {
+      function trim_prefix(layer, layerError, layerPath, path23) {
         if (layerPath.length !== 0) {
-          if (layerPath !== path22.slice(0, layerPath.length)) {
+          if (layerPath !== path23.slice(0, layerPath.length)) {
             next(layerError);
             return;
           }
-          var c = path22[layerPath.length];
+          var c = path23[layerPath.length];
           if (c && c !== "/" && c !== ".") return next(layerError);
           debug("trim prefix (%s) from url %s", layerPath, req.url);
           removed = layerPath;
@@ -23548,7 +23548,7 @@ var require_router = __commonJS({
     };
     proto.use = function use(fn) {
       var offset = 0;
-      var path22 = "/";
+      var path23 = "/";
       if (typeof fn !== "function") {
         var arg = fn;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -23556,7 +23556,7 @@ var require_router = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path22 = fn;
+          path23 = fn;
         }
       }
       var callbacks = flatten(slice.call(arguments, offset));
@@ -23568,8 +23568,8 @@ var require_router = __commonJS({
         if (typeof fn !== "function") {
           throw new TypeError("Router.use() requires a middleware function but got a " + gettype(fn));
         }
-        debug("use %o %s", path22, fn.name || "<anonymous>");
-        var layer = new Layer(path22, {
+        debug("use %o %s", path23, fn.name || "<anonymous>");
+        var layer = new Layer(path23, {
           sensitive: this.caseSensitive,
           strict: false,
           end: false
@@ -23579,9 +23579,9 @@ var require_router = __commonJS({
       }
       return this;
     };
-    proto.route = function route(path22) {
-      var route2 = new Route(path22);
-      var layer = new Layer(path22, {
+    proto.route = function route(path23) {
+      var route2 = new Route(path23);
+      var layer = new Layer(path23, {
         sensitive: this.caseSensitive,
         strict: this.strict,
         end: true
@@ -23591,8 +23591,8 @@ var require_router = __commonJS({
       return route2;
     };
     methods.concat("all").forEach(function(method) {
-      proto[method] = function(path22) {
-        var route = this.route(path22);
+      proto[method] = function(path23) {
+        var route = this.route(path23);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
@@ -23628,9 +23628,9 @@ var require_router = __commonJS({
       }
       return toString.call(obj).replace(objectRegExp, "$1");
     }
-    function matchLayer(layer, path22) {
+    function matchLayer(layer, path23) {
       try {
-        return layer.match(path22);
+        return layer.match(path23);
       } catch (err) {
         return err;
       }
@@ -23748,13 +23748,13 @@ var require_view = __commonJS({
   "../../node_modules/.pnpm/express@4.22.1/node_modules/express/lib/view.js"(exports2, module2) {
     "use strict";
     var debug = require_src2()("express:view");
-    var path22 = require("path");
-    var fs21 = require("fs");
-    var dirname7 = path22.dirname;
-    var basename4 = path22.basename;
-    var extname3 = path22.extname;
-    var join17 = path22.join;
-    var resolve14 = path22.resolve;
+    var path23 = require("path");
+    var fs22 = require("fs");
+    var dirname7 = path23.dirname;
+    var basename5 = path23.basename;
+    var extname3 = path23.extname;
+    var join18 = path23.join;
+    var resolve14 = path23.resolve;
     module2.exports = View;
     function View(name2, options) {
       var opts = options || {};
@@ -23783,17 +23783,17 @@ var require_view = __commonJS({
       this.path = this.lookup(fileName);
     }
     View.prototype.lookup = function lookup(name2) {
-      var path23;
+      var path24;
       var roots = [].concat(this.root);
       debug('lookup "%s"', name2);
-      for (var i = 0; i < roots.length && !path23; i++) {
+      for (var i = 0; i < roots.length && !path24; i++) {
         var root = roots[i];
         var loc = resolve14(root, name2);
         var dir = dirname7(loc);
-        var file = basename4(loc);
-        path23 = this.resolve(dir, file);
+        var file = basename5(loc);
+        path24 = this.resolve(dir, file);
       }
-      return path23;
+      return path24;
     };
     View.prototype.render = function render(options, callback) {
       debug('render "%s"', this.path);
@@ -23801,21 +23801,21 @@ var require_view = __commonJS({
     };
     View.prototype.resolve = function resolve15(dir, file) {
       var ext = this.ext;
-      var path23 = join17(dir, file);
-      var stat = tryStat(path23);
+      var path24 = join18(dir, file);
+      var stat = tryStat(path24);
       if (stat && stat.isFile()) {
-        return path23;
+        return path24;
       }
-      path23 = join17(dir, basename4(file, ext), "index" + ext);
-      stat = tryStat(path23);
+      path24 = join18(dir, basename5(file, ext), "index" + ext);
+      stat = tryStat(path24);
       if (stat && stat.isFile()) {
-        return path23;
+        return path24;
       }
     };
-    function tryStat(path23) {
-      debug('stat "%s"', path23);
+    function tryStat(path24) {
+      debug('stat "%s"', path24);
       try {
-        return fs21.statSync(path23);
+        return fs22.statSync(path24);
       } catch (e) {
         return void 0;
       }
@@ -23829,7 +23829,7 @@ var require_content_disposition = __commonJS({
     "use strict";
     module2.exports = contentDisposition;
     module2.exports.parse = parse;
-    var basename4 = require("path").basename;
+    var basename5 = require("path").basename;
     var Buffer2 = require_safe_buffer().Buffer;
     var ENCODE_URL_ATTR_CHAR_REGEXP = /[\x00-\x20"'()*,/:;<=>?@[\\\]{}\x7f]/g;
     var HEX_ESCAPE_REGEXP = /%[0-9A-Fa-f]{2}/;
@@ -23865,9 +23865,9 @@ var require_content_disposition = __commonJS({
       if (typeof fallback === "string" && NON_LATIN1_REGEXP.test(fallback)) {
         throw new TypeError("fallback must be ISO-8859-1 string");
       }
-      var name2 = basename4(filename);
+      var name2 = basename5(filename);
       var isQuotedString = TEXT_REGEXP.test(name2);
-      var fallbackName = typeof fallback !== "string" ? fallback && getlatin1(name2) : basename4(fallback);
+      var fallbackName = typeof fallback !== "string" ? fallback && getlatin1(name2) : basename5(fallback);
       var hasFallback = typeof fallbackName === "string" && fallbackName !== name2;
       if (hasFallback || !isQuotedString || HEX_ESCAPE_REGEXP.test(name2)) {
         params["filename*"] = name2;
@@ -24112,8 +24112,8 @@ var require_types = __commonJS({
 var require_mime = __commonJS({
   "../../node_modules/.pnpm/mime@1.6.0/node_modules/mime/mime.js"(exports2, module2) {
     "use strict";
-    var path22 = require("path");
-    var fs21 = require("fs");
+    var path23 = require("path");
+    var fs22 = require("fs");
     function Mime() {
       this.types = /* @__PURE__ */ Object.create(null);
       this.extensions = /* @__PURE__ */ Object.create(null);
@@ -24134,7 +24134,7 @@ var require_mime = __commonJS({
     };
     Mime.prototype.load = function(file) {
       this._loading = file;
-      var map = {}, content = fs21.readFileSync(file, "ascii"), lines = content.split(/[\r\n]+/);
+      var map = {}, content = fs22.readFileSync(file, "ascii"), lines = content.split(/[\r\n]+/);
       lines.forEach(function(line) {
         var fields = line.replace(/\s*#.*|^\s*|\s*$/g, "").split(/\s+/);
         map[fields.shift()] = fields;
@@ -24142,8 +24142,8 @@ var require_mime = __commonJS({
       this.define(map);
       this._loading = null;
     };
-    Mime.prototype.lookup = function(path23, fallback) {
-      var ext = path23.replace(/^.*[\.\/\\]/, "").toLowerCase();
+    Mime.prototype.lookup = function(path24, fallback) {
+      var ext = path24.replace(/^.*[\.\/\\]/, "").toLowerCase();
       return this.types[ext] || fallback || this.default_type;
     };
     Mime.prototype.extension = function(mimeType) {
@@ -24253,36 +24253,36 @@ var require_send = __commonJS({
     var deprecate = require_depd()("send");
     var destroy2 = require_destroy();
     var encodeUrl = require_encodeurl();
-    var escapeHtml = require_escape_html();
+    var escapeHtml2 = require_escape_html();
     var etag = require_etag();
     var fresh = require_fresh();
-    var fs21 = require("fs");
+    var fs22 = require("fs");
     var mime = require_mime();
     var ms = require_ms();
     var onFinished = require_on_finished();
     var parseRange = require_range_parser();
-    var path22 = require("path");
+    var path23 = require("path");
     var statuses = require_statuses();
     var Stream = require("stream");
     var util3 = require("util");
-    var extname3 = path22.extname;
-    var join17 = path22.join;
-    var normalize = path22.normalize;
-    var resolve14 = path22.resolve;
-    var sep4 = path22.sep;
+    var extname3 = path23.extname;
+    var join18 = path23.join;
+    var normalize = path23.normalize;
+    var resolve14 = path23.resolve;
+    var sep4 = path23.sep;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
     var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1e3;
     var UP_PATH_REGEXP = /(?:^|[\\/])\.\.(?:[\\/]|$)/;
     module2.exports = send;
     module2.exports.mime = mime;
-    function send(req, path23, options) {
-      return new SendStream(req, path23, options);
+    function send(req, path24, options) {
+      return new SendStream(req, path24, options);
     }
-    function SendStream(req, path23, options) {
+    function SendStream(req, path24, options) {
       Stream.call(this);
       var opts = options || {};
       this.options = opts;
-      this.path = path23;
+      this.path = path24;
       this.req = req;
       this._acceptRanges = opts.acceptRanges !== void 0 ? Boolean(opts.acceptRanges) : true;
       this._cacheControl = opts.cacheControl !== void 0 ? Boolean(opts.cacheControl) : true;
@@ -24328,8 +24328,8 @@ var require_send = __commonJS({
       this._index = index2;
       return this;
     }, "send.index: pass index as option");
-    SendStream.prototype.root = function root(path23) {
-      this._root = resolve14(String(path23));
+    SendStream.prototype.root = function root(path24) {
+      this._root = resolve14(String(path24));
       debug("root %s", this._root);
       return this;
     };
@@ -24353,7 +24353,7 @@ var require_send = __commonJS({
       }
       var res = this.res;
       var msg = statuses.message[status] || String(status);
-      var doc = createHtmlDocument("Error", escapeHtml(msg));
+      var doc = createHtmlDocument("Error", escapeHtml2(msg));
       clearHeaders(res);
       if (err && err.headers) {
         setHeaders(res, err.headers);
@@ -24442,10 +24442,10 @@ var require_send = __commonJS({
       var lastModified = this.res.getHeader("Last-Modified");
       return parseHttpDate(lastModified) <= parseHttpDate(ifRange);
     };
-    SendStream.prototype.redirect = function redirect(path23) {
+    SendStream.prototype.redirect = function redirect(path24) {
       var res = this.res;
       if (hasListeners(this, "directory")) {
-        this.emit("directory", res, path23);
+        this.emit("directory", res, path24);
         return;
       }
       if (this.hasTrailingSlash()) {
@@ -24453,7 +24453,7 @@ var require_send = __commonJS({
         return;
       }
       var loc = encodeUrl(collapseLeadingSlashes(this.path + "/"));
-      var doc = createHtmlDocument("Redirecting", "Redirecting to " + escapeHtml(loc));
+      var doc = createHtmlDocument("Redirecting", "Redirecting to " + escapeHtml2(loc));
       res.statusCode = 301;
       res.setHeader("Content-Type", "text/html; charset=UTF-8");
       res.setHeader("Content-Length", Buffer.byteLength(doc));
@@ -24465,42 +24465,42 @@ var require_send = __commonJS({
     SendStream.prototype.pipe = function pipe(res) {
       var root = this._root;
       this.res = res;
-      var path23 = decode(this.path);
-      if (path23 === -1) {
+      var path24 = decode(this.path);
+      if (path24 === -1) {
         this.error(400);
         return res;
       }
-      if (~path23.indexOf("\0")) {
+      if (~path24.indexOf("\0")) {
         this.error(400);
         return res;
       }
       var parts;
       if (root !== null) {
-        if (path23) {
-          path23 = normalize("." + sep4 + path23);
+        if (path24) {
+          path24 = normalize("." + sep4 + path24);
         }
-        if (UP_PATH_REGEXP.test(path23)) {
-          debug('malicious path "%s"', path23);
+        if (UP_PATH_REGEXP.test(path24)) {
+          debug('malicious path "%s"', path24);
           this.error(403);
           return res;
         }
-        parts = path23.split(sep4);
-        path23 = normalize(join17(root, path23));
+        parts = path24.split(sep4);
+        path24 = normalize(join18(root, path24));
       } else {
-        if (UP_PATH_REGEXP.test(path23)) {
-          debug('malicious path "%s"', path23);
+        if (UP_PATH_REGEXP.test(path24)) {
+          debug('malicious path "%s"', path24);
           this.error(403);
           return res;
         }
-        parts = normalize(path23).split(sep4);
-        path23 = resolve14(path23);
+        parts = normalize(path24).split(sep4);
+        path24 = resolve14(path24);
       }
       if (containsDotFile(parts)) {
         var access = this._dotfiles;
         if (access === void 0) {
           access = parts[parts.length - 1][0] === "." ? this._hidden ? "allow" : "ignore" : "allow";
         }
-        debug('%s dotfile "%s"', access, path23);
+        debug('%s dotfile "%s"', access, path24);
         switch (access) {
           case "allow":
             break;
@@ -24514,13 +24514,13 @@ var require_send = __commonJS({
         }
       }
       if (this._index.length && this.hasTrailingSlash()) {
-        this.sendIndex(path23);
+        this.sendIndex(path24);
         return res;
       }
-      this.sendFile(path23);
+      this.sendFile(path24);
       return res;
     };
-    SendStream.prototype.send = function send2(path23, stat) {
+    SendStream.prototype.send = function send2(path24, stat) {
       var len = stat.size;
       var options = this.options;
       var opts = {};
@@ -24532,9 +24532,9 @@ var require_send = __commonJS({
         this.headersAlreadySent();
         return;
       }
-      debug('pipe "%s"', path23);
-      this.setHeader(path23, stat);
-      this.type(path23);
+      debug('pipe "%s"', path24);
+      this.setHeader(path24, stat);
+      this.type(path24);
       if (this.isConditionalGET()) {
         if (this.isPreconditionFailure()) {
           this.error(412);
@@ -24583,28 +24583,28 @@ var require_send = __commonJS({
         res.end();
         return;
       }
-      this.stream(path23, opts);
+      this.stream(path24, opts);
     };
-    SendStream.prototype.sendFile = function sendFile(path23) {
+    SendStream.prototype.sendFile = function sendFile(path24) {
       var i = 0;
       var self2 = this;
-      debug('stat "%s"', path23);
-      fs21.stat(path23, function onstat(err, stat) {
-        if (err && err.code === "ENOENT" && !extname3(path23) && path23[path23.length - 1] !== sep4) {
+      debug('stat "%s"', path24);
+      fs22.stat(path24, function onstat(err, stat) {
+        if (err && err.code === "ENOENT" && !extname3(path24) && path24[path24.length - 1] !== sep4) {
           return next(err);
         }
         if (err) return self2.onStatError(err);
-        if (stat.isDirectory()) return self2.redirect(path23);
-        self2.emit("file", path23, stat);
-        self2.send(path23, stat);
+        if (stat.isDirectory()) return self2.redirect(path24);
+        self2.emit("file", path24, stat);
+        self2.send(path24, stat);
       });
       function next(err) {
         if (self2._extensions.length <= i) {
           return err ? self2.onStatError(err) : self2.error(404);
         }
-        var p = path23 + "." + self2._extensions[i++];
+        var p = path24 + "." + self2._extensions[i++];
         debug('stat "%s"', p);
-        fs21.stat(p, function(err2, stat) {
+        fs22.stat(p, function(err2, stat) {
           if (err2) return next(err2);
           if (stat.isDirectory()) return next();
           self2.emit("file", p, stat);
@@ -24612,7 +24612,7 @@ var require_send = __commonJS({
         });
       }
     };
-    SendStream.prototype.sendIndex = function sendIndex(path23) {
+    SendStream.prototype.sendIndex = function sendIndex(path24) {
       var i = -1;
       var self2 = this;
       function next(err) {
@@ -24620,9 +24620,9 @@ var require_send = __commonJS({
           if (err) return self2.onStatError(err);
           return self2.error(404);
         }
-        var p = join17(path23, self2._index[i]);
+        var p = join18(path24, self2._index[i]);
         debug('stat "%s"', p);
-        fs21.stat(p, function(err2, stat) {
+        fs22.stat(p, function(err2, stat) {
           if (err2) return next(err2);
           if (stat.isDirectory()) return next();
           self2.emit("file", p, stat);
@@ -24631,10 +24631,10 @@ var require_send = __commonJS({
       }
       next();
     };
-    SendStream.prototype.stream = function stream(path23, options) {
+    SendStream.prototype.stream = function stream(path24, options) {
       var self2 = this;
       var res = this.res;
-      var stream2 = fs21.createReadStream(path23, options);
+      var stream2 = fs22.createReadStream(path24, options);
       this.emit("stream", stream2);
       stream2.pipe(res);
       function cleanup() {
@@ -24649,10 +24649,10 @@ var require_send = __commonJS({
         self2.emit("end");
       });
     };
-    SendStream.prototype.type = function type(path23) {
+    SendStream.prototype.type = function type(path24) {
       var res = this.res;
       if (res.getHeader("Content-Type")) return;
-      var type2 = mime.lookup(path23);
+      var type2 = mime.lookup(path24);
       if (!type2) {
         debug("no content-type");
         return;
@@ -24661,9 +24661,9 @@ var require_send = __commonJS({
       debug("content-type %s", type2);
       res.setHeader("Content-Type", type2 + (charset ? "; charset=" + charset : ""));
     };
-    SendStream.prototype.setHeader = function setHeader(path23, stat) {
+    SendStream.prototype.setHeader = function setHeader(path24, stat) {
       var res = this.res;
-      this.emit("headers", res, path23, stat);
+      this.emit("headers", res, path24, stat);
       if (this._acceptRanges && !res.getHeader("Accept-Ranges")) {
         debug("accept ranges");
         res.setHeader("Accept-Ranges", "bytes");
@@ -24722,9 +24722,9 @@ var require_send = __commonJS({
       }
       return err instanceof Error ? createError(status, err, { expose: false }) : createError(status, err);
     }
-    function decode(path23) {
+    function decode(path24) {
       try {
-        return decodeURIComponent(path23);
+        return decodeURIComponent(path24);
       } catch (err) {
         return -1;
       }
@@ -25634,10 +25634,10 @@ var require_utils2 = __commonJS({
     var querystring = require("querystring");
     exports2.etag = createETagGenerator({ weak: false });
     exports2.wetag = createETagGenerator({ weak: true });
-    exports2.isAbsolute = function(path22) {
-      if ("/" === path22[0]) return true;
-      if (":" === path22[1] && ("\\" === path22[2] || "/" === path22[2])) return true;
-      if ("\\\\" === path22.substring(0, 2)) return true;
+    exports2.isAbsolute = function(path23) {
+      if ("/" === path23[0]) return true;
+      if (":" === path23[1] && ("\\" === path23[2] || "/" === path23[2])) return true;
+      if ("\\\\" === path23.substring(0, 2)) return true;
     };
     exports2.flatten = deprecate.function(
       flatten,
@@ -25760,7 +25760,7 @@ var require_application = __commonJS({
   "../../node_modules/.pnpm/express@4.22.1/node_modules/express/lib/application.js"(exports2, module2) {
     "use strict";
     var finalhandler = require_finalhandler();
-    var Router13 = require_router();
+    var Router14 = require_router();
     var methods = require_methods();
     var middleware = require_init();
     var query = require_query();
@@ -25825,7 +25825,7 @@ var require_application = __commonJS({
     };
     app.lazyrouter = function lazyrouter() {
       if (!this._router) {
-        this._router = new Router13({
+        this._router = new Router14({
           caseSensitive: this.enabled("case sensitive routing"),
           strict: this.enabled("strict routing")
         });
@@ -25848,7 +25848,7 @@ var require_application = __commonJS({
     };
     app.use = function use(fn) {
       var offset = 0;
-      var path22 = "/";
+      var path23 = "/";
       if (typeof fn !== "function") {
         var arg = fn;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -25856,7 +25856,7 @@ var require_application = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path22 = fn;
+          path23 = fn;
         }
       }
       var fns = flatten(slice.call(arguments, offset));
@@ -25867,12 +25867,12 @@ var require_application = __commonJS({
       var router = this._router;
       fns.forEach(function(fn2) {
         if (!fn2 || !fn2.handle || !fn2.set) {
-          return router.use(path22, fn2);
+          return router.use(path23, fn2);
         }
-        debug(".use app under %s", path22);
-        fn2.mountpath = path22;
+        debug(".use app under %s", path23);
+        fn2.mountpath = path23;
         fn2.parent = this;
-        router.use(path22, function mounted_app(req, res, next) {
+        router.use(path23, function mounted_app(req, res, next) {
           var orig = req.app;
           fn2.handle(req, res, function(err) {
             setPrototypeOf(req, orig.request);
@@ -25884,9 +25884,9 @@ var require_application = __commonJS({
       }, this);
       return this;
     };
-    app.route = function route(path22) {
+    app.route = function route(path23) {
       this.lazyrouter();
-      return this._router.route(path22);
+      return this._router.route(path23);
     };
     app.engine = function engine(ext, fn) {
       if (typeof fn !== "function") {
@@ -25937,7 +25937,7 @@ var require_application = __commonJS({
       }
       return this;
     };
-    app.path = function path22() {
+    app.path = function path23() {
       return this.parent ? this.parent.path() + this.mountpath : "";
     };
     app.enabled = function enabled2(setting) {
@@ -25953,19 +25953,19 @@ var require_application = __commonJS({
       return this.set(setting, false);
     };
     methods.forEach(function(method) {
-      app[method] = function(path22) {
+      app[method] = function(path23) {
         if (method === "get" && arguments.length === 1) {
-          return this.set(path22);
+          return this.set(path23);
         }
         this.lazyrouter();
-        var route = this._router.route(path22);
+        var route = this._router.route(path23);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
     });
-    app.all = function all(path22) {
+    app.all = function all(path23) {
       this.lazyrouter();
-      var route = this._router.route(path22);
+      var route = this._router.route(path23);
       var args = slice.call(arguments, 1);
       for (var i = 0; i < methods.length; i++) {
         route[methods[i]].apply(route, args);
@@ -26724,7 +26724,7 @@ var require_request = __commonJS({
       var subdomains2 = !isIP(hostname3) ? hostname3.split(".").reverse() : [hostname3];
       return subdomains2.slice(offset);
     });
-    defineGetter(req, "path", function path22() {
+    defineGetter(req, "path", function path23() {
       return parse(this).pathname;
     });
     defineGetter(req, "hostname", function hostname3() {
@@ -27043,11 +27043,11 @@ var require_response = __commonJS({
     var createError = require_http_errors();
     var deprecate = require_depd()("express");
     var encodeUrl = require_encodeurl();
-    var escapeHtml = require_escape_html();
+    var escapeHtml2 = require_escape_html();
     var http3 = require("http");
     var isAbsolute4 = require_utils2().isAbsolute;
     var onFinished = require_on_finished();
-    var path22 = require("path");
+    var path23 = require("path");
     var statuses = require_statuses();
     var merge = require_utils_merge();
     var sign = require_cookie_signature().sign;
@@ -27056,9 +27056,9 @@ var require_response = __commonJS({
     var setCharset = require_utils2().setCharset;
     var cookie = require_cookie();
     var send = require_send();
-    var extname3 = path22.extname;
+    var extname3 = path23.extname;
     var mime = send.mime;
-    var resolve14 = path22.resolve;
+    var resolve14 = path23.resolve;
     var vary = require_vary();
     var res = Object.create(http3.ServerResponse.prototype);
     module2.exports = res;
@@ -27235,26 +27235,26 @@ var require_response = __commonJS({
       this.type("txt");
       return this.send(body);
     };
-    res.sendFile = function sendFile(path23, options, callback) {
+    res.sendFile = function sendFile(path24, options, callback) {
       var done = callback;
       var req = this.req;
       var res2 = this;
       var next = req.next;
       var opts = options || {};
-      if (!path23) {
+      if (!path24) {
         throw new TypeError("path argument is required to res.sendFile");
       }
-      if (typeof path23 !== "string") {
+      if (typeof path24 !== "string") {
         throw new TypeError("path must be a string to res.sendFile");
       }
       if (typeof options === "function") {
         done = options;
         opts = {};
       }
-      if (!opts.root && !isAbsolute4(path23)) {
+      if (!opts.root && !isAbsolute4(path24)) {
         throw new TypeError("path must be absolute or specify root to res.sendFile");
       }
-      var pathname = encodeURI(path23);
+      var pathname = encodeURI(path24);
       var file = send(req, pathname, opts);
       sendfile(res2, file, opts, function(err) {
         if (done) return done(err);
@@ -27264,7 +27264,7 @@ var require_response = __commonJS({
         }
       });
     };
-    res.sendfile = function(path23, options, callback) {
+    res.sendfile = function(path24, options, callback) {
       var done = callback;
       var req = this.req;
       var res2 = this;
@@ -27274,7 +27274,7 @@ var require_response = __commonJS({
         done = options;
         opts = {};
       }
-      var file = send(req, path23, opts);
+      var file = send(req, path24, opts);
       sendfile(res2, file, opts, function(err) {
         if (done) return done(err);
         if (err && err.code === "EISDIR") return next();
@@ -27287,7 +27287,7 @@ var require_response = __commonJS({
       res.sendfile,
       "res.sendfile: Use res.sendFile instead"
     );
-    res.download = function download(path23, filename, options, callback) {
+    res.download = function download(path24, filename, options, callback) {
       var done = callback;
       var name2 = filename;
       var opts = options || null;
@@ -27304,7 +27304,7 @@ var require_response = __commonJS({
         opts = filename;
       }
       var headers = {
-        "Content-Disposition": contentDisposition(name2 || path23)
+        "Content-Disposition": contentDisposition(name2 || path24)
       };
       if (opts && opts.headers) {
         var keys = Object.keys(opts.headers);
@@ -27317,7 +27317,7 @@ var require_response = __commonJS({
       }
       opts = Object.create(opts);
       opts.headers = headers;
-      var fullPath = !opts.root ? resolve14(path23) : path23;
+      var fullPath = !opts.root ? resolve14(path24) : path24;
       return this.sendFile(fullPath, opts, done);
     };
     res.contentType = res.type = function contentType(type) {
@@ -27449,7 +27449,7 @@ var require_response = __commonJS({
           body = statuses.message[status] + ". Redirecting to " + address;
         },
         html: function() {
-          var u = escapeHtml(address);
+          var u = escapeHtml2(address);
           body = "<p>" + statuses.message[status] + ". Redirecting to " + u + "</p>";
         },
         default: function() {
@@ -27581,7 +27581,7 @@ var require_serve_static = __commonJS({
   "../../node_modules/.pnpm/serve-static@1.16.3/node_modules/serve-static/index.js"(exports2, module2) {
     "use strict";
     var encodeUrl = require_encodeurl();
-    var escapeHtml = require_escape_html();
+    var escapeHtml2 = require_escape_html();
     var parseUrl = require_parseurl();
     var resolve14 = require("path").resolve;
     var send = require_send();
@@ -27618,11 +27618,11 @@ var require_serve_static = __commonJS({
         }
         var forwardError = !fallthrough;
         var originalUrl = parseUrl.original(req);
-        var path22 = parseUrl(req).pathname;
-        if (path22 === "/" && originalUrl.pathname.substr(-1) !== "/") {
-          path22 = "";
+        var path23 = parseUrl(req).pathname;
+        if (path23 === "/" && originalUrl.pathname.substr(-1) !== "/") {
+          path23 = "";
         }
-        var stream = send(req, path22, opts);
+        var stream = send(req, path23, opts);
         stream.on("directory", onDirectory);
         if (setHeaders) {
           stream.on("headers", setHeaders);
@@ -27668,7 +27668,7 @@ var require_serve_static = __commonJS({
         originalUrl.path = null;
         originalUrl.pathname = collapseLeadingSlashes(originalUrl.pathname + "/");
         var loc = encodeUrl(url.format(originalUrl));
-        var doc = createHtmlDocument("Redirecting", "Redirecting to " + escapeHtml(loc));
+        var doc = createHtmlDocument("Redirecting", "Redirecting to " + escapeHtml2(loc));
         res.statusCode = 301;
         res.setHeader("Content-Type", "text/html; charset=UTF-8");
         res.setHeader("Content-Length", Buffer.byteLength(doc));
@@ -27690,7 +27690,7 @@ var require_express = __commonJS({
     var mixin = require_merge_descriptors();
     var proto = require_application();
     var Route = require_route();
-    var Router13 = require_router();
+    var Router14 = require_router();
     var req = require_request();
     var res = require_response();
     exports2 = module2.exports = createApplication;
@@ -27713,7 +27713,7 @@ var require_express = __commonJS({
     exports2.request = req;
     exports2.response = res;
     exports2.Route = Route;
-    exports2.Router = Router13;
+    exports2.Router = Router14;
     exports2.json = bodyParser.json;
     exports2.query = require_query();
     exports2.raw = bodyParser.raw;
@@ -32265,11 +32265,11 @@ function persistNodeStartupTransport(storagePath, transport) {
     transport
   });
 }
-function persistNodeStartupJoin(storagePath, join17) {
+function persistNodeStartupJoin(storagePath, join18) {
   const startup = resolveNodeStartupMetadata(storagePath);
   persistNodeStartupMetadata(storagePath, {
     ...startup,
-    join: join17
+    join: join18
   });
 }
 function resolvePersistedDevTunnelId(storagePath, kind) {
@@ -33266,19 +33266,19 @@ async function fetchWithTimeout(url, init, timeoutMs = DEFAULT_NODE_REQUEST_TIME
     cleanup();
   }
 }
-async function fetchNodeWithFallback(node, path22, init, timeoutMs = DEFAULT_NODE_REQUEST_TIMEOUT_MS, trace, options) {
+async function fetchNodeWithFallback(node, path23, init, timeoutMs = DEFAULT_NODE_REQUEST_TIMEOUT_MS, trace, options) {
   let lastError;
   const endpoints = getNodeRequestEndpoints(node, options);
   for (const [index, endpoint] of endpoints.entries()) {
     const attempt = index + 1;
-    trace?.onAttempt?.({ attempt, endpoint, path: path22, timeoutMs, totalEndpoints: endpoints.length });
+    trace?.onAttempt?.({ attempt, endpoint, path: path23, timeoutMs, totalEndpoints: endpoints.length });
     try {
-      const response = await fetchWithTimeout(`${endpoint}${path22}`, init, timeoutMs);
-      trace?.onResponse?.({ attempt, endpoint, path: path22, response, timeoutMs, totalEndpoints: endpoints.length });
+      const response = await fetchWithTimeout(`${endpoint}${path23}`, init, timeoutMs);
+      trace?.onResponse?.({ attempt, endpoint, path: path23, response, timeoutMs, totalEndpoints: endpoints.length });
       return { endpoint, response };
     } catch (error) {
       lastError = error;
-      trace?.onError?.({ attempt, endpoint, error, path: path22, timeoutMs, totalEndpoints: endpoints.length });
+      trace?.onError?.({ attempt, endpoint, error, path: path23, timeoutMs, totalEndpoints: endpoints.length });
     }
   }
   throw lastError instanceof Error ? lastError : new Error("No reachable node endpoint");
@@ -35321,9 +35321,9 @@ var DataRouter = class {
   /**
    * Returns true if the request should be proxied to the leader.
    */
-  shouldProxy(method, path22) {
+  shouldProxy(method, path23) {
     if (this.election.isLeader()) return false;
-    if (this.isExcludedPath(path22)) return false;
+    if (this.isExcludedPath(path23)) return false;
     if (method.toUpperCase() === "GET") return false;
     return WRITE_METHODS.has(method.toUpperCase());
   }
@@ -35427,8 +35427,8 @@ var DataRouter = class {
     };
   }
   // ── Helpers ───────────────────────────────────────────────────────────
-  isExcludedPath(path22) {
-    return EXCLUDED_PATH_PREFIXES.some((prefix) => path22.startsWith(prefix)) || EXCLUDED_PATH_SUFFIXES.some((suffix) => path22.endsWith(suffix));
+  isExcludedPath(path23) {
+    return EXCLUDED_PATH_PREFIXES.some((prefix) => path23.startsWith(prefix)) || EXCLUDED_PATH_SUFFIXES.some((suffix) => path23.endsWith(suffix));
   }
 };
@@ -37107,6 +37107,7 @@ var LEGACY_FILES = [
   "nodes.json",
   "tasks.json",
   "shares.json",
+  "node-operations.json",
   "election.json"
 ];
 var LEGACY_DIRS = ["logs", "task-logs"];
@@ -39205,8 +39206,8 @@ function getErrorMap() {
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path22, errorMaps, issueData } = params;
-  const fullPath = [...path22, ...issueData.path || []];
+  const { data, path: path23, errorMaps, issueData } = params;
+  const fullPath = [...path23, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -39322,11 +39323,11 @@ var errorUtil;
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path22, key) {
+  constructor(parent, value, path23, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path22;
+    this._path = path23;
     this._key = key;
   }
   get path() {
@@ -43219,16 +43220,17 @@ var TaskOutputContentQuery = external_exports.object({
 });
 var TaskOutputDownloadQuery = TaskOutputContentQuery;
 var TaskPreviewSessionBody = external_exports.object({
-  path: external_exports.string().min(1).optional()
+  path: external_exports.string().min(1).optional(),
+  port: external_exports.coerce.number().int().min(1).max(65535).optional()
 });
 var BatchTaskIdsBody = external_exports.object({
   ids: external_exports.array(external_exports.string().min(1)).min(1).max(50)
 });
 // ../../packages/api/src/app/server.ts
-var path19 = __toESM(require("path"), 1);
-var fs18 = __toESM(require("fs"), 1);
-var import_express13 = __toESM(require_express2(), 1);
+var path20 = __toESM(require("path"), 1);
+var fs19 = __toESM(require("fs"), 1);
+var import_express14 = __toESM(require_express2(), 1);
 // ../../packages/api/src/middleware/auth.ts
 var SKIP_AUTH_PATHS = ["/api/system/health"];
@@ -43354,8 +43356,91 @@ function createAuthMiddleware(config) {
 }
 // ../../packages/api/src/middleware/routing.ts
-function createRoutingMiddleware(dataRouter) {
-  return dataRouter.createMiddleware();
+function isRoutingMiddlewareDeps(input) {
+  return "dataRouter" in input;
+}
+function decodePathSegment(value) {
+  try {
+    return decodeURIComponent(value);
+  } catch {
+    return value;
+  }
+}
+function getSingleTaskDeleteId(path23) {
+  const match = /^\/api\/tasks\/([^/]+)$/.exec(path23);
+  return match ? decodePathSegment(match[1]) : null;
+}
+function getSuccessfulBatchDeleteIds(body) {
+  if (!body || typeof body !== "object" || !Array.isArray(body.results)) {
+    return [];
+  }
+  return body.results.flatMap((result) => {
+    if (!result || typeof result !== "object") return [];
+    const item = result;
+    return item.ok === true && typeof item.id === "string" ? [item.id] : [];
+  });
+}
+function getProxiedDeleteIds(req, result) {
+  if (result.status < 200 || result.status >= 300) {
+    return [];
+  }
+  const method = req.method.toUpperCase();
+  if (method === "DELETE") {
+    const taskId = getSingleTaskDeleteId(req.path);
+    return taskId ? [taskId] : [];
+  }
+  if (method === "POST" && req.path === "/api/tasks/batch/delete") {
+    return getSuccessfulBatchDeleteIds(result.body);
+  }
+  return [];
+}
+function evictLocalTaskMirrors(taskEngine, logger27, taskIds) {
+  if (!taskEngine || taskIds.length === 0) return;
+  for (const taskId of taskIds) {
+    try {
+      taskEngine.deleteTask(taskId);
+    } catch (err) {
+      logger27?.child("routing")?.warn("failed to evict follower-local task mirror after proxied delete", {
+        taskId,
+        error: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+}
+function createRoutingMiddleware(input) {
+  const deps = isRoutingMiddlewareDeps(input) ? input : { dataRouter: input };
+  const { dataRouter, taskEngine, logger: logger27 } = deps;
+  return async (req, res, next) => {
+    if (!dataRouter.shouldProxy(req.method, req.path)) {
+      next();
+      return;
+    }
+    const leaderEndpoint = dataRouter.getLeaderEndpoint();
+    if (!leaderEndpoint) {
+      res.status(503).json({
+        error: { code: "NO_LEADER", message: "No leader available" }
+      });
+      return;
+    }
+    try {
+      const result = await dataRouter.proxyToLeader(req);
+      evictLocalTaskMirrors(taskEngine, logger27, getProxiedDeleteIds(req, result));
+      for (const [key, value] of Object.entries(result.headers)) {
+        res.setHeader(key, value);
+      }
+      res.status(result.status).json(result.body);
+    } catch (err) {
+      if (err instanceof MeshyError) {
+        res.status(err.statusCode).json({
+          error: { code: err.code, message: err.message }
+        });
+        return;
+      }
+      res.status(502).json({
+        error: { code: "NODE_OFFLINE", message: "Leader unreachable" }
+      });
+    }
+  };
 }
 // ../../packages/api/src/middleware/error.ts
@@ -43906,9 +43991,33 @@ function detectHtmlEntries(root) {
   }
   return entries;
 }
+function detectMarkdownEntries(root) {
+  const entries = [];
+  try {
+    const topLevel = fs14.readdirSync(root, { withFileTypes: true });
+    for (const f of topLevel) {
+      if (f.isFile() && !f.name.startsWith(".") && /\.mdx?$/i.test(f.name)) {
+        entries.push({ path: f.name, label: f.name });
+      }
+    }
+    const subdirs = topLevel.filter((e) => e.isDirectory() && !e.name.startsWith("."));
+    for (const dir of subdirs) {
+      for (const fileName of ["README.md", "readme.md"]) {
+        const readmePath = path15.join(root, dir.name, fileName);
+        if (fs14.existsSync(readmePath)) {
+          entries.push({ path: `${dir.name}/${fileName}`, label: `${dir.name}/${fileName}` });
+          break;
+        }
+      }
+    }
+  } catch {
+  }
+  return entries;
+}
 function getOutputSummary(root) {
   const rootName = path15.basename(root);
   const htmlEntries = detectHtmlEntries(root);
+  const markdownEntries = detectMarkdownEntries(root);
   let fileCount;
   try {
     const entries = fs14.readdirSync(root, { withFileTypes: true });
@@ -43921,6 +44030,7 @@ function getOutputSummary(root) {
     rootName,
     fileCount,
     htmlEntries,
+    markdownEntries,
     git: null
     // filled in by Git diff API later
   };
@@ -44389,6 +44499,8 @@ function sendLocalNodeWorkDirBranchCreate(req, res, nodeId, options = {}) {
 // ../../packages/api/src/tasks/task-route-utils.ts
 var fs15 = __toESM(require("fs"), 1);
+var import_node_stream2 = require("stream");
+var import_promises5 = require("stream/promises");
 // ../../packages/api/src/node/node-message-compat.ts
 var LEGACY_KIND_BY_NODE_MESSAGE = {
@@ -44621,10 +44733,27 @@ async function sendProxyResponse(res, proxyRes) {
   const contentType = proxyRes.headers.get("content-type");
   const contentDisposition = proxyRes.headers.get("content-disposition");
   const cacheControl = proxyRes.headers.get("cache-control");
-  const body = Buffer.from(await proxyRes.arrayBuffer());
   if (contentType) res.setHeader("Content-Type", contentType);
   if (contentDisposition) res.setHeader("Content-Disposition", contentDisposition);
   if (cacheControl) res.setHeader("Cache-Control", cacheControl);
+  if (contentType?.split(";")[0]?.trim().toLowerCase() === "text/event-stream") {
+    if (!cacheControl) res.setHeader("Cache-Control", "no-cache");
+    res.status(proxyRes.status);
+    res.flushHeaders();
+    if (!proxyRes.body) {
+      res.end();
+      return;
+    }
+    try {
+      await (0, import_promises5.pipeline)(import_node_stream2.Readable.fromWeb(proxyRes.body), res);
+    } catch (error) {
+      if (!res.destroyed && !res.writableEnded) {
+        throw error;
+      }
+    }
+    return;
+  }
+  const body = Buffer.from(await proxyRes.arrayBuffer());
   res.status(proxyRes.status).send(body);
 }
 async function maybeProxyReadToLeader(req, res, options = {}) {
@@ -44733,6 +44862,114 @@ var crypto3 = __toESM(require("crypto"), 1);
 var fs16 = __toESM(require("fs"), 1);
 var path17 = __toESM(require("path"), 1);
 var http2 = __toESM(require("http"), 1);
+var import_node_stream3 = require("stream");
+var import_promises6 = require("stream/promises");
+// ../../packages/api/src/preview/preview-request.ts
+var PREVIEW_AUTHORIZATION_HEADER = "x-meshy-preview-authorization";
+var HOP_BY_HOP_HEADERS = /* @__PURE__ */ new Set([
+  "connection",
+  "keep-alive",
+  "proxy-authenticate",
+  "proxy-authorization",
+  "te",
+  "trailer",
+  "transfer-encoding",
+  "upgrade"
+]);
+function isReadOnlyPreviewMethod(method) {
+  const normalizedMethod = method?.toUpperCase() ?? "GET";
+  return normalizedMethod === "GET" || normalizedMethod === "HEAD";
+}
+function methodAllowsRequestBody(method) {
+  return !isReadOnlyPreviewMethod(method);
+}
+function toArrayBuffer(value) {
+  const copy = new Uint8Array(value.byteLength);
+  copy.set(value);
+  return copy.buffer;
+}
+function getParsedRequestBody(req) {
+  const body = req.body;
+  if (body === void 0) {
+    return void 0;
+  }
+  if (typeof body === "string" || body instanceof URLSearchParams || body instanceof Blob || body instanceof FormData) {
+    return body;
+  }
+  if (Buffer.isBuffer(body)) {
+    return toArrayBuffer(body);
+  }
+  if (body instanceof Uint8Array) {
+    return toArrayBuffer(body);
+  }
+  return JSON.stringify(body);
+}
+async function readPreviewRequestBody(req) {
+  if (!req || !methodAllowsRequestBody(req.method)) {
+    return void 0;
+  }
+  const parsedBody = getParsedRequestBody(req);
+  if (parsedBody !== void 0) {
+    return parsedBody;
+  }
+  const chunks = [];
+  for await (const chunk of req) {
+    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+  }
+  return chunks.length > 0 ? toArrayBuffer(Buffer.concat(chunks)) : void 0;
+}
+function buildServiceProxyHeaders(req) {
+  const headers = {};
+  if (!req) {
+    return headers;
+  }
+  let previewAuthorization;
+  for (const [key, value] of Object.entries(req.headers)) {
+    const normalizedKey = key.toLowerCase();
+    if (HOP_BY_HOP_HEADERS.has(normalizedKey) || normalizedKey === "host" || normalizedKey === "content-length" || normalizedKey === "forwarded" || normalizedKey === "x-real-ip" || normalizedKey.startsWith("x-forwarded-") || normalizedKey === MESHY_AUTHORIZATION_HEADER) {
+      continue;
+    }
+    if (normalizedKey === PREVIEW_AUTHORIZATION_HEADER) {
+      previewAuthorization = Array.isArray(value) ? value[0] : value;
+      continue;
+    }
+    if (Array.isArray(value)) {
+      headers[key] = value.join(", ");
+    } else if (typeof value === "string") {
+      headers[key] = value;
+    }
+  }
+  if (previewAuthorization && !headers.authorization) {
+    headers.authorization = previewAuthorization;
+  }
+  return headers;
+}
+function buildPreviewWorkerProxyHeaders(req) {
+  const headers = {};
+  let previewAuthorization;
+  for (const [key, value] of Object.entries(req.headers)) {
+    const normalizedKey = key.toLowerCase();
+    if (HOP_BY_HOP_HEADERS.has(normalizedKey) || normalizedKey === "host" || normalizedKey === "content-length" || normalizedKey === MESHY_AUTHORIZATION_HEADER || normalizedKey === PREVIEW_AUTHORIZATION_HEADER) {
+      continue;
+    }
+    if (normalizedKey === "authorization") {
+      previewAuthorization = Array.isArray(value) ? value[0] : value;
+      continue;
+    }
+    if (Array.isArray(value)) {
+      headers[key] = value.join(", ");
+    } else if (typeof value === "string") {
+      headers[key] = value;
+    }
+  }
+  if (previewAuthorization) {
+    headers[PREVIEW_AUTHORIZATION_HEADER] = previewAuthorization;
+  }
+  return headers;
+}
+// ../../packages/api/src/preview/preview-server.ts
 function resolvePreviewPath(rootPath, relativePath) {
   const sanitizedPath = relativePath.replace(/\\/g, "/");
   const resolvedPath = path17.resolve(rootPath, sanitizedPath);
@@ -44752,22 +44989,58 @@ function resolvePreviewEntryPath(rootPath, entryPath) {
   }
   return normalizedPath;
 }
+function normalizeServiceEntryPath(entryPath) {
+  if (!entryPath || entryPath === "/") {
+    return "";
+  }
+  return entryPath.replace(/\\/g, "/").replace(/^\/+/, "");
+}
+function assertPreviewServicePort(port) {
+  if (!Number.isInteger(port) || port < 1 || port > 65535) {
+    throw new Error("Invalid preview service port");
+  }
+  return port;
+}
 function buildPreviewUrl(origin, session) {
+  return buildPreviewRouteUrl(origin, "preview", session);
+}
+function buildPreviewOpenUrl(origin, session) {
+  return buildPreviewRouteUrl(origin, "preview-open", session);
+}
+function buildPreviewRouteUrl(origin, route, session) {
   const encodedEntryPath = session.entryPath.split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/");
-  return `${origin.replace(/\/+$/, "")}/preview/${session.token}/${encodedEntryPath}`;
+  const suffix = encodedEntryPath.length > 0 ? `/${encodedEntryPath}` : session.kind === "service" ? "/" : "";
+  return `${origin.replace(/\/+$/, "")}/${route}/${session.token}${suffix}`;
 }
 var DEFAULT_TTL_MS = 15 * 60 * 1e3;
 var PreviewSessionManager = class {
   sessions = /* @__PURE__ */ new Map();
   create(options) {
     const token = crypto3.randomBytes(32).toString("hex");
+    const expiresAt = Date.now() + (options.ttlMs ?? DEFAULT_TTL_MS);
+    if (options.port !== void 0) {
+      const session2 = {
+        token,
+        taskId: options.taskId,
+        kind: "service",
+        port: assertPreviewServicePort(options.port),
+        entryPath: normalizeServiceEntryPath(options.entryPath),
+        expiresAt
+      };
+      this.sessions.set(token, session2);
+      return session2;
+    }
+    if (!options.rootPath) {
+      throw new Error("Preview root path is required");
+    }
     const entryPath = resolvePreviewEntryPath(options.rootPath, options.entryPath);
     const session = {
       token,
       taskId: options.taskId,
+      kind: "file",
       rootPath: options.rootPath,
       entryPath,
-      expiresAt: Date.now() + (options.ttlMs ?? DEFAULT_TTL_MS)
+      expiresAt
     };
     this.sessions.set(token, session);
     return session;
@@ -44808,19 +45081,353 @@ var MIME_MAP2 = {
   ".woff2": "font/woff2",
   ".ttf": "font/ttf",
   ".eot": "application/vnd.ms-fontobject",
-  ".pdf": "application/pdf"
+  ".pdf": "application/pdf",
+  ".md": "text/markdown",
+  ".mdx": "text/markdown"
 };
 function getMime(filePath) {
   return MIME_MAP2[path17.extname(filePath).toLowerCase()] ?? "application/octet-stream";
 }
-function sendPreviewAssetResponse(sessionManager, token, requestedPath, res) {
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function renderInlineMarkdown(value) {
+  let rendered = escapeHtml(value);
+  rendered = rendered.replace(/!\[([^\]]*)]\(([^\s)]+)\)/g, '<img alt="$1" src="$2">');
+  rendered = rendered.replace(/`([^`]+)`/g, "<code>$1</code>").replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>").replace(/\[([^\]]+)]\((https?:\/\/[^\s)]+)\)/g, '<a href="$2" rel="noreferrer noopener" target="_blank">$1</a>');
+  return rendered;
+}
+function renderMarkdownBody(markdown) {
+  const lines = markdown.replace(/\r\n/g, "\n").split("\n");
+  const blocks = [];
+  let paragraph = [];
+  let listItems = [];
+  let codeLines = null;
+  const flushParagraph = () => {
+    if (paragraph.length === 0) return;
+    blocks.push(`<p>${renderInlineMarkdown(paragraph.join(" "))}</p>`);
+    paragraph = [];
+  };
+  const flushList = () => {
+    if (listItems.length === 0) return;
+    blocks.push(`<ul>${listItems.map((item) => `<li>${renderInlineMarkdown(item)}</li>`).join("")}</ul>`);
+    listItems = [];
+  };
+  for (const line of lines) {
+    if (line.trim().startsWith("```")) {
+      if (codeLines) {
+        blocks.push(`<pre><code>${escapeHtml(codeLines.join("\n"))}</code></pre>`);
+        codeLines = null;
+      } else {
+        flushParagraph();
+        flushList();
+        codeLines = [];
+      }
+      continue;
+    }
+    if (codeLines) {
+      codeLines.push(line);
+      continue;
+    }
+    const trimmed = line.trim();
+    if (!trimmed) {
+      flushParagraph();
+      flushList();
+      continue;
+    }
+    const heading = trimmed.match(/^(#{1,6})\s+(.+)$/);
+    if (heading) {
+      flushParagraph();
+      flushList();
+      const level = heading[1].length;
+      blocks.push(`<h${level}>${renderInlineMarkdown(heading[2])}</h${level}>`);
+      continue;
+    }
+    const listItem = trimmed.match(/^[-*]\s+(.+)$/);
+    if (listItem) {
+      flushParagraph();
+      listItems.push(listItem[1]);
+      continue;
+    }
+    flushList();
+    paragraph.push(trimmed);
+  }
+  if (codeLines) {
+    blocks.push(`<pre><code>${escapeHtml(codeLines.join("\n"))}</code></pre>`);
+  }
+  flushParagraph();
+  flushList();
+  return blocks.join("\n");
+}
+function renderMarkdownDocument(markdown, title) {
+  const body = renderMarkdownBody(markdown);
+  return Buffer.from(`<!doctype html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>${escapeHtml(title)}</title>
+  <style>
+    body { box-sizing: border-box; max-width: 860px; margin: 0 auto; padding: 32px; color: #111827; font: 16px/1.65 -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; }
+    h1, h2, h3, h4, h5, h6 { line-height: 1.25; margin: 1.5em 0 0.5em; }
+    h1 { border-bottom: 1px solid #e5e7eb; padding-bottom: 0.3em; }
+    pre { overflow: auto; border-radius: 8px; background: #111827; color: #f9fafb; padding: 16px; }
+    code { border-radius: 4px; background: #f3f4f6; padding: 0.1em 0.25em; }
+    pre code { background: transparent; padding: 0; }
+    img { max-width: 100%; }
+    a { color: #2563eb; }
+  </style>
+</head>
+<body>
+${body}
+</body>
+</html>`, "utf8");
+}
+function splitPreviewPathAndSearch(value) {
+  const marker = value.indexOf("?");
+  if (marker === -1) {
+    return { pathname: value, search: "" };
+  }
+  return { pathname: value.slice(0, marker), search: value.slice(marker) };
+}
+function normalizeServiceRequestPath(pathname) {
+  const normalized = pathname.replace(/\\/g, "/");
+  if (!normalized || normalized === "/") {
+    return "/";
+  }
+  return `/${normalized.replace(/^\/+/, "")}`;
+}
+function rewriteServiceRootRelativeUrls(value, token) {
+  const previewRoot = `/preview/${token}/`;
+  return value.replace(/\b(src|href|action)=(['"])\/(?!\/|preview\/)/gi, `$1=$2${previewRoot}`).replace(/url\((['"]?)\/(?!\/|preview\/)/gi, `url($1${previewRoot}`).replace(/\bimport\((['"])\/(?!\/|preview\/)/gi, `import($1${previewRoot}`).replace(/\bfrom\s+(['"])\/(?!\/|preview\/)/gi, `from $1${previewRoot}`).replace(/(['"])\/(assets\/[^'"]+)\1/g, `$1${previewRoot}$2$1`);
+}
+function escapeHtmlAttribute(value) {
+  return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
+}
+function buildServicePreviewBridge(token) {
+  const previewRoot = `/preview/${token}/`;
+  const previewBase = previewRoot.replace(/\/$/, "");
+  const script = [
+    "(()=>{",
+    "if(window.top===window)return;",
+    `const previewBase=${JSON.stringify(previewBase)};`,
+    `const previewRoot=${JSON.stringify(previewRoot)};`,
+    "const rewritePreviewRequestUrl=(value)=>{",
+    "if(value==null)return value;",
+    "let raw;",
+    'try{raw=value instanceof URL?value.href:typeof value==="string"?value:value&&typeof value.url==="string"?value.url:undefined;}catch{return value;}',
+    "if(!raw)return value;",
+    "let url;",
+    "try{url=new URL(raw,window.location.href);}catch{return value;}",
+    "if(url.origin!==window.location.origin)return value;",
+    'if(url.pathname===previewBase||url.pathname.startsWith(previewRoot)||url.pathname.startsWith("/preview-open/"))return value;',
+    'return previewRoot+url.pathname.replace(/^\\/+/,"")+url.search+url.hash;',
+    "};",
+    "const rewritePreviewRequestInput=(input)=>{",
+    "const next=rewritePreviewRequestUrl(input);",
+    "if(next===input)return input;",
+    'if(typeof Request==="function"&&input instanceof Request)return new Request(next,input);',
+    "return next;",
+    "};",
+    "const originalFetch=window.fetch;",
+    'if(typeof originalFetch==="function")window.fetch=(input,init)=>originalFetch.call(window,rewritePreviewRequestInput(input),init);',
+    "const XHR=window.XMLHttpRequest;",
+    "if(XHR&&XHR.prototype){const open=XHR.prototype.open;XMLHttpRequest.prototype.open=function(method,url,...rest){return open.call(this,method,rewritePreviewRequestUrl(url),...rest);};}",
+    "const OriginalEventSource=window.EventSource;",
+    'if(typeof OriginalEventSource==="function"){window.EventSource=function(url,config){return new OriginalEventSource(rewritePreviewRequestUrl(url),config);};window.EventSource.prototype=OriginalEventSource.prototype;}',
+    "const currentPath=window.location.pathname;",
+    "if(currentPath===previewBase||currentPath.startsWith(previewRoot)){",
+    "const suffix=currentPath===previewBase?'':currentPath.slice(previewRoot.length);",
+    "const servicePath=suffix?'/' + suffix:'/';",
+    "window.history.replaceState(window.history.state,'',servicePath+window.location.search+window.location.hash);",
+    "}",
+    "})();"
+  ].join("");
+  return `<base data-meshy-preview-base href="${escapeHtmlAttribute(previewRoot)}"><script data-meshy-preview-bridge>${script}</script>`;
+}
+function injectServicePreviewBridge(value, token) {
+  const bridge = buildServicePreviewBridge(token);
+  const headPattern = /<head(?:\s[^>]*)?>/i;
+  if (headPattern.test(value)) {
+    return value.replace(headPattern, (match) => `${match}${bridge}`);
+  }
+  const htmlPattern = /<html(?:\s[^>]*)?>/i;
+  if (htmlPattern.test(value)) {
+    return value.replace(htmlPattern, (match) => `${match}<head>${bridge}</head>`);
+  }
+  return `${bridge}${value}`;
+}
+function normalizeContentType(contentType) {
+  return contentType?.split(";")[0]?.trim().toLowerCase();
+}
+function isServiceHtmlContentType(contentType) {
+  return normalizeContentType(contentType) === "text/html";
+}
+function isServiceEventStreamContentType(contentType) {
+  return normalizeContentType(contentType) === "text/event-stream";
+}
+function isServiceJavaScriptContentType(normalizedType) {
+  return normalizedType === "text/javascript" || normalizedType === "application/javascript" || normalizedType === "application/x-javascript";
+}
+function rewriteServiceJavaScriptRuntimeUrls(value, token) {
+  if (!value.includes("__vite__mapDeps")) {
+    return value;
+  }
+  const previewRoot = `/preview/${token}/`;
+  return value.replace(
+    /return\s*(['"])\/\1\s*\+\s*([A-Za-z_$][\w$]*)/g,
+    (_match, quote, argumentName) => `return${quote}${previewRoot}${quote}+${argumentName}`
+  );
+}
+function rewriteServiceResponseContent(content, contentType, token) {
+  const normalizedType = normalizeContentType(contentType);
+  if (normalizedType !== "text/html" && normalizedType !== "text/css" && !isServiceJavaScriptContentType(normalizedType)) {
+    return content;
+  }
+  const source = content.toString("utf8");
+  const bridged = normalizedType === "text/html" ? injectServicePreviewBridge(source, token) : source;
+  const rewritten = rewriteServiceRootRelativeUrls(bridged, token);
+  return Buffer.from(
+    isServiceJavaScriptContentType(normalizedType) ? rewriteServiceJavaScriptRuntimeUrls(rewritten, token) : rewritten,
+    "utf8"
+  );
+}
+function rewriteServiceRedirectLocation(value, session) {
+  const previewRoot = `/preview/${session.token}`;
+  if (value.startsWith("/preview/")) {
+    return value;
+  }
+  if (value.startsWith("/")) {
+    return `${previewRoot}${value}`;
+  }
+  try {
+    const url = new URL(value);
+    const isLocalService = (url.hostname === "127.0.0.1" || url.hostname === "localhost" || url.hostname === "[::1]") && url.port === String(session.port);
+    if (isLocalService) {
+      return `${previewRoot}${url.pathname}${url.search}${url.hash}`;
+    }
+  } catch {
+  }
+  return value;
+}
+function buildServiceResponseHeaders(upstream, session, isHtml) {
+  const headers = {};
+  upstream.headers.forEach((value, key) => {
+    const normalizedKey = key.toLowerCase();
+    if (HOP_BY_HOP_HEADERS.has(normalizedKey) || normalizedKey === "content-length" || normalizedKey === "content-encoding" || isHtml && normalizedKey === "content-security-policy" || isHtml && normalizedKey === "content-security-policy-report-only" || isHtml && normalizedKey === "x-frame-options") {
+      return;
+    }
+    if (normalizedKey === "location") {
+      headers[key] = rewriteServiceRedirectLocation(value, session);
+      return;
+    }
+    headers[key] = value;
+  });
+  if (typeof headers["cache-control"] !== "string") {
+    headers["cache-control"] = "no-cache";
+  }
+  return headers;
+}
+async function pipeServiceResponseBody(upstream, res) {
+  if (!upstream.body) {
+    res.end();
+    return;
+  }
+  try {
+    await (0, import_promises6.pipeline)(import_node_stream3.Readable.fromWeb(upstream.body), res);
+  } catch (error) {
+    if (!res.destroyed && !res.writableEnded) {
+      throw error;
+    }
+  }
+}
+async function sendServicePreviewResponse(session, requestedPath, req, res) {
+  const decodedPath = decodeURIComponent(requestedPath ?? session.entryPath);
+  const { pathname, search } = splitPreviewPathAndSearch(decodedPath);
+  const targetPath = normalizeServiceRequestPath(pathname || session.entryPath);
+  const targetUrl = `http://127.0.0.1:${session.port}${targetPath}${search}`;
+  let upstream;
+  try {
+    const body = await readPreviewRequestBody(req);
+    upstream = await fetch(targetUrl, {
+      method: req?.method ?? "GET",
+      headers: buildServiceProxyHeaders(req),
+      ...body !== void 0 ? { body } : {},
+      redirect: "manual"
+    });
+  } catch {
+    res.writeHead(502, { "Content-Type": "text/plain" });
+    res.end("Preview service unavailable");
+    return;
+  }
+  const upstreamContentType = upstream.headers.get("content-type");
+  const isHtml = isServiceHtmlContentType(upstreamContentType);
+  const headers = buildServiceResponseHeaders(upstream, session, isHtml);
+  if (isServiceEventStreamContentType(upstreamContentType)) {
+    res.writeHead(upstream.status, headers);
+    await pipeServiceResponseBody(upstream, res);
+    return;
+  }
+  const content = rewriteServiceResponseContent(Buffer.from(await upstream.arrayBuffer()), upstreamContentType, session.token);
+  headers["content-length"] = content.length;
+  res.writeHead(upstream.status, headers);
+  res.end(content);
+}
+function buildPreviewUrlForRequest(token, requestedPath, session) {
+  const { pathname, search } = splitPreviewPathAndSearch(requestedPath ?? session.entryPath);
+  return `${buildPreviewUrl("", { token, entryPath: pathname, kind: session.kind })}${search}`;
+}
+function renderPreviewOpenDocument(previewUrl) {
+  const safePreviewUrl = escapeHtmlAttribute(previewUrl);
+  return Buffer.from(`<!doctype html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Preview</title>
+  <style>
+    html, body { width: 100%; height: 100%; margin: 0; background: #fff; }
+    iframe { display: block; width: 100%; height: 100%; border: 0; }
+  </style>
+</head>
+<body>
+  <iframe src="${safePreviewUrl}" title="Preview"></iframe>
+</body>
+</html>`, "utf8");
+}
+function sendPreviewOpenResponse(sessionManager, token, requestedPath, res) {
+  const session = sessionManager.get(token);
+  if (!session) {
+    res.writeHead(403, { "Content-Type": "text/plain" });
+    res.end("Invalid or expired preview token");
+    return;
+  }
+  const content = renderPreviewOpenDocument(buildPreviewUrlForRequest(token, requestedPath, session));
+  res.writeHead(200, {
+    "Content-Type": "text/html",
+    "Content-Length": content.length,
+    "Cache-Control": "no-cache"
+  });
+  res.end(content);
+}
+async function sendPreviewAssetResponse(sessionManager, token, requestedPath, res, req) {
   const session = sessionManager.get(token);
   if (!session) {
     res.writeHead(403, { "Content-Type": "text/plain" });
     res.end("Invalid or expired preview token");
     return;
   }
-  const resolvedRequestedPath = decodeURIComponent(requestedPath ?? session.entryPath);
+  if (session.kind === "service") {
+    await sendServicePreviewResponse(session, requestedPath, req, res);
+    return;
+  }
+  if (!isReadOnlyPreviewMethod(req?.method)) {
+    res.writeHead(405, { "Content-Type": "text/plain" });
+    res.end("Method not allowed");
+    return;
+  }
+  const { pathname } = splitPreviewPathAndSearch(decodeURIComponent(requestedPath ?? session.entryPath));
+  const resolvedRequestedPath = pathname || session.entryPath;
   let resolved;
   try {
     resolved = resolvePreviewPath(session.rootPath, resolvedRequestedPath).absolutePath;
@@ -44834,8 +45441,9 @@ function sendPreviewAssetResponse(sessionManager, token, requestedPath, res) {
     res.end("File not found");
     return;
   }
-  const mime = getMime(resolved);
-  const content = fs16.readFileSync(resolved);
+  const ext = path17.extname(resolved).toLowerCase();
+  const mime = ext === ".md" || ext === ".mdx" ? "text/html" : getMime(resolved);
+  const content = ext === ".md" || ext === ".mdx" ? renderMarkdownDocument(fs16.readFileSync(resolved, "utf8"), path17.basename(resolved)) : fs16.readFileSync(resolved);
   res.writeHead(200, {
     "Content-Type": mime,
     "Content-Length": content.length,
@@ -44843,14 +45451,20 @@ function sendPreviewAssetResponse(sessionManager, token, requestedPath, res) {
   });
   res.end(content);
 }
-function handlePreviewRequest(sessionManager, req, res) {
+async function handlePreviewRequest(sessionManager, req, res) {
   const url = new URL(req.url ?? "/", "http://localhost");
-  if (!url.pathname.startsWith("/preview/")) {
+  if (!url.pathname.startsWith("/preview/") && !url.pathname.startsWith("/preview-open/")) {
     return false;
   }
-  if (req.method !== "GET") {
-    res.writeHead(405, { "Content-Type": "text/plain" });
-    res.end("Method not allowed");
+  const openMatch = url.pathname.match(/^\/preview-open\/([a-f0-9]+)(?:\/(.*))?$/i);
+  if (openMatch?.[1]) {
+    if (!isReadOnlyPreviewMethod(req.method)) {
+      res.writeHead(405, { "Content-Type": "text/plain" });
+      res.end("Method not allowed");
+      return true;
+    }
+    const requestedPath2 = openMatch[2];
+    sendPreviewOpenResponse(sessionManager, openMatch[1], requestedPath2 ? `${requestedPath2}${url.search}` : url.search || void 0, res);
     return true;
   }
   const match = url.pathname.match(/^\/preview\/([a-f0-9]+)(?:\/(.*))?$/i);
@@ -44860,7 +45474,8 @@ function handlePreviewRequest(sessionManager, req, res) {
     res.end("Preview not found");
     return true;
   }
-  sendPreviewAssetResponse(sessionManager, token, match?.[2], res);
+  const requestedPath = match?.[2];
+  await sendPreviewAssetResponse(sessionManager, token, requestedPath ? `${requestedPath}${url.search}` : url.search || void 0, res, req);
   return true;
 }
@@ -44925,15 +45540,30 @@ function createPreviewAssetProxyTrace(log2, token, nodeId, requestPath, proxyPat
   };
 }
 function parsePreviewRequest(previewUrl) {
-  const pathname = new URL(previewUrl, "http://localhost").pathname;
-  const match = pathname.match(/^\/preview\/([a-f0-9]+)(?:\/(.*))?$/i);
+  const url = new URL(previewUrl, "http://localhost");
+  const match = url.pathname.match(/^\/preview\/([a-f0-9]+)(?:\/(.*))?$/i);
+  const token = match?.[1];
+  if (!token) {
+    return null;
+  }
+  const requestedPath = match?.[2];
+  return {
+    token,
+    requestedPath: requestedPath ? `${requestedPath}${url.search}` : url.search || void 0
+  };
+}
+function parsePreviewOpenRequest(previewUrl) {
+  const url = new URL(previewUrl, "http://localhost");
+  const match = url.pathname.match(/^\/preview-open\/([a-f0-9]+)(?:\/(.*))?$/i);
   const token = match?.[1];
   if (!token) {
     return null;
   }
+  const requestedPath = match?.[2];
+  const suffix = requestedPath !== void 0 ? `/${requestedPath}` : "";
   return {
     token,
-    requestedPath: match?.[2]
+    previewUrl: `/preview/${token}${suffix}${url.search}`
   };
 }
 function extractPreviewToken(previewUrl) {
@@ -44981,12 +45611,34 @@ function rewritePreviewSessionPayloadForProxy(manager, payload, nodeId) {
     ...payload,
     previewUrl: buildPreviewUrl("", {
       token,
-      entryPath: payload.entryPath
-    })
+      entryPath: payload.entryPath,
+      kind: payload.kind
+    }),
+    ...payload.kind === "service" || payload.openUrl ? {
+      openUrl: buildPreviewOpenUrl("", {
+        token,
+        entryPath: payload.entryPath,
+        kind: payload.kind
+      })
+    } : {}
   };
 }
 async function handlePreviewProxyRequest(manager, nodeRegistry, logger27, req, res) {
   const requestPath = req.originalUrl ?? req.url;
+  const previewOpenRequest = parsePreviewOpenRequest(requestPath);
+  if (previewOpenRequest) {
+    const session2 = manager.get(previewOpenRequest.token);
+    if (!session2) {
+      return false;
+    }
+    const content = renderPreviewOpenDocument(previewOpenRequest.previewUrl);
+    res.status(200).set({
+      "Content-Type": "text/html",
+      "Content-Length": String(content.length),
+      "Cache-Control": "no-cache"
+    }).send(content);
+    return true;
+  }
   const previewRequest = parsePreviewRequest(requestPath);
   if (!previewRequest) {
     return false;
@@ -45002,10 +45654,15 @@ async function handlePreviewProxyRequest(manager, nodeRegistry, logger27, req, r
   const previewLog = logger27.child("preview-proxy");
   const proxyPath = buildPreviewAssetProxyPath(previewRequest.token, previewRequest.requestedPath);
   try {
+    const body = await readPreviewRequestBody(req);
     const { endpoint, response } = await fetchNodeWithFallback(
       node,
       proxyPath,
-      void 0,
+      {
+        method: req.method,
+        headers: buildPreviewWorkerProxyHeaders(req),
+        ...body !== void 0 ? { body } : {}
+      },
       PREVIEW_ASSET_PROXY_TIMEOUT_MS,
       createPreviewAssetProxyTrace(previewLog, previewRequest.token, session.nodeId, requestPath, proxyPath),
       { preferPublicEndpoint: true }
@@ -45135,16 +45792,21 @@ function getLocalTaskOutputDiff(taskEngine, taskId) {
   const rootPath = getTaskOutputRoot(taskEngine, taskId);
   return getGitDiff(rootPath);
 }
-async function createPreviewSessionPayload(deps, taskId, entryPath, requestOrigin) {
+async function createPreviewSessionPayload(deps, taskId, optionsOrPath, requestOrigin) {
   const previewManager = deps.previewSessionManager;
   if (!previewManager) {
     throw new MeshyError("VALIDATION_ERROR", "Preview not available on this node", 400);
   }
-  const rootPath = getTaskOutputRoot(deps.taskEngine, taskId);
-  const session = previewManager.create({
+  const options = typeof optionsOrPath === "string" ? { path: optionsOrPath } : optionsOrPath ?? {};
+  getTask(deps.taskEngine, taskId);
+  const session = options.port !== void 0 ? previewManager.create({
     taskId,
-    rootPath,
-    entryPath
+    port: options.port,
+    entryPath: options.path
+  }) : previewManager.create({
+    taskId,
+    rootPath: getTaskOutputRoot(deps.taskEngine, taskId),
+    entryPath: options.path
   });
   const origin = requestOrigin ?? deps.dashboardOrigin ?? deps.localDashboardOrigin;
   if (!origin) {
@@ -45152,8 +45814,11 @@ async function createPreviewSessionPayload(deps, taskId, entryPath, requestOrigi
   }
   return {
     previewUrl: buildPreviewUrl(origin, session),
+    ...session.kind === "service" ? { openUrl: buildPreviewOpenUrl(origin, session) } : {},
     expiresAt: session.expiresAt,
-    entryPath: session.entryPath
+    entryPath: session.entryPath,
+    kind: session.kind,
+    ...session.kind === "service" ? { port: session.port } : {}
   };
 }
@@ -45440,6 +46105,264 @@ function upgradeRuntimeAgentForDeps(deps, agent) {
   return result;
 }
+// ../../packages/api/src/node/node-operation-service.ts
+var fs18 = __toESM(require("fs"), 1);
+var path19 = __toESM(require("path"), 1);
+var import_node_crypto7 = require("crypto");
+var NodeOperationFailure = class extends Error {
+  constructor(message, result) {
+    super(message);
+    this.result = result;
+  }
+};
+var InMemoryNodeOperationStore = class {
+  operations = /* @__PURE__ */ new Map();
+  get(id) {
+    const operation = this.operations.get(id);
+    return operation ? clone2(operation) : null;
+  }
+  list(filter = {}) {
+    return Array.from(this.operations.values()).filter((operation) => matchesFilter(operation, filter)).sort((a, b) => b.createdAt - a.createdAt).map((operation) => clone2(operation));
+  }
+  upsert(operation) {
+    const copy = clone2(operation);
+    this.operations.set(copy.id, copy);
+    return clone2(copy);
+  }
+  update(id, updates) {
+    const current = this.operations.get(id);
+    if (!current) return null;
+    const next = { ...current, ...clone2(updates), id, createdAt: current.createdAt };
+    this.operations.set(id, next);
+    return clone2(next);
+  }
+};
+var FileNodeOperationStore = class {
+  constructor(storagePath) {
+    this.storagePath = storagePath;
+  }
+  operations = /* @__PURE__ */ new Map();
+  loaded = false;
+  get(id) {
+    this.load();
+    const operation = this.operations.get(id);
+    return operation ? clone2(operation) : null;
+  }
+  list(filter = {}) {
+    this.load();
+    return Array.from(this.operations.values()).filter((operation) => matchesFilter(operation, filter)).sort((a, b) => b.createdAt - a.createdAt).map((operation) => clone2(operation));
+  }
+  upsert(operation) {
+    this.load();
+    const copy = clone2(operation);
+    this.operations.set(copy.id, copy);
+    this.persist();
+    return clone2(copy);
+  }
+  update(id, updates) {
+    this.load();
+    const current = this.operations.get(id);
+    if (!current) return null;
+    const next = { ...current, ...clone2(updates), id, createdAt: current.createdAt };
+    this.operations.set(id, next);
+    this.persist();
+    return clone2(next);
+  }
+  load() {
+    if (this.loaded) return;
+    this.loaded = true;
+    if (!fs18.existsSync(this.filePath)) return;
+    const raw = JSON.parse(fs18.readFileSync(this.filePath, "utf-8"));
+    const entries = Array.isArray(raw) ? raw : Object.values(raw);
+    for (const entry of entries) {
+      if (isNodeOperation(entry)) {
+        this.operations.set(entry.id, clone2(entry));
+      }
+    }
+  }
+  persist() {
+    fs18.mkdirSync(this.storagePath, { recursive: true });
+    const body = JSON.stringify(Object.fromEntries(this.operations), null, 2);
+    const tmpPath = `${this.filePath}.tmp`;
+    fs18.writeFileSync(tmpPath, body, "utf-8");
+    fs18.renameSync(tmpPath, this.filePath);
+  }
+  get filePath() {
+    return path19.join(this.storagePath, "node-operations.json");
+  }
+};
+var NodeOperationService = class {
+  constructor(deps, store) {
+    this.deps = deps;
+    this.store = store;
+    this.registerHandler("agent.upgrade", runAgentUpgradeOperation);
+  }
+  handlers = /* @__PURE__ */ new Map();
+  registerHandler(kind, handler) {
+    this.handlers.set(kind, handler);
+  }
+  create(kind, nodeId, payload) {
+    const now = Date.now();
+    const operation = {
+      id: (0, import_node_crypto7.randomUUID)(),
+      kind,
+      nodeId,
+      requestedByNodeId: this.deps.nodeRegistry.getSelf().id,
+      status: "queued",
+      payload,
+      createdAt: now,
+      updatedAt: now
+    };
+    const saved = this.store.upsert(operation);
+    this.deps.eventBus.emit("node.operation.created", { operation: saved });
+    return saved;
+  }
+  get(id) {
+    return this.store.get(id);
+  }
+  list(filter) {
+    return this.store.list(filter);
+  }
+  accept(operation) {
+    const current = this.store.get(operation.id);
+    if (current) {
+      if (current.status === "queued") this.scheduleRun(current.id);
+      return current;
+    }
+    const saved = this.store.upsert({ ...operation, status: "queued", updatedAt: Date.now() });
+    this.deps.eventBus.emit("node.operation.created", { operation: saved });
+    this.scheduleRun(saved.id);
+    return saved;
+  }
+  runLocal(id) {
+    this.scheduleRun(id);
+  }
+  applyRemoteUpdate(operation) {
+    const current = this.store.get(operation.id);
+    const saved = this.store.upsert(current ? { ...current, ...operation } : operation);
+    this.applyOperationSideEffects(saved);
+    this.deps.eventBus.emit("node.operation.updated", { operation: saved });
+    return saved;
+  }
+  markFailed(id, error) {
+    return this.update(id, {
+      status: "failed",
+      error,
+      completedAt: Date.now()
+    });
+  }
+  scheduleRun(id) {
+    setTimeout(() => {
+      void this.run(id);
+    }, 0);
+  }
+  async run(id) {
+    const operation = this.store.get(id);
+    if (!operation || operation.status !== "queued") return;
+    const running = this.update(id, { status: "running", startedAt: Date.now() });
+    if (!running) return;
+    try {
+      const handler = this.handlers.get(running.kind);
+      if (!handler) throw new Error(`No node operation handler registered for kind: ${running.kind}`);
+      const result = await handler(running, this.deps);
+      this.update(id, { status: "succeeded", result, completedAt: Date.now() });
+    } catch (err) {
+      this.update(id, {
+        status: "failed",
+        result: err instanceof NodeOperationFailure ? err.result : void 0,
+        error: err instanceof Error ? err.message : String(err),
+        completedAt: Date.now()
+      });
+    }
+  }
+  update(id, updates) {
+    const saved = this.store.update(id, { ...updates, updatedAt: Date.now() });
+    if (!saved) return null;
+    this.applyOperationSideEffects(saved);
+    this.deps.eventBus.emit("node.operation.updated", { operation: saved });
+    void this.reportToLeader(saved);
+    return saved;
+  }
+  applyOperationSideEffects(operation) {
+    if (operation.kind !== "agent.upgrade" || operation.status !== "succeeded") return;
+    const settingsSnapshot = readSettingsSnapshot(operation.result);
+    if (settingsSnapshot) {
+      this.deps.nodeRegistry.updateSettingsSnapshot(operation.nodeId, settingsSnapshot);
+    }
+  }
+  async reportToLeader(operation) {
+    if (this.deps.nodeRegistry.isLeader()) return;
+    const leaderEndpoint = this.deps.nodeRegistry.getLeaderEndpoint?.();
+    if (!leaderEndpoint) return;
+    try {
+      await fetch(`${leaderEndpoint}/api/worker/node-operations/${operation.id}`, applyRequestAuthHeaders({
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(operation)
+      }));
+    } catch (err) {
+      this.deps.logger.child("node-operation").warn("failed to report node operation update to leader", {
+        operationId: operation.id,
+        kind: operation.kind,
+        error: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+};
+function getNodeOperationService(deps) {
+  if (deps.nodeOperationService) return deps.nodeOperationService;
+  const store = deps.nodeOperationStore ?? (deps.storagePath ? new FileNodeOperationStore(deps.storagePath) : new InMemoryNodeOperationStore());
+  const service = new NodeOperationService(deps, store);
+  deps.nodeOperationStore = store;
+  deps.nodeOperationService = service;
+  return service;
+}
+async function dispatchNodeOperation(deps, operation, node) {
+  const message = createNodeMessage("node.operation.execute", { operation });
+  const heartbeat = deps.heartbeat;
+  if (heartbeat.canPushToNode?.(node.id) === false) {
+    if (!heartbeat.enqueueNodeMessage) throw new Error(`Cannot queue node operation for ${node.id}`);
+    heartbeat.enqueueNodeMessage(node.id, message);
+    return;
+  }
+  const client = new NodeMessageClient({
+    heartbeat: heartbeat.enqueueNodeMessage ? { enqueueNodeMessage: heartbeat.enqueueNodeMessage.bind(heartbeat) } : void 0,
+    logger: deps.logger
+  });
+  await client.send(node, message);
+}
+function runAgentUpgradeOperation(operation, deps) {
+  const agent = readPayloadString(operation, "agent");
+  if (!isRuntimeAgentId(agent)) throw new Error(`Unsupported upgrade agent: ${agent}`);
+  const result = upgradeRuntimeAgentForDeps(deps, agent);
+  if (!result.ok) {
+    throw new NodeOperationFailure(result.detail ?? `${agent} upgrade failed`, result);
+  }
+  return result;
+}
+function readPayloadString(operation, key) {
+  const payload = operation.payload;
+  if (!payload || typeof payload !== "object") return "";
+  const value = payload[key];
+  return typeof value === "string" ? value : "";
+}
+function readSettingsSnapshot(value) {
+  if (!value || typeof value !== "object") return void 0;
+  const snapshot = value.settingsSnapshot;
+  return snapshot && typeof snapshot === "object" ? snapshot : void 0;
+}
+function matchesFilter(operation, filter) {
+  return (!filter.nodeId || operation.nodeId === filter.nodeId) && (!filter.status || operation.status === filter.status) && (!filter.kind || operation.kind === filter.kind);
+}
+function isNodeOperation(value) {
+  if (!value || typeof value !== "object") return false;
+  const record = value;
+  return typeof record.id === "string" && typeof record.kind === "string" && typeof record.nodeId === "string" && typeof record.status === "string" && typeof record.createdAt === "number" && typeof record.updatedAt === "number";
+}
+function clone2(value) {
+  return JSON.parse(JSON.stringify(value));
+}
 // ../../packages/api/src/node/worker-control.ts
 function jsonResponse(requestId, statusCode, body) {
   return {
@@ -45607,6 +46530,15 @@ async function executeWorkerControlRequest(deps, request) {
         response = jsonResponse(request.id, 200, upgradeRuntimeAgentForDeps(deps, agent));
         break;
       }
+      case "node.operation.execute": {
+        const operation = payloadValue(request, "operation", null);
+        if (!operation || typeof operation !== "object") {
+          throw new MeshyError("VALIDATION_ERROR", "node.operation.execute requires an operation payload", 400);
+        }
+        const accepted = getNodeOperationService(deps).accept(operation);
+        response = jsonResponse(request.id, 202, { operationId: accepted.id, accepted: true });
+        break;
+      }
       case "task.cancel": {
         const taskId = payloadValue(request, "taskId", "");
         const result = cancelTaskOnCurrentNode({
@@ -45675,10 +46607,15 @@ async function executeWorkerControlRequest(deps, request) {
         break;
       }
       case "task.preview.create": {
+        const previewPath = payloadValue(request, "path", void 0);
+        const previewPort = payloadValue(request, "port", void 0);
         response = jsonResponse(
           request.id,
           200,
-          await createPreviewSessionPayload(deps, payloadValue(request, "taskId", ""), payloadValue(request, "path", void 0))
+          await createPreviewSessionPayload(deps, payloadValue(request, "taskId", ""), {
+            path: typeof previewPath === "string" ? previewPath : void 0,
+            port: typeof previewPort === "number" ? previewPort : void 0
+          })
         );
         break;
       }
@@ -45751,58 +46688,10 @@ function sendLocalNodeNativeSessions(req, res, nodeId, options = {}) {
 }
 // ../../packages/api/src/routes/node-agent-upgrade.ts
-function isRecord5(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function readSettingsSnapshot(value) {
-  if (!isRecord5(value)) return void 0;
-  const snapshot = value.settingsSnapshot;
-  if (!isRecord5(snapshot)) return void 0;
-  return snapshot;
-}
-function applySyncedSettingsSnapshot(deps, nodeId, body) {
-  const settingsSnapshot = readSettingsSnapshot(body);
-  if (settingsSnapshot) {
-    deps.nodeRegistry.updateSettingsSnapshot(nodeId, settingsSnapshot);
-  }
-}
 function parseAgent(value) {
   if (isRuntimeAgentId(value)) return value;
   throw new MeshyError("VALIDATION_ERROR", `Unsupported upgrade agent: ${value}`, 400);
 }
-function upgradeSelfNode(deps, nodeId, agent) {
-  const result = upgradeRuntimeAgentForDeps(deps, agent);
-  applySyncedSettingsSnapshot(deps, nodeId, result);
-  return result;
-}
-async function fallbackUpgrade(deps, res, nodeId, agent) {
-  if (!canRequestNodeMessage(deps.heartbeat)) {
-    throw new MeshyError("NODE_OFFLINE", `Cannot reach node ${nodeId} to upgrade ${agent}`, 502);
-  }
-  const controlResponse = await requestFallbackNodeMessage(
-    deps.heartbeat,
-    nodeId,
-    createNodeMessage("node.agent.upgrade", { agent }, { expectsResponse: true })
-  );
-  applySyncedSettingsSnapshot(deps, nodeId, controlResponse.body);
-  sendWorkerControlResponse(res, controlResponse);
-}
-async function proxyUpgrade(deps, nodeId, agent) {
-  const node = deps.nodeRegistry.getNode(nodeId);
-  if (!node) {
-    throw new MeshyError("NODE_NOT_FOUND", `Node ${nodeId} not found`, 404);
-  }
-  const { response } = await fetchNodeWithFallback(node, `/api/nodes/${nodeId}/agents/${agent}/upgrade`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" }
-  }, void 0, void 0, { preferPublicEndpoint: true });
-  const body = await response.json().catch(() => ({ error: response.statusText }));
-  if (!response.ok) {
-    throw new MeshyError("NODE_OFFLINE", `Remote node returned ${response.status}`, response.status, body);
-  }
-  applySyncedSettingsSnapshot(deps, nodeId, body);
-  return body;
-}
 async function sendNodeAgentUpgrade(req, res, nodeId, agentParam) {
   const deps = req.app.locals.deps;
   const agent = parseAgent(agentParam);
@@ -45811,21 +46700,23 @@ async function sendNodeAgentUpgrade(req, res, nodeId, agentParam) {
   if (!isSelf && !deps.election.isLeader()) {
     throw new MeshyError("NOT_LEADER", "Only the leader can upgrade agents on other nodes", 403);
   }
-  if (isSelf) {
-    res.json(upgradeSelfNode(deps, nodeId, agent));
-    return;
-  }
-  const canPushToNode = deps.heartbeat?.canPushToNode?.(nodeId) ?? true;
-  if (!canPushToNode) {
-    await fallbackUpgrade(deps, res, nodeId, agent);
-    return;
+  const node = isSelf ? self2 : deps.nodeRegistry.getNode(nodeId);
+  if (!node) {
+    throw new MeshyError("NODE_NOT_FOUND", `Node ${nodeId} not found`, 404);
   }
-  try {
-    res.json(await proxyUpgrade(deps, nodeId, agent));
-  } catch (err) {
-    if (!canRequestNodeMessage(deps.heartbeat)) throw err;
-    await fallbackUpgrade(deps, res, nodeId, agent);
+  const operations = getNodeOperationService(deps);
+  const operation = operations.create("agent.upgrade", nodeId, { agent });
+  if (isSelf) {
+    operations.runLocal(operation.id);
+  } else {
+    try {
+      await dispatchNodeOperation(deps, operation, node);
+    } catch (err) {
+      operations.markFailed(operation.id, err instanceof Error ? err.message : String(err));
+      throw new MeshyError("NODE_OFFLINE", `Cannot reach node ${nodeId} to upgrade ${agent}`, 502);
+    }
   }
+  res.status(202).json(operation);
 }
 // ../../packages/api/src/routes/nodes.ts
@@ -47180,12 +48071,12 @@ function createTaskOutputRoutes(options = {}) {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify(body)
-      }, createNodeMessage("task.preview.create", { taskId, path: body.path }, { expectsResponse: true }));
+      }, createNodeMessage("task.preview.create", { taskId, path: body.path, port: body.port }, { expectsResponse: true }));
       if (handled) {
         return;
       }
     }
-    res.json(await createPreviewSessionPayload(req.app.locals.deps, taskId, body.path, resolveRequestOrigin(req)));
+    res.json(await createPreviewSessionPayload(req.app.locals.deps, taskId, body, resolveRequestOrigin(req)));
   }));
   return router;
 }
@@ -47750,13 +48641,16 @@ function createSharedRoutes() {
     const shareId = req.params.shareId;
     const share = assertActiveShare(taskEngine.getTaskShare(shareId));
     assertFilesPreviewShare(share);
+    if (body.port !== void 0) {
+      throw new MeshyError("VALIDATION_ERROR", "Shared previews only support task output files", 403);
+    }
     const handled = await maybeHandleRemoteTaskOutputRequest(req, res, share.taskId, "/preview-sessions", {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(body)
     }, createNodeMessage("task.preview.create", { taskId: share.taskId, path: body.path }, { expectsResponse: true }));
     if (handled) return;
-    res.json(await createPreviewSessionPayload(req.app.locals.deps, share.taskId, body.path, resolveRequestOrigin(req)));
+    res.json(await createPreviewSessionPayload(req.app.locals.deps, share.taskId, body, resolveRequestOrigin(req)));
   }));
   return router;
 }
@@ -47774,6 +48668,15 @@ function asyncHandler8(fn) {
 }
 function createWorkerRoutes() {
   const router = (0, import_express10.Router)();
+  router.post("/node-operations/:id", asyncHandler8(async (req, res) => {
+    const deps = req.app.locals.deps;
+    const operation = req.body;
+    if (!operation || operation.id !== req.params.id) {
+      throw new MeshyError("VALIDATION_ERROR", "Node operation update id mismatch", 400);
+    }
+    const saved = getNodeOperationService(deps).applyRemoteUpdate(operation);
+    res.json({ ok: true, operation: saved });
+  }));
   router.post("/execute", asyncHandler8(async (req, res) => {
     const { taskEngine, engineRegistry, nodeRegistry, eventBus, logger: rootLogger, workDir } = req.app.locals.deps;
     const log2 = rootLogger.child("worker/execute");
@@ -47945,20 +48848,20 @@ function createWorkerRoutes() {
     const payload = await createPreviewSessionPayload(
       req.app.locals.deps,
       body.taskId,
-      body.path,
+      body,
       resolveRequestOrigin(req)
     );
-    log2.info("created preview session", { taskId: body.taskId, entryPath: payload.entryPath });
+    log2.info("created preview session", { taskId: body.taskId, entryPath: payload.entryPath, kind: payload.kind, port: payload.port });
     res.json(payload);
   }));
-  router.get("/preview-asset", asyncHandler8(async (req, res) => {
+  router.all("/preview-asset", asyncHandler8(async (req, res) => {
     const { previewSessionManager } = req.app.locals.deps;
     if (!previewSessionManager) {
       throw new MeshyError("VALIDATION_ERROR", "Preview not available on this node", 400);
     }
     const token = external_exports.string().min(1).parse(req.query.token);
     const requestedPath = typeof req.query.path === "string" && req.query.path.length > 0 ? req.query.path : void 0;
-    sendPreviewAssetResponse(previewSessionManager, token, requestedPath, res);
+    await sendPreviewAssetResponse(previewSessionManager, token, requestedPath, res, req);
   }));
   router.post("/control-response", asyncHandler8(async (req, res) => {
     const { heartbeat, logger: rootLogger } = req.app.locals.deps;
@@ -48101,15 +49004,17 @@ function createSystemRoutes() {
 var import_express12 = __toESM(require_express2(), 1);
 var HEARTBEAT_INTERVAL_MS = 15e3;
 var CATEGORY_MAP = {
-  tasks: "task.",
-  nodes: "node.",
-  elections: "election.",
-  cluster: "cluster."
+  tasks: ["task."],
+  nodes: ["node.", "transport."],
+  elections: ["election."],
+  cluster: ["cluster."]
 };
 var ALL_EVENT_NAMES = [
   "node.joined",
   "node.left",
   "node.status",
+  "node.operation.created",
+  "node.operation.updated",
   "task.created",
   "task.assigned",
   "task.status",
@@ -48118,7 +49023,8 @@ var ALL_EVENT_NAMES = [
   "task.output",
   "election.started",
   "election.complete",
-  "cluster.state"
+  "cluster.state",
+  "transport.changed"
 ];
 function parseFilter(filterParam) {
   if (typeof filterParam !== "string" || filterParam.trim() === "") {
@@ -48129,8 +49035,8 @@ function parseFilter(filterParam) {
 function shouldIncludeEvent(eventName, categories) {
   if (!categories) return true;
   return categories.some((cat) => {
-    const prefix = CATEGORY_MAP[cat];
-    return prefix != null && eventName.startsWith(prefix);
+    const prefixes = CATEGORY_MAP[cat];
+    return prefixes != null && prefixes.some((prefix) => eventName.startsWith(prefix));
   });
 }
 function createEventRoutes() {
@@ -48174,6 +49080,37 @@ data: ${JSON.stringify(data)}
   return router;
 }
+// ../../packages/api/src/routes/node-operations.ts
+var import_express13 = __toESM(require_express2(), 1);
+function asyncHandler10(fn) {
+  return (req, res, next) => fn(req, res, next).catch(next);
+}
+function parseStatus(value) {
+  if (value === "queued" || value === "running" || value === "succeeded" || value === "failed") return value;
+  return void 0;
+}
+function createNodeOperationRoutes() {
+  const router = (0, import_express13.Router)();
+  router.get("/", asyncHandler10(async (req, res) => {
+    const deps = req.app.locals.deps;
+    const operations = getNodeOperationService(deps).list({
+      nodeId: typeof req.query.nodeId === "string" ? req.query.nodeId : void 0,
+      status: parseStatus(req.query.status),
+      kind: typeof req.query.kind === "string" ? req.query.kind : void 0
+    });
+    res.json({ operations });
+  }));
+  router.get("/:id", asyncHandler10(async (req, res) => {
+    const deps = req.app.locals.deps;
+    const operation = getNodeOperationService(deps).get(req.params.id);
+    if (!operation) {
+      throw new MeshyError("NODE_NOT_FOUND", `Node operation ${req.params.id} not found`, 404);
+    }
+    res.json(operation);
+  }));
+  return router;
+}
 // ../../packages/api/src/app/server.ts
 var JSON_BODY_LIMIT = "1mb";
 var JSON_BODY_LIMIT_LARGE = "25mb";
@@ -48211,11 +49148,18 @@ function isShareHostRequest(req, shareOrigin) {
 function isAllowedSharePath(pathname) {
   return pathname === "/favicon.ico" || pathname === "/api/shared" || pathname.startsWith("/api/shared/") || pathname === "/preview" || pathname.startsWith("/preview/") || pathname === "/shared" || pathname.startsWith("/shared/") || pathname === "/assets" || pathname.startsWith("/assets/");
 }
+function hasAuthorizationHeader(req) {
+  const header = req.headers[MESHY_AUTHORIZATION_HEADER] ?? req.headers.authorization;
+  if (Array.isArray(header)) {
+    return header.some((value) => value.trim().length > 0);
+  }
+  return typeof header === "string" && header.trim().length > 0;
+}
 function resolveRuntimeBaseDir() {
   const entryPath = process.argv[1];
   if (typeof entryPath === "string" && entryPath.length > 0) {
-    const resolved = fs18.realpathSync(path19.resolve(entryPath));
-    return path19.dirname(resolved);
+    const resolved = fs19.realpathSync(path20.resolve(entryPath));
+    return path20.dirname(resolved);
   }
   return process.cwd();
 }
@@ -48223,25 +49167,25 @@ function resolveStaticDir(baseDir) {
   const envStaticDir = process.env.MESHY_STATIC_DIR;
   const candidateDirs = [
     envStaticDir,
-    path19.resolve(baseDir, "dashboard"),
-    path19.resolve(baseDir, "../dashboard"),
-    path19.resolve(baseDir, "../../dashboard/dist"),
-    path19.resolve(baseDir, "../../../packages/dashboard/dist"),
-    path19.resolve(baseDir, "../public"),
-    path19.resolve(baseDir, "../../packages/api/public"),
-    path19.resolve(baseDir, "../../../packages/api/public"),
-    path19.resolve(process.cwd(), "packages/dashboard/dist"),
-    path19.resolve(process.cwd(), "packages/api/public")
+    path20.resolve(baseDir, "dashboard"),
+    path20.resolve(baseDir, "../dashboard"),
+    path20.resolve(baseDir, "../../dashboard/dist"),
+    path20.resolve(baseDir, "../../../packages/dashboard/dist"),
+    path20.resolve(baseDir, "../public"),
+    path20.resolve(baseDir, "../../packages/api/public"),
+    path20.resolve(baseDir, "../../../packages/api/public"),
+    path20.resolve(process.cwd(), "packages/dashboard/dist"),
+    path20.resolve(process.cwd(), "packages/api/public")
   ].filter((value) => typeof value === "string" && value.length > 0);
   for (const candidate of candidateDirs) {
-    if (fs18.existsSync(candidate)) {
+    if (fs19.existsSync(candidate)) {
       return candidate;
     }
   }
   return null;
 }
 function createServer2(deps) {
-  const app = (0, import_express13.default)();
+  const app = (0, import_express14.default)();
   app.locals.deps = deps;
   if (typeof deps.heartbeat.setNodeMessageHandler === "function") {
     deps.heartbeat.setNodeMessageHandler((message) => handleNodeMessage(deps, message));
@@ -48267,7 +49211,9 @@ function createServer2(deps) {
     }
   };
   const isApiRequest = (req) => req.path === "/api" || req.path.startsWith("/api/");
+  const isPreviewRequest = (req) => req.path.startsWith("/preview/") || req.path.startsWith("/preview-open/");
   const canServeDashboard = (req) => !deps.config.validateBearerToken || isTrustedDashboardRequest(req, authConfig);
+  const canServePreview = (req) => canServeDashboard(req) || hasAuthorizationHeader(req);
   app.use((req, res, next) => {
     if (!isShareHostRequest(req, deps.shareOrigin)) {
       next();
@@ -48282,9 +49228,9 @@ function createServer2(deps) {
   const runtimeBaseDir = resolveRuntimeBaseDir();
   const staticDir = resolveStaticDir(runtimeBaseDir);
   if (staticDir) {
-    const staticMiddleware = import_express13.default.static(staticDir);
+    const staticMiddleware = import_express14.default.static(staticDir);
     app.use((req, res, next) => {
-      if (isApiRequest(req)) {
+      if (isApiRequest(req) || isPreviewRequest(req)) {
         next();
         return;
       }
@@ -48295,29 +49241,33 @@ function createServer2(deps) {
       staticMiddleware(req, res, next);
     });
   }
-  app.use(import_express13.default.json({ limit: JSON_BODY_LIMIT }));
+  app.use(import_express14.default.json({ limit: JSON_BODY_LIMIT }));
   app.use(createAuthMiddleware(authConfig));
   app.use((req, res, next) => {
     void (async () => {
-      if (!req.path.startsWith("/preview/")) {
+      if (!isPreviewRequest(req)) {
         next();
         return;
       }
-      if (!canServeDashboard(req)) {
+      if (!canServePreview(req)) {
         res.status(404).type("text/plain").send("Not Found");
         return;
       }
       if (deps.previewProxyManager && await handlePreviewProxyRequest(deps.previewProxyManager, deps.nodeRegistry, deps.logger, req, res)) {
         return;
       }
-      if (deps.previewSessionManager && handlePreviewRequest(deps.previewSessionManager, req, res)) {
+      if (deps.previewSessionManager && await handlePreviewRequest(deps.previewSessionManager, req, res)) {
         return;
       }
       next();
     })().catch(next);
   });
-  app.use(createRoutingMiddleware(deps.dataRouter));
-  const largeBodyParser = import_express13.default.json({ limit: JSON_BODY_LIMIT_LARGE });
+  app.use(createRoutingMiddleware({
+    dataRouter: deps.dataRouter,
+    taskEngine: deps.taskEngine,
+    logger: deps.logger
+  }));
+  const largeBodyParser = import_express14.default.json({ limit: JSON_BODY_LIMIT_LARGE });
   app.use("/api/cluster", createClusterRoutes());
   app.use("/api/cluster-control", createClusterControlRoutes());
   app.use("/api/node", largeBodyParser, createNodeMessageRoutes());
@@ -48326,10 +49276,11 @@ function createServer2(deps) {
   app.use("/api/shared", createSharedRoutes());
   app.use("/api/worker", largeBodyParser, createWorkerRoutes());
   app.use("/api/system", createSystemRoutes());
+  app.use("/api/node-operations", createNodeOperationRoutes());
   app.use("/api/events", createEventRoutes());
   if (staticDir) {
-    const indexPath = path19.join(staticDir, "index.html");
-    if (fs18.existsSync(indexPath)) {
+    const indexPath = path20.join(staticDir, "index.html");
+    if (fs19.existsSync(indexPath)) {
       app.get("*", (req, res, next) => {
         if (isApiRequest(req)) {
           next();
@@ -48725,8 +49676,8 @@ var terminalWriter = {
 };
 // src/startup.ts
-var fs19 = __toESM(require("fs"), 1);
-var path20 = __toESM(require("path"), 1);
+var fs20 = __toESM(require("fs"), 1);
+var path21 = __toESM(require("path"), 1);
 var readline = __toESM(require("readline/promises"), 1);
 var import_node_child_process11 = require("child_process");
 function getDefaultNodeName() {
@@ -48789,19 +49740,19 @@ function createDefaultCommandRunner(platform2) {
   };
 }
 function getNodeMetadataPath2(storagePath) {
-  return path20.join(storagePath, "metadata.json");
+  return path21.join(storagePath, "metadata.json");
 }
 function readStartupMetadataFile(storagePath) {
   try {
-    const raw = JSON.parse(fs19.readFileSync(getNodeMetadataPath2(storagePath), "utf-8"));
+    const raw = JSON.parse(fs20.readFileSync(getNodeMetadataPath2(storagePath), "utf-8"));
     return typeof raw === "object" && raw !== null ? raw : {};
   } catch {
     return {};
   }
 }
 function writeStartupMetadataFile(storagePath, metadata) {
-  fs19.mkdirSync(storagePath, { recursive: true });
-  fs19.writeFileSync(getNodeMetadataPath2(storagePath), JSON.stringify(metadata, null, 2) + "\n", "utf-8");
+  fs20.mkdirSync(storagePath, { recursive: true });
+  fs20.writeFileSync(getNodeMetadataPath2(storagePath), JSON.stringify(metadata, null, 2) + "\n", "utf-8");
 }
 function formatLocalDate2(now) {
   const year = now.getFullYear();
@@ -49040,9 +49991,9 @@ async function ensureStartupRequirements(storagePath, options = {}) {
     metadata
   };
 }
-function loadConfigFile(path22) {
+function loadConfigFile(path23) {
   try {
-    const raw = fs19.readFileSync(path22, "utf-8");
+    const raw = fs20.readFileSync(path23, "utf-8");
     return JSON.parse(raw);
   } catch {
     return {};
@@ -49220,26 +50171,26 @@ function formatLoadedStartMetadata(info, authEnabled) {
 }
 // src/runtime-metadata.ts
-var fs20 = __toESM(require("fs"), 1);
-var path21 = __toESM(require("path"), 1);
+var fs21 = __toESM(require("fs"), 1);
+var path22 = __toESM(require("path"), 1);
 var import_node_child_process12 = require("child_process");
 var runtimeDir = resolveRuntimeDir();
 var appRoot = resolveAppRoot(runtimeDir);
-var repoRoot = path21.resolve(appRoot, "../..");
+var repoRoot = path22.resolve(appRoot, "../..");
 function resolveRuntimeDir() {
   const entryPath = process.argv[1];
   if (typeof entryPath === "string" && entryPath.length > 0) {
     try {
-      return path21.dirname(fs20.realpathSync(path21.resolve(entryPath)));
+      return path22.dirname(fs21.realpathSync(path22.resolve(entryPath)));
     } catch {
-      return path21.dirname(path21.resolve(entryPath));
+      return path22.dirname(path22.resolve(entryPath));
     }
   }
   return process.cwd();
 }
 function readJsonFile(filePath) {
   try {
-    return JSON.parse(fs20.readFileSync(filePath, "utf-8"));
+    return JSON.parse(fs21.readFileSync(filePath, "utf-8"));
   } catch {
     return null;
   }
@@ -49249,9 +50200,9 @@ function readPackageManifest(filePath) {
 }
 function readEmbeddedRuntimeMetadata() {
   const candidates = [
-    path21.join(appRoot, "runtime-metadata.json"),
-    path21.join(runtimeDir, "runtime-metadata.json"),
-    path21.resolve(process.cwd(), "apps/node/dist/runtime-metadata.json")
+    path22.join(appRoot, "runtime-metadata.json"),
+    path22.join(runtimeDir, "runtime-metadata.json"),
+    path22.resolve(process.cwd(), "apps/node/dist/runtime-metadata.json")
   ];
   for (const candidate of candidates) {
     const metadata = readJsonFile(candidate);
@@ -49264,23 +50215,23 @@ function readEmbeddedRuntimeMetadata() {
 function resolveAppRoot(baseDir) {
   const candidates = [
     baseDir,
-    path21.resolve(baseDir, ".."),
-    path21.resolve(process.cwd(), "apps/node/dist"),
-    path21.resolve(process.cwd(), "apps/node"),
+    path22.resolve(baseDir, ".."),
+    path22.resolve(process.cwd(), "apps/node/dist"),
+    path22.resolve(process.cwd(), "apps/node"),
     process.cwd()
   ];
   for (const candidate of candidates) {
-    const manifest = readPackageManifest(path21.join(candidate, "package.json"));
+    const manifest = readPackageManifest(path22.join(candidate, "package.json"));
     if (manifest?.name === "@meshy/node" || manifest?.name === "meshy-node") {
       return candidate;
     }
   }
   for (const candidate of candidates) {
-    if (fs20.existsSync(path21.join(candidate, "package.json"))) {
+    if (fs21.existsSync(path22.join(candidate, "package.json"))) {
       return candidate;
     }
   }
-  return path21.resolve(baseDir, "..");
+  return path22.resolve(baseDir, "..");
 }
 function toPackageInfo(filePath) {
   const manifest = readPackageManifest(filePath);
@@ -49340,8 +50291,8 @@ function buildRuntimeMetadata(storagePath) {
       components: startupRequirements.components
     };
   }
-  const appPackage = toPackageInfo(path21.join(appRoot, "package.json"));
-  const workspaceManifest = readPackageManifest(path21.join(repoRoot, "package.json"));
+  const appPackage = toPackageInfo(path22.join(appRoot, "package.json"));
+  const workspaceManifest = readPackageManifest(path22.join(repoRoot, "package.json"));
   return {
     packageName: appPackage?.name ?? "meshy",
     packageVersion: appPackage?.version ?? "0.1.0",
@@ -49349,11 +50300,11 @@ function buildRuntimeMetadata(storagePath) {
     startupRequirementsLastCheckedOn: startupRequirements.lastCheckedOn,
     components: startupRequirements.components,
     packages: {
-      workspace: toPackageInfo(path21.join(repoRoot, "package.json")),
+      workspace: toPackageInfo(path22.join(repoRoot, "package.json")),
       node: appPackage,
-      core: toPackageInfo(path21.join(repoRoot, "packages/core/package.json")),
-      dashboard: toPackageInfo(path21.join(repoRoot, "packages/dashboard/package.json")),
-      api: toPackageInfo(path21.join(repoRoot, "packages/api/package.json"))
+      core: toPackageInfo(path22.join(repoRoot, "packages/core/package.json")),
+      dashboard: toPackageInfo(path22.join(repoRoot, "packages/dashboard/package.json")),
+      api: toPackageInfo(path22.join(repoRoot, "packages/api/package.json"))
     },
     repository: {
       url: normalizeRepositoryUrl(readGitValue(["config", "--get", "remote.upstream.url"])) ?? normalizeRepositoryUrl(readGitValue(["config", "--get", "remote.origin.url"])) ?? readRepositoryUrlFromManifest(workspaceManifest),