synabun 2.0.9 → 2.1.0

package/neural-interface/public/shared/api.js

@@ -1,1354 +1,1545 @@
-// ═══════════════════════════════════════════
-// SynaBun Neural Interface — API Client
-// ═══════════════════════════════════════════
-// Single source of truth for all REST API calls.
-// Every fetch('/api/...') in the UI should route through here.
-
-// ─── Helpers ─────────────────────────────
-
-async function jsonFetch(url, options = {}) {
-  const res = await fetch(url, options);
-  if (!res.ok) {
-    let errMsg = `HTTP ${res.status}`;
-    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
-    if (res.status === 403) {
-      console.warn(`[api] 403 Forbidden: ${url}`);
-      // Trigger global toast for guest feedback
-      window.dispatchEvent(new CustomEvent('synabun:forbidden', { detail: errMsg }));
-      const err = new Error(errMsg);
-      err.forbidden = true;
-      throw err;
-    }
-    throw new Error(errMsg);
-  }
-  return res.json();
-}
-
-function jsonBody(data) {
-  return {
-    headers: { 'Content-Type': 'application/json' },
-    body: JSON.stringify(data),
-  };
-}
-
-// ─── Health ──────────────────────────────
-
-export async function fetchHealth() {
-  const res = await fetch('/api/health', { signal: AbortSignal.timeout(3000) });
-  return res.json();
-}
-
-export async function startHealth() {
-  const res = await fetch('/api/health/start', { method: 'POST' });
-  return res.json();
-}
-
-// ─── Memories ────────────────────────────
-
-export async function fetchMemories(includeLinks = true) {
-  // fields=graph: slim payload (truncated content is flagged with
-  // contentTruncated and hydrated on demand by ui-detail.js)
-  const url = includeLinks ? '/api/memories?fields=graph' : '/api/memories?links=false&fields=graph';
-  const res = await fetch(url);
-  if (!res.ok) throw new Error(`HTTP ${res.status}`);
-  return res.json();
-}
-
-export async function fetchLinks() {
-  return jsonFetch('/api/links');
-}
-
-export async function fetchMemory(id) {
-  return jsonFetch(`/api/memory/${encodeURIComponent(id)}`);
-}
-
-export async function updateMemory(id, payload) {
-  return jsonFetch(`/api/memory/${encodeURIComponent(id)}`, {
-    method: 'PATCH',
-    ...jsonBody(payload),
-  });
-}
-
-export async function deleteMemory(id) {
-  return jsonFetch(`/api/memory/${encodeURIComponent(id)}`, {
-    method: 'DELETE',
-  });
-}
-
-export async function deleteMemoryPermanent(id) {
-  return jsonFetch(`/api/memory/${encodeURIComponent(id)}?permanent=true`, {
-    method: 'DELETE',
-  });
-}
-
-// ─── Search ──────────────────────────────
-
-export async function searchMemories(query, limit = 15) {
-  return jsonFetch('/api/search', {
-    method: 'POST',
-    ...jsonBody({ query, limit }),
-  });
-}
-
-// ─── Stats ───────────────────────────────
-
-export async function fetchStats() {
-  return jsonFetch('/api/stats');
-}
-
-// ─── Categories ──────────────────────────
-
-export async function fetchCategories() {
-  return jsonFetch('/api/categories');
-}
-
-export async function createCategory(payload) {
-  // payload: { name, description, color?, parent?, is_parent? }
-  return jsonFetch('/api/categories', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-export async function updateCategory(name, updates) {
-  // updates: { new_name?, description?, parent?, color?, is_parent? }
-  return jsonFetch(`/api/categories/${encodeURIComponent(name)}`, {
-    method: 'PUT',
-    ...jsonBody(updates),
-  });
-}
-
-export async function patchCategory(name, updates) {
-  // updates: { description? }
-  return jsonFetch(`/api/categories/${encodeURIComponent(name)}`, {
-    method: 'PATCH',
-    ...jsonBody(updates),
-  });
-}
-
-export async function deleteCategory(name, body = {}) {
-  // body: { reassign_to?, reassign_children_to?, delete_memories? }
-  return jsonFetch(`/api/categories/${encodeURIComponent(name)}`, {
-    method: 'DELETE',
-    ...jsonBody(body),
-  });
-}
-
-export async function exportCategory(name) {
-  const res = await fetch(`/api/categories/${encodeURIComponent(name)}/export`);
-  if (!res.ok) {
-    let errMsg = 'Export failed';
-    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
-    throw new Error(errMsg);
-  }
-  return res.blob();
-}
-
-export async function uploadCategoryLogo(name, fileBuffer, contentType) {
-  return jsonFetch(`/api/categories/${encodeURIComponent(name)}/logo`, {
-    method: 'POST',
-    headers: { 'Content-Type': contentType || 'image/png' },
-    body: fileBuffer,
-  });
-}
-
-export async function deleteCategoryLogo(name) {
-  return jsonFetch(`/api/categories/${encodeURIComponent(name)}/logo`, {
-    method: 'DELETE',
-  });
-}
-
-// ─── Trash ───────────────────────────────
-
-export async function fetchTrash() {
-  return jsonFetch('/api/trash');
-}
-
-export async function restoreFromTrash(id) {
-  return jsonFetch(`/api/trash/${encodeURIComponent(id)}/restore`, {
-    method: 'POST',
-  });
-}
-
-export async function purgeTrash() {
-  return jsonFetch('/api/trash/purge', {
-    method: 'DELETE',
-    ...jsonBody({}),
-  });
-}
-
-// ─── Settings ────────────────────────────
-
-export async function fetchSettings() {
-  return jsonFetch('/api/settings');
-}
-
-export async function saveSettings(payload) {
-  // payload: { databasePath? }
-  return jsonFetch('/api/settings', {
-    method: 'PUT',
-    ...jsonBody(payload),
-  });
-}
-
-// ─── Display Settings ────────────────────
-
-export async function fetchDisplaySettings() {
-  return jsonFetch('/api/display-settings');
-}
-
-export async function saveDisplaySettings(payload) {
-  // payload: { recallMaxChars? }
-  return jsonFetch('/api/display-settings', {
-    method: 'PUT',
-    ...jsonBody(payload),
-  });
-}
-
-// ─── Keybinds ────────────────────────────
-
-export async function fetchKeybinds() {
-  return jsonFetch('/api/keybinds');
-}
-
-export async function saveKeybindsToServer(payload) {
-  return jsonFetch('/api/keybinds', {
-    method: 'PUT',
-    ...jsonBody(payload),
-  });
-}
-
-// ─── Connections ─────────────────────────
-
-export async function fetchConnections() {
-  return jsonFetch('/api/connections');
-}
-
-export async function suggestPort() {
-  return jsonFetch('/api/connections/suggest-port');
-}
-
-export async function createConnection(payload) {
-  // payload: { id, label, url, apiKey, collection }
-  return jsonFetch('/api/connections', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-export async function setActiveConnection(id) {
-  return jsonFetch('/api/connections/active', {
-    method: 'PUT',
-    ...jsonBody({ id }),
-  });
-}
-
-export async function deleteConnection(id) {
-  return jsonFetch(`/api/connections/${encodeURIComponent(id)}`, {
-    method: 'DELETE',
-  });
-}
-
-export async function syncConnectionEnv() {
-  return jsonFetch('/api/connections/sync-env', { method: 'POST' });
-}
-
-export async function startConnectionContainer(id) {
-  return jsonFetch('/api/connections/start-container', {
-    method: 'POST',
-    ...jsonBody({ id }),
-  });
-}
-
-export async function backupConnection(id) {
-  const res = await fetch(`/api/connections/${encodeURIComponent(id)}/backup`, {
-    method: 'POST',
-  });
-  if (!res.ok) {
-    let errMsg = 'Backup failed';
-    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
-    throw new Error(errMsg);
-  }
-  // Returns a blob (snapshot file) with content-disposition header
-  const blob = await res.blob();
-  const disposition = res.headers.get('content-disposition') || '';
-  const filenameMatch = disposition.match(/filename="?([^"]+)"?/);
-  const filename = filenameMatch ? filenameMatch[1] : `backup-${id}.snapshot`;
-  return { blob, filename };
-}
-
-export async function restoreConnection(id, snapshotBuffer) {
-  return jsonFetch(`/api/connections/${encodeURIComponent(id)}/restore`, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/octet-stream' },
-    body: snapshotBuffer,
-  });
-}
-
-export async function restoreStandalone(params, snapshotBuffer) {
-  // params: { url, apiKey, collection, label? }
-  const qs = new URLSearchParams(params).toString();
-  return jsonFetch(`/api/connections/restore-standalone?${qs}`, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/octet-stream' },
-    body: snapshotBuffer,
-  });
-}
-
-// ─── Full System Backup & Restore ────────
-
-export async function systemBackup() {
-  const res = await fetch('/api/system/backup');
-  if (!res.ok) {
-    let errMsg = 'Backup failed';
-    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
-    throw new Error(errMsg);
-  }
-  const blob = await res.blob();
-  const disposition = res.headers.get('content-disposition') || '';
-  const filenameMatch = disposition.match(/filename="?([^"]+)"?/);
-  const filename = filenameMatch ? filenameMatch[1] : 'synabun-backup.zip';
-  return { blob, filename };
-}
-
-export async function systemRestorePreview(zipBuffer) {
-  const res = await fetch('/api/system/restore/preview', {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/zip' },
-    body: zipBuffer,
-  });
-  if (!res.ok) {
-    let errMsg = 'Preview failed';
-    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
-    throw new Error(errMsg);
-  }
-  return res.json();
-}
-
-export async function systemRestore(zipBuffer, mode = 'full') {
-  const res = await fetch(`/api/system/restore?mode=${encodeURIComponent(mode)}`, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/zip' },
-    body: zipBuffer,
-  });
-  if (!res.ok) {
-    let errMsg = 'Restore failed';
-    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
-    throw new Error(errMsg);
-  }
-  return res.json();
-}
-
-export async function createCollection(payload) {
-  // payload: { url, apiKey, collection }
-  return jsonFetch('/api/connections/create-collection', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-// ─── OpenClaw Bridge ─────────────────────
-
-export async function fetchOpenClawBridge() {
-  return jsonFetch('/api/bridges/openclaw');
-}
-
-export async function connectOpenClawBridge() {
-  return jsonFetch('/api/bridges/openclaw/connect', {
-    method: 'POST',
-    ...jsonBody({}),
-  });
-}
-
-export async function syncOpenClawBridge() {
-  return jsonFetch('/api/bridges/openclaw/sync', { method: 'POST' });
-}
-
-export async function disconnectOpenClawBridge() {
-  return jsonFetch('/api/bridges/openclaw', { method: 'DELETE' });
-}
-
-// ─── Memory Sync ─────────────────────────
-
-export async function checkSync() {
-  return jsonFetch('/api/sync/check');
-}
-
-// ─── Claude Code Integrations ────────────
-
-export async function fetchClaudeCodeIntegrations() {
-  return jsonFetch('/api/claude-code/integrations');
-}
-
-export async function toggleClaudeCodeIntegration(method, payload) {
-  // method: 'POST' | 'DELETE'
-  // payload: { target, projectPath?, hook? }
-  return jsonFetch('/api/claude-code/integrations', {
-    method,
-    ...jsonBody(payload),
-  });
-}
-
-export async function removeClaudeCodeProject(index) {
-  return jsonFetch(`/api/claude-code/projects/${index}`, {
-    method: 'DELETE',
-  });
-}
-
-export async function fetchClaudeCodeHookFeatures() {
-  return jsonFetch('/api/claude-code/hook-features');
-}
-
-export async function updateClaudeCodeHookFeature(feature, enabled) {
-  return jsonFetch('/api/claude-code/hook-features', {
-    method: 'PUT',
-    ...jsonBody({ feature, enabled }),
-  });
-}
-
-export async function fetchClaudeCodeRuleset() {
-  return jsonFetch('/api/claude-code/ruleset');
-}
-
-// ─── Claude Code MCP ─────────────────────
-
-export async function fetchClaudeCodeMcp() {
-  return jsonFetch('/api/claude-code/mcp');
-}
-
-export async function toggleClaudeCodeMcp(method) {
-  // method: 'POST' to register, 'DELETE' to unregister
-  return jsonFetch('/api/claude-code/mcp', { method });
-}
-
-// ─── Claude Code Skills ──────────────────
-
-export async function fetchClaudeCodeSkills() {
-  return jsonFetch('/api/claude-code/skills');
-}
-
-export async function toggleClaudeCodeSkill(method, skillName) {
-  // method: 'POST' to install, 'DELETE' to uninstall
-  return jsonFetch('/api/claude-code/skills', {
-    method,
-    ...jsonBody({ name: skillName }),
-  });
-}
-
-// ─── Skills Studio ───────────────────────
-
-export async function fetchSkillsLibrary() {
-  return jsonFetch('/api/skills-studio/library');
-}
-
-export async function fetchSkillsArtifact(encodedId) {
-  return jsonFetch(`/api/skills-studio/artifact/${encodedId}`);
-}
-
-export async function saveSkillsArtifact(encodedId, rawContent) {
-  return jsonFetch(`/api/skills-studio/artifact/${encodedId}`, {
-    method: 'PUT',
-    ...jsonBody({ rawContent }),
-  });
-}
-
-export async function fetchSkillsSubFile(encodedId, path) {
-  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/file?path=${encodeURIComponent(path)}`);
-}
-
-export async function saveSkillsSubFile(encodedId, path, content) {
-  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/file`, {
-    method: 'PUT',
-    ...jsonBody({ path, content }),
-  });
-}
-
-export async function createSkillsSubFile(encodedId, path, content, isDir) {
-  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/file`, {
-    method: 'POST',
-    ...jsonBody({ path, content, isDir }),
-  });
-}
-
-export async function deleteSkillsSubFile(encodedId, path) {
-  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/file`, {
-    method: 'DELETE',
-    ...jsonBody({ path }),
-  });
-}
-
-export async function createSkillsArtifact(payload) {
-  return jsonFetch('/api/skills-studio/create', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-export async function deleteSkillsArtifact(encodedId) {
-  return jsonFetch(`/api/skills-studio/artifact/${encodedId}`, {
-    method: 'DELETE',
-  });
-}
-
-export async function validateSkillsArtifact(rawContent, type) {
-  return jsonFetch('/api/skills-studio/validate', {
-    method: 'POST',
-    ...jsonBody({ rawContent, type }),
-  });
-}
-
-export async function installSkillsBundled(dirName) {
-  return jsonFetch('/api/skills-studio/install', {
-    method: 'POST',
-    ...jsonBody({ dirName }),
-  });
-}
-
-export async function uninstallSkillsBundled(dirName) {
-  return jsonFetch('/api/skills-studio/install', {
-    method: 'DELETE',
-    ...jsonBody({ dirName }),
-  });
-}
-
-// `overwrite`: the user confirmed that files which already exist may be replaced.
-// The server refuses a bundle that would replace any without it, naming them:
-// that error carries `code: 'import_exists'` and `existing` (the file names).
-export async function importSkillsBundle(bundle, scope, projectPath, { overwrite = false } = {}) {
-  const res = await fetch('/api/skills-studio/import', {
-    method: 'POST',
-    ...jsonBody({ bundle, scope, projectPath, ...(overwrite === true ? { overwrite: true } : {}) }),
-  });
-  if (res.ok) return res.json();
-  let body = {};
-  try { body = (await res.json()) || {}; } catch {}
-  const err = new Error(body.error || `HTTP ${res.status}`);
-  if (res.status === 403) {
-    // Same as jsonFetch: the global toast for a guest.
-    console.warn('[api] 403 Forbidden: /api/skills-studio/import');
-    window.dispatchEvent(new CustomEvent('synabun:forbidden', { detail: err.message }));
-    err.forbidden = true;
-  } else if (res.status === 409 && body.code === 'import_exists' && Array.isArray(body.existing)) {
-    err.code = body.code;
-    err.existing = body.existing.filter(n => typeof n === 'string');
-  }
-  throw err;
-}
-
-// Import a bundle, asking before anything that exists is replaced: `ask(existing)`
-// gets the names the server refused over, and only `true` sends the bundle
-// again as confirmed. Resolves to null when the answer was not a yes.
-export async function importSkillsBundleAsking(bundle, scope, projectPath, ask) {
-  try { return await importSkillsBundle(bundle, scope, projectPath); }
-  catch (err) {
-    if (err?.code !== 'import_exists' || !Array.isArray(err.existing) || !err.existing.length) throw err;
-    if ((await ask(err.existing)) !== true) return null;
-    return importSkillsBundle(bundle, scope, projectPath, { overwrite: true });
-  }
-}
-
-export function getSkillsExportUrl(encodedId) {
-  return `/api/skills-studio/export/${encodedId}`;
-}
-
-export function getSkillsIconUrl(encodedId) {
-  return `/api/skills-studio/artifact/${encodedId}/icon`;
-}
-
-export async function uploadSkillsIcon(encodedId, fileBuffer, contentType) {
-  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/icon`, {
-    method: 'POST',
-    headers: { 'Content-Type': contentType || 'image/png' },
-    body: fileBuffer,
-  });
-}
-
-export async function deleteSkillsIcon(encodedId) {
-  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/icon`, { method: 'DELETE' });
-}
-
-// ─── MCP Key ─────────────────────────────
-
-export async function fetchMcpKey() {
-  return jsonFetch('/api/mcp-key');
-}
-
-export async function generateMcpKey() {
-  return jsonFetch('/api/mcp-key', { method: 'POST' });
-}
-
-export async function revokeMcpKey() {
-  return jsonFetch('/api/mcp-key', { method: 'DELETE' });
-}
-
-// ─── Tunnel ──────────────────────────────
-
-export async function fetchTunnelStatus() {
-  return jsonFetch('/api/tunnel/status');
-}
-
-export async function startTunnel() {
-  return jsonFetch('/api/tunnel/start', { method: 'POST' });
-}
-
-export async function stopTunnel() {
-  return jsonFetch('/api/tunnel/stop', { method: 'POST' });
-}
-
-// ─── Last Session (resume after restart) ──
-
-export async function fetchLastSession() {
-  const r = await fetch('/api/last-session');
-  if (!r.ok) return null;
-  return r.json();
-}
-
-export async function dismissLastSession() {
-  return fetch('/api/last-session', { method: 'DELETE' });
-}
-
-// ─── Terminal ────────────────────────────
-
-export async function fetchTerminalSessions() {
-  return jsonFetch('/api/terminal/sessions');
-}
-
-export async function createTerminalSession(profile, cols, rows, cwd, opts = {}) {
-  return jsonFetch('/api/terminal/sessions', {
-    method: 'POST',
-    ...jsonBody({ profile, cols, rows, cwd, ...opts }),
-  });
-}
-
-export async function fetchProjects() {
-  return jsonFetch('/api/projects');
-}
-
-// ─── Style Guide v2 ────────────────────────────
-const sgQuery = values => new URLSearchParams(Object.entries(values).filter(([,v]) => v !== undefined && v !== null)).toString();
-const sgPost = (path, body) => jsonFetch(path, { method: 'POST', ...jsonBody(body) });
-export const fetchStyleGuide = projectPath => jsonFetch(`/api/style-guide?${sgQuery({projectPath})}`);
-export const saveStyleGuide = (projectPath, config, {source = 'ui', label} = {}) => jsonFetch('/api/style-guide', { method: 'PUT', ...jsonBody({projectPath, config, source, label}) });
-export const fetchStyleGuideProjects = () => jsonFetch('/api/style-guide/projects');
-export const fetchStyleGuideDefaults = projectPath => jsonFetch(`/api/style-guide/defaults?${sgQuery({projectPath})}`);
-export const fetchStyleGuideSummary = (projectPath, taskClass) => jsonFetch(`/api/style-guide/summary?${sgQuery({projectPath, taskClass})}`);
-export const fetchStyleGuideFonts = q => jsonFetch(`/api/style-guide/fonts?${sgQuery({q})}`);
-export const fetchStyleGuidePresets = () => jsonFetch('/api/style-guide/presets');
-export const applyStyleGuidePreset = (projectPath, presetId, merge) => sgPost('/api/style-guide/presets/apply', {projectPath, presetId, merge});
-export const importStyleGuide = (projectPath, options) => sgPost('/api/style-guide/import', {projectPath, ...options});
-export const writeStyleGuideExports = (projectPath, formats) => sgPost('/api/style-guide/export', {projectPath, formats});
-export const fetchStyleGuideHistory = projectPath => jsonFetch(`/api/style-guide/history?${sgQuery({projectPath})}`);
-export const restoreStyleGuideRevision = (projectPath, revision) => sgPost('/api/style-guide/history/restore', {projectPath, revision});
-export const fetchStyleGuideProposals = (projectPath, status) => jsonFetch(`/api/style-guide/proposals?${sgQuery({projectPath, status})}`);
-export const proposeStyleGuide = (projectPath, options) => sgPost('/api/style-guide/proposals', {projectPath, ...options});
-export const acceptStyleGuideProposal = (projectPath, id) => sgPost(`/api/style-guide/proposals/${encodeURIComponent(id)}/accept`, {projectPath});
-export const rejectStyleGuideProposal = (projectPath, id) => sgPost(`/api/style-guide/proposals/${encodeURIComponent(id)}/reject`, {projectPath});
-export const styleGuideContrast = options => sgPost('/api/style-guide/contrast', options);
-export const styleGuideScale = (base, options = {}) => sgPost('/api/style-guide/scale', {base, ...options});
-export const styleGuideDarkSemantic = (light, neutral) => sgPost('/api/style-guide/dark-semantic', {light, neutral});
-export const setStyleGuidePointers = (projectPath, enabled) => sgPost('/api/style-guide/pointers', {projectPath, enabled});
-export async function fetchStyleGuidePreviewMd(projectPath) {
-  const res = await fetch(`/api/style-guide/preview-md?${sgQuery({projectPath})}`);
-  if (!res.ok) throw new Error(`HTTP ${res.status}`);
-  return res.text();
-}
-export async function fetchStyleGuideExport(projectPath, format, theme) {
-  const data = await jsonFetch(`/api/style-guide/export?${sgQuery({projectPath, format, theme, as:'json'})}`);
-  return data.text;
-}
-export async function uploadStyleGuideLogo(projectPath, file, {variantId, name, bg, kind} = {}) {
-  const res = await fetch(`/api/style-guide/logo?${sgQuery({projectPath, variantId, name, bg, kind})}`, {method:'POST', headers:{'Content-Type':file.type || 'image/png'}, body:file});
-  if (!res.ok) { const data = await res.json().catch(() => ({})); throw new Error(data.error || `HTTP ${res.status}`); }
-  return res.json();
-}
-export const deleteStyleGuideLogo = (projectPath, variantId) => jsonFetch(`/api/style-guide/logo/${encodeURIComponent(variantId)}?${sgQuery({projectPath})}`, {method:'DELETE'});
-export function styleGuideAssetUrl(assetsHash, file) {
-  return assetsHash && file ? `/api/style-guide/assets/${encodeURIComponent(assetsHash)}/${encodeURIComponent(file)}` : '';
-}
-
-// ─── Claude Code Sessions (Resume) ─────
-
-export async function fetchClaudeSessions({ project, limit, offset, search, refresh, account } = {}) {
-  const params = new URLSearchParams();
-  if (project) params.set('project', project);
-  if (limit) params.set('limit', String(limit));
-  if (offset) params.set('offset', String(offset));
-  if (search) params.set('search', search);
-  if (refresh) params.set('refresh', 'true');
-  // A named Claude account: the session is looked up (by its id, in `search`) in that account's catalogue.
-  if (account && account !== 'default') params.set('account', account);
-  return jsonFetch(`/api/claude-code/sessions?${params}`);
-}
-
-// ─── Codex CLI Sessions (Resume) ─────
-
-export async function fetchCodexSessions({ project, limit, offset, search, refresh } = {}) {
-  const params = new URLSearchParams();
-  if (project) params.set('project', project);
-  if (limit) params.set('limit', String(limit));
-  if (offset) params.set('offset', String(offset));
-  if (search) params.set('search', search);
-  if (refresh) params.set('refresh', 'true');
-  return jsonFetch(`/api/codex/sessions?${params}`);
-}
-
-// ─── OpenCode Sessions (Resume) ─────
-
-export async function fetchOpencodeSessions({ project, limit, offset, search } = {}) {
-  const params = new URLSearchParams();
-  if (project) params.set('project', project);
-  if (limit) params.set('limit', String(limit));
-  if (offset) params.set('offset', String(offset));
-  if (search) params.set('search', search);
-  return jsonFetch(`/api/opencode/sessions?${params}`);
-}
-
-// ─── Gemini CLI Sessions (Resume) ─────
-
-export async function fetchGeminiSessions({ project, limit, offset, search } = {}) {
-  const params = new URLSearchParams();
-  if (project) params.set('project', project);
-  if (limit) params.set('limit', String(limit));
-  if (offset) params.set('offset', String(offset));
-  if (search) params.set('search', search);
-  return jsonFetch(`/api/gemini/sessions?${params}`);
-}
-
-// ─── Hybrid session content search (FTS5 + semantic for Claude) ─────
-
-export async function searchSessions({ q, provider, project, limit } = {}) {
-  const params = new URLSearchParams();
-  if (q) params.set('q', q);
-  if (provider) params.set('provider', provider);
-  if (project) params.set('project', project);
-  if (limit) params.set('limit', String(limit));
-  return jsonFetch(`/api/session-search?${params}`);
-}
-
-// ─── Session Indexing ─────
-
-export async function startSessionIndexing({ project, reindex, sessionIds } = {}) {
-  return jsonFetch('/api/session-indexing/start', {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
-    body: JSON.stringify({ project, reindex, sessionIds }),
-  });
-}
-
-export async function cancelSessionIndexing() {
-  return jsonFetch('/api/session-indexing/cancel', {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
-    body: JSON.stringify({}),
-  });
-}
-
-export async function fetchIndexingStatus() {
-  return jsonFetch('/api/session-indexing/status');
-}
-
-export async function deleteTerminalSession(sessionId) {
-  return jsonFetch(`/api/terminal/sessions/${encodeURIComponent(sessionId)}`, {
-    method: 'DELETE',
-  });
-}
-
-export async function fetchTerminalFiles(dirPath, search) {
-  let url = `/api/terminal/files?path=${encodeURIComponent(dirPath)}`;
-  if (search) url += `&search=${encodeURIComponent(search)}`;
-  return jsonFetch(url);
-}
-
-export async function fetchTerminalBranches(dirPath) {
-  return jsonFetch(`/api/terminal/branches?path=${encodeURIComponent(dirPath)}`);
-}
-
-export async function checkoutTerminalBranch(dirPath, branch) {
-  return jsonFetch('/api/terminal/checkout', {
-    method: 'POST',
-    ...jsonBody({ path: dirPath, branch }),
-  });
-}
-
-// ─── Terminal Links ──────────────────────
-
-export async function fetchTerminalLinks() {
-  return jsonFetch('/api/terminal/links');
-}
-
-export async function fetchTerminalLink(linkId) {
-  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}`);
-}
-
-export async function createTerminalLink(sessions, config = {}) {
-  return jsonFetch('/api/terminal/links', {
-    method: 'POST',
-    ...jsonBody({ sessions, ...config }),
-  });
-}
-
-export async function deleteTerminalLink(linkId) {
-  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}`, {
-    method: 'DELETE',
-  });
-}
-
-export async function detectClaudeSession(terminalSessionId) {
-  return jsonFetch(`/api/terminal/sessions/${encodeURIComponent(terminalSessionId)}/claude-session`);
-}
-
-export async function updateTerminalLink(linkId, config) {
-  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}`, {
-    method: 'PATCH',
-    ...jsonBody(config),
-  });
-}
-
-export async function sendLinkMessage(linkId, message, targetIdx) {
-  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}/send`, {
-    method: 'POST',
-    ...jsonBody({ message, targetIdx }),
-  });
-}
-
-export async function pauseLink(linkId) {
-  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}/pause`, {
-    method: 'POST',
-  });
-}
-
-export async function resumeLink(linkId) {
-  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}/resume`, {
-    method: 'POST',
-  });
-}
-
-export async function nudgeLink(linkId) {
-  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}/nudge`, {
-    method: 'POST',
-  });
-}
-
-// ─── Browser Sessions ────────────────────
-
-export async function fetchBrowserSessions() {
-  return jsonFetch('/api/browser/sessions');
-}
-
-export async function createBrowserSession(url, width, height, fingerprint, opts = {}) {
-  return jsonFetch('/api/browser/sessions', {
-    method: 'POST',
-    ...jsonBody({ url, width, height, ...fingerprint, ...opts }),
-  });
-}
-
-export async function deleteBrowserSession(sessionId) {
-  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}`, {
-    method: 'DELETE',
-  });
-}
-
-export async function navigateBrowser(sessionId, url) {
-  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}/navigate`, {
-    method: 'POST',
-    ...jsonBody({ url }),
-  });
-}
-
-export async function browserBack(sessionId) {
-  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}/back`, {
-    method: 'POST',
-    ...jsonBody({}),
-  });
-}
-
-export async function browserForward(sessionId) {
-  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}/forward`, {
-    method: 'POST',
-    ...jsonBody({}),
-  });
-}
-
-export async function browserReload(sessionId) {
-  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}/reload`, {
-    method: 'POST',
-    ...jsonBody({}),
-  });
-}
-
-export async function fetchBrowserCdp(sessionId) {
-  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}/cdp`);
-}
-
-// ─── Setup (Onboarding) ─────────────────
-
-export async function checkSetupDeps() {
-  return jsonFetch('/api/setup/check-deps');
-}
-
-export async function fetchSetupStatus() {
-  return jsonFetch('/api/setup/onboarding');
-}
-
-export async function saveSetupConfig(payload) {
-  return jsonFetch('/api/setup/save-config', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-export async function setupCreateCollection(payload) {
-  return jsonFetch('/api/setup/create-collection', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-export async function setupBuild() {
-  return jsonFetch('/api/setup/build', { method: 'POST' });
-}
-
-export async function testDatabase() {
-  return jsonFetch('/api/setup/test-qdrant');
-}
-
-export async function testDatabaseRemote(payload) {
-  return jsonFetch('/api/setup/test-qdrant-cloud', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-export async function writeMcpJson(payload) {
-  return jsonFetch('/api/setup/write-mcp-json', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-export async function completeSetup() {
-  return jsonFetch('/api/setup/complete', { method: 'POST' });
-}
-
-// ─── SynaBun rules (lib/rulesets/api.js) ──
-// A server that has not been restarted since the update answers 404 here.
-// The status read returns null for that; the actions throw, and callers show
-// the copy-only fallback or a "Restart SynaBun to finish this update" hint.
-// An action the files said no to is a 409 and throws too, with the server's
-// own sentence as the message: an edited copy on install, damaged markers, a
-// symlink, a file that changed while it was being written (code
-// CHANGED_UNDERNEATH) or another SynaBun process on the same data home that
-// was still at work when the wait ran out (code BUSY, `retryable: true`).
-// The last two mean "try again": nothing was changed. A 500 with code
-// LOCK_UNAVAILABLE means the server could not use its own lock file.
-
-/**
- * {ok, version, autoUpdate, hosts:{<host>:{carrier, path, state, installedVersion, managed, error, …}}, legacy, notice},
- * or null when the route is missing, refuses or fails. A host may also carry
- * `replaceable: false` (state `modified`, but the file has no SynaBun markers:
- * Replace and a forced Remove are refused), `partialRemoval: {at, error, paths}`
- * (the last removal could not take these files out) and, for OpenCode,
- * `entry: 'user'` (a line in config.json that SynaBun did not add lists the
- * file: Remove keeps both unless it is sent with force). State `newer` is an
- * untouched copy a newer SynaBun wrote: it is never updated from here. Unlike the calls below
- * it never throws and never raises the guest "forbidden" toast: badges and
- * reminders read it in the background on every page load.
- */
-export async function fetchRulesStatus() {
-  try {
-    const res = await fetch('/api/setup/rules');
-    if (!res.ok) return null;
-    const data = await res.json();
-    return data?.ok ? data : null;
-  } catch {
-    return null;
-  }
-}
-
-/** The rendered text for a host (claude, codex, opencode, gemini, cursor) or the copy-only `coexistence` snippet. */
-export async function fetchRulesText(host) {
-  return jsonFetch(`/api/setup/rules/${encodeURIComponent(host)}/text`);
-}
-
-/**
- * Install or update a host's rules. `force` replaces one well-formed copy the
- * user edited (it is backed up first); damaged or duplicate markers are
- * refused either way.
- */
-export async function installRules(host, { force = false } = {}) {
-  return jsonFetch(`/api/setup/rules/${encodeURIComponent(host)}`, {
-    method: 'POST',
-    ...jsonBody({ force }),
-  });
-}
-
-/**
- * Remove a host's rules. A copy the user edited stays in place and is listed
- * in the result's `kept` (`ok` is still true); `force` removes it after a
- * backup. Throws (409) for what is refused either way: damaged markers, a
- * symlink, a config that cannot be rewritten.
- */
-export async function removeRules(host, { force = false } = {}) {
-  return jsonFetch(`/api/setup/rules/${encodeURIComponent(host)}`, { method: 'DELETE', ...jsonBody({ force }) });
-}
-
-/** Install for every connected tool, or only for `hosts` when given. */
-export async function installAllRules(hosts = null) {
-  return jsonFetch('/api/setup/rules/install-all', {
-    method: 'POST',
-    ...jsonBody(Array.isArray(hosts) && hosts.length ? { hosts } : {}),
-  });
-}
-
-export async function setRulesAutoUpdate(autoUpdate) {
-  return jsonFetch('/api/setup/rules/settings', {
-    method: 'PUT',
-    ...jsonBody({ autoUpdate: !!autoUpdate }),
-  });
-}
-
-/** Take a hash-exact pasted copy out of one of the files the status lists under `legacy`. */
-export async function removeLegacyRules(path) {
-  return jsonFetch('/api/setup/rules/legacy/remove', {
-    method: 'POST',
-    ...jsonBody({ path }),
-  });
-}
-
-export async function ackRulesNotice() {
-  return jsonFetch('/api/setup/rules/notice/ack', { method: 'POST' });
-}
-
-/**
- * The text to show or copy for a host, from the rules route and, when that is
- * not there, from the older read-only endpoint. Throws when neither answers.
- */
-export async function fetchRulesTextWithFallback(host) {
-  try {
-    const data = await fetchRulesText(host);
-    if (data?.text) return data.text;
-  } catch { /* older server: try the endpoint it does have */ }
-  const format = host === 'opencode' ? 'generic' : host;
-  const data = await jsonFetch(`/api/claude-code/ruleset?format=${encodeURIComponent(format)}`);
-  if (!data?.ruleset) throw new Error('Rules text not available');
-  return data.ruleset;
-}
-
-// ─── Invite / Session Sharing ─────────────
-
-export async function fetchInviteStatus() {
-  return jsonFetch('/api/invite/status');
-}
-
-export async function generateInviteKey(custom) {
-  const body = custom ? { custom } : {};
-  return jsonFetch('/api/invite/key', {
-    method: 'POST',
-    ...jsonBody(body),
-  });
-}
-
-export async function revokeInviteKey() {
-  return jsonFetch('/api/invite/key', { method: 'DELETE' });
-}
-
-export async function revokeAllInviteSessions() {
-  return jsonFetch('/api/invite/sessions', { method: 'DELETE' });
-}
-
-export async function saveInviteProxy(config) {
-  return jsonFetch('/api/invite/proxy', {
-    method: 'PUT',
-    ...jsonBody(config),
-  });
-}
-
-export async function fetchInvitePermissions() {
-  return jsonFetch('/api/invite/permissions');
-}
-
-export async function saveInvitePermissions(perms) {
-  return jsonFetch('/api/invite/permissions', {
-    method: 'PUT',
-    ...jsonBody(perms),
-  });
-}
-
-// ── Loop Templates ──
-
-export async function fetchLoopTemplates() {
-  return jsonFetch('/api/loop/templates');
-}
-
-export async function createLoopTemplate(payload) {
-  return jsonFetch('/api/loop/templates', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-export async function updateLoopTemplate(id, payload) {
-  return jsonFetch(`/api/loop/templates/${id}`, {
-    method: 'PUT',
-    ...jsonBody(payload),
-  });
-}
-
-export async function deleteLoopTemplate(id) {
-  return jsonFetch(`/api/loop/templates/${id}`, { method: 'DELETE' });
-}
-
-export async function importLoopTemplates(data) {
-  return jsonFetch('/api/loop/templates/import', {
-    method: 'POST',
-    ...jsonBody(data),
-  });
-}
-
-// ── Loop Folders ──
-
-export async function fetchLoopFolders() {
-  return jsonFetch('/api/loop/folders');
-}
-
-export async function createLoopFolder(payload) {
-  return jsonFetch('/api/loop/folders', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-export async function updateLoopFolder(id, payload) {
-  return jsonFetch(`/api/loop/folders/${id}`, {
-    method: 'PUT',
-    ...jsonBody(payload),
-  });
-}
-
-export async function deleteLoopFolder(id) {
-  return jsonFetch(`/api/loop/folders/${id}`, { method: 'DELETE' });
-}
-
-export async function reorderLoopFolders(orderedIds) {
-  return jsonFetch('/api/loop/folders/reorder', {
-    method: 'POST',
-    ...jsonBody({ orderedIds }),
-  });
-}
-
-export async function fetchActiveLoop() {
-  return jsonFetch('/api/loop/active');
-}
-
-export async function launchLoop(params) {
-  return jsonFetch('/api/loop/launch', {
-    method: 'POST',
-    ...jsonBody(params),
-  });
-}
-
-export async function fetchLoopLog(terminalSessionId) {
-  const res = await fetch(`/api/loop/log/${encodeURIComponent(terminalSessionId)}`);
-  if (!res.ok) {
-    const text = await res.text().catch(() => '');
-    throw new Error(text || `HTTP ${res.status}`);
-  }
-  return res.text();
-}
-
-export async function sendClientLoopLog(terminalSessionId, tag, msg, meta) {
-  try {
-    return await jsonFetch('/api/loop/client-log', {
-      method: 'POST',
-      ...jsonBody({ terminalSessionId: terminalSessionId || null, tag, msg, meta }),
-    });
-  } catch { /* logging best-effort */ }
-}
-
-export async function stopLoop(terminalSessionId) {
-  return jsonFetch('/api/loop/stop', {
-    method: 'POST',
-    ...jsonBody(terminalSessionId ? { terminalSessionId } : {}),
-  });
-}
-
-export async function fetchLoopHistory(limit = 50) {
-  return jsonFetch(`/api/loop/history?limit=${limit}`);
-}
-
-export async function deleteLoopHistory(id) {
-  return jsonFetch(`/api/loop/history/${id}`, { method: 'DELETE' });
-}
-
-export async function storeLoopCompletion(data) {
-  return jsonFetch('/api/loop/complete', {
-    method: 'POST',
-    ...jsonBody(data),
-  });
-}
-
-export async function searchMemoriesByCategory(query, category, limit = 15) {
-  return jsonFetch('/api/search/memories', {
-    method: 'POST',
-    ...jsonBody({ query, category, limit }),
-  });
-}
-
-// ── Loop Schedules ──
-
-export async function fetchScheduleGroups() {
-  return jsonFetch('/api/schedule-groups');
-}
-
-export async function createScheduleGroup(payload) {
-  return jsonFetch('/api/schedule-groups', {
-    method: 'POST',
-    ...jsonBody(payload),
-  });
-}
-
-export async function updateScheduleGroup(id, payload) {
-  return jsonFetch(`/api/schedule-groups/${encodeURIComponent(id)}`, {
-    method: 'PUT',
-    ...jsonBody(payload),
-  });
-}
-
-export async function deleteScheduleGroup(id) {
-  return jsonFetch(`/api/schedule-groups/${encodeURIComponent(id)}`, {
-    method: 'DELETE',
-  });
-}
-
-export async function reorderScheduleGroups(orderedIds) {
-  return jsonFetch('/api/schedule-groups/reorder', {
-    method: 'POST',
-    ...jsonBody({ orderedIds }),
-  });
-}
-
-export async function fetchSchedules() {
-  return jsonFetch('/api/schedules');
-}
-
-export async function createSchedule(params) {
-  return jsonFetch('/api/schedules', {
-    method: 'POST',
-    ...jsonBody(params),
-  });
-}
-
-export async function fetchSchedule(id) {
-  return jsonFetch(`/api/schedules/${encodeURIComponent(id)}`);
-}
-
-export async function updateSchedule(id, params) {
-  return jsonFetch(`/api/schedules/${encodeURIComponent(id)}`, {
-    method: 'PUT',
-    ...jsonBody(params),
-  });
-}
-
-export async function deleteSchedule(id) {
-  return jsonFetch(`/api/schedules/${encodeURIComponent(id)}`, {
-    method: 'DELETE',
-  });
-}
-
+// ═══════════════════════════════════════════
+// SynaBun Neural Interface — API Client
+// ═══════════════════════════════════════════
+// Single source of truth for all REST API calls.
+// Every fetch('/api/...') in the UI should route through here.
+
+// ─── Helpers ─────────────────────────────
+
+async function jsonFetch(url, options = {}) {
+  return jsonOf(await fetch(url, options), url);
+}
+
+/** An answer as JSON, or the error jsonFetch throws for it (a 403 also tells the page, for its guest notice). */
+async function jsonOf(res, url) {
+  if (!res.ok) {
+    let errMsg = `HTTP ${res.status}`;
+    let errBody = null;
+    try { const body = await res.json(); errBody = body && typeof body === 'object' ? body : null; errMsg = body.error || errMsg; } catch {}
+    if (res.status === 403) {
+      console.warn(`[api] 403 Forbidden: ${url}`);
+      // Trigger global toast for guest feedback
+      window.dispatchEvent(new CustomEvent('synabun:forbidden', { detail: errMsg }));
+      const err = new Error(errMsg);
+      err.forbidden = true;
+      err.status = 403;
+      err.code = errBody?.code;
+      err.body = errBody;
+      throw err;
+    }
+    // What the server said besides the message (a code, the revision on disk…) stays with the error.
+    const err = new Error(errMsg);
+    err.status = res.status;
+    err.code = errBody?.code;
+    err.body = errBody;
+    throw err;
+  }
+  return res.json();
+}
+
+function jsonBody(data) {
+  return {
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(data),
+  };
+}
+
+// ─── Health ──────────────────────────────
+
+export async function fetchHealth() {
+  const res = await fetch('/api/health', { signal: AbortSignal.timeout(3000) });
+  return res.json();
+}
+
+export async function startHealth() {
+  const res = await fetch('/api/health/start', { method: 'POST' });
+  return res.json();
+}
+
+// ─── Memories ────────────────────────────
+
+export async function fetchMemories(includeLinks = true) {
+  // fields=graph: slim payload (truncated content is flagged with
+  // contentTruncated and hydrated on demand by ui-detail.js)
+  const url = includeLinks ? '/api/memories?fields=graph' : '/api/memories?links=false&fields=graph';
+  const res = await fetch(url);
+  if (!res.ok) throw new Error(`HTTP ${res.status}`);
+  return res.json();
+}
+
+export async function fetchLinks() {
+  return jsonFetch('/api/links');
+}
+
+export async function fetchMemory(id) {
+  return jsonFetch(`/api/memory/${encodeURIComponent(id)}`);
+}
+
+export async function updateMemory(id, payload) {
+  return jsonFetch(`/api/memory/${encodeURIComponent(id)}`, {
+    method: 'PATCH',
+    ...jsonBody(payload),
+  });
+}
+
+export async function deleteMemory(id) {
+  return jsonFetch(`/api/memory/${encodeURIComponent(id)}`, {
+    method: 'DELETE',
+  });
+}
+
+export async function deleteMemoryPermanent(id) {
+  return jsonFetch(`/api/memory/${encodeURIComponent(id)}?permanent=true`, {
+    method: 'DELETE',
+  });
+}
+
+// ─── Search ──────────────────────────────
+
+export async function searchMemories(query, limit = 15) {
+  return jsonFetch('/api/search', {
+    method: 'POST',
+    ...jsonBody({ query, limit }),
+  });
+}
+
+// ─── Stats ───────────────────────────────
+
+export async function fetchStats() {
+  return jsonFetch('/api/stats');
+}
+
+// ─── Categories ──────────────────────────
+
+export async function fetchCategories() {
+  return jsonFetch('/api/categories');
+}
+
+export async function createCategory(payload) {
+  // payload: { name, description, color?, parent?, is_parent? }
+  return jsonFetch('/api/categories', {
+    method: 'POST',
+    ...jsonBody(payload),
+  });
+}
+
+export async function updateCategory(name, updates) {
+  // updates: { new_name?, description?, parent?, color?, is_parent? }
+  return jsonFetch(`/api/categories/${encodeURIComponent(name)}`, {
+    method: 'PUT',
+    ...jsonBody(updates),
+  });
+}
+
+export async function patchCategory(name, updates) {
+  // updates: { description? }
+  return jsonFetch(`/api/categories/${encodeURIComponent(name)}`, {
+    method: 'PATCH',
+    ...jsonBody(updates),
+  });
+}
+
+export async function deleteCategory(name, body = {}) {
+  // body: { reassign_to?, reassign_children_to?, delete_memories? }
+  return jsonFetch(`/api/categories/${encodeURIComponent(name)}`, {
+    method: 'DELETE',
+    ...jsonBody(body),
+  });
+}
+
+export async function exportCategory(name) {
+  const res = await fetch(`/api/categories/${encodeURIComponent(name)}/export`);
+  if (!res.ok) {
+    let errMsg = 'Export failed';
+    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
+    throw new Error(errMsg);
+  }
+  return res.blob();
+}
+
+export async function uploadCategoryLogo(name, fileBuffer, contentType) {
+  return jsonFetch(`/api/categories/${encodeURIComponent(name)}/logo`, {
+    method: 'POST',
+    headers: { 'Content-Type': contentType || 'image/png' },
+    body: fileBuffer,
+  });
+}
+
+export async function deleteCategoryLogo(name) {
+  return jsonFetch(`/api/categories/${encodeURIComponent(name)}/logo`, {
+    method: 'DELETE',
+  });
+}
+
+// ─── Trash ───────────────────────────────
+
+export async function fetchTrash() {
+  return jsonFetch('/api/trash');
+}
+
+export async function restoreFromTrash(id) {
+  return jsonFetch(`/api/trash/${encodeURIComponent(id)}/restore`, {
+    method: 'POST',
+  });
+}
+
+export async function purgeTrash() {
+  return jsonFetch('/api/trash/purge', {
+    method: 'DELETE',
+    ...jsonBody({}),
+  });
+}
+
+// ─── Settings ────────────────────────────
+
+export async function fetchSettings() {
+  return jsonFetch('/api/settings');
+}
+
+export async function saveSettings(payload) {
+  // payload: { databasePath? }
+  return jsonFetch('/api/settings', {
+    method: 'PUT',
+    ...jsonBody(payload),
+  });
+}
+
+// ─── Display Settings ────────────────────
+
+export async function fetchDisplaySettings() {
+  return jsonFetch('/api/display-settings');
+}
+
+export async function saveDisplaySettings(payload) {
+  // payload: { recallMaxChars? }
+  return jsonFetch('/api/display-settings', {
+    method: 'PUT',
+    ...jsonBody(payload),
+  });
+}
+
+// ─── Keybinds ────────────────────────────
+
+export async function fetchKeybinds() {
+  return jsonFetch('/api/keybinds');
+}
+
+export async function saveKeybindsToServer(payload) {
+  return jsonFetch('/api/keybinds', {
+    method: 'PUT',
+    ...jsonBody(payload),
+  });
+}
+
+// ─── Connections ─────────────────────────
+
+export async function fetchConnections() {
+  return jsonFetch('/api/connections');
+}
+
+export async function suggestPort() {
+  return jsonFetch('/api/connections/suggest-port');
+}
+
+export async function createConnection(payload) {
+  // payload: { id, label, url, apiKey, collection }
+  return jsonFetch('/api/connections', {
+    method: 'POST',
+    ...jsonBody(payload),
+  });
+}
+
+export async function setActiveConnection(id) {
+  return jsonFetch('/api/connections/active', {
+    method: 'PUT',
+    ...jsonBody({ id }),
+  });
+}
+
+export async function deleteConnection(id) {
+  return jsonFetch(`/api/connections/${encodeURIComponent(id)}`, {
+    method: 'DELETE',
+  });
+}
+
+export async function syncConnectionEnv() {
+  return jsonFetch('/api/connections/sync-env', { method: 'POST' });
+}
+
+export async function startConnectionContainer(id) {
+  return jsonFetch('/api/connections/start-container', {
+    method: 'POST',
+    ...jsonBody({ id }),
+  });
+}
+
+export async function backupConnection(id) {
+  const res = await fetch(`/api/connections/${encodeURIComponent(id)}/backup`, {
+    method: 'POST',
+  });
+  if (!res.ok) {
+    let errMsg = 'Backup failed';
+    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
+    throw new Error(errMsg);
+  }
+  // Returns a blob (snapshot file) with content-disposition header
+  const blob = await res.blob();
+  const disposition = res.headers.get('content-disposition') || '';
+  const filenameMatch = disposition.match(/filename="?([^"]+)"?/);
+  const filename = filenameMatch ? filenameMatch[1] : `backup-${id}.snapshot`;
+  return { blob, filename };
+}
+
+export async function restoreConnection(id, snapshotBuffer) {
+  return jsonFetch(`/api/connections/${encodeURIComponent(id)}/restore`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/octet-stream' },
+    body: snapshotBuffer,
+  });
+}
+
+export async function restoreStandalone(params, snapshotBuffer) {
+  // params: { url, apiKey, collection, label? }
+  const qs = new URLSearchParams(params).toString();
+  return jsonFetch(`/api/connections/restore-standalone?${qs}`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/octet-stream' },
+    body: snapshotBuffer,
+  });
+}
+
+// ─── Full System Backup & Restore ────────
+
+export async function systemBackup() {
+  const res = await fetch('/api/system/backup');
+  if (!res.ok) {
+    let errMsg = 'Backup failed';
+    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
+    throw new Error(errMsg);
+  }
+  const blob = await res.blob();
+  const disposition = res.headers.get('content-disposition') || '';
+  const filenameMatch = disposition.match(/filename="?([^"]+)"?/);
+  const filename = filenameMatch ? filenameMatch[1] : 'synabun-backup.zip';
+  return { blob, filename };
+}
+
+export async function systemRestorePreview(zipBuffer) {
+  const res = await fetch('/api/system/restore/preview', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/zip' },
+    body: zipBuffer,
+  });
+  if (!res.ok) {
+    let errMsg = 'Preview failed';
+    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
+    throw new Error(errMsg);
+  }
+  return res.json();
+}
+
+export async function systemRestore(zipBuffer, mode = 'full') {
+  const res = await fetch(`/api/system/restore?mode=${encodeURIComponent(mode)}`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/zip' },
+    body: zipBuffer,
+  });
+  if (!res.ok) {
+    let errMsg = 'Restore failed';
+    try { const body = await res.json(); errMsg = body.error || errMsg; } catch {}
+    throw new Error(errMsg);
+  }
+  return res.json();
+}
+
+export async function createCollection(payload) {
+  // payload: { url, apiKey, collection }
+  return jsonFetch('/api/connections/create-collection', {
+    method: 'POST',
+    ...jsonBody(payload),
+  });
+}
+
+// ─── OpenClaw Bridge ─────────────────────
+
+export async function fetchOpenClawBridge() {
+  return jsonFetch('/api/bridges/openclaw');
+}
+
+export async function connectOpenClawBridge() {
+  return jsonFetch('/api/bridges/openclaw/connect', {
+    method: 'POST',
+    ...jsonBody({}),
+  });
+}
+
+export async function syncOpenClawBridge() {
+  return jsonFetch('/api/bridges/openclaw/sync', { method: 'POST' });
+}
+
+export async function disconnectOpenClawBridge() {
+  return jsonFetch('/api/bridges/openclaw', { method: 'DELETE' });
+}
+
+// ─── Memory Sync ─────────────────────────
+
+export async function checkSync() {
+  return jsonFetch('/api/sync/check');
+}
+
+// ─── Claude Code Integrations ────────────
+
+export async function fetchClaudeCodeIntegrations() {
+  return jsonFetch('/api/claude-code/integrations');
+}
+
+export async function toggleClaudeCodeIntegration(method, payload) {
+  // method: 'POST' | 'DELETE'
+  // payload: { target, projectPath?, hook? }
+  return jsonFetch('/api/claude-code/integrations', {
+    method,
+    ...jsonBody(payload),
+  });
+}
+
+export async function removeClaudeCodeProject(index) {
+  return jsonFetch(`/api/claude-code/projects/${index}`, {
+    method: 'DELETE',
+  });
+}
+
+export async function fetchClaudeCodeHookFeatures() {
+  return jsonFetch('/api/claude-code/hook-features');
+}
+
+export async function updateClaudeCodeHookFeature(feature, enabled) {
+  return jsonFetch('/api/claude-code/hook-features', {
+    method: 'PUT',
+    ...jsonBody({ feature, enabled }),
+  });
+}
+
+export async function fetchClaudeCodeRuleset() {
+  return jsonFetch('/api/claude-code/ruleset');
+}
+
+// ─── Claude Code MCP ─────────────────────
+
+export async function fetchClaudeCodeMcp() {
+  return jsonFetch('/api/claude-code/mcp');
+}
+
+export async function toggleClaudeCodeMcp(method) {
+  // method: 'POST' to register, 'DELETE' to unregister
+  return jsonFetch('/api/claude-code/mcp', { method });
+}
+
+// ─── Claude Code Skills ──────────────────
+
+export async function fetchClaudeCodeSkills() {
+  return jsonFetch('/api/claude-code/skills');
+}
+
+export async function toggleClaudeCodeSkill(method, skillName) {
+  // method: 'POST' to install, 'DELETE' to uninstall
+  return jsonFetch('/api/claude-code/skills', {
+    method,
+    ...jsonBody({ name: skillName }),
+  });
+}
+
+// ─── Skills Studio ───────────────────────
+// Every change here is the owner's, from this page: the routes refuse a write without the X-SynaBun-UI header (and a
+// guest's, and one that carries an agent's headers), as the Skills Service's owner routes below do.
+
+const STUDIO_UI = { 'X-SynaBun-UI': '1' };
+
+/** A Skills Studio write's JSON body, sent as this page's. */
+function studioJsonBody(data) {
+  return { headers: { 'Content-Type': 'application/json', ...STUDIO_UI }, body: JSON.stringify(data) };
+}
+
+export async function fetchSkillsLibrary() {
+  return jsonFetch('/api/skills-studio/library');
+}
+
+export async function fetchSkillsArtifact(encodedId) {
+  return jsonFetch(`/api/skills-studio/artifact/${encodedId}`);
+}
+
+// `expectedRevision`: the revision the editor opened (or last saved). A file that is not that any more is not
+// written: the error has status 409, code `revision_conflict` and body.currentRevision.
+export async function saveSkillsArtifact(encodedId, rawContent, { expectedRevision } = {}) {
+  return jsonFetch(`/api/skills-studio/artifact/${encodedId}`, {
+    method: 'PUT',
+    ...studioJsonBody({ rawContent, ...(expectedRevision ? { expectedRevision } : {}) }),
+  });
+}
+
+export async function fetchSkillsSubFile(encodedId, path) {
+  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/file?path=${encodeURIComponent(path)}`);
+}
+
+export async function saveSkillsSubFile(encodedId, path, content, { expectedRevision } = {}) {
+  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/file`, {
+    method: 'PUT',
+    ...studioJsonBody({ path, content, ...(expectedRevision ? { expectedRevision } : {}) }),
+  });
+}
+
+// `contentBase64`: a file that is not text (an image, a PDF), sent byte for byte.
+export async function createSkillsSubFile(encodedId, path, content, isDir, { contentBase64 } = {}) {
+  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/file`, {
+    method: 'POST',
+    ...studioJsonBody({ path, content, isDir, ...(contentBase64 !== undefined ? { contentBase64 } : {}) }),
+  });
+}
+
+export async function deleteSkillsSubFile(encodedId, path) {
+  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/file`, {
+    method: 'DELETE',
+    ...studioJsonBody({ path }),
+  });
+}
+
+export async function createSkillsArtifact(payload) {
+  return jsonFetch('/api/skills-studio/create', {
+    method: 'POST',
+    ...studioJsonBody(payload),
+  });
+}
+
+export async function deleteSkillsArtifact(encodedId) {
+  return jsonFetch(`/api/skills-studio/artifact/${encodedId}`, {
+    method: 'DELETE',
+    headers: STUDIO_UI,
+  });
+}
+
+export async function validateSkillsArtifact(rawContent, type) {
+  return jsonFetch('/api/skills-studio/validate', {
+    method: 'POST',
+    ...studioJsonBody({ rawContent, type }),
+  });
+}
+
+// A folder already there is replaced only when SynaBun installed it and it is unchanged; otherwise the error is
+// a 409 (`skill_unowned` / `skill_modified`) whose body names `currentDigest`: sending that back as
+// `expectedDestinationDigest` is the person's confirmation of replacing exactly what is there (a backup is kept).
+export async function installSkillsBundled(dirName, { expectedDestinationDigest } = {}) {
+  return jsonFetch('/api/skills-studio/install', {
+    method: 'POST',
+    ...studioJsonBody({ dirName, ...(expectedDestinationDigest ? { expectedDestinationDigest } : {}) }),
+  });
+}
+
+export async function uninstallSkillsBundled(dirName, { expectedDestinationDigest } = {}) {
+  return jsonFetch('/api/skills-studio/install', {
+    method: 'DELETE',
+    ...studioJsonBody({ dirName, ...(expectedDestinationDigest ? { expectedDestinationDigest } : {}) }),
+  });
+}
+
+// An editable copy of a bundled skill, under a name of the user's own, in a scope they chose.
+export async function customizeSkillsCopy({ id, name, scope, projectPath }) {
+  return jsonFetch('/api/skills-studio/customize', {
+    method: 'POST',
+    ...studioJsonBody({ id, name, scope, ...(projectPath ? { projectPath } : {}) }),
+  });
+}
+
+// An import is checked and staged first (nothing is installed), then installed by its staged digest once a
+// person reviewed it. `scope` is 'global', or 'project' with a registered projectPath: never guessed.
+export async function stageSkillsImport(bundle, scope, projectPath) {
+  return jsonFetch('/api/skills-studio/import/stage', {
+    method: 'POST',
+    ...studioJsonBody({ bundle, scope, ...(projectPath ? { projectPath } : {}) }),
+  });
+}
+
+export async function commitSkillsImport({ stagingId, expectedDigest, acknowledgedDigest, overwrite }) {
+  return jsonFetch('/api/skills-studio/import/commit', {
+    method: 'POST',
+    ...studioJsonBody({ stagingId, expectedDigest, ...(acknowledgedDigest ? { acknowledgedDigest } : {}), ...(overwrite === true ? { overwrite: true } : {}) }),
+  });
+}
+
+export async function discardSkillsImport(stagingId) {
+  return jsonFetch(`/api/skills-studio/import/stage/${encodeURIComponent(stagingId)}`, { method: 'DELETE', headers: STUDIO_UI });
+}
+
+// `overwrite`: the user confirmed that files which already exist may be replaced.
+// The server refuses a bundle that would replace any without it, naming them:
+// that error carries `code: 'import_exists'` and `existing` (the file names).
+export async function importSkillsBundle(bundle, scope, projectPath, { overwrite = false } = {}) {
+  const res = await fetch('/api/skills-studio/import', {
+    method: 'POST',
+    ...studioJsonBody({ bundle, scope, projectPath, ...(overwrite === true ? { overwrite: true } : {}) }),
+  });
+  if (res.ok) return res.json();
+  let body = {};
+  try { body = (await res.json()) || {}; } catch {}
+  const err = new Error(body.error || `HTTP ${res.status}`);
+  if (res.status === 403) {
+    // Same as jsonFetch: the global toast for a guest.
+    console.warn('[api] 403 Forbidden: /api/skills-studio/import');
+    window.dispatchEvent(new CustomEvent('synabun:forbidden', { detail: err.message }));
+    err.forbidden = true;
+  } else if (res.status === 409 && body.code === 'import_exists' && Array.isArray(body.existing)) {
+    err.code = body.code;
+    err.existing = body.existing.filter(n => typeof n === 'string');
+  }
+  throw err;
+}
+
+// Import a bundle, asking before anything that exists is replaced: `ask(existing)`
+// gets the names the server refused over, and only `true` sends the bundle
+// again as confirmed. Resolves to null when the answer was not a yes.
+export async function importSkillsBundleAsking(bundle, scope, projectPath, ask) {
+  try { return await importSkillsBundle(bundle, scope, projectPath); }
+  catch (err) {
+    if (err?.code !== 'import_exists' || !Array.isArray(err.existing) || !err.existing.length) throw err;
+    if ((await ask(err.existing)) !== true) return null;
+    return importSkillsBundle(bundle, scope, projectPath, { overwrite: true });
+  }
+}
+
+export function getSkillsExportUrl(encodedId) {
+  return `/api/skills-studio/export/${encodedId}`;
+}
+
+export function getSkillsIconUrl(encodedId) {
+  return `/api/skills-studio/artifact/${encodedId}/icon`;
+}
+
+export async function uploadSkillsIcon(encodedId, fileBuffer, contentType) {
+  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/icon`, {
+    method: 'POST',
+    headers: { 'Content-Type': contentType || 'image/png', ...STUDIO_UI },
+    body: fileBuffer,
+  });
+}
+
+export async function deleteSkillsIcon(encodedId) {
+  return jsonFetch(`/api/skills-studio/artifact/${encodedId}/icon`, { method: 'DELETE', headers: STUDIO_UI });
+}
+
+// ─── Skills Service (/api/skills-studio/v2) ──
+// Reads for everyone the Skills Studio permission lets in. Installs, approvals, rollbacks, the move of the old
+// bridges and the settings are the owner's, from this page: those routes want the X-SynaBun-UI header and refuse
+// a request that carries an agent's headers (lib/skills/api-v2.js).
+
+function skillsV2(path, { method = 'GET', body, idempotencyKey } = {}) {
+  const headers = { 'X-SynaBun-UI': '1' };
+  if (body !== undefined) headers['Content-Type'] = 'application/json';
+  // A write that creates something is sent once: the same key within ten minutes answers the first result again.
+  if (idempotencyKey) headers['Idempotency-Key'] = idempotencyKey;
+  if (method === 'GET') return skillsV2Read(`/api/skills-studio/v2${path}`, headers);
+  return jsonFetch(`/api/skills-studio/v2${path}`, { method, headers, ...(body !== undefined ? { body: JSON.stringify(body) } : {}) });
+}
+
+/**
+ * A Studio read. Some are the owner's page's only (an evaluation's answers and files: lib/skills/evals-api.js): a tab
+ * left open across a server restart holds the earlier boot's page secret, so a read refused for it asks this boot's
+ * once (GET /api/page-session, public/shared/page-session.js does the same for writes) and is sent again.
+ */
+async function skillsV2Read(url, headers) {
+  let res = await fetch(url, { method: 'GET', headers });
+  if (res.status === 403) {
+    let code = null;
+    try { code = (await res.clone().json())?.code || null; } catch { code = null; }
+    if (code === 'PAGE_SECRET_REQUIRED') {
+      const refreshed = await fetch('/api/page-session', { method: 'GET', credentials: 'same-origin', cache: 'no-store', headers: { Accept: 'application/json' } }).then((r) => r.ok, () => false);
+      if (refreshed) res = await fetch(url, { method: 'GET', headers });
+    }
+  }
+  return jsonOf(res, url);
+}
+
+export function fetchSkillsStatus() { return skillsV2('/status'); }
+export function fetchSkillsReviews({ open = null } = {}) { return skillsV2(`/reviews${open === null ? '' : `?open=${open}`}`); }
+export function decideSkillsReview(reviewId, decision, reason = '') { return skillsV2(`/reviews/${encodeURIComponent(reviewId)}/decision`, { method: 'POST', body: { decision, reason } }); }
+export function fetchSkillsRevision(revisionId) { return skillsV2(`/revisions/${encodeURIComponent(revisionId)}`); }
+export function fetchSkillsRevisionFile(revisionId, file) { return skillsV2(`/revisions/${encodeURIComponent(revisionId)}?file=${encodeURIComponent(file)}`); }
+export function fetchSkillsDiff(from, to) { return skillsV2(`/diff?from=${encodeURIComponent(from)}&to=${encodeURIComponent(to)}`); }
+export function planSkillsInstall(revisionId, targets) { return skillsV2('/installations/plan', { method: 'POST', body: { revisionId, targets } }); }
+export function installSkillsRevision(payload) { return skillsV2('/installations', { method: 'POST', body: payload }); }
+export function fetchSkillsInstallations({ active = null } = {}) { return skillsV2(`/installations${active === null ? '' : `?active=${active}`}`); }
+export function rollbackSkillsInstallation(id, body = {}) { return skillsV2(`/installations/${encodeURIComponent(id)}/rollback`, { method: 'POST', body }); }
+export function verifySkillsInstallation(id, { probe = false } = {}) { return skillsV2(`/installations/${encodeURIComponent(id)}/verify`, { method: 'POST', body: { probe } }); }
+export function planSkillsBridgeMigration() { return skillsV2('/migrations/bridges/plan'); }
+export function runSkillsBridgeMigration(planDigest, confirm = null) { return skillsV2('/migrations/bridges', { method: 'POST', body: confirm && Object.keys(confirm).length ? { planDigest, confirm } : { planDigest } }); }
+// The plan with the owner's confirmations of bridges that are not proven SynaBun's (a reading; nothing moves).
+export function planSkillsBridgeMigrationConfirmed(confirm) { return skillsV2('/migrations/bridges/plan', { method: 'POST', body: { confirm: confirm || {} } }); }
+// The start-up move's one-time notice (what moved, what is offered), and the owner's dismissal of it.
+export function fetchSkillsMigrationNotice() { return skillsV2('/migrations/notice'); }
+export function dismissSkillsMigrationNotice() { return skillsV2('/migrations/notice/dismiss', { method: 'POST', body: {} }); }
+// The owner's "Enable for <runtime>": the runtime setting that turns a skill off, changed over a backup.
+export function enableSkillsEligibility(body) { return skillsV2('/eligibility/enable', { method: 'POST', body }); }
+export function revertSkillsMigration(journalId) { return skillsV2(`/migrations/${encodeURIComponent(journalId)}/revert`, { method: 'POST', body: {} }); }
+export function fetchSkillsMigrations() { return skillsV2('/migrations'); }
+export function fetchSkillsConfig() { return skillsV2('/config'); }
+export function saveSkillsConfig(patch) { return skillsV2('/config', { method: 'PUT', body: patch }); }
+
+// Skills Studio 2.0 (P2): the catalog of every runtime folder, the managed library (skills, drafts, revisions,
+// pointers), checks, exports, and what a page newer than its server may ask (capabilities).
+const enc = (v) => encodeURIComponent(v);
+const query = (params) => { const q = Object.entries(params).filter(([, v]) => v !== undefined && v !== null && v !== '').map(([k, v]) => `${enc(k)}=${enc(v)}`).join('&'); return q ? `?${q}` : ''; };
+export function fetchSkillsCapabilities() { return skillsV2('/capabilities'); }
+export function fetchSkillsCatalog({ cursor, limit, kind, runtime, rootId, scope, q } = {}) { return skillsV2(`/catalog${query({ cursor, limit, kind, runtime, rootId, scope, q })}`); }
+export function fetchSkillsCatalogEntry(artifactId) { return skillsV2(`/catalog/${enc(artifactId)}`); }
+export function fetchSkillsCatalogFile(artifactId, path) { return skillsV2(`/catalog/${enc(artifactId)}/file?path=${enc(path)}`); }
+export function fetchSkillsCompare(fromRevisionId, artifactId) { return skillsV2(`/compare?from=${enc(fromRevisionId)}&artifactId=${enc(artifactId)}`); }
+export function rescanSkillsCatalog() { return skillsV2('/catalog/rescan', { method: 'POST', body: {} }); }
+export function fetchSkillsList() { return skillsV2('/skills'); }
+// The skills deleted from the library (their versions kept), and the owner's Restore of one.
+export function fetchSkillsArchived() { return skillsV2('/skills/archived'); }
+export function restoreSkillsSkill(skillId) { return skillsV2(`/skills/${enc(skillId)}/restore`, { method: 'POST', body: {} }); }
+export function fetchSkill(skillId) { return skillsV2(`/skills/${enc(skillId)}`); }
+// Out of the library (its versions kept in the library's archive): 409 `skill_installed` while it is installed
+// somewhere, 403 `skill_bundled` for one SynaBun ships, 409 `skill_conflict` when `expectedEtag` is not its etag now.
+export function deleteLibrarySkill(skillId, { expectedEtag = null } = {}) { return skillsV2(`/skills/${enc(skillId)}`, { method: 'DELETE', body: expectedEtag === null ? {} : { expectedEtag } }); }
+export function fetchSkillRevisions(skillId) { return skillsV2(`/skills/${enc(skillId)}/revisions`); }
+export function createLibrarySkill({ name, files, dirs = [] }, { idempotencyKey } = {}) { return skillsV2('/skills', { method: 'POST', body: { name, files, dirs }, idempotencyKey }); }
+export function adoptSkillsArtifact(artifactId, { idempotencyKey } = {}) { return skillsV2('/skills', { method: 'POST', body: { artifactId }, idempotencyKey }); }
+export function moveSkillPointer(skillId, { pointer, revisionId, expectedEtag = null, reason = '' }) { return skillsV2(`/skills/${enc(skillId)}/pointers`, { method: 'POST', body: { pointer, revisionId, expectedEtag, reason } }); }
+export function createSkillsDraft({ skillId, baseRevisionId = null }, { idempotencyKey } = {}) { return skillsV2('/drafts', { method: 'POST', body: { skillId, baseRevisionId }, idempotencyKey }); }
+export function fetchSkillsDraft(draftId) { return skillsV2(`/drafts/${enc(draftId)}`); }
+export function fetchSkillsDraftFile(draftId, path) { return skillsV2(`/drafts/${enc(draftId)}?file=${enc(path)}`); }
+export function patchSkillsDraft(draftId, { expectedEtag, ops }) { return skillsV2(`/drafts/${enc(draftId)}`, { method: 'PATCH', body: { expectedEtag, ops } }); }
+export function snapshotSkillsDraft(draftId, { expectedEtag, note = '' }, { idempotencyKey } = {}) { return skillsV2(`/drafts/${enc(draftId)}/snapshot`, { method: 'POST', body: { expectedEtag, note }, idempotencyKey }); }
+export function lintSkillsFolder(body) { return skillsV2('/lint', { method: 'POST', body }); }
+export function uninstallSkillsInstallation(id, body = {}) { return skillsV2(`/installations/${enc(id)}/uninstall`, { method: 'POST', body }); }
+export function commentSkillsReview(reviewId, body) { return skillsV2(`/reviews/${enc(reviewId)}/comment`, { method: 'POST', body: { body } }); }
+export function getSkillsRevisionExportUrl(revisionId, { format = 'bundle', profile = '', acknowledgedDigest = '', excludeEvals = false } = {}) { return `/api/skills-studio/v2/revisions/${enc(revisionId)}/export${query({ format, profile, acknowledgedDigest, excludeEvals })}`; }
+
+// AI drafting (P3, lib/skills/creation-api.js): a creation from the owner's words and sources, one worker drafting it,
+// the result checked and put in the Review queue. Followed by a long poll (`wait`); cancelled and retried from here.
+export function fetchSkillCreationOptions() { return skillsV2('/creations/options'); }
+export function fetchSkillCreationSessions({ provider, project = '', q = '', limit = 40 } = {}) { return skillsV2(`/creations/sessions${query({ provider, project, q, limit })}`); }
+export function fetchSkillCreations({ limit = 20 } = {}) { return skillsV2(`/creations${query({ limit })}`); }
+export function startSkillCreation(body, { idempotencyKey } = {}) { return skillsV2('/creations', { method: 'POST', body, idempotencyKey }); }
+export function fetchSkillCreation(id) { return skillsV2(`/creations/${enc(id)}`); }
+export function waitSkillCreation(id, { since = -1, seconds = 20 } = {}) { return skillsV2(`/creations/${enc(id)}/wait${query({ since, seconds })}`); }
+export function cancelSkillCreation(id) { return skillsV2(`/creations/${enc(id)}/cancel`, { method: 'POST', body: {} }); }
+export function retrySkillCreation(id, { idempotencyKey } = {}) { return skillsV2(`/creations/${enc(id)}/retry`, { method: 'POST', body: {}, idempotencyKey }); }
+
+// Evaluations (P4, lib/skills/evals-api.js): the Test tab's runs of a revision's evals/evals.json, followed by a long poll
+// (`wait`); estimated before they start, cancelled, reviewed trial by trial, compared, exported.
+export function fetchSkillEvalOptions() { return skillsV2('/evals/options'); }
+export function estimateSkillEval(body) { return skillsV2('/evals/estimate', { method: 'POST', body }); }
+export function startSkillEval(body, { idempotencyKey } = {}) { return skillsV2('/evals', { method: 'POST', body, idempotencyKey }); }
+export function fetchSkillEvals({ skillId = '', revisionId = '', limit = 30 } = {}) { return skillsV2(`/evals${query({ skillId, revisionId, limit })}`); }
+export function fetchSkillEvalQueue() { return skillsV2('/evals/queue'); }
+export function fetchSkillEval(id) { return skillsV2(`/evals/${enc(id)}`); }
+export function waitSkillEval(id, { since = -1, seconds = 20, full = false } = {}) { return skillsV2(`/evals/${enc(id)}/wait${query({ since, seconds, full: full ? '1' : '' })}`); }
+export function cancelSkillEval(id) { return skillsV2(`/evals/${enc(id)}/cancel`, { method: 'POST', body: {} }); }
+export function fetchSkillEvalTrial(id, trialId) { return skillsV2(`/evals/${enc(id)}/trials/${enc(trialId)}`); }
+export function fetchSkillEvalTrialFile(id, trialId, path) { return skillsV2(`/evals/${enc(id)}/trials/${enc(trialId)}/file${query({ path })}`); }
+export function saveSkillEvalFeedback(id, { trialId, text, reviewed }) { return skillsV2(`/evals/${enc(id)}/feedback`, { method: 'POST', body: { trialId, text, reviewed } }); }
+export function compareSkillEvals(a, b) { return skillsV2(`/evals/compare${query({ a, b })}`); }
+export function importSkillEvalSuite(body) { return skillsV2('/evals/import', { method: 'POST', body }); }
+export function getSkillEvalExportUrl(id, format = 'native') { return `/api/skills-studio/v2/evals/${enc(id)}/export${query({ format })}`; }
+// Codex is the owner's opt-in per skill version (its shell can read files anywhere on the computer): whether it is
+// confirmed for versions, and the owner's confirmation (or its withdrawal).
+export function fetchSkillEvalCodexTrust(revisionIds) { return skillsV2(`/evals/codex-trust${query({ revisionIds: (revisionIds || []).join(',') })}`); }
+export function setSkillEvalCodexTrust(revisionIds, trusted = true) { return skillsV2('/evals/codex-trust', { method: 'POST', body: { revisionIds, trusted } }); }
+
+// ─── MCP Key ─────────────────────────────
+
+export async function fetchMcpKey() {
+  return jsonFetch('/api/mcp-key');
+}
+
+export async function generateMcpKey() {
+  return jsonFetch('/api/mcp-key', { method: 'POST' });
+}
+
+export async function revokeMcpKey() {
+  return jsonFetch('/api/mcp-key', { method: 'DELETE' });
+}
+
+// ─── Tunnel ──────────────────────────────
+
+export async function fetchTunnelStatus() {
+  return jsonFetch('/api/tunnel/status');
+}
+
+export async function startTunnel() {
+  return jsonFetch('/api/tunnel/start', { method: 'POST' });
+}
+
+export async function stopTunnel() {
+  return jsonFetch('/api/tunnel/stop', { method: 'POST' });
+}
+
+// ─── Last Session (resume after restart) ──
+
+export async function fetchLastSession() {
+  const r = await fetch('/api/last-session');
+  if (!r.ok) return null;
+  return r.json();
+}
+
+export async function dismissLastSession() {
+  return fetch('/api/last-session', { method: 'DELETE' });
+}
+
+// ─── Terminal ────────────────────────────
+
+export async function fetchTerminalSessions() {
+  return jsonFetch('/api/terminal/sessions');
+}
+
+export async function createTerminalSession(profile, cols, rows, cwd, opts = {}) {
+  return jsonFetch('/api/terminal/sessions', {
+    method: 'POST',
+    ...jsonBody({ profile, cols, rows, cwd, ...opts }),
+  });
+}
+
+export async function fetchProjects() {
+  return jsonFetch('/api/projects');
+}
+
+// ─── Style Guide v2 ────────────────────────────
+const sgQuery = values => new URLSearchParams(Object.entries(values).filter(([,v]) => v !== undefined && v !== null)).toString();
+const sgPost = (path, body) => jsonFetch(path, { method: 'POST', ...jsonBody(body) });
+export const fetchStyleGuide = projectPath => jsonFetch(`/api/style-guide?${sgQuery({projectPath})}`);
+export const saveStyleGuide = (projectPath, config, {source = 'ui', label} = {}) => jsonFetch('/api/style-guide', { method: 'PUT', ...jsonBody({projectPath, config, source, label}) });
+export const fetchStyleGuideProjects = () => jsonFetch('/api/style-guide/projects');
+export const fetchStyleGuideDefaults = projectPath => jsonFetch(`/api/style-guide/defaults?${sgQuery({projectPath})}`);
+export const fetchStyleGuideSummary = (projectPath, taskClass) => jsonFetch(`/api/style-guide/summary?${sgQuery({projectPath, taskClass})}`);
+export const fetchStyleGuideFonts = q => jsonFetch(`/api/style-guide/fonts?${sgQuery({q})}`);
+export const fetchStyleGuidePresets = () => jsonFetch('/api/style-guide/presets');
+export const applyStyleGuidePreset = (projectPath, presetId, merge) => sgPost('/api/style-guide/presets/apply', {projectPath, presetId, merge});
+export const importStyleGuide = (projectPath, options) => sgPost('/api/style-guide/import', {projectPath, ...options});
+export const writeStyleGuideExports = (projectPath, formats) => sgPost('/api/style-guide/export', {projectPath, formats});
+export const fetchStyleGuideHistory = projectPath => jsonFetch(`/api/style-guide/history?${sgQuery({projectPath})}`);
+export const restoreStyleGuideRevision = (projectPath, revision) => sgPost('/api/style-guide/history/restore', {projectPath, revision});
+export const fetchStyleGuideProposals = (projectPath, status) => jsonFetch(`/api/style-guide/proposals?${sgQuery({projectPath, status})}`);
+export const proposeStyleGuide = (projectPath, options) => sgPost('/api/style-guide/proposals', {projectPath, ...options});
+export const acceptStyleGuideProposal = (projectPath, id) => sgPost(`/api/style-guide/proposals/${encodeURIComponent(id)}/accept`, {projectPath});
+export const rejectStyleGuideProposal = (projectPath, id) => sgPost(`/api/style-guide/proposals/${encodeURIComponent(id)}/reject`, {projectPath});
+export const styleGuideContrast = options => sgPost('/api/style-guide/contrast', options);
+export const styleGuideScale = (base, options = {}) => sgPost('/api/style-guide/scale', {base, ...options});
+export const styleGuideDarkSemantic = (light, neutral) => sgPost('/api/style-guide/dark-semantic', {light, neutral});
+export const setStyleGuidePointers = (projectPath, enabled) => sgPost('/api/style-guide/pointers', {projectPath, enabled});
+export async function fetchStyleGuidePreviewMd(projectPath) {
+  const res = await fetch(`/api/style-guide/preview-md?${sgQuery({projectPath})}`);
+  if (!res.ok) throw new Error(`HTTP ${res.status}`);
+  return res.text();
+}
+export async function fetchStyleGuideExport(projectPath, format, theme) {
+  const data = await jsonFetch(`/api/style-guide/export?${sgQuery({projectPath, format, theme, as:'json'})}`);
+  return data.text;
+}
+export async function uploadStyleGuideLogo(projectPath, file, {variantId, name, bg, kind} = {}) {
+  const res = await fetch(`/api/style-guide/logo?${sgQuery({projectPath, variantId, name, bg, kind})}`, {method:'POST', headers:{'Content-Type':file.type || 'image/png'}, body:file});
+  if (!res.ok) { const data = await res.json().catch(() => ({})); throw new Error(data.error || `HTTP ${res.status}`); }
+  return res.json();
+}
+export const deleteStyleGuideLogo = (projectPath, variantId) => jsonFetch(`/api/style-guide/logo/${encodeURIComponent(variantId)}?${sgQuery({projectPath})}`, {method:'DELETE'});
+export function styleGuideAssetUrl(assetsHash, file) {
+  return assetsHash && file ? `/api/style-guide/assets/${encodeURIComponent(assetsHash)}/${encodeURIComponent(file)}` : '';
+}
+
+// ─── Claude Code Sessions (Resume) ─────
+
+export async function fetchClaudeSessions({ project, limit, offset, search, refresh, account } = {}) {
+  const params = new URLSearchParams();
+  if (project) params.set('project', project);
+  if (limit) params.set('limit', String(limit));
+  if (offset) params.set('offset', String(offset));
+  if (search) params.set('search', search);
+  if (refresh) params.set('refresh', 'true');
+  // A named Claude account: the session is looked up (by its id, in `search`) in that account's catalogue.
+  if (account && account !== 'default') params.set('account', account);
+  return jsonFetch(`/api/claude-code/sessions?${params}`);
+}
+
+// ─── Codex CLI Sessions (Resume) ─────
+
+export async function fetchCodexSessions({ project, limit, offset, search, refresh } = {}) {
+  const params = new URLSearchParams();
+  if (project) params.set('project', project);
+  if (limit) params.set('limit', String(limit));
+  if (offset) params.set('offset', String(offset));
+  if (search) params.set('search', search);
+  if (refresh) params.set('refresh', 'true');
+  return jsonFetch(`/api/codex/sessions?${params}`);
+}
+
+// ─── OpenCode Sessions (Resume) ─────
+
+export async function fetchOpencodeSessions({ project, limit, offset, search } = {}) {
+  const params = new URLSearchParams();
+  if (project) params.set('project', project);
+  if (limit) params.set('limit', String(limit));
+  if (offset) params.set('offset', String(offset));
+  if (search) params.set('search', search);
+  return jsonFetch(`/api/opencode/sessions?${params}`);
+}
+
+// ─── Gemini CLI Sessions (Resume) ─────
+
+export async function fetchGeminiSessions({ project, limit, offset, search } = {}) {
+  const params = new URLSearchParams();
+  if (project) params.set('project', project);
+  if (limit) params.set('limit', String(limit));
+  if (offset) params.set('offset', String(offset));
+  if (search) params.set('search', search);
+  return jsonFetch(`/api/gemini/sessions?${params}`);
+}
+
+// ─── Hybrid session content search (FTS5 + semantic for Claude) ─────
+
+export async function searchSessions({ q, provider, project, limit } = {}) {
+  const params = new URLSearchParams();
+  if (q) params.set('q', q);
+  if (provider) params.set('provider', provider);
+  if (project) params.set('project', project);
+  if (limit) params.set('limit', String(limit));
+  return jsonFetch(`/api/session-search?${params}`);
+}
+
+// ─── Session Indexing ─────
+
+export async function startSessionIndexing({ project, reindex, sessionIds } = {}) {
+  return jsonFetch('/api/session-indexing/start', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ project, reindex, sessionIds }),
+  });
+}
+
+export async function cancelSessionIndexing() {
+  return jsonFetch('/api/session-indexing/cancel', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({}),
+  });
+}
+
+export async function fetchIndexingStatus() {
+  return jsonFetch('/api/session-indexing/status');
+}
+
+export async function deleteTerminalSession(sessionId) {
+  return jsonFetch(`/api/terminal/sessions/${encodeURIComponent(sessionId)}`, {
+    method: 'DELETE',
+  });
+}
+
+export async function fetchTerminalFiles(dirPath, search) {
+  let url = `/api/terminal/files?path=${encodeURIComponent(dirPath)}`;
+  if (search) url += `&search=${encodeURIComponent(search)}`;
+  return jsonFetch(url);
+}
+
+export async function fetchTerminalBranches(dirPath) {
+  return jsonFetch(`/api/terminal/branches?path=${encodeURIComponent(dirPath)}`);
+}
+
+export async function checkoutTerminalBranch(dirPath, branch) {
+  return jsonFetch('/api/terminal/checkout', {
+    method: 'POST',
+    ...jsonBody({ path: dirPath, branch }),
+  });
+}
+
+// ─── Terminal Links ──────────────────────
+
+export async function fetchTerminalLinks() {
+  return jsonFetch('/api/terminal/links');
+}
+
+export async function fetchTerminalLink(linkId) {
+  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}`);
+}
+
+export async function createTerminalLink(sessions, config = {}) {
+  return jsonFetch('/api/terminal/links', {
+    method: 'POST',
+    ...jsonBody({ sessions, ...config }),
+  });
+}
+
+export async function deleteTerminalLink(linkId) {
+  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}`, {
+    method: 'DELETE',
+  });
+}
+
+export async function detectClaudeSession(terminalSessionId) {
+  return jsonFetch(`/api/terminal/sessions/${encodeURIComponent(terminalSessionId)}/claude-session`);
+}
+
+export async function updateTerminalLink(linkId, config) {
+  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}`, {
+    method: 'PATCH',
+    ...jsonBody(config),
+  });
+}
+
+export async function sendLinkMessage(linkId, message, targetIdx) {
+  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}/send`, {
+    method: 'POST',
+    ...jsonBody({ message, targetIdx }),
+  });
+}
+
+export async function pauseLink(linkId) {
+  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}/pause`, {
+    method: 'POST',
+  });
+}
+
+export async function resumeLink(linkId) {
+  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}/resume`, {
+    method: 'POST',
+  });
+}
+
+export async function nudgeLink(linkId) {
+  return jsonFetch(`/api/terminal/links/${encodeURIComponent(linkId)}/nudge`, {
+    method: 'POST',
+  });
+}
+
+// ─── Browser Sessions ────────────────────
+
+export async function fetchBrowserSessions() {
+  return jsonFetch('/api/browser/sessions');
+}
+
+export async function createBrowserSession(url, width, height, fingerprint, opts = {}) {
+  return jsonFetch('/api/browser/sessions', {
+    method: 'POST',
+    ...jsonBody({ url, width, height, ...fingerprint, ...opts }),
+  });
+}
+
+export async function deleteBrowserSession(sessionId) {
+  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}`, {
+    method: 'DELETE',
+  });
+}
+
+export async function navigateBrowser(sessionId, url) {
+  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}/navigate`, {
+    method: 'POST',
+    ...jsonBody({ url }),
+  });
+}
+
+export async function browserBack(sessionId) {
+  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}/back`, {
+    method: 'POST',
+    ...jsonBody({}),
+  });
+}
+
+export async function browserForward(sessionId) {
+  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}/forward`, {
+    method: 'POST',
+    ...jsonBody({}),
+  });
+}
+
+export async function browserReload(sessionId) {
+  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}/reload`, {
+    method: 'POST',
+    ...jsonBody({}),
+  });
+}
+
+export async function fetchBrowserCdp(sessionId) {
+  return jsonFetch(`/api/browser/sessions/${encodeURIComponent(sessionId)}/cdp`);
+}
+
+// ─── Setup (Onboarding) ─────────────────
+
+export async function checkSetupDeps() {
+  return jsonFetch('/api/setup/check-deps');
+}
+
+export async function fetchSetupStatus() {
+  return jsonFetch('/api/setup/onboarding');
+}
+
+export async function saveSetupConfig(payload) {
+  return jsonFetch('/api/setup/save-config', {
+    method: 'POST',
+    ...jsonBody(payload),
+  });
+}
+
+export async function setupCreateCollection(payload) {
+  return jsonFetch('/api/setup/create-collection', {
+    method: 'POST',
+    ...jsonBody(payload),
+  });
+}
+
+export async function setupBuild() {
+  return jsonFetch('/api/setup/build', { method: 'POST' });
+}
+
+export async function testDatabase() {
+  return jsonFetch('/api/setup/test-qdrant');
+}
+
+export async function testDatabaseRemote(payload) {
+  return jsonFetch('/api/setup/test-qdrant-cloud', {
+    method: 'POST',
+    ...jsonBody(payload),
+  });
+}
+
+export async function writeMcpJson(payload) {
+  return jsonFetch('/api/setup/write-mcp-json', {
+    method: 'POST',
+    ...jsonBody(payload),
+  });
+}
+
+export async function completeSetup() {
+  return jsonFetch('/api/setup/complete', { method: 'POST' });
+}
+
+// ─── SynaBun rules (lib/rulesets/api.js) ──
+// A server that has not been restarted since the update answers 404 here.
+// The status read returns null for that; the actions throw, and callers show
+// the copy-only fallback or a "Restart SynaBun to finish this update" hint.
+// An action the files said no to is a 409 and throws too, with the server's
+// own sentence as the message: an edited copy on install, damaged markers, a
+// symlink, a file that changed while it was being written (code
+// CHANGED_UNDERNEATH) or another SynaBun process on the same data home that
+// was still at work when the wait ran out (code BUSY, `retryable: true`).
+// The last two mean "try again": nothing was changed. A 500 with code
+// LOCK_UNAVAILABLE means the server could not use its own lock file.
+
+/**
+ * {ok, version, autoUpdate, hosts:{<host>:{carrier, path, state, installedVersion, managed, error, …}}, legacy, notice},
+ * or null when the route is missing, refuses or fails. A host may also carry
+ * `replaceable: false` (state `modified`, but the file has no SynaBun markers:
+ * Replace and a forced Remove are refused), `partialRemoval: {at, error, paths}`
+ * (the last removal could not take these files out) and, for OpenCode,
+ * `entry: 'user'` (a line in config.json that SynaBun did not add lists the
+ * file: Remove keeps both unless it is sent with force). State `newer` is an
+ * untouched copy a newer SynaBun wrote: it is never updated from here. Unlike the calls below
+ * it never throws and never raises the guest "forbidden" toast: badges and
+ * reminders read it in the background on every page load.
+ */
+export async function fetchRulesStatus() {
+  try {
+    const res = await fetch('/api/setup/rules');
+    if (!res.ok) return null;
+    const data = await res.json();
+    return data?.ok ? data : null;
+  } catch {
+    return null;
+  }
+}
+
+/** The rendered text for a host (claude, codex, opencode, gemini, cursor) or the copy-only `coexistence` snippet. */
+export async function fetchRulesText(host) {
+  return jsonFetch(`/api/setup/rules/${encodeURIComponent(host)}/text`);
+}
+
+/**
+ * Install or update a host's rules. `force` replaces one well-formed copy the
+ * user edited (it is backed up first); damaged or duplicate markers are
+ * refused either way.
+ */
+export async function installRules(host, { force = false } = {}) {
+  return jsonFetch(`/api/setup/rules/${encodeURIComponent(host)}`, {
+    method: 'POST',
+    ...jsonBody({ force }),
+  });
+}
+
+/**
+ * Remove a host's rules. A copy the user edited stays in place and is listed
+ * in the result's `kept` (`ok` is still true); `force` removes it after a
+ * backup. Throws (409) for what is refused either way: damaged markers, a
+ * symlink, a config that cannot be rewritten.
+ */
+export async function removeRules(host, { force = false } = {}) {
+  return jsonFetch(`/api/setup/rules/${encodeURIComponent(host)}`, { method: 'DELETE', ...jsonBody({ force }) });
+}
+
+/** Install for every connected tool, or only for `hosts` when given. */
+export async function installAllRules(hosts = null) {
+  return jsonFetch('/api/setup/rules/install-all', {
+    method: 'POST',
+    ...jsonBody(Array.isArray(hosts) && hosts.length ? { hosts } : {}),
+  });
+}
+
+export async function setRulesAutoUpdate(autoUpdate) {
+  return jsonFetch('/api/setup/rules/settings', {
+    method: 'PUT',
+    ...jsonBody({ autoUpdate: !!autoUpdate }),
+  });
+}
+
+/** Take a hash-exact pasted copy out of one of the files the status lists under `legacy`. */
+export async function removeLegacyRules(path) {
+  return jsonFetch('/api/setup/rules/legacy/remove', {
+    method: 'POST',
+    ...jsonBody({ path }),
+  });
+}
+
+export async function ackRulesNotice() {
+  return jsonFetch('/api/setup/rules/notice/ack', { method: 'POST' });
+}
+
+/**
+ * The text to show or copy for a host, from the rules route and, when that is
+ * not there, from the older read-only endpoint. Throws when neither answers.
+ */
+export async function fetchRulesTextWithFallback(host) {
+  try {
+    const data = await fetchRulesText(host);
+    if (data?.text) return data.text;
+  } catch { /* older server: try the endpoint it does have */ }
+  const format = host === 'opencode' ? 'generic' : host;
+  const data = await jsonFetch(`/api/claude-code/ruleset?format=${encodeURIComponent(format)}`);
+  if (!data?.ruleset) throw new Error('Rules text not available');
+  return data.ruleset;
+}
+
+// ─── Invite / Session Sharing ─────────────
+
+export async function fetchInviteStatus() {
+  return jsonFetch('/api/invite/status');
+}
+
+export async function generateInviteKey(custom) {
+  const body = custom ? { custom } : {};
+  return jsonFetch('/api/invite/key', {
+    method: 'POST',
+    ...jsonBody(body),
+  });
+}
+
+export async function revokeInviteKey() {
+  return jsonFetch('/api/invite/key', { method: 'DELETE' });
+}
+
+export async function revokeAllInviteSessions() {
+  return jsonFetch('/api/invite/sessions', { method: 'DELETE' });
+}
+
+export async function saveInviteProxy(config) {
+  return jsonFetch('/api/invite/proxy', {
+    method: 'PUT',
+    ...jsonBody(config),
+  });
+}
+
+export async function fetchInvitePermissions() {
+  return jsonFetch('/api/invite/permissions');
+}
+
+export async function saveInvitePermissions(perms) {
+  return jsonFetch('/api/invite/permissions', {
+    method: 'PUT',
+    ...jsonBody(perms),
+  });
+}
+
+// ── Loop Templates ──
+
+export async function fetchLoopTemplates() {
+  return jsonFetch('/api/loop/templates');
+}
+
+export async function createLoopTemplate(payload) {
+  return jsonFetch('/api/loop/templates', {
+    method: 'POST',
+    ...jsonBody(payload),
+  });
+}
+
+export async function updateLoopTemplate(id, payload) {
+  return jsonFetch(`/api/loop/templates/${id}`, {
+    method: 'PUT',
+    ...jsonBody(payload),
+  });
+}
+
+export async function deleteLoopTemplate(id) {
+  return jsonFetch(`/api/loop/templates/${id}`, { method: 'DELETE' });
+}
+
+export async function importLoopTemplates(data) {
+  return jsonFetch('/api/loop/templates/import', {
+    method: 'POST',
+    ...jsonBody(data),
+  });
+}
+
+// ── Loop Folders ──
+
+export async function fetchLoopFolders() {
+  return jsonFetch('/api/loop/folders');
+}
+
+export async function createLoopFolder(payload) {
+  return jsonFetch('/api/loop/folders', {
+    method: 'POST',
+    ...jsonBody(payload),
+  });
+}
+
+export async function updateLoopFolder(id, payload) {
+  return jsonFetch(`/api/loop/folders/${id}`, {
+    method: 'PUT',
+    ...jsonBody(payload),
+  });
+}
+
+export async function deleteLoopFolder(id) {
+  return jsonFetch(`/api/loop/folders/${id}`, { method: 'DELETE' });
+}
+
+export async function reorderLoopFolders(orderedIds) {
+  return jsonFetch('/api/loop/folders/reorder', {
+    method: 'POST',
+    ...jsonBody({ orderedIds }),
+  });
+}
+
+export async function fetchActiveLoop() {
+  return jsonFetch('/api/loop/active');
+}
+
+export async function launchLoop(params) {
+  return jsonFetch('/api/loop/launch', {
+    method: 'POST',
+    ...jsonBody(params),
+  });
+}
+
+export async function fetchLoopLog(terminalSessionId) {
+  const res = await fetch(`/api/loop/log/${encodeURIComponent(terminalSessionId)}`);
+  if (!res.ok) {
+    const text = await res.text().catch(() => '');
+    throw new Error(text || `HTTP ${res.status}`);
+  }
+  return res.text();
+}
+
+export async function sendClientLoopLog(terminalSessionId, tag, msg, meta) {
+  try {
+    return await jsonFetch('/api/loop/client-log', {
+      method: 'POST',
+      ...jsonBody({ terminalSessionId: terminalSessionId || null, tag, msg, meta }),
+    });
+  } catch { /* logging best-effort */ }
+}
+
+export async function stopLoop(terminalSessionId) {
+  return jsonFetch('/api/loop/stop', {
+    method: 'POST',
+    ...jsonBody(terminalSessionId ? { terminalSessionId } : {}),
+  });
+}
+
+export async function fetchLoopHistory(limit = 50) {
+  return jsonFetch(`/api/loop/history?limit=${limit}`);
+}
+
+export async function deleteLoopHistory(id) {
+  return jsonFetch(`/api/loop/history/${id}`, { method: 'DELETE' });
+}
+
+export async function storeLoopCompletion(data) {
+  return jsonFetch('/api/loop/complete', {
+    method: 'POST',
+    ...jsonBody(data),
+  });
+}
+
+export async function searchMemoriesByCategory(query, category, limit = 15) {
+  return jsonFetch('/api/search/memories', {
+    method: 'POST',
+    ...jsonBody({ query, category, limit }),
+  });
+}
+
+// ── Loop Schedules ──
+
+export async function fetchScheduleGroups() {
+  return jsonFetch('/api/schedule-groups');
+}
+
+export async function createScheduleGroup(payload) {
+  return jsonFetch('/api/schedule-groups', {
+    method: 'POST',
+    ...jsonBody(payload),
+  });
+}
+
+export async function updateScheduleGroup(id, payload) {
+  return jsonFetch(`/api/schedule-groups/${encodeURIComponent(id)}`, {
+    method: 'PUT',
+    ...jsonBody(payload),
+  });
+}
+
+export async function deleteScheduleGroup(id) {
+  return jsonFetch(`/api/schedule-groups/${encodeURIComponent(id)}`, {
+    method: 'DELETE',
+  });
+}
+
+export async function reorderScheduleGroups(orderedIds) {
+  return jsonFetch('/api/schedule-groups/reorder', {
+    method: 'POST',
+    ...jsonBody({ orderedIds }),
+  });
+}
+
+export async function fetchSchedules() {
+  return jsonFetch('/api/schedules');
+}
+
+export async function createSchedule(params) {
+  return jsonFetch('/api/schedules', {
+    method: 'POST',
+    ...jsonBody(params),
+  });
+}
+
+export async function fetchSchedule(id) {
+  return jsonFetch(`/api/schedules/${encodeURIComponent(id)}`);
+}
+
+export async function updateSchedule(id, params) {
+  return jsonFetch(`/api/schedules/${encodeURIComponent(id)}`, {
+    method: 'PUT',
+    ...jsonBody(params),
+  });
+}
+
+export async function deleteSchedule(id) {
+  return jsonFetch(`/api/schedules/${encodeURIComponent(id)}`, {
+    method: 'DELETE',
+  });
+}
+
 export async function testSchedule(id, { sidepanelWindowId, sidepanelClaimToken } = {}) {
   return jsonFetch(`/api/schedules/${encodeURIComponent(id)}/test`, {
     method: 'POST',
     ...jsonBody({ sidepanelWindowId, sidepanelClaimToken }),
   });
 }
-
-export async function startScheduleTimer(id, minutes) {
-  return jsonFetch(`/api/schedules/${encodeURIComponent(id)}/timer`, {
-    method: 'POST',
-    ...jsonBody({ minutes }),
-  });
-}
-
-export async function cancelScheduleTimer(id) {
-  return jsonFetch(`/api/schedules/${encodeURIComponent(id)}/timer`, {
-    method: 'DELETE',
-  });
-}
-
-export async function fetchScheduleTimers() {
-  return jsonFetch('/api/schedules/timers');
-}
-
-// ── Quick Timers ──
-
-export async function createQuickTimer(templateId, minutes, { profile, model, contextMode, effort, mcpProfile, usesBrowser, codexAccountId } = {}) {
+
+export async function startScheduleTimer(id, minutes) {
+  return jsonFetch(`/api/schedules/${encodeURIComponent(id)}/timer`, {
+    method: 'POST',
+    ...jsonBody({ minutes }),
+  });
+}
+
+export async function cancelScheduleTimer(id) {
+  return jsonFetch(`/api/schedules/${encodeURIComponent(id)}/timer`, {
+    method: 'DELETE',
+  });
+}
+
+export async function fetchScheduleTimers() {
+  return jsonFetch('/api/schedules/timers');
+}
+
+// ── Quick Timers ──
+
+export async function createQuickTimer(templateId, minutes, { profile, model, contextMode, effort, tools, usesBrowser, codexAccountId } = {}) {
   return jsonFetch('/api/quick-timer', {
     method: 'POST',
-    ...jsonBody({ templateId, minutes, profile, model, contextMode, effort, mcpProfile, usesBrowser, codexAccountId }),
-  });
-}
-
-export async function fetchQuickTimers() {
-  return jsonFetch('/api/quick-timers');
-}
-
-export async function cancelQuickTimer(id) {
-  return jsonFetch(`/api/quick-timers/${encodeURIComponent(id)}`, {
-    method: 'DELETE',
-  });
-}
-
+    ...jsonBody({ templateId, minutes, profile, model, contextMode, effort, tools, usesBrowser, codexAccountId }),
+  });
+}
+
+export async function fetchQuickTimers() {
+  return jsonFetch('/api/quick-timers');
+}
+
+export async function cancelQuickTimer(id) {
+  return jsonFetch(`/api/quick-timers/${encodeURIComponent(id)}`, {
+    method: 'DELETE',
+  });
+}
+
 export async function triggerQuickTimerNow(templateId, {
-  profile, model, contextMode, effort, mcpProfile, usesBrowser, codexAccountId,
+  profile, model, contextMode, effort, tools, usesBrowser, codexAccountId,
   sidepanelWindowId, sidepanelClaimToken,
 } = {}) {
   return jsonFetch('/api/quick-timer/now', {
     method: 'POST',
     ...jsonBody({
-      templateId, profile, model, contextMode, effort, mcpProfile, usesBrowser, codexAccountId,
+      templateId, profile, model, contextMode, effort, tools, usesBrowser, codexAccountId,
       sidepanelWindowId, sidepanelClaimToken,
     }),
   });
 }
-
-// ── Isolated Agents ──
-
-export async function launchAgent(params) {
-  return jsonFetch('/api/agents/launch', {
-    method: 'POST',
-    ...jsonBody(params),
-  });
-}
-
-export async function fetchAgents() {
-  return jsonFetch('/api/agents');
-}
-
-export async function fetchAgent(id) {
-  return jsonFetch(`/api/agents/${id}`);
-}
-
-export async function stopAgent(id) {
-  return jsonFetch(`/api/agents/${id}/stop`, { method: 'POST' });
-}
-
-export async function removeAgent(id) {
-  return jsonFetch(`/api/agents/${id}`, { method: 'DELETE' });
-}
-
-// ─── Image Gallery ──────────────────────
-
-export async function fetchImages() {
-  return jsonFetch('/api/images');
-}
-
-export async function toggleImageFavorite(filename, favorite) {
-  return jsonFetch('/api/images/favorite', {
-    method: 'POST',
-    ...jsonBody({ filename, favorite }),
-  });
-}
-
-export async function deleteImage(filename) {
-  return jsonFetch(`/api/images/${encodeURIComponent(filename)}`, { method: 'DELETE' });
-}
+
+// ── Isolated Agents ──
+
+export async function launchAgent(params) {
+  return jsonFetch('/api/agents/launch', {
+    method: 'POST',
+    ...jsonBody(params),
+  });
+}
+
+export async function fetchAgents() {
+  return jsonFetch('/api/agents');
+}
+
+export async function fetchAgent(id) {
+  return jsonFetch(`/api/agents/${id}`);
+}
+
+export async function stopAgent(id) {
+  return jsonFetch(`/api/agents/${id}/stop`, { method: 'POST' });
+}
+
+export async function removeAgent(id) {
+  return jsonFetch(`/api/agents/${id}`, { method: 'DELETE' });
+}
+
+// ─── Image Gallery ──────────────────────
+
+export async function fetchImages() {
+  return jsonFetch('/api/images');
+}
+
+export async function toggleImageFavorite(filename, favorite) {
+  return jsonFetch('/api/images/favorite', {
+    method: 'POST',
+    ...jsonBody({ filename, favorite }),
+  });
+}
+
+export async function deleteImage(filename) {
+  return jsonFetch(`/api/images/${encodeURIComponent(filename)}`, { method: 'DELETE' });
+}
+
+// Skills Studio P5: local operations and explicit Discover requests.
+export function fetchSkillOperations() { return skillsV2('/operations'); }
+export function configureSkillOperations(body) { return skillsV2('/operations', { method: 'PUT', body }); }
+export function fetchSkillUsage() { return skillsV2('/usage'); }
+export function clearSkillUsage() { return skillsV2('/usage', { method: 'DELETE', body: {} }); }
+export function fetchSkillHealth() { return skillsV2('/health'); }
+export function checkSkillHealth() { return skillsV2('/health/check', { method: 'POST', body: {} }); }
+export function fetchSkillDiscover() { return skillsV2('/discover'); }
+export function refreshSkillDiscover(sourceId) { return skillsV2('/discover/refresh', { method: 'POST', body: { sourceId } }); }
+export function importSkillDiscoverCatalog(sourceId, entries) { return skillsV2('/discover/catalog', { method: 'POST', body: { sourceId, entries } }); }
+export function stageSkillDiscover(itemId) { return skillsV2('/discover/stage', { method: 'POST', body: { itemId } }); }
+export function previewSkillPackage(revisionId, { format = 'bundle', excludeEvals = false } = {}) { return skillsV2(`/revisions/${encodeURIComponent(revisionId)}/package${query({ format, excludeEvals })}`); }