pi2web 0.2.0 → 0.2.1

package/dist/server.js

@@ -3,19 +3,33 @@ import path from 'node:path';
 import { readFile } from 'node:fs/promises';
 import { fileURLToPath } from 'node:url';
 import { createRequire } from 'node:module';
-import { randomUUID } from 'node:crypto';
+import { createHash, randomUUID } from 'node:crypto';
 import { WebSocketServer, WebSocket } from 'ws';
 import { AuthStore } from './auth.js';
 import { WorkspaceStore } from './workspaces.js';
 import { AgentManager } from './agents.js';
+import { createSdkBackend } from './sdk-backend.js';
+import { listMcpServers, setMcpServerEnabled } from './mcp.js';
 import { TerminalManager } from './terminals.js';
 import { MetadataStore } from './metadata-store.js';
+import { CollabHub } from './collab/hub.js';
+import { CollabStore } from './collab/store.js';
+import { CollabRouter } from './collab/routes.js';
+import { CollabDispatcher } from './collab/dispatcher.js';
+import { DraftHub } from './drafts.js';
 import { SessionManager, VERSION as PI_VERSION } from '@earendil-works/pi-coding-agent';
 import pkg from '../package.json' with { type: 'json' };
+export const LOOPBACK_HOSTS = ['127.0.0.1', '::1', 'localhost'];
+const isLoopbackHost = (value) => { try {
+    return LOOPBACK_HOSTS.includes(new URL(`http://${value}`).hostname.replace(/^\[|\]$/g, ''));
+}
+catch {
+    return false;
+} };
 const json = (res, status, data) => { res.statusCode = status; res.setHeader('content-type', 'application/json'); res.end(JSON.stringify(data)); };
 const webRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../web'), require = createRequire(import.meta.url);
 const markedBrowser = path.join(path.dirname(require.resolve('marked/package.json')), 'lib', 'marked.umd.js');
-const webFiles = { '/': { file: 'index.html', type: 'text/html; charset=utf-8' }, '/index.html': { file: 'index.html', type: 'text/html; charset=utf-8' }, '/app.js': { file: 'app.js', type: 'text/javascript; charset=utf-8' }, '/styles.css': { file: 'styles.css', type: 'text/css; charset=utf-8' }, '/icon.svg': { file: 'icon.svg', type: 'image/svg+xml' }, '/favicon.ico': { file: 'icon.svg', type: 'image/svg+xml' }, '/vendor/xterm.js': { file: require.resolve('@xterm/xterm'), type: 'text/javascript; charset=utf-8' }, '/vendor/xterm.css': { file: require.resolve('@xterm/xterm/css/xterm.css'), type: 'text/css; charset=utf-8' }, '/vendor/addon-fit.js': { file: require.resolve('@xterm/addon-fit'), type: 'text/javascript; charset=utf-8' }, '/vendor/marked.js': { file: markedBrowser, type: 'text/javascript; charset=utf-8' }, '/vendor/dompurify.js': { file: require.resolve('dompurify/purify.min.js'), type: 'text/javascript; charset=utf-8' } };
+const webFiles = { '/': { file: 'index.html', type: 'text/html; charset=utf-8' }, '/index.html': { file: 'index.html', type: 'text/html; charset=utf-8' }, '/app.js': { file: 'app.js', type: 'text/javascript; charset=utf-8' }, '/backend-state.js': { file: 'backend-state.js', type: 'text/javascript; charset=utf-8' }, '/hid-keyboard.js': { file: 'hid-keyboard.js', type: 'text/javascript; charset=utf-8' }, '/collab': { file: 'collab.html', type: 'text/html; charset=utf-8' }, '/collab.html': { file: 'collab.html', type: 'text/html; charset=utf-8' }, '/collab.js': { file: 'collab.js', type: 'text/javascript; charset=utf-8' }, '/styles.css': { file: 'styles.css', type: 'text/css; charset=utf-8' }, '/icon.svg': { file: 'icon.svg', type: 'image/svg+xml' }, '/favicon.ico': { file: 'icon.svg', type: 'image/svg+xml' }, '/vendor/xterm.js': { file: require.resolve('@xterm/xterm'), type: 'text/javascript; charset=utf-8' }, '/vendor/xterm.css': { file: require.resolve('@xterm/xterm/css/xterm.css'), type: 'text/css; charset=utf-8' }, '/vendor/addon-fit.js': { file: require.resolve('@xterm/addon-fit'), type: 'text/javascript; charset=utf-8' }, '/vendor/marked.js': { file: markedBrowser, type: 'text/javascript; charset=utf-8' }, '/vendor/dompurify.js': { file: require.resolve('dompurify/purify.min.js'), type: 'text/javascript; charset=utf-8' } };
 export class RemotePiServer {
     server;
     wss;
@@ -24,55 +38,206 @@ export class RemotePiServer {
     agents;
     terminals;
     metadata;
+    collab;
+    collabRouter;
+    collabDispatcher;
+    unsubscribeCollab;
+    collabStallTimer;
+    collabMailAt = new Map();
+    collabMailCooldownMs = 5 * 60_000;
     opts;
+    noAuth;
+    allowInsecureNoAuth;
     dataDir;
     clients = new Set();
+    drafts = new DraftHub();
     unsubscribeMetadata;
     sessionIndexTimes = new Map();
     sessionIndexJobs = new Map();
     agentIndexJobs = new Map();
     voice;
+    sessionNamer;
     mailNotifier;
     loginFailures = new Map();
     loginWindowMs = 60_000;
     loginMaxFailures = 10;
     loginLockMs = 60_000;
     loginMaxLockMs = 15 * 60_000;
-    constructor(options = {}) { this.opts = { host: options.host ?? '127.0.0.1', port: options.port ?? 11318 }; this.dataDir = options.dataDir ?? path.join(process.env.HOME ?? '.', '.pi', 'remote-pi'); this.auth = new AuthStore(this.dataDir); this.metadata = new MetadataStore(this.dataDir); this.workspaces = options.workspaces ?? new WorkspaceStore(); this.agents = options.agents ?? new AgentManager(this.workspaces); this.terminals = options.terminals ?? new TerminalManager(this.workspaces); this.voice = options.voice; this.mailNotifier = options.mailNotifier; this.server = http.createServer((req, res) => void this.handle(req, res)); this.wss = new WebSocketServer({ noServer: true, maxPayload: 2 * 1024 * 1024 }); this.server.on('upgrade', (req, socket, head) => void this.upgrade(req, socket, head)); this.wss.on('connection', (ws, req) => { const match = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname.match(/^\/api\/v1\/terminals\/([^/]+)\/ws$/); match ? this.terminalConnection(ws, decodeURIComponent(match[1])) : this.connection(ws, req); }); }
-    async start() { const first = await this.auth.init(); this.metadata.init(); if (this.mailNotifier) {
-        const settings = this.metadata.getSetting('mailNotifications');
-        if (settings)
-            try {
-                this.mailNotifier.updateSettings(settings);
-            }
-            catch (error) {
-                console.error(`Ignoring invalid stored mail notification settings: ${error.message}`);
+    constructor(options = {}) { this.opts = { host: options.host ?? '127.0.0.1', port: options.port ?? 11318 }; this.noAuth = options.noAuth ?? false; this.allowInsecureNoAuth = options.allowInsecureNoAuth ?? false; this.dataDir = options.dataDir ?? path.join(process.env.HOME ?? '.', '.pi', 'remote-pi'); this.auth = new AuthStore(this.dataDir); this.metadata = new MetadataStore(this.dataDir); this.workspaces = options.workspaces ?? new WorkspaceStore(); this.voice = options.voice; this.sessionNamer = options.sessionNamer; this.mailNotifier = options.mailNotifier; this.collab = new CollabHub(new CollabStore(() => this.metadata.connection), { agentStatus: agentId => this.agentStatus(agentId) }); this.agents = options.agents ?? new AgentManager(this.workspaces, (agentId, cwd, sessionFile, profile) => createSdkBackend(agentId, cwd, sessionFile, profile, profile === 'collab' ? this.collabToolBridge() : undefined)); this.terminals = options.terminals ?? new TerminalManager(this.workspaces); this.collabRouter = new CollabRouter(this.collab, { resolveCwd: (workspaceId, relativeCwd) => this.resolveWorkspaceCwd(workspaceId, relativeCwd), verifyHuman: token => this.auth.verify(token), noAuth: this.noAuth, isCollabAgent: agentId => this.isCollabAgent(agentId) }); this.collabDispatcher = new CollabDispatcher(this.collab, { command: (agentId, kind, message) => this.agents.command(agentId, kind, message), agentStatus: agentId => this.agentStatus(agentId), isCollabAgent: agentId => this.isCollabAgent(agentId), log: message => console.error(message) }); this.server = http.createServer((req, res) => void this.handle(req, res)); this.wss = new WebSocketServer({ noServer: true, maxPayload: 2 * 1024 * 1024 }); this.server.on('upgrade', (req, socket, head) => void this.upgrade(req, socket, head)); this.wss.on('connection', (ws, req) => { const match = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname.match(/^\/api\/v1\/terminals\/([^/]+)\/ws$/); match ? this.terminalConnection(ws, decodeURIComponent(match[1])) : this.connection(ws, req); }); }
+    async start() {
+        if (this.allowInsecureNoAuth && !this.noAuth)
+            throw Object.assign(new Error('allowInsecureNoAuth requires noAuth (--allow-insecure-no-auth requires --no-auth)'), { code: 'INVALID_OPTIONS' });
+        if (this.noAuth && !this.allowInsecureNoAuth && !LOOPBACK_HOSTS.includes(this.opts.host))
+            throw Object.assign(new Error('noAuth requires a loopback host (127.0.0.1, ::1 or localhost); use --allow-insecure-no-auth (allowInsecureNoAuth: true) to explicitly allow remote access without authentication'), { code: 'INVALID_BIND_ADDRESS' });
+        if (this.allowInsecureNoAuth)
+            console.warn('WARNING: --allow-insecure-no-auth disables loopback bind and Host/Origin restrictions. Anyone who can reach this server, including through a web page, can access workspaces and control agents and terminals without a pairing code. Use only on a trusted, access-controlled network.');
+        const first = this.noAuth ? {} : await this.auth.init();
+        this.metadata.init();
+        this.collab.init();
+        this.unsubscribeCollab = this.collab.subscribe(event => this.collabNotification(event));
+        this.collabStallTimer = setInterval(() => { try {
+            this.collab.checkStalls();
+        }
+        catch (error) {
+            console.error(`Collaboration stall check failed: ${error.message}`);
+        } }, 60_000);
+        this.collabStallTimer.unref?.();
+        if (this.mailNotifier) {
+            const settings = this.metadata.getSetting('mailNotifications');
+            if (settings)
+                try {
+                    this.mailNotifier.updateSettings(settings);
+                }
+                catch (error) {
+                    console.error(`Ignoring invalid stored mail notification settings: ${error.message}`);
+                }
+        }
+        await this.loadMetadata();
+        // Only now: resuming a queued wake-up calls agents.command(), which fails with "unknown agent" until the
+        // persisted agents have been restored, and a failed dispatch is logged, not retried.
+        this.collabDispatcher.start();
+        this.unsubscribeMetadata = this.agents.subscribeAll((agentId, event) => {
+            const record = this.agents.get(agentId).record;
+            const applyName = async (name) => { if (this.agents.get(agentId).record.sessionName?.trim())
+                return; await this.agents.setSessionName(agentId, name); this.metadata.saveAgent(this.agents.get(agentId).record); };
+            // The namer owns naming whenever it is enabled, so the voice summary never races it for the same name.
+            this.sessionNamer?.handleAgentEvent(agentId, event.event, { sessionName: record.sessionName, setSessionName: applyName });
+            this.voice?.handleAgentEvent(agentId, event.event, { sessionName: record.sessionName, ...(this.sessionNamer ? {} : { setSessionName: applyName }) });
+            this.mailNotifier?.handleAgentEvent(agentId, event.event, { sessionName: record.sessionName, workspaceLabel: this.workspaces.get(record.workspaceId)?.label, cwd: record.cwd });
+            if (['message_end', 'agent_end', 'agent_settled', 'session_info_changed'].includes(String(event.event.type))) {
+                const record = this.agents.get(agentId).record;
+                this.metadata.scheduleAgent(record);
+                if (['agent_end', 'agent_settled', 'session_info_changed'].includes(String(event.event.type)))
+                    void this.indexAgentSession(agentId);
             }
-    } await this.loadMetadata(); this.unsubscribeMetadata = this.agents.subscribeAll((agentId, event) => { const record = this.agents.get(agentId).record; this.voice?.handleAgentEvent(agentId, event.event, { sessionName: record.sessionName, setSessionName: async (name) => { if (this.agents.get(agentId).record.sessionName?.trim())
-            return; await this.agents.setSessionName(agentId, name); } }); this.mailNotifier?.handleAgentEvent(agentId, event.event, { sessionName: record.sessionName, workspaceLabel: this.workspaces.get(record.workspaceId)?.label, cwd: record.cwd }); if (['message_end', 'agent_end', 'agent_settled', 'session_info_changed'].includes(String(event.event.type))) {
-        const record = this.agents.get(agentId).record;
-        this.metadata.scheduleAgent(record);
-        if (['agent_end', 'agent_settled', 'session_info_changed'].includes(String(event.event.type)))
-            void this.indexAgentSession(agentId);
-    } }); if (first.token)
-        console.log(`Remote Pi pairing code (shown once; save it securely): ${first.token}`); await new Promise(r => this.server.listen(this.opts.port, this.opts.host, r)); return this.address(); }
+        });
+        if (first.token)
+            console.log(`Remote Pi pairing code (shown once; save it securely): ${first.token}`);
+        await new Promise(r => this.server.listen(this.opts.port, this.opts.host, r));
+        return this.address();
+    }
     address() { const a = this.server.address(); return typeof a === 'object' && a ? { host: this.opts.host, port: a.port } : undefined; }
-    async stop() { this.unsubscribeMetadata?.(); this.unsubscribeMetadata = undefined; this.voice?.close(); await this.mailNotifier?.close(); await Promise.allSettled([...this.sessionIndexJobs.values(), ...this.agentIndexJobs.values()]); this.metadata.flush(); for (const c of this.clients)
+    /** URL an agent running on this machine can use to reach the hub. Wildcard binds are rewritten to loopback. */
+    publicBaseUrl() { const port = this.address()?.port ?? this.opts.port, host = ['0.0.0.0', '::', '::1', ''].includes(this.opts.host) ? '127.0.0.1' : this.opts.host; return `http://${host.includes(':') ? `[${host}]` : host}:${port}`; }
+    /** Lifecycle of a local Agent; undefined once it no longer exists. The hub uses it to tell "still working" from "never answered". */
+    agentStatus(agentId) { try {
+        return this.agents.get(agentId).record.status;
+    }
+    catch {
+        return undefined;
+    } }
+    /** A collaboration seat is only ever bound to an existing `profile=collab` Agent: anything else can never be woken. */
+    isCollabAgent(agentId) { try {
+        return this.agents.get(agentId).record.profile === 'collab';
+    }
+    catch {
+        return false;
+    } }
+    /** Pi extension bridge. It intentionally calls the hub in-process, so model context never contains tokens or URLs. */
+    collabToolBridge() {
+        return {
+            getTask: async (agentId) => this.collab.claimTaskForAgent(agentId),
+            submit: async (agentId, action, payload) => this.submitCollabTool(agentId, action, payload)
+        };
+    }
+    async submitCollabTool(agentId, action, payload) {
+        const participant = this.collab.participantForAgent(agentId);
+        switch (action) {
+            case 'ready': return this.collab.markImplementationReady(participant, payload);
+            case 'findings': return this.collab.submitFindings(participant, payload);
+            case 'issue_votes': return this.collab.submitIssueVotes(participant, payload);
+            case 'merge_votes': return this.collab.submitMergeVotes(participant, payload);
+            case 'issue_discussions': return this.collab.submitIssueDiscussions(participant, payload);
+            case 'nominations': return this.collab.submitNominations(participant, payload);
+            case 'votes': return this.collab.submitVotes(participant, payload);
+            case 'scores': return this.collab.submitScores(participant, payload);
+            case 'escalate': return this.collab.raiseEscalation(participant, payload);
+            case 'withdraw': {
+                const issueId = String(payload.issueId ?? '');
+                delete payload.issueId;
+                return this.collab.withdrawIssue(participant, issueId);
+            }
+            case 'debate_argument': {
+                const debateId = String(payload.debateId ?? '');
+                delete payload.debateId;
+                return this.collab.submitDebateArgument(participant, debateId, payload);
+            }
+            case 'debate_arguments': return this.collab.submitDebateArguments(participant, payload);
+        }
+    }
+    /** Escalations and stalls block the whole session, so a human is mailed the moment one appears. */
+    collabNotification(event) {
+        if (!this.mailNotifier)
+            return;
+        try {
+            if (event.type === 'escalation_raised') {
+                // Agents can raise escalations on their own, so one runaway session must not be able to flood the mailbox.
+                if (!this.allowCollabMail(event.sessionId))
+                    return;
+                const escalation = this.collab.getEscalation(String(event.payload.escalationId ?? '')), session = this.collab.getSession(event.sessionId);
+                const lines = [`协作会话：${session.title}（${session.kind}，phase=${session.phase}，round=${session.round}）`, `类型：${escalation.kind}｜紧急度：${escalation.urgency}`, `发起者：${escalation.raisedBy}`, '', `摘要：${escalation.summary}`, `待裁定问题：${escalation.question}`];
+                if (escalation.options.length)
+                    lines.push(`候选方案：${escalation.options.join(' / ')}`);
+                if (escalation.positions.length)
+                    lines.push('', '各方立场：', ...escalation.positions.map(position => `- ${position.participantId}（${position.stance}）：${position.rationale}`));
+                lines.push('', `处理入口：${this.publicBaseUrl()}/collab.html?session=${session.sessionId}`, `API：POST /api/v1/collab/escalations/${escalation.escalationId}/resolve`);
+                this.mailNotifier.notifyCollab({ subject: `[Remote Pi] 协作会话需要人工裁定：${session.title}`, text: lines.join('\n') });
+                return;
+            }
+            if (event.type === 'participant_overdue') {
+                if (!this.allowCollabMail(event.sessionId))
+                    return;
+                const session = this.collab.getSession(event.sessionId), waiting = event.payload.waitingOn ?? [];
+                const neverCollected = event.payload.reason === 'task_never_collected';
+                this.mailNotifier.notifyCollab({ subject: `[Remote Pi] 协作会话停滞：${session.title}`,
+                    text: [`协作会话：${session.title}（${session.kind}，phase=${session.phase}，round=${session.round}）`,
+                        neverCollected ? '任务已派发但从未送达：绑定的本机 Agent 可能已被删除或卡住，请在看板上把这个座位改绑到另一个 Agent。' : `已等待：${Math.round(Number(event.payload.overdueBySec ?? 0))} 秒`,
+                        `未提交的参与者：${waiting.join(', ') || '（未知）'}`, '', '中枢不会自动跳过任何人；如需推进请强制推进并说明理由。', `处理入口：${this.publicBaseUrl()}/collab.html?session=${session.sessionId}`].join('\n') });
+            }
+        }
+        catch (error) {
+            console.error(`Collaboration mail notification failed: ${error.message}`);
+        }
+    }
+    /** One collaboration mail per session per cooldown window; anything suppressed is still visible on the board. */
+    allowCollabMail(sessionId) {
+        const last = this.collabMailAt.get(sessionId) ?? 0, now = Date.now();
+        if (now - last < this.collabMailCooldownMs) {
+            console.error(`Collaboration mail for session ${sessionId} suppressed by the cooldown window; see /collab.html?session=${sessionId}`);
+            return false;
+        }
+        this.collabMailAt.set(sessionId, now);
+        if (this.collabMailAt.size > 500)
+            for (const [key, at] of this.collabMailAt)
+                if (now - at > this.collabMailCooldownMs)
+                    this.collabMailAt.delete(key);
+        return true;
+    }
+    async stop() { if (this.collabStallTimer)
+        clearInterval(this.collabStallTimer); this.collabStallTimer = undefined; this.unsubscribeCollab?.(); this.unsubscribeCollab = undefined; await this.collabDispatcher.stop(); this.collab.shutdown(); this.unsubscribeMetadata?.(); this.unsubscribeMetadata = undefined; this.voice?.close(); this.sessionNamer?.close(); await this.mailNotifier?.close(); await Promise.allSettled([...this.sessionIndexJobs.values(), ...this.agentIndexJobs.values()]); this.metadata.flush(); for (const c of this.clients)
         c.close(); for (const a of this.agents.list())
         await this.agents.dispose(a.agentId).catch(() => { }); this.terminals.closeAll(); this.wss.close(); await new Promise(r => this.server.close(() => r())); this.metadata.close(); }
     async upgrade(req, socket, head) { const protocol = req.headers['sec-websocket-protocol']; const wsToken = Array.isArray(protocol) ? protocol.find(x => x.startsWith('access-token.'))?.slice(13) : protocol?.split(',').map(x => x.trim()).find(x => x.startsWith('access-token.'))?.slice(13); const pathname = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname, isSocket = pathname === '/api/v1/ws' || /^\/api\/v1\/terminals\/[^/]+\/ws$/.test(pathname); if (!isSocket) {
         socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
         socket.destroy();
         return;
+    } if (this.noAuth && !this.allowInsecureNoAuth && !this.localRequest(req)) {
+        socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
+        socket.destroy();
+        return;
     } const key = this.clientKey(req), retryAfter = this.loginRetryAfterMs(key); if (retryAfter > 0) {
         socket.write(`HTTP/1.1 429 Too Many Requests\r\nRetry-After: ${Math.ceil(retryAfter / 1000)}\r\n\r\n`);
         socket.destroy();
         return;
-    } if (!(await this.authorized(req.headers.authorization)) && !(wsToken && await this.auth.verify(wsToken))) {
+    } const role = (await this.authRole(req.headers.authorization)) ?? (wsToken ? await this.auth.role(wsToken) : undefined); if (!role) {
         this.recordLoginFailure(key);
         socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
         socket.destroy();
         return;
+    } if (role === 'voice') {
+        socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
+        socket.destroy();
+        return;
     } this.loginFailures.delete(key); this.wss.handleUpgrade(req, socket, head, ws => this.wss.emit('connection', ws, req)); }
     clientKey(req) { return req.socket.remoteAddress ?? 'unknown'; }
     /** Rate limits pairing attempts per source address. Reverse proxies and tunnels share one bucket by design. */
@@ -91,46 +256,132 @@ export class RemotePiServer {
     connection(ws, _req) {
         this.clients.add(ws);
         const subscriptions = new Map();
-        const send = (message) => { if (ws.readyState === WebSocket.OPEN)
-            ws.send(JSON.stringify(message)); };
+        // Pi providers may emit one delta per character. Sending every delta as its own
+        // WebSocket frame is especially expensive over a high-latency/low-bandwidth
+        // link: agent_end gets stuck behind thousands of tiny frames. Coalesce adjacent
+        // text/thinking deltas while preserving their sequence cursor and event order.
+        let pendingDelta, deltaTimer;
+        const sendNow = (message) => { if (ws.readyState !== WebSocket.OPEN)
+            return; if (ws.bufferedAmount > 2 * 1024 * 1024) {
+            ws.close(1013, 'Agent client is too slow');
+            return;
+        } ws.send(JSON.stringify(message)); };
+        const flushDelta = () => { if (deltaTimer)
+            clearTimeout(deltaTimer); deltaTimer = undefined; if (pendingDelta) {
+            const message = pendingDelta;
+            pendingDelta = undefined;
+            sendNow(message);
+        } };
+        const send = (message) => { const update = message?.type === 'agent_event' && message.event?.type === 'message_update' ? message.event.assistantMessageEvent : undefined, isDelta = update && (update.type === 'text_delta' || update.type === 'thinking_delta') && typeof update.delta === 'string'; if (!isDelta) {
+            flushDelta();
+            sendNow(message);
+            return;
+        } const previous = pendingDelta?.event?.assistantMessageEvent; if (pendingDelta && pendingDelta.agentId === message.agentId && previous?.type === update.type) {
+            previous.delta += update.delta;
+            pendingDelta.eventId = message.eventId;
+            pendingDelta.sequence = message.sequence;
+            pendingDelta.timestamp = message.timestamp;
+        }
+        else {
+            flushDelta();
+            pendingDelta = { ...message, event: { ...message.event, assistantMessageEvent: { ...update } } };
+        } if (!deltaTimer)
+            deltaTimer = setTimeout(flushDelta, 40); };
         const unsubscribeVoice = this.voice?.subscribe((agentId, event) => { if (subscriptions.has('*') || subscriptions.has(agentId))
             send({ type: 'voice_event', agentId, event }); });
-        ws.on('close', () => { this.clients.delete(ws); unsubscribeVoice?.(); for (const unsubscribe of subscriptions.values())
+        const unsubscribeNamer = this.sessionNamer?.subscribe((agentId, event) => { if (subscriptions.has('*') || subscriptions.has(agentId))
+            send({ type: 'session_namer_event', agentId, event }); });
+        ws.on('close', () => { if (deltaTimer)
+            clearTimeout(deltaTimer); pendingDelta = undefined; this.clients.delete(ws); unsubscribeVoice?.(); unsubscribeNamer?.(); for (const unsubscribe of subscriptions.values())
             unsubscribe(); });
         ws.on('message', raw => {
             void (async () => {
                 let m;
                 try {
                     m = JSON.parse(raw.toString());
+                    if (m.type === 'subscribe_drafts') {
+                        subscriptions.get('drafts')?.();
+                        send({ type: 'subscribed_drafts', protocolVersion: 1 });
+                        subscriptions.set('drafts', this.drafts.subscribe((draft, replay) => send({ type: 'draft_event', draft, replay })));
+                        return;
+                    }
+                    if (m.type === 'draft_ack') {
+                        this.drafts.ack(String(m.id ?? ''));
+                        return;
+                    }
+                    if (m.type === 'subscribe_collab') {
+                        subscriptions.get('collab')?.();
+                        subscriptions.set('collab', this.collab.subscribe(event => send({ type: 'collab_event', event })));
+                        send({ type: 'subscribed_collab', protocolVersion: 1 });
+                        return;
+                    }
                     if (m.type === 'subscribe_all') {
                         subscriptions.get('*')?.();
-                        const forward = (agentId, e) => !subscriptions.has(agentId) && send({ type: 'agent_event', agentId, eventId: e.id, sequence: e.sequence, timestamp: e.timestamp, event: e.event });
+                        const forward = (agentId, e) => !subscriptions.has(agentId) && send({ type: 'agent_event', agentId, eventId: e.id, sequence: e.sequence, timestamp: e.timestamp, status: e.status, event: e.event });
                         subscriptions.set('*', this.agents.subscribeAll(forward));
                         send({ type: 'subscribed_all', protocolVersion: 1 });
                         return;
                     }
                     if (m.type === 'subscribe') {
-                        subscriptions.get(m.agentId)?.();
-                        const forward = (e) => send({ type: 'agent_event', agentId: m.agentId, eventId: e.id, sequence: e.sequence, timestamp: e.timestamp, event: e.event });
-                        subscriptions.set(m.agentId, this.agents.subscribe(m.agentId, forward));
-                        send({ type: 'subscribed', agentId: m.agentId, protocolVersion: 1, currentSequence: this.agents.currentSequence(m.agentId) });
-                        if (m.fromNow === true)
-                            return;
-                        const last = Number(m.lastSequence ?? 0);
-                        if (this.agents.hasReplayGap(m.agentId, last)) {
-                            const messageLimit = m.messageLimit === undefined ? undefined : Number(m.messageLimit);
-                            send({ type: 'agent_snapshot', agentId: m.agentId, ...await this.agents.snapshot(m.agentId, Number.isFinite(messageLimit) ? messageLimit : undefined) });
+                        const agentId = m.agentId, fromNow = m.fromNow === true;
+                        subscriptions.get(agentId)?.();
+                        const forward = (e) => send({ type: 'agent_event', agentId, eventId: e.id, sequence: e.sequence, timestamp: e.timestamp, status: e.status, event: e.event });
+                        let ready = false, active = true;
+                        const unsubscribe = this.agents.subscribe(agentId, e => { if (ready)
+                            forward(e); });
+                        const stop = () => { active = false; ready = false; unsubscribe(); };
+                        subscriptions.set(agentId, stop);
+                        try {
+                            send({ type: 'subscribed', agentId, protocolVersion: 1, currentSequence: this.agents.currentSequence(agentId) });
+                            if (!fromNow) {
+                                const last = Number(m.lastSequence ?? 0), replay = this.agents.events(agentId, last);
+                                if (this.agents.hasReplayGap(agentId, last) || replay.length > 250) {
+                                    const messageLimit = m.messageLimit === undefined ? undefined : Number(m.messageLimit);
+                                    const snapshot = await this.agents.snapshot(agentId, Number.isFinite(messageLimit) ? messageLimit : undefined);
+                                    if (!active)
+                                        return; // Closed or replaced by a newer subscription while awaiting messages.
+                                    // Do not forward live events ahead of the snapshot. Catch up from the
+                                    // existing bounded replay cache instead of maintaining another buffer.
+                                    const updates = this.agents.events(agentId, snapshot.lastSequence);
+                                    if (this.agents.hasReplayGap(agentId, snapshot.lastSequence) || (updates.length && updates[0].sequence !== snapshot.lastSequence + 1)) {
+                                        stop();
+                                        ws.close(1013, 'Replay gap during snapshot');
+                                        return;
+                                    }
+                                    send({ type: 'agent_snapshot', agentId, ...snapshot });
+                                    for (const event of updates)
+                                        forward(event);
+                                }
+                                else
+                                    for (const event of replay)
+                                        forward(event);
+                            }
+                            // Refresh/reconnect may already have a saved cursor but no in-memory
+                            // activity. Send the current IDs after replay, even if replay was empty.
+                            send({ type: 'agent_state', agentId, sequence: this.agents.currentSequence(agentId), state: this.agents.snapshotState(agentId) });
+                            ready = true;
+                        }
+                        catch (error) {
+                            if (!active)
+                                return;
+                            stop();
+                            if (subscriptions.get(agentId) === stop)
+                                subscriptions.delete(agentId);
+                            throw error;
                         }
-                        else
-                            for (const e of this.agents.events(m.agentId, last))
-                                forward(e);
                         return;
                     }
                     if (['prompt', 'steer', 'follow-up', 'abort'].includes(m.type)) {
-                        if (m.type !== 'abort')
+                        if (m.type !== 'abort') {
                             this.voice?.recordUserPrompt(m.agentId, String(m.message ?? ''));
-                        await this.agents.command(m.agentId, m.type, m.message);
-                        send({ type: 'command_result', requestId: m.requestId, success: true });
+                            this.sessionNamer?.recordUserPrompt(m.agentId, String(m.message ?? ''));
+                        }
+                        const disposition = await this.agents.command(m.agentId, m.type, m.message);
+                        send({ type: 'command_result', requestId: m.requestId, success: true, disposition });
+                        return;
+                    }
+                    if (m.type === 'clear-queue') {
+                        send({ type: 'command_result', requestId: m.requestId, success: true, queue: await this.agents.clearQueue(m.agentId) });
                         return;
                     }
                     throw new Error('Unknown command');
@@ -187,14 +438,34 @@ export class RemotePiServer {
         this.metadata.scheduleAgent(record);
     }
     catch { /* Session files may not exist until the first assistant response is persisted. */ } })().finally(() => this.agentIndexJobs.delete(agentId)); this.agentIndexJobs.set(agentId, job); return job; }
-    async authorized(value) { return !!value && value.startsWith('Bearer ') && this.auth.verify(value.slice(7)); }
-    async serveWeb(pathname, res) { const asset = webFiles[pathname]; if (!asset)
+    async resolveWorkspaceCwd(workspaceId, relativeCwd) { const workspace = this.workspaces.get(workspaceId); if (!workspace)
+        throw Object.assign(new Error('Workspace not found'), { code: 'WORKSPACE_NOT_FOUND' }); return this.workspaces.resolve(workspace, relativeCwd || '.'); }
+    /** Without a pairing code the only boundary left is the browser's: loopback Host and, if sent, a loopback Origin. */
+    localRequest(req) { if (!isLoopbackHost(String(req.headers.host ?? '')))
+        return false; const origin = String(req.headers.origin ?? ''); if (!origin)
+        return true; try {
+        return isLoopbackHost(new URL(origin).host);
+    }
+    catch {
+        return false;
+    } }
+    async authRole(value) { if (this.noAuth)
+        return 'full'; return value?.startsWith('Bearer ') ? this.auth.role(value.slice(7)) : undefined; }
+    async serveWeb(pathname, req, res) { const asset = webFiles[pathname]; if (!asset)
         return false; try {
-        const content = await readFile(path.isAbsolute(asset.file) ? asset.file : path.join(webRoot, asset.file));
-        res.statusCode = 200;
+        const content = await readFile(path.isAbsolute(asset.file) ? asset.file : path.join(webRoot, asset.file)), etag = `"${createHash('sha256').update(content).digest('base64url')}"`, ifNoneMatch = String(req.headers['if-none-match'] ?? '').split(',').map(value => value.trim().replace(/^W\//, ''));
         res.setHeader('content-type', asset.type);
-        res.setHeader('cache-control', 'no-cache');
+        res.setHeader('cache-control', pathname.startsWith('/vendor/') ? 'public, max-age=86400' : 'no-cache');
+        res.setHeader('etag', etag);
         res.setHeader('x-content-type-options', 'nosniff');
+        if (this.noAuth && asset.type.startsWith('text/html'))
+            res.setHeader('content-security-policy', "frame-ancestors 'self'");
+        if (ifNoneMatch.includes(etag) || ifNoneMatch.includes('*')) {
+            res.statusCode = 304;
+            res.end();
+            return true;
+        }
+        res.statusCode = 200;
         res.end(content);
     }
     catch {
@@ -209,16 +480,23 @@ export class RemotePiServer {
             throw Object.assign(new Error('Request too large'), { code: 'REQUEST_TOO_LARGE' });
         chunks.push(chunk);
     } return Buffer.concat(chunks); }
-    async handle(req, res) { const requestId = randomUUID(); res.setHeader('x-request-id', requestId); res.setHeader('access-control-allow-origin', '*'); res.setHeader('access-control-allow-headers', 'Authorization,Content-Type,X-Audio-Filename'); res.setHeader('access-control-allow-methods', 'GET,POST,DELETE,OPTIONS'); try {
+    async handle(req, res) { const requestId = randomUUID(); res.setHeader('x-request-id', requestId); if (this.noAuth) {
+        if (!this.allowInsecureNoAuth && !this.localRequest(req))
+            return json(res, 403, { error: { code: 'FORBIDDEN', message: 'Without authentication only loopback requests are served', requestId } });
+        if (req.headers.origin)
+            res.setHeader('access-control-allow-origin', String(req.headers.origin));
+    }
+    else
+        res.setHeader('access-control-allow-origin', '*'); res.setHeader('access-control-allow-headers', 'Authorization,Content-Type,X-Audio-Filename'); res.setHeader('access-control-allow-methods', 'GET,POST,PUT,DELETE,OPTIONS'); try {
         if (req.method === 'OPTIONS') {
             res.statusCode = 204;
             return res.end();
         }
         const u = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
-        if (req.method === 'GET' && await this.serveWeb(u.pathname, res))
+        if (req.method === 'GET' && await this.serveWeb(u.pathname, req, res))
             return;
         if (req.method === 'GET' && u.pathname === '/health')
-            return json(res, 200, { data: { status: 'ok' } });
+            return json(res, 200, { data: { status: 'ok', authRequired: !this.noAuth } });
         const parts = u.pathname.split('/').filter(Boolean);
         if (req.method === 'POST' && u.pathname === '/api/v1/auth/login') {
             const key = this.clientKey(req), retryAfter = this.loginRetryAfterMs(key);
@@ -236,10 +514,42 @@ export class RemotePiServer {
                 res.setHeader('retry-after', String(Math.ceil(lockedFor / 1000)));
             return json(res, 401, { error: { code: 'UNAUTHORIZED', message: 'Invalid token', requestId } });
         }
-        if (!(await this.authorized(req.headers.authorization)))
+        if (parts[0] === 'api' && parts[1] === 'v1' && parts[2] === 'collab') {
+            const key = this.clientKey(req), retryAfter = this.loginRetryAfterMs(key);
+            if (retryAfter > 0) {
+                res.setHeader('retry-after', String(Math.ceil(retryAfter / 1000)));
+                return json(res, 429, { error: { code: 'TOO_MANY_ATTEMPTS', message: `Too many failed attempts. Retry in ${Math.ceil(retryAfter / 1000)} seconds`, requestId } });
+            }
+            const header = String(req.headers.authorization ?? ''), token = header.startsWith('Bearer ') ? header.slice(7) : '';
+            const result = await this.collabRouter.handle({ method: req.method ?? 'GET', url: u, parts, token, body: () => this.body(req) });
+            if (!result)
+                return json(res, 404, { error: { code: 'NOT_FOUND', message: 'Not found', requestId } });
+            if (result.authFailed)
+                this.recordLoginFailure(key);
+            else
+                this.loginFailures.delete(key);
+            return json(res, result.status, result.payload);
+        }
+        const role = await this.authRole(req.headers.authorization);
+        if (!role)
             return json(res, 401, { error: { code: 'UNAUTHORIZED', message: 'Authentication required', requestId } });
+        if (role === 'voice' && !(req.method === 'POST' && u.pathname === '/api/v1/draft' || req.method === 'GET' && u.pathname === '/api/v1/system/status'))
+            return json(res, 403, { error: { code: 'FORBIDDEN', message: 'This token cannot access this endpoint', requestId } });
+        if (req.method === 'POST' && u.pathname === '/api/v1/draft') {
+            const b = await this.body(req), text = typeof b?.text === 'string' ? b.text : '';
+            if (!text.trim())
+                return json(res, 400, { error: { code: 'INVALID_REQUEST', message: 'text is required', requestId } });
+            if (text.length > 20000)
+                return json(res, 413, { error: { code: 'REQUEST_TOO_LARGE', message: 'text is too long', requestId } });
+            if (b.agentId !== undefined || b.target !== undefined)
+                return json(res, 400, { error: { code: 'INVALID_REQUEST', message: 'draft targets are not supported', requestId } });
+            if (b.mode !== undefined && b.mode !== 'append' && b.mode !== 'replace')
+                return json(res, 400, { error: { code: 'INVALID_REQUEST', message: 'mode must be append or replace', requestId } });
+            const { draft, delivered } = this.drafts.add({ text, mode: b.mode ?? 'append', source: typeof b.source === 'string' ? b.source.slice(0, 32) : undefined });
+            return json(res, 200, { data: { id: draft.id, mode: draft.mode, delivered, queued: true } });
+        }
         if (req.method === 'GET' && u.pathname === '/api/v1/system/status')
-            return json(res, 200, { data: { version: pkg.version, protocolVersion: 1, piVersion: PI_VERSION, nodeVersion: process.version, uptimeSeconds: Math.floor(process.uptime()), agentCount: this.agents.list().length, terminalCount: this.terminals.list().length, webSocketConnections: this.clients.size, voiceEnabled: !!this.voice, voiceCapabilities: this.voice?.capabilities() ?? { tts: false, stt: false }, mailNotificationsConfigured: !!this.mailNotifier, mailNotificationsEnabled: this.mailNotifier?.getSettings().enabled ?? false } });
+            return json(res, 200, { data: { version: pkg.version, protocolVersion: 1, authRequired: !this.noAuth, piVersion: PI_VERSION, nodeVersion: process.version, uptimeSeconds: Math.floor(process.uptime()), agentCount: this.agents.list().length, terminalCount: this.terminals.list().length, webSocketConnections: this.clients.size, voiceEnabled: !!this.voice, voiceCapabilities: this.voice?.capabilities() ?? { tts: false, stt: false }, sessionNamingEnabled: !!this.sessionNamer, mailNotificationsConfigured: !!this.mailNotifier, mailNotificationsEnabled: this.mailNotifier?.getSettings().enabled ?? false } });
         if (req.method === 'GET' && u.pathname === '/api/v1/mail-notifications')
             return json(res, 200, { data: { available: !!this.mailNotifier, settings: this.mailNotifier?.getSettings() ?? null } });
         if (req.method === 'POST' && u.pathname === '/api/v1/mail-notifications') {
@@ -263,6 +573,11 @@ export class RemotePiServer {
                     throw Object.assign(new Error('includeSessionDetails must be a boolean'), { code: 'INVALID_MAIL_NOTIFICATION_SETTINGS' });
                 patch.includeSessionDetails = b.includeSessionDetails;
             }
+            if ('collabEscalations' in b) {
+                if (typeof b.collabEscalations !== 'boolean')
+                    throw Object.assign(new Error('collabEscalations must be a boolean'), { code: 'INVALID_MAIL_NOTIFICATION_SETTINGS' });
+                patch.collabEscalations = b.collabEscalations;
+            }
             const settings = this.mailNotifier.updateSettings(patch);
             this.metadata.setSetting('mailNotifications', settings);
             return json(res, 200, { data: { available: true, settings } });
@@ -308,10 +623,16 @@ export class RemotePiServer {
                 return json(res, 200, { data: { closed: true } });
             }
         }
+        if (req.method === 'GET' && u.pathname === '/api/v1/agents/models') {
+            const workspaceId = u.searchParams.get('workspaceId') ?? '', relativeCwd = u.searchParams.get('relativeCwd') ?? '.';
+            return json(res, 200, { data: await this.agents.capabilityPreview(workspaceId, relativeCwd) });
+        }
         if (req.method === 'GET' && u.pathname === '/api/v1/agents')
             return json(res, 200, { data: this.agents.list() });
         if (req.method === 'POST' && u.pathname === '/api/v1/agents') {
-            const b = await this.body(req);
+            const b = await this.body(req), profile = b.profile === undefined ? 'default' : b.profile;
+            if (profile !== 'default' && profile !== 'collab')
+                throw Object.assign(new Error('profile must be default or collab'), { code: 'INVALID_REQUEST' });
             let sessionFile;
             if (b.sessionFile) {
                 const workspace = this.workspaces.get(b.workspaceId);
@@ -323,9 +644,26 @@ export class RemotePiServer {
                     throw Object.assign(new Error('Session is not valid for cwd'), { code: 'SESSION_NOT_FOUND' });
                 sessionFile = b.sessionFile;
             }
-            const agent = await this.agents.create(b.workspaceId, b.relativeCwd ?? '.', sessionFile);
-            this.metadata.saveAgent(agent);
-            return json(res, 201, { data: agent });
+            const agent = await this.agents.create(b.workspaceId, b.relativeCwd ?? '.', sessionFile, profile);
+            try {
+                if (b.model !== undefined) {
+                    if (!b.model || typeof b.model.provider !== 'string' || typeof b.model.modelId !== 'string')
+                        throw Object.assign(new Error('model.provider and model.modelId are required'), { code: 'INVALID_REQUEST' });
+                    await this.agents.setModel(agent.agentId, b.model.provider, b.model.modelId);
+                }
+                if (b.sessionName !== undefined) {
+                    if (typeof b.sessionName !== 'string')
+                        throw Object.assign(new Error('sessionName must be a string'), { code: 'INVALID_REQUEST' });
+                    await this.agents.setSessionName(agent.agentId, b.sessionName);
+                }
+                const configured = this.agents.get(agent.agentId).record;
+                this.metadata.saveAgent(configured);
+                return json(res, 201, { data: { ...configured } });
+            }
+            catch (error) {
+                await this.agents.remove(agent.agentId).catch(() => { });
+                throw error;
+            }
         }
         if (parts[2] === 'agents') {
             const id = parts[3];
@@ -386,6 +724,42 @@ export class RemotePiServer {
                 this.metadata.saveAgent(agent.agent);
                 return json(res, 201, { data: agent });
             }
+            if (req.method === 'GET' && parts[4] === 'commands')
+                return json(res, 200, { data: await this.agents.listCommands(id) });
+            if (req.method === 'POST' && parts[4] === 'bash') {
+                const b = await this.body(req);
+                if (typeof b.command !== 'string')
+                    throw Object.assign(new Error('command must be a string'), { code: 'INVALID_REQUEST' });
+                const command = b.command.trim();
+                if (!command)
+                    throw Object.assign(new Error('command is required'), { code: 'INVALID_REQUEST' });
+                if (command.length > 8000)
+                    throw Object.assign(new Error('command is too long'), { code: 'INVALID_REQUEST' });
+                const result = await this.agents.runBash(id, command, b.excludeFromContext === true);
+                this.metadata.scheduleAgent(this.agents.get(id).record);
+                return json(res, 200, { data: result });
+            }
+            if (req.method === 'POST' && parts[4] === 'bash-abort') {
+                await this.agents.abortBash(id);
+                return json(res, 200, { data: { aborted: true } });
+            }
+            if (parts[4] === 'queue') {
+                if (req.method === 'GET')
+                    return json(res, 200, { data: await this.agents.queue(id) });
+                if (req.method === 'DELETE')
+                    return json(res, 200, { data: await this.agents.clearQueue(id) });
+            }
+            if (parts[4] === 'mcp') {
+                const cwd = this.agents.get(id).record.cwd;
+                if (req.method === 'GET')
+                    return json(res, 200, { data: listMcpServers(cwd) });
+                if (req.method === 'POST') {
+                    const b = await this.body(req);
+                    if (typeof b.name !== 'string' || typeof b.enabled !== 'boolean')
+                        throw Object.assign(new Error('name and enabled are required'), { code: 'INVALID_MCP_REQUEST' });
+                    return json(res, 200, { data: setMcpServerEnabled(cwd, b.name, b.enabled) });
+                }
+            }
             if (req.method === 'POST' && parts[4] === 'extension-response') {
                 const b = await this.body(req);
                 await this.agents.extensionResponse(id, b.requestId, b.value);
@@ -400,14 +774,16 @@ export class RemotePiServer {
             }
             if (req.method === 'POST' && ['prompt', 'steer', 'follow-up', 'abort'].includes(parts[4])) {
                 const b = await this.body(req);
-                if (parts[4] !== 'abort')
+                if (parts[4] !== 'abort') {
                     this.voice?.recordUserPrompt(id, String(b.message ?? ''));
-                await this.agents.command(id, parts[4], b.message ?? '');
+                    this.sessionNamer?.recordUserPrompt(id, String(b.message ?? ''));
+                }
+                const disposition = await this.agents.command(id, parts[4], b.message ?? '');
                 const record = this.agents.get(id).record;
                 this.metadata.scheduleAgent(record);
                 if (parts[4] === 'prompt')
                     void this.indexAgentSession(id);
-                return json(res, 200, { data: { success: true } });
+                return json(res, 200, { data: { success: true, disposition } });
             }
         }
         return json(res, 404, { error: { code: 'NOT_FOUND', message: 'Not found', requestId } });