pi2web 0.2.0 → 0.2.6

package/dist/server.js

@@ -1,21 +1,32 @@
 import http from 'node:http';
 import path from 'node:path';
-import { readFile } from 'node:fs/promises';
-import { fileURLToPath } from 'node:url';
-import { createRequire } from 'node:module';
 import { randomUUID } from 'node:crypto';
-import { WebSocketServer, WebSocket } from 'ws';
+import { WebSocketServer } from 'ws';
 import { AuthStore } from './auth.js';
 import { WorkspaceStore } from './workspaces.js';
 import { AgentManager } from './agents.js';
+import { createSdkBackend } from './sdk-backend.js';
 import { TerminalManager } from './terminals.js';
 import { MetadataStore } from './metadata-store.js';
+import { CollabHub } from './collab/hub.js';
+import { CollabStore } from './collab/store.js';
+import { CollabRouter } from './collab/routes.js';
+import { CollabDispatcher } from './collab/dispatcher.js';
+import { DraftHub } from './drafts.js';
+import { AGENT_TEMPLATES_DIR, defaultDataDir } from './paths.js';
+import { AgentTemplateStore } from './agent-templates.js';
 import { SessionManager, VERSION as PI_VERSION } from '@earendil-works/pi-coding-agent';
 import pkg from '../package.json' with { type: 'json' };
-const json = (res, status, data) => { res.statusCode = status; res.setHeader('content-type', 'application/json'); res.end(JSON.stringify(data)); };
-const webRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../web'), require = createRequire(import.meta.url);
-const markedBrowser = path.join(path.dirname(require.resolve('marked/package.json')), 'lib', 'marked.umd.js');
-const webFiles = { '/': { file: 'index.html', type: 'text/html; charset=utf-8' }, '/index.html': { file: 'index.html', type: 'text/html; charset=utf-8' }, '/app.js': { file: 'app.js', type: 'text/javascript; charset=utf-8' }, '/styles.css': { file: 'styles.css', type: 'text/css; charset=utf-8' }, '/icon.svg': { file: 'icon.svg', type: 'image/svg+xml' }, '/favicon.ico': { file: 'icon.svg', type: 'image/svg+xml' }, '/vendor/xterm.js': { file: require.resolve('@xterm/xterm'), type: 'text/javascript; charset=utf-8' }, '/vendor/xterm.css': { file: require.resolve('@xterm/xterm/css/xterm.css'), type: 'text/css; charset=utf-8' }, '/vendor/addon-fit.js': { file: require.resolve('@xterm/addon-fit'), type: 'text/javascript; charset=utf-8' }, '/vendor/marked.js': { file: markedBrowser, type: 'text/javascript; charset=utf-8' }, '/vendor/dompurify.js': { file: require.resolve('dompurify/purify.min.js'), type: 'text/javascript; charset=utf-8' } };
+import { LOOPBACK_HOSTS, errorStatus, isLoopbackHost, json, readBinaryBody, readJsonBody } from './http/utils.js';
+import { serveWebAsset } from './http/web-assets.js';
+import { LoginLimiter } from './http/login-limiter.js';
+import { handleAgentSocket, PROTOCOL_VERSION } from './ws/agent-socket.js';
+import { handleTerminalSocket } from './ws/terminal-socket.js';
+import { handleAgentRoutes } from './http/agent-routes.js';
+import { handleMailSettingsRoutes } from './http/mail-settings-routes.js';
+import { handleWorkspaceRoutes } from './http/workspace-routes.js';
+import { handleSystemPromptRoutes } from './http/system-prompt-routes.js';
+export { LOOPBACK_HOSTS };
 export class RemotePiServer {
     server;
     wss;
@@ -24,396 +35,585 @@ export class RemotePiServer {
     agents;
     terminals;
     metadata;
+    templates;
+    collab;
+    collabRouter;
+    collabDispatcher;
+    unsubscribeCollab;
+    collabStallTimer;
+    collabMailAt = new Map();
+    collabMailCooldownMs = 5 * 60_000;
     opts;
+    noAuth;
+    allowInsecureNoAuth;
     dataDir;
     clients = new Set();
+    drafts = new DraftHub();
     unsubscribeMetadata;
     sessionIndexTimes = new Map();
     sessionIndexJobs = new Map();
     agentIndexJobs = new Map();
     voice;
+    sessionNamer;
     mailNotifier;
-    loginFailures = new Map();
-    loginWindowMs = 60_000;
-    loginMaxFailures = 10;
-    loginLockMs = 60_000;
-    loginMaxLockMs = 15 * 60_000;
-    constructor(options = {}) { this.opts = { host: options.host ?? '127.0.0.1', port: options.port ?? 11318 }; this.dataDir = options.dataDir ?? path.join(process.env.HOME ?? '.', '.pi', 'remote-pi'); this.auth = new AuthStore(this.dataDir); this.metadata = new MetadataStore(this.dataDir); this.workspaces = options.workspaces ?? new WorkspaceStore(); this.agents = options.agents ?? new AgentManager(this.workspaces); this.terminals = options.terminals ?? new TerminalManager(this.workspaces); this.voice = options.voice; this.mailNotifier = options.mailNotifier; this.server = http.createServer((req, res) => void this.handle(req, res)); this.wss = new WebSocketServer({ noServer: true, maxPayload: 2 * 1024 * 1024 }); this.server.on('upgrade', (req, socket, head) => void this.upgrade(req, socket, head)); this.wss.on('connection', (ws, req) => { const match = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname.match(/^\/api\/v1\/terminals\/([^/]+)\/ws$/); match ? this.terminalConnection(ws, decodeURIComponent(match[1])) : this.connection(ws, req); }); }
-    async start() { const first = await this.auth.init(); this.metadata.init(); if (this.mailNotifier) {
-        const settings = this.metadata.getSetting('mailNotifications');
-        if (settings)
+    loginLimiter = new LoginLimiter();
+    constructor(options = {}) {
+        this.opts = { host: options.host ?? '127.0.0.1', port: options.port ?? 11318 };
+        this.noAuth = options.noAuth ?? false;
+        this.allowInsecureNoAuth = options.allowInsecureNoAuth ?? false;
+        this.dataDir = options.dataDir ?? defaultDataDir();
+        this.auth = new AuthStore(this.dataDir);
+        this.metadata = new MetadataStore(this.dataDir);
+        this.templates = new AgentTemplateStore(path.join(this.dataDir, AGENT_TEMPLATES_DIR));
+        this.workspaces = options.workspaces ?? new WorkspaceStore();
+        this.voice = options.voice;
+        this.sessionNamer = options.sessionNamer;
+        this.mailNotifier = options.mailNotifier;
+        this.collab = new CollabHub(new CollabStore(() => this.metadata.connection), {
+            agentStatus: agentId => this.agentStatus(agentId)
+        });
+        this.agents =
+            options.agents ??
+                new AgentManager(this.workspaces, (agentId, cwd, sessionFile, profile, backendOptions) => createSdkBackend(agentId, cwd, sessionFile, profile, profile === 'collab' ? this.collabToolBridge() : undefined, backendOptions));
+        this.terminals = options.terminals ?? new TerminalManager(this.workspaces);
+        this.collabRouter = new CollabRouter(this.collab, {
+            resolveCwd: (workspaceId, relativeCwd) => this.resolveWorkspaceCwd(workspaceId, relativeCwd),
+            verifyHuman: token => this.auth.verify(token),
+            noAuth: this.noAuth,
+            isCollabAgent: agentId => this.isCollabAgent(agentId)
+        });
+        this.collabDispatcher = new CollabDispatcher(this.collab, {
+            command: (agentId, kind, message) => this.agents.command(agentId, kind, message),
+            agentStatus: agentId => this.agentStatus(agentId),
+            isCollabAgent: agentId => this.isCollabAgent(agentId),
+            log: message => console.error(message)
+        });
+        this.server = http.createServer((req, res) => void this.handle(req, res));
+        this.wss = new WebSocketServer({ noServer: true, maxPayload: 2 * 1024 * 1024 });
+        this.server.on('upgrade', (req, socket, head) => void this.upgrade(req, socket, head));
+        this.wss.on('connection', (ws, req) => {
+            const match = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname.match(/^\/api\/v1\/terminals\/([^/]+)\/ws$/);
+            if (match)
+                handleTerminalSocket({ terminals: this.terminals, clients: this.clients }, ws, decodeURIComponent(match[1]));
+            else
+                handleAgentSocket({
+                    agents: this.agents,
+                    drafts: this.drafts,
+                    collab: this.collab,
+                    voice: this.voice,
+                    sessionNamer: this.sessionNamer,
+                    clients: this.clients
+                }, ws);
+        });
+    }
+    async start() {
+        if (this.allowInsecureNoAuth && !this.noAuth)
+            throw Object.assign(new Error('allowInsecureNoAuth requires noAuth (--allow-insecure-no-auth requires --no-auth)'), { code: 'INVALID_OPTIONS' });
+        if (this.noAuth && !this.allowInsecureNoAuth && !LOOPBACK_HOSTS.includes(this.opts.host))
+            throw Object.assign(new Error('noAuth requires a loopback host (127.0.0.1, ::1 or localhost); use --allow-insecure-no-auth (allowInsecureNoAuth: true) to explicitly allow remote access without authentication'), { code: 'INVALID_BIND_ADDRESS' });
+        if (this.allowInsecureNoAuth)
+            console.warn('WARNING: --allow-insecure-no-auth disables loopback bind and Host/Origin restrictions. Anyone who can reach this server, including through a web page, can access workspaces and control agents and terminals without a pairing code. Use only on a trusted, access-controlled network.');
+        const first = this.noAuth ? {} : await this.auth.init();
+        this.metadata.init();
+        this.collab.init();
+        this.unsubscribeCollab = this.collab.subscribe(event => this.collabNotification(event));
+        this.collabStallTimer = setInterval(() => {
             try {
-                this.mailNotifier.updateSettings(settings);
+                this.collab.checkStalls();
             }
             catch (error) {
-                console.error(`Ignoring invalid stored mail notification settings: ${error.message}`);
+                console.error(`Collaboration stall check failed: ${error.message}`);
             }
-    } await this.loadMetadata(); this.unsubscribeMetadata = this.agents.subscribeAll((agentId, event) => { const record = this.agents.get(agentId).record; this.voice?.handleAgentEvent(agentId, event.event, { sessionName: record.sessionName, setSessionName: async (name) => { if (this.agents.get(agentId).record.sessionName?.trim())
-            return; await this.agents.setSessionName(agentId, name); } }); this.mailNotifier?.handleAgentEvent(agentId, event.event, { sessionName: record.sessionName, workspaceLabel: this.workspaces.get(record.workspaceId)?.label, cwd: record.cwd }); if (['message_end', 'agent_end', 'agent_settled', 'session_info_changed'].includes(String(event.event.type))) {
-        const record = this.agents.get(agentId).record;
-        this.metadata.scheduleAgent(record);
-        if (['agent_end', 'agent_settled', 'session_info_changed'].includes(String(event.event.type)))
-            void this.indexAgentSession(agentId);
-    } }); if (first.token)
-        console.log(`Remote Pi pairing code (shown once; save it securely): ${first.token}`); await new Promise(r => this.server.listen(this.opts.port, this.opts.host, r)); return this.address(); }
-    address() { const a = this.server.address(); return typeof a === 'object' && a ? { host: this.opts.host, port: a.port } : undefined; }
-    async stop() { this.unsubscribeMetadata?.(); this.unsubscribeMetadata = undefined; this.voice?.close(); await this.mailNotifier?.close(); await Promise.allSettled([...this.sessionIndexJobs.values(), ...this.agentIndexJobs.values()]); this.metadata.flush(); for (const c of this.clients)
-        c.close(); for (const a of this.agents.list())
-        await this.agents.dispose(a.agentId).catch(() => { }); this.terminals.closeAll(); this.wss.close(); await new Promise(r => this.server.close(() => r())); this.metadata.close(); }
-    async upgrade(req, socket, head) { const protocol = req.headers['sec-websocket-protocol']; const wsToken = Array.isArray(protocol) ? protocol.find(x => x.startsWith('access-token.'))?.slice(13) : protocol?.split(',').map(x => x.trim()).find(x => x.startsWith('access-token.'))?.slice(13); const pathname = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname, isSocket = pathname === '/api/v1/ws' || /^\/api\/v1\/terminals\/[^/]+\/ws$/.test(pathname); if (!isSocket) {
-        socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
-        socket.destroy();
-        return;
-    } const key = this.clientKey(req), retryAfter = this.loginRetryAfterMs(key); if (retryAfter > 0) {
-        socket.write(`HTTP/1.1 429 Too Many Requests\r\nRetry-After: ${Math.ceil(retryAfter / 1000)}\r\n\r\n`);
-        socket.destroy();
-        return;
-    } if (!(await this.authorized(req.headers.authorization)) && !(wsToken && await this.auth.verify(wsToken))) {
-        this.recordLoginFailure(key);
-        socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
-        socket.destroy();
-        return;
-    } this.loginFailures.delete(key); this.wss.handleUpgrade(req, socket, head, ws => this.wss.emit('connection', ws, req)); }
-    clientKey(req) { return req.socket.remoteAddress ?? 'unknown'; }
-    /** Rate limits pairing attempts per source address. Reverse proxies and tunnels share one bucket by design. */
-    loginRetryAfterMs(key) { const entry = this.loginFailures.get(key); if (!entry)
-        return 0; const now = Date.now(); if (entry.lockedUntil > now)
-        return entry.lockedUntil - now; if (entry.expiresAt <= now)
-        this.loginFailures.delete(key); return 0; }
-    recordLoginFailure(key) { const now = Date.now(); if (this.loginFailures.size > 1000)
-        for (const [id, value] of this.loginFailures)
-            if (value.expiresAt <= now && value.lockedUntil <= now)
-                this.loginFailures.delete(id); const entry = this.loginFailures.get(key); if (!entry || (entry.expiresAt <= now && entry.lockedUntil <= now)) {
-        this.loginFailures.set(key, { count: 1, expiresAt: now + this.loginWindowMs, lockedUntil: 0, lockLevel: 0 });
-        return 0;
-    } entry.count += 1; entry.expiresAt = now + this.loginWindowMs; if (entry.count < this.loginMaxFailures)
-        return 0; entry.count = 0; entry.lockLevel = Math.min(entry.lockLevel + 1, 5); entry.lockedUntil = now + Math.min(this.loginLockMs * 2 ** (entry.lockLevel - 1), this.loginMaxLockMs); entry.expiresAt = entry.lockedUntil + this.loginWindowMs; return entry.lockedUntil - now; }
-    connection(ws, _req) {
-        this.clients.add(ws);
-        const subscriptions = new Map();
-        const send = (message) => { if (ws.readyState === WebSocket.OPEN)
-            ws.send(JSON.stringify(message)); };
-        const unsubscribeVoice = this.voice?.subscribe((agentId, event) => { if (subscriptions.has('*') || subscriptions.has(agentId))
-            send({ type: 'voice_event', agentId, event }); });
-        ws.on('close', () => { this.clients.delete(ws); unsubscribeVoice?.(); for (const unsubscribe of subscriptions.values())
-            unsubscribe(); });
-        ws.on('message', raw => {
-            void (async () => {
-                let m;
+        }, 60_000);
+        this.collabStallTimer.unref?.();
+        if (this.mailNotifier) {
+            const settings = this.metadata.getSetting('mailNotifications');
+            if (settings)
                 try {
-                    m = JSON.parse(raw.toString());
-                    if (m.type === 'subscribe_all') {
-                        subscriptions.get('*')?.();
-                        const forward = (agentId, e) => !subscriptions.has(agentId) && send({ type: 'agent_event', agentId, eventId: e.id, sequence: e.sequence, timestamp: e.timestamp, event: e.event });
-                        subscriptions.set('*', this.agents.subscribeAll(forward));
-                        send({ type: 'subscribed_all', protocolVersion: 1 });
-                        return;
-                    }
-                    if (m.type === 'subscribe') {
-                        subscriptions.get(m.agentId)?.();
-                        const forward = (e) => send({ type: 'agent_event', agentId: m.agentId, eventId: e.id, sequence: e.sequence, timestamp: e.timestamp, event: e.event });
-                        subscriptions.set(m.agentId, this.agents.subscribe(m.agentId, forward));
-                        send({ type: 'subscribed', agentId: m.agentId, protocolVersion: 1, currentSequence: this.agents.currentSequence(m.agentId) });
-                        if (m.fromNow === true)
-                            return;
-                        const last = Number(m.lastSequence ?? 0);
-                        if (this.agents.hasReplayGap(m.agentId, last)) {
-                            const messageLimit = m.messageLimit === undefined ? undefined : Number(m.messageLimit);
-                            send({ type: 'agent_snapshot', agentId: m.agentId, ...await this.agents.snapshot(m.agentId, Number.isFinite(messageLimit) ? messageLimit : undefined) });
-                        }
-                        else
-                            for (const e of this.agents.events(m.agentId, last))
-                                forward(e);
-                        return;
-                    }
-                    if (['prompt', 'steer', 'follow-up', 'abort'].includes(m.type)) {
-                        if (m.type !== 'abort')
-                            this.voice?.recordUserPrompt(m.agentId, String(m.message ?? ''));
-                        await this.agents.command(m.agentId, m.type, m.message);
-                        send({ type: 'command_result', requestId: m.requestId, success: true });
-                        return;
-                    }
-                    throw new Error('Unknown command');
+                    this.mailNotifier.updateSettings(settings);
                 }
-                catch (e) {
-                    send({ type: 'command_result', requestId: m?.requestId, success: false, error: { code: e.code ?? 'BAD_REQUEST', message: e instanceof SyntaxError ? 'Invalid JSON' : e.message } });
+                catch (error) {
+                    console.error(`Ignoring invalid stored mail notification settings: ${error.message}`);
                 }
-            })();
+        }
+        await this.loadMetadata();
+        // Only now: resuming a queued wake-up calls agents.command(), which fails with "unknown agent" until the
+        // persisted agents have been restored, and a failed dispatch is logged, not retried.
+        this.collabDispatcher.start();
+        this.unsubscribeMetadata = this.agents.subscribeAll((agentId, event) => {
+            const record = this.agents.get(agentId).record;
+            const applyName = async (name) => {
+                if (this.agents.get(agentId).record.sessionName?.trim())
+                    return;
+                await this.agents.setSessionName(agentId, name);
+                this.metadata.saveAgent(this.agents.get(agentId).record);
+            };
+            // The namer owns naming whenever it is enabled, so the voice summary never races it for the same name.
+            this.sessionNamer?.handleAgentEvent(agentId, event.event, {
+                sessionName: record.sessionName,
+                setSessionName: applyName
+            });
+            this.voice?.handleAgentEvent(agentId, event.event, {
+                sessionName: record.sessionName,
+                ...(this.sessionNamer ? {} : { setSessionName: applyName })
+            });
+            this.mailNotifier?.handleAgentEvent(agentId, event.event, {
+                sessionName: record.sessionName,
+                workspaceLabel: this.workspaces.get(record.workspaceId)?.label,
+                cwd: record.cwd
+            });
+            if (['message_end', 'agent_end', 'agent_settled', 'session_info_changed'].includes(String(event.event.type))) {
+                const record = this.agents.get(agentId).record;
+                this.metadata.scheduleAgent(record);
+                if (['agent_end', 'agent_settled', 'session_info_changed'].includes(String(event.event.type)))
+                    void this.indexAgentSession(agentId);
+            }
         });
+        if (first.token)
+            console.log(`Remote Pi pairing code (shown once; save it securely): ${first.token}`);
+        await new Promise(r => this.server.listen(this.opts.port, this.opts.host, r));
+        return this.address();
     }
-    terminalConnection(ws, terminalId) { this.clients.add(ws); let unsubscribe = () => { }; ws.on('close', () => { this.clients.delete(ws); unsubscribe(); }); try {
-        const send = (message) => { if (ws.readyState !== WebSocket.OPEN)
-            return; if (ws.bufferedAmount > 1024 * 1024) {
-            ws.close(1013, 'Terminal client is too slow');
-            return;
-        } ws.send(JSON.stringify(message)); };
-        unsubscribe = this.terminals.subscribe(terminalId, event => { send(event); if (event.type === 'exit')
-            setTimeout(() => ws.close(), 50); });
-        const snapshot = this.terminals.snapshot(terminalId);
-        send({ type: 'snapshot', data: snapshot.data, record: snapshot.record });
-        ws.on('message', raw => { try {
-            const message = JSON.parse(raw.toString());
-            if (message.type === 'input')
-                this.terminals.write(terminalId, message.data);
-            else if (message.type === 'resize')
-                this.terminals.resize(terminalId, Number(message.cols), Number(message.rows));
-            else
-                throw new Error('Unknown terminal command');
-        }
-        catch (error) {
-            send({ type: 'error', message: error.message });
-        } });
+    address() {
+        const a = this.server.address();
+        return typeof a === 'object' && a ? { host: this.opts.host, port: a.port } : undefined;
     }
-    catch (error) {
-        ws.send(JSON.stringify({ type: 'error', message: error.message }));
-        ws.close();
-    } }
-    async loadMetadata() { let workspaces = this.metadata.listWorkspaces(); if (!workspaces.length) {
-        for (const workspace of this.workspaces.list())
-            this.metadata.saveWorkspace(workspace);
-        workspaces = this.metadata.listWorkspaces();
-    } this.workspaces.replace(workspaces); let agents = this.metadata.listAgents(); if (!agents.length) {
-        for (const agent of this.agents.list())
-            this.metadata.saveAgent(agent);
-        agents = this.metadata.listAgents();
-    } await this.agents.restore(agents); }
-    async ensureSessionIndex(workspace, cwd, force = false) { const key = `${workspace.id}:${cwd}`, last = this.sessionIndexTimes.get(key) ?? 0; if (!force && Date.now() - last < 30000)
-        return; const existing = this.sessionIndexJobs.get(key); if (existing)
-        return existing; const job = (async () => { const sessions = await SessionManager.list(cwd); this.metadata.syncSessions(workspace.id, cwd, sessions); this.sessionIndexTimes.set(key, Date.now()); })().finally(() => this.sessionIndexJobs.delete(key)); this.sessionIndexJobs.set(key, job); return job; }
-    async indexAgentSession(agentId) { const existing = this.agentIndexJobs.get(agentId); if (existing)
-        return existing; const job = (async () => { try {
-        const record = this.agents.get(agentId).record, summary = await this.agents.sessionInfo(agentId);
-        this.metadata.upsertSessionFromAgent(record, summary);
-        this.metadata.scheduleAgent(record);
+    /** URL an agent running on this machine can use to reach the hub. Wildcard binds are rewritten to loopback. */
+    publicBaseUrl() {
+        const port = this.address()?.port ?? this.opts.port, host = ['0.0.0.0', '::', '::1', ''].includes(this.opts.host) ? '127.0.0.1' : this.opts.host;
+        return `http://${host.includes(':') ? `[${host}]` : host}:${port}`;
     }
-    catch { /* Session files may not exist until the first assistant response is persisted. */ } })().finally(() => this.agentIndexJobs.delete(agentId)); this.agentIndexJobs.set(agentId, job); return job; }
-    async authorized(value) { return !!value && value.startsWith('Bearer ') && this.auth.verify(value.slice(7)); }
-    async serveWeb(pathname, res) { const asset = webFiles[pathname]; if (!asset)
-        return false; try {
-        const content = await readFile(path.isAbsolute(asset.file) ? asset.file : path.join(webRoot, asset.file));
-        res.statusCode = 200;
-        res.setHeader('content-type', asset.type);
-        res.setHeader('cache-control', 'no-cache');
-        res.setHeader('x-content-type-options', 'nosniff');
-        res.end(content);
+    /** Lifecycle of a local Agent; undefined once it no longer exists. The hub uses it to tell "still working" from "never answered". */
+    agentStatus(agentId) {
+        try {
+            return this.agents.get(agentId).record.status;
+        }
+        catch {
+            return undefined;
+        }
     }
-    catch {
-        json(res, 500, { error: { code: 'WEB_UI_UNAVAILABLE', message: 'Web UI files are missing. Reinstall the pi2web package.' } });
-    } return true; }
-    /** Reads a JSON body as bytes so the size limit applies while streaming and multi-byte characters are never split across chunks. */
-    async body(req, maxBytes = 2 * 1024 * 1024) { const raw = await this.binaryBody(req, maxBytes); return raw.length ? JSON.parse(raw.toString('utf8')) : {}; }
-    async binaryBody(req, maxBytes = 25 * 1024 * 1024) { const chunks = []; let size = 0; for await (const value of req) {
-        const chunk = Buffer.isBuffer(value) ? value : Buffer.from(value);
-        size += chunk.length;
-        if (size > maxBytes)
-            throw Object.assign(new Error('Request too large'), { code: 'REQUEST_TOO_LARGE' });
-        chunks.push(chunk);
-    } return Buffer.concat(chunks); }
-    async handle(req, res) { const requestId = randomUUID(); res.setHeader('x-request-id', requestId); res.setHeader('access-control-allow-origin', '*'); res.setHeader('access-control-allow-headers', 'Authorization,Content-Type,X-Audio-Filename'); res.setHeader('access-control-allow-methods', 'GET,POST,DELETE,OPTIONS'); try {
-        if (req.method === 'OPTIONS') {
-            res.statusCode = 204;
-            return res.end();
+    /** A collaboration seat is only ever bound to an existing `profile=collab` Agent: anything else can never be woken. */
+    isCollabAgent(agentId) {
+        try {
+            return this.agents.get(agentId).record.profile === 'collab';
         }
-        const u = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
-        if (req.method === 'GET' && await this.serveWeb(u.pathname, res))
-            return;
-        if (req.method === 'GET' && u.pathname === '/health')
-            return json(res, 200, { data: { status: 'ok' } });
-        const parts = u.pathname.split('/').filter(Boolean);
-        if (req.method === 'POST' && u.pathname === '/api/v1/auth/login') {
-            const key = this.clientKey(req), retryAfter = this.loginRetryAfterMs(key);
-            if (retryAfter > 0) {
-                res.setHeader('retry-after', String(Math.ceil(retryAfter / 1000)));
-                return json(res, 429, { error: { code: 'TOO_MANY_ATTEMPTS', message: `Too many failed pairing attempts. Retry in ${Math.ceil(retryAfter / 1000)} seconds`, requestId } });
+        catch {
+            return false;
+        }
+    }
+    /** Pi extension bridge. It intentionally calls the hub in-process, so model context never contains tokens or URLs. */
+    collabToolBridge() {
+        return {
+            getTask: async (agentId) => this.collab.claimTaskForAgent(agentId),
+            submit: async (agentId, action, payload) => this.submitCollabTool(agentId, action, payload)
+        };
+    }
+    async submitCollabTool(agentId, action, payload) {
+        const participant = this.collab.participantForAgent(agentId);
+        switch (action) {
+            case 'ready':
+                return this.collab.markImplementationReady(participant, payload);
+            case 'findings':
+                return this.collab.submitFindings(participant, payload);
+            case 'issue_votes':
+                return this.collab.submitIssueVotes(participant, payload);
+            case 'merge_votes':
+                return this.collab.submitMergeVotes(participant, payload);
+            case 'issue_discussions':
+                return this.collab.submitIssueDiscussions(participant, payload);
+            case 'nominations':
+                return this.collab.submitNominations(participant, payload);
+            case 'votes':
+                return this.collab.submitVotes(participant, payload);
+            case 'scores':
+                return this.collab.submitScores(participant, payload);
+            case 'escalate':
+                return this.collab.raiseEscalation(participant, payload);
+            case 'withdraw': {
+                const issueId = String(payload.issueId ?? '');
+                delete payload.issueId;
+                return this.collab.withdrawIssue(participant, issueId);
             }
-            const b = await this.body(req);
-            if (await this.auth.verify(String(b.token ?? ''))) {
-                this.loginFailures.delete(key);
-                return json(res, 200, { data: { authenticated: true } });
+            case 'debate_argument': {
+                const debateId = String(payload.debateId ?? '');
+                delete payload.debateId;
+                return this.collab.submitDebateArgument(participant, debateId, payload);
             }
-            const lockedFor = this.recordLoginFailure(key);
-            if (lockedFor > 0)
-                res.setHeader('retry-after', String(Math.ceil(lockedFor / 1000)));
-            return json(res, 401, { error: { code: 'UNAUTHORIZED', message: 'Invalid token', requestId } });
+            case 'debate_arguments':
+                return this.collab.submitDebateArguments(participant, payload);
         }
-        if (!(await this.authorized(req.headers.authorization)))
-            return json(res, 401, { error: { code: 'UNAUTHORIZED', message: 'Authentication required', requestId } });
-        if (req.method === 'GET' && u.pathname === '/api/v1/system/status')
-            return json(res, 200, { data: { version: pkg.version, protocolVersion: 1, piVersion: PI_VERSION, nodeVersion: process.version, uptimeSeconds: Math.floor(process.uptime()), agentCount: this.agents.list().length, terminalCount: this.terminals.list().length, webSocketConnections: this.clients.size, voiceEnabled: !!this.voice, voiceCapabilities: this.voice?.capabilities() ?? { tts: false, stt: false }, mailNotificationsConfigured: !!this.mailNotifier, mailNotificationsEnabled: this.mailNotifier?.getSettings().enabled ?? false } });
-        if (req.method === 'GET' && u.pathname === '/api/v1/mail-notifications')
-            return json(res, 200, { data: { available: !!this.mailNotifier, settings: this.mailNotifier?.getSettings() ?? null } });
-        if (req.method === 'POST' && u.pathname === '/api/v1/mail-notifications') {
-            if (!this.mailNotifier)
-                throw Object.assign(new Error('MailDispatch is not configured at server startup'), { code: 'MAIL_NOTIFICATIONS_DISABLED' });
-            const b = await this.body(req), patch = {};
-            if ('enabled' in b) {
-                if (typeof b.enabled !== 'boolean')
-                    throw Object.assign(new Error('enabled must be a boolean'), { code: 'INVALID_MAIL_NOTIFICATION_SETTINGS' });
-                patch.enabled = b.enabled;
-            }
-            if ('aggregationDelaySeconds' in b)
-                patch.aggregationDelaySeconds = Number(b.aggregationDelaySeconds);
-            if ('includeResponse' in b) {
-                if (typeof b.includeResponse !== 'boolean')
-                    throw Object.assign(new Error('includeResponse must be a boolean'), { code: 'INVALID_MAIL_NOTIFICATION_SETTINGS' });
-                patch.includeResponse = b.includeResponse;
+    }
+    /** Escalations and stalls block the whole session, so a human is mailed the moment one appears. */
+    collabNotification(event) {
+        if (!this.mailNotifier)
+            return;
+        try {
+            if (event.type === 'escalation_raised') {
+                // Agents can raise escalations on their own, so one runaway session must not be able to flood the mailbox.
+                if (!this.allowCollabMail(event.sessionId))
+                    return;
+                const escalation = this.collab.getEscalation(String(event.payload.escalationId ?? '')), session = this.collab.getSession(event.sessionId);
+                const lines = [
+                    `协作会话：${session.title}（${session.kind}，phase=${session.phase}，round=${session.round}）`,
+                    `类型：${escalation.kind}｜紧急度：${escalation.urgency}`,
+                    `发起者：${escalation.raisedBy}`,
+                    '',
+                    `摘要：${escalation.summary}`,
+                    `待裁定问题：${escalation.question}`
+                ];
+                if (escalation.options.length)
+                    lines.push(`候选方案：${escalation.options.join(' / ')}`);
+                if (escalation.positions.length)
+                    lines.push('', '各方立场：', ...escalation.positions.map(position => `- ${position.participantId}（${position.stance}）：${position.rationale}`));
+                lines.push('', `处理入口：${this.publicBaseUrl()}/collab.html?session=${session.sessionId}`, `API：POST /api/v1/collab/escalations/${escalation.escalationId}/resolve`);
+                this.mailNotifier.notifyCollab({
+                    subject: `[Remote Pi] 协作会话需要人工裁定：${session.title}`,
+                    text: lines.join('\n')
+                });
+                return;
             }
-            if ('includeSessionDetails' in b) {
-                if (typeof b.includeSessionDetails !== 'boolean')
-                    throw Object.assign(new Error('includeSessionDetails must be a boolean'), { code: 'INVALID_MAIL_NOTIFICATION_SETTINGS' });
-                patch.includeSessionDetails = b.includeSessionDetails;
+            if (event.type === 'participant_overdue') {
+                if (!this.allowCollabMail(event.sessionId))
+                    return;
+                const session = this.collab.getSession(event.sessionId), waiting = event.payload.waitingOn ?? [];
+                const neverCollected = event.payload.reason === 'task_never_collected';
+                this.mailNotifier.notifyCollab({
+                    subject: `[Remote Pi] 协作会话停滞：${session.title}`,
+                    text: [
+                        `协作会话：${session.title}（${session.kind}，phase=${session.phase}，round=${session.round}）`,
+                        neverCollected
+                            ? '任务已派发但从未送达：绑定的本机 Agent 可能已被删除或卡住，请在看板上把这个座位改绑到另一个 Agent。'
+                            : `已等待：${Math.round(Number(event.payload.overdueBySec ?? 0))} 秒`,
+                        `未提交的参与者：${waiting.join(', ') || '（未知）'}`,
+                        '',
+                        '中枢不会自动跳过任何人；如需推进请强制推进并说明理由。',
+                        `处理入口：${this.publicBaseUrl()}/collab.html?session=${session.sessionId}`
+                    ].join('\n')
+                });
             }
-            const settings = this.mailNotifier.updateSettings(patch);
-            this.metadata.setSetting('mailNotifications', settings);
-            return json(res, 200, { data: { available: true, settings } });
         }
-        if (req.method === 'GET' && u.pathname === '/api/v1/workspaces')
-            return json(res, 200, { data: this.workspaces.list() });
-        if (req.method === 'POST' && u.pathname === '/api/v1/workspaces') {
-            const b = await this.body(req);
-            if (typeof b.label !== 'string' || typeof b.rootPath !== 'string')
-                return json(res, 400, { error: { code: 'INVALID_REQUEST', message: 'label and rootPath required', requestId } });
-            const workspace = this.workspaces.add(b.label, b.rootPath);
-            this.metadata.saveWorkspace(workspace);
-            return json(res, 201, { data: workspace });
+        catch (error) {
+            console.error(`Collaboration mail notification failed: ${error.message}`);
         }
-        if (parts[2] === 'workspaces' && parts[4] === 'tree' && req.method === 'GET')
-            return json(res, 200, { data: await this.workspaces.tree(parts[3], u.searchParams.get('path') ?? '.') });
-        if (parts[2] === 'workspaces' && parts[4] === 'file' && req.method === 'GET')
-            return json(res, 200, { data: await this.workspaces.file(parts[3], u.searchParams.get('path') ?? '', Number(u.searchParams.get('offset') ?? 0), Number(u.searchParams.get('limit') ?? 1048576)) });
-        if (parts[2] === 'workspaces' && parts[4] === 'stat' && req.method === 'GET')
-            return json(res, 200, { data: await this.workspaces.stat(parts[3], u.searchParams.get('path') ?? '.') });
-        if (req.method === 'GET' && u.pathname === '/api/v1/sessions') {
-            const workspace = this.workspaces.get(u.searchParams.get('workspaceId') ?? '');
-            if (!workspace)
-                throw Object.assign(new Error('Workspace not found'), { code: 'WORKSPACE_NOT_FOUND' });
-            const cwd = await this.workspaces.resolve(workspace, u.searchParams.get('path') ?? '.');
-            await this.ensureSessionIndex(workspace, cwd, u.searchParams.get('refresh') === 'true');
-            const limit = u.searchParams.has('limit') ? Number(u.searchParams.get('limit')) : undefined, offset = Number(u.searchParams.get('offset') ?? 0);
-            return json(res, 200, { data: this.metadata.listSessions(cwd, limit, offset) });
+    }
+    /** One collaboration mail per session per cooldown window; anything suppressed is still visible on the board. */
+    allowCollabMail(sessionId) {
+        const last = this.collabMailAt.get(sessionId) ?? 0, now = Date.now();
+        if (now - last < this.collabMailCooldownMs) {
+            console.error(`Collaboration mail for session ${sessionId} suppressed by the cooldown window; see /collab.html?session=${sessionId}`);
+            return false;
         }
-        if (req.method === 'GET' && u.pathname === '/api/v1/terminals')
-            return json(res, 200, { data: this.terminals.list() });
-        if (req.method === 'POST' && u.pathname === '/api/v1/terminals') {
-            const b = await this.body(req);
-            const terminal = await this.terminals.create(String(b.workspaceId ?? ''), String(b.relativeCwd ?? '.'), Number(b.cols ?? 80), Number(b.rows ?? 24));
-            return json(res, 201, { data: terminal });
+        this.collabMailAt.set(sessionId, now);
+        if (this.collabMailAt.size > 500)
+            for (const [key, at] of this.collabMailAt)
+                if (now - at > this.collabMailCooldownMs)
+                    this.collabMailAt.delete(key);
+        return true;
+    }
+    async stop() {
+        if (this.collabStallTimer)
+            clearInterval(this.collabStallTimer);
+        this.collabStallTimer = undefined;
+        this.unsubscribeCollab?.();
+        this.unsubscribeCollab = undefined;
+        await this.collabDispatcher.stop();
+        this.collab.shutdown();
+        this.unsubscribeMetadata?.();
+        this.unsubscribeMetadata = undefined;
+        this.voice?.close();
+        this.sessionNamer?.close();
+        await this.mailNotifier?.close();
+        await Promise.allSettled([...this.sessionIndexJobs.values(), ...this.agentIndexJobs.values()]);
+        this.metadata.flush();
+        for (const c of this.clients)
+            c.close();
+        for (const a of this.agents.list())
+            await this.agents.dispose(a.agentId).catch(() => { });
+        this.terminals.closeAll();
+        this.wss.close();
+        await new Promise(r => this.server.close(() => r()));
+        this.metadata.close();
+    }
+    async upgrade(req, socket, head) {
+        const protocol = req.headers['sec-websocket-protocol'];
+        const wsToken = Array.isArray(protocol)
+            ? protocol.find(x => x.startsWith('access-token.'))?.slice(13)
+            : protocol
+                ?.split(',')
+                .map(x => x.trim())
+                .find(x => x.startsWith('access-token.'))
+                ?.slice(13);
+        const pathname = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname, isSocket = pathname === '/api/v1/ws' || /^\/api\/v1\/terminals\/[^/]+\/ws$/.test(pathname);
+        if (!isSocket) {
+            socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
+            socket.destroy();
+            return;
         }
-        if (parts[2] === 'terminals') {
-            const id = parts[3];
-            if (req.method === 'GET' && parts.length === 4)
-                return json(res, 200, { data: this.terminals.get(id).record });
-            if (req.method === 'DELETE' && parts.length === 4) {
-                this.terminals.close(id);
-                return json(res, 200, { data: { closed: true } });
-            }
+        if (this.noAuth && !this.allowInsecureNoAuth && !this.localRequest(req)) {
+            socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
+            socket.destroy();
+            return;
         }
-        if (req.method === 'GET' && u.pathname === '/api/v1/agents')
-            return json(res, 200, { data: this.agents.list() });
-        if (req.method === 'POST' && u.pathname === '/api/v1/agents') {
-            const b = await this.body(req);
-            let sessionFile;
-            if (b.sessionFile) {
-                const workspace = this.workspaces.get(b.workspaceId);
-                if (!workspace)
-                    throw Object.assign(new Error('Workspace not found'), { code: 'WORKSPACE_NOT_FOUND' });
-                const cwd = await this.workspaces.resolve(workspace, b.relativeCwd ?? '.');
-                await this.ensureSessionIndex(workspace, cwd);
-                if (!this.metadata.hasSession(cwd, b.sessionFile))
-                    throw Object.assign(new Error('Session is not valid for cwd'), { code: 'SESSION_NOT_FOUND' });
-                sessionFile = b.sessionFile;
-            }
-            const agent = await this.agents.create(b.workspaceId, b.relativeCwd ?? '.', sessionFile);
-            this.metadata.saveAgent(agent);
-            return json(res, 201, { data: agent });
+        const key = this.clientKey(req), retryAfter = this.loginLimiter.retryAfterMs(key);
+        if (retryAfter > 0) {
+            socket.write(`HTTP/1.1 429 Too Many Requests\r\nRetry-After: ${Math.ceil(retryAfter / 1000)}\r\n\r\n`);
+            socket.destroy();
+            return;
         }
-        if (parts[2] === 'agents') {
-            const id = parts[3];
-            if (req.method === 'GET' && parts.length === 4)
-                return json(res, 200, { data: this.agents.get(id).record });
-            if (req.method === 'DELETE' && parts.length === 4) {
-                await this.agents.dispose(id);
-                this.metadata.saveAgent(this.agents.get(id).record);
-                return json(res, 200, { data: { stopped: true } });
-            }
-            if (req.method === 'POST' && parts[4] === 'archive') {
-                const record = await this.agents.archive(id);
-                this.metadata.archiveAgent(record);
-                return json(res, 200, { data: { archived: true } });
-            }
-            if (req.method === 'GET' && parts[4] === 'state')
-                return json(res, 200, { data: await this.agents.state(id) });
-            if (req.method === 'GET' && parts[4] === 'messages') {
-                const hasPaging = u.searchParams.has('limit') || u.searchParams.has('before');
-                if (!hasPaging)
-                    return json(res, 200, { data: await this.agents.messages(id) });
-                const limit = Number(u.searchParams.get('limit') ?? 25), before = u.searchParams.has('before') ? Number(u.searchParams.get('before')) : undefined;
-                return json(res, 200, { data: await this.agents.messagePage(id, limit, before) });
-            }
-            if (req.method === 'GET' && parts[4] === 'capabilities')
-                return json(res, 200, { data: await this.agents.capabilities(id) });
-            if (req.method === 'GET' && parts[4] === 'session')
-                return json(res, 200, { data: u.searchParams.get('summary') === 'true' ? await this.agents.sessionInfo(id) : await this.agents.session(id) });
-            if (req.method === 'POST' && parts[4] === 'compact') {
-                const b = await this.body(req);
-                return json(res, 200, { data: await this.agents.compact(id, b.instructions) });
-            }
-            if (req.method === 'POST' && parts[4] === 'model') {
-                const b = await this.body(req);
-                await this.agents.setModel(id, b.provider, b.modelId);
-                return json(res, 200, { data: await this.agents.capabilities(id) });
-            }
-            if (req.method === 'POST' && parts[4] === 'thinking') {
-                const b = await this.body(req);
-                await this.agents.setThinkingLevel(id, b.level);
-                return json(res, 200, { data: await this.agents.capabilities(id) });
-            }
-            if (req.method === 'POST' && parts[4] === 'session-name') {
-                const b = await this.body(req);
-                await this.agents.setSessionName(id, b.name);
-                const summary = await this.agents.sessionInfo(id), record = this.agents.get(id).record;
-                this.metadata.saveAgent(record);
+        const role = (await this.authRole(req.headers.authorization)) ??
+            (wsToken ? await this.auth.role(wsToken) : undefined);
+        if (!role) {
+            this.loginLimiter.recordFailure(key);
+            socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
+            socket.destroy();
+            return;
+        }
+        if (role === 'voice') {
+            socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
+            socket.destroy();
+            return;
+        }
+        this.loginLimiter.clear(key);
+        this.wss.handleUpgrade(req, socket, head, ws => this.wss.emit('connection', ws, req));
+    }
+    clientKey(req) {
+        return req.socket.remoteAddress ?? 'unknown';
+    }
+    async loadMetadata() {
+        let workspaces = this.metadata.listWorkspaces();
+        if (!workspaces.length) {
+            for (const workspace of this.workspaces.list())
+                this.metadata.saveWorkspace(workspace);
+            workspaces = this.metadata.listWorkspaces();
+        }
+        this.workspaces.replace(workspaces);
+        let agents = this.metadata.listAgents();
+        if (!agents.length) {
+            for (const agent of this.agents.list())
+                this.metadata.saveAgent(agent);
+            agents = this.metadata.listAgents();
+        }
+        await this.agents.restore(agents);
+    }
+    async ensureSessionIndex(workspace, cwd, force = false) {
+        const key = `${workspace.id}:${cwd}`, last = this.sessionIndexTimes.get(key) ?? 0;
+        if (!force && Date.now() - last < 30000)
+            return;
+        const existing = this.sessionIndexJobs.get(key);
+        if (existing)
+            return existing;
+        const job = (async () => {
+            const sessions = await SessionManager.list(cwd);
+            this.metadata.syncSessions(workspace.id, cwd, sessions);
+            this.sessionIndexTimes.set(key, Date.now());
+        })().finally(() => this.sessionIndexJobs.delete(key));
+        this.sessionIndexJobs.set(key, job);
+        return job;
+    }
+    async indexAgentSession(agentId) {
+        const existing = this.agentIndexJobs.get(agentId);
+        if (existing)
+            return existing;
+        const job = (async () => {
+            try {
+                const record = this.agents.get(agentId).record, summary = await this.agents.sessionInfo(agentId);
                 this.metadata.upsertSessionFromAgent(record, summary);
-                return json(res, 200, { data: summary });
+                this.metadata.scheduleAgent(record);
             }
-            if (req.method === 'POST' && parts[4] === 'navigate') {
-                const b = await this.body(req);
-                return json(res, 200, { data: await this.agents.navigate(id, b.entryId) });
+            catch {
+                /* Session files may not exist until the first assistant response is persisted. */
             }
-            if (req.method === 'POST' && parts[4] === 'fork') {
-                const b = await this.body(req);
-                const agent = await this.agents.fork(id, b.entryId);
-                this.metadata.saveAgent(agent.agent);
-                return json(res, 201, { data: agent });
+        })().finally(() => this.agentIndexJobs.delete(agentId));
+        this.agentIndexJobs.set(agentId, job);
+        return job;
+    }
+    async resolveWorkspaceCwd(workspaceId, relativeCwd) {
+        const workspace = this.workspaces.get(workspaceId);
+        if (!workspace)
+            throw Object.assign(new Error('Workspace not found'), { code: 'WORKSPACE_NOT_FOUND' });
+        return this.workspaces.resolve(workspace, relativeCwd || '.');
+    }
+    /** Without a pairing code the only boundary left is the browser's: loopback Host and, if sent, a loopback Origin. */
+    localRequest(req) {
+        if (!isLoopbackHost(String(req.headers.host ?? '')))
+            return false;
+        const origin = String(req.headers.origin ?? '');
+        if (!origin)
+            return true;
+        try {
+            return isLoopbackHost(new URL(origin).host);
+        }
+        catch {
+            return false;
+        }
+    }
+    async authRole(value) {
+        if (this.noAuth)
+            return 'full';
+        return value?.startsWith('Bearer ') ? this.auth.role(value.slice(7)) : undefined;
+    }
+    async handle(req, res) {
+        const requestId = randomUUID();
+        res.setHeader('x-request-id', requestId);
+        if (this.noAuth) {
+            if (!this.allowInsecureNoAuth && !this.localRequest(req))
+                return json(res, 403, {
+                    error: {
+                        code: 'FORBIDDEN',
+                        message: 'Without authentication only loopback requests are served',
+                        requestId
+                    }
+                });
+            if (req.headers.origin)
+                res.setHeader('access-control-allow-origin', String(req.headers.origin));
+        }
+        else
+            res.setHeader('access-control-allow-origin', '*');
+        res.setHeader('access-control-allow-headers', 'Authorization,Content-Type,X-Audio-Filename');
+        res.setHeader('access-control-allow-methods', 'GET,POST,PUT,DELETE,OPTIONS');
+        try {
+            if (req.method === 'OPTIONS') {
+                res.statusCode = 204;
+                return res.end();
             }
-            if (req.method === 'POST' && parts[4] === 'extension-response') {
-                const b = await this.body(req);
-                await this.agents.extensionResponse(id, b.requestId, b.value);
-                return json(res, 200, { data: { success: true } });
+            const u = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+            if (req.method === 'GET' && (await serveWebAsset(u.pathname, req, res, { noAuth: this.noAuth })))
+                return;
+            if (req.method === 'GET' && u.pathname === '/health')
+                return json(res, 200, { data: { status: 'ok', authRequired: !this.noAuth } });
+            const parts = u.pathname.split('/').filter(Boolean);
+            if (req.method === 'POST' && u.pathname === '/api/v1/auth/login') {
+                const key = this.clientKey(req), retryAfter = this.loginLimiter.retryAfterMs(key);
+                if (retryAfter > 0) {
+                    res.setHeader('retry-after', String(Math.ceil(retryAfter / 1000)));
+                    return json(res, 429, {
+                        error: {
+                            code: 'TOO_MANY_ATTEMPTS',
+                            message: `Too many failed pairing attempts. Retry in ${Math.ceil(retryAfter / 1000)} seconds`,
+                            requestId
+                        }
+                    });
+                }
+                const b = await readJsonBody(req);
+                if (await this.auth.verify(String(b.token ?? ''))) {
+                    this.loginLimiter.clear(key);
+                    return json(res, 200, { data: { authenticated: true } });
+                }
+                const lockedFor = this.loginLimiter.recordFailure(key);
+                if (lockedFor > 0)
+                    res.setHeader('retry-after', String(Math.ceil(lockedFor / 1000)));
+                return json(res, 401, { error: { code: 'UNAUTHORIZED', message: 'Invalid token', requestId } });
             }
-            if (req.method === 'POST' && parts[4] === 'transcribe') {
-                if (!this.voice)
-                    throw Object.assign(new Error('Voice service is disabled'), { code: 'VOICE_DISABLED' });
-                this.agents.get(id);
-                const audio = await this.binaryBody(req), mime = String(req.headers['content-type'] ?? 'audio/webm').split(';')[0], filename = String(req.headers['x-audio-filename'] ?? 'recording.webm');
-                return json(res, 200, { data: await this.voice.transcribe(audio, mime, filename) });
+            if (parts[0] === 'api' && parts[1] === 'v1' && parts[2] === 'collab') {
+                const key = this.clientKey(req), retryAfter = this.loginLimiter.retryAfterMs(key);
+                if (retryAfter > 0) {
+                    res.setHeader('retry-after', String(Math.ceil(retryAfter / 1000)));
+                    return json(res, 429, {
+                        error: {
+                            code: 'TOO_MANY_ATTEMPTS',
+                            message: `Too many failed attempts. Retry in ${Math.ceil(retryAfter / 1000)} seconds`,
+                            requestId
+                        }
+                    });
+                }
+                const header = String(req.headers.authorization ?? ''), token = header.startsWith('Bearer ') ? header.slice(7) : '';
+                const result = await this.collabRouter.handle({
+                    method: req.method ?? 'GET',
+                    url: u,
+                    parts,
+                    token,
+                    body: () => readJsonBody(req)
+                });
+                if (!result)
+                    return json(res, 404, { error: { code: 'NOT_FOUND', message: 'Not found', requestId } });
+                if (result.authFailed)
+                    this.loginLimiter.recordFailure(key);
+                else
+                    this.loginLimiter.clear(key);
+                return json(res, result.status, result.payload);
             }
-            if (req.method === 'POST' && ['prompt', 'steer', 'follow-up', 'abort'].includes(parts[4])) {
-                const b = await this.body(req);
-                if (parts[4] !== 'abort')
-                    this.voice?.recordUserPrompt(id, String(b.message ?? ''));
-                await this.agents.command(id, parts[4], b.message ?? '');
-                const record = this.agents.get(id).record;
-                this.metadata.scheduleAgent(record);
-                if (parts[4] === 'prompt')
-                    void this.indexAgentSession(id);
-                return json(res, 200, { data: { success: true } });
+            const role = await this.authRole(req.headers.authorization);
+            if (!role)
+                return json(res, 401, { error: { code: 'UNAUTHORIZED', message: 'Authentication required', requestId } });
+            if (role === 'voice' &&
+                !((req.method === 'POST' && u.pathname === '/api/v1/draft') ||
+                    (req.method === 'GET' && u.pathname === '/api/v1/system/status')))
+                return json(res, 403, {
+                    error: { code: 'FORBIDDEN', message: 'This token cannot access this endpoint', requestId }
+                });
+            if (req.method === 'POST' && u.pathname === '/api/v1/draft') {
+                const b = await readJsonBody(req), text = typeof b?.text === 'string' ? b.text : '';
+                if (!text.trim())
+                    return json(res, 400, { error: { code: 'INVALID_REQUEST', message: 'text is required', requestId } });
+                if (text.length > 20000)
+                    return json(res, 413, { error: { code: 'REQUEST_TOO_LARGE', message: 'text is too long', requestId } });
+                if (b.agentId !== undefined || b.target !== undefined)
+                    return json(res, 400, {
+                        error: { code: 'INVALID_REQUEST', message: 'draft targets are not supported', requestId }
+                    });
+                if (b.mode !== undefined && b.mode !== 'append' && b.mode !== 'replace')
+                    return json(res, 400, {
+                        error: { code: 'INVALID_REQUEST', message: 'mode must be append or replace', requestId }
+                    });
+                const { draft, delivered } = this.drafts.add({
+                    text,
+                    mode: b.mode ?? 'append',
+                    source: typeof b.source === 'string' ? b.source.slice(0, 32) : undefined
+                });
+                return json(res, 200, { data: { id: draft.id, mode: draft.mode, delivered, queued: true } });
             }
+            if (req.method === 'GET' && u.pathname === '/api/v1/system/status')
+                return json(res, 200, {
+                    data: {
+                        version: pkg.version,
+                        protocolVersion: PROTOCOL_VERSION,
+                        authRequired: !this.noAuth,
+                        piVersion: PI_VERSION,
+                        nodeVersion: process.version,
+                        uptimeSeconds: Math.floor(process.uptime()),
+                        agentCount: this.agents.list().length,
+                        terminalCount: this.terminals.list().length,
+                        webSocketConnections: this.clients.size,
+                        voiceEnabled: !!this.voice,
+                        voiceCapabilities: this.voice?.capabilities() ?? { tts: false, stt: false },
+                        sessionNamingEnabled: !!this.sessionNamer,
+                        mailNotificationsConfigured: !!this.mailNotifier,
+                        mailNotificationsEnabled: this.mailNotifier?.getSettings().enabled ?? false
+                    }
+                });
+            if (await handleMailSettingsRoutes({ mailNotifier: this.mailNotifier, metadata: this.metadata }, req, res, u))
+                return;
+            const workspaceContext = {
+                workspaces: this.workspaces,
+                terminals: this.terminals,
+                metadata: this.metadata,
+                ensureSessionIndex: (workspace, cwd, force) => this.ensureSessionIndex(workspace, cwd, force)
+            };
+            if (await handleWorkspaceRoutes(workspaceContext, req, res, u, parts, requestId))
+                return;
+            if (await handleSystemPromptRoutes({ agents: this.agents, templates: this.templates, body: () => readJsonBody(req) }, req, res, u, parts))
+                return;
+            const agentContext = {
+                agents: this.agents,
+                templates: this.templates,
+                metadata: this.metadata,
+                workspaces: this.workspaces,
+                voice: this.voice,
+                sessionNamer: this.sessionNamer,
+                ensureSessionIndex: (workspace, cwd, force) => this.ensureSessionIndex(workspace, cwd, force),
+                indexAgentSession: (agentId) => this.indexAgentSession(agentId),
+                body: () => readJsonBody(req),
+                binaryBody: () => readBinaryBody(req)
+            };
+            if (await handleAgentRoutes(agentContext, req, res, u, parts))
+                return;
+            return json(res, 404, { error: { code: 'NOT_FOUND', message: 'Not found', requestId } });
+        }
+        catch (e) {
+            const x = e;
+            return json(res, errorStatus(x.code), {
+                error: { code: x.code ?? 'BAD_REQUEST', message: x.message ?? 'Request failed', requestId }
+            });
         }
-        return json(res, 404, { error: { code: 'NOT_FOUND', message: 'Not found', requestId } });
     }
-    catch (e) {
-        const x = e;
-        return json(res, x.code === 'WORKSPACE_PATH_OUTSIDE_ROOT' ? 403 : x.code === 'FILE_TOO_LARGE' || x.code === 'REQUEST_TOO_LARGE' ? 413 : x.code === 'VOICE_DISABLED' || x.code === 'VOICE_STT_DISABLED' || x.code === 'MAIL_NOTIFICATIONS_DISABLED' ? 503 : x.code?.endsWith('NOT_FOUND') ? 404 : 400, { error: { code: x.code ?? 'BAD_REQUEST', message: x.message ?? 'Request failed', requestId } });
-    } }
 }