pi-tinychat 0.1.0 → 0.1.1

package/src/server.js

@@ -1,910 +1,910 @@
-import { randomBytes } from "node:crypto";
-import { readFile } from "node:fs/promises";
-import { createServer } from "node:http";
-import { dirname, join, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { TinyChatError } from "./errors.js";
-import { PiBridge } from "./pi.js";
-import { LiveState } from "./live.js";
-import { PLAN_STATE_ENTRY, PLAN_TOOL, normalizePlan, planFromEntries } from "./plan.js";
-import {
-	deleteSessionFile,
-	listSessions,
-	resolveSessionTargets,
-} from "./sessions.js";
-import {
-	clearCompactionThreshold,
-	describeCompaction,
-	setCompactionEnabled,
-	setCompactionThreshold,
-} from "./compaction.js";
-
-const PUBLIC_DIR = join(dirname(fileURLToPath(import.meta.url)), "..", "public");
-const PLAN_EXTENSION = join(
-	dirname(fileURLToPath(import.meta.url)),
-	"..",
-	"extension",
-	"plan.ts",
-);
-const MAX_BODY = 12 * 1024 * 1024;
-const HEARTBEAT_MS = 25_000;
-const PORT_FALLBACK_ATTEMPTS = 20;
-
-const RPC_TIMEOUTS = {
-	abort: 90_000,
-	compact: 600_000,
-	export_html: 120_000,
-};
-const DEFAULT_RPC_TIMEOUT = 60_000;
-
-const ASSETS = {
-	"/": ["index.html", "text/html; charset=utf-8"],
-	"/index.html": ["index.html", "text/html; charset=utf-8"],
-	"/app.js": ["app.js", "text/javascript; charset=utf-8"],
-	"/i18n.js": ["i18n.js", "text/javascript; charset=utf-8"],
-	"/markdown.js": ["markdown.js", "text/javascript; charset=utf-8"],
-	"/theme-init.js": ["theme-init.js", "text/javascript; charset=utf-8"],
-	"/style.css": ["style.css", "text/css; charset=utf-8"],
-	"/favicon.svg": ["favicon.svg", "image/svg+xml"],
-};
-
-// Only commands the UI needs are reachable from the browser.
-const FORWARDED = new Set([
-	"prompt",
-	"steer",
-	"follow_up",
-	"abort",
-	"clear_queue",
-	"new_session",
-	"switch_session",
-	"set_model",
-	"set_thinking_level",
-	"compact",
-	"set_session_name",
-	"get_state",
-	"get_messages",
-	"get_session_stats",
-	"get_available_models",
-	"get_available_thinking_levels",
-	"get_commands",
-	"get_entries",
-	"get_tree",
-	"export_html",
-]);
-
-const CONTENT_SECURITY_POLICY = [
-	"default-src 'self'",
-	"script-src 'self'",
-	"style-src 'self' 'unsafe-inline'",
-	"img-src 'self' data:",
-	"connect-src 'self'",
-	"base-uri 'none'",
-	"form-action 'none'",
-	"frame-ancestors 'none'",
-].join("; ");
-
-const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-
-async function waitForPi(bridge, timeout = 30_000) {
-	const startedAt = Date.now();
-	while (Date.now() - startedAt < timeout) {
-		if (bridge.lastExit) throw new Error(bridge.lastExit.reason);
-		try {
-			await bridge.request({ type: "get_state" }, { timeout: 4000 });
-			return;
-		} catch {
-			await delay(250);
-		}
-	}
-	if (bridge.lastExit) throw new Error(bridge.lastExit.reason);
-	throw new TinyChatError("server.piTimeout");
-}
-
-function publicModel(model) {
-	if (!model) return null;
-	return {
-		id: model.id,
-		name: model.name ?? model.id,
-		provider: model.provider,
-		reasoning: Boolean(model.reasoning),
-		contextWindow: model.contextWindow,
-	};
-}
-
-function validateImages(images) {
-	if (images === undefined) return undefined;
-	if (!Array.isArray(images) || images.length > 6) throw new TinyChatError("server.invalidImages");
-	return images.map((image) => {
-		if (
-			!image ||
-			image.type !== "image" ||
-			typeof image.data !== "string" ||
-			typeof image.mimeType !== "string" ||
-			image.data.length > MAX_BODY
-		) {
-			throw new TinyChatError("server.invalidImages");
-		}
-		return { type: "image", data: image.data, mimeType: image.mimeType };
-	});
-}
-
-export async function createTinyChat({
-	cwd,
-	launcher,
-	env = process.env,
-	token = randomBytes(24).toString("base64url"),
-	port = 0,
-	host = "127.0.0.1",
-	piArgs = [],
-	portAttempts = PORT_FALLBACK_ATTEMPTS,
-}) {
-	const clients = new Set();
-	const runtimes = new Map();
-	const startingSessions = new Map();
-	let activeRuntime = null;
-	let runtimeSequence = 0;
-	let closing = false;
-	let actualPort = port;
-
-	const sessionKey = (value) =>
-		process.platform === "win32" ? resolve(value).toLowerCase() : resolve(value);
-
-	function runtimeSummary(runtime) {
-		return {
-			id: runtime.id,
-			sessionId: runtime.sessionId,
-			sessionFile: runtime.sessionFile,
-			sessionName: runtime.sessionName,
-			running: runtime.running,
-			exited: Boolean(runtime.exit),
-		};
-	}
-
-	async function refreshRuntimeState(runtime) {
-		if (!runtime.bridge.running) return null;
-		const state = await runtime.bridge
-			.request({ type: "get_state" }, { timeout: 5000 })
-			.catch(() => null);
-		if (!state) return null;
-		runtime.sessionId = state.sessionId ?? runtime.sessionId;
-		if (state.sessionFile !== undefined) runtime.sessionFile = state.sessionFile;
-		if (state.sessionName !== undefined) runtime.sessionName = state.sessionName;
-		runtime.running = Boolean(state.isStreaming);
-		if (runtime.running && !runtime.runStartedAt) runtime.runStartedAt = Date.now();
-		if (!runtime.running && runtime.runStartedAt && !state.isStreaming) {
-			runtime.runStartedAt = null;
-		}
-		return state;
-	}
-
-	function makeRuntime({ sessionPath = "", initial = false } = {}) {
-		const id = `r${++runtimeSequence}`;
-		const bridge = new PiBridge({
-			cwd,
-			launcher,
-			env,
-			piArgs: initial
-				? ["--extension", PLAN_EXTENSION, ...piArgs]
-				: ["--extension", PLAN_EXTENSION, ...(sessionPath ? ["--session", sessionPath] : [])],
-		});
-		const runtime = {
-			id,
-			bridge,
-			live: new LiveState(),
-			sessionId: "",
-			sessionFile: sessionPath,
-			sessionName: "",
-			running: false,
-			runStartedAt: null,
-			startedAt: Date.now(),
-			exit: null,
-			pendingUi: new Map(),
-			statuses: {},
-			widgets: {},
-			extensionTitle: "",
-		};
-		runtimes.set(id, runtime);
-		bridge.on("record", (record) => onRuntimeRecord(runtime, record));
-		bridge.on("exit", (info) => onRuntimeExit(runtime, info));
-		bridge.start();
-		return runtime;
-	}
-
-	/** @param {import("./pi-types.js").PiRecord} record */
-	function onRuntimeRecord(runtime, record) {
-		runtime.live.apply(record);
-		if (record.type === "session_info_changed") {
-			runtime.sessionName = record.name ?? "";
-		}
-		if (record.type === "agent_start") {
-			runtime.running = true;
-			if (!runtime.runStartedAt) runtime.runStartedAt = Date.now();
-		}
-		if (record.type === "agent_settled") {
-			runtime.running = false;
-			runtime.runStartedAt = null;
-			refreshRuntimeState(runtime).catch(() => {});
-		}
-		if (
-			record.type === "extension_ui_request" &&
-			["select", "confirm", "input", "editor"].includes(record.method)
-		) {
-			runtime.pendingUi.set(record.id, record);
-		}
-		if (record.type === "extension_ui_request") {
-			if (record.method === "setStatus") {
-				if (record.statusText) runtime.statuses[record.statusKey] = record.statusText;
-				else delete runtime.statuses[record.statusKey];
-			}
-			if (record.method === "setWidget") {
-				const key = record.widgetKey ?? "widget";
-				if (Array.isArray(record.widgetLines) && record.widgetLines.length) {
-					runtime.widgets[key] = record.widgetLines.join("\n");
-				} else {
-					delete runtime.widgets[key];
-				}
-			}
-			if (record.method === "setTitle") {
-				runtime.extensionTitle = record.title || "";
-			}
-		}
-
-		if (runtime !== activeRuntime) {
-			if (
-				[
-					"agent_start",
-					"agent_settled",
-					"session_info_changed",
-					"compaction_start",
-					"compaction_end",
-					"auto_retry_start",
-					"auto_retry_end",
-				].includes(record.type)
-			) {
-				broadcast({ type: "tinychat:runtime", runtime: runtimeSummary(runtime) });
-			}
-			return;
-		}
-
-		broadcast({
-			...record,
-			runtime: runtime.id,
-			...(record.type === "agent_start" ? { runStartedAt: runtime.runStartedAt } : {}),
-		});
-		if (record.type === "tool_execution_end" && record.toolName === PLAN_TOOL) {
-			broadcast({
-				type: "tinychat:plan",
-				runtime: runtime.id,
-				plan: normalizePlan(record.result?.details),
-			});
-		}
-		if (
-			record.type === "message_end" &&
-			record.message?.role === "toolResult" &&
-			record.message.toolName === PLAN_TOOL
-		) {
-			broadcast({
-				type: "tinychat:plan",
-				runtime: runtime.id,
-				plan: normalizePlan(record.message.details),
-			});
-		}
-		if (
-			record.type === "entry_appended" &&
-			record.entry?.type === "custom" &&
-			record.entry.customType === PLAN_STATE_ENTRY
-		) {
-			broadcast({
-				type: "tinychat:plan",
-				runtime: runtime.id,
-				plan: normalizePlan(record.entry.data),
-			});
-		}
-	}
-
-	function onRuntimeExit(runtime, info) {
-		runtime.live.reset();
-		runtime.running = false;
-		runtime.runStartedAt = null;
-		runtime.exit = info;
-		runtime.pendingUi.clear();
-		runtime.statuses = {};
-		runtime.widgets = {};
-		runtime.extensionTitle = "";
-		if (runtime === activeRuntime) {
-			broadcast({ type: "tinychat:exit", runtime: runtime.id, reason: info.reason });
-			return;
-		}
-		runtimes.delete(runtime.id);
-		broadcast({ type: "tinychat:runtime", runtime: runtimeSummary(runtime) });
-	}
-
-	async function startRuntime(options = {}) {
-		const runtime = makeRuntime(options);
-		try {
-			await waitForPi(runtime.bridge);
-			await refreshRuntimeState(runtime);
-			return runtime;
-		} catch (error) {
-			await runtime.bridge.stop().catch(() => {});
-			runtimes.delete(runtime.id);
-			throw error;
-		}
-	}
-
-	function activateRuntime(runtime) {
-		if (activeRuntime && activeRuntime !== runtime && activeRuntime.exit) {
-			runtimes.delete(activeRuntime.id);
-		}
-		activeRuntime = runtime;
-		return runtime;
-	}
-
-	function findRuntimeByPath(path) {
-		const key = sessionKey(path);
-		for (const runtime of runtimes.values()) {
-			if (runtime.exit) continue;
-			if (runtime.sessionFile && sessionKey(runtime.sessionFile) === key) return runtime;
-		}
-		return null;
-	}
-
-	async function runtimeForPath(path) {
-		const existing = findRuntimeByPath(path);
-		if (existing) return existing;
-		const key = sessionKey(path);
-		let pending = startingSessions.get(key);
-		if (!pending) {
-			pending = startRuntime({ sessionPath: path });
-			startingSessions.set(key, pending);
-			pending.then(
-				() => startingSessions.delete(key),
-				() => startingSessions.delete(key),
-			);
-		}
-		const runtime = await pending;
-		return findRuntimeByPath(path) ?? runtime;
-	}
-
-	function requireRuntime() {
-		if (!activeRuntime) throw new TinyChatError("server.notConnected");
-		if (activeRuntime.exit) throw new Error(activeRuntime.exit.reason);
-		return activeRuntime;
-	}
-
-	async function allSessions() {
-		await Promise.all(
-			[...runtimes.values()]
-				.filter((runtime) => runtime.bridge.running)
-				.map((runtime) => refreshRuntimeState(runtime)),
-		);
-		const currentId = activeRuntime?.sessionId ?? "";
-		const sessions = await listSessions({ cwd, currentId, env });
-		const bySessionId = new Map();
-		for (const runtime of runtimes.values()) {
-			if (runtime.sessionId && !runtime.exit) bySessionId.set(runtime.sessionId, runtime);
-		}
-		const represented = new Set(sessions.map((session) => session.id));
-		const live = [];
-		for (const runtime of runtimes.values()) {
-			if (!runtime.sessionId || runtime.exit || represented.has(runtime.sessionId)) continue;
-			live.push({
-				path: runtime.sessionFile,
-				id: runtime.sessionId,
-				name: runtime.sessionName,
-				preview: "",
-				created: "",
-				modified: new Date(runtime.startedAt).toISOString(),
-				size: 0,
-				current: runtime === activeRuntime,
-				runtime: runtime.id,
-				running: runtime.running,
-				live: true,
-			});
-		}
-		const all = [
-			...live.sort((a, b) => b.modified.localeCompare(a.modified)),
-			...sessions.map((session) => {
-				const runtime = bySessionId.get(session.id);
-				return {
-					...session,
-					runtime: runtime?.id ?? null,
-					running: Boolean(runtime?.running),
-					live: Boolean(runtime),
-				};
-			}),
-		];
-		return { sessions: all, total: all.length };
-	}
-
-	function broadcast(record) {
-		if (clients.size === 0) return;
-		const frame = `data: ${JSON.stringify(record)}\n\n`;
-		for (const client of clients) {
-			try {
-				client.write(frame);
-			} catch {
-				clients.delete(client);
-			}
-		}
-	}
-
-	async function snapshot() {
-		const runtime = requireRuntime();
-		const bridge = runtime.bridge;
-		const [state, messages, stats, models, levels, commands, entries] = await Promise.all([
-			bridge.request({ type: "get_state" }),
-			bridge.request({ type: "get_messages" }),
-			bridge.request({ type: "get_session_stats" }).catch(() => null),
-			bridge.request({ type: "get_available_models" }).catch(() => null),
-			bridge.request({ type: "get_available_thinking_levels" }).catch(() => null),
-			bridge.request({ type: "get_commands" }).catch(() => null),
-			bridge.request({ type: "get_entries" }).catch(() => null),
-		]);
-		if (state) {
-			runtime.sessionId = state.sessionId ?? runtime.sessionId;
-			if (state.sessionFile !== undefined) runtime.sessionFile = state.sessionFile;
-			if (state.sessionName !== undefined) runtime.sessionName = state.sessionName;
-			runtime.running = Boolean(state.isStreaming);
-			if (runtime.running && !runtime.runStartedAt) runtime.runStartedAt = Date.now();
-			if (!runtime.running) runtime.runStartedAt = null;
-		}
-		const compaction = await describeCompaction({ env, model: state?.model });
-		return {
-			runtime: runtime.id,
-			cwd,
-			state,
-			runStartedAt: runtime.runStartedAt,
-			live: runtime.live.snapshot(),
-			messages: Array.isArray(messages?.messages) ? messages.messages : [],
-			stats: stats ?? null,
-			models: (models?.models ?? []).map(publicModel),
-			levels: levels?.levels ?? ["off"],
-			commands: commands?.commands ?? [],
-			plan: entries ? planFromEntries(entries.entries, entries.leafId) : null,
-			pendingUi: [...runtime.pendingUi.values()],
-			statuses: { ...runtime.statuses },
-			widgets: { ...runtime.widgets },
-			extensionTitle: runtime.extensionTitle,
-			compaction,
-		};
-	}
-
-	async function currentModel() {
-		const state = await requireRuntime().bridge.request({ type: "get_state" });
-		if (!state?.model) throw new TinyChatError("server.noModel");
-		return state.model;
-	}
-
-	async function handleRpc(command) {
-		if (!command || typeof command !== "object" || typeof command.type !== "string") {
-			throw new TinyChatError("server.invalidCommand");
-		}
-
-		if (command.type === "tinychat:snapshot") return snapshot();
-		if (command.type === "tinychat:sessions") return await allSessions();
-		if (command.type === "tinychat:activate") {
-			const runtime = runtimes.get(String(command.runtimeId));
-			if (!runtime || runtime.exit) throw new TinyChatError("server.sessionNotFound");
-			activateRuntime(runtime);
-			return { runtime: runtime.id };
-		}
-		if (command.type === "tinychat:restart") {
-			const runtime = activeRuntime;
-			if (!runtime) throw new TinyChatError("server.notConnected");
-			runtime.pendingUi.clear();
-			runtime.statuses = {};
-			runtime.widgets = {};
-			runtime.extensionTitle = "";
-			runtime.exit = null;
-			await runtime.bridge.restart();
-			await waitForPi(runtime.bridge);
-			runtime.live.reset();
-			await refreshRuntimeState(runtime);
-			return { restarted: true };
-		}
-		if (command.type === "tinychat:delete_sessions") {
-			const all = command.all === true;
-			const ids = Array.isArray(command.ids)
-				? command.ids.filter((id) => typeof id === "string" && id)
-				: null;
-			if (!all && (!ids || ids.length === 0)) {
-				throw new TinyChatError("server.deleteTargetMissing");
-			}
-			const { targets, missing } = await resolveSessionTargets({
-				cwd,
-				ids,
-				all,
-				env,
-			});
-			const protectedPaths = new Set();
-			const protectedIds = new Set();
-			for (const runtime of runtimes.values()) {
-				if (runtime.exit) continue;
-				if (runtime !== activeRuntime && !runtime.running) continue;
-				if (runtime.sessionFile) protectedPaths.add(sessionKey(runtime.sessionFile));
-				if (runtime.sessionId) protectedIds.add(runtime.sessionId);
-			}
-
-			/** @type {{ id: string, error: string, errorKey?: string }[]} */
-			const failed = missing.map((id) => ({
-				id,
-				error: "server.sessionNotFound",
-				errorKey: "server.sessionNotFound",
-			}));
-			let deleted = 0;
-			for (const target of targets) {
-				if (
-					protectedPaths.has(sessionKey(target.path)) ||
-					protectedIds.has(target.id)
-				) {
-					failed.push({
-						id: target.id,
-						error: "server.sessionInUse",
-						errorKey: "server.sessionInUse",
-					});
-					continue;
-				}
-				const runtime =
-					findRuntimeByPath(target.path) ??
-					[...runtimes.values()].find(
-						(candidate) => !candidate.exit && candidate.sessionId === target.id,
-					);
-				if (runtime) {
-					if (runtime.running) {
-						failed.push({
-							id: target.id,
-							error: "server.sessionRunning",
-						});
-						continue;
-					}
-					// A background session may have been opened earlier in this
-					// Pi TinyChat run. Stop it before removing the file it writes to.
-					await runtime.bridge.stop().catch(() => {});
-					runtimes.delete(runtime.id);
-				}
-				try {
-					await deleteSessionFile({ cwd, path: target.path, env });
-					deleted += 1;
-				} catch (error) {
-					failed.push({ id: target.id, error: error.message });
-				}
-			}
-			return { deleted, failed };
-		}
-		if (command.type === "new_session") {
-			const runtime = await startRuntime();
-			activateRuntime(runtime);
-			return { cancelled: false, runtime: runtime.id };
-		}
-		if (command.type === "switch_session") {
-			if (typeof command.sessionPath !== "string") throw new TinyChatError("server.invalidPath");
-			const runtime = await runtimeForPath(command.sessionPath);
-			activateRuntime(runtime);
-			return { cancelled: false, runtime: runtime.id };
-		}
-		if (command.type === "tinychat:set_compaction") {
-			const model = await currentModel();
-			if (command.action === "enable") {
-				await setCompactionEnabled({ env, enabled: command.enabled !== false });
-			} else if (command.action === "clear") {
-				await clearCompactionThreshold({ env, model });
-			} else {
-				await setCompactionThreshold({
-					env,
-					model,
-					percent: Number(command.percent),
-				});
-			}
-			return { compaction: await describeCompaction({ env, model }) };
-		}
-		if (command.type === "tinychat:extension_ui_response") {
-			if (typeof command.id !== "string") throw new TinyChatError("server.invalidId");
-			const runtime = command.runtimeId
-				? runtimes.get(String(command.runtimeId))
-				: requireRuntime();
-			if (!runtime || runtime.exit) throw new TinyChatError("server.sessionNotFound");
-			const response = {
-				type: "extension_ui_response",
-				id: command.id,
-				...(command.cancelled
-					? { cancelled: true }
-					: command.confirmed !== undefined
-						? { confirmed: Boolean(command.confirmed) }
-						: { value: String(command.value ?? "") }),
-			};
-			runtime.pendingUi.delete(command.id);
-			runtime.bridge.sendRaw(response);
-			return { sent: true };
-		}
-		if (!FORWARDED.has(command.type)) throw new TinyChatError("server.unsupportedCommand");
-
-		const payload = { type: command.type };
-		if (command.type === "prompt" || command.type === "steer" || command.type === "follow_up") {
-			if (typeof command.message !== "string" || !command.message.trim()) {
-				throw new TinyChatError("server.invalidMessage");
-			}
-			payload.message = command.message;
-			const images = validateImages(command.images);
-			if (images) payload.images = images;
-			if (command.streamingBehavior) payload.streamingBehavior = command.streamingBehavior;
-		}
-		if (command.type === "set_model") {
-			if (typeof command.provider !== "string" || typeof command.modelId !== "string") {
-				throw new TinyChatError("server.invalidModel");
-			}
-			payload.provider = command.provider;
-			payload.modelId = command.modelId;
-		}
-		if (command.type === "set_thinking_level") {
-			if (typeof command.level !== "string") throw new TinyChatError("server.invalidLevel");
-			payload.level = command.level;
-		}
-		if (command.type === "set_session_name") {
-			if (typeof command.name !== "string") throw new TinyChatError("server.invalidName");
-			payload.name = command.name;
-		}
-		if (command.type === "compact" && typeof command.customInstructions === "string") {
-			payload.customInstructions = command.customInstructions;
-		}
-		return await requireRuntime().bridge.request(payload, {
-			timeout: RPC_TIMEOUTS[command.type] ?? DEFAULT_RPC_TIMEOUT,
-		});
-	}
-
-	function cookieToken(request) {
-		const header = request.headers.cookie;
-		if (typeof header !== "string") return null;
-		for (const part of header.split(";")) {
-			const separator = part.indexOf("=");
-			if (separator === -1) continue;
-			if (part.slice(0, separator).trim() !== "pi_tinychat") continue;
-			try {
-				return decodeURIComponent(part.slice(separator + 1).trim());
-			} catch {
-				return null;
-			}
-		}
-		return null;
-	}
-
-	function authorized(request, url) {
-		const header = request.headers["x-pi-tinychat-token"];
-		if (typeof header === "string" && header === token) return true;
-		if (cookieToken(request) === token) return true;
-		return (
-			url.searchParams.get("launch") === token || url.searchParams.get("token") === token
-		);
-	}
-
-	function hostAllowed(request) {
-		const header = request.headers.host;
-		if (!header) return false;
-		const match = /^(.*):(\d+)$/.exec(header);
-		if (!match) return false;
-		if (match[2] !== String(actualPort)) return false;
-		return match[1] === "127.0.0.1" || match[1] === "localhost" || match[1] === "[::1]";
-	}
-
-	function json(response, status, body) {
-		const payload = JSON.stringify(body);
-		response.writeHead(status, {
-			"content-type": "application/json; charset=utf-8",
-			"cache-control": "no-store",
-			"content-length": Buffer.byteLength(payload),
-		});
-		response.end(payload);
-	}
-
-	function readBody(request) {
-		return new Promise((resolve, reject) => {
-			let size = 0;
-			const chunks = [];
-			request.on("data", (chunk) => {
-				size += chunk.length;
-				if (size > MAX_BODY) {
-					reject(new TinyChatError("server.requestTooLarge"));
-					request.destroy();
-					return;
-				}
-				chunks.push(chunk);
-			});
-			request.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
-			request.on("error", reject);
-		});
-	}
-
-	const server = createServer(async (request, response) => {
-		const url = new URL(request.url ?? "/", `http://${request.headers.host ?? host}`);
-
-		if (!hostAllowed(request)) {
-			response.writeHead(421, { "content-type": "text/plain; charset=utf-8" });
-			response.end("Misdirected request");
-			return;
-		}
-
-		if (
-			request.method === "GET" &&
-			url.pathname === "/" &&
-			(url.searchParams.has("launch") || url.searchParams.has("token"))
-		) {
-			if (!authorized(request, url)) {
-				response.writeHead(401, { "content-type": "text/plain; charset=utf-8" });
-				response.end("Unauthorized — open the URL printed by pi-tinychat");
-				return;
-			}
-			// Exchange the launch credential for a localhost cookie and redirect to
-			// a clean address. The credential itself stays as strong as before.
-			response.writeHead(303, {
-				location: "/",
-				"set-cookie": `pi_tinychat=${encodeURIComponent(token)}; HttpOnly; SameSite=Strict; Path=/; Max-Age=86400`,
-				"cache-control": "no-store",
-				"referrer-policy": "no-referrer",
-			});
-			response.end();
-			return;
-		}
-
-		if (url.pathname === "/api/events") {
-			if (!authorized(request, url)) {
-				response.writeHead(401, { "content-type": "text/plain; charset=utf-8" });
-				response.end("Unauthorized");
-				return;
-			}
-			response.writeHead(200, {
-				"content-type": "text/event-stream; charset=utf-8",
-				"cache-control": "no-store",
-				connection: "keep-alive",
-				"x-accel-buffering": "no",
-			});
-			response.write("retry: 3000\n\n");
-			response.write(`data: ${JSON.stringify({ type: "tinychat:hello", cwd })}\n\n`);
-			clients.add(response);
-			request.on("close", () => clients.delete(response));
-			response.on("error", () => clients.delete(response));
-			return;
-		}
-
-		if (request.method === "POST" && url.pathname === "/api/rpc") {
-			const origin = request.headers.origin;
-			if (origin && origin !== `http://${request.headers.host}`) {
-				json(response, 403, { ok: false, error: "Forbidden" });
-				return;
-			}
-			if (!authorized(request, url)) {
-				json(response, 401, { ok: false, error: "Unauthorized" });
-				return;
-			}
-			let command;
-			try {
-				command = JSON.parse(await readBody(request));
-			} catch (error) {
-				json(response, 400, { ok: false, error: error.message });
-				return;
-			}
-			try {
-				json(response, 200, { ok: true, data: await handleRpc(command) });
-			} catch (error) {
-				json(response, 200, {
-					ok: false,
-					error: error.message,
-					...(error instanceof TinyChatError
-						? { errorKey: error.key, errorParams: error.params }
-						: {}),
-				});
-			}
-			return;
-		}
-
-		if (request.method !== "GET" && request.method !== "HEAD") {
-			response.writeHead(405, { "content-type": "text/plain; charset=utf-8" });
-			response.end("Method not allowed");
-			return;
-		}
-
-		const asset = ASSETS[url.pathname];
-		if (!asset) {
-			response.writeHead(404, { "content-type": "text/plain; charset=utf-8" });
-			response.end("Not found");
-			return;
-		}
-		const [file, type] = asset;
-		// The HTML shell needs the session token; the assets it references do not
-		// contain any secret and are served without one so the page can boot.
-		const needsToken = type.startsWith("text/html");
-		if (needsToken && !authorized(request, url)) {
-			response.writeHead(401, { "content-type": "text/plain; charset=utf-8" });
-			response.end("Unauthorized — open the URL printed by pi-tinychat");
-			return;
-		}
-		response.writeHead(200, {
-			"content-type": type,
-			"cache-control": "no-store",
-			"content-security-policy": CONTENT_SECURITY_POLICY,
-			"referrer-policy": "no-referrer",
-			"x-content-type-options": "nosniff",
-		});
-		// Read on every request so UI edits show up on reload without a restart.
-		response.end(
-			request.method === "HEAD" ? undefined : await readFile(join(PUBLIC_DIR, file)),
-		);
-	});
-
-	const heartbeat = setInterval(() => {
-		for (const client of clients) {
-			try {
-				client.write(": ping\n\n");
-			} catch {
-				clients.delete(client);
-			}
-		}
-	}, HEARTBEAT_MS);
-	heartbeat.unref();
-
-	const lastPort = port === 0 ? 0 : Math.min(65535, port + portAttempts - 1);
-	let bound = false;
-	let listenError = null;
-	for (let candidate = port; candidate <= lastPort; candidate += 1) {
-		try {
-			await new Promise((resolve, reject) => {
-				const onError = (error) => reject(error);
-				server.once("error", onError);
-				server.listen(candidate, host, () => {
-					server.removeListener("error", onError);
-					resolve();
-				});
-			});
-			bound = true;
-			break;
-		} catch (error) {
-			listenError = error;
-			if (error.code !== "EADDRINUSE") {
-				clearInterval(heartbeat);
-				throw error;
-			}
-		}
-	}
-	if (!bound) {
-		clearInterval(heartbeat);
-		throw new Error(
-			port === 0
-				? `サーバーを起動できませんでした: ${listenError?.message ?? "unknown error"}`
-				: `ポート ${port}〜${lastPort} はすべて使用中です。--port で別のポートを指定してください。`,
-		);
-	}
-	const address = server.address();
-	actualPort = typeof address === "object" && address ? address.port : port;
-
-	try {
-		activateRuntime(await startRuntime({ initial: true }));
-	} catch (error) {
-		clearInterval(heartbeat);
-		server.close();
-		throw error;
-	}
-
-	return {
-		server,
-		token,
-		port: actualPort,
-		url: `http://${host}:${actualPort}/?launch=${encodeURIComponent(token)}`,
-		get sessionName() {
-			return activeRuntime?.sessionName;
-		},
-		async close() {
-			if (closing) return;
-			closing = true;
-			clearInterval(heartbeat);
-			for (const client of clients) {
-				try {
-					client.end();
-				} catch {
-					/* ignore */
-				}
-			}
-			clients.clear();
-			await Promise.all([...runtimes.values()].map((runtime) => runtime.bridge.stop()));
-			await new Promise((resolve) => server.close(resolve));
-		},
-	};
-}
+import { randomBytes } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { createServer } from "node:http";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { TinyChatError } from "./errors.js";
+import { PiBridge } from "./pi.js";
+import { LiveState } from "./live.js";
+import { PLAN_STATE_ENTRY, PLAN_TOOL, normalizePlan, planFromEntries } from "./plan.js";
+import {
+	deleteSessionFile,
+	listSessions,
+	resolveSessionTargets,
+} from "./sessions.js";
+import {
+	clearCompactionThreshold,
+	describeCompaction,
+	setCompactionEnabled,
+	setCompactionThreshold,
+} from "./compaction.js";
+
+const PUBLIC_DIR = join(dirname(fileURLToPath(import.meta.url)), "..", "public");
+const PLAN_EXTENSION = join(
+	dirname(fileURLToPath(import.meta.url)),
+	"..",
+	"extension",
+	"plan.ts",
+);
+const MAX_BODY = 12 * 1024 * 1024;
+const HEARTBEAT_MS = 25_000;
+const PORT_FALLBACK_ATTEMPTS = 20;
+
+const RPC_TIMEOUTS = {
+	abort: 90_000,
+	compact: 600_000,
+	export_html: 120_000,
+};
+const DEFAULT_RPC_TIMEOUT = 60_000;
+
+const ASSETS = {
+	"/": ["index.html", "text/html; charset=utf-8"],
+	"/index.html": ["index.html", "text/html; charset=utf-8"],
+	"/app.js": ["app.js", "text/javascript; charset=utf-8"],
+	"/i18n.js": ["i18n.js", "text/javascript; charset=utf-8"],
+	"/markdown.js": ["markdown.js", "text/javascript; charset=utf-8"],
+	"/theme-init.js": ["theme-init.js", "text/javascript; charset=utf-8"],
+	"/style.css": ["style.css", "text/css; charset=utf-8"],
+	"/favicon.svg": ["favicon.svg", "image/svg+xml"],
+};
+
+// Only commands the UI needs are reachable from the browser.
+const FORWARDED = new Set([
+	"prompt",
+	"steer",
+	"follow_up",
+	"abort",
+	"clear_queue",
+	"new_session",
+	"switch_session",
+	"set_model",
+	"set_thinking_level",
+	"compact",
+	"set_session_name",
+	"get_state",
+	"get_messages",
+	"get_session_stats",
+	"get_available_models",
+	"get_available_thinking_levels",
+	"get_commands",
+	"get_entries",
+	"get_tree",
+	"export_html",
+]);
+
+const CONTENT_SECURITY_POLICY = [
+	"default-src 'self'",
+	"script-src 'self'",
+	"style-src 'self' 'unsafe-inline'",
+	"img-src 'self' data:",
+	"connect-src 'self'",
+	"base-uri 'none'",
+	"form-action 'none'",
+	"frame-ancestors 'none'",
+].join("; ");
+
+const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+
+async function waitForPi(bridge, timeout = 30_000) {
+	const startedAt = Date.now();
+	while (Date.now() - startedAt < timeout) {
+		if (bridge.lastExit) throw new Error(bridge.lastExit.reason);
+		try {
+			await bridge.request({ type: "get_state" }, { timeout: 4000 });
+			return;
+		} catch {
+			await delay(250);
+		}
+	}
+	if (bridge.lastExit) throw new Error(bridge.lastExit.reason);
+	throw new TinyChatError("server.piTimeout");
+}
+
+function publicModel(model) {
+	if (!model) return null;
+	return {
+		id: model.id,
+		name: model.name ?? model.id,
+		provider: model.provider,
+		reasoning: Boolean(model.reasoning),
+		contextWindow: model.contextWindow,
+	};
+}
+
+function validateImages(images) {
+	if (images === undefined) return undefined;
+	if (!Array.isArray(images) || images.length > 6) throw new TinyChatError("server.invalidImages");
+	return images.map((image) => {
+		if (
+			!image ||
+			image.type !== "image" ||
+			typeof image.data !== "string" ||
+			typeof image.mimeType !== "string" ||
+			image.data.length > MAX_BODY
+		) {
+			throw new TinyChatError("server.invalidImages");
+		}
+		return { type: "image", data: image.data, mimeType: image.mimeType };
+	});
+}
+
+export async function createTinyChat({
+	cwd,
+	launcher,
+	env = process.env,
+	token = randomBytes(24).toString("base64url"),
+	port = 0,
+	host = "127.0.0.1",
+	piArgs = [],
+	portAttempts = PORT_FALLBACK_ATTEMPTS,
+}) {
+	const clients = new Set();
+	const runtimes = new Map();
+	const startingSessions = new Map();
+	let activeRuntime = null;
+	let runtimeSequence = 0;
+	let closing = false;
+	let actualPort = port;
+
+	const sessionKey = (value) =>
+		process.platform === "win32" ? resolve(value).toLowerCase() : resolve(value);
+
+	function runtimeSummary(runtime) {
+		return {
+			id: runtime.id,
+			sessionId: runtime.sessionId,
+			sessionFile: runtime.sessionFile,
+			sessionName: runtime.sessionName,
+			running: runtime.running,
+			exited: Boolean(runtime.exit),
+		};
+	}
+
+	async function refreshRuntimeState(runtime) {
+		if (!runtime.bridge.running) return null;
+		const state = await runtime.bridge
+			.request({ type: "get_state" }, { timeout: 5000 })
+			.catch(() => null);
+		if (!state) return null;
+		runtime.sessionId = state.sessionId ?? runtime.sessionId;
+		if (state.sessionFile !== undefined) runtime.sessionFile = state.sessionFile;
+		if (state.sessionName !== undefined) runtime.sessionName = state.sessionName;
+		runtime.running = Boolean(state.isStreaming);
+		if (runtime.running && !runtime.runStartedAt) runtime.runStartedAt = Date.now();
+		if (!runtime.running && runtime.runStartedAt && !state.isStreaming) {
+			runtime.runStartedAt = null;
+		}
+		return state;
+	}
+
+	function makeRuntime({ sessionPath = "", initial = false } = {}) {
+		const id = `r${++runtimeSequence}`;
+		const bridge = new PiBridge({
+			cwd,
+			launcher,
+			env,
+			piArgs: initial
+				? ["--extension", PLAN_EXTENSION, ...piArgs]
+				: ["--extension", PLAN_EXTENSION, ...(sessionPath ? ["--session", sessionPath] : [])],
+		});
+		const runtime = {
+			id,
+			bridge,
+			live: new LiveState(),
+			sessionId: "",
+			sessionFile: sessionPath,
+			sessionName: "",
+			running: false,
+			runStartedAt: null,
+			startedAt: Date.now(),
+			exit: null,
+			pendingUi: new Map(),
+			statuses: {},
+			widgets: {},
+			extensionTitle: "",
+		};
+		runtimes.set(id, runtime);
+		bridge.on("record", (record) => onRuntimeRecord(runtime, record));
+		bridge.on("exit", (info) => onRuntimeExit(runtime, info));
+		bridge.start();
+		return runtime;
+	}
+
+	/** @param {import("./pi-types.js").PiRecord} record */
+	function onRuntimeRecord(runtime, record) {
+		runtime.live.apply(record);
+		if (record.type === "session_info_changed") {
+			runtime.sessionName = record.name ?? "";
+		}
+		if (record.type === "agent_start") {
+			runtime.running = true;
+			if (!runtime.runStartedAt) runtime.runStartedAt = Date.now();
+		}
+		if (record.type === "agent_settled") {
+			runtime.running = false;
+			runtime.runStartedAt = null;
+			refreshRuntimeState(runtime).catch(() => {});
+		}
+		if (
+			record.type === "extension_ui_request" &&
+			["select", "confirm", "input", "editor"].includes(record.method)
+		) {
+			runtime.pendingUi.set(record.id, record);
+		}
+		if (record.type === "extension_ui_request") {
+			if (record.method === "setStatus") {
+				if (record.statusText) runtime.statuses[record.statusKey] = record.statusText;
+				else delete runtime.statuses[record.statusKey];
+			}
+			if (record.method === "setWidget") {
+				const key = record.widgetKey ?? "widget";
+				if (Array.isArray(record.widgetLines) && record.widgetLines.length) {
+					runtime.widgets[key] = record.widgetLines.join("\n");
+				} else {
+					delete runtime.widgets[key];
+				}
+			}
+			if (record.method === "setTitle") {
+				runtime.extensionTitle = record.title || "";
+			}
+		}
+
+		if (runtime !== activeRuntime) {
+			if (
+				[
+					"agent_start",
+					"agent_settled",
+					"session_info_changed",
+					"compaction_start",
+					"compaction_end",
+					"auto_retry_start",
+					"auto_retry_end",
+				].includes(record.type)
+			) {
+				broadcast({ type: "tinychat:runtime", runtime: runtimeSummary(runtime) });
+			}
+			return;
+		}
+
+		broadcast({
+			...record,
+			runtime: runtime.id,
+			...(record.type === "agent_start" ? { runStartedAt: runtime.runStartedAt } : {}),
+		});
+		if (record.type === "tool_execution_end" && record.toolName === PLAN_TOOL) {
+			broadcast({
+				type: "tinychat:plan",
+				runtime: runtime.id,
+				plan: normalizePlan(record.result?.details),
+			});
+		}
+		if (
+			record.type === "message_end" &&
+			record.message?.role === "toolResult" &&
+			record.message.toolName === PLAN_TOOL
+		) {
+			broadcast({
+				type: "tinychat:plan",
+				runtime: runtime.id,
+				plan: normalizePlan(record.message.details),
+			});
+		}
+		if (
+			record.type === "entry_appended" &&
+			record.entry?.type === "custom" &&
+			record.entry.customType === PLAN_STATE_ENTRY
+		) {
+			broadcast({
+				type: "tinychat:plan",
+				runtime: runtime.id,
+				plan: normalizePlan(record.entry.data),
+			});
+		}
+	}
+
+	function onRuntimeExit(runtime, info) {
+		runtime.live.reset();
+		runtime.running = false;
+		runtime.runStartedAt = null;
+		runtime.exit = info;
+		runtime.pendingUi.clear();
+		runtime.statuses = {};
+		runtime.widgets = {};
+		runtime.extensionTitle = "";
+		if (runtime === activeRuntime) {
+			broadcast({ type: "tinychat:exit", runtime: runtime.id, reason: info.reason });
+			return;
+		}
+		runtimes.delete(runtime.id);
+		broadcast({ type: "tinychat:runtime", runtime: runtimeSummary(runtime) });
+	}
+
+	async function startRuntime(options = {}) {
+		const runtime = makeRuntime(options);
+		try {
+			await waitForPi(runtime.bridge);
+			await refreshRuntimeState(runtime);
+			return runtime;
+		} catch (error) {
+			await runtime.bridge.stop().catch(() => {});
+			runtimes.delete(runtime.id);
+			throw error;
+		}
+	}
+
+	function activateRuntime(runtime) {
+		if (activeRuntime && activeRuntime !== runtime && activeRuntime.exit) {
+			runtimes.delete(activeRuntime.id);
+		}
+		activeRuntime = runtime;
+		return runtime;
+	}
+
+	function findRuntimeByPath(path) {
+		const key = sessionKey(path);
+		for (const runtime of runtimes.values()) {
+			if (runtime.exit) continue;
+			if (runtime.sessionFile && sessionKey(runtime.sessionFile) === key) return runtime;
+		}
+		return null;
+	}
+
+	async function runtimeForPath(path) {
+		const existing = findRuntimeByPath(path);
+		if (existing) return existing;
+		const key = sessionKey(path);
+		let pending = startingSessions.get(key);
+		if (!pending) {
+			pending = startRuntime({ sessionPath: path });
+			startingSessions.set(key, pending);
+			pending.then(
+				() => startingSessions.delete(key),
+				() => startingSessions.delete(key),
+			);
+		}
+		const runtime = await pending;
+		return findRuntimeByPath(path) ?? runtime;
+	}
+
+	function requireRuntime() {
+		if (!activeRuntime) throw new TinyChatError("server.notConnected");
+		if (activeRuntime.exit) throw new Error(activeRuntime.exit.reason);
+		return activeRuntime;
+	}
+
+	async function allSessions() {
+		await Promise.all(
+			[...runtimes.values()]
+				.filter((runtime) => runtime.bridge.running)
+				.map((runtime) => refreshRuntimeState(runtime)),
+		);
+		const currentId = activeRuntime?.sessionId ?? "";
+		const sessions = await listSessions({ cwd, currentId, env });
+		const bySessionId = new Map();
+		for (const runtime of runtimes.values()) {
+			if (runtime.sessionId && !runtime.exit) bySessionId.set(runtime.sessionId, runtime);
+		}
+		const represented = new Set(sessions.map((session) => session.id));
+		const live = [];
+		for (const runtime of runtimes.values()) {
+			if (!runtime.sessionId || runtime.exit || represented.has(runtime.sessionId)) continue;
+			live.push({
+				path: runtime.sessionFile,
+				id: runtime.sessionId,
+				name: runtime.sessionName,
+				preview: "",
+				created: "",
+				modified: new Date(runtime.startedAt).toISOString(),
+				size: 0,
+				current: runtime === activeRuntime,
+				runtime: runtime.id,
+				running: runtime.running,
+				live: true,
+			});
+		}
+		const all = [
+			...live.sort((a, b) => b.modified.localeCompare(a.modified)),
+			...sessions.map((session) => {
+				const runtime = bySessionId.get(session.id);
+				return {
+					...session,
+					runtime: runtime?.id ?? null,
+					running: Boolean(runtime?.running),
+					live: Boolean(runtime),
+				};
+			}),
+		];
+		return { sessions: all, total: all.length };
+	}
+
+	function broadcast(record) {
+		if (clients.size === 0) return;
+		const frame = `data: ${JSON.stringify(record)}\n\n`;
+		for (const client of clients) {
+			try {
+				client.write(frame);
+			} catch {
+				clients.delete(client);
+			}
+		}
+	}
+
+	async function snapshot() {
+		const runtime = requireRuntime();
+		const bridge = runtime.bridge;
+		const [state, messages, stats, models, levels, commands, entries] = await Promise.all([
+			bridge.request({ type: "get_state" }),
+			bridge.request({ type: "get_messages" }),
+			bridge.request({ type: "get_session_stats" }).catch(() => null),
+			bridge.request({ type: "get_available_models" }).catch(() => null),
+			bridge.request({ type: "get_available_thinking_levels" }).catch(() => null),
+			bridge.request({ type: "get_commands" }).catch(() => null),
+			bridge.request({ type: "get_entries" }).catch(() => null),
+		]);
+		if (state) {
+			runtime.sessionId = state.sessionId ?? runtime.sessionId;
+			if (state.sessionFile !== undefined) runtime.sessionFile = state.sessionFile;
+			if (state.sessionName !== undefined) runtime.sessionName = state.sessionName;
+			runtime.running = Boolean(state.isStreaming);
+			if (runtime.running && !runtime.runStartedAt) runtime.runStartedAt = Date.now();
+			if (!runtime.running) runtime.runStartedAt = null;
+		}
+		const compaction = await describeCompaction({ env, model: state?.model });
+		return {
+			runtime: runtime.id,
+			cwd,
+			state,
+			runStartedAt: runtime.runStartedAt,
+			live: runtime.live.snapshot(),
+			messages: Array.isArray(messages?.messages) ? messages.messages : [],
+			stats: stats ?? null,
+			models: (models?.models ?? []).map(publicModel),
+			levels: levels?.levels ?? ["off"],
+			commands: commands?.commands ?? [],
+			plan: entries ? planFromEntries(entries.entries, entries.leafId) : null,
+			pendingUi: [...runtime.pendingUi.values()],
+			statuses: { ...runtime.statuses },
+			widgets: { ...runtime.widgets },
+			extensionTitle: runtime.extensionTitle,
+			compaction,
+		};
+	}
+
+	async function currentModel() {
+		const state = await requireRuntime().bridge.request({ type: "get_state" });
+		if (!state?.model) throw new TinyChatError("server.noModel");
+		return state.model;
+	}
+
+	async function handleRpc(command) {
+		if (!command || typeof command !== "object" || typeof command.type !== "string") {
+			throw new TinyChatError("server.invalidCommand");
+		}
+
+		if (command.type === "tinychat:snapshot") return snapshot();
+		if (command.type === "tinychat:sessions") return await allSessions();
+		if (command.type === "tinychat:activate") {
+			const runtime = runtimes.get(String(command.runtimeId));
+			if (!runtime || runtime.exit) throw new TinyChatError("server.sessionNotFound");
+			activateRuntime(runtime);
+			return { runtime: runtime.id };
+		}
+		if (command.type === "tinychat:restart") {
+			const runtime = activeRuntime;
+			if (!runtime) throw new TinyChatError("server.notConnected");
+			runtime.pendingUi.clear();
+			runtime.statuses = {};
+			runtime.widgets = {};
+			runtime.extensionTitle = "";
+			runtime.exit = null;
+			await runtime.bridge.restart();
+			await waitForPi(runtime.bridge);
+			runtime.live.reset();
+			await refreshRuntimeState(runtime);
+			return { restarted: true };
+		}
+		if (command.type === "tinychat:delete_sessions") {
+			const all = command.all === true;
+			const ids = Array.isArray(command.ids)
+				? command.ids.filter((id) => typeof id === "string" && id)
+				: null;
+			if (!all && (!ids || ids.length === 0)) {
+				throw new TinyChatError("server.deleteTargetMissing");
+			}
+			const { targets, missing } = await resolveSessionTargets({
+				cwd,
+				ids,
+				all,
+				env,
+			});
+			const protectedPaths = new Set();
+			const protectedIds = new Set();
+			for (const runtime of runtimes.values()) {
+				if (runtime.exit) continue;
+				if (runtime !== activeRuntime && !runtime.running) continue;
+				if (runtime.sessionFile) protectedPaths.add(sessionKey(runtime.sessionFile));
+				if (runtime.sessionId) protectedIds.add(runtime.sessionId);
+			}
+
+			/** @type {{ id: string, error: string, errorKey?: string }[]} */
+			const failed = missing.map((id) => ({
+				id,
+				error: "server.sessionNotFound",
+				errorKey: "server.sessionNotFound",
+			}));
+			let deleted = 0;
+			for (const target of targets) {
+				if (
+					protectedPaths.has(sessionKey(target.path)) ||
+					protectedIds.has(target.id)
+				) {
+					failed.push({
+						id: target.id,
+						error: "server.sessionInUse",
+						errorKey: "server.sessionInUse",
+					});
+					continue;
+				}
+				const runtime =
+					findRuntimeByPath(target.path) ??
+					[...runtimes.values()].find(
+						(candidate) => !candidate.exit && candidate.sessionId === target.id,
+					);
+				if (runtime) {
+					if (runtime.running) {
+						failed.push({
+							id: target.id,
+							error: "server.sessionRunning",
+						});
+						continue;
+					}
+					// A background session may have been opened earlier in this
+					// Pi TinyChat run. Stop it before removing the file it writes to.
+					await runtime.bridge.stop().catch(() => {});
+					runtimes.delete(runtime.id);
+				}
+				try {
+					await deleteSessionFile({ cwd, path: target.path, env });
+					deleted += 1;
+				} catch (error) {
+					failed.push({ id: target.id, error: error.message });
+				}
+			}
+			return { deleted, failed };
+		}
+		if (command.type === "new_session") {
+			const runtime = await startRuntime();
+			activateRuntime(runtime);
+			return { cancelled: false, runtime: runtime.id };
+		}
+		if (command.type === "switch_session") {
+			if (typeof command.sessionPath !== "string") throw new TinyChatError("server.invalidPath");
+			const runtime = await runtimeForPath(command.sessionPath);
+			activateRuntime(runtime);
+			return { cancelled: false, runtime: runtime.id };
+		}
+		if (command.type === "tinychat:set_compaction") {
+			const model = await currentModel();
+			if (command.action === "enable") {
+				await setCompactionEnabled({ env, enabled: command.enabled !== false });
+			} else if (command.action === "clear") {
+				await clearCompactionThreshold({ env, model });
+			} else {
+				await setCompactionThreshold({
+					env,
+					model,
+					percent: Number(command.percent),
+				});
+			}
+			return { compaction: await describeCompaction({ env, model }) };
+		}
+		if (command.type === "tinychat:extension_ui_response") {
+			if (typeof command.id !== "string") throw new TinyChatError("server.invalidId");
+			const runtime = command.runtimeId
+				? runtimes.get(String(command.runtimeId))
+				: requireRuntime();
+			if (!runtime || runtime.exit) throw new TinyChatError("server.sessionNotFound");
+			const response = {
+				type: "extension_ui_response",
+				id: command.id,
+				...(command.cancelled
+					? { cancelled: true }
+					: command.confirmed !== undefined
+						? { confirmed: Boolean(command.confirmed) }
+						: { value: String(command.value ?? "") }),
+			};
+			runtime.pendingUi.delete(command.id);
+			runtime.bridge.sendRaw(response);
+			return { sent: true };
+		}
+		if (!FORWARDED.has(command.type)) throw new TinyChatError("server.unsupportedCommand");
+
+		const payload = { type: command.type };
+		if (command.type === "prompt" || command.type === "steer" || command.type === "follow_up") {
+			if (typeof command.message !== "string" || !command.message.trim()) {
+				throw new TinyChatError("server.invalidMessage");
+			}
+			payload.message = command.message;
+			const images = validateImages(command.images);
+			if (images) payload.images = images;
+			if (command.streamingBehavior) payload.streamingBehavior = command.streamingBehavior;
+		}
+		if (command.type === "set_model") {
+			if (typeof command.provider !== "string" || typeof command.modelId !== "string") {
+				throw new TinyChatError("server.invalidModel");
+			}
+			payload.provider = command.provider;
+			payload.modelId = command.modelId;
+		}
+		if (command.type === "set_thinking_level") {
+			if (typeof command.level !== "string") throw new TinyChatError("server.invalidLevel");
+			payload.level = command.level;
+		}
+		if (command.type === "set_session_name") {
+			if (typeof command.name !== "string") throw new TinyChatError("server.invalidName");
+			payload.name = command.name;
+		}
+		if (command.type === "compact" && typeof command.customInstructions === "string") {
+			payload.customInstructions = command.customInstructions;
+		}
+		return await requireRuntime().bridge.request(payload, {
+			timeout: RPC_TIMEOUTS[command.type] ?? DEFAULT_RPC_TIMEOUT,
+		});
+	}
+
+	function cookieToken(request) {
+		const header = request.headers.cookie;
+		if (typeof header !== "string") return null;
+		for (const part of header.split(";")) {
+			const separator = part.indexOf("=");
+			if (separator === -1) continue;
+			if (part.slice(0, separator).trim() !== "pi_tinychat") continue;
+			try {
+				return decodeURIComponent(part.slice(separator + 1).trim());
+			} catch {
+				return null;
+			}
+		}
+		return null;
+	}
+
+	function authorized(request, url) {
+		const header = request.headers["x-pi-tinychat-token"];
+		if (typeof header === "string" && header === token) return true;
+		if (cookieToken(request) === token) return true;
+		return (
+			url.searchParams.get("launch") === token || url.searchParams.get("token") === token
+		);
+	}
+
+	function hostAllowed(request) {
+		const header = request.headers.host;
+		if (!header) return false;
+		const match = /^(.*):(\d+)$/.exec(header);
+		if (!match) return false;
+		if (match[2] !== String(actualPort)) return false;
+		return match[1] === "127.0.0.1" || match[1] === "localhost" || match[1] === "[::1]";
+	}
+
+	function json(response, status, body) {
+		const payload = JSON.stringify(body);
+		response.writeHead(status, {
+			"content-type": "application/json; charset=utf-8",
+			"cache-control": "no-store",
+			"content-length": Buffer.byteLength(payload),
+		});
+		response.end(payload);
+	}
+
+	function readBody(request) {
+		return new Promise((resolve, reject) => {
+			let size = 0;
+			const chunks = [];
+			request.on("data", (chunk) => {
+				size += chunk.length;
+				if (size > MAX_BODY) {
+					reject(new TinyChatError("server.requestTooLarge"));
+					request.destroy();
+					return;
+				}
+				chunks.push(chunk);
+			});
+			request.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+			request.on("error", reject);
+		});
+	}
+
+	const server = createServer(async (request, response) => {
+		const url = new URL(request.url ?? "/", `http://${request.headers.host ?? host}`);
+
+		if (!hostAllowed(request)) {
+			response.writeHead(421, { "content-type": "text/plain; charset=utf-8" });
+			response.end("Misdirected request");
+			return;
+		}
+
+		if (
+			request.method === "GET" &&
+			url.pathname === "/" &&
+			(url.searchParams.has("launch") || url.searchParams.has("token"))
+		) {
+			if (!authorized(request, url)) {
+				response.writeHead(401, { "content-type": "text/plain; charset=utf-8" });
+				response.end("Unauthorized — open the URL printed by pi-tinychat");
+				return;
+			}
+			// Exchange the launch credential for a localhost cookie and redirect to
+			// a clean address. The credential itself stays as strong as before.
+			response.writeHead(303, {
+				location: "/",
+				"set-cookie": `pi_tinychat=${encodeURIComponent(token)}; HttpOnly; SameSite=Strict; Path=/; Max-Age=86400`,
+				"cache-control": "no-store",
+				"referrer-policy": "no-referrer",
+			});
+			response.end();
+			return;
+		}
+
+		if (url.pathname === "/api/events") {
+			if (!authorized(request, url)) {
+				response.writeHead(401, { "content-type": "text/plain; charset=utf-8" });
+				response.end("Unauthorized");
+				return;
+			}
+			response.writeHead(200, {
+				"content-type": "text/event-stream; charset=utf-8",
+				"cache-control": "no-store",
+				connection: "keep-alive",
+				"x-accel-buffering": "no",
+			});
+			response.write("retry: 3000\n\n");
+			response.write(`data: ${JSON.stringify({ type: "tinychat:hello", cwd })}\n\n`);
+			clients.add(response);
+			request.on("close", () => clients.delete(response));
+			response.on("error", () => clients.delete(response));
+			return;
+		}
+
+		if (request.method === "POST" && url.pathname === "/api/rpc") {
+			const origin = request.headers.origin;
+			if (origin && origin !== `http://${request.headers.host}`) {
+				json(response, 403, { ok: false, error: "Forbidden" });
+				return;
+			}
+			if (!authorized(request, url)) {
+				json(response, 401, { ok: false, error: "Unauthorized" });
+				return;
+			}
+			let command;
+			try {
+				command = JSON.parse(await readBody(request));
+			} catch (error) {
+				json(response, 400, { ok: false, error: error.message });
+				return;
+			}
+			try {
+				json(response, 200, { ok: true, data: await handleRpc(command) });
+			} catch (error) {
+				json(response, 200, {
+					ok: false,
+					error: error.message,
+					...(error instanceof TinyChatError
+						? { errorKey: error.key, errorParams: error.params }
+						: {}),
+				});
+			}
+			return;
+		}
+
+		if (request.method !== "GET" && request.method !== "HEAD") {
+			response.writeHead(405, { "content-type": "text/plain; charset=utf-8" });
+			response.end("Method not allowed");
+			return;
+		}
+
+		const asset = ASSETS[url.pathname];
+		if (!asset) {
+			response.writeHead(404, { "content-type": "text/plain; charset=utf-8" });
+			response.end("Not found");
+			return;
+		}
+		const [file, type] = asset;
+		// The HTML shell needs the session token; the assets it references do not
+		// contain any secret and are served without one so the page can boot.
+		const needsToken = type.startsWith("text/html");
+		if (needsToken && !authorized(request, url)) {
+			response.writeHead(401, { "content-type": "text/plain; charset=utf-8" });
+			response.end("Unauthorized — open the URL printed by pi-tinychat");
+			return;
+		}
+		response.writeHead(200, {
+			"content-type": type,
+			"cache-control": "no-store",
+			"content-security-policy": CONTENT_SECURITY_POLICY,
+			"referrer-policy": "no-referrer",
+			"x-content-type-options": "nosniff",
+		});
+		// Read on every request so UI edits show up on reload without a restart.
+		response.end(
+			request.method === "HEAD" ? undefined : await readFile(join(PUBLIC_DIR, file)),
+		);
+	});
+
+	const heartbeat = setInterval(() => {
+		for (const client of clients) {
+			try {
+				client.write(": ping\n\n");
+			} catch {
+				clients.delete(client);
+			}
+		}
+	}, HEARTBEAT_MS);
+	heartbeat.unref();
+
+	const lastPort = port === 0 ? 0 : Math.min(65535, port + portAttempts - 1);
+	let bound = false;
+	let listenError = null;
+	for (let candidate = port; candidate <= lastPort; candidate += 1) {
+		try {
+			await new Promise((resolve, reject) => {
+				const onError = (error) => reject(error);
+				server.once("error", onError);
+				server.listen(candidate, host, () => {
+					server.removeListener("error", onError);
+					resolve();
+				});
+			});
+			bound = true;
+			break;
+		} catch (error) {
+			listenError = error;
+			if (error.code !== "EADDRINUSE") {
+				clearInterval(heartbeat);
+				throw error;
+			}
+		}
+	}
+	if (!bound) {
+		clearInterval(heartbeat);
+		throw new Error(
+			port === 0
+				? `サーバーを起動できませんでした: ${listenError?.message ?? "unknown error"}`
+				: `ポート ${port}〜${lastPort} はすべて使用中です。--port で別のポートを指定してください。`,
+		);
+	}
+	const address = server.address();
+	actualPort = typeof address === "object" && address ? address.port : port;
+
+	try {
+		activateRuntime(await startRuntime({ initial: true }));
+	} catch (error) {
+		clearInterval(heartbeat);
+		server.close();
+		throw error;
+	}
+
+	return {
+		server,
+		token,
+		port: actualPort,
+		url: `http://${host}:${actualPort}/?launch=${encodeURIComponent(token)}`,
+		get sessionName() {
+			return activeRuntime?.sessionName;
+		},
+		async close() {
+			if (closing) return;
+			closing = true;
+			clearInterval(heartbeat);
+			for (const client of clients) {
+				try {
+					client.end();
+				} catch {
+					/* ignore */
+				}
+			}
+			clients.clear();
+			await Promise.all([...runtimes.values()].map((runtime) => runtime.bridge.stop()));
+			await new Promise((resolve) => server.close(resolve));
+		},
+	};
+}