pi2web 0.2.1 → 0.2.6

package/dist/server.js

@@ -1,15 +1,11 @@
 import http from 'node:http';
 import path from 'node:path';
-import { readFile } from 'node:fs/promises';
-import { fileURLToPath } from 'node:url';
-import { createRequire } from 'node:module';
-import { createHash, randomUUID } from 'node:crypto';
-import { WebSocketServer, WebSocket } from 'ws';
+import { randomUUID } from 'node:crypto';
+import { WebSocketServer } from 'ws';
 import { AuthStore } from './auth.js';
 import { WorkspaceStore } from './workspaces.js';
 import { AgentManager } from './agents.js';
 import { createSdkBackend } from './sdk-backend.js';
-import { listMcpServers, setMcpServerEnabled } from './mcp.js';
 import { TerminalManager } from './terminals.js';
 import { MetadataStore } from './metadata-store.js';
 import { CollabHub } from './collab/hub.js';
@@ -17,19 +13,20 @@ import { CollabStore } from './collab/store.js';
 import { CollabRouter } from './collab/routes.js';
 import { CollabDispatcher } from './collab/dispatcher.js';
 import { DraftHub } from './drafts.js';
+import { AGENT_TEMPLATES_DIR, defaultDataDir } from './paths.js';
+import { AgentTemplateStore } from './agent-templates.js';
 import { SessionManager, VERSION as PI_VERSION } from '@earendil-works/pi-coding-agent';
 import pkg from '../package.json' with { type: 'json' };
-export const LOOPBACK_HOSTS = ['127.0.0.1', '::1', 'localhost'];
-const isLoopbackHost = (value) => { try {
-    return LOOPBACK_HOSTS.includes(new URL(`http://${value}`).hostname.replace(/^\[|\]$/g, ''));
-}
-catch {
-    return false;
-} };
-const json = (res, status, data) => { res.statusCode = status; res.setHeader('content-type', 'application/json'); res.end(JSON.stringify(data)); };
-const webRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../web'), require = createRequire(import.meta.url);
-const markedBrowser = path.join(path.dirname(require.resolve('marked/package.json')), 'lib', 'marked.umd.js');
-const webFiles = { '/': { file: 'index.html', type: 'text/html; charset=utf-8' }, '/index.html': { file: 'index.html', type: 'text/html; charset=utf-8' }, '/app.js': { file: 'app.js', type: 'text/javascript; charset=utf-8' }, '/backend-state.js': { file: 'backend-state.js', type: 'text/javascript; charset=utf-8' }, '/hid-keyboard.js': { file: 'hid-keyboard.js', type: 'text/javascript; charset=utf-8' }, '/collab': { file: 'collab.html', type: 'text/html; charset=utf-8' }, '/collab.html': { file: 'collab.html', type: 'text/html; charset=utf-8' }, '/collab.js': { file: 'collab.js', type: 'text/javascript; charset=utf-8' }, '/styles.css': { file: 'styles.css', type: 'text/css; charset=utf-8' }, '/icon.svg': { file: 'icon.svg', type: 'image/svg+xml' }, '/favicon.ico': { file: 'icon.svg', type: 'image/svg+xml' }, '/vendor/xterm.js': { file: require.resolve('@xterm/xterm'), type: 'text/javascript; charset=utf-8' }, '/vendor/xterm.css': { file: require.resolve('@xterm/xterm/css/xterm.css'), type: 'text/css; charset=utf-8' }, '/vendor/addon-fit.js': { file: require.resolve('@xterm/addon-fit'), type: 'text/javascript; charset=utf-8' }, '/vendor/marked.js': { file: markedBrowser, type: 'text/javascript; charset=utf-8' }, '/vendor/dompurify.js': { file: require.resolve('dompurify/purify.min.js'), type: 'text/javascript; charset=utf-8' } };
+import { LOOPBACK_HOSTS, errorStatus, isLoopbackHost, json, readBinaryBody, readJsonBody } from './http/utils.js';
+import { serveWebAsset } from './http/web-assets.js';
+import { LoginLimiter } from './http/login-limiter.js';
+import { handleAgentSocket, PROTOCOL_VERSION } from './ws/agent-socket.js';
+import { handleTerminalSocket } from './ws/terminal-socket.js';
+import { handleAgentRoutes } from './http/agent-routes.js';
+import { handleMailSettingsRoutes } from './http/mail-settings-routes.js';
+import { handleWorkspaceRoutes } from './http/workspace-routes.js';
+import { handleSystemPromptRoutes } from './http/system-prompt-routes.js';
+export { LOOPBACK_HOSTS };
 export class RemotePiServer {
     server;
     wss;
@@ -38,6 +35,7 @@ export class RemotePiServer {
     agents;
     terminals;
     metadata;
+    templates;
     collab;
     collabRouter;
     collabDispatcher;
@@ -58,12 +56,56 @@ export class RemotePiServer {
     voice;
     sessionNamer;
     mailNotifier;
-    loginFailures = new Map();
-    loginWindowMs = 60_000;
-    loginMaxFailures = 10;
-    loginLockMs = 60_000;
-    loginMaxLockMs = 15 * 60_000;
-    constructor(options = {}) { this.opts = { host: options.host ?? '127.0.0.1', port: options.port ?? 11318 }; this.noAuth = options.noAuth ?? false; this.allowInsecureNoAuth = options.allowInsecureNoAuth ?? false; this.dataDir = options.dataDir ?? path.join(process.env.HOME ?? '.', '.pi', 'remote-pi'); this.auth = new AuthStore(this.dataDir); this.metadata = new MetadataStore(this.dataDir); this.workspaces = options.workspaces ?? new WorkspaceStore(); this.voice = options.voice; this.sessionNamer = options.sessionNamer; this.mailNotifier = options.mailNotifier; this.collab = new CollabHub(new CollabStore(() => this.metadata.connection), { agentStatus: agentId => this.agentStatus(agentId) }); this.agents = options.agents ?? new AgentManager(this.workspaces, (agentId, cwd, sessionFile, profile) => createSdkBackend(agentId, cwd, sessionFile, profile, profile === 'collab' ? this.collabToolBridge() : undefined)); this.terminals = options.terminals ?? new TerminalManager(this.workspaces); this.collabRouter = new CollabRouter(this.collab, { resolveCwd: (workspaceId, relativeCwd) => this.resolveWorkspaceCwd(workspaceId, relativeCwd), verifyHuman: token => this.auth.verify(token), noAuth: this.noAuth, isCollabAgent: agentId => this.isCollabAgent(agentId) }); this.collabDispatcher = new CollabDispatcher(this.collab, { command: (agentId, kind, message) => this.agents.command(agentId, kind, message), agentStatus: agentId => this.agentStatus(agentId), isCollabAgent: agentId => this.isCollabAgent(agentId), log: message => console.error(message) }); this.server = http.createServer((req, res) => void this.handle(req, res)); this.wss = new WebSocketServer({ noServer: true, maxPayload: 2 * 1024 * 1024 }); this.server.on('upgrade', (req, socket, head) => void this.upgrade(req, socket, head)); this.wss.on('connection', (ws, req) => { const match = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname.match(/^\/api\/v1\/terminals\/([^/]+)\/ws$/); match ? this.terminalConnection(ws, decodeURIComponent(match[1])) : this.connection(ws, req); }); }
+    loginLimiter = new LoginLimiter();
+    constructor(options = {}) {
+        this.opts = { host: options.host ?? '127.0.0.1', port: options.port ?? 11318 };
+        this.noAuth = options.noAuth ?? false;
+        this.allowInsecureNoAuth = options.allowInsecureNoAuth ?? false;
+        this.dataDir = options.dataDir ?? defaultDataDir();
+        this.auth = new AuthStore(this.dataDir);
+        this.metadata = new MetadataStore(this.dataDir);
+        this.templates = new AgentTemplateStore(path.join(this.dataDir, AGENT_TEMPLATES_DIR));
+        this.workspaces = options.workspaces ?? new WorkspaceStore();
+        this.voice = options.voice;
+        this.sessionNamer = options.sessionNamer;
+        this.mailNotifier = options.mailNotifier;
+        this.collab = new CollabHub(new CollabStore(() => this.metadata.connection), {
+            agentStatus: agentId => this.agentStatus(agentId)
+        });
+        this.agents =
+            options.agents ??
+                new AgentManager(this.workspaces, (agentId, cwd, sessionFile, profile, backendOptions) => createSdkBackend(agentId, cwd, sessionFile, profile, profile === 'collab' ? this.collabToolBridge() : undefined, backendOptions));
+        this.terminals = options.terminals ?? new TerminalManager(this.workspaces);
+        this.collabRouter = new CollabRouter(this.collab, {
+            resolveCwd: (workspaceId, relativeCwd) => this.resolveWorkspaceCwd(workspaceId, relativeCwd),
+            verifyHuman: token => this.auth.verify(token),
+            noAuth: this.noAuth,
+            isCollabAgent: agentId => this.isCollabAgent(agentId)
+        });
+        this.collabDispatcher = new CollabDispatcher(this.collab, {
+            command: (agentId, kind, message) => this.agents.command(agentId, kind, message),
+            agentStatus: agentId => this.agentStatus(agentId),
+            isCollabAgent: agentId => this.isCollabAgent(agentId),
+            log: message => console.error(message)
+        });
+        this.server = http.createServer((req, res) => void this.handle(req, res));
+        this.wss = new WebSocketServer({ noServer: true, maxPayload: 2 * 1024 * 1024 });
+        this.server.on('upgrade', (req, socket, head) => void this.upgrade(req, socket, head));
+        this.wss.on('connection', (ws, req) => {
+            const match = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname.match(/^\/api\/v1\/terminals\/([^/]+)\/ws$/);
+            if (match)
+                handleTerminalSocket({ terminals: this.terminals, clients: this.clients }, ws, decodeURIComponent(match[1]));
+            else
+                handleAgentSocket({
+                    agents: this.agents,
+                    drafts: this.drafts,
+                    collab: this.collab,
+                    voice: this.voice,
+                    sessionNamer: this.sessionNamer,
+                    clients: this.clients
+                }, ws);
+        });
+    }
     async start() {
         if (this.allowInsecureNoAuth && !this.noAuth)
             throw Object.assign(new Error('allowInsecureNoAuth requires noAuth (--allow-insecure-no-auth requires --no-auth)'), { code: 'INVALID_OPTIONS' });
@@ -75,12 +117,14 @@ export class RemotePiServer {
         this.metadata.init();
         this.collab.init();
         this.unsubscribeCollab = this.collab.subscribe(event => this.collabNotification(event));
-        this.collabStallTimer = setInterval(() => { try {
-            this.collab.checkStalls();
-        }
-        catch (error) {
-            console.error(`Collaboration stall check failed: ${error.message}`);
-        } }, 60_000);
+        this.collabStallTimer = setInterval(() => {
+            try {
+                this.collab.checkStalls();
+            }
+            catch (error) {
+                console.error(`Collaboration stall check failed: ${error.message}`);
+            }
+        }, 60_000);
         this.collabStallTimer.unref?.();
         if (this.mailNotifier) {
             const settings = this.metadata.getSetting('mailNotifications');
@@ -98,12 +142,26 @@ export class RemotePiServer {
         this.collabDispatcher.start();
         this.unsubscribeMetadata = this.agents.subscribeAll((agentId, event) => {
             const record = this.agents.get(agentId).record;
-            const applyName = async (name) => { if (this.agents.get(agentId).record.sessionName?.trim())
-                return; await this.agents.setSessionName(agentId, name); this.metadata.saveAgent(this.agents.get(agentId).record); };
+            const applyName = async (name) => {
+                if (this.agents.get(agentId).record.sessionName?.trim())
+                    return;
+                await this.agents.setSessionName(agentId, name);
+                this.metadata.saveAgent(this.agents.get(agentId).record);
+            };
             // The namer owns naming whenever it is enabled, so the voice summary never races it for the same name.
-            this.sessionNamer?.handleAgentEvent(agentId, event.event, { sessionName: record.sessionName, setSessionName: applyName });
-            this.voice?.handleAgentEvent(agentId, event.event, { sessionName: record.sessionName, ...(this.sessionNamer ? {} : { setSessionName: applyName }) });
-            this.mailNotifier?.handleAgentEvent(agentId, event.event, { sessionName: record.sessionName, workspaceLabel: this.workspaces.get(record.workspaceId)?.label, cwd: record.cwd });
+            this.sessionNamer?.handleAgentEvent(agentId, event.event, {
+                sessionName: record.sessionName,
+                setSessionName: applyName
+            });
+            this.voice?.handleAgentEvent(agentId, event.event, {
+                sessionName: record.sessionName,
+                ...(this.sessionNamer ? {} : { setSessionName: applyName })
+            });
+            this.mailNotifier?.handleAgentEvent(agentId, event.event, {
+                sessionName: record.sessionName,
+                workspaceLabel: this.workspaces.get(record.workspaceId)?.label,
+                cwd: record.cwd
+            });
             if (['message_end', 'agent_end', 'agent_settled', 'session_info_changed'].includes(String(event.event.type))) {
                 const record = this.agents.get(agentId).record;
                 this.metadata.scheduleAgent(record);
@@ -116,23 +174,33 @@ export class RemotePiServer {
         await new Promise(r => this.server.listen(this.opts.port, this.opts.host, r));
         return this.address();
     }
-    address() { const a = this.server.address(); return typeof a === 'object' && a ? { host: this.opts.host, port: a.port } : undefined; }
+    address() {
+        const a = this.server.address();
+        return typeof a === 'object' && a ? { host: this.opts.host, port: a.port } : undefined;
+    }
     /** URL an agent running on this machine can use to reach the hub. Wildcard binds are rewritten to loopback. */
-    publicBaseUrl() { const port = this.address()?.port ?? this.opts.port, host = ['0.0.0.0', '::', '::1', ''].includes(this.opts.host) ? '127.0.0.1' : this.opts.host; return `http://${host.includes(':') ? `[${host}]` : host}:${port}`; }
+    publicBaseUrl() {
+        const port = this.address()?.port ?? this.opts.port, host = ['0.0.0.0', '::', '::1', ''].includes(this.opts.host) ? '127.0.0.1' : this.opts.host;
+        return `http://${host.includes(':') ? `[${host}]` : host}:${port}`;
+    }
     /** Lifecycle of a local Agent; undefined once it no longer exists. The hub uses it to tell "still working" from "never answered". */
-    agentStatus(agentId) { try {
-        return this.agents.get(agentId).record.status;
+    agentStatus(agentId) {
+        try {
+            return this.agents.get(agentId).record.status;
+        }
+        catch {
+            return undefined;
+        }
     }
-    catch {
-        return undefined;
-    } }
     /** A collaboration seat is only ever bound to an existing `profile=collab` Agent: anything else can never be woken. */
-    isCollabAgent(agentId) { try {
-        return this.agents.get(agentId).record.profile === 'collab';
+    isCollabAgent(agentId) {
+        try {
+            return this.agents.get(agentId).record.profile === 'collab';
+        }
+        catch {
+            return false;
+        }
     }
-    catch {
-        return false;
-    } }
     /** Pi extension bridge. It intentionally calls the hub in-process, so model context never contains tokens or URLs. */
     collabToolBridge() {
         return {
@@ -143,15 +211,24 @@ export class RemotePiServer {
     async submitCollabTool(agentId, action, payload) {
         const participant = this.collab.participantForAgent(agentId);
         switch (action) {
-            case 'ready': return this.collab.markImplementationReady(participant, payload);
-            case 'findings': return this.collab.submitFindings(participant, payload);
-            case 'issue_votes': return this.collab.submitIssueVotes(participant, payload);
-            case 'merge_votes': return this.collab.submitMergeVotes(participant, payload);
-            case 'issue_discussions': return this.collab.submitIssueDiscussions(participant, payload);
-            case 'nominations': return this.collab.submitNominations(participant, payload);
-            case 'votes': return this.collab.submitVotes(participant, payload);
-            case 'scores': return this.collab.submitScores(participant, payload);
-            case 'escalate': return this.collab.raiseEscalation(participant, payload);
+            case 'ready':
+                return this.collab.markImplementationReady(participant, payload);
+            case 'findings':
+                return this.collab.submitFindings(participant, payload);
+            case 'issue_votes':
+                return this.collab.submitIssueVotes(participant, payload);
+            case 'merge_votes':
+                return this.collab.submitMergeVotes(participant, payload);
+            case 'issue_discussions':
+                return this.collab.submitIssueDiscussions(participant, payload);
+            case 'nominations':
+                return this.collab.submitNominations(participant, payload);
+            case 'votes':
+                return this.collab.submitVotes(participant, payload);
+            case 'scores':
+                return this.collab.submitScores(participant, payload);
+            case 'escalate':
+                return this.collab.raiseEscalation(participant, payload);
             case 'withdraw': {
                 const issueId = String(payload.issueId ?? '');
                 delete payload.issueId;
@@ -162,7 +239,8 @@ export class RemotePiServer {
                 delete payload.debateId;
                 return this.collab.submitDebateArgument(participant, debateId, payload);
             }
-            case 'debate_arguments': return this.collab.submitDebateArguments(participant, payload);
+            case 'debate_arguments':
+                return this.collab.submitDebateArguments(participant, payload);
         }
     }
     /** Escalations and stalls block the whole session, so a human is mailed the moment one appears. */
@@ -175,13 +253,23 @@ export class RemotePiServer {
                 if (!this.allowCollabMail(event.sessionId))
                     return;
                 const escalation = this.collab.getEscalation(String(event.payload.escalationId ?? '')), session = this.collab.getSession(event.sessionId);
-                const lines = [`协作会话：${session.title}（${session.kind}，phase=${session.phase}，round=${session.round}）`, `类型：${escalation.kind}｜紧急度：${escalation.urgency}`, `发起者：${escalation.raisedBy}`, '', `摘要：${escalation.summary}`, `待裁定问题：${escalation.question}`];
+                const lines = [
+                    `协作会话：${session.title}（${session.kind}，phase=${session.phase}，round=${session.round}）`,
+                    `类型：${escalation.kind}｜紧急度：${escalation.urgency}`,
+                    `发起者：${escalation.raisedBy}`,
+                    '',
+                    `摘要：${escalation.summary}`,
+                    `待裁定问题：${escalation.question}`
+                ];
                 if (escalation.options.length)
                     lines.push(`候选方案：${escalation.options.join(' / ')}`);
                 if (escalation.positions.length)
                     lines.push('', '各方立场：', ...escalation.positions.map(position => `- ${position.participantId}（${position.stance}）：${position.rationale}`));
                 lines.push('', `处理入口：${this.publicBaseUrl()}/collab.html?session=${session.sessionId}`, `API：POST /api/v1/collab/escalations/${escalation.escalationId}/resolve`);
-                this.mailNotifier.notifyCollab({ subject: `[Remote Pi] 协作会话需要人工裁定：${session.title}`, text: lines.join('\n') });
+                this.mailNotifier.notifyCollab({
+                    subject: `[Remote Pi] 协作会话需要人工裁定：${session.title}`,
+                    text: lines.join('\n')
+                });
                 return;
             }
             if (event.type === 'participant_overdue') {
@@ -189,10 +277,19 @@ export class RemotePiServer {
                     return;
                 const session = this.collab.getSession(event.sessionId), waiting = event.payload.waitingOn ?? [];
                 const neverCollected = event.payload.reason === 'task_never_collected';
-                this.mailNotifier.notifyCollab({ subject: `[Remote Pi] 协作会话停滞：${session.title}`,
-                    text: [`协作会话：${session.title}（${session.kind}，phase=${session.phase}，round=${session.round}）`,
-                        neverCollected ? '任务已派发但从未送达：绑定的本机 Agent 可能已被删除或卡住，请在看板上把这个座位改绑到另一个 Agent。' : `已等待：${Math.round(Number(event.payload.overdueBySec ?? 0))} 秒`,
-                        `未提交的参与者：${waiting.join(', ') || '（未知）'}`, '', '中枢不会自动跳过任何人；如需推进请强制推进并说明理由。', `处理入口：${this.publicBaseUrl()}/collab.html?session=${session.sessionId}`].join('\n') });
+                this.mailNotifier.notifyCollab({
+                    subject: `[Remote Pi] 协作会话停滞：${session.title}`,
+                    text: [
+                        `协作会话：${session.title}（${session.kind}，phase=${session.phase}，round=${session.round}）`,
+                        neverCollected
+                            ? '任务已派发但从未送达：绑定的本机 Agent 可能已被删除或卡住，请在看板上把这个座位改绑到另一个 Agent。'
+                            : `已等待：${Math.round(Number(event.payload.overdueBySec ?? 0))} 秒`,
+                        `未提交的参与者：${waiting.join(', ') || '（未知）'}`,
+                        '',
+                        '中枢不会自动跳过任何人；如需推进请强制推进并说明理由。',
+                        `处理入口：${this.publicBaseUrl()}/collab.html?session=${session.sessionId}`
+                    ].join('\n')
+                });
             }
         }
         catch (error) {
@@ -213,583 +310,310 @@ export class RemotePiServer {
                     this.collabMailAt.delete(key);
         return true;
     }
-    async stop() { if (this.collabStallTimer)
-        clearInterval(this.collabStallTimer); this.collabStallTimer = undefined; this.unsubscribeCollab?.(); this.unsubscribeCollab = undefined; await this.collabDispatcher.stop(); this.collab.shutdown(); this.unsubscribeMetadata?.(); this.unsubscribeMetadata = undefined; this.voice?.close(); this.sessionNamer?.close(); await this.mailNotifier?.close(); await Promise.allSettled([...this.sessionIndexJobs.values(), ...this.agentIndexJobs.values()]); this.metadata.flush(); for (const c of this.clients)
-        c.close(); for (const a of this.agents.list())
-        await this.agents.dispose(a.agentId).catch(() => { }); this.terminals.closeAll(); this.wss.close(); await new Promise(r => this.server.close(() => r())); this.metadata.close(); }
-    async upgrade(req, socket, head) { const protocol = req.headers['sec-websocket-protocol']; const wsToken = Array.isArray(protocol) ? protocol.find(x => x.startsWith('access-token.'))?.slice(13) : protocol?.split(',').map(x => x.trim()).find(x => x.startsWith('access-token.'))?.slice(13); const pathname = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname, isSocket = pathname === '/api/v1/ws' || /^\/api\/v1\/terminals\/[^/]+\/ws$/.test(pathname); if (!isSocket) {
-        socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
-        socket.destroy();
-        return;
-    } if (this.noAuth && !this.allowInsecureNoAuth && !this.localRequest(req)) {
-        socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
-        socket.destroy();
-        return;
-    } const key = this.clientKey(req), retryAfter = this.loginRetryAfterMs(key); if (retryAfter > 0) {
-        socket.write(`HTTP/1.1 429 Too Many Requests\r\nRetry-After: ${Math.ceil(retryAfter / 1000)}\r\n\r\n`);
-        socket.destroy();
-        return;
-    } const role = (await this.authRole(req.headers.authorization)) ?? (wsToken ? await this.auth.role(wsToken) : undefined); if (!role) {
-        this.recordLoginFailure(key);
-        socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
-        socket.destroy();
-        return;
-    } if (role === 'voice') {
-        socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
-        socket.destroy();
-        return;
-    } this.loginFailures.delete(key); this.wss.handleUpgrade(req, socket, head, ws => this.wss.emit('connection', ws, req)); }
-    clientKey(req) { return req.socket.remoteAddress ?? 'unknown'; }
-    /** Rate limits pairing attempts per source address. Reverse proxies and tunnels share one bucket by design. */
-    loginRetryAfterMs(key) { const entry = this.loginFailures.get(key); if (!entry)
-        return 0; const now = Date.now(); if (entry.lockedUntil > now)
-        return entry.lockedUntil - now; if (entry.expiresAt <= now)
-        this.loginFailures.delete(key); return 0; }
-    recordLoginFailure(key) { const now = Date.now(); if (this.loginFailures.size > 1000)
-        for (const [id, value] of this.loginFailures)
-            if (value.expiresAt <= now && value.lockedUntil <= now)
-                this.loginFailures.delete(id); const entry = this.loginFailures.get(key); if (!entry || (entry.expiresAt <= now && entry.lockedUntil <= now)) {
-        this.loginFailures.set(key, { count: 1, expiresAt: now + this.loginWindowMs, lockedUntil: 0, lockLevel: 0 });
-        return 0;
-    } entry.count += 1; entry.expiresAt = now + this.loginWindowMs; if (entry.count < this.loginMaxFailures)
-        return 0; entry.count = 0; entry.lockLevel = Math.min(entry.lockLevel + 1, 5); entry.lockedUntil = now + Math.min(this.loginLockMs * 2 ** (entry.lockLevel - 1), this.loginMaxLockMs); entry.expiresAt = entry.lockedUntil + this.loginWindowMs; return entry.lockedUntil - now; }
-    connection(ws, _req) {
-        this.clients.add(ws);
-        const subscriptions = new Map();
-        // Pi providers may emit one delta per character. Sending every delta as its own
-        // WebSocket frame is especially expensive over a high-latency/low-bandwidth
-        // link: agent_end gets stuck behind thousands of tiny frames. Coalesce adjacent
-        // text/thinking deltas while preserving their sequence cursor and event order.
-        let pendingDelta, deltaTimer;
-        const sendNow = (message) => { if (ws.readyState !== WebSocket.OPEN)
-            return; if (ws.bufferedAmount > 2 * 1024 * 1024) {
-            ws.close(1013, 'Agent client is too slow');
-            return;
-        } ws.send(JSON.stringify(message)); };
-        const flushDelta = () => { if (deltaTimer)
-            clearTimeout(deltaTimer); deltaTimer = undefined; if (pendingDelta) {
-            const message = pendingDelta;
-            pendingDelta = undefined;
-            sendNow(message);
-        } };
-        const send = (message) => { const update = message?.type === 'agent_event' && message.event?.type === 'message_update' ? message.event.assistantMessageEvent : undefined, isDelta = update && (update.type === 'text_delta' || update.type === 'thinking_delta') && typeof update.delta === 'string'; if (!isDelta) {
-            flushDelta();
-            sendNow(message);
+    async stop() {
+        if (this.collabStallTimer)
+            clearInterval(this.collabStallTimer);
+        this.collabStallTimer = undefined;
+        this.unsubscribeCollab?.();
+        this.unsubscribeCollab = undefined;
+        await this.collabDispatcher.stop();
+        this.collab.shutdown();
+        this.unsubscribeMetadata?.();
+        this.unsubscribeMetadata = undefined;
+        this.voice?.close();
+        this.sessionNamer?.close();
+        await this.mailNotifier?.close();
+        await Promise.allSettled([...this.sessionIndexJobs.values(), ...this.agentIndexJobs.values()]);
+        this.metadata.flush();
+        for (const c of this.clients)
+            c.close();
+        for (const a of this.agents.list())
+            await this.agents.dispose(a.agentId).catch(() => { });
+        this.terminals.closeAll();
+        this.wss.close();
+        await new Promise(r => this.server.close(() => r()));
+        this.metadata.close();
+    }
+    async upgrade(req, socket, head) {
+        const protocol = req.headers['sec-websocket-protocol'];
+        const wsToken = Array.isArray(protocol)
+            ? protocol.find(x => x.startsWith('access-token.'))?.slice(13)
+            : protocol
+                ?.split(',')
+                .map(x => x.trim())
+                .find(x => x.startsWith('access-token.'))
+                ?.slice(13);
+        const pathname = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`).pathname, isSocket = pathname === '/api/v1/ws' || /^\/api\/v1\/terminals\/[^/]+\/ws$/.test(pathname);
+        if (!isSocket) {
+            socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
+            socket.destroy();
             return;
-        } const previous = pendingDelta?.event?.assistantMessageEvent; if (pendingDelta && pendingDelta.agentId === message.agentId && previous?.type === update.type) {
-            previous.delta += update.delta;
-            pendingDelta.eventId = message.eventId;
-            pendingDelta.sequence = message.sequence;
-            pendingDelta.timestamp = message.timestamp;
         }
-        else {
-            flushDelta();
-            pendingDelta = { ...message, event: { ...message.event, assistantMessageEvent: { ...update } } };
-        } if (!deltaTimer)
-            deltaTimer = setTimeout(flushDelta, 40); };
-        const unsubscribeVoice = this.voice?.subscribe((agentId, event) => { if (subscriptions.has('*') || subscriptions.has(agentId))
-            send({ type: 'voice_event', agentId, event }); });
-        const unsubscribeNamer = this.sessionNamer?.subscribe((agentId, event) => { if (subscriptions.has('*') || subscriptions.has(agentId))
-            send({ type: 'session_namer_event', agentId, event }); });
-        ws.on('close', () => { if (deltaTimer)
-            clearTimeout(deltaTimer); pendingDelta = undefined; this.clients.delete(ws); unsubscribeVoice?.(); unsubscribeNamer?.(); for (const unsubscribe of subscriptions.values())
-            unsubscribe(); });
-        ws.on('message', raw => {
-            void (async () => {
-                let m;
-                try {
-                    m = JSON.parse(raw.toString());
-                    if (m.type === 'subscribe_drafts') {
-                        subscriptions.get('drafts')?.();
-                        send({ type: 'subscribed_drafts', protocolVersion: 1 });
-                        subscriptions.set('drafts', this.drafts.subscribe((draft, replay) => send({ type: 'draft_event', draft, replay })));
-                        return;
-                    }
-                    if (m.type === 'draft_ack') {
-                        this.drafts.ack(String(m.id ?? ''));
-                        return;
-                    }
-                    if (m.type === 'subscribe_collab') {
-                        subscriptions.get('collab')?.();
-                        subscriptions.set('collab', this.collab.subscribe(event => send({ type: 'collab_event', event })));
-                        send({ type: 'subscribed_collab', protocolVersion: 1 });
-                        return;
-                    }
-                    if (m.type === 'subscribe_all') {
-                        subscriptions.get('*')?.();
-                        const forward = (agentId, e) => !subscriptions.has(agentId) && send({ type: 'agent_event', agentId, eventId: e.id, sequence: e.sequence, timestamp: e.timestamp, status: e.status, event: e.event });
-                        subscriptions.set('*', this.agents.subscribeAll(forward));
-                        send({ type: 'subscribed_all', protocolVersion: 1 });
-                        return;
-                    }
-                    if (m.type === 'subscribe') {
-                        const agentId = m.agentId, fromNow = m.fromNow === true;
-                        subscriptions.get(agentId)?.();
-                        const forward = (e) => send({ type: 'agent_event', agentId, eventId: e.id, sequence: e.sequence, timestamp: e.timestamp, status: e.status, event: e.event });
-                        let ready = false, active = true;
-                        const unsubscribe = this.agents.subscribe(agentId, e => { if (ready)
-                            forward(e); });
-                        const stop = () => { active = false; ready = false; unsubscribe(); };
-                        subscriptions.set(agentId, stop);
-                        try {
-                            send({ type: 'subscribed', agentId, protocolVersion: 1, currentSequence: this.agents.currentSequence(agentId) });
-                            if (!fromNow) {
-                                const last = Number(m.lastSequence ?? 0), replay = this.agents.events(agentId, last);
-                                if (this.agents.hasReplayGap(agentId, last) || replay.length > 250) {
-                                    const messageLimit = m.messageLimit === undefined ? undefined : Number(m.messageLimit);
-                                    const snapshot = await this.agents.snapshot(agentId, Number.isFinite(messageLimit) ? messageLimit : undefined);
-                                    if (!active)
-                                        return; // Closed or replaced by a newer subscription while awaiting messages.
-                                    // Do not forward live events ahead of the snapshot. Catch up from the
-                                    // existing bounded replay cache instead of maintaining another buffer.
-                                    const updates = this.agents.events(agentId, snapshot.lastSequence);
-                                    if (this.agents.hasReplayGap(agentId, snapshot.lastSequence) || (updates.length && updates[0].sequence !== snapshot.lastSequence + 1)) {
-                                        stop();
-                                        ws.close(1013, 'Replay gap during snapshot');
-                                        return;
-                                    }
-                                    send({ type: 'agent_snapshot', agentId, ...snapshot });
-                                    for (const event of updates)
-                                        forward(event);
-                                }
-                                else
-                                    for (const event of replay)
-                                        forward(event);
-                            }
-                            // Refresh/reconnect may already have a saved cursor but no in-memory
-                            // activity. Send the current IDs after replay, even if replay was empty.
-                            send({ type: 'agent_state', agentId, sequence: this.agents.currentSequence(agentId), state: this.agents.snapshotState(agentId) });
-                            ready = true;
-                        }
-                        catch (error) {
-                            if (!active)
-                                return;
-                            stop();
-                            if (subscriptions.get(agentId) === stop)
-                                subscriptions.delete(agentId);
-                            throw error;
-                        }
-                        return;
-                    }
-                    if (['prompt', 'steer', 'follow-up', 'abort'].includes(m.type)) {
-                        if (m.type !== 'abort') {
-                            this.voice?.recordUserPrompt(m.agentId, String(m.message ?? ''));
-                            this.sessionNamer?.recordUserPrompt(m.agentId, String(m.message ?? ''));
-                        }
-                        const disposition = await this.agents.command(m.agentId, m.type, m.message);
-                        send({ type: 'command_result', requestId: m.requestId, success: true, disposition });
-                        return;
-                    }
-                    if (m.type === 'clear-queue') {
-                        send({ type: 'command_result', requestId: m.requestId, success: true, queue: await this.agents.clearQueue(m.agentId) });
-                        return;
-                    }
-                    throw new Error('Unknown command');
-                }
-                catch (e) {
-                    send({ type: 'command_result', requestId: m?.requestId, success: false, error: { code: e.code ?? 'BAD_REQUEST', message: e instanceof SyntaxError ? 'Invalid JSON' : e.message } });
-                }
-            })();
-        });
-    }
-    terminalConnection(ws, terminalId) { this.clients.add(ws); let unsubscribe = () => { }; ws.on('close', () => { this.clients.delete(ws); unsubscribe(); }); try {
-        const send = (message) => { if (ws.readyState !== WebSocket.OPEN)
-            return; if (ws.bufferedAmount > 1024 * 1024) {
-            ws.close(1013, 'Terminal client is too slow');
+        if (this.noAuth && !this.allowInsecureNoAuth && !this.localRequest(req)) {
+            socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
+            socket.destroy();
             return;
-        } ws.send(JSON.stringify(message)); };
-        unsubscribe = this.terminals.subscribe(terminalId, event => { send(event); if (event.type === 'exit')
-            setTimeout(() => ws.close(), 50); });
-        const snapshot = this.terminals.snapshot(terminalId);
-        send({ type: 'snapshot', data: snapshot.data, record: snapshot.record });
-        ws.on('message', raw => { try {
-            const message = JSON.parse(raw.toString());
-            if (message.type === 'input')
-                this.terminals.write(terminalId, message.data);
-            else if (message.type === 'resize')
-                this.terminals.resize(terminalId, Number(message.cols), Number(message.rows));
-            else
-                throw new Error('Unknown terminal command');
         }
-        catch (error) {
-            send({ type: 'error', message: error.message });
-        } });
-    }
-    catch (error) {
-        ws.send(JSON.stringify({ type: 'error', message: error.message }));
-        ws.close();
-    } }
-    async loadMetadata() { let workspaces = this.metadata.listWorkspaces(); if (!workspaces.length) {
-        for (const workspace of this.workspaces.list())
-            this.metadata.saveWorkspace(workspace);
-        workspaces = this.metadata.listWorkspaces();
-    } this.workspaces.replace(workspaces); let agents = this.metadata.listAgents(); if (!agents.length) {
-        for (const agent of this.agents.list())
-            this.metadata.saveAgent(agent);
-        agents = this.metadata.listAgents();
-    } await this.agents.restore(agents); }
-    async ensureSessionIndex(workspace, cwd, force = false) { const key = `${workspace.id}:${cwd}`, last = this.sessionIndexTimes.get(key) ?? 0; if (!force && Date.now() - last < 30000)
-        return; const existing = this.sessionIndexJobs.get(key); if (existing)
-        return existing; const job = (async () => { const sessions = await SessionManager.list(cwd); this.metadata.syncSessions(workspace.id, cwd, sessions); this.sessionIndexTimes.set(key, Date.now()); })().finally(() => this.sessionIndexJobs.delete(key)); this.sessionIndexJobs.set(key, job); return job; }
-    async indexAgentSession(agentId) { const existing = this.agentIndexJobs.get(agentId); if (existing)
-        return existing; const job = (async () => { try {
-        const record = this.agents.get(agentId).record, summary = await this.agents.sessionInfo(agentId);
-        this.metadata.upsertSessionFromAgent(record, summary);
-        this.metadata.scheduleAgent(record);
-    }
-    catch { /* Session files may not exist until the first assistant response is persisted. */ } })().finally(() => this.agentIndexJobs.delete(agentId)); this.agentIndexJobs.set(agentId, job); return job; }
-    async resolveWorkspaceCwd(workspaceId, relativeCwd) { const workspace = this.workspaces.get(workspaceId); if (!workspace)
-        throw Object.assign(new Error('Workspace not found'), { code: 'WORKSPACE_NOT_FOUND' }); return this.workspaces.resolve(workspace, relativeCwd || '.'); }
-    /** Without a pairing code the only boundary left is the browser's: loopback Host and, if sent, a loopback Origin. */
-    localRequest(req) { if (!isLoopbackHost(String(req.headers.host ?? '')))
-        return false; const origin = String(req.headers.origin ?? ''); if (!origin)
-        return true; try {
-        return isLoopbackHost(new URL(origin).host);
-    }
-    catch {
-        return false;
-    } }
-    async authRole(value) { if (this.noAuth)
-        return 'full'; return value?.startsWith('Bearer ') ? this.auth.role(value.slice(7)) : undefined; }
-    async serveWeb(pathname, req, res) { const asset = webFiles[pathname]; if (!asset)
-        return false; try {
-        const content = await readFile(path.isAbsolute(asset.file) ? asset.file : path.join(webRoot, asset.file)), etag = `"${createHash('sha256').update(content).digest('base64url')}"`, ifNoneMatch = String(req.headers['if-none-match'] ?? '').split(',').map(value => value.trim().replace(/^W\//, ''));
-        res.setHeader('content-type', asset.type);
-        res.setHeader('cache-control', pathname.startsWith('/vendor/') ? 'public, max-age=86400' : 'no-cache');
-        res.setHeader('etag', etag);
-        res.setHeader('x-content-type-options', 'nosniff');
-        if (this.noAuth && asset.type.startsWith('text/html'))
-            res.setHeader('content-security-policy', "frame-ancestors 'self'");
-        if (ifNoneMatch.includes(etag) || ifNoneMatch.includes('*')) {
-            res.statusCode = 304;
-            res.end();
-            return true;
+        const key = this.clientKey(req), retryAfter = this.loginLimiter.retryAfterMs(key);
+        if (retryAfter > 0) {
+            socket.write(`HTTP/1.1 429 Too Many Requests\r\nRetry-After: ${Math.ceil(retryAfter / 1000)}\r\n\r\n`);
+            socket.destroy();
+            return;
         }
-        res.statusCode = 200;
-        res.end(content);
-    }
-    catch {
-        json(res, 500, { error: { code: 'WEB_UI_UNAVAILABLE', message: 'Web UI files are missing. Reinstall the pi2web package.' } });
-    } return true; }
-    /** Reads a JSON body as bytes so the size limit applies while streaming and multi-byte characters are never split across chunks. */
-    async body(req, maxBytes = 2 * 1024 * 1024) { const raw = await this.binaryBody(req, maxBytes); return raw.length ? JSON.parse(raw.toString('utf8')) : {}; }
-    async binaryBody(req, maxBytes = 25 * 1024 * 1024) { const chunks = []; let size = 0; for await (const value of req) {
-        const chunk = Buffer.isBuffer(value) ? value : Buffer.from(value);
-        size += chunk.length;
-        if (size > maxBytes)
-            throw Object.assign(new Error('Request too large'), { code: 'REQUEST_TOO_LARGE' });
-        chunks.push(chunk);
-    } return Buffer.concat(chunks); }
-    async handle(req, res) { const requestId = randomUUID(); res.setHeader('x-request-id', requestId); if (this.noAuth) {
-        if (!this.allowInsecureNoAuth && !this.localRequest(req))
-            return json(res, 403, { error: { code: 'FORBIDDEN', message: 'Without authentication only loopback requests are served', requestId } });
-        if (req.headers.origin)
-            res.setHeader('access-control-allow-origin', String(req.headers.origin));
-    }
-    else
-        res.setHeader('access-control-allow-origin', '*'); res.setHeader('access-control-allow-headers', 'Authorization,Content-Type,X-Audio-Filename'); res.setHeader('access-control-allow-methods', 'GET,POST,PUT,DELETE,OPTIONS'); try {
-        if (req.method === 'OPTIONS') {
-            res.statusCode = 204;
-            return res.end();
+        const role = (await this.authRole(req.headers.authorization)) ??
+            (wsToken ? await this.auth.role(wsToken) : undefined);
+        if (!role) {
+            this.loginLimiter.recordFailure(key);
+            socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
+            socket.destroy();
+            return;
         }
-        const u = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
-        if (req.method === 'GET' && await this.serveWeb(u.pathname, req, res))
+        if (role === 'voice') {
+            socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
+            socket.destroy();
             return;
-        if (req.method === 'GET' && u.pathname === '/health')
-            return json(res, 200, { data: { status: 'ok', authRequired: !this.noAuth } });
-        const parts = u.pathname.split('/').filter(Boolean);
-        if (req.method === 'POST' && u.pathname === '/api/v1/auth/login') {
-            const key = this.clientKey(req), retryAfter = this.loginRetryAfterMs(key);
-            if (retryAfter > 0) {
-                res.setHeader('retry-after', String(Math.ceil(retryAfter / 1000)));
-                return json(res, 429, { error: { code: 'TOO_MANY_ATTEMPTS', message: `Too many failed pairing attempts. Retry in ${Math.ceil(retryAfter / 1000)} seconds`, requestId } });
-            }
-            const b = await this.body(req);
-            if (await this.auth.verify(String(b.token ?? ''))) {
-                this.loginFailures.delete(key);
-                return json(res, 200, { data: { authenticated: true } });
-            }
-            const lockedFor = this.recordLoginFailure(key);
-            if (lockedFor > 0)
-                res.setHeader('retry-after', String(Math.ceil(lockedFor / 1000)));
-            return json(res, 401, { error: { code: 'UNAUTHORIZED', message: 'Invalid token', requestId } });
         }
-        if (parts[0] === 'api' && parts[1] === 'v1' && parts[2] === 'collab') {
-            const key = this.clientKey(req), retryAfter = this.loginRetryAfterMs(key);
-            if (retryAfter > 0) {
-                res.setHeader('retry-after', String(Math.ceil(retryAfter / 1000)));
-                return json(res, 429, { error: { code: 'TOO_MANY_ATTEMPTS', message: `Too many failed attempts. Retry in ${Math.ceil(retryAfter / 1000)} seconds`, requestId } });
-            }
-            const header = String(req.headers.authorization ?? ''), token = header.startsWith('Bearer ') ? header.slice(7) : '';
-            const result = await this.collabRouter.handle({ method: req.method ?? 'GET', url: u, parts, token, body: () => this.body(req) });
-            if (!result)
-                return json(res, 404, { error: { code: 'NOT_FOUND', message: 'Not found', requestId } });
-            if (result.authFailed)
-                this.recordLoginFailure(key);
-            else
-                this.loginFailures.delete(key);
-            return json(res, result.status, result.payload);
+        this.loginLimiter.clear(key);
+        this.wss.handleUpgrade(req, socket, head, ws => this.wss.emit('connection', ws, req));
+    }
+    clientKey(req) {
+        return req.socket.remoteAddress ?? 'unknown';
+    }
+    async loadMetadata() {
+        let workspaces = this.metadata.listWorkspaces();
+        if (!workspaces.length) {
+            for (const workspace of this.workspaces.list())
+                this.metadata.saveWorkspace(workspace);
+            workspaces = this.metadata.listWorkspaces();
         }
-        const role = await this.authRole(req.headers.authorization);
-        if (!role)
-            return json(res, 401, { error: { code: 'UNAUTHORIZED', message: 'Authentication required', requestId } });
-        if (role === 'voice' && !(req.method === 'POST' && u.pathname === '/api/v1/draft' || req.method === 'GET' && u.pathname === '/api/v1/system/status'))
-            return json(res, 403, { error: { code: 'FORBIDDEN', message: 'This token cannot access this endpoint', requestId } });
-        if (req.method === 'POST' && u.pathname === '/api/v1/draft') {
-            const b = await this.body(req), text = typeof b?.text === 'string' ? b.text : '';
-            if (!text.trim())
-                return json(res, 400, { error: { code: 'INVALID_REQUEST', message: 'text is required', requestId } });
-            if (text.length > 20000)
-                return json(res, 413, { error: { code: 'REQUEST_TOO_LARGE', message: 'text is too long', requestId } });
-            if (b.agentId !== undefined || b.target !== undefined)
-                return json(res, 400, { error: { code: 'INVALID_REQUEST', message: 'draft targets are not supported', requestId } });
-            if (b.mode !== undefined && b.mode !== 'append' && b.mode !== 'replace')
-                return json(res, 400, { error: { code: 'INVALID_REQUEST', message: 'mode must be append or replace', requestId } });
-            const { draft, delivered } = this.drafts.add({ text, mode: b.mode ?? 'append', source: typeof b.source === 'string' ? b.source.slice(0, 32) : undefined });
-            return json(res, 200, { data: { id: draft.id, mode: draft.mode, delivered, queued: true } });
+        this.workspaces.replace(workspaces);
+        let agents = this.metadata.listAgents();
+        if (!agents.length) {
+            for (const agent of this.agents.list())
+                this.metadata.saveAgent(agent);
+            agents = this.metadata.listAgents();
         }
-        if (req.method === 'GET' && u.pathname === '/api/v1/system/status')
-            return json(res, 200, { data: { version: pkg.version, protocolVersion: 1, authRequired: !this.noAuth, piVersion: PI_VERSION, nodeVersion: process.version, uptimeSeconds: Math.floor(process.uptime()), agentCount: this.agents.list().length, terminalCount: this.terminals.list().length, webSocketConnections: this.clients.size, voiceEnabled: !!this.voice, voiceCapabilities: this.voice?.capabilities() ?? { tts: false, stt: false }, sessionNamingEnabled: !!this.sessionNamer, mailNotificationsConfigured: !!this.mailNotifier, mailNotificationsEnabled: this.mailNotifier?.getSettings().enabled ?? false } });
-        if (req.method === 'GET' && u.pathname === '/api/v1/mail-notifications')
-            return json(res, 200, { data: { available: !!this.mailNotifier, settings: this.mailNotifier?.getSettings() ?? null } });
-        if (req.method === 'POST' && u.pathname === '/api/v1/mail-notifications') {
-            if (!this.mailNotifier)
-                throw Object.assign(new Error('MailDispatch is not configured at server startup'), { code: 'MAIL_NOTIFICATIONS_DISABLED' });
-            const b = await this.body(req), patch = {};
-            if ('enabled' in b) {
-                if (typeof b.enabled !== 'boolean')
-                    throw Object.assign(new Error('enabled must be a boolean'), { code: 'INVALID_MAIL_NOTIFICATION_SETTINGS' });
-                patch.enabled = b.enabled;
-            }
-            if ('aggregationDelaySeconds' in b)
-                patch.aggregationDelaySeconds = Number(b.aggregationDelaySeconds);
-            if ('includeResponse' in b) {
-                if (typeof b.includeResponse !== 'boolean')
-                    throw Object.assign(new Error('includeResponse must be a boolean'), { code: 'INVALID_MAIL_NOTIFICATION_SETTINGS' });
-                patch.includeResponse = b.includeResponse;
-            }
-            if ('includeSessionDetails' in b) {
-                if (typeof b.includeSessionDetails !== 'boolean')
-                    throw Object.assign(new Error('includeSessionDetails must be a boolean'), { code: 'INVALID_MAIL_NOTIFICATION_SETTINGS' });
-                patch.includeSessionDetails = b.includeSessionDetails;
+        await this.agents.restore(agents);
+    }
+    async ensureSessionIndex(workspace, cwd, force = false) {
+        const key = `${workspace.id}:${cwd}`, last = this.sessionIndexTimes.get(key) ?? 0;
+        if (!force && Date.now() - last < 30000)
+            return;
+        const existing = this.sessionIndexJobs.get(key);
+        if (existing)
+            return existing;
+        const job = (async () => {
+            const sessions = await SessionManager.list(cwd);
+            this.metadata.syncSessions(workspace.id, cwd, sessions);
+            this.sessionIndexTimes.set(key, Date.now());
+        })().finally(() => this.sessionIndexJobs.delete(key));
+        this.sessionIndexJobs.set(key, job);
+        return job;
+    }
+    async indexAgentSession(agentId) {
+        const existing = this.agentIndexJobs.get(agentId);
+        if (existing)
+            return existing;
+        const job = (async () => {
+            try {
+                const record = this.agents.get(agentId).record, summary = await this.agents.sessionInfo(agentId);
+                this.metadata.upsertSessionFromAgent(record, summary);
+                this.metadata.scheduleAgent(record);
             }
-            if ('collabEscalations' in b) {
-                if (typeof b.collabEscalations !== 'boolean')
-                    throw Object.assign(new Error('collabEscalations must be a boolean'), { code: 'INVALID_MAIL_NOTIFICATION_SETTINGS' });
-                patch.collabEscalations = b.collabEscalations;
+            catch {
+                /* Session files may not exist until the first assistant response is persisted. */
             }
-            const settings = this.mailNotifier.updateSettings(patch);
-            this.metadata.setSetting('mailNotifications', settings);
-            return json(res, 200, { data: { available: true, settings } });
-        }
-        if (req.method === 'GET' && u.pathname === '/api/v1/workspaces')
-            return json(res, 200, { data: this.workspaces.list() });
-        if (req.method === 'POST' && u.pathname === '/api/v1/workspaces') {
-            const b = await this.body(req);
-            if (typeof b.label !== 'string' || typeof b.rootPath !== 'string')
-                return json(res, 400, { error: { code: 'INVALID_REQUEST', message: 'label and rootPath required', requestId } });
-            const workspace = this.workspaces.add(b.label, b.rootPath);
-            this.metadata.saveWorkspace(workspace);
-            return json(res, 201, { data: workspace });
-        }
-        if (parts[2] === 'workspaces' && parts[4] === 'tree' && req.method === 'GET')
-            return json(res, 200, { data: await this.workspaces.tree(parts[3], u.searchParams.get('path') ?? '.') });
-        if (parts[2] === 'workspaces' && parts[4] === 'file' && req.method === 'GET')
-            return json(res, 200, { data: await this.workspaces.file(parts[3], u.searchParams.get('path') ?? '', Number(u.searchParams.get('offset') ?? 0), Number(u.searchParams.get('limit') ?? 1048576)) });
-        if (parts[2] === 'workspaces' && parts[4] === 'stat' && req.method === 'GET')
-            return json(res, 200, { data: await this.workspaces.stat(parts[3], u.searchParams.get('path') ?? '.') });
-        if (req.method === 'GET' && u.pathname === '/api/v1/sessions') {
-            const workspace = this.workspaces.get(u.searchParams.get('workspaceId') ?? '');
-            if (!workspace)
-                throw Object.assign(new Error('Workspace not found'), { code: 'WORKSPACE_NOT_FOUND' });
-            const cwd = await this.workspaces.resolve(workspace, u.searchParams.get('path') ?? '.');
-            await this.ensureSessionIndex(workspace, cwd, u.searchParams.get('refresh') === 'true');
-            const limit = u.searchParams.has('limit') ? Number(u.searchParams.get('limit')) : undefined, offset = Number(u.searchParams.get('offset') ?? 0);
-            return json(res, 200, { data: this.metadata.listSessions(cwd, limit, offset) });
-        }
-        if (req.method === 'GET' && u.pathname === '/api/v1/terminals')
-            return json(res, 200, { data: this.terminals.list() });
-        if (req.method === 'POST' && u.pathname === '/api/v1/terminals') {
-            const b = await this.body(req);
-            const terminal = await this.terminals.create(String(b.workspaceId ?? ''), String(b.relativeCwd ?? '.'), Number(b.cols ?? 80), Number(b.rows ?? 24));
-            return json(res, 201, { data: terminal });
+        })().finally(() => this.agentIndexJobs.delete(agentId));
+        this.agentIndexJobs.set(agentId, job);
+        return job;
+    }
+    async resolveWorkspaceCwd(workspaceId, relativeCwd) {
+        const workspace = this.workspaces.get(workspaceId);
+        if (!workspace)
+            throw Object.assign(new Error('Workspace not found'), { code: 'WORKSPACE_NOT_FOUND' });
+        return this.workspaces.resolve(workspace, relativeCwd || '.');
+    }
+    /** Without a pairing code the only boundary left is the browser's: loopback Host and, if sent, a loopback Origin. */
+    localRequest(req) {
+        if (!isLoopbackHost(String(req.headers.host ?? '')))
+            return false;
+        const origin = String(req.headers.origin ?? '');
+        if (!origin)
+            return true;
+        try {
+            return isLoopbackHost(new URL(origin).host);
         }
-        if (parts[2] === 'terminals') {
-            const id = parts[3];
-            if (req.method === 'GET' && parts.length === 4)
-                return json(res, 200, { data: this.terminals.get(id).record });
-            if (req.method === 'DELETE' && parts.length === 4) {
-                this.terminals.close(id);
-                return json(res, 200, { data: { closed: true } });
-            }
+        catch {
+            return false;
         }
-        if (req.method === 'GET' && u.pathname === '/api/v1/agents/models') {
-            const workspaceId = u.searchParams.get('workspaceId') ?? '', relativeCwd = u.searchParams.get('relativeCwd') ?? '.';
-            return json(res, 200, { data: await this.agents.capabilityPreview(workspaceId, relativeCwd) });
+    }
+    async authRole(value) {
+        if (this.noAuth)
+            return 'full';
+        return value?.startsWith('Bearer ') ? this.auth.role(value.slice(7)) : undefined;
+    }
+    async handle(req, res) {
+        const requestId = randomUUID();
+        res.setHeader('x-request-id', requestId);
+        if (this.noAuth) {
+            if (!this.allowInsecureNoAuth && !this.localRequest(req))
+                return json(res, 403, {
+                    error: {
+                        code: 'FORBIDDEN',
+                        message: 'Without authentication only loopback requests are served',
+                        requestId
+                    }
+                });
+            if (req.headers.origin)
+                res.setHeader('access-control-allow-origin', String(req.headers.origin));
         }
-        if (req.method === 'GET' && u.pathname === '/api/v1/agents')
-            return json(res, 200, { data: this.agents.list() });
-        if (req.method === 'POST' && u.pathname === '/api/v1/agents') {
-            const b = await this.body(req), profile = b.profile === undefined ? 'default' : b.profile;
-            if (profile !== 'default' && profile !== 'collab')
-                throw Object.assign(new Error('profile must be default or collab'), { code: 'INVALID_REQUEST' });
-            let sessionFile;
-            if (b.sessionFile) {
-                const workspace = this.workspaces.get(b.workspaceId);
-                if (!workspace)
-                    throw Object.assign(new Error('Workspace not found'), { code: 'WORKSPACE_NOT_FOUND' });
-                const cwd = await this.workspaces.resolve(workspace, b.relativeCwd ?? '.');
-                await this.ensureSessionIndex(workspace, cwd);
-                if (!this.metadata.hasSession(cwd, b.sessionFile))
-                    throw Object.assign(new Error('Session is not valid for cwd'), { code: 'SESSION_NOT_FOUND' });
-                sessionFile = b.sessionFile;
+        else
+            res.setHeader('access-control-allow-origin', '*');
+        res.setHeader('access-control-allow-headers', 'Authorization,Content-Type,X-Audio-Filename');
+        res.setHeader('access-control-allow-methods', 'GET,POST,PUT,DELETE,OPTIONS');
+        try {
+            if (req.method === 'OPTIONS') {
+                res.statusCode = 204;
+                return res.end();
             }
-            const agent = await this.agents.create(b.workspaceId, b.relativeCwd ?? '.', sessionFile, profile);
-            try {
-                if (b.model !== undefined) {
-                    if (!b.model || typeof b.model.provider !== 'string' || typeof b.model.modelId !== 'string')
-                        throw Object.assign(new Error('model.provider and model.modelId are required'), { code: 'INVALID_REQUEST' });
-                    await this.agents.setModel(agent.agentId, b.model.provider, b.model.modelId);
-                }
-                if (b.sessionName !== undefined) {
-                    if (typeof b.sessionName !== 'string')
-                        throw Object.assign(new Error('sessionName must be a string'), { code: 'INVALID_REQUEST' });
-                    await this.agents.setSessionName(agent.agentId, b.sessionName);
+            const u = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+            if (req.method === 'GET' && (await serveWebAsset(u.pathname, req, res, { noAuth: this.noAuth })))
+                return;
+            if (req.method === 'GET' && u.pathname === '/health')
+                return json(res, 200, { data: { status: 'ok', authRequired: !this.noAuth } });
+            const parts = u.pathname.split('/').filter(Boolean);
+            if (req.method === 'POST' && u.pathname === '/api/v1/auth/login') {
+                const key = this.clientKey(req), retryAfter = this.loginLimiter.retryAfterMs(key);
+                if (retryAfter > 0) {
+                    res.setHeader('retry-after', String(Math.ceil(retryAfter / 1000)));
+                    return json(res, 429, {
+                        error: {
+                            code: 'TOO_MANY_ATTEMPTS',
+                            message: `Too many failed pairing attempts. Retry in ${Math.ceil(retryAfter / 1000)} seconds`,
+                            requestId
+                        }
+                    });
                 }
-                const configured = this.agents.get(agent.agentId).record;
-                this.metadata.saveAgent(configured);
-                return json(res, 201, { data: { ...configured } });
-            }
-            catch (error) {
-                await this.agents.remove(agent.agentId).catch(() => { });
-                throw error;
-            }
-        }
-        if (parts[2] === 'agents') {
-            const id = parts[3];
-            if (req.method === 'GET' && parts.length === 4)
-                return json(res, 200, { data: this.agents.get(id).record });
-            if (req.method === 'DELETE' && parts.length === 4) {
-                await this.agents.dispose(id);
-                this.metadata.saveAgent(this.agents.get(id).record);
-                return json(res, 200, { data: { stopped: true } });
-            }
-            if (req.method === 'POST' && parts[4] === 'archive') {
-                const record = await this.agents.archive(id);
-                this.metadata.archiveAgent(record);
-                return json(res, 200, { data: { archived: true } });
-            }
-            if (req.method === 'GET' && parts[4] === 'state')
-                return json(res, 200, { data: await this.agents.state(id) });
-            if (req.method === 'GET' && parts[4] === 'messages') {
-                const hasPaging = u.searchParams.has('limit') || u.searchParams.has('before');
-                if (!hasPaging)
-                    return json(res, 200, { data: await this.agents.messages(id) });
-                const limit = Number(u.searchParams.get('limit') ?? 25), before = u.searchParams.has('before') ? Number(u.searchParams.get('before')) : undefined;
-                return json(res, 200, { data: await this.agents.messagePage(id, limit, before) });
-            }
-            if (req.method === 'GET' && parts[4] === 'capabilities')
-                return json(res, 200, { data: await this.agents.capabilities(id) });
-            if (req.method === 'GET' && parts[4] === 'session')
-                return json(res, 200, { data: u.searchParams.get('summary') === 'true' ? await this.agents.sessionInfo(id) : await this.agents.session(id) });
-            if (req.method === 'POST' && parts[4] === 'compact') {
-                const b = await this.body(req);
-                return json(res, 200, { data: await this.agents.compact(id, b.instructions) });
-            }
-            if (req.method === 'POST' && parts[4] === 'model') {
-                const b = await this.body(req);
-                await this.agents.setModel(id, b.provider, b.modelId);
-                return json(res, 200, { data: await this.agents.capabilities(id) });
-            }
-            if (req.method === 'POST' && parts[4] === 'thinking') {
-                const b = await this.body(req);
-                await this.agents.setThinkingLevel(id, b.level);
-                return json(res, 200, { data: await this.agents.capabilities(id) });
-            }
-            if (req.method === 'POST' && parts[4] === 'session-name') {
-                const b = await this.body(req);
-                await this.agents.setSessionName(id, b.name);
-                const summary = await this.agents.sessionInfo(id), record = this.agents.get(id).record;
-                this.metadata.saveAgent(record);
-                this.metadata.upsertSessionFromAgent(record, summary);
-                return json(res, 200, { data: summary });
-            }
-            if (req.method === 'POST' && parts[4] === 'navigate') {
-                const b = await this.body(req);
-                return json(res, 200, { data: await this.agents.navigate(id, b.entryId) });
-            }
-            if (req.method === 'POST' && parts[4] === 'fork') {
-                const b = await this.body(req);
-                const agent = await this.agents.fork(id, b.entryId);
-                this.metadata.saveAgent(agent.agent);
-                return json(res, 201, { data: agent });
-            }
-            if (req.method === 'GET' && parts[4] === 'commands')
-                return json(res, 200, { data: await this.agents.listCommands(id) });
-            if (req.method === 'POST' && parts[4] === 'bash') {
-                const b = await this.body(req);
-                if (typeof b.command !== 'string')
-                    throw Object.assign(new Error('command must be a string'), { code: 'INVALID_REQUEST' });
-                const command = b.command.trim();
-                if (!command)
-                    throw Object.assign(new Error('command is required'), { code: 'INVALID_REQUEST' });
-                if (command.length > 8000)
-                    throw Object.assign(new Error('command is too long'), { code: 'INVALID_REQUEST' });
-                const result = await this.agents.runBash(id, command, b.excludeFromContext === true);
-                this.metadata.scheduleAgent(this.agents.get(id).record);
-                return json(res, 200, { data: result });
-            }
-            if (req.method === 'POST' && parts[4] === 'bash-abort') {
-                await this.agents.abortBash(id);
-                return json(res, 200, { data: { aborted: true } });
-            }
-            if (parts[4] === 'queue') {
-                if (req.method === 'GET')
-                    return json(res, 200, { data: await this.agents.queue(id) });
-                if (req.method === 'DELETE')
-                    return json(res, 200, { data: await this.agents.clearQueue(id) });
-            }
-            if (parts[4] === 'mcp') {
-                const cwd = this.agents.get(id).record.cwd;
-                if (req.method === 'GET')
-                    return json(res, 200, { data: listMcpServers(cwd) });
-                if (req.method === 'POST') {
-                    const b = await this.body(req);
-                    if (typeof b.name !== 'string' || typeof b.enabled !== 'boolean')
-                        throw Object.assign(new Error('name and enabled are required'), { code: 'INVALID_MCP_REQUEST' });
-                    return json(res, 200, { data: setMcpServerEnabled(cwd, b.name, b.enabled) });
+                const b = await readJsonBody(req);
+                if (await this.auth.verify(String(b.token ?? ''))) {
+                    this.loginLimiter.clear(key);
+                    return json(res, 200, { data: { authenticated: true } });
                 }
-            }
-            if (req.method === 'POST' && parts[4] === 'extension-response') {
-                const b = await this.body(req);
-                await this.agents.extensionResponse(id, b.requestId, b.value);
-                return json(res, 200, { data: { success: true } });
-            }
-            if (req.method === 'POST' && parts[4] === 'transcribe') {
-                if (!this.voice)
-                    throw Object.assign(new Error('Voice service is disabled'), { code: 'VOICE_DISABLED' });
-                this.agents.get(id);
-                const audio = await this.binaryBody(req), mime = String(req.headers['content-type'] ?? 'audio/webm').split(';')[0], filename = String(req.headers['x-audio-filename'] ?? 'recording.webm');
-                return json(res, 200, { data: await this.voice.transcribe(audio, mime, filename) });
-            }
-            if (req.method === 'POST' && ['prompt', 'steer', 'follow-up', 'abort'].includes(parts[4])) {
-                const b = await this.body(req);
-                if (parts[4] !== 'abort') {
-                    this.voice?.recordUserPrompt(id, String(b.message ?? ''));
-                    this.sessionNamer?.recordUserPrompt(id, String(b.message ?? ''));
+                const lockedFor = this.loginLimiter.recordFailure(key);
+                if (lockedFor > 0)
+                    res.setHeader('retry-after', String(Math.ceil(lockedFor / 1000)));
+                return json(res, 401, { error: { code: 'UNAUTHORIZED', message: 'Invalid token', requestId } });
+            }
+            if (parts[0] === 'api' && parts[1] === 'v1' && parts[2] === 'collab') {
+                const key = this.clientKey(req), retryAfter = this.loginLimiter.retryAfterMs(key);
+                if (retryAfter > 0) {
+                    res.setHeader('retry-after', String(Math.ceil(retryAfter / 1000)));
+                    return json(res, 429, {
+                        error: {
+                            code: 'TOO_MANY_ATTEMPTS',
+                            message: `Too many failed attempts. Retry in ${Math.ceil(retryAfter / 1000)} seconds`,
+                            requestId
+                        }
+                    });
                 }
-                const disposition = await this.agents.command(id, parts[4], b.message ?? '');
-                const record = this.agents.get(id).record;
-                this.metadata.scheduleAgent(record);
-                if (parts[4] === 'prompt')
-                    void this.indexAgentSession(id);
-                return json(res, 200, { data: { success: true, disposition } });
-            }
+                const header = String(req.headers.authorization ?? ''), token = header.startsWith('Bearer ') ? header.slice(7) : '';
+                const result = await this.collabRouter.handle({
+                    method: req.method ?? 'GET',
+                    url: u,
+                    parts,
+                    token,
+                    body: () => readJsonBody(req)
+                });
+                if (!result)
+                    return json(res, 404, { error: { code: 'NOT_FOUND', message: 'Not found', requestId } });
+                if (result.authFailed)
+                    this.loginLimiter.recordFailure(key);
+                else
+                    this.loginLimiter.clear(key);
+                return json(res, result.status, result.payload);
+            }
+            const role = await this.authRole(req.headers.authorization);
+            if (!role)
+                return json(res, 401, { error: { code: 'UNAUTHORIZED', message: 'Authentication required', requestId } });
+            if (role === 'voice' &&
+                !((req.method === 'POST' && u.pathname === '/api/v1/draft') ||
+                    (req.method === 'GET' && u.pathname === '/api/v1/system/status')))
+                return json(res, 403, {
+                    error: { code: 'FORBIDDEN', message: 'This token cannot access this endpoint', requestId }
+                });
+            if (req.method === 'POST' && u.pathname === '/api/v1/draft') {
+                const b = await readJsonBody(req), text = typeof b?.text === 'string' ? b.text : '';
+                if (!text.trim())
+                    return json(res, 400, { error: { code: 'INVALID_REQUEST', message: 'text is required', requestId } });
+                if (text.length > 20000)
+                    return json(res, 413, { error: { code: 'REQUEST_TOO_LARGE', message: 'text is too long', requestId } });
+                if (b.agentId !== undefined || b.target !== undefined)
+                    return json(res, 400, {
+                        error: { code: 'INVALID_REQUEST', message: 'draft targets are not supported', requestId }
+                    });
+                if (b.mode !== undefined && b.mode !== 'append' && b.mode !== 'replace')
+                    return json(res, 400, {
+                        error: { code: 'INVALID_REQUEST', message: 'mode must be append or replace', requestId }
+                    });
+                const { draft, delivered } = this.drafts.add({
+                    text,
+                    mode: b.mode ?? 'append',
+                    source: typeof b.source === 'string' ? b.source.slice(0, 32) : undefined
+                });
+                return json(res, 200, { data: { id: draft.id, mode: draft.mode, delivered, queued: true } });
+            }
+            if (req.method === 'GET' && u.pathname === '/api/v1/system/status')
+                return json(res, 200, {
+                    data: {
+                        version: pkg.version,
+                        protocolVersion: PROTOCOL_VERSION,
+                        authRequired: !this.noAuth,
+                        piVersion: PI_VERSION,
+                        nodeVersion: process.version,
+                        uptimeSeconds: Math.floor(process.uptime()),
+                        agentCount: this.agents.list().length,
+                        terminalCount: this.terminals.list().length,
+                        webSocketConnections: this.clients.size,
+                        voiceEnabled: !!this.voice,
+                        voiceCapabilities: this.voice?.capabilities() ?? { tts: false, stt: false },
+                        sessionNamingEnabled: !!this.sessionNamer,
+                        mailNotificationsConfigured: !!this.mailNotifier,
+                        mailNotificationsEnabled: this.mailNotifier?.getSettings().enabled ?? false
+                    }
+                });
+            if (await handleMailSettingsRoutes({ mailNotifier: this.mailNotifier, metadata: this.metadata }, req, res, u))
+                return;
+            const workspaceContext = {
+                workspaces: this.workspaces,
+                terminals: this.terminals,
+                metadata: this.metadata,
+                ensureSessionIndex: (workspace, cwd, force) => this.ensureSessionIndex(workspace, cwd, force)
+            };
+            if (await handleWorkspaceRoutes(workspaceContext, req, res, u, parts, requestId))
+                return;
+            if (await handleSystemPromptRoutes({ agents: this.agents, templates: this.templates, body: () => readJsonBody(req) }, req, res, u, parts))
+                return;
+            const agentContext = {
+                agents: this.agents,
+                templates: this.templates,
+                metadata: this.metadata,
+                workspaces: this.workspaces,
+                voice: this.voice,
+                sessionNamer: this.sessionNamer,
+                ensureSessionIndex: (workspace, cwd, force) => this.ensureSessionIndex(workspace, cwd, force),
+                indexAgentSession: (agentId) => this.indexAgentSession(agentId),
+                body: () => readJsonBody(req),
+                binaryBody: () => readBinaryBody(req)
+            };
+            if (await handleAgentRoutes(agentContext, req, res, u, parts))
+                return;
+            return json(res, 404, { error: { code: 'NOT_FOUND', message: 'Not found', requestId } });
+        }
+        catch (e) {
+            const x = e;
+            return json(res, errorStatus(x.code), {
+                error: { code: x.code ?? 'BAD_REQUEST', message: x.message ?? 'Request failed', requestId }
+            });
         }
-        return json(res, 404, { error: { code: 'NOT_FOUND', message: 'Not found', requestId } });
     }
-    catch (e) {
-        const x = e;
-        return json(res, x.code === 'WORKSPACE_PATH_OUTSIDE_ROOT' ? 403 : x.code === 'FILE_TOO_LARGE' || x.code === 'REQUEST_TOO_LARGE' ? 413 : x.code === 'VOICE_DISABLED' || x.code === 'VOICE_STT_DISABLED' || x.code === 'MAIL_NOTIFICATIONS_DISABLED' ? 503 : x.code?.endsWith('NOT_FOUND') ? 404 : 400, { error: { code: x.code ?? 'BAD_REQUEST', message: x.message ?? 'Request failed', requestId } });
-    } }
 }