scream-code 0.14.9 → 0.15.1

package/dist/{app-2Dd57a5d.mjs → app-C3aR5fdI.mjs}

@@ -4,19 +4,20 @@ import { dirname as __cjsShimDirname } from 'node:path';
 const __filename = __cjsShimFileURLToPath(import.meta.url);
 const __dirname = __cjsShimDirname(__filename);
 import "./suppress-sqlite-warning-C2VB0doZ.mjs";
-import { $t as isTodoItemShape, A as renderDiffLinesClustered, An as getInputHistoryFile, At as ENABLE_TERMINAL_FOCUS_REPORTING, B as BackgroundAgentStatusComponent, Bn as ScreamHarness, Bt as TERMINAL_THEME_LIGHT, Cn as PULSE_WAVE_FRAMES, Ct as createThemeStyles, D as toggleEmptySessionHint, Dn as saveTuiConfig, Dt as parseOsc11BackgroundTheme, E as isTurnElapsedEnabled, En as loadTuiConfig, Et as detectTerminalTheme, F as estimateTokens, Fn as CLI_USER_AGENT_PRODUCT, Ft as OSC11_RESPONSE_PREFIX_NO_ESC, G as getBreathingFrame, Gn as log, H as AgentGroupComponent, Hn as resolveScreamHome, Ht as isStreaming, I as getSharedSpeedTracker, In as PRODUCT_NAME, It as QUERY_TERMINAL_THEME, J as refineGoal, Jn as isOrphanedToolCallError, Jt as printableChar, K as resetBreathingClock, Kn as resolveGlobalLogPath, L as SkillActivationComponent, Ln as DEFAULT_CATALOG_URL, Lt as TERMINAL_FOCUS_IN, M as langFromPath, Mn as detectInstallSource, Mt as OSC11_QUERY, N as CachedContainer, Nn as CLI_COMMAND_NAME, Nt as OSC11_RESPONSE, O as ToolCallComponent, On as detectShellEnvironment, Ot as DISABLE_TERMINAL_FOCUS_REPORTING, P as ThinkingComponent, Pn as CLI_UI_MODE, Pt as OSC11_RESPONSE_PREFIX, Qt as formatErrorMessage, R as ReadGroupComponent, Rn as fetchCatalog, Rt as TERMINAL_FOCUS_OUT, S as getDaemonInstructions, Sn as PIXEL_PULSE_FRAMES, St as createMarkdownTheme, T as isEmptySessionHintDismissed, Tn as TuiLikePreferencesSchema, Tt as getColorPalette, U as WelcomeComponent, Un as MemoryMemoStore, Ut as FooterComponent, V as AssistantMessageComponent, Vt as isBusy, W as BREATHE_CYCLE_MS, Wn as flushDiagnosticLogs, Xn as SCREAM_ERROR_INFO, Xt as appendStreamingArgsPreview, Yn as ErrorCodes, Yt as STATUS_BULLET, Zt as argsRecord, _ as refreshUpdateCache, _n as isExperimentalFlagEnabled, _t as clearInfoPanelState, an as EMPTY_SESSION_HINT_URL, b as readJsonlFile, bn as isEmbeddingModelCached, bt as resolveThemeSync, c as hasDispose, cn as SESSION_TIPS, ct as handlePlanCommand, d as formatMemoryMemoForInjection, dn as getCtrlDHint, en as parseStreamingArgs, et as toTerminalHyperlink, fn as getLlmNotSetMessage, g as selectUpdateTarget, gn as sortSlashCommands, gt as supportsBalance, hn as BUILTIN_SLASH_COMMANDS, ht as refreshProviderBalance, i as buildRoleAdditionalText, in as CHARS_PER_TOKEN, j as highlightLines, jn as getLogDir, jt as ENABLE_TERMINAL_THEME_REPORTING, k as renderDiffLines, kn as getDataDir, kt as DISABLE_TERMINAL_THEME_REPORTING, l as isPlanExpandable, ln as TIP_ROTATION_INTERVAL_MS, mn as buildSkillSlashCommands, n as clearEvalPanelState, nn as stringValue, nt as getModelCycleLevel, on as EXIT_CONFIRM_WINDOW_MS, ot as handleFusionPlanCommand, pn as getNoActiveSessionMessage, q as clearGoalState, qn as isScreamError, r as openUrl, rn as truncateErrorMessage, s as disposeChildren, sn as MAIN_AGENT_ID, t as dispatchInput, tn as serializeToolResultOutput, tt as changeThinkingLevel, u as MoonLoader, un as getCtrlCHint, v as readUpdateCache, vn as setExperimentalFlags, w as UserMessageComponent, wn as TuiConfigParseError, wt as contrastTextHex, xn as startManualEmbeddingDownload, xt as createEditorTheme, y as appendJsonlLine, yn as getKnowledgeStore, z as parseReadGroupOutput, zn as saveCatalogCache, zt as TERMINAL_THEME_DARK } from "./dispatch-1ojfKMwf.mjs";
+import { $t as isTodoItemShape, A as renderDiffLinesClustered, An as getInputHistoryFile, At as ENABLE_TERMINAL_FOCUS_REPORTING, B as BackgroundAgentStatusComponent, Bn as ScreamHarness, Bt as TERMINAL_THEME_LIGHT, Cn as PULSE_WAVE_FRAMES, Ct as createThemeStyles, D as toggleEmptySessionHint, Dn as saveTuiConfig, Dt as parseOsc11BackgroundTheme, E as isTurnElapsedEnabled, En as loadTuiConfig, Et as detectTerminalTheme, F as estimateTokens, Fn as CLI_USER_AGENT_PRODUCT, Ft as OSC11_RESPONSE_PREFIX_NO_ESC, G as getBreathingFrame, Gn as log, H as AgentGroupComponent, Hn as resolveScreamHome, Ht as isStreaming, I as getSharedSpeedTracker, In as PRODUCT_NAME, It as QUERY_TERMINAL_THEME, J as refineGoal, Jn as isOrphanedToolCallError, Jt as printableChar, K as resetBreathingClock, Kn as resolveGlobalLogPath, L as SkillActivationComponent, Ln as DEFAULT_CATALOG_URL, Lt as TERMINAL_FOCUS_IN, M as langFromPath, Mn as detectInstallSource, Mt as OSC11_QUERY, N as CachedContainer, Nn as CLI_COMMAND_NAME, Nt as OSC11_RESPONSE, O as ToolCallComponent, On as detectShellEnvironment, Ot as DISABLE_TERMINAL_FOCUS_REPORTING, P as ThinkingComponent, Pn as CLI_UI_MODE, Pt as OSC11_RESPONSE_PREFIX, Qt as formatErrorMessage, R as ReadGroupComponent, Rn as fetchCatalog, Rt as TERMINAL_FOCUS_OUT, S as getDaemonInstructions, Sn as PIXEL_PULSE_FRAMES, St as createMarkdownTheme, T as isEmptySessionHintDismissed, Tn as TuiLikePreferencesSchema, Tt as getColorPalette, U as WelcomeComponent, Un as MemoryMemoStore, Ut as FooterComponent, V as AssistantMessageComponent, Vt as isBusy, W as BREATHE_CYCLE_MS, Wn as flushDiagnosticLogs, Xn as SCREAM_ERROR_INFO, Xt as appendStreamingArgsPreview, Yn as ErrorCodes, Yt as STATUS_BULLET, Zt as argsRecord, _ as refreshUpdateCache, _n as isExperimentalFlagEnabled, _t as clearInfoPanelState, an as EMPTY_SESSION_HINT_URL, b as readJsonlFile, bn as isEmbeddingModelCached, bt as resolveThemeSync, c as hasDispose, cn as SESSION_TIPS, ct as handlePlanCommand, d as formatMemoryMemoForInjection, dn as getCtrlDHint, en as parseStreamingArgs, et as toTerminalHyperlink, fn as getLlmNotSetMessage, g as selectUpdateTarget, gn as sortSlashCommands, gt as supportsBalance, hn as BUILTIN_SLASH_COMMANDS, ht as refreshProviderBalance, i as buildRoleAdditionalText, in as CHARS_PER_TOKEN, j as highlightLines, jn as getLogDir, jt as ENABLE_TERMINAL_THEME_REPORTING, k as renderDiffLines, kn as getDataDir, kt as DISABLE_TERMINAL_THEME_REPORTING, l as isPlanExpandable, ln as TIP_ROTATION_INTERVAL_MS, mn as buildSkillSlashCommands, n as clearEvalPanelState, nn as stringValue, nt as getModelCycleLevel, on as EXIT_CONFIRM_WINDOW_MS, ot as handleFusionPlanCommand, pn as getNoActiveSessionMessage, q as clearGoalState, qn as isScreamError, r as openUrl, rn as truncateErrorMessage, s as disposeChildren, sn as MAIN_AGENT_ID, t as dispatchInput, tn as serializeToolResultOutput, tt as changeThinkingLevel, u as MoonLoader, un as getCtrlCHint, v as readUpdateCache, vn as setExperimentalFlags, w as UserMessageComponent, wn as TuiConfigParseError, wt as contrastTextHex, xn as startManualEmbeddingDownload, xt as createEditorTheme, y as appendJsonlLine, yn as getKnowledgeStore, z as parseReadGroupOutput, zn as saveCatalogCache, zt as TERMINAL_THEME_DARK } from "./dispatch-ATQMQq1p.mjs";
 import { a as setLocale, o as t } from "./text-input-dialog-BUXAKycx.mjs";
 import { createRequire } from "node:module";
-import { randomUUID } from "node:crypto";
-import { access, mkdir, mkdtemp, readFile, readdir, realpath, rm, unlink, writeFile } from "node:fs/promises";
+import { randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
+import { access, chmod, mkdir, mkdtemp, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
+import { Writable } from "node:stream";
 import { WebSocket, WebSocketServer } from "ws";
 import { appendFileSync, existsSync, mkdirSync, readFileSync, realpathSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import * as path$1 from "node:path";
-import path, { basename, dirname, isAbsolute, join, resolve } from "node:path";
+import path, { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { z } from "zod";
 import { exec, execFile, execSync, spawn, spawnSync } from "node:child_process";
 import { promisify } from "node:util";
-import { homedir, tmpdir } from "node:os";
+import { homedir, networkInterfaces, tmpdir } from "node:os";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { createServer } from "node:http";
 import process$1 from "node:process";
@@ -25,12 +26,13 @@ import { createInterface } from "node:readline/promises";
 import chalk, { chalkStderr } from "chalk";
 import { CombinedAutocompleteProvider, Container, Editor, Input, Key, ProcessTerminal, ScrollView, Spacer, Text, TuiAltScreen, VStack, decodeKittyPrintable, deleteAllKittyImages, fuzzyFilter, fuzzyMatch, getCapabilities, isKeyRelease, matchesKey, truncateToWidth, visibleWidth, wrapTextWithAnsi } from "@liutod-scream/pi-tui";
 import { createInterface as createInterface$1 } from "node:readline";
+import { toString } from "qrcode";
 //#region src/cli/build-info.ts
 function optionalBuildString(value) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 const SCREAM_BUILD_INFO = {
-	version: optionalBuildString("0.14.9"),
+	version: optionalBuildString("0.15.1"),
 	channel: optionalBuildString(""),
 	commit: optionalBuildString(""),
 	buildTarget: optionalBuildString("darwin-arm64")
@@ -191,14 +193,17 @@ function createProgram(version, onMain, onPluginNodeRunner = () => {}, onStreamJ
 			pluginDirs: subOpts["pluginDir"] ?? []
 		});
 	});
-	program.command("web").description("启动浏览器 Web UI").option("--port <port>", "端口号", "3210").option("--model <model>", "LLM 模型别名").option("-y, --yolo", "自动批准所有操作", false).option("--auto", "以自动权限模式启动", false).option("--no-open", "不自动打开浏览器").option("--skills-dir <dir>", "从该目录加载技能（可多次指定）", (value, previous) => [...previous ?? [], value], []).action((subOpts) => {
+	program.command("web").description("启动浏览器 Web UI").option("--port <port>", "端口号", "3210").option("--model <model>", "LLM 模型别名").option("-y, --yolo", "自动批准所有操作", false).option("--auto", "以自动权限模式启动", false).option("--no-open", "不自动打开浏览器").option("--lan", "开启局域网共享（同网设备凭网关密钥访问）", false).option("--token <key>", "自定义网关访问密钥（保存后供 --lan 使用）").option("--reset-password", "交互式重设网关访问密钥", false).option("--skills-dir <dir>", "从该目录加载技能（可多次指定）", (value, previous) => [...previous ?? [], value], []).action((subOpts) => {
 		onWeb({
 			port: parseInt(subOpts["port"], 10) || 3210,
 			model: subOpts["model"],
 			yolo: subOpts["yolo"] ?? false,
 			auto: subOpts["auto"] ?? false,
 			open: subOpts["open"] !== false,
-			skillsDirs: subOpts["skillsDir"] ?? []
+			skillsDirs: subOpts["skillsDir"] ?? [],
+			lan: subOpts["lan"] ?? false,
+			token: subOpts["token"],
+			resetPassword: subOpts["resetPassword"] ?? false
 		});
 	});
 	program.command("channel").description("管理 cc-connect 消息平台通道").command("setup").description("配置 cc-connect 并选择要连接的平台").action(() => {
@@ -7912,7 +7917,9 @@ const INITIAL_LIVE_PANE = {
 * Platform mapping:
 *   macOS  -> pbcopy
 *   Windows-> powershell Set-Clipboard (base64 payload, avoids quoting issues)
-*   Linux  -> wl-copy (Wayland) / xclip -selection clipboard -i (X11)
+*   Linux  -> wl-copy (Wayland) / xclip or xsel (X11), tried in a candidate
+*             chain so a missing tool (Ubuntu ships neither by default)
+*             falls through to the next one instead of failing outright.
 */
 var ClipboardTextError = class extends Error {
 	constructor(message) {
@@ -7938,9 +7945,36 @@ function detectPlatform() {
 	if (process.platform === "linux") return process.env["WAYLAND_DISPLAY"] ? "linux-wayland" : "linux-x11";
 	return "unsupported";
 }
+function linuxCandidates(platform) {
+	const wl = {
+		command: "wl-copy",
+		args: []
+	};
+	const xclip = {
+		command: "xclip",
+		args: [
+			"-selection",
+			"clipboard",
+			"-i"
+		]
+	};
+	const xsel = {
+		command: "xsel",
+		args: ["--clipboard", "--input"]
+	};
+	return platform === "linux-wayland" ? [
+		wl,
+		xclip,
+		xsel
+	] : [
+		xclip,
+		xsel,
+		wl
+	];
+}
 /**
 * Write `text` to the system clipboard. Throws ClipboardTextError when the
-* platform is unsupported or the underlying command fails, so callers can
+* platform is unsupported or every candidate command fails, so callers can
 * surface a "Copy failed" indicator.
 */
 async function writeTextClipboard(text, runCommand = defaultRunCommand) {
@@ -7966,19 +8000,15 @@ async function writeTextClipboard(text, runCommand = defaultRunCommand) {
 			break;
 		}
 		case "linux-wayland":
-			command = "wl-copy";
-			args = [];
-			input = text;
-			break;
-		case "linux-x11":
-			command = "xclip";
-			args = [
-				"-selection",
-				"clipboard",
-				"-i"
-			];
-			input = text;
-			break;
+		case "linux-x11": {
+			const failures = [];
+			for (const candidate of linuxCandidates(platform)) {
+				const result = runCommand(candidate.command, candidate.args, text);
+				if (result.ok) return;
+				failures.push(`${candidate.command}: ${result.error ?? "unknown error"}`);
+			}
+			throw new ClipboardTextError(`failed to copy to clipboard (${failures.join(" | ")}). Install wl-clipboard (Wayland: sudo apt install wl-clipboard) or xclip/xsel (X11: sudo apt install xclip xsel)`);
+		}
 		default: throw new ClipboardTextError(`unsupported clipboard platform: ${process.platform}`);
 	}
 	const result = runCommand(command, args, input);
@@ -8834,6 +8864,7 @@ function detectFdPath() {
 }
 //#endregion
 //#region src/tui/tui-state.ts
+const OSC52_MAX_TEXT_LENGTH = 64 * 1024;
 function logRenderError(error) {
 	try {
 		const logDir = getLogDir();
@@ -8852,7 +8883,14 @@ function createTUIState(options) {
 			await writeTextClipboard(text);
 			return true;
 		} catch {
-			return false;
+			const base64 = Buffer.from(text, "utf8").toString("base64");
+			if (base64.length > OSC52_MAX_TEXT_LENGTH) return false;
+			try {
+				terminal.write(`\x1B]52;c;${base64}\u0007`);
+			} catch {
+				return false;
+			}
+			return true;
 		}
 	} });
 	const uiAny = ui;
@@ -12359,7 +12397,7 @@ var ScreamTUI = class {
 		const card = new OnboardingCardComponent({
 			colors: this.state.theme.colors,
 			onConfigure: () => {
-				import("./dispatch-CJPpI4gm.mjs").then(({ handleConnectCommand }) => handleConnectCommand(this, "")).finally(() => {
+				import("./dispatch-Doe-DlpL.mjs").then(({ handleConnectCommand }) => handleConnectCommand(this, "")).finally(() => {
 					this.restoreEditor();
 					onDone?.();
 				});
@@ -13844,6 +13882,465 @@ function installStreamJsonTerminationHandlers(cleanup) {
 	};
 }
 //#endregion
+//#region src/web/auth.ts
+/**
+* Gateway authentication for the web server (LAN mode security layer).
+*
+* - The access key is persisted as a scrypt hash + salt in
+*   `<home>/web-gateway.json` (0600). The plaintext key is never written to
+*   disk; it lives in memory only for the run that created or supplied it.
+* - Browser sessions are cookie-based (HttpOnly, SameSite=Lax, 30 days) so
+*   the key never lands in URLs or browser history.
+* - Loopback requests are always trusted, so the local `--open` flow works
+*   without entering a key.
+* - All key comparisons use timing-safe primitives.
+*/
+const GATEWAY_FILE = "web-gateway.json";
+const GATEWAY_COOKIE_NAME = "scream_gateway";
+const SESSION_TTL_SECONDS = 720 * 60 * 60;
+const SCRYPT_KEYLEN = 64;
+const SALT_LEN = 16;
+/** In-process gateway state: key verification material + live sessions. */
+var GatewayAuth = class GatewayAuth {
+	/** Plaintext key, present only when it entered memory this run. */
+	plaintext;
+	/** True when the key was freshly generated by this run. */
+	generated;
+	filePath;
+	salt;
+	hash;
+	sessions = /* @__PURE__ */ new Map();
+	constructor(input) {
+		this.filePath = input.filePath;
+		this.salt = input.salt;
+		this.hash = input.hash;
+		this.plaintext = input.plaintext;
+		this.generated = input.generated;
+	}
+	/**
+	* Resolves the gateway key for an enabled gateway:
+	* 1. explicit `--token` (persisted, replacing any stored key),
+	* 2. previously stored key file,
+	* 3. freshly generated key (persisted).
+	*/
+	static async setup(opts) {
+		const filePath = join(opts.homeDir, GATEWAY_FILE);
+		if (opts.token !== void 0 && opts.token.length > 0) {
+			const salt = randomSalt();
+			const record = {
+				version: 1,
+				salt: salt.toString("hex"),
+				hash: scryptSync(opts.token, salt, SCRYPT_KEYLEN).toString("hex"),
+				createdAt: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			await persistKey(filePath, record);
+			return new GatewayAuth({
+				filePath,
+				salt,
+				hash: Buffer.from(record.hash, "hex"),
+				plaintext: opts.token,
+				generated: false
+			});
+		}
+		const stored = await loadStoredKey(filePath);
+		if (stored) return new GatewayAuth({
+			filePath,
+			salt: Buffer.from(stored.salt, "hex"),
+			hash: Buffer.from(stored.hash, "hex"),
+			plaintext: null,
+			generated: false
+		});
+		const plaintext = randomBytes(12).toString("base64url");
+		const salt = randomSalt();
+		const record = {
+			version: 1,
+			salt: salt.toString("hex"),
+			hash: scryptSync(plaintext, salt, SCRYPT_KEYLEN).toString("hex"),
+			createdAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		await persistKey(filePath, record);
+		return new GatewayAuth({
+			filePath,
+			salt,
+			hash: Buffer.from(record.hash, "hex"),
+			plaintext,
+			generated: true
+		});
+	}
+	/** Timing-safe key verification against the stored scrypt hash. */
+	verifyKey(key) {
+		if (key.length === 0) return false;
+		return timingSafeEqual(scryptSync(key, this.salt, SCRYPT_KEYLEN), this.hash);
+	}
+	createSession() {
+		this.pruneExpired();
+		const sid = randomBytes(32).toString("base64url");
+		this.sessions.set(sid, Date.now() + SESSION_TTL_SECONDS * 1e3);
+		return sid;
+	}
+	verifySession(cookieHeader) {
+		const sid = parseCookies(cookieHeader)[GATEWAY_COOKIE_NAME];
+		if (sid === void 0) return false;
+		const expiresAt = this.sessions.get(sid);
+		if (expiresAt === void 0) return false;
+		if (Date.now() >= expiresAt) {
+			this.sessions.delete(sid);
+			return false;
+		}
+		return true;
+	}
+	destroySession(cookieHeader) {
+		const sid = parseCookies(cookieHeader)[GATEWAY_COOKIE_NAME];
+		if (sid !== void 0) this.sessions.delete(sid);
+	}
+	sessionCookie(sid) {
+		return `${GATEWAY_COOKIE_NAME}=${sid}; HttpOnly; SameSite=Lax; Path=/; Max-Age=${SESSION_TTL_SECONDS}`;
+	}
+	clearCookie() {
+		return `${GATEWAY_COOKIE_NAME}=; HttpOnly; SameSite=Lax; Path=/; Max-Age=0`;
+	}
+	pruneExpired() {
+		const now = Date.now();
+		for (const [sid, expiresAt] of this.sessions) if (now >= expiresAt) this.sessions.delete(sid);
+	}
+};
+/** Loopback requests are trusted without a key (local `--open` flow). */
+function isLoopbackAddress(address) {
+	return address === "127.0.0.1" || address === "::1" || address === "::ffff:127.0.0.1";
+}
+function parseCookies(header) {
+	const out = {};
+	if (!header) return out;
+	for (const part of header.split(";")) {
+		const eq = part.indexOf("=");
+		if (eq <= 0) continue;
+		const name = part.slice(0, eq).trim();
+		const raw = part.slice(eq + 1).trim();
+		if (name.length === 0) continue;
+		try {
+			out[name] = decodeURIComponent(raw);
+		} catch {
+			out[name] = raw;
+		}
+	}
+	return out;
+}
+/**
+* Pure decision for the HTTP gateway gate, factored out of server.ts so it
+* can be unit-tested without real sockets.
+*/
+function gatewayVerdict(input) {
+	if (input.loopback || input.authenticated) return "allow";
+	if (input.path === "/gateway") return "allow";
+	if (input.path === `${input.apiPrefix}/gateway/status`) return "allow";
+	if (input.path === `${input.apiPrefix}/gateway/login`) return "allow";
+	if (input.path === `${input.apiPrefix}/gateway/logout`) return "allow";
+	if (input.path.startsWith(`${input.apiPrefix}/`)) return "unauthorized";
+	if (input.method === "GET") return "redirect";
+	return "unauthorized";
+}
+function randomSalt() {
+	return randomBytes(SALT_LEN);
+}
+async function loadStoredKey(filePath) {
+	let raw;
+	try {
+		raw = await readFile(filePath, "utf-8");
+	} catch {
+		return null;
+	}
+	try {
+		const parsed = JSON.parse(raw);
+		if (parsed?.version !== 1 || typeof parsed.salt !== "string" || typeof parsed.hash !== "string" || parsed.salt.length === 0 || parsed.hash.length === 0) return null;
+		return parsed;
+	} catch {
+		return null;
+	}
+}
+/** Atomic persist: temp file (0600) + rename, then verify the mode. */
+async function persistKey(filePath, record) {
+	const tmp = `${filePath}.tmp`;
+	await writeFile(tmp, `${JSON.stringify(record, null, 2)}\n`, {
+		encoding: "utf-8",
+		mode: 384
+	});
+	await chmod(tmp, 384);
+	await rename(tmp, filePath);
+}
+//#endregion
+//#region src/web/rateLimit.ts
+function createFixedWindowLimiter(opts) {
+	const { windowMs, max } = opts;
+	const windows = /* @__PURE__ */ new Map();
+	return {
+		hit(key) {
+			const now = Date.now();
+			const entry = windows.get(key);
+			if (entry === void 0 || now - entry.start >= windowMs) {
+				windows.set(key, {
+					start: now,
+					count: 1
+				});
+				if (windows.size > 1024) {
+					for (const [k, e] of windows) if (now - e.start >= windowMs) windows.delete(k);
+				}
+				return {
+					ok: true,
+					retryAfterSeconds: 0
+				};
+			}
+			entry.count += 1;
+			if (entry.count > max) return {
+				ok: false,
+				retryAfterSeconds: Math.max(1, Math.ceil((entry.start + windowMs - now) / 1e3))
+			};
+			return {
+				ok: true,
+				retryAfterSeconds: 0
+			};
+		},
+		reset(key) {
+			windows.delete(key);
+		}
+	};
+}
+//#endregion
+//#region src/web/lan.ts
+/**
+* LAN address enumeration for `scream web --lan`.
+*
+* Collects IPv4 addresses that LAN peers can actually reach. Excludes the
+* loopback interface, IPv6 (the first version targets IPv4 LANs), link-local
+* autoconfiguration (169.254.0.0/16) and carrier-grade NAT space
+* (100.64.0.0/10, where inbound routing is not possible). Addresses outside
+* the private ranges are kept — a machine with a directly routed public IPv4
+* is reachable as-is.
+*/
+function getLanAddresses(interfaces = networkInterfaces()) {
+	const seen = /* @__PURE__ */ new Set();
+	for (const infos of Object.values(interfaces)) for (const info of infos ?? []) {
+		if (info.family !== "IPv4" || info.internal) continue;
+		const ip = info.address;
+		if (inCidr(ip, "169.254.0.0", 16)) continue;
+		if (inCidr(ip, "100.64.0.0", 10)) continue;
+		if (inCidr(ip, "198.18.0.0", 15)) continue;
+		seen.add(ip);
+	}
+	return [...seen];
+}
+function inCidr(ip, base, bits) {
+	const ipInt = ipv4ToInt(ip);
+	const baseInt = ipv4ToInt(base);
+	if (ipInt === null || baseInt === null) return false;
+	if (bits <= 0) return true;
+	if (bits >= 32) return ipInt === baseInt;
+	const mask = 4294967295 << 32 - bits;
+	return (ipInt & mask) === (baseInt & mask);
+}
+function ipv4ToInt(ip) {
+	const parts = ip.split(".");
+	if (parts.length !== 4) return null;
+	let value = 0;
+	for (const part of parts) {
+		const octet = Number(part);
+		if (!Number.isInteger(octet) || octet < 0 || octet > 255) return null;
+		value = value * 256 + octet;
+	}
+	return value;
+}
+//#endregion
+//#region src/web/files.ts
+/** File-access error carrying an HTTP status code for REST handlers. */
+var FileAccessError = class extends Error {
+	statusCode;
+	constructor(statusCode, message) {
+		super(message);
+		this.statusCode = statusCode;
+	}
+};
+const MAX_FILE_READ = 256 * 1024;
+const IGNORED_DIRS = new Set([
+	"node_modules",
+	".git",
+	"dist",
+	".next",
+	"target"
+]);
+/**
+* Read-only filesystem gate for the web UI.
+*
+* Design (roots + realpath containment model, simplified):
+* - a dynamic roots set (all session workDirs ∪ current workDir) bounds every access;
+* - lexical containment check resolves the candidate inside a root FIRST;
+* - then realpath() is compared against the realpath of the root so symlinks
+*   cannot escape the boundary;
+* - every operation is read-only: no create/write/delete is exposed.
+*/
+var FileGate = class {
+	roots;
+	constructor(roots) {
+		this.roots = roots;
+	}
+	/** Current allowed roots (session workdirs) — used by the REST /files/root route. */
+	getRoots() {
+		return this.roots();
+	}
+	/** Resolve a client-supplied path against the gate. Throws 403/404 on violation. */
+	async resolve(candidate) {
+		const roots = this.roots().filter(Boolean);
+		if (roots.length === 0) throw new FileAccessError(409, "没有可访问的目录（尚无会话）");
+		const normalized = candidate.replaceAll("\\", "/");
+		const absCandidate = resolve(isAbsolute(normalized) ? normalized : join(resolve(roots[0]), normalized));
+		for (const root of roots) {
+			const rootLex = resolve(root);
+			const relLex = relative(rootLex, absCandidate);
+			if (relLex === "" || !relLex.startsWith("..") && !isAbsolute(relLex)) {
+				const candidateReal = await this.tryRealpath(absCandidate);
+				if (!candidateReal) throw new FileAccessError(404, `文件不存在：${candidate}`);
+				const relReal = relative(await this.tryRealpath(rootLex) ?? rootLex, candidateReal);
+				if (relReal === "" || !relReal.startsWith("..") && !isAbsolute(relReal)) return absCandidate;
+			}
+		}
+		throw new FileAccessError(403, "目录或路径不属于任何会话工作目录");
+	}
+	async tryRealpath(p) {
+		try {
+			return await realpath(p);
+		} catch {
+			return null;
+		}
+	}
+	async list(candidate) {
+		const abs = await this.resolve(candidate);
+		let entries = [];
+		try {
+			entries = await readdir(abs, { withFileTypes: true });
+		} catch (error) {
+			throw new FileAccessError(404, `无法读取目录：${candidate}`);
+		}
+		const out = [];
+		for (const entry of entries) {
+			if (IGNORED_DIRS.has(entry.name)) continue;
+			const full = join(abs, entry.name);
+			try {
+				if (entry.isSymbolicLink()) {
+					const st = await stat(await this.resolve(full));
+					out.push({
+						name: entry.name,
+						path: full,
+						type: st.isDirectory() ? "dir" : "file",
+						size: st.size,
+						mtime: st.mtimeMs
+					});
+				} else if (entry.isDirectory()) {
+					const st = await stat(full);
+					out.push({
+						name: entry.name,
+						path: full,
+						type: "dir",
+						size: 0,
+						mtime: st.mtimeMs
+					});
+				} else if (entry.isFile()) {
+					const st = await stat(full);
+					out.push({
+						name: entry.name,
+						path: full,
+						type: "file",
+						size: st.size,
+						mtime: st.mtimeMs
+					});
+				}
+			} catch {}
+		}
+		out.sort((a, b) => a.type === b.type ? a.name.localeCompare(b.name) : a.type === "dir" ? -1 : 1);
+		return out;
+	}
+	async read(candidate) {
+		const abs = await this.resolve(candidate);
+		const st = await stat(abs).catch(() => null);
+		if (!st) throw new FileAccessError(404, `文件不存在：${candidate}`);
+		if (st.isDirectory()) throw new FileAccessError(400, `是目录：${candidate}`);
+		if (st.size > 262144) return {
+			path: abs,
+			content: (await readFile(abs, { encoding: "utf-8" })).slice(0, MAX_FILE_READ),
+			truncated: true,
+			encoding: "utf-8"
+		};
+		return {
+			path: abs,
+			content: await readFile(abs, { encoding: "utf-8" }),
+			truncated: false,
+			encoding: "utf-8"
+		};
+	}
+	/** Mime type guess used by the raw/preview endpoint. */
+	contentType(candidate) {
+		return {
+			png: "image/png",
+			jpg: "image/jpeg",
+			jpeg: "image/jpeg",
+			gif: "image/gif",
+			webp: "image/webp",
+			svg: "image/svg+xml",
+			ico: "image/x-icon",
+			avif: "image/avif",
+			mp3: "audio/mpeg",
+			wav: "audio/wav",
+			ogg: "audio/ogg",
+			m4a: "audio/mp4",
+			pdf: "application/pdf",
+			md: "text/markdown; charset=utf-8",
+			txt: "text/plain; charset=utf-8",
+			json: "application/json; charset=utf-8",
+			yml: "text/yaml; charset=utf-8",
+			yaml: "text/yaml; charset=utf-8",
+			csv: "text/csv; charset=utf-8",
+			log: "text/plain; charset=utf-8",
+			ts: "text/plain; charset=utf-8",
+			tsx: "text/plain; charset=utf-8",
+			js: "text/plain; charset=utf-8",
+			jsx: "text/plain; charset=utf-8",
+			py: "text/plain; charset=utf-8",
+			rs: "text/plain; charset=utf-8",
+			go: "text/plain; charset=utf-8",
+			java: "text/plain; charset=utf-8",
+			c: "text/plain; charset=utf-8",
+			h: "text/plain; charset=utf-8",
+			cpp: "text/plain; charset=utf-8",
+			hpp: "text/plain; charset=utf-8",
+			sh: "text/plain; charset=utf-8",
+			bash: "text/plain; charset=utf-8",
+			zsh: "text/plain; charset=utf-8",
+			css: "text/plain; charset=utf-8",
+			html: "text/plain; charset=utf-8",
+			vue: "text/plain; charset=utf-8",
+			toml: "text/plain; charset=utf-8",
+			lock: "text/plain; charset=utf-8",
+			env: "text/plain; charset=utf-8",
+			patch: "text/plain; charset=utf-8",
+			diff: "text/plain; charset=utf-8"
+		}[basename(candidate).split(".").pop()?.toLowerCase() ?? ""] ?? "application/octet-stream";
+	}
+	/** MIME for read-only raw preview; returns null when the type is not inherently printable. */
+	previewKind(candidate) {
+		const ct = this.contentType(candidate);
+		if (ct.startsWith("image/")) return "image";
+		if (ct.startsWith("audio/")) return "audio";
+		if (ct === "application/pdf") return "pdf";
+		if (ct.startsWith("text/")) return "text";
+		return null;
+	}
+	/** Directory of a resolved path, used for the breadcrumb. */
+	dirOf(absPath) {
+		return dirname(absPath);
+	}
+	/** Path-friendly display name for the breadcrumb. */
+	nameOf(absPath) {
+		return basename(absPath);
+	}
+};
+//#endregion
 //#region src/web/server.ts
 /**
 * Scream Web UI server.
@@ -13861,6 +14358,14 @@ function installStreamJsonTerminationHandlers(cleanup) {
 * consumer of the same SDK (alongside run-shell TUI and run-stream-json),
 * not a separate engine. Zero changes to agent-core or node-sdk.
 */
+/** Thinking bodies longer than this are delivered as a tail excerpt + on-demand full text. */
+const TRUNCATE_THINKING_LEN = 8 * 1024;
+function truncateThinking(messages) {
+	for (const m of messages) for (const t of m.tools) if (t.name === "thinking" && typeof t.output === "string" && t.output.length > TRUNCATE_THINKING_LEN) {
+		t.output = `…（前 ${t.output.length - 2048} 字符已省略）\n${t.output.slice(-2048)}`;
+		t.truncated = true;
+	}
+}
 /** Error carrying an HTTP status code for REST handlers. */
 var HttpError = class extends Error {
 	statusCode;
@@ -14031,6 +14536,7 @@ function toHttpError(error) {
 		case ErrorCodes.TURN_AGENT_BUSY: return new HttpError(409, error.message, error.code);
 		default: return new HttpError(500, error.message, error.code);
 	}
+	if (error instanceof FileAccessError) return new HttpError(error.statusCode, error.message);
 	return new HttpError(500, errorMessage(error));
 }
 function sendHttpError(res, error) {
@@ -14040,6 +14546,57 @@ function sendHttpError(res, error) {
 		message: mapped.message
 	});
 }
+async function handleFilesRoutes(req, res, url, method, apiPrefix, gate) {
+	if (method !== "GET") return false;
+	const [pathOnly, queryPart] = url.split("?");
+	const query = new URLSearchParams(queryPart ?? "");
+	const fail = (error) => {
+		const code = error instanceof FileAccessError ? error.statusCode : 500;
+		res.writeHead(code, { "Content-Type": "application/json" });
+		res.end(JSON.stringify({
+			code,
+			message: error instanceof Error ? error.message : String(error)
+		}));
+	};
+	if (pathOnly === `${apiPrefix}/files/root`) {
+		sendJson(res, 200, { roots: gate.getRoots() });
+		return true;
+	}
+	if (pathOnly === `${apiPrefix}/files/list`) {
+		try {
+			sendJson(res, 200, {
+				path: query.get("path") ?? "",
+				entries: await gate.list(query.get("path") ?? "")
+			});
+		} catch (error) {
+			fail(error);
+		}
+		return true;
+	}
+	if (pathOnly === `${apiPrefix}/files/read`) {
+		try {
+			sendJson(res, 200, await gate.read(query.get("path") ?? ""));
+		} catch (error) {
+			fail(error);
+		}
+		return true;
+	}
+	if (pathOnly === `${apiPrefix}/files/raw`) {
+		try {
+			const abs = await gate.resolve(query.get("path") ?? "");
+			const data = await readFile(abs);
+			res.writeHead(200, {
+				"Content-Type": gate.contentType(abs),
+				"Cache-Control": "no-store"
+			});
+			res.end(data);
+		} catch (error) {
+			fail(error);
+		}
+		return true;
+	}
+	return false;
+}
 function isVolatileEvent(event) {
 	switch (event.type) {
 		case "assistant.delta":
@@ -14072,9 +14629,13 @@ async function appendJournalLine(homeDir, sessionId, line) {
 		});
 	}
 }
+let metaWriteSeq = 0;
 async function saveMetadata(homeDir, meta) {
 	try {
-		await writeFile(getMetaPath(homeDir, meta.sessionId), JSON.stringify(meta, null, 2));
+		const path = getMetaPath(homeDir, meta.sessionId);
+		const tmp = `${path}.${process.pid}.${metaWriteSeq++}.tmp`;
+		await writeFile(tmp, JSON.stringify(meta, null, 2));
+		await rename(tmp, path);
 	} catch (error) {
 		log.warn("web: failed to save metadata", {
 			sessionId: meta.sessionId,
@@ -14130,6 +14691,25 @@ function deriveTitle(messages) {
 	return text.length > 40 ? text.slice(0, 40) + "..." : text;
 }
 const execFileAsync = promisify(execFile);
+/** Raw porcelain rows: repo-root-relative path + XY status. `getGitStatus`
+*  enriches these into full `GitFileChange` records. */
+function parsePorcelainFiles(lines) {
+	const files = [];
+	for (const line of lines) {
+		if (line.startsWith("##")) continue;
+		const status = line.slice(0, 2).replaceAll(" ", "");
+		let p = line.slice(3).trim();
+		if (p.includes(" -> ")) p = p.split(" -> ").pop();
+		if (p.startsWith("\"") && p.endsWith("\"")) try {
+			p = JSON.parse(p);
+		} catch {}
+		files.push({
+			path: p,
+			status
+		});
+	}
+	return files;
+}
 async function git(workDir, args) {
 	const { stdout } = await execFileAsync("git", [
 		"-C",
@@ -14151,13 +14731,21 @@ async function getGitStatus(workDir) {
 	let ahead;
 	let behind;
 	let changed = 0;
+	let gitFiles = [];
 	try {
-		const [branchOut, statusOut] = await Promise.all([git(workDir, ["branch", "--show-current"]), git(workDir, [
-			"status",
-			"--porcelain",
-			"-b"
-		])]);
+		const [branchOut, statusOut, repoTopOut] = await Promise.all([
+			git(workDir, ["branch", "--show-current"]),
+			git(workDir, [
+				"status",
+				"--porcelain",
+				"-b"
+			]),
+			git(workDir, ["rev-parse", "--show-toplevel"]).catch(() => workDir)
+		]);
 		branch = branchOut.trim() || void 0;
+		const repoTop = repoTopOut.trim() || workDir;
+		const prefix = repoTop !== workDir ? `${relative(repoTop, workDir).replaceAll("\\", "/")}/` : "";
+		const fixPath = (p) => prefix && p.startsWith(prefix) ? p.slice(prefix.length) : p;
 		const statusLines = statusOut.split("\n").filter((l) => l.length > 0);
 		const header = statusLines[0] ?? "";
 		const aheadMatch = /ahead (\d+)/.exec(header);
@@ -14165,10 +14753,18 @@ async function getGitStatus(workDir) {
 		if (aheadMatch) ahead = Number(aheadMatch[1]);
 		if (behindMatch) behind = Number(behindMatch[1]);
 		changed = statusLines.filter((l) => !l.startsWith("##")).length;
+		const statusFiles = parsePorcelainFiles(statusLines).map((f) => ({
+			path: f.path,
+			displayPath: fixPath(f.path),
+			status: f.status
+		}));
+		if (statusFiles.length > 0) gitFiles = statusFiles;
 	} catch {}
 	let adds;
 	let dels;
 	let diffStat;
+	/** Repo-root-relative → per-file line counts, from `git diff --numstat`. */
+	const perFile = /* @__PURE__ */ new Map();
 	try {
 		const [numstatOut, diffStatOut] = await Promise.all([git(workDir, [
 			"diff",
@@ -14182,14 +14778,41 @@ async function getGitStatus(workDir) {
 		adds = 0;
 		dels = 0;
 		for (const line of numstatOut.split("\n")) {
-			const m = /^(\d+)\t(\d+)\t/.exec(line);
-			if (m) {
-				adds += Number(m[1]);
-				dels += Number(m[2]);
-			}
+			const parts = line.split("	");
+			const m = parts.length >= 3 ? /^(\d+)\t(\d+)\t/.exec(line) : null;
+			if (!m) continue;
+			adds += Number(m[1]);
+			dels += Number(m[2]);
+			perFile.set(normalizeNumstatPath(parts.slice(2).join("	")), {
+				adds: Number(m[1]),
+				dels: Number(m[2])
+			});
 		}
 		diffStat = diffStatOut.trim().split("\n").slice(0, 200).join("\n") || void 0;
 	} catch {}
+	const untracked = /* @__PURE__ */ new Set();
+	try {
+		const others = await git(workDir, [
+			"ls-files",
+			"--others",
+			"--exclude-standard",
+			"-z"
+		]);
+		for (const p of others.split("\0")) if (p.trim() !== "") untracked.add(p.replaceAll("\\", "/"));
+	} catch {}
+	gitFiles = gitFiles.map((file) => {
+		const stats = perFile.get(file.path);
+		const isUntracked = untracked.has(file.path) || file.status.includes("?");
+		return {
+			...file,
+			status: isUntracked ? "?" : file.status,
+			...isUntracked ? { untracked: true } : {},
+			...stats ? {
+				adds: stats.adds,
+				dels: stats.dels
+			} : {}
+		};
+	});
 	return {
 		isRepo: true,
 		branch,
@@ -14198,9 +14821,97 @@ async function getGitStatus(workDir) {
 		changed,
 		adds,
 		dels,
-		diffStat
+		diffStat,
+		files: gitFiles.length > 0 ? gitFiles : void 0
 	};
 }
+/**
+* numstat keys for renames come back as `a/{old => new}/b.ts` or
+* `old => new`; resolve them to the post-rename path so they match porcelain.
+*/
+function normalizeNumstatPath(raw) {
+	let p = raw.trim().replaceAll("\\", "/");
+	const brace = /\{([^{}]*) => ([^{}]*)\}/.exec(p);
+	if (brace) p = p.replace(brace[0], `${brace[1]}${brace[2]}`);
+	if (p.includes(" => ")) p = p.split(" => ").pop().trim();
+	return p.replaceAll("//", "/").replace(/^\.\//, "").replace(/^\/+/, "");
+}
+/** Cap for the inlined content of an untracked file. */
+const MAX_INLINE_DIFF_BYTES = 512 * 1024;
+/**
+* Single-file patch. `repoPath` is **repository-root relative** — the same base
+* `git status` reports, so the UI can hand it straight back.
+*
+* Two cases used to return an empty patch and look like "点了没反应":
+* nested files (the old code re-prefixed workdir-relative paths with `../..`,
+* resolving them outside the repo) and untracked files (`git diff` has nothing
+* to say about them). The second case now gets a synthesised added-file patch.
+*/
+async function getGitFileDiff(workDir, repoPath) {
+	const rel = normalizeNumstatPath(repoPath);
+	if (rel === "") throw new FileAccessError(403, "路径不能为空");
+	let repoTop = "";
+	try {
+		repoTop = (await git(workDir, ["rev-parse", "--show-toplevel"])).trim();
+	} catch {
+		return null;
+	}
+	if (!repoTop) throw new FileAccessError(403, "不在 git 仓库内");
+	const abs = resolve(repoTop, rel);
+	const inside = relative(repoTop, abs);
+	if (inside === "" || inside.startsWith("..") || isAbsolute(inside)) throw new FileAccessError(403, "路径不属于该仓库");
+	const patch = await git(repoTop, [
+		"diff",
+		"--no-color",
+		"--",
+		rel
+	]).catch(() => "");
+	if (patch.trim()) return {
+		path: rel,
+		patch
+	};
+	if (!((await git(repoTop, [
+		"ls-files",
+		"--others",
+		"--exclude-standard",
+		"--",
+		rel
+	]).catch(() => "")).trim() !== "")) return {
+		path: rel,
+		patch: ""
+	};
+	const header = `--- /dev/null\n+++ b/${rel}\n`;
+	try {
+		const [realRoot, realAbs] = await Promise.all([realpath(repoTop), realpath(abs)]);
+		const relCheck = relative(realRoot, realAbs);
+		if (relCheck === "" || relCheck.startsWith("..") || isAbsolute(relCheck)) throw new FileAccessError(403, "路径不属于该仓库");
+		const info = await stat(realAbs);
+		if (!info.isFile()) return {
+			path: rel,
+			patch: `${header}@@ -0,0 +1 @@\n+（非普通文件）\n`
+		};
+		if (info.size > MAX_INLINE_DIFF_BYTES) return {
+			path: rel,
+			patch: `${header}@@ -0,0 +1 @@\n+（文件超过 ${Math.round(MAX_INLINE_DIFF_BYTES / 1024)}KB，未内联显示）\n`
+		};
+		const content = await readFile(realAbs, "utf8");
+		if (content.includes("\0")) return {
+			path: rel,
+			patch: `${header}@@ -0,0 +1 @@\n+（二进制文件）\n`
+		};
+		const lines = content.replaceAll("\r\n", "\n").split("\n");
+		if (lines.at(-1) === "") lines.pop();
+		return {
+			path: rel,
+			patch: `${header}@@ -0,0 +1,${lines.length} @@\n${lines.map((l) => `+${l}`).join("\n")}\n`
+		};
+	} catch {
+		return {
+			path: rel,
+			patch: `${header}@@ -0,0 +1 @@\n+（读取失败）\n`
+		};
+	}
+}
 function exportToMarkdown(messages, title) {
 	let out = `# ${title}\n\n`;
 	for (const msg of messages) if (msg.role === "user") out += `## User\n\n${msg.content}\n\n`;
@@ -14240,6 +14951,14 @@ var WebSession = class {
 	heartbeatTimer = null;
 	unsubscribe = null;
 	busy = false;
+	/**
+	* Live assistant message under construction. Mirrors the same state machine
+	* used by buildMessages() so turn.ended can persist a complete durable
+	* snapshot (`web.message.finalized`) — the only source that survives a
+	* server restart (deltas are volatile by design).
+	*/
+	liveAssistant = null;
+	liveTurnCount = 0;
 	/** pendingMsgId awaiting compaction completion/cancellation event. */
 	pendingCompactionMsgId = null;
 	homeDir;
@@ -14317,6 +15036,15 @@ var WebSession = class {
 		});
 		await appendJournalLine(this.homeDir, this.sessionId, line);
 	}
+	/** In-flight fire-and-forget persistence writes, drained by close(). */
+	pendingWrites = /* @__PURE__ */ new Set();
+	/** Register a background persistence promise so close() can await it. */
+	trackPending(promise) {
+		const tracked = promise.catch(() => {}).then(() => {
+			this.pendingWrites.delete(tracked);
+		});
+		this.pendingWrites.add(tracked);
+	}
 	loadFromPersisted(entries) {
 		for (const entry of entries) if ("type" in entry && entry.type === "user_message") {
 			const um = entry;
@@ -14367,17 +15095,107 @@ var WebSession = class {
 			payload
 		};
 		this.journal.push(entry);
-		if (!entry.volatile) this.persistEntry(entry);
+		if (!entry.volatile) this.trackPending(this.persistEntry(entry));
+		return entry;
+	}
+	/**
+	* Append + persist a durable journal entry WITHOUT broadcasting it to
+	* clients. Used for server-owned reconstruction material (finalized
+	* assistant snapshots) that clients never consume as live events.
+	*/
+	appendDurableSilent(payload) {
+		const entry = {
+			seq: this.nextSeq++,
+			epoch: this.epoch,
+			volatile: false,
+			payload
+		};
+		this.journal.push(entry);
+		this.trackPending(this.persistEntry(entry));
 		return entry;
 	}
 	subscribeEvents() {
 		if (!this.session) return;
 		this.unsubscribe = this.session.onEvent((event) => {
 			if ((event.type === "goal.updated" || event.type === "todo.updated") && event.agentId !== "main") return;
-			if (event.type === "turn.started") this.busy = true;
-			else if (event.type === "turn.ended") {
+			if (event.type === "turn.started") {
+				this.busy = true;
+				this.liveTurnCount += 1;
+				this.liveAssistant = {
+					role: "assistant",
+					content: "",
+					tools: [],
+					ts: Date.now(),
+					model: this.cachedStatus?.model,
+					turnStats: {
+						turn: this.liveTurnCount,
+						step: 0,
+						status: "running",
+						firstTokenMs: null,
+						llmMs: null,
+						toolMs: null,
+						tokens: null,
+						tokensPerSec: null
+					}
+				};
+			} else if (event.type === "turn.ended") {
 				this.busy = false;
-				this.updateTitle();
+				const live = this.liveAssistant;
+				if (event.reason === "failed" && live) live.isError = true;
+				if (live) {
+					live.turnStats = {
+						...live.turnStats ?? {
+							turn: this.liveTurnCount,
+							step: 0,
+							firstTokenMs: null,
+							llmMs: null,
+							toolMs: null,
+							tokens: null,
+							tokensPerSec: null
+						},
+						status: "done"
+					};
+					this.appendDurableSilent({
+						type: "web.message.finalized",
+						message: live
+					});
+				}
+				this.liveAssistant = null;
+				this.trackPending(this.updateTitle());
+			} else if (event.type === "assistant.delta") {
+				const live = this.liveAssistant;
+				if (live) live.content += event.delta;
+			} else if (event.type === "thinking.delta") {
+				const live = this.liveAssistant;
+				if (live) {
+					const t = live.tools.find((x) => x.name === "thinking");
+					if (t) t.output = (t.output ?? "") + event.delta;
+					else live.tools.push({
+						toolCallId: "thinking",
+						name: "thinking",
+						args: {},
+						output: event.delta
+					});
+				}
+			} else if (event.type === "tool.call.started") {
+				const live = this.liveAssistant;
+				if (live) {
+					live.tools.push({
+						toolCallId: event.toolCallId,
+						name: event.name,
+						args: event.args
+					});
+					if (live.turnStats) live.turnStats.step += 1;
+				}
+			} else if (event.type === "tool.result") {
+				const live = this.liveAssistant;
+				if (live) {
+					const tool = live.tools.find((t) => t.toolCallId === event.toolCallId);
+					if (tool) {
+						tool.output = String(event.output);
+						tool.isError = event.isError;
+					}
+				}
 			} else if (event.type === "goal.updated") {
 				this.goalEventRevision += 1;
 				this.cachedGoal = cloneSnapshot(event.snapshot);
@@ -14531,7 +15349,7 @@ var WebSession = class {
 					return;
 				}
 				this.busy = true;
-				this.persistUserMessage(text, this.nextSeq, clientMessageId);
+				this.trackPending(this.persistUserMessage(text, this.nextSeq, clientMessageId));
 				this.broadcast({
 					type: "user_message",
 					clientMessageId,
@@ -14782,7 +15600,17 @@ var WebSession = class {
 			}
 		}, HEARTBEAT_INTERVAL_MS);
 	}
-	getSnapshot() {
+	getSnapshot(options) {
+		const all = this.buildMessages();
+		let messages = all;
+		let olderAvailable;
+		let oldestSeq;
+		if (options?.tail && all.length > options.tail) {
+			messages = all.slice(-options.tail);
+			olderAvailable = true;
+			oldestSeq = messages[0]?.seq;
+		}
+		truncateThinking(messages);
 		return cloneSnapshot({
 			sessionId: this.sessionId,
 			workDir: this.workDir,
@@ -14790,7 +15618,9 @@ var WebSession = class {
 			epoch: this.epoch,
 			model: this.cachedStatus?.model ?? "unknown",
 			permission: this.cachedStatus?.permission ?? this.permission,
-			messages: this.buildMessages(),
+			messages,
+			olderAvailable,
+			oldestSeq,
 			pendingApprovals: Array.from(this.pendingApprovals.entries()).map(([id, approval]) => ({
 				id,
 				toolName: approval.toolName,
@@ -14815,6 +15645,22 @@ var WebSession = class {
 			todos: this.cachedTodos
 		});
 	}
+	/** Older history page: messages strictly older than `beforeSeq`, newest-first window of `tail`. */
+	getMessagesOlder(beforeSeq, tail) {
+		const older = this.buildMessages().filter((m) => (m.seq ?? Number.MAX_SAFE_INTEGER) < beforeSeq);
+		return {
+			messages: older.slice(-tail),
+			hasMore: older.length > tail
+		};
+	}
+	/** Full thinking text for a truncated entry (loaded on demand). */
+	getThinkingEntry(seq, toolCallId) {
+		const msg = this.buildMessages().find((m) => m.seq === seq);
+		const tool = msg?.tools.find((t) => t.toolCallId === toolCallId);
+		if (tool && typeof tool.output === "string") return tool.output;
+		const thinking = msg?.tools.find((t) => t.name === "thinking");
+		return thinking && typeof thinking.output === "string" ? thinking.output : "";
+	}
 	getListItem() {
 		return {
 			sessionId: this.sessionId,
@@ -14970,10 +15816,14 @@ var WebSession = class {
 			while (userIndex < this.userMessages.length) {
 				const item = this.userMessages[userIndex];
 				if (item === void 0 || item.beforeSeq > seq) break;
-				messages.push(item.msg);
+				messages.push({
+					...item.msg,
+					seq: item.beforeSeq
+				});
 				userIndex++;
 			}
 		};
+		let turnFinalized = false;
 		for (const entry of this.journal) {
 			const event = entry.payload;
 			flushUserMessagesBefore(entry.seq);
@@ -14984,6 +15834,8 @@ var WebSession = class {
 						role: "assistant",
 						content: "",
 						tools: [],
+						seq: entry.seq,
+						model: this.cachedStatus?.model,
 						turnStats: {
 							turn: turnCount,
 							step: 0,
@@ -15002,6 +15854,18 @@ var WebSession = class {
 				case "assistant.delta":
 					if (currentAssistant) currentAssistant.content += event.delta;
 					break;
+				case "thinking.delta":
+					if (currentAssistant) {
+						const t = currentAssistant.tools.find((x) => x.name === "thinking");
+						if (t) t.output = (t.output ?? "") + event.delta;
+						else currentAssistant.tools.push({
+							toolCallId: "thinking",
+							name: "thinking",
+							args: {},
+							output: event.delta
+						});
+					}
+					break;
 				case "tool.call.started":
 					if (currentAssistant) {
 						currentAssistant.tools.push({
@@ -15021,8 +15885,19 @@ var WebSession = class {
 						}
 					}
 					break;
+				case "web.message.finalized": {
+					const finalized = event.message;
+					finalized.seq = messages.length > 0 && messages.at(-1)?.role === "assistant" ? messages.at(-1).seq : entry.seq;
+					if (messages.length > 0 && messages.at(-1)?.role === "assistant") messages[messages.length - 1] = finalized;
+					else messages.push(finalized);
+					currentAssistant = null;
+					turnFinalized = true;
+					break;
+				}
 				case "turn.ended":
 					if (event.reason === "failed" && currentAssistant) currentAssistant.isError = true;
+					if (currentAssistant && !turnFinalized && currentAssistant.content === "") currentAssistant.degraded = true;
+					turnFinalized = false;
 					currentAssistant = null;
 					break;
 				default: break;
@@ -15048,6 +15923,7 @@ var WebSession = class {
 		});
 		this.pendingApprovals.clear();
 		this.unsubscribe?.();
+		await Promise.allSettled(this.pendingWrites);
 		for (const [ws] of this.connections) ws.terminate();
 		this.connections.clear();
 		if (this.session) {
@@ -15400,21 +16276,66 @@ async function runWebServer(opts) {
 		yolo: opts.yolo
 	});
 	await manager.init();
+	const lanMode = opts.lan === true;
+	const host = lanMode ? "0.0.0.0" : "127.0.0.1";
+	const gateway = lanMode ? await GatewayAuth.setup({
+		homeDir,
+		token: opts.token
+	}) : null;
+	const loginLimiter = createFixedWindowLimiter({
+		windowMs: 5 * 6e4,
+		max: 10
+	});
 	if (!manager.list().some((s) => s.active)) {
 		const recent = manager.list().find((s) => s.workDir === workDir);
-		if (recent) await manager.activateSession(recent.sessionId);
+		if (recent) try {
+			await manager.activateSession(recent.sessionId);
+		} catch (error) {
+			log.warn("web: resume of most recent session failed", {
+				sessionId: recent.sessionId,
+				error: errorMessage(error)
+			});
+		}
 	}
 	const baseDir = import.meta.dirname;
 	const prodPublicDir = join(baseDir, "public");
 	const devPublicDir = join(baseDir, "frontend", "dist");
+	const sourcePublicDir = join(baseDir, "frontend", "public");
 	let publicDir = prodPublicDir;
 	try {
 		await access(join(devPublicDir, "index.html"));
 		publicDir = devPublicDir;
-	} catch {}
+	} catch {
+		try {
+			await access(join(sourcePublicDir, "gateway.html"));
+			publicDir = sourcePublicDir;
+		} catch {}
+	}
 	const httpServer = createServer(async (req, res) => {
 		const url = req.url ?? "/";
 		const method = req.method ?? "GET";
+		if (gateway) {
+			const verdict = gatewayVerdict({
+				loopback: isLoopbackAddress(req.socket.remoteAddress),
+				authenticated: gateway.verifySession(req.headers.cookie),
+				path: url.split("?")[0] ?? "/",
+				method,
+				apiPrefix: API_PREFIX
+			});
+			if (verdict === "redirect") {
+				res.writeHead(302, { Location: `/gateway?next=${encodeURIComponent(url)}` });
+				res.end();
+				return;
+			}
+			if (verdict === "unauthorized") {
+				res.writeHead(401, { "Content-Type": "application/json" });
+				res.end(JSON.stringify({
+					code: 40101,
+					message: "unauthorized"
+				}));
+				return;
+			}
+		}
 		if (url === `${API_PREFIX}/sessions` && method === "GET") {
 			res.writeHead(200, { "Content-Type": "application/json" });
 			res.end(JSON.stringify(manager.list()));
@@ -15435,9 +16356,31 @@ async function runWebServer(opts) {
 			return;
 		}
 		if (await handleGoalRoute(req, res, url, (sessionId) => manager.get(sessionId))) return;
-		const snapshotMatch = new RegExp(`^${API_PREFIX}/sessions/([^/]+)/snapshot$`).exec(url);
+		const snapshotMatch = new RegExp(`^${API_PREFIX}/sessions/([^/]+)/snapshot(\\?|$)`).exec(url);
 		if (snapshotMatch && method === "GET") {
-			const sessionId = snapshotMatch[1];
+			const sessionId = decodeURIComponent(snapshotMatch[1]);
+			const ws = manager.get(sessionId);
+			if (!ws) {
+				res.writeHead(404, { "Content-Type": "application/json" });
+				res.end(JSON.stringify({
+					code: 404,
+					message: "Session not found"
+				}));
+				return;
+			}
+			try {
+				await ws.ready;
+				const query = new URLSearchParams(url.split("?")[1] ?? "");
+				const tail = Number(query.get("tail") ?? "");
+				sendJson(res, 200, Number.isFinite(tail) && tail > 0 ? ws.getSnapshot({ tail }) : ws.getSnapshot());
+			} catch (error) {
+				sendHttpError(res, error);
+			}
+			return;
+		}
+		const olderMatch = /^\/api\/v1\/sessions\/([^/?]+)\/messages(\?|$)/.exec(url);
+		if (olderMatch && method === "GET") {
+			const sessionId = decodeURIComponent(olderMatch[1]);
 			const ws = manager.get(sessionId);
 			if (!ws) {
 				res.writeHead(404, { "Content-Type": "application/json" });
@@ -15449,7 +16392,19 @@ async function runWebServer(opts) {
 			}
 			try {
 				await ws.ready;
-				sendJson(res, 200, ws.getSnapshot());
+				const query = new URLSearchParams(url.split("?")[1] ?? "");
+				const seq = Number(query.get("seq") ?? "0");
+				const tool = query.get("tool") ?? "";
+				if (Number.isFinite(seq) && seq > 0 && tool) {
+					sendJson(res, 200, { output: ws.getThinkingEntry(seq, tool) });
+					return;
+				}
+				const before = Number(query.get("before") ?? "0");
+				const tail = Number(query.get("tail") ?? "50");
+				sendJson(res, 200, Number.isFinite(before) && before > 0 ? ws.getMessagesOlder(before, Number.isFinite(tail) && tail > 0 ? tail : 50) : {
+					messages: [],
+					hasMore: false
+				});
 			} catch (error) {
 				sendHttpError(res, error);
 			}
@@ -15461,6 +16416,24 @@ async function runWebServer(opts) {
 			res.end(JSON.stringify(gs));
 			return;
 		}
+		if (url.startsWith(`${API_PREFIX}/git/diff?`) && method === "GET") {
+			const relPath = new URLSearchParams(url.split("?")[1] ?? "").get("path") ?? "";
+			try {
+				const result = await getGitFileDiff(workDir, relPath);
+				res.writeHead(200, { "Content-Type": "application/json" });
+				res.end(JSON.stringify({
+					path: relPath,
+					patch: result?.patch ?? ""
+				}));
+			} catch (error) {
+				sendHttpError(res, error);
+			}
+			return;
+		}
+		function makeFileGate() {
+			return new FileGate(() => manager.list().map((s) => s.workDir));
+		}
+		if (await handleFilesRoutes(req, res, url, method, API_PREFIX, makeFileGate())) return;
 		if (url === `${API_PREFIX}/like` && method === "GET") {
 			try {
 				sendJson(res, 200, await loadLikePreferences());
@@ -15598,6 +16571,76 @@ async function runWebServer(opts) {
 			res.end();
 			return;
 		}
+		if (gateway && url === `${API_PREFIX}/gateway/status` && method === "GET") {
+			sendJson(res, 200, {
+				authRequired: true,
+				authenticated: isLoopbackAddress(req.socket.remoteAddress) || gateway.verifySession(req.headers.cookie)
+			});
+			return;
+		}
+		if (gateway && url === `${API_PREFIX}/gateway/login` && method === "POST") {
+			const ip = req.socket.remoteAddress ?? "unknown";
+			const attempt = loginLimiter.hit(ip);
+			if (!attempt.ok) {
+				res.writeHead(429, {
+					"Content-Type": "application/json",
+					"Retry-After": String(attempt.retryAfterSeconds)
+				});
+				res.end(JSON.stringify({
+					code: 42903,
+					message: `尝试过于频繁，请 ${attempt.retryAfterSeconds} 秒后重试`,
+					retryAfter: attempt.retryAfterSeconds
+				}));
+				return;
+			}
+			try {
+				const body = await readJsonBody(req);
+				const key = typeof body["key"] === "string" ? body["key"] : "";
+				if (!gateway.verifyKey(key)) {
+					res.writeHead(401, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						code: 40101,
+						message: "访问密钥错误"
+					}));
+					return;
+				}
+				loginLimiter.reset(ip);
+				const sid = gateway.createSession();
+				res.writeHead(200, {
+					"Content-Type": "application/json",
+					"Set-Cookie": gateway.sessionCookie(sid),
+					"Cache-Control": "no-store"
+				});
+				res.end(JSON.stringify({ ok: true }));
+			} catch (error) {
+				sendHttpError(res, error);
+			}
+			return;
+		}
+		if (gateway && url === `${API_PREFIX}/gateway/logout` && method === "POST") {
+			gateway.destroySession(req.headers.cookie);
+			res.writeHead(200, {
+				"Content-Type": "application/json",
+				"Set-Cookie": gateway.clearCookie(),
+				"Cache-Control": "no-store"
+			});
+			res.end(JSON.stringify({ ok: true }));
+			return;
+		}
+		if (gateway && url === "/gateway" && method === "GET") {
+			try {
+				const html = await readFile(join(publicDir, "gateway.html"), "utf-8");
+				res.writeHead(200, {
+					"Content-Type": "text/html; charset=utf-8",
+					"Cache-Control": "no-store"
+				});
+				res.end(html);
+			} catch {
+				res.writeHead(500, { "Content-Type": "text/plain" });
+				res.end("gateway page missing — did you run pnpm web:build?");
+			}
+			return;
+		}
 		if (url === "/" || url === "/index.html") {
 			try {
 				const html = await readFile(join(publicDir, "index.html"), "utf-8");
@@ -15623,6 +16666,10 @@ async function runWebServer(opts) {
 	});
 	const wss = new WebSocketServer({ server: httpServer });
 	wss.on("connection", (ws, req) => {
+		if (gateway && !isLoopbackAddress(req.socket.remoteAddress) && !gateway.verifySession(req.headers.cookie)) {
+			ws.close(1008, "unauthorized");
+			return;
+		}
 		const sessionId = new URL(req.url ?? "/", "http://localhost").searchParams.get("sessionId");
 		if (sessionId) {
 			const webSession = manager.get(sessionId);
@@ -15674,9 +16721,11 @@ async function runWebServer(opts) {
 			if (err.code === "EADDRINUSE") reject(/* @__PURE__ */ new Error(`端口 ${opts.port} 已被占用，请先关闭占用该端口的进程，或使用 --port <port> 指定其他端口。`));
 			else reject(err);
 		});
-		httpServer.listen(opts.port, "127.0.0.1", resolve);
+		httpServer.listen(opts.port, host, resolve);
 	});
-	const url = `http://localhost:${opts.port}`;
+	const address = httpServer.address();
+	const realPort = typeof address === "object" && address !== null ? address.port : opts.port;
+	const url = `http://localhost:${realPort}`;
 	if (opts.open) exec(`${process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open"} ${url}`);
 	let cleaned = false;
 	const cleanup = async () => {
@@ -15697,7 +16746,27 @@ async function runWebServer(opts) {
 	process.on("SIGTERM", () => {
 		cleanup().finally(() => process.exit(0));
 	});
-	console.log(`\n  Scream Web UI ready: ${url}\n  Working directory: ${workDir}\n  Sessions: ${manager.list().length} (${manager.list().filter((s) => s.active).length} active)\n  Permission: ${opts.yolo ? "yolo" : opts.auto ? "auto" : "manual"}\n`);
+	let banner = `\n  Scream Web UI ready: ${url}\n  Working directory: ${workDir}\n  Sessions: ${manager.list().length} (${manager.list().filter((s) => s.active).length} active)\n  Permission: ${opts.yolo ? "yolo" : opts.auto ? "auto" : "manual"}\n`;
+	if (gateway) {
+		const addrs = getLanAddresses();
+		banner += `  LAN mode: on — non-local devices must present the access key\n`;
+		if (addrs.length > 0) for (const addr of addrs) banner += `    http://${addr}:${realPort}\n`;
+		else banner += `    (no reachable LAN IPv4 address found)\n`;
+		if (gateway.plaintext !== null) banner += `  Access key: ${gateway.plaintext}${gateway.generated ? " (auto-generated, saved, persists across restarts)" : ""}\n`;
+		else banner += `  Access key: (saved in a previous run — use --reset-password to change)\n`;
+		if (addrs.length > 0) try {
+			const qr = await toString(`http://${addrs[0]}:${realPort}`, {
+				type: "terminal",
+				small: true
+			});
+			banner += `\n${qr}\n`;
+		} catch {}
+	}
+	console.log(banner);
+	return {
+		url,
+		close: cleanup
+	};
 }
 //#endregion
 //#region src/cli/run-web.ts
@@ -15708,7 +16777,38 @@ async function runWebServer(opts) {
 * connected to the ScreamCode agent. This is a third consumer of agent-core
 * (alongside run-shell TUI and run-stream-json), not a separate engine.
 */
+function promptSecret(question) {
+	if (!process.stdin.isTTY) return Promise.resolve(null);
+	return new Promise((resolve) => {
+		const muted = new Writable({ write(_chunk, _encoding, callback) {
+			callback();
+		} });
+		const rl = createInterface$1({
+			input: process.stdin,
+			output: muted,
+			terminal: true
+		});
+		process.stderr.write(question);
+		rl.question("", (answer) => {
+			rl.close();
+			process.stderr.write("\n");
+			resolve(answer.trim());
+		});
+	});
+}
 async function runWeb(opts) {
+	let token = opts.token;
+	if (opts.resetPassword) {
+		const key = await promptSecret("输入新的网关访问密钥（输入不会回显）：");
+		if (key === null) throw new Error("重设访问密钥需要交互终端。");
+		if (key.length === 0) throw new Error("访问密钥不能为空。");
+		if (await promptSecret("确认新的网关访问密钥：") !== key) throw new Error("两次输入的密钥不一致。");
+		token = key;
+	}
+	if (!opts.lan && token !== void 0) await GatewayAuth.setup({
+		homeDir: resolveScreamHome(),
+		token
+	});
 	await runWebServer({
 		port: opts.port,
 		workDir: process.cwd(),
@@ -15716,7 +16816,9 @@ async function runWeb(opts) {
 		yolo: opts.yolo,
 		auto: opts.auto,
 		open: opts.open,
-		skillsDirs: opts.skillsDirs
+		skillsDirs: opts.skillsDirs,
+		lan: opts.lan,
+		token
 	});
 }
 //#endregion