+ + + ); +} diff --git a/platform_web/components/OperationControls.tsx b/platform_web/components/OperationControls.tsx new file mode 100644 index 0000000..89d9dd7 --- /dev/null +++ b/platform_web/components/OperationControls.tsx @@ -0,0 +1,72 @@ +import type { ReactNode } from "react"; + +interface ConfirmDialogProps { + open: boolean; + title: string; + description: ReactNode; + confirmLabel: string; + danger?: boolean; + busy?: boolean; + onConfirm: () => void; + onCancel: () => void; + children?: ReactNode; +} + +export function ConfirmDialog({ open, title, description, confirmLabel, danger, busy, onConfirm, onCancel, children }: ConfirmDialogProps) { + if (!open) { + return null; + } + return ( +

+ +

+ ); +} + +interface UsageMeterProps { + label: string; + percent?: number; +} + +export function UsageMeter({ label, percent }: UsageMeterProps) { + const known = typeof percent === "number" && Number.isFinite(percent); + const clamped = known ? Math.max(0, Math.min(100, percent)) : 0; + return ( +

+ {label} + + {known && = 85 ? " usage-high" : ""}`} style={{ width: `${clamped}%` }} />} + + {known ? `${Math.round(clamped)}%` : "--"} +

+ ); +} + +interface DiffViewProps { + lines: Array<{ kind: "same" | "added" | "removed"; text: string }>; +} + +export function DiffView({ lines }: DiffViewProps) { + return ( +

+ {lines.map((line, index) => ( + + + {line.text || " "} + + ))} +

+ ); +} diff --git a/platform_web/components/PageFrame.tsx b/platform_web/components/PageFrame.tsx new file mode 100644 index 0000000..38f2508 --- /dev/null +++ b/platform_web/components/PageFrame.tsx @@ -0,0 +1,36 @@ +import { MoonStar } from "lucide-react"; + +import type { PageMetric } from "../contracts/page"; +import { cx } from "../utils/classes"; + +interface PageFrameProps { + kicker: string; + title: string; + status: string; + metrics: PageMetric[]; +} + +export function PageFrame({ kicker, title, status, metrics }: PageFrameProps) { + return ( +

{kicker}

+

+ {status} +

+ {metrics.map((metric) => ( +

+ {metric.label} + {metric.value} +

+ ))} +

+ ); +} diff --git a/platform_web/components/StateViews.tsx b/platform_web/components/StateViews.tsx new file mode 100644 index 0000000..7093c67 --- /dev/null +++ b/platform_web/components/StateViews.tsx @@ -0,0 +1,112 @@ +import { AlertTriangle, CheckCircle2, Copy, Loader2, MoonStar, Sparkles, XCircle } from "lucide-react"; +import type { ReactNode } from "react"; + +import { cx } from "../utils/classes"; + +interface EmptyStateProps { + title: string; + description: string; + actionLabel?: string; + onAction?: () => void; + icon?: ReactNode; +} + +export function EmptyState({ title, description, actionLabel, onAction, icon }: EmptyStateProps) { + return ( +

+ + {title} +

{description}

+ {actionLabel && onAction && ( + + )} +

+ ); +} + +interface LoadingStateProps { + label: string; + compact?: boolean; +} + +export function LoadingState({ label, compact }: LoadingStateProps) { + return ( +

+ ); +} + +interface ErrorStateProps { + title: string; + reason?: string; + diagnosticId?: string; + onRetry?: () => void; + compact?: boolean; +} + +export function ErrorState({ title, reason, diagnosticId, onRetry, compact }: ErrorStateProps) { + return ( +

+ + {title} + {reason &&

{reason}

} + {diagnosticId && } + {onRetry && ( + + )} +

+ ); +} + +interface ResultBadgeProps { + status: "pending" | "succeeded" | "failed"; + label: string; +} + +export function ResultBadge({ status, label }: ResultBadgeProps) { + const icon = + status === "pending" ? : status === "succeeded" ? : ; + return ( + + {icon} + {label} + + ); +} + +interface DiagnosticSummaryProps { + diagnosticId: string; + detail?: string; +} + +export function DiagnosticSummary({ diagnosticId, detail }: DiagnosticSummaryProps) { + const summary = detail ? `${diagnosticId} ${detail}` : diagnosticId; + return ( + + {diagnosticId} + + + ); +} diff --git a/platform_web/contracts/aiProviders.ts b/platform_web/contracts/aiProviders.ts new file mode 100644 index 0000000..60d0d72 --- /dev/null +++ b/platform_web/contracts/aiProviders.ts @@ -0,0 +1,73 @@ +import type { AiProviderKind, AiProviderResponse, AiProviderStatus, AiRelayMode } from "../api/types"; + +export type AiProviderFilter = AiProviderStatus | "all"; +export type AiProviderViewState = "api" | "local" | "saving" | "error"; + +export interface AiProviderFormState { + id: string; + name: string; + kind: AiProviderKind; + baseUrl: string; + apiKeyRef: string; + modelsText: string; + defaultModel: string; + relayMode: AiRelayMode; + timeoutMs: string; + redactionPolicy: string; +} + +export interface AiProviderMetrics { + total: number; + active: number; + disabled: number; + models: number; +} + +export interface AiProviderActionState { + providerId: string; + label: string; + success: boolean; + message: string; +} + +export function emptyAiProviderForm(): AiProviderFormState { + return { + id: "", + name: "", + kind: "openai-compatible", + baseUrl: "https://api.example.test/v1", + apiKeyRef: "secret://providers/", + modelsText: "gpt-4.1-mini", + defaultModel: "gpt-4.1-mini", + relayMode: "direct", + timeoutMs: "30000", + redactionPolicy: "default" + }; +} + +export function aiProviderToForm(provider: AiProviderResponse): AiProviderFormState { + return { + id: provider.id, + name: provider.name, + kind: provider.kind, + baseUrl: provider.baseUrl, + apiKeyRef: provider.apiKeyRef, + modelsText: provider.models.join(", "), + defaultModel: provider.defaultModel ?? "", + relayMode: provider.relayMode, + timeoutMs: String(provider.timeoutMs), + redactionPolicy: provider.redactionPolicy + }; +} + +export function summarizeAiProviders(providers: AiProviderResponse[]): AiProviderMetrics { + return providers.reduce( + (metrics, provider) => ({ + total: metrics.total + 1, + active: metrics.active + (provider.status === "active" ? 1 : 0), + disabled: metrics.disabled + (provider.status === "disabled" ? 1 : 0), + models: metrics.models + provider.models.length + }), + { total: 0, active: 0, disabled: 0, models: 0 } + ); +} diff --git a/platform_web/contracts/page.ts b/platform_web/contracts/page.ts new file mode 100644 index 0000000..f44ece2 --- /dev/null +++ b/platform_web/contracts/page.ts @@ -0,0 +1,75 @@ +import type { ComponentType } from "react"; + +import type { UserProfileUpdateRequest, UserThemePreferenceRequest, UserThemePreferenceResponse } from "../api/types"; +import type { CurrentUserView, WorkspaceCapability } from "./workspace"; +import type { OperationTracker } from "../stores/operations"; + +export type PageId = "home" | "servers" | "serverDetail" | "plugins" | "users" | "aiProviders" | "maintenance" | "profileSettings"; + +export interface PageParams { + serverId?: string; +} + +export interface PageRoute { + id: PageId; + label: string; + path: string; + hash: string; + description: string; + requiredCapability: WorkspaceCapability; + showInNav: boolean; +} + +export interface PageComponentProps { + session: CurrentUserView; + params: PageParams; + operations: OperationTracker; + onNavigate: (pageId: PageId, params?: PageParams) => void; + onLogout: () => Promise; + onProfileSave: (request: UserProfileUpdateRequest) => Promise; + onThemePreferenceSave: (request: UserThemePreferenceRequest) => Promise; +} + +export type PageComponent = ComponentType; + +export interface PageMetric { + label: string; + value: string; + tone: "neutral" | "success" | "warning"; +} + +export interface ShellSummaryItem { + label: string; + value: string; + detail: string; + tone: PageMetric["tone"]; +} + +export interface ServerInstanceView { + id: string; + name: string; + plugin: string; + runEndpoint: string; + state: "draft" | "installing" | "ready" | "running" | "stopped" | "failed" | "deleted"; + pendingJobs: number; + latestLog: string; +} + +export interface PluginCatalogItem { + id: string; + name: string; + version: string; + serverType: string; + status: "installed" | "disabled" | "invalid" | "updating"; + permissions: string[]; + bridgeActions: string[]; + validation: string; +} + +export interface UserAccessView { + id: string; + displayName: string; + status: "active" | "disabled" | "pending"; + roles: string[]; + review: string; +} diff --git a/platform_web/contracts/pages.md b/platform_web/contracts/pages.md new file mode 100644 index 0000000..c361f78 --- /dev/null +++ b/platform_web/contracts/pages.md @@ -0,0 +1,42 @@ +# Page Contracts + +## Shared Visual Contract + +All first-party pages inherit the platform_web game-operations style with black-mecha default materials and a selectable magical-girl theme. Page implementations must use shared theme tokens and surface classes so 首页、服务器管理、插件市场、用户管理、AI 提供商管理、系统维护, server details, drawers, dialogs, logs, diffs, plugin controls, and operation history all feel like one console. + +- Major surfaces remain transparent jelly/glass panels with visible background desktop, icy rim light, diamond borders, shine sweeps, and candy-color accents. +- Built-in magical desktops and user-uploaded backgrounds render behind readable contrast surfaces. +- Global theme ultimate motion is supplied by the shell-level background layer and lightweight global particle DOM layer, not by page-local fixed decoration elements. It must remain theme-specific and low-cost rather than a dense field of tiny rotating particles. +- Page-specific work must not introduce opaque card islands, unrelated dark/light themes, marketing-style hero layouts, or one-off decorative systems. +- Status, errors, warnings, destructive operations, LLM diff review, and operation/job feedback remain text/icon-visible and traceable. + +## 平台概览（原首页） + +Platform-administrator-only first screen. Shows online/offline server counts, abnormal instance count, run endpoint health, game type distribution, CPU/memory/disk load, LLM provider connectivity, and recent operational signals (faults, failed jobs, provider errors, audit events) that link to the relevant server, plugin, or AI provider context. Each module loads independently with scoped loading/empty/error states. + +## 服务器管理 + +Default landing page for server owners and server administrators. Shows searchable/status-filterable server cards with online/offline state, player count, TPS, latency, CPU, memory, and disk usage; pending metric values render as stable placeholders. Provides create server workflow, refresh, and routed server detail pages. Empty states cover no servers, no matching filters, and role-scoped no-access. + +- Create uses installed plugin and run endpoint selections, then renders the returned instance and install job through one visible operation lifecycle. +- The page must not display raw run credentials, host paths, direct socket details, or AI provider keys. + +## 服务器详情 + +Daily operations hub for one server. Status header shows online state, player count, TPS, latency, CPU/memory/disk, plus confirmed start/stop lifecycle actions. Sections: 概览 (live status cards, warnings), 日志 (level/keyword/time/source filters + log detail drawer with diagnostics), 配置 (edit with reviewable diff before any write job), 插件控制 (controls grouped by plugin, scoped to this server instance, confirmation + lifecycle feedback per action), AI 助手 (LLM suggestions produce recommendation/diff; write jobs require explicit diff confirmation; no raw AI keys reach the frontend), 操作历史 (operation/job IDs, status, timestamps, target, requester, error reasons). + +## 插件市场 + +Shows available and installed game management plugins, versions, capabilities, and create-server entry points. Day-to-day plugin actions live in each server's detail page, not here. + +## 用户管理 + +Shows users, roles, permissions, status, and audit entry points. Platform administrators only. + +## AI 提供商管理 + +Shows configured model providers, base URL, model list, relay mode, status, and test actions. Raw API keys must never be displayed after save. Platform administrators only. + +## 系统维护 + +Shows run endpoint health/capacity and audit events. Platform administrators only. diff --git a/platform_web/contracts/plugin-page-bridge.md b/platform_web/contracts/plugin-page-bridge.md new file mode 100644 index 0000000..48c837e --- /dev/null +++ b/platform_web/contracts/plugin-page-bridge.md @@ -0,0 +1,24 @@ +# Plugin Page Bridge Contract + +Plugin page runs with safe platform context. + +## Host Context + +- `pluginId`: installed plugin ID. +- `routeKey`: current plugin route. +- `serverInstanceId`: optional selected server instance. +- `themeTokens`: safe theme tokens. +- `permissions`: effective plugin permissions. + +## Host APIs + +- `api.request`: platform-scoped request only. +- `jobs.dispatch`: authorized job dispatch. +- `logs.query`: historical log query and analysis windows. +- `artifacts.open`: artifact upload/download references. +- `files.request`: scoped file operation requests. +- `ai.invoke`: platform-mediated AI invocation. + +## Forbidden + +The host must not expose raw auth storage, AI keys, run credentials, host paths, or storage backend credentials. diff --git a/platform_web/contracts/pluginBridge.ts b/platform_web/contracts/pluginBridge.ts new file mode 100644 index 0000000..3f60ebf --- /dev/null +++ b/platform_web/contracts/pluginBridge.ts @@ -0,0 +1,70 @@ +export type PluginPermission = + | "server.create" + | "server.read" + | "server.lifecycle" + | "server.files.read" + | "server.files.write" + | "server.logs.read" + | "server.artifacts.read" + | "server.artifacts.write" + | "ai.invoke"; + +export type PluginBridgeAction = + | "server.instances.read" + | "jobs.dispatch" + | "logs.query" + | "artifacts.open" + | "files.request" + | "ai.invoke"; + +export interface PluginPageContract { + key: string; + title: string; + path: string; + permissions?: PluginPermission[]; + bridgeActions?: PluginBridgeAction[]; +} + +export interface PluginBridgeManifestContract { + id: string; + declaredPermissions: PluginPermission[]; + bridgeActions: PluginBridgeAction[]; + pages: PluginPageContract[]; + aiPurposes?: string[]; +} + +export interface PluginBridgeThemeTokens { + colorScheme: "light" | "dark"; + accentColor: string; +} + +export interface PluginBridgeHostContext { + pluginId: string; + routeKey: string; + serverInstanceId?: string; + themeTokens: PluginBridgeThemeTokens; + permissions: PluginPermission[]; + bridgeActions: PluginBridgeAction[]; + aiPurposes: string[]; +} + +export interface PluginBridgeExecuteEnvelope { + requestId: string; + action: PluginBridgeAction; + aiPurpose?: string; + payload?: Record; +} + +export interface PluginBridgeSafeError { + code: string; + message: string; + details?: string[]; +} + +export interface PluginBridgeExecutionResult { + requestId: string; + action: PluginBridgeAction; + status: "ok" | "queued" | "denied" | "unsupported" | "cancelled" | "error" | string; + result?: Record; + error?: PluginBridgeSafeError; +} diff --git a/platform_web/contracts/serverManagement.ts b/platform_web/contracts/serverManagement.ts new file mode 100644 index 0000000..651fc6c --- /dev/null +++ b/platform_web/contracts/serverManagement.ts @@ -0,0 +1,85 @@ +import type { + GamePluginResponse, + JobResponse, + RunEndpointResponse, + ServerInstanceResponse, + ServerInstanceState +} from "../api/types"; + +export type ServerWorkflowViewState = "api" | "local" | "saving"; +export type ServerLifecycleActionLabel = "create" | "start" | "stop" | "refresh"; + +export interface ServerCreateFormState { + id: string; + name: string; + pluginId: string; + runEndpointId: string; +} + +export interface ServerWorkflowActionState { + label: ServerLifecycleActionLabel; + serverInstanceId?: string; + success: boolean; + message: string; +} + +export interface ServerManagementSummary { + total: number; + running: number; + pendingJobs: number; + failed: number; +} + +export const emptyServerCreateForm: ServerCreateFormState = { + id: "", + name: "", + pluginId: "", + runEndpointId: "" +}; + +export function summarizeServerManagement(instances: ServerInstanceResponse[], jobs: JobResponse[]): ServerManagementSummary { + return { + total: instances.length, + running: instances.filter((instance) => instance.state === "running").length, + pendingJobs: jobs.filter((job) => isPendingJobState(job.state)).length, + failed: instances.filter((instance) => instance.state === "failed").length + }; +} + +export function pendingJobsForServer(jobs: JobResponse[], serverInstanceId: string): JobResponse[] { + return jobs.filter((job) => job.serverInstanceId === serverInstanceId && isPendingJobState(job.state)); +} + +export function pluginLabel(plugin: GamePluginResponse | undefined, pluginId: string): string { + if (!plugin) { + return pluginId; + } + return plugin.serverDisplayName || plugin.name || plugin.id; +} + +export function endpointLabel(endpoint: RunEndpointResponse | undefined, runEndpointId: string): string { + if (!endpoint) { + return runEndpointId; + } + return endpoint.displayName || endpoint.id; +} + +export function canStartServer(state: ServerInstanceState): boolean { + return state === "ready" || state === "stopped"; +} + +export function canStopServer(state: ServerInstanceState): boolean { + return state === "running"; +} + +export function isPendingJobState(state: JobResponse["state"]): boolean { + return state === "queued" || state === "accepted" || state === "running"; +} + +export function defaultServerCreateForm(plugins: GamePluginResponse[], endpoints: RunEndpointResponse[]): ServerCreateFormState { + return { + ...emptyServerCreateForm, + pluginId: plugins[0]?.id ?? "", + runEndpointId: endpoints[0]?.id ?? "" + }; +} diff --git a/platform_web/contracts/shell.ts b/platform_web/contracts/shell.ts new file mode 100644 index 0000000..16c1957 --- /dev/null +++ b/platform_web/contracts/shell.ts @@ -0,0 +1,69 @@ +import type { PluginCatalogItem, ServerInstanceView, ShellSummaryItem, UserAccessView } from "./page"; + +export const shellSummary: ShellSummaryItem[] = [ + { label: "服务器实例", value: "2", detail: "1 个运行中，1 个待配置", tone: "success" }, + { label: "运行节点", value: "1", detail: "本地执行器在线", tone: "success" }, + { label: "插件", value: "2", detail: "桥接能力已就绪", tone: "success" }, + { label: "访问审核", value: "1", detail: "待确认角色变更", tone: "warning" } +]; + +export const serverInstances: ServerInstanceView[] = [ + { + id: "server-example-1", + name: "Example Survival #1", + plugin: "game.example", + runEndpoint: "run-local", + state: "running", + pendingJobs: 0, + latestLog: "stdout seq 1842 acknowledged" + }, + { + id: "server-example-2", + name: "Example Creative #2", + plugin: "game.example", + runEndpoint: "run-local", + state: "draft", + pendingJobs: 1, + latestLog: "waiting for create workflow" + } +]; + +export const pluginCatalog: PluginCatalogItem[] = [ + { + id: "game.example", + name: "Example Server", + version: "0.1.0", + serverType: "example", + status: "installed", + permissions: ["server.read", "server.lifecycle", "server.logs.read", "ai.invoke"], + bridgeActions: ["server.instances.read", "logs.query", "ai.invoke"], + validation: "manifest validated" + }, + { + id: "game.scum", + name: "SCUM Server", + version: "planned", + serverType: "scum", + status: "disabled", + permissions: ["server.read"], + bridgeActions: ["server.instances.read"], + validation: "pending proof plugin" + } +]; + +export const userAccess: UserAccessView[] = [ + { + id: "user-admin", + displayName: "Operator", + status: "active", + roles: ["admin", "operator"], + review: "baseline owner" + }, + { + id: "user-review", + displayName: "Plugin Reviewer", + status: "pending", + roles: ["plugin-reviewer"], + review: "needs approval" + } +]; diff --git a/platform_web/contracts/workspace.ts b/platform_web/contracts/workspace.ts new file mode 100644 index 0000000..60503c9 --- /dev/null +++ b/platform_web/contracts/workspace.ts @@ -0,0 +1,192 @@ +import type { JobResponse, ServerInstanceResponse, ServerMetricsResponse, UserContactProfile, UserStatus, UserThemePreferenceResponse } from "../api/types"; + +export type WorkspaceRole = "platformAdmin" | "serverOwner" | "serverAdmin"; + +export type WorkspaceCapability = + | "profile.settings.manage" + | "platform.overview.read" + | "servers.read" + | "servers.manage" + | "plugins.market.read" + | "users.manage" + | "aiProviders.manage" + | "system.maintenance"; + +export interface CurrentUserView { + id: string; + displayName: string; + email?: string; + status: UserStatus; + roles: WorkspaceRole[]; + capabilities: WorkspaceCapability[]; + profile: UserContactProfile; + themePreference?: UserThemePreferenceResponse; + source: "api" | "local"; +} + +const roleCapabilities: Record = { + platformAdmin: [ + "profile.settings.manage", + "platform.overview.read", + "servers.read", + "servers.manage", + "plugins.market.read", + "users.manage", + "aiProviders.manage", + "system.maintenance" + ], + serverOwner: ["profile.settings.manage", "servers.read", "servers.manage"], + serverAdmin: ["profile.settings.manage", "servers.read", "servers.manage"] +}; + +export function capabilitiesForRoles(roles: WorkspaceRole[]): WorkspaceCapability[] { + const set = new Set(); + for (const role of roles) { + for (const capability of roleCapabilities[role] ?? []) { + set.add(capability); + } + } + return [...set]; +} + +export function isPlatformAdmin(user: CurrentUserView): boolean { + return user.roles.includes("platformAdmin"); +} + +export function rolesFromBackendRoles(roles: string[]): WorkspaceRole[] { + const mapped = new Set(); + for (const role of roles) { + const normalized = role.toLowerCase(); + if (normalized === "admin" || normalized === "platform-admin" || normalized === "platformadmin") { + mapped.add("platformAdmin"); + } + if (normalized === "server-owner" || normalized === "owner") { + mapped.add("serverOwner"); + } + if (normalized === "server-admin" || normalized === "operator") { + mapped.add("serverAdmin"); + } + } + return mapped.size > 0 ? [...mapped] : ["serverAdmin"]; +} + +export type OperationStatus = "pending" | "succeeded" | "failed"; + +export interface OperationRecord { + id: string; + intent: string; + targetKind: "server" | "plugin" | "config" | "llm" | "platform"; + targetId: string; + requester: string; + status: OperationStatus; + jobId?: string; + jobState?: JobResponse["state"]; + message?: string; + errorReason?: string; + diagnosticId?: string; + createdAt: string; + updatedAt: string; +} + +export interface ServerCardView { + instance: ServerInstanceResponse; + metrics?: ServerMetricsResponse; + pendingJobs: number; +} + +export type ServerStatusFilter = "all" | "online" | "offline" | "attention"; + +export function serverIsOnline(state: ServerInstanceResponse["state"]): boolean { + return state === "running"; +} + +export function serverNeedsAttention(state: ServerInstanceResponse["state"]): boolean { + return state === "failed" || state === "installing"; +} + +export function filterServerCards(cards: ServerCardView[], keyword: string, status: ServerStatusFilter): ServerCardView[] { + const query = keyword.trim().toLowerCase(); + return cards.filter((card) => { + if (query && !`${card.instance.name} ${card.instance.id} ${card.instance.pluginId}`.toLowerCase().includes(query)) { + return false; + } + if (status === "online") { + return serverIsOnline(card.instance.state); + } + if (status === "offline") { + return !serverIsOnline(card.instance.state); + } + if (status === "attention") { + return serverNeedsAttention(card.instance.state); + } + return true; + }); +} + +export interface GameTypeDistributionEntry { + serverType: string; + label: string; + count: number; +} + +export interface PlatformOverviewSignal { + id: string; + kind: "log" | "fault" | "plugin" | "aiProvider" | "job"; + summary: string; + detail: string; + targetPage: "servers" | "plugins" | "aiProviders" | "maintenance"; + targetId?: string; + tone: "info" | "warning" | "error"; + at: string; +} + +export type ServerDetailSection = "overview" | "logs" | "config" | "plugins" | "llm" | "history"; + +export const serverDetailSections: Array<{ id: ServerDetailSection; label: string }> = [ + { id: "overview", label: "概览" }, + { id: "logs", label: "日志" }, + { id: "config", label: "配置" }, + { id: "plugins", label: "插件控制" }, + { id: "llm", label: "AI 助手" }, + { id: "history", label: "操作历史" } +]; + +export interface PluginControlDescriptor { + key: string; + label: string; + description: string; + capability: string; + lifecycleAction?: "start" | "stop"; + dangerous: boolean; +} + +export interface PluginControlGroupView { + pluginId: string; + pluginName: string; + version: string; + status: string; + controls: PluginControlDescriptor[]; +} + +export interface DiffLine { + kind: "same" | "added" | "removed"; + text: string; +} + +export interface ConfigDiffView { + serverInstanceId: string; + configVersion?: number; + key?: string; + source?: string; + summary: string; + lines: DiffLine[]; + nextContent: string; + proposedContentInputRef?: string; +} + +export interface LlmSuggestionView { + serverInstanceId: string; + source: "api" | "local"; + recommendation: string; + diff?: ConfigDiffView; +} diff --git a/platform_web/index.html b/platform_web/index.html new file mode 100644 index 0000000..469a971 --- /dev/null +++ b/platform_web/index.html @@ -0,0 +1,12 @@ + + + + + + Game Server Platform + + +

+ + + diff --git a/platform_web/nginx.conf b/platform_web/nginx.conf new file mode 100644 index 0000000..3c4428f --- /dev/null +++ b/platform_web/nginx.conf @@ -0,0 +1,30 @@ +server { + listen 80; + server_name _; + + root /usr/share/nginx/html; + index index.html; + + location /api/v1/ { + proxy_pass http://platform:8080/api/v1/; + proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + location = /healthz { + proxy_pass http://platform:8080/healthz; + proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + location / { + try_files $uri $uri/ /index.html; + } +} + diff --git a/platform_web/package-lock.json b/platform_web/package-lock.json new file mode 100644 index 0000000..8035bd1 --- /dev/null +++ b/platform_web/package-lock.json @@ -0,0 +1,1806 @@ +{ + "name": "browser-platform-web", + "version": "0.1.0", + "lockfileVersion": 3, + "requires": true, + "packages": { + "": { + "name": "browser-platform-web", + "version": "0.1.0", + "dependencies": { + "lucide-react": "1.23.0", + "react": "19.2.4", + "react-dom": "19.2.4" + }, + "devDependencies": { + "@types/react": "19.2.14", + "@types/react-dom": "19.2.3", + "@vitejs/plugin-react-swc": "4.3.1", + "typescript": "5.9.3", + "vite": "7.3.1", + "vitest": "4.0.18" + } + }, + "node_modules/@esbuild/aix-ppc64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/aix-ppc64/-/aix-ppc64-0.27.3.tgz", + "integrity": "sha512-9fJMTNFTWZMh5qwrBItuziu834eOCUcEqymSH7pY+zoMVEZg3gcPuBNxH1EvfVYe9h0x/Ptw8KBzv7qxb7l8dg==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "aix" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-arm": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/android-arm/-/android-arm-0.27.3.tgz", + "integrity": "sha512-i5D1hPY7GIQmXlXhs2w8AWHhenb00+GxjxRncS2ZM7YNVGNfaMxgzSGuO8o8SJzRc/oZwU2bcScvVERk03QhzA==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-arm64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/android-arm64/-/android-arm64-0.27.3.tgz", + "integrity": "sha512-YdghPYUmj/FX2SYKJ0OZxf+iaKgMsKHVPF1MAq/P8WirnSpCStzKJFjOjzsW0QQ7oIAiccHdcqjbHmJxRb/dmg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/android-x64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/android-x64/-/android-x64-0.27.3.tgz", + "integrity": "sha512-IN/0BNTkHtk8lkOM8JWAYFg4ORxBkZQf9zXiEOfERX/CzxW3Vg1ewAhU7QSWQpVIzTW+b8Xy+lGzdYXV6UZObQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/darwin-arm64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/darwin-arm64/-/darwin-arm64-0.27.3.tgz", + "integrity": "sha512-Re491k7ByTVRy0t3EKWajdLIr0gz2kKKfzafkth4Q8A5n1xTHrkqZgLLjFEHVD+AXdUGgQMq+Godfq45mGpCKg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/darwin-x64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/darwin-x64/-/darwin-x64-0.27.3.tgz", + "integrity": "sha512-vHk/hA7/1AckjGzRqi6wbo+jaShzRowYip6rt6q7VYEDX4LEy1pZfDpdxCBnGtl+A5zq8iXDcyuxwtv3hNtHFg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/freebsd-arm64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/freebsd-arm64/-/freebsd-arm64-0.27.3.tgz", + "integrity": "sha512-ipTYM2fjt3kQAYOvo6vcxJx3nBYAzPjgTCk7QEgZG8AUO3ydUhvelmhrbOheMnGOlaSFUoHXB6un+A7q4ygY9w==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/freebsd-x64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/freebsd-x64/-/freebsd-x64-0.27.3.tgz", + "integrity": "sha512-dDk0X87T7mI6U3K9VjWtHOXqwAMJBNN2r7bejDsc+j03SEjtD9HrOl8gVFByeM0aJksoUuUVU9TBaZa2rgj0oA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-arm": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/linux-arm/-/linux-arm-0.27.3.tgz", + "integrity": "sha512-s6nPv2QkSupJwLYyfS+gwdirm0ukyTFNl3KTgZEAiJDd+iHZcbTPPcWCcRYH+WlNbwChgH2QkE9NSlNrMT8Gfw==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-arm64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/linux-arm64/-/linux-arm64-0.27.3.tgz", + "integrity": "sha512-sZOuFz/xWnZ4KH3YfFrKCf1WyPZHakVzTiqji3WDc0BCl2kBwiJLCXpzLzUBLgmp4veFZdvN5ChW4Eq/8Fc2Fg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-ia32": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/linux-ia32/-/linux-ia32-0.27.3.tgz", + "integrity": "sha512-yGlQYjdxtLdh0a3jHjuwOrxQjOZYD/C9PfdbgJJF3TIZWnm/tMd/RcNiLngiu4iwcBAOezdnSLAwQDPqTmtTYg==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-loong64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/linux-loong64/-/linux-loong64-0.27.3.tgz", + "integrity": "sha512-WO60Sn8ly3gtzhyjATDgieJNet/KqsDlX5nRC5Y3oTFcS1l0KWba+SEa9Ja1GfDqSF1z6hif/SkpQJbL63cgOA==", + "cpu": [ + "loong64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-mips64el": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/linux-mips64el/-/linux-mips64el-0.27.3.tgz", + "integrity": "sha512-APsymYA6sGcZ4pD6k+UxbDjOFSvPWyZhjaiPyl/f79xKxwTnrn5QUnXR5prvetuaSMsb4jgeHewIDCIWljrSxw==", + "cpu": [ + "mips64el" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-ppc64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/linux-ppc64/-/linux-ppc64-0.27.3.tgz", + "integrity": "sha512-eizBnTeBefojtDb9nSh4vvVQ3V9Qf9Df01PfawPcRzJH4gFSgrObw+LveUyDoKU3kxi5+9RJTCWlj4FjYXVPEA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-riscv64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/linux-riscv64/-/linux-riscv64-0.27.3.tgz", + "integrity": "sha512-3Emwh0r5wmfm3ssTWRQSyVhbOHvqegUDRd0WhmXKX2mkHJe1SFCMJhagUleMq+Uci34wLSipf8Lagt4LlpRFWQ==", + "cpu": [ + "riscv64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-s390x": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/linux-s390x/-/linux-s390x-0.27.3.tgz", + "integrity": "sha512-pBHUx9LzXWBc7MFIEEL0yD/ZVtNgLytvx60gES28GcWMqil8ElCYR4kvbV2BDqsHOvVDRrOxGySBM9Fcv744hw==", + "cpu": [ + "s390x" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/linux-x64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/linux-x64/-/linux-x64-0.27.3.tgz", + "integrity": "sha512-Czi8yzXUWIQYAtL/2y6vogER8pvcsOsk5cpwL4Gk5nJqH5UZiVByIY8Eorm5R13gq+DQKYg0+JyQoytLQas4dA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/netbsd-arm64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/netbsd-arm64/-/netbsd-arm64-0.27.3.tgz", + "integrity": "sha512-sDpk0RgmTCR/5HguIZa9n9u+HVKf40fbEUt+iTzSnCaGvY9kFP0YKBWZtJaraonFnqef5SlJ8/TiPAxzyS+UoA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "netbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/netbsd-x64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/netbsd-x64/-/netbsd-x64-0.27.3.tgz", + "integrity": "sha512-P14lFKJl/DdaE00LItAukUdZO5iqNH7+PjoBm+fLQjtxfcfFE20Xf5CrLsmZdq5LFFZzb5JMZ9grUwvtVYzjiA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "netbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openbsd-arm64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/openbsd-arm64/-/openbsd-arm64-0.27.3.tgz", + "integrity": "sha512-AIcMP77AvirGbRl/UZFTq5hjXK+2wC7qFRGoHSDrZ5v5b8DK/GYpXW3CPRL53NkvDqb9D+alBiC/dV0Fb7eJcw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openbsd-x64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/openbsd-x64/-/openbsd-x64-0.27.3.tgz", + "integrity": "sha512-DnW2sRrBzA+YnE70LKqnM3P+z8vehfJWHXECbwBmH/CU51z6FiqTQTHFenPlHmo3a8UgpLyH3PT+87OViOh1AQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openbsd" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/openharmony-arm64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/openharmony-arm64/-/openharmony-arm64-0.27.3.tgz", + "integrity": "sha512-NinAEgr/etERPTsZJ7aEZQvvg/A6IsZG/LgZy+81wON2huV7SrK3e63dU0XhyZP4RKGyTm7aOgmQk0bGp0fy2g==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/sunos-x64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/sunos-x64/-/sunos-x64-0.27.3.tgz", + "integrity": "sha512-PanZ+nEz+eWoBJ8/f8HKxTTD172SKwdXebZ0ndd953gt1HRBbhMsaNqjTyYLGLPdoWHy4zLU7bDVJztF5f3BHA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "sunos" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-arm64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/win32-arm64/-/win32-arm64-0.27.3.tgz", + "integrity": "sha512-B2t59lWWYrbRDw/tjiWOuzSsFh1Y/E95ofKz7rIVYSQkUYBjfSgf6oeYPNWHToFRr2zx52JKApIcAS/D5TUBnA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-ia32": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/win32-ia32/-/win32-ia32-0.27.3.tgz", + "integrity": "sha512-QLKSFeXNS8+tHW7tZpMtjlNb7HKau0QDpwm49u0vUp9y1WOF+PEzkU84y9GqYaAVW8aH8f3GcBck26jh54cX4Q==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@esbuild/win32-x64": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/@esbuild/win32-x64/-/win32-x64-0.27.3.tgz", + "integrity": "sha512-4uJGhsxuptu3OcpVAzli+/gWusVGwZZHTlS63hh++ehExkVT8SgiEf7/uC/PclrPPkLhZqGgCTjd0VWLo6xMqA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=18" + } + }, + "node_modules/@jridgewell/sourcemap-codec": { + "version": "1.5.5", + "resolved": "https://registry.npmmirror.com/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz", + "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==", + "dev": true, + "license": "MIT" + }, + "node_modules/@rolldown/pluginutils": { + "version": "1.0.1", + "resolved": "https://registry.npmmirror.com/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz", + "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@rollup/rollup-android-arm-eabi": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.59.0.tgz", + "integrity": "sha512-upnNBkA6ZH2VKGcBj9Fyl9IGNPULcjXRlg0LLeaioQWueH30p6IXtJEbKAgvyv+mJaMxSm1l6xwDXYjpEMiLMg==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@rollup/rollup-android-arm64": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.59.0.tgz", + "integrity": "sha512-hZ+Zxj3SySm4A/DylsDKZAeVg0mvi++0PYVceVyX7hemkw7OreKdCvW2oQ3T1FMZvCaQXqOTHb8qmBShoqk69Q==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@rollup/rollup-darwin-arm64": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.59.0.tgz", + "integrity": "sha512-W2Psnbh1J8ZJw0xKAd8zdNgF9HRLkdWwwdWqubSVk0pUuQkoHnv7rx4GiF9rT4t5DIZGAsConRE3AxCdJ4m8rg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@rollup/rollup-darwin-x64": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.59.0.tgz", + "integrity": "sha512-ZW2KkwlS4lwTv7ZVsYDiARfFCnSGhzYPdiOU4IM2fDbL+QGlyAbjgSFuqNRbSthybLbIJ915UtZBtmuLrQAT/w==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@rollup/rollup-freebsd-arm64": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.59.0.tgz", + "integrity": "sha512-EsKaJ5ytAu9jI3lonzn3BgG8iRBjV4LxZexygcQbpiU0wU0ATxhNVEpXKfUa0pS05gTcSDMKpn3Sx+QB9RlTTA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ] + }, + "node_modules/@rollup/rollup-freebsd-x64": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.59.0.tgz", + "integrity": "sha512-d3DuZi2KzTMjImrxoHIAODUZYoUUMsuUiY4SRRcJy6NJoZ6iIqWnJu9IScV9jXysyGMVuW+KNzZvBLOcpdl3Vg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ] + }, + "node_modules/@rollup/rollup-linux-arm-gnueabihf": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.59.0.tgz", + "integrity": "sha512-t4ONHboXi/3E0rT6OZl1pKbl2Vgxf9vJfWgmUoCEVQVxhW6Cw/c8I6hbbu7DAvgp82RKiH7TpLwxnJeKv2pbsw==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-arm-musleabihf": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.59.0.tgz", + "integrity": "sha512-CikFT7aYPA2ufMD086cVORBYGHffBo4K8MQ4uPS/ZnY54GKj36i196u8U+aDVT2LX4eSMbyHtyOh7D7Zvk2VvA==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-arm64-gnu": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.59.0.tgz", + "integrity": "sha512-jYgUGk5aLd1nUb1CtQ8E+t5JhLc9x5WdBKew9ZgAXg7DBk0ZHErLHdXM24rfX+bKrFe+Xp5YuJo54I5HFjGDAA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-arm64-musl": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.59.0.tgz", + "integrity": "sha512-peZRVEdnFWZ5Bh2KeumKG9ty7aCXzzEsHShOZEFiCQlDEepP1dpUl/SrUNXNg13UmZl+gzVDPsiCwnV1uI0RUA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-loong64-gnu": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.59.0.tgz", + "integrity": "sha512-gbUSW/97f7+r4gHy3Jlup8zDG190AuodsWnNiXErp9mT90iCy9NKKU0Xwx5k8VlRAIV2uU9CsMnEFg/xXaOfXg==", + "cpu": [ + "loong64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-loong64-musl": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.59.0.tgz", + "integrity": "sha512-yTRONe79E+o0FWFijasoTjtzG9EBedFXJMl888NBEDCDV9I2wGbFFfJQQe63OijbFCUZqxpHz1GzpbtSFikJ4Q==", + "cpu": [ + "loong64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-ppc64-gnu": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.59.0.tgz", + "integrity": "sha512-sw1o3tfyk12k3OEpRddF68a1unZ5VCN7zoTNtSn2KndUE+ea3m3ROOKRCZxEpmT9nsGnogpFP9x6mnLTCaoLkA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-ppc64-musl": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.59.0.tgz", + "integrity": "sha512-+2kLtQ4xT3AiIxkzFVFXfsmlZiG5FXYW7ZyIIvGA7Bdeuh9Z0aN4hVyXS/G1E9bTP/vqszNIN/pUKCk/BTHsKA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-riscv64-gnu": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.59.0.tgz", + "integrity": "sha512-NDYMpsXYJJaj+I7UdwIuHHNxXZ/b/N2hR15NyH3m2qAtb/hHPA4g4SuuvrdxetTdndfj9b1WOmy73kcPRoERUg==", + "cpu": [ + "riscv64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-riscv64-musl": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.59.0.tgz", + "integrity": "sha512-nLckB8WOqHIf1bhymk+oHxvM9D3tyPndZH8i8+35p/1YiVoVswPid2yLzgX7ZJP0KQvnkhM4H6QZ5m0LzbyIAg==", + "cpu": [ + "riscv64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-s390x-gnu": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.59.0.tgz", + "integrity": "sha512-oF87Ie3uAIvORFBpwnCvUzdeYUqi2wY6jRFWJAy1qus/udHFYIkplYRW+wo+GRUP4sKzYdmE1Y3+rY5Gc4ZO+w==", + "cpu": [ + "s390x" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-x64-gnu": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.59.0.tgz", + "integrity": "sha512-3AHmtQq/ppNuUspKAlvA8HtLybkDflkMuLK4DPo77DfthRb71V84/c4MlWJXixZz4uruIH4uaa07IqoAkG64fg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-linux-x64-musl": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.59.0.tgz", + "integrity": "sha512-2UdiwS/9cTAx7qIUZB/fWtToJwvt0Vbo0zmnYt7ED35KPg13Q0ym1g442THLC7VyI6JfYTP4PiSOWyoMdV2/xg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@rollup/rollup-openbsd-x64": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.59.0.tgz", + "integrity": "sha512-M3bLRAVk6GOwFlPTIxVBSYKUaqfLrn8l0psKinkCFxl4lQvOSz8ZrKDz2gxcBwHFpci0B6rttydI4IpS4IS/jQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openbsd" + ] + }, + "node_modules/@rollup/rollup-openharmony-arm64": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.59.0.tgz", + "integrity": "sha512-tt9KBJqaqp5i5HUZzoafHZX8b5Q2Fe7UjYERADll83O4fGqJ49O1FsL6LpdzVFQcpwvnyd0i+K/VSwu/o/nWlA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ] + }, + "node_modules/@rollup/rollup-win32-arm64-msvc": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.59.0.tgz", + "integrity": "sha512-V5B6mG7OrGTwnxaNUzZTDTjDS7F75PO1ae6MJYdiMu60sq0CqN5CVeVsbhPxalupvTX8gXVSU9gq+Rx1/hvu6A==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@rollup/rollup-win32-ia32-msvc": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.59.0.tgz", + "integrity": "sha512-UKFMHPuM9R0iBegwzKF4y0C4J9u8C6MEJgFuXTBerMk7EJ92GFVFYBfOZaSGLu6COf7FxpQNqhNS4c4icUPqxA==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@rollup/rollup-win32-x64-gnu": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.59.0.tgz", + "integrity": "sha512-laBkYlSS1n2L8fSo1thDNGrCTQMmxjYY5G0WFWjFFYZkKPjsMBsgJfGf4TLxXrF6RyhI60L8TMOjBMvXiTcxeA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@rollup/rollup-win32-x64-msvc": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.59.0.tgz", + "integrity": "sha512-2HRCml6OztYXyJXAvdDXPKcawukWY2GpR5/nxKp4iBgiO3wcoEGkAaqctIbZcNB6KlUQBIqt8VYkNSj2397EfA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@standard-schema/spec": { + "version": "1.1.0", + "resolved": "https://registry.npmmirror.com/@standard-schema/spec/-/spec-1.1.0.tgz", + "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==", + "dev": true, + "license": "MIT" + }, + "node_modules/@swc/core": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core/-/core-1.15.18.tgz", + "integrity": "sha512-z87aF9GphWp//fnkRsqvtY+inMVPgYW3zSlXH1kJFvRT5H/wiAn+G32qW5l3oEk63KSF1x3Ov0BfHCObAmT8RA==", + "dev": true, + "hasInstallScript": true, + "license": "Apache-2.0", + "dependencies": { + "@swc/counter": "^0.1.3", + "@swc/types": "^0.1.25" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/swc" + }, + "optionalDependencies": { + "@swc/core-darwin-arm64": "1.15.18", + "@swc/core-darwin-x64": "1.15.18", + "@swc/core-linux-arm-gnueabihf": "1.15.18", + "@swc/core-linux-arm64-gnu": "1.15.18", + "@swc/core-linux-arm64-musl": "1.15.18", + "@swc/core-linux-x64-gnu": "1.15.18", + "@swc/core-linux-x64-musl": "1.15.18", + "@swc/core-win32-arm64-msvc": "1.15.18", + "@swc/core-win32-ia32-msvc": "1.15.18", + "@swc/core-win32-x64-msvc": "1.15.18" + }, + "peerDependencies": { + "@swc/helpers": ">=0.5.17" + }, + "peerDependenciesMeta": { + "@swc/helpers": { + "optional": true + } + } + }, + "node_modules/@swc/core-darwin-arm64": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core-darwin-arm64/-/core-darwin-arm64-1.15.18.tgz", + "integrity": "sha512-+mIv7uBuSaywN3C9LNuWaX1jJJ3SKfiJuE6Lr3bd+/1Iv8oMU7oLBjYMluX1UrEPzwN2qCdY6Io0yVicABoCwQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-darwin-x64": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core-darwin-x64/-/core-darwin-x64-1.15.18.tgz", + "integrity": "sha512-wZle0eaQhnzxWX5V/2kEOI6Z9vl/lTFEC6V4EWcn+5pDjhemCpQv9e/TDJ0GIoiClX8EDWRvuZwh+Z3dhL1NAg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-arm-gnueabihf": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core-linux-arm-gnueabihf/-/core-linux-arm-gnueabihf-1.15.18.tgz", + "integrity": "sha512-ao61HGXVqrJFHAcPtF4/DegmwEkVCo4HApnotLU8ognfmU8x589z7+tcf3hU+qBiU1WOXV5fQX6W9Nzs6hjxDw==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-arm64-gnu": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core-linux-arm64-gnu/-/core-linux-arm64-gnu-1.15.18.tgz", + "integrity": "sha512-3xnctOBLIq3kj8PxOCgPrGjBLP/kNOddr6f5gukYt/1IZxsITQaU9TDyjeX6jG+FiCIHjCuWuffsyQDL5Ew1bg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-arm64-musl": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core-linux-arm64-musl/-/core-linux-arm64-musl-1.15.18.tgz", + "integrity": "sha512-0a+Lix+FSSHBSBOA0XznCcHo5/1nA6oLLjcnocvzXeqtdjnPb+SvchItHI+lfeiuj1sClYPDvPMLSLyXFaiIKw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-x64-gnu": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core-linux-x64-gnu/-/core-linux-x64-gnu-1.15.18.tgz", + "integrity": "sha512-wG9J8vReUlpaHz4KOD/5UE1AUgirimU4UFT9oZmupUDEofxJKYb1mTA/DrMj0s78bkBiNI+7Fo2EgPuvOJfuAA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-linux-x64-musl": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core-linux-x64-musl/-/core-linux-x64-musl-1.15.18.tgz", + "integrity": "sha512-4nwbVvCphKzicwNWRmvD5iBaZj8JYsRGa4xOxJmOyHlMDpsvvJ2OR2cODlvWyGFH6BYL1MfIAK3qph3hp0Az6g==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-win32-arm64-msvc": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core-win32-arm64-msvc/-/core-win32-arm64-msvc-1.15.18.tgz", + "integrity": "sha512-zk0RYO+LjiBCat2RTMHzAWaMky0cra9loH4oRrLKLLNuL+jarxKLFDA8xTZWEkCPLjUTwlRN7d28eDLLMgtUcQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-win32-ia32-msvc": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core-win32-ia32-msvc/-/core-win32-ia32-msvc-1.15.18.tgz", + "integrity": "sha512-yVuTrZ0RccD5+PEkpcLOBAuPbYBXS6rslENvIXfvJGXSdX5QGi1ehC4BjAMl5FkKLiam4kJECUI0l7Hq7T1vwg==", + "cpu": [ + "ia32" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/core-win32-x64-msvc": { + "version": "1.15.18", + "resolved": "https://registry.npmmirror.com/@swc/core-win32-x64-msvc/-/core-win32-x64-msvc-1.15.18.tgz", + "integrity": "sha512-7NRmE4hmUQNCbYU3Hn9Tz57mK9Qq4c97ZS+YlamlK6qG9Fb5g/BB3gPDe0iLlJkns/sYv2VWSkm8c3NmbEGjbg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0 AND MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=10" + } + }, + "node_modules/@swc/counter": { + "version": "0.1.3", + "resolved": "https://registry.npmmirror.com/@swc/counter/-/counter-0.1.3.tgz", + "integrity": "sha512-e2BR4lsJkkRlKZ/qCHPw9ZaSxc0MVUd7gtbtaB7aMvHeJVYe8sOB8DBZkP2DtISHGSku9sCK6T6cnY0CtXrOCQ==", + "dev": true, + "license": "Apache-2.0" + }, + "node_modules/@swc/types": { + "version": "0.1.27", + "resolved": "https://registry.npmmirror.com/@swc/types/-/types-0.1.27.tgz", + "integrity": "sha512-K6h3iUlqeM946U4sXFYeahefR1YBbXJvko+hv8WS8/0BNJ4OHiHRywMnQUJCqkR7Y9+hqQ1TvEpiKqUhz7NEFg==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "@swc/counter": "^0.1.3" + } + }, + "node_modules/@types/chai": { + "version": "5.2.3", + "resolved": "https://registry.npmmirror.com/@types/chai/-/chai-5.2.3.tgz", + "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/deep-eql": "*", + "assertion-error": "^2.0.1" + } + }, + "node_modules/@types/deep-eql": { + "version": "4.0.2", + "resolved": "https://registry.npmmirror.com/@types/deep-eql/-/deep-eql-4.0.2.tgz", + "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/estree": { + "version": "1.0.8", + "resolved": "https://registry.npmmirror.com/@types/estree/-/estree-1.0.8.tgz", + "integrity": "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/react": { + "version": "19.2.14", + "resolved": "https://registry.npmmirror.com/@types/react/-/react-19.2.14.tgz", + "integrity": "sha512-ilcTH/UniCkMdtexkoCN0bI7pMcJDvmQFPvuPvmEaYA/NSfFTAgdUSLAoVjaRJm7+6PvcM+q1zYOwS4wTYMF9w==", + "dev": true, + "license": "MIT", + "peer": true, + "dependencies": { + "csstype": "^3.2.2" + } + }, + "node_modules/@types/react-dom": { + "version": "19.2.3", + "resolved": "https://registry.npmmirror.com/@types/react-dom/-/react-dom-19.2.3.tgz", + "integrity": "sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "@types/react": "^19.2.0" + } + }, + "node_modules/@vitejs/plugin-react-swc": { + "version": "4.3.1", + "resolved": "https://registry.npmmirror.com/@vitejs/plugin-react-swc/-/plugin-react-swc-4.3.1.tgz", + "integrity": "sha512-PaeokKjAGraNN+s5SIApgsktnJprIyt3zgEIu7awnEdfn29QiB2crTcCzyi2XGpX9rUnTc0cKU07Wm0N0g7H2w==", + "dev": true, + "license": "MIT", + "dependencies": { + "@rolldown/pluginutils": "^1.0.0", + "@swc/core": "^1.15.11" + }, + "engines": { + "node": "^20.19.0 || >=22.12.0" + }, + "peerDependencies": { + "vite": "^4 || ^5 || ^6 || ^7 || ^8" + } + }, + "node_modules/@vitest/expect": { + "version": "4.0.18", + "resolved": "https://registry.npmmirror.com/@vitest/expect/-/expect-4.0.18.tgz", + "integrity": "sha512-8sCWUyckXXYvx4opfzVY03EOiYVxyNrHS5QxX3DAIi5dpJAAkyJezHCP77VMX4HKA2LDT/Jpfo8i2r5BE3GnQQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@standard-schema/spec": "^1.0.0", + "@types/chai": "^5.2.2", + "@vitest/spy": "4.0.18", + "@vitest/utils": "4.0.18", + "chai": "^6.2.1", + "tinyrainbow": "^3.0.3" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/mocker": { + "version": "4.0.18", + "resolved": "https://registry.npmmirror.com/@vitest/mocker/-/mocker-4.0.18.tgz", + "integrity": "sha512-HhVd0MDnzzsgevnOWCBj5Otnzobjy5wLBe4EdeeFGv8luMsGcYqDuFRMcttKWZA5vVO8RFjexVovXvAM4JoJDQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/spy": "4.0.18", + "estree-walker": "^3.0.3", + "magic-string": "^0.30.21" + }, + "funding": { + "url": "https://opencollective.com/vitest" + }, + "peerDependencies": { + "msw": "^2.4.9", + "vite": "^6.0.0 || ^7.0.0-0" + }, + "peerDependenciesMeta": { + "msw": { + "optional": true + }, + "vite": { + "optional": true + } + } + }, + "node_modules/@vitest/pretty-format": { + "version": "4.0.18", + "resolved": "https://registry.npmmirror.com/@vitest/pretty-format/-/pretty-format-4.0.18.tgz", + "integrity": "sha512-P24GK3GulZWC5tz87ux0m8OADrQIUVDPIjjj65vBXYG17ZeU3qD7r+MNZ1RNv4l8CGU2vtTRqixrOi9fYk/yKw==", + "dev": true, + "license": "MIT", + "dependencies": { + "tinyrainbow": "^3.0.3" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/runner": { + "version": "4.0.18", + "resolved": "https://registry.npmmirror.com/@vitest/runner/-/runner-4.0.18.tgz", + "integrity": "sha512-rpk9y12PGa22Jg6g5M3UVVnTS7+zycIGk9ZNGN+m6tZHKQb7jrP7/77WfZy13Y/EUDd52NDsLRQhYKtv7XfPQw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/utils": "4.0.18", + "pathe": "^2.0.3" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/snapshot": { + "version": "4.0.18", + "resolved": "https://registry.npmmirror.com/@vitest/snapshot/-/snapshot-4.0.18.tgz", + "integrity": "sha512-PCiV0rcl7jKQjbgYqjtakly6T1uwv/5BQ9SwBLekVg/EaYeQFPiXcgrC2Y7vDMA8dM1SUEAEV82kgSQIlXNMvA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/pretty-format": "4.0.18", + "magic-string": "^0.30.21", + "pathe": "^2.0.3" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/spy": { + "version": "4.0.18", + "resolved": "https://registry.npmmirror.com/@vitest/spy/-/spy-4.0.18.tgz", + "integrity": "sha512-cbQt3PTSD7P2OARdVW3qWER5EGq7PHlvE+QfzSC0lbwO+xnt7+XH06ZzFjFRgzUX//JmpxrCu92VdwvEPlWSNw==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/@vitest/utils": { + "version": "4.0.18", + "resolved": "https://registry.npmmirror.com/@vitest/utils/-/utils-4.0.18.tgz", + "integrity": "sha512-msMRKLMVLWygpK3u2Hybgi4MNjcYJvwTb0Ru09+fOyCXIgT5raYP041DRRdiJiI3k/2U6SEbAETB3YtBrUkCFA==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/pretty-format": "4.0.18", + "tinyrainbow": "^3.0.3" + }, + "funding": { + "url": "https://opencollective.com/vitest" + } + }, + "node_modules/assertion-error": { + "version": "2.0.1", + "resolved": "https://registry.npmmirror.com/assertion-error/-/assertion-error-2.0.1.tgz", + "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + } + }, + "node_modules/chai": { + "version": "6.2.2", + "resolved": "https://registry.npmmirror.com/chai/-/chai-6.2.2.tgz", + "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + } + }, + "node_modules/csstype": { + "version": "3.2.3", + "resolved": "https://registry.npmmirror.com/csstype/-/csstype-3.2.3.tgz", + "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/es-module-lexer": { + "version": "1.7.0", + "resolved": "https://registry.npmmirror.com/es-module-lexer/-/es-module-lexer-1.7.0.tgz", + "integrity": "sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==", + "dev": true, + "license": "MIT" + }, + "node_modules/esbuild": { + "version": "0.27.3", + "resolved": "https://registry.npmmirror.com/esbuild/-/esbuild-0.27.3.tgz", + "integrity": "sha512-8VwMnyGCONIs6cWue2IdpHxHnAjzxnw2Zr7MkVxB2vjmQ2ivqGFb4LEG3SMnv0Gb2F/G/2yA8zUaiL1gywDCCg==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "bin": { + "esbuild": "bin/esbuild" + }, + "engines": { + "node": ">=18" + }, + "optionalDependencies": { + "@esbuild/aix-ppc64": "0.27.3", + "@esbuild/android-arm": "0.27.3", + "@esbuild/android-arm64": "0.27.3", + "@esbuild/android-x64": "0.27.3", + "@esbuild/darwin-arm64": "0.27.3", + "@esbuild/darwin-x64": "0.27.3", + "@esbuild/freebsd-arm64": "0.27.3", + "@esbuild/freebsd-x64": "0.27.3", + "@esbuild/linux-arm": "0.27.3", + "@esbuild/linux-arm64": "0.27.3", + "@esbuild/linux-ia32": "0.27.3", + "@esbuild/linux-loong64": "0.27.3", + "@esbuild/linux-mips64el": "0.27.3", + "@esbuild/linux-ppc64": "0.27.3", + "@esbuild/linux-riscv64": "0.27.3", + "@esbuild/linux-s390x": "0.27.3", + "@esbuild/linux-x64": "0.27.3", + "@esbuild/netbsd-arm64": "0.27.3", + "@esbuild/netbsd-x64": "0.27.3", + "@esbuild/openbsd-arm64": "0.27.3", + "@esbuild/openbsd-x64": "0.27.3", + "@esbuild/openharmony-arm64": "0.27.3", + "@esbuild/sunos-x64": "0.27.3", + "@esbuild/win32-arm64": "0.27.3", + "@esbuild/win32-ia32": "0.27.3", + "@esbuild/win32-x64": "0.27.3" + } + }, + "node_modules/estree-walker": { + "version": "3.0.3", + "resolved": "https://registry.npmmirror.com/estree-walker/-/estree-walker-3.0.3.tgz", + "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0" + } + }, + "node_modules/expect-type": { + "version": "1.4.0", + "resolved": "https://registry.npmmirror.com/expect-type/-/expect-type-1.4.0.tgz", + "integrity": "sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=12.0.0" + } + }, + "node_modules/fdir": { + "version": "6.5.0", + "resolved": "https://registry.npmmirror.com/fdir/-/fdir-6.5.0.tgz", + "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12.0.0" + }, + "peerDependencies": { + "picomatch": "^3 || ^4" + }, + "peerDependenciesMeta": { + "picomatch": { + "optional": true + } + } + }, + "node_modules/fsevents": { + "version": "2.3.3", + "resolved": "https://registry.npmmirror.com/fsevents/-/fsevents-2.3.3.tgz", + "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^8.16.0 || ^10.6.0 || >=11.0.0" + } + }, + "node_modules/lucide-react": { + "version": "1.23.0", + "resolved": "https://registry.npmmirror.com/lucide-react/-/lucide-react-1.23.0.tgz", + "integrity": "sha512-38BpJcD0JhFosxHApP/BYsBetLpQFRoTRzEzstM/XCc3jsAG7wqaY1lgVwxiUe3xqYE+lNxo2PkCmYwXWrwwIw==", + "license": "ISC", + "peerDependencies": { + "react": "^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0" + } + }, + "node_modules/magic-string": { + "version": "0.30.21", + "resolved": "https://registry.npmmirror.com/magic-string/-/magic-string-0.30.21.tgz", + "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@jridgewell/sourcemap-codec": "^1.5.5" + } + }, + "node_modules/nanoid": { + "version": "3.3.11", + "resolved": "https://registry.npmmirror.com/nanoid/-/nanoid-3.3.11.tgz", + "integrity": "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "bin": { + "nanoid": "bin/nanoid.cjs" + }, + "engines": { + "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" + } + }, + "node_modules/obug": { + "version": "2.1.1", + "resolved": "https://registry.npmmirror.com/obug/-/obug-2.1.1.tgz", + "integrity": "sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==", + "dev": true, + "funding": [ + "https://github.com/sponsors/sxzz", + "https://opencollective.com/debug" + ], + "license": "MIT" + }, + "node_modules/pathe": { + "version": "2.0.3", + "resolved": "https://registry.npmmirror.com/pathe/-/pathe-2.0.3.tgz", + "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==", + "dev": true, + "license": "MIT" + }, + "node_modules/picocolors": { + "version": "1.1.1", + "resolved": "https://registry.npmmirror.com/picocolors/-/picocolors-1.1.1.tgz", + "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==", + "dev": true, + "license": "ISC" + }, + "node_modules/picomatch": { + "version": "4.0.3", + "resolved": "https://registry.npmmirror.com/picomatch/-/picomatch-4.0.3.tgz", + "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", + "dev": true, + "license": "MIT", + "peer": true, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/jonschlinkert" + } + }, + "node_modules/postcss": { + "version": "8.5.8", + "resolved": "https://registry.npmmirror.com/postcss/-/postcss-8.5.8.tgz", + "integrity": "sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==", + "dev": true, + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/postcss/" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/postcss" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "nanoid": "^3.3.11", + "picocolors": "^1.1.1", + "source-map-js": "^1.2.1" + }, + "engines": { + "node": "^10 || ^12 || >=14" + } + }, + "node_modules/react": { + "version": "19.2.4", + "resolved": "https://registry.npmmirror.com/react/-/react-19.2.4.tgz", + "integrity": "sha512-9nfp2hYpCwOjAN+8TZFGhtWEwgvWHXqESH8qT89AT/lWklpLON22Lc8pEtnpsZz7VmawabSU0gCjnj8aC0euHQ==", + "license": "MIT", + "peer": true, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/react-dom": { + "version": "19.2.4", + "resolved": "https://registry.npmmirror.com/react-dom/-/react-dom-19.2.4.tgz", + "integrity": "sha512-AXJdLo8kgMbimY95O2aKQqsz2iWi9jMgKJhRBAxECE4IFxfcazB2LmzloIoibJI3C12IlY20+KFaLv+71bUJeQ==", + "license": "MIT", + "dependencies": { + "scheduler": "^0.27.0" + }, + "peerDependencies": { + "react": "^19.2.4" + } + }, + "node_modules/rollup": { + "version": "4.59.0", + "resolved": "https://registry.npmmirror.com/rollup/-/rollup-4.59.0.tgz", + "integrity": "sha512-2oMpl67a3zCH9H79LeMcbDhXW/UmWG/y2zuqnF2jQq5uq9TbM9TVyXvA4+t+ne2IIkBdrLpAaRQAvo7YI/Yyeg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@types/estree": "1.0.8" + }, + "bin": { + "rollup": "dist/bin/rollup" + }, + "engines": { + "node": ">=18.0.0", + "npm": ">=8.0.0" + }, + "optionalDependencies": { + "@rollup/rollup-android-arm-eabi": "4.59.0", + "@rollup/rollup-android-arm64": "4.59.0", + "@rollup/rollup-darwin-arm64": "4.59.0", + "@rollup/rollup-darwin-x64": "4.59.0", + "@rollup/rollup-freebsd-arm64": "4.59.0", + "@rollup/rollup-freebsd-x64": "4.59.0", + "@rollup/rollup-linux-arm-gnueabihf": "4.59.0", + "@rollup/rollup-linux-arm-musleabihf": "4.59.0", + "@rollup/rollup-linux-arm64-gnu": "4.59.0", + "@rollup/rollup-linux-arm64-musl": "4.59.0", + "@rollup/rollup-linux-loong64-gnu": "4.59.0", + "@rollup/rollup-linux-loong64-musl": "4.59.0", + "@rollup/rollup-linux-ppc64-gnu": "4.59.0", + "@rollup/rollup-linux-ppc64-musl": "4.59.0", + "@rollup/rollup-linux-riscv64-gnu": "4.59.0", + "@rollup/rollup-linux-riscv64-musl": "4.59.0", + "@rollup/rollup-linux-s390x-gnu": "4.59.0", + "@rollup/rollup-linux-x64-gnu": "4.59.0", + "@rollup/rollup-linux-x64-musl": "4.59.0", + "@rollup/rollup-openbsd-x64": "4.59.0", + "@rollup/rollup-openharmony-arm64": "4.59.0", + "@rollup/rollup-win32-arm64-msvc": "4.59.0", + "@rollup/rollup-win32-ia32-msvc": "4.59.0", + "@rollup/rollup-win32-x64-gnu": "4.59.0", + "@rollup/rollup-win32-x64-msvc": "4.59.0", + "fsevents": "~2.3.2" + } + }, + "node_modules/scheduler": { + "version": "0.27.0", + "resolved": "https://registry.npmmirror.com/scheduler/-/scheduler-0.27.0.tgz", + "integrity": "sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==", + "license": "MIT" + }, + "node_modules/siginfo": { + "version": "2.0.0", + "resolved": "https://registry.npmmirror.com/siginfo/-/siginfo-2.0.0.tgz", + "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==", + "dev": true, + "license": "ISC" + }, + "node_modules/source-map-js": { + "version": "1.2.1", + "resolved": "https://registry.npmmirror.com/source-map-js/-/source-map-js-1.2.1.tgz", + "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", + "dev": true, + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/stackback": { + "version": "0.0.2", + "resolved": "https://registry.npmmirror.com/stackback/-/stackback-0.0.2.tgz", + "integrity": "sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==", + "dev": true, + "license": "MIT" + }, + "node_modules/std-env": { + "version": "3.10.0", + "resolved": "https://registry.npmmirror.com/std-env/-/std-env-3.10.0.tgz", + "integrity": "sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==", + "dev": true, + "license": "MIT" + }, + "node_modules/tinybench": { + "version": "2.9.0", + "resolved": "https://registry.npmmirror.com/tinybench/-/tinybench-2.9.0.tgz", + "integrity": "sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==", + "dev": true, + "license": "MIT" + }, + "node_modules/tinyexec": { + "version": "1.0.2", + "resolved": "https://registry.npmmirror.com/tinyexec/-/tinyexec-1.0.2.tgz", + "integrity": "sha512-W/KYk+NFhkmsYpuHq5JykngiOCnxeVL8v8dFnqxSD8qEEdRfXk1SDM6JzNqcERbcGYj9tMrDQBYV9cjgnunFIg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=18" + } + }, + "node_modules/tinyglobby": { + "version": "0.2.15", + "resolved": "https://registry.npmmirror.com/tinyglobby/-/tinyglobby-0.2.15.tgz", + "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "fdir": "^6.5.0", + "picomatch": "^4.0.3" + }, + "engines": { + "node": ">=12.0.0" + }, + "funding": { + "url": "https://github.com/sponsors/SuperchupuDev" + } + }, + "node_modules/tinyrainbow": { + "version": "3.0.3", + "resolved": "https://registry.npmmirror.com/tinyrainbow/-/tinyrainbow-3.0.3.tgz", + "integrity": "sha512-PSkbLUoxOFRzJYjjxHJt9xro7D+iilgMX/C9lawzVuYiIdcihh9DXmVibBe8lmcFrRi/VzlPjBxbN7rH24q8/Q==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=14.0.0" + } + }, + "node_modules/typescript": { + "version": "5.9.3", + "resolved": "https://registry.npmmirror.com/typescript/-/typescript-5.9.3.tgz", + "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==", + "dev": true, + "license": "Apache-2.0", + "bin": { + "tsc": "bin/tsc", + "tsserver": "bin/tsserver" + }, + "engines": { + "node": ">=14.17" + } + }, + "node_modules/vite": { + "version": "7.3.1", + "resolved": "https://registry.npmmirror.com/vite/-/vite-7.3.1.tgz", + "integrity": "sha512-w+N7Hifpc3gRjZ63vYBXA56dvvRlNWRczTdmCBBa+CotUzAPf5b7YMdMR/8CQoeYE5LX3W4wj6RYTgonm1b9DA==", + "dev": true, + "license": "MIT", + "peer": true, + "dependencies": { + "esbuild": "^0.27.0", + "fdir": "^6.5.0", + "picomatch": "^4.0.3", + "postcss": "^8.5.6", + "rollup": "^4.43.0", + "tinyglobby": "^0.2.15" + }, + "bin": { + "vite": "bin/vite.js" + }, + "engines": { + "node": "^20.19.0 || >=22.12.0" + }, + "funding": { + "url": "https://github.com/vitejs/vite?sponsor=1" + }, + "optionalDependencies": { + "fsevents": "~2.3.3" + }, + "peerDependencies": { + "@types/node": "^20.19.0 || >=22.12.0", + "jiti": ">=1.21.0", + "less": "^4.0.0", + "lightningcss": "^1.21.0", + "sass": "^1.70.0", + "sass-embedded": "^1.70.0", + "stylus": ">=0.54.8", + "sugarss": "^5.0.0", + "terser": "^5.16.0", + "tsx": "^4.8.1", + "yaml": "^2.4.2" + }, + "peerDependenciesMeta": { + "@types/node": { + "optional": true + }, + "jiti": { + "optional": true + }, + "less": { + "optional": true + }, + "lightningcss": { + "optional": true + }, + "sass": { + "optional": true + }, + "sass-embedded": { + "optional": true + }, + "stylus": { + "optional": true + }, + "sugarss": { + "optional": true + }, + "terser": { + "optional": true + }, + "tsx": { + "optional": true + }, + "yaml": { + "optional": true + } + } + }, + "node_modules/vitest": { + "version": "4.0.18", + "resolved": "https://registry.npmmirror.com/vitest/-/vitest-4.0.18.tgz", + "integrity": "sha512-hOQuK7h0FGKgBAas7v0mSAsnvrIgAvWmRFjmzpJ7SwFHH3g1k2u37JtYwOwmEKhK6ZO3v9ggDBBm0La1LCK4uQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/expect": "4.0.18", + "@vitest/mocker": "4.0.18", + "@vitest/pretty-format": "4.0.18", + "@vitest/runner": "4.0.18", + "@vitest/snapshot": "4.0.18", + "@vitest/spy": "4.0.18", + "@vitest/utils": "4.0.18", + "es-module-lexer": "^1.7.0", + "expect-type": "^1.2.2", + "magic-string": "^0.30.21", + "obug": "^2.1.1", + "pathe": "^2.0.3", + "picomatch": "^4.0.3", + "std-env": "^3.10.0", + "tinybench": "^2.9.0", + "tinyexec": "^1.0.2", + "tinyglobby": "^0.2.15", + "tinyrainbow": "^3.0.3", + "vite": "^6.0.0 || ^7.0.0", + "why-is-node-running": "^2.3.0" + }, + "bin": { + "vitest": "vitest.mjs" + }, + "engines": { + "node": "^20.0.0 || ^22.0.0 || >=24.0.0" + }, + "funding": { + "url": "https://opencollective.com/vitest" + }, + "peerDependencies": { + "@edge-runtime/vm": "*", + "@opentelemetry/api": "^1.9.0", + "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0", + "@vitest/browser-playwright": "4.0.18", + "@vitest/browser-preview": "4.0.18", + "@vitest/browser-webdriverio": "4.0.18", + "@vitest/ui": "4.0.18", + "happy-dom": "*", + "jsdom": "*" + }, + "peerDependenciesMeta": { + "@edge-runtime/vm": { + "optional": true + }, + "@opentelemetry/api": { + "optional": true + }, + "@types/node": { + "optional": true + }, + "@vitest/browser-playwright": { + "optional": true + }, + "@vitest/browser-preview": { + "optional": true + }, + "@vitest/browser-webdriverio": { + "optional": true + }, + "@vitest/ui": { + "optional": true + }, + "happy-dom": { + "optional": true + }, + "jsdom": { + "optional": true + } + } + }, + "node_modules/why-is-node-running": { + "version": "2.3.0", + "resolved": "https://registry.npmmirror.com/why-is-node-running/-/why-is-node-running-2.3.0.tgz", + "integrity": "sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==", + "dev": true, + "license": "MIT", + "dependencies": { + "siginfo": "^2.0.0", + "stackback": "0.0.2" + }, + "bin": { + "why-is-node-running": "cli.js" + }, + "engines": { + "node": ">=8" + } + } + } +} diff --git a/platform_web/package.json b/platform_web/package.json new file mode 100644 index 0000000..56752dc --- /dev/null +++ b/platform_web/package.json @@ -0,0 +1,27 @@ +{ + "name": "browser-platform-web", + "version": "0.1.0", + "private": true, + "type": "module", + "scripts": { + "dev": "vite --host 127.0.0.1", + "build": "tsc -p tsconfig.json --noEmit && vite build", + "typecheck": "tsc -p tsconfig.json --noEmit", + "test": "vitest run", + "acceptance:browser": "node acceptance/browser-acceptance.mjs", + "preview": "vite preview --host 127.0.0.1" + }, + "dependencies": { + "lucide-react": "1.23.0", + "react": "19.2.4", + "react-dom": "19.2.4" + }, + "devDependencies": { + "@types/react": "19.2.14", + "@types/react-dom": "19.2.3", + "@vitejs/plugin-react-swc": "4.3.1", + "typescript": "5.9.3", + "vite": "7.3.1", + "vitest": "4.0.18" + } +} diff --git a/platform_web/pages/AiProvidersPage.test.tsx b/platform_web/pages/AiProvidersPage.test.tsx new file mode 100644 index 0000000..df5132c --- /dev/null +++ b/platform_web/pages/AiProvidersPage.test.tsx @@ -0,0 +1,28 @@ +import { renderToStaticMarkup } from "react-dom/server"; +import { describe, expect, it } from "vitest"; + +import { AiProvidersPage } from "./AiProvidersPage"; + +describe("AiProvidersPage", () => { + it("renders the AI provider management workflow", () => { + const html = renderToStaticMarkup(); + + expect(html).toContain("AI 提供商管理"); + expect(html).toContain("OpenAI Relay"); + expect(html).toContain("Local Ollama"); + expect(html).toContain("新增"); + expect(html).toContain("保存"); + expect(html).toContain("secret://providers/openai"); + }); + + it("does not render raw key field names", () => { + const html = renderToStaticMarkup(); + + expect(html).not.toContain("apiKey="); + expect(html).not.toContain("rawApiKey"); + expect(html).not.toContain('value="sk-'); + expect(html).not.toContain(">sk-"); + expect(html).not.toContain("api_key="); + expect(html).not.toContain("Bearer "); + }); +}); diff --git a/platform_web/pages/AiProvidersPage.tsx b/platform_web/pages/AiProvidersPage.tsx new file mode 100644 index 0000000..af90807 --- /dev/null +++ b/platform_web/pages/AiProvidersPage.tsx @@ -0,0 +1,370 @@ +import { Candy, CheckCircle2, FlaskConical, Power, Sparkles, WandSparkles } from "lucide-react"; +import { type ChangeEvent, type FormEvent, useEffect, useMemo, useState } from "react"; + +import { platformApiClient } from "../api/client"; +import type { AiProviderResponse, AiProviderStatus } from "../api/types"; +import { EmptyState } from "../components/StateViews"; +import { + aiProviderToForm, + emptyAiProviderForm, + type AiProviderActionState, + type AiProviderFilter, + type AiProviderFormState, + summarizeAiProviders, + type AiProviderViewState +} from "../contracts/aiProviders"; +import { aiProviderCreateRequestFromForm, aiProviderUpdateRequestFromForm } from "../schemas/aiProviders"; +import { cx } from "../utils/classes"; + +const seedProviders: AiProviderResponse[] = [ + { + id: "ai.openai", + name: "OpenAI Relay", + kind: "openai-compatible", + baseUrl: "https://relay.example.test/v1", + apiKeyRef: "secret://providers/openai", + models: ["gpt-4.1", "gpt-4.1-mini"], + defaultModel: "gpt-4.1-mini", + relayMode: "relay", + timeoutMs: 30000, + status: "active", + redactionPolicy: "default" + }, + { + id: "ai.local", + name: "Local Ollama", + kind: "ollama", + baseUrl: "http://127.0.0.1:11434/v1", + apiKeyRef: "env://OLLAMA_API_KEY", + models: ["llama3.1", "qwen2.5-coder"], + defaultModel: "qwen2.5-coder", + relayMode: "local", + timeoutMs: 20000, + status: "disabled", + redactionPolicy: "local" + } +]; + +export function AiProvidersPage() { + const [providers, setProviders] = useState(seedProviders); + const [selectedId, setSelectedId] = useState(seedProviders[0]?.id ?? ""); + const [filter, setFilter] = useState("all"); + const [form, setForm] = useState(() => aiProviderToForm(seedProviders[0])); + const [viewState, setViewState] = useState("local"); + const [action, setAction] = useState(null); + + useEffect(() => { + let cancelled = false; + platformApiClient + .listAiProviders() + .then((response) => { + if (cancelled || response.items.length === 0) { + return; + } + setProviders(response.items); + setSelectedId(response.items[0].id); + setForm(aiProviderToForm(response.items[0])); + setViewState("api"); + }) + .catch(() => { + if (!cancelled) { + setViewState("local"); + } + }); + + return () => { + cancelled = true; + }; + }, []); + + const metrics = useMemo(() => summarizeAiProviders(providers), [providers]); + const filteredProviders = useMemo( + () => providers.filter((provider) => filter === "all" || provider.status === filter), + [filter, providers] + ); + const selectedProvider = providers.find((provider) => provider.id === selectedId); + + function updateForm(key: K, value: AiProviderFormState[K]) { + setForm((current) => ({ ...current, [key]: value })); + } + + function handleInput(event: ChangeEvent) { + updateForm(event.target.name as keyof AiProviderFormState, event.target.value); + } + + function selectProvider(provider: AiProviderResponse) { + setSelectedId(provider.id); + setForm(aiProviderToForm(provider)); + setAction(null); + } + + function startCreate() { + setSelectedId(""); + setForm(emptyAiProviderForm()); + setAction(null); + } + + async function handleSubmit(event: FormEvent) { + event.preventDefault(); + setViewState("saving"); + const existing = providers.some((provider) => provider.id === form.id.trim()); + + try { + const saved = existing + ? await platformApiClient.updateAiProvider(form.id.trim(), aiProviderUpdateRequestFromForm(form)) + : await platformApiClient.createAiProvider(aiProviderCreateRequestFromForm(form)); + upsertProvider(saved); + setSelectedId(saved.id); + setForm(aiProviderToForm(saved)); + setViewState("api"); + setAction({ providerId: saved.id, label: "save", success: true, message: "saved" }); + } catch { + const local = localProviderFromForm(form, existing ? selectedProvider?.status ?? "active" : "active"); + upsertProvider(local); + setSelectedId(local.id); + setForm(aiProviderToForm(local)); + setViewState("local"); + setAction({ providerId: local.id, label: "save", success: true, message: "saved locally" }); + } + } + + async function handleStatus(provider: AiProviderResponse) { + const nextStatus: Extract = provider.status === "active" ? "disabled" : "active"; + try { + const updated = await platformApiClient.setAiProviderStatus(provider.id, { status: nextStatus }); + upsertProvider(updated); + setAction({ providerId: provider.id, label: "status", success: true, message: updated.status }); + } catch { + const updated = { ...provider, status: nextStatus }; + upsertProvider(updated); + setAction({ providerId: provider.id, label: "status", success: true, message: nextStatus }); + } + } + + async function handleTest(provider: AiProviderResponse) { + try { + const result = await platformApiClient.testAiProvider(provider.id); + setAction({ providerId: provider.id, label: "test", success: result.success, message: result.message }); + } catch { + const success = provider.status === "active"; + setAction({ providerId: provider.id, label: "test", success, message: success ? "metadata validation passed" : "provider must be active" }); + } + } + + async function handleModels(provider: AiProviderResponse) { + try { + const result = await platformApiClient.listAiProviderModels(provider.id); + setAction({ providerId: provider.id, label: "models", success: true, message: `${result.models.length}` }); + } catch { + setAction({ providerId: provider.id, label: "models", success: true, message: `${provider.models.length}` }); + } + } + + function upsertProvider(provider: AiProviderResponse) { + setProviders((current) => { + const exists = current.some((item) => item.id === provider.id); + return exists ? current.map((item) => (item.id === provider.id ? provider : item)) : [...current, provider]; + }); + } + + return ( +

模型

+ AI 提供商管理 +

+ {viewState === "api" ? "已连接" : viewState === "saving" ? "保存中" : "本地视图"} +

+ +

+ 提供商 + {metrics.total} +

+ 启用 + {metrics.active} +

+ 模型 + {metrics.models} +

+ +

+ {(["all", "active", "disabled", "error"] as AiProviderFilter[]).map((item) => ( + + ))} + +

+ +

+ + + + + + + + + + + + + + {filteredProviders.map((provider) => ( + + + + + + + + + + ))} + +

名称	状态	类型	模式	模型	密钥引用	操作
+ + {provider.id} +	+ {statusLabel(provider.status)} +	{provider.kind}	{provider.relayMode}	{provider.models.length}	+ `{provider.apiKeyRef}` +	+ + + + + +

+ {filteredProviders.length === 0 && ( + + )} +

+ +

void handleSubmit(event)}> +

{selectedProvider ? "编辑提供商" : "新增提供商"}

+ {action && ( + + + {action.message} + + )} +

+ + + ID + + + + 名称 + + +

+ + 类型 + + + + 模式 + + +

+ + Base URL + + + + 密钥引用 + + + + 模型 + + +

+ + 默认模型 + + + + 超时 ms + + +

+ + 脱敏策略 + + + +

+ ); +} + +function localProviderFromForm(form: AiProviderFormState, status: AiProviderStatus): AiProviderResponse { + const request = aiProviderCreateRequestFromForm(form); + return { + ...request, + defaultModel: request.defaultModel, + status + }; +} + +function filterLabel(filter: AiProviderFilter): string { + switch (filter) { + case "active": + return "启用"; + case "disabled": + return "停用"; + case "error": + return "错误"; + default: + return "全部"; + } +} + +function statusLabel(status: AiProviderStatus): string { + switch (status) { + case "active": + return "启用"; + case "disabled": + return "停用"; + default: + return "错误"; + } +} diff --git a/platform_web/pages/ConsolePages.test.tsx b/platform_web/pages/ConsolePages.test.tsx new file mode 100644 index 0000000..a3f6bec --- /dev/null +++ b/platform_web/pages/ConsolePages.test.tsx @@ -0,0 +1,104 @@ +import { renderToStaticMarkup } from "react-dom/server"; +import { describe, expect, it } from "vitest"; + +import { HomePage } from "./HomePage"; +import { PluginsPage } from "./PluginsPage"; +import { ProfileSettingsPage } from "./ProfileSettingsPage"; +import { ServerDetailPage } from "./ServerDetailPage"; +import { ServersPage } from "./ServersPage"; +import { UsersPage } from "./UsersPage"; +import type { PageComponentProps } from "../contracts/page"; +import { capabilitiesForRoles, type CurrentUserView } from "../contracts/workspace"; +import type { OperationTracker } from "../stores/operations"; + +const adminUser: CurrentUserView = { + id: "user-admin", + displayName: "Operator", + status: "active", + roles: ["platformAdmin"], + capabilities: capabilitiesForRoles(["platformAdmin"]), + profile: {}, + source: "local" +}; + +const noopOperations: OperationTracker = { + operations: [], + begin: () => "op-test", + update: () => undefined, + succeed: () => undefined, + fail: () => undefined, + isPending: () => false +}; + +function pageProps(params: PageComponentProps["params"] = {}): PageComponentProps { + return { + session: adminUser, + params, + operations: noopOperations, + onNavigate: () => undefined, + onLogout: async () => undefined, + onProfileSave: async () => adminUser, + onThemePreferenceSave: async () => ({ userId: adminUser.id, paletteId: "mecha-black", backgroundPresetId: "mecha-grid", persistence: "api", updatedAt: "2026-07-03T00:00:00Z" }) + }; +} + +describe("first-party console pages", () => { + it("renders the platform overview with first-screen health modules", () => { + const html = renderToStaticMarkup(); + + expect(html).toContain("平台概览"); + expect(html).toContain("资源负载"); + expect(html).toContain("游戏类型分布"); + expect(html).toContain("最近运营信号"); + expect(html).not.toContain("sk-"); + }); + + it("renders the server list workspace with search and status filters", () => { + const html = renderToStaticMarkup(); + + expect(html).toContain("服务器管理"); + expect(html).toContain("搜索服务器"); + expect(html).toContain("在线"); + expect(html).toContain("离线"); + expect(html).not.toContain("run socket"); + expect(html).not.toContain("/Users/"); + }); + + it("renders server detail sections for daily operations", () => { + const html = renderToStaticMarkup(); + + expect(html).toContain("返回列表"); + expect(html).toContain("概览"); + expect(html).toContain("日志"); + expect(html).toContain("配置"); + expect(html).toContain("插件控制"); + expect(html).toContain("AI 助手"); + expect(html).toContain("操作历史"); + }); + + it("renders plugin catalog bridge readiness", () => { + const html = renderToStaticMarkup(); + + expect(html).toContain("插件市场"); + expect(html).toContain("平台 API"); + expect(html).toContain("正在加载插件市场"); + expect(html).not.toContain("billing"); + }); + + it("renders user access review context", () => { + const html = renderToStaticMarkup(); + + expect(html).toContain("用户管理"); + expect(html).toContain("Plugin Reviewer"); + expect(html).toContain("needs approval"); + }); + + it("renders profile settings as a full page", () => { + const html = renderToStaticMarkup(); + + expect(html).toContain("个人设置"); + expect(html).toContain("个人资料"); + expect(html).toContain("界面偏好"); + expect(html).not.toContain("role=\"dialog\""); + }); +}); diff --git a/platform_web/pages/HomePage.tsx b/platform_web/pages/HomePage.tsx new file mode 100644 index 0000000..9e2bade --- /dev/null +++ b/platform_web/pages/HomePage.tsx @@ -0,0 +1,321 @@ +import { Activity, AlertTriangle, CakeSlice, Candy, Info, MoonStar, Sparkles } from "lucide-react"; +import { useCallback, useEffect, useMemo, useState } from "react"; + +import { platformApiClient } from "../api/client"; +import type { + AiProviderResponse, + AuditEventResponse, + JobResponse, + PlatformResourceUsageResponse, + RunEndpointResponse, + ServerInstanceResponse, + ServerMetricsResponse +} from "../api/types"; +import { UsageMeter } from "../components/OperationControls"; +import { EmptyState, ErrorState, LoadingState } from "../components/StateViews"; +import type { PageComponentProps } from "../contracts/page"; +import type { GameTypeDistributionEntry, PlatformOverviewSignal } from "../contracts/workspace"; +import { serverIsOnline } from "../contracts/workspace"; +import { cx } from "../utils/classes"; + +type ModuleState = { status: "loading" } | { status: "error"; reason: string } | { status: "ready"; data: T }; + +interface OverviewData { + instances: ServerInstanceResponse[]; + endpoints: RunEndpointResponse[]; + jobs: JobResponse[]; +} + +export function HomePage({ onNavigate }: PageComponentProps) { + const [core, setCore] = useState>({ status: "loading" }); + const [metrics, setMetrics] = useState>({ status: "loading" }); + const [usage, setUsage] = useState>({ status: "loading" }); + const [providers, setProviders] = useState>({ status: "loading" }); + const [signals, setSignals] = useState>({ status: "loading" }); + + const refreshCore = useCallback(async () => { + setCore({ status: "loading" }); + try { + const [instances, endpoints, jobs] = await Promise.all([ + platformApiClient.listServerInstances(), + platformApiClient.listRunEndpoints(), + platformApiClient.listJobs() + ]); + setCore({ status: "ready", data: { instances: instances.items, endpoints: endpoints.items, jobs: jobs.items } }); + } catch (error) { + setCore({ status: "error", reason: error instanceof Error ? error.message : "加载失败" }); + } + }, []); + + const refreshMetrics = useCallback(async () => { + setMetrics({ status: "loading" }); + try { + const response = await platformApiClient.listServerMetrics(); + setMetrics({ status: "ready", data: response.items }); + } catch { + setMetrics({ status: "ready", data: [] }); + } + }, []); + + const refreshUsage = useCallback(async () => { + setUsage({ status: "loading" }); + try { + const response = await platformApiClient.getPlatformResourceUsage(); + setUsage({ status: "ready", data: response }); + } catch { + setUsage({ status: "error", reason: "平台资源指标接口尚未提供" }); + } + }, []); + + const refreshProviders = useCallback(async () => { + setProviders({ status: "loading" }); + try { + const response = await platformApiClient.listAiProviders(); + setProviders({ status: "ready", data: response.items }); + } catch (error) { + setProviders({ status: "error", reason: error instanceof Error ? error.message : "加载失败" }); + } + }, []); + + const refreshSignals = useCallback(async () => { + setSignals({ status: "loading" }); + try { + const response = await platformApiClient.listAuditEvents(); + setSignals({ status: "ready", data: response.items }); + } catch { + setSignals({ status: "ready", data: [] }); + } + }, []); + + useEffect(() => { + void refreshCore(); + void refreshMetrics(); + void refreshUsage(); + void refreshProviders(); + void refreshSignals(); + }, [refreshCore, refreshMetrics, refreshUsage, refreshProviders, refreshSignals]); + + const distribution = useMemo(() => { + if (core.status !== "ready") { + return []; + } + const counts = new Map(); + for (const instance of core.data.instances) { + counts.set(instance.pluginId, (counts.get(instance.pluginId) ?? 0) + 1); + } + return [...counts.entries()].map(([serverType, count]) => ({ serverType, label: serverType, count })); + }, [core]); + + const overviewSignals = useMemo(() => { + const collected: PlatformOverviewSignal[] = []; + if (core.status === "ready") { + for (const instance of core.data.instances.filter((item) => item.state === "failed")) { + collected.push({ + id: `fault-${instance.id}`, + kind: "fault", + summary: `服务器 ${instance.name} 处于异常状态`, + detail: `实例 ${instance.id} 状态为 failed，需要排查`, + targetPage: "servers", + targetId: instance.id, + tone: "error", + at: instance.updatedAt + }); + } + for (const job of core.data.jobs.filter((item) => item.state === "failed").slice(0, 5)) { + collected.push({ + id: `job-${job.id}`, + kind: "job", + summary: `任务 ${job.capability} 失败`, + detail: `任务 ${job.id}${job.serverInstanceId ? `（服务器 ${job.serverInstanceId}）` : ""} 执行失败`, + targetPage: "servers", + targetId: job.serverInstanceId, + tone: "error", + at: job.updatedAt + }); + } + } + if (providers.status === "ready") { + for (const provider of providers.data.filter((item) => item.status === "error")) { + collected.push({ + id: `ai-${provider.id}`, + kind: "aiProvider", + summary: `AI 提供商 ${provider.name} 连接异常`, + detail: `提供商 ${provider.id} 状态为 error，LLM 辅助可能不可用`, + targetPage: "aiProviders", + targetId: provider.id, + tone: "warning", + at: "" + }); + } + } + if (signals.status === "ready") { + for (const event of signals.data.slice(0, 5)) { + collected.push({ + id: `audit-${event.id}`, + kind: "log", + summary: event.summary || `${event.action} ${event.resourceKind}`, + detail: `${event.actorId} 对 ${event.resourceKind}/${event.resourceId} 执行 ${event.action}（${event.result}）`, + targetPage: event.resourceKind === "server-instance" ? "servers" : "maintenance", + targetId: event.resourceId, + tone: event.result === "failure" ? "warning" : "info", + at: event.createdAt + }); + } + } + return collected.slice(0, 8); + }, [core, providers, signals]); + + const onlineCount = core.status === "ready" ? core.data.instances.filter((item) => serverIsOnline(item.state)).length : 0; + const offlineCount = core.status === "ready" ? core.data.instances.length - onlineCount : 0; + const activeProviders = providers.status === "ready" ? providers.data.filter((item) => item.status === "active").length : 0; + const errorProviders = providers.status === "ready" ? providers.data.filter((item) => item.status === "error").length : 0; + + const metricAverages = useMemo(() => { + if (usage.status === "ready") { + return { cpu: usage.data.cpuPercent, memory: usage.data.memoryPercent, disk: usage.data.diskPercent, source: "平台指标" }; + } + if (metrics.status === "ready" && metrics.data.length > 0) { + const average = (values: Array) => { + const known = values.filter((value): value is number => typeof value === "number"); + return known.length > 0 ? known.reduce((sum, value) => sum + value, 0) / known.length : undefined; + }; + return { + cpu: average(metrics.data.map((item) => item.cpuPercent)), + memory: average(metrics.data.map((item) => item.memoryPercent)), + disk: average(metrics.data.map((item) => item.diskPercent)), + source: "按服务器均值" + }; + } + return { cpu: undefined, memory: undefined, disk: undefined, source: "暂无数据" }; + }, [usage, metrics]); + + return ( +

平台管理员

平台概览

+ + {core.status === "ready" ? "数据已加载" : core.status === "loading" ? "加载中" : "部分模块加载失败"} + +

+ + {core.status === "loading" && } + {core.status === "error" && void refreshCore()} />} + {core.status === "ready" && core.data.instances.length === 0 && ( + } + title="还没有服务器实例" + description="平台尚未创建任何服务器。前往服务器管理创建第一个实例，或检查运行节点是否在线。" + actionLabel="前往服务器管理" + onAction={() => onNavigate("servers")} + /> + )} + + {core.status === "ready" && core.data.instances.length > 0 && ( +

+ 在线服务器 + {onlineCount} +

共 {core.data.instances.length} 个实例

0 ? "metric-tone-warning" : "metric-tone-neutral")}> + 离线 / 未运行 + {offlineCount} +

{core.data.instances.filter((item) => item.state === "failed").length} 个异常

+ 运行节点 + {core.data.endpoints.filter((item) => item.status === "online").length} +

共 {core.data.endpoints.length} 个节点

0 ? "metric-tone-warning" : "metric-tone-success")}> + LLM 连接 + + {providers.status === "ready" ? `${activeProviders} 可用` : providers.status === "loading" ? "…" : "未知"} + +

{errorProviders > 0 ? `${errorProviders} 个提供商异常` : "提供商状态正常"}

+ )} + +

+ 资源负载 +

+ {metricAverages.source} +

+ + + +

+ +

+ 游戏类型分布 +

+ {core.status === "loading" ? ( + + ) : distribution.length === 0 ? ( + + ) : ( +

+ {distribution.map((entry) => ( + + {entry.label}：{entry.count} 个实例 + + ))} +

+ )} +

+ +

+ 最近运营信号 +

+ +

+ {signals.status === "loading" && core.status === "loading" ? ( + + ) : overviewSignals.length === 0 ? ( + + ) : ( +

+ {overviewSignals.map((signal) => ( + + ))} +

+ )} +

+ ); +} diff --git a/platform_web/pages/MaintenancePage.tsx b/platform_web/pages/MaintenancePage.tsx new file mode 100644 index 0000000..e54826e --- /dev/null +++ b/platform_web/pages/MaintenancePage.tsx @@ -0,0 +1,130 @@ +import { Sparkles, WandSparkles } from "lucide-react"; +import { useCallback, useEffect, useState } from "react"; + +import { platformApiClient } from "../api/client"; +import type { AuditEventResponse, RunEndpointResponse } from "../api/types"; +import { EmptyState, ErrorState, LoadingState } from "../components/StateViews"; +import { cx } from "../utils/classes"; + +type ModuleState = { status: "loading" } | { status: "error"; reason: string } | { status: "ready"; data: T }; + +export function MaintenancePage() { + const [endpoints, setEndpoints] = useState>({ status: "loading" }); + const [events, setEvents] = useState>({ status: "loading" }); + + const refreshEndpoints = useCallback(async () => { + setEndpoints({ status: "loading" }); + try { + const response = await platformApiClient.listRunEndpoints(); + setEndpoints({ status: "ready", data: response.items }); + } catch (error) { + setEndpoints({ status: "error", reason: error instanceof Error ? error.message : "加载失败" }); + } + }, []); + + const refreshEvents = useCallback(async () => { + setEvents({ status: "loading" }); + try { + const response = await platformApiClient.listAuditEvents(); + setEvents({ status: "ready", data: response.items }); + } catch (error) { + setEvents({ status: "error", reason: error instanceof Error ? error.message : "加载失败" }); + } + }, []); + + useEffect(() => { + void refreshEndpoints(); + void refreshEvents(); + }, [refreshEndpoints, refreshEvents]); + + return ( +

平台管理员

+ 系统维护 +

+ +

运行节点

+ {endpoints.status === "loading" && } + {endpoints.status === "error" && ( + void refreshEndpoints()} compact /> + )} + {endpoints.status === "ready" && endpoints.data.length === 0 && ( + void refreshEndpoints()} /> + )} + {endpoints.status === "ready" && endpoints.data.length > 0 && ( +

+ {endpoints.data.map((endpoint) => ( +

+ {endpoint.displayName} + {endpoint.id} +

+ + {endpoint.status === "online" ? "在线" : endpoint.status === "offline" ? "离线" : endpoint.status} + + + 任务 {endpoint.capacity.runningJobs}/{endpoint.capacity.maxJobs}（排队 {endpoint.capacity.queuedJobs}） + + 心跳 {new Date(endpoint.lastHeartbeatAt).toLocaleString()} +

+ ))} +

+ )} +

+ +

审计事件

+ {events.status === "loading" && } + {events.status === "error" && ( + void refreshEvents()} compact /> + )} + {events.status === "ready" && events.data.length === 0 && ( + void refreshEvents()} /> + )} + {events.status === "ready" && events.data.length > 0 && ( +

+ {events.data.slice(0, 30).map((event) => ( +

+ {event.summary || `${event.action} ${event.resourceKind}`} + {event.result} +

+ + 事件 {event.id} + + 操作者 {event.actorId} + + 资源 {event.resourceKind}/{event.resourceId} + + {new Date(event.createdAt).toLocaleString()} +

+ ))} +

+ )} +

+ ); +} diff --git a/platform_web/pages/PluginsPage.test.tsx b/platform_web/pages/PluginsPage.test.tsx new file mode 100644 index 0000000..cd921e0 --- /dev/null +++ b/platform_web/pages/PluginsPage.test.tsx @@ -0,0 +1,74 @@ +import { renderToStaticMarkup } from "react-dom/server"; +import { describe, expect, it } from "vitest"; + +import { PluginsPage } from "./PluginsPage"; +import type { MarketplacePluginResponse } from "../api/types"; + +const marketplacePlugin: MarketplacePluginResponse = { + id: "game.example", + name: "Example Server", + description: "Development plugin", + version: "0.1.0", + serverType: "example", + serverDisplayName: "Example Server", + supportedOs: ["linux", "darwin"], + manifestRef: "artifact://manifests/game.example/0.1.0", + createFormSchemaRef: "schemas/create-form.schema.json", + capabilities: ["process.install", "process.start", "logs.read"], + declaredPermissions: ["server.read", "server.logs.read", "ai.invoke"], + permissions: { ai: true, logs: true, files: false, jobs: true, artifacts: false }, + lifecycleActions: { install: "actions/install.json", start: "actions/start.json", stop: "actions/stop.json" }, + bridgeActions: ["server.instances.read", "logs.query", "ai.invoke"], + pages: [{ key: "logs", title: "Logs", path: "/logs", permissions: ["server.logs.read"], bridgeActions: ["logs.query"] }], + tags: ["example"], + aiPurposes: ["logs.diagnose"], + status: "installed", + source: "platform-registry" +}; + +describe("PluginsPage", () => { + it("renders the loading state before API data arrives", () => { + const html = renderToStaticMarkup(); + + expect(html).toContain("插件市场"); + expect(html).toContain("正在加载插件市场"); + }); + + it("renders API error state without falling back in production state", () => { + const html = renderToStaticMarkup(); + + expect(html).toContain("插件市场加载失败"); + expect(html).toContain("backend unavailable"); + expect(html).not.toContain("本地演示数据仅用于前端开发"); + }); + + it("renders API-backed plugin detail and state actions without unsafe fragments", () => { + const html = renderToStaticMarkup( + + ); + + expect(html).toContain("Example Server"); + expect(html).toContain("平台 API"); + expect(html).toContain("logs.query"); + expect(html).toContain("logs.diagnose"); + expect(html).toContain("安装"); + expect(html).toContain("启用"); + expect(html).toContain("停用"); + expect(html).not.toContain("billing"); + expect(html).not.toContain("/Users/"); + expect(html).not.toContain("unix://"); + expect(html).not.toContain("Bearer "); + expect(html).not.toContain("sk-"); + expect(html).not.toContain("password="); + expect(html).not.toContain("apiKeyRef"); + }); + + it("keeps standalone fallback visibly isolated", () => { + const html = renderToStaticMarkup( + + ); + + expect(html).toContain("本地演示数据"); + expect(html).toContain("本地演示数据仅用于前端开发"); + }); +}); diff --git a/platform_web/pages/PluginsPage.tsx b/platform_web/pages/PluginsPage.tsx new file mode 100644 index 0000000..8a3b331 --- /dev/null +++ b/platform_web/pages/PluginsPage.tsx @@ -0,0 +1,386 @@ +import { Boxes, Eye, Filter, PlugZap, Search, Sparkles } from "lucide-react"; +import { type ChangeEvent, useCallback, useEffect, useMemo, useState } from "react"; + +import { platformApiClient } from "../api/client"; +import type { GamePluginStatus, MarketplacePluginFilterRequest, MarketplacePluginResponse, MarketplacePluginStateAction } from "../api/types"; +import { EmptyState, ErrorState, LoadingState, ResultBadge } from "../components/StateViews"; +import { PageFrame } from "../components/PageFrame"; +import type { PageComponentProps } from "../contracts/page"; +import { pluginCatalog } from "../contracts/shell"; +import { cx } from "../utils/classes"; + +type ListState = "loading" | "ready" | "error"; +type StatusFilter = GamePluginStatus | "all"; + +interface PluginsPageInitialState { + listState?: ListState; + listError?: string; + plugins?: MarketplacePluginResponse[]; + selectedId?: string; + detail?: MarketplacePluginResponse | null; + usingFallback?: boolean; + actionResult?: { status: "succeeded" | "failed"; label: string } | null; +} + +interface PluginsPageProps extends Partial { + initialState?: PluginsPageInitialState; +} + +const statusFilters: Array<{ id: StatusFilter; label: string }> = [ + { id: "all", label: "全部" }, + { id: "installed", label: "已安装" }, + { id: "disabled", label: "停用" }, + { id: "invalid", label: "异常" }, + { id: "updating", label: "更新中" } +]; + +export function PluginsPage({ initialState }: PluginsPageProps = {}) { + const [listState, setListState] = useState(initialState?.listState ?? "loading"); + const [listError, setListError] = useState(initialState?.listError ?? ""); + const [plugins, setPlugins] = useState(initialState?.plugins ?? []); + const [selectedId, setSelectedId] = useState(initialState?.selectedId ?? ""); + const [detail, setDetail] = useState(initialState?.detail ?? null); + const [detailPending, setDetailPending] = useState(false); + const [detailError, setDetailError] = useState(""); + const [keyword, setKeyword] = useState(""); + const [statusFilter, setStatusFilter] = useState("all"); + const [serverType, setServerType] = useState(""); + const [capability, setCapability] = useState(""); + const [actionPending, setActionPending] = useState(null); + const [actionResult, setActionResult] = useState<{ status: "succeeded" | "failed"; label: string } | null>(initialState?.actionResult ?? null); + const [usingFallback, setUsingFallback] = useState(initialState?.usingFallback ?? false); + + const refresh = useCallback(async () => { + setListState("loading"); + setListError(""); + const filter: MarketplacePluginFilterRequest = { + keyword: keyword.trim() || undefined, + status: statusFilter, + serverType: serverType.trim() || undefined, + capability: capability.trim() || undefined + }; + try { + const response = await platformApiClient.listMarketplacePlugins(filter); + setPlugins(response.items); + setSelectedId((current) => (current && response.items.some((plugin) => plugin.id === current) ? current : response.items[0]?.id || "")); + setUsingFallback(false); + setListState("ready"); + } catch (error) { + if (import.meta.env.DEV) { + const fallback = fallbackMarketplacePlugins(filter); + setPlugins(fallback); + setSelectedId((current) => (current && fallback.some((plugin) => plugin.id === current) ? current : fallback[0]?.id || "")); + setUsingFallback(true); + setListState("ready"); + setListError(""); + return; + } + setListState("error"); + setListError(error instanceof Error ? error.message : "插件市场加载失败"); + setPlugins([]); + setDetail(null); + } + }, [capability, keyword, serverType, statusFilter]); + + useEffect(() => { + void refresh(); + }, [refresh]); + + useEffect(() => { + if (!selectedId) { + setDetail(null); + setDetailError(""); + return; + } + const selectedSummary = plugins.find((plugin) => plugin.id === selectedId) ?? null; + if (usingFallback) { + setDetail(selectedSummary); + setDetailError(""); + return; + } + setDetailPending(true); + setDetailError(""); + platformApiClient + .getMarketplacePlugin(selectedId) + .then((plugin) => setDetail(plugin)) + .catch((error: unknown) => { + setDetail(selectedSummary); + setDetailError(error instanceof Error ? error.message : "插件详情加载失败"); + }) + .finally(() => setDetailPending(false)); + }, [plugins, selectedId, usingFallback]); + + const serverTypes = useMemo(() => unique(plugins.map((plugin) => plugin.serverType)), [plugins]); + const capabilities = useMemo(() => unique(plugins.flatMap((plugin) => [...plugin.capabilities, ...plugin.bridgeActions])), [plugins]); + const installedCount = plugins.filter((plugin) => plugin.status === "installed").length; + const bridgeActionCount = plugins.reduce((sum, plugin) => sum + plugin.bridgeActions.length, 0); + const invalidCount = plugins.filter((plugin) => plugin.status === "invalid").length; + + function updateSelect(event: ChangeEvent) { + const { name, value } = event.target; + if (name === "serverType") { + setServerType(value); + } else if (name === "capability") { + setCapability(value); + } + } + + async function changeState(action: MarketplacePluginStateAction) { + if (!detail || usingFallback) { + return; + } + setActionPending(action); + setActionResult(null); + try { + const updated = await platformApiClient.setMarketplacePluginState(detail.id, { action }); + setDetail(updated); + setPlugins((current) => current.map((plugin) => (plugin.id === updated.id ? updated : plugin))); + setActionResult({ status: "succeeded", label: `${updated.name} 已${stateActionLabel(action)}` }); + } catch (error) { + setActionResult({ status: "failed", label: error instanceof Error ? error.message : "状态更新失败" }); + } finally { + setActionPending(null); + } + } + + return ( +

+ 0 ? "warning" : "success" } + ]} + /> + + + +

+ + {usingFallback && } + {actionResult && } + + {listState === "loading" && } + {listState === "error" && void refresh()} />} + {listState === "ready" && plugins.length === 0 && ( + } title="暂无匹配插件" description="调整搜索、状态、服务器类型或能力筛选后再试。" actionLabel="清除筛选" onAction={() => { + setKeyword(""); + setStatusFilter("all"); + setServerType(""); + setCapability(""); + }} /> + )} + + {plugins.length > 0 && ( +

+ {plugins.map((plugin) => ( +

{plugin.name}

+ {plugin.id} +

+ {statusLabel(plugin.status)} +

{plugin.description || plugin.serverDisplayName || plugin.serverType}

版本: {plugin.version}
服务器类型: {plugin.serverType}
能力: {plugin.capabilities.slice(0, 3).join(", ") || "--"}
桥接: {plugin.bridgeActions.slice(0, 3).join(", ") || "--"}

+ +

+ ))} +

+ )} + + {selectedId && ( +

+ {detailPending && } + {detailError && } + {detail && void changeState(action)} />} +

+ )} +

+ ); +} + +interface PluginDetailProps { + plugin: MarketplacePluginResponse; + actionPending: MarketplacePluginStateAction | null; + actionsDisabled: boolean; + onAction: (action: MarketplacePluginStateAction) => void; +} + +function PluginDetail({ plugin, actionPending, actionsDisabled, onAction }: PluginDetailProps) { + return ( +

{plugin.name}

+ {plugin.manifestRef} +

+ {statusLabel(plugin.status)} +

+ + + + +

能力: {plugin.capabilities.join(", ") || "--"}
桥接动作: {plugin.bridgeActions.join(", ") || "--"}
插件页面: {plugin.pages.map((page) => `${page.title}(${page.key})`).join(", ") || "--"}
校验: {plugin.validationViolations?.length ? plugin.validationViolations.join(", ") : "manifest validated"}

+ + + +

+ ); +} + +function DetailStat({ label, value }: { label: string; value: string }) { + return ( + + {label} + {value} + + ); +} + +function fallbackMarketplacePlugins(filter: MarketplacePluginFilterRequest): MarketplacePluginResponse[] { + const keyword = filter.keyword?.trim().toLowerCase() ?? ""; + return pluginCatalog + .map((plugin) => ({ + id: plugin.id, + name: plugin.name, + description: plugin.validation, + version: plugin.version, + serverType: plugin.serverType, + serverDisplayName: plugin.serverType, + supportedOs: ["linux"], + manifestRef: `manifest://${plugin.id}/${plugin.version}`, + createFormSchemaRef: "schemas/create-form.schema.json", + capabilities: ["process.install", "process.start", "logs.read"], + declaredPermissions: plugin.permissions, + permissions: { + ai: plugin.permissions.includes("ai.invoke"), + logs: plugin.permissions.includes("server.logs.read"), + files: plugin.permissions.some((permission) => permission.includes("files")), + jobs: plugin.permissions.includes("server.lifecycle"), + artifacts: plugin.permissions.some((permission) => permission.includes("artifacts")) + }, + lifecycleActions: { install: "actions/install.json", start: "actions/start.json", stop: "actions/stop.json" }, + bridgeActions: plugin.bridgeActions, + pages: [{ key: "overview", title: "Overview", path: "/overview", permissions: plugin.permissions, bridgeActions: plugin.bridgeActions }], + tags: [plugin.serverType], + aiPurposes: plugin.permissions.includes("ai.invoke") ? ["logs.diagnose"] : [], + validationViolations: plugin.status === "invalid" ? [plugin.validation] : undefined, + status: plugin.status, + source: "local-development" + })) + .filter((plugin) => !filter.status || filter.status === "all" || plugin.status === filter.status) + .filter((plugin) => !filter.serverType || plugin.serverType === filter.serverType) + .filter((plugin) => !filter.capability || plugin.capabilities.includes(filter.capability) || plugin.bridgeActions.includes(filter.capability)) + .filter((plugin) => !keyword || [plugin.id, plugin.name, plugin.serverType, ...plugin.tags, ...plugin.capabilities].some((value) => value.toLowerCase().includes(keyword))); +} + +function unique(values: string[]): string[] { + return Array.from(new Set(values.filter(Boolean))).sort((left, right) => left.localeCompare(right)); +} + +function statusClass(status: GamePluginStatus): string { + if (status === "installed") { + return "status-active"; + } + if (status === "invalid") { + return "status-error"; + } + return "status-disabled"; +} + +function statusLabel(status: string): string { + return status === "installed" ? "已安装" : status === "disabled" ? "停用" : status === "invalid" ? "异常" : status === "updating" ? "更新中" : status; +} + +function stateActionLabel(action: MarketplacePluginStateAction): string { + return action === "disable" ? "停用" : "启用"; +} diff --git a/platform_web/pages/ProfileSettingsPage.tsx b/platform_web/pages/ProfileSettingsPage.tsx new file mode 100644 index 0000000..a9953d2 --- /dev/null +++ b/platform_web/pages/ProfileSettingsPage.tsx @@ -0,0 +1,249 @@ +import { ArrowLeft, LogOut, MoonStar, Palette, Sparkles, Upload, UserRoundPen, X } from "lucide-react"; +import { type ChangeEvent, type FormEvent, useEffect, useMemo, useState } from "react"; + +import type { PageComponentProps } from "../contracts/page"; +import { defaultPageForUser } from "../routes/routes"; +import { + applyBackgroundImage, + applyThemeBackgroundPreset, + applyThemePalette, + loadThemeState, + persistBackgroundImage, + persistThemeBackgroundPreset, + persistThemePalette, + themeBackgroundPresets, + themePalettes, + type ThemeBackgroundId, + type ThemePaletteId, + type WorkspaceThemeState +} from "../theme/tokens"; +import { cx } from "../utils/classes"; +import { PageFrame } from "../components/PageFrame"; +import { ResultBadge } from "../components/StateViews"; + +type SaveState = { status: "pending" | "succeeded" | "failed"; label: string }; + +export function ProfileSettingsPage({ session, onNavigate, onLogout, onProfileSave, onThemePreferenceSave }: PageComponentProps) { + const [themeState, setThemeState] = useState(() => loadThemeState()); + const [profileResult, setProfileResult] = useState(); + const [themeResult, setThemeResult] = useState(); + const [profileDraft, setProfileDraft] = useState({ + displayName: session.displayName, + avatarUrl: session.profile.avatarUrl ?? "", + phone: session.profile.phone ?? "", + qq: session.profile.qq ?? "", + contactNote: session.profile.contactNote ?? "" + }); + + useEffect(() => { + setProfileDraft({ + displayName: session.displayName, + avatarUrl: session.profile.avatarUrl ?? "", + phone: session.profile.phone ?? "", + qq: session.profile.qq ?? "", + contactNote: session.profile.contactNote ?? "" + }); + }, [session]); + + const activePalette = useMemo(() => themePalettes.find((palette) => palette.id === themeState.paletteId) ?? themePalettes[0], [themeState.paletteId]); + const activeBackground = useMemo(() => themeBackgroundPresets.find((preset) => preset.id === themeState.backgroundPresetId) ?? themeBackgroundPresets[0], [themeState.backgroundPresetId]); + + async function saveProfile(event: FormEvent) { + event.preventDefault(); + setProfileResult({ status: "pending", label: "正在保存个人资料" }); + try { + const saved = await onProfileSave({ + displayName: profileDraft.displayName.trim(), + avatarUrl: profileDraft.avatarUrl.trim(), + phone: profileDraft.phone.trim(), + qq: profileDraft.qq.trim(), + contactNote: profileDraft.contactNote.trim() + }); + setProfileResult({ status: saved.source === "api" ? "succeeded" : "failed", label: saved.source === "api" ? "个人资料已保存到数据库" : "个人资料 API 暂不可用，已保留在本地会话" }); + } catch (error) { + setProfileResult({ status: "failed", label: error instanceof Error ? error.message : "个人资料保存失败" }); + } + } + + async function persistThemePreference(nextState: WorkspaceThemeState) { + setThemeResult({ status: "pending", label: "正在保存界面偏好" }); + try { + const response = await onThemePreferenceSave({ + paletteId: nextState.paletteId, + backgroundPresetId: nextState.backgroundPresetId, + backgroundImage: nextState.backgroundImage + }); + setThemeResult({ status: response.persistence === "api" ? "succeeded" : "failed", label: response.persistence === "api" ? "界面偏好已保存到数据库" : "界面偏好 API 暂不可用，已本地保存" }); + } catch (error) { + setThemeResult({ status: "failed", label: error instanceof Error ? error.message : "界面偏好保存失败" }); + } + } + + function selectPalette(paletteId: ThemePaletteId) { + applyThemePalette(paletteId); + persistThemePalette(paletteId); + setThemeState((current) => { + const nextState = { ...current, paletteId }; + void persistThemePreference(nextState); + return nextState; + }); + } + + function selectBackgroundPreset(backgroundPresetId: ThemeBackgroundId) { + applyThemeBackgroundPreset(backgroundPresetId); + persistThemeBackgroundPreset(backgroundPresetId); + setThemeState((current) => { + const nextState = { ...current, backgroundPresetId }; + void persistThemePreference(nextState); + return nextState; + }); + } + + function handleBackgroundUpload(event: ChangeEvent) { + const file = event.target.files?.[0]; + event.target.value = ""; + if (!file) { + return; + } + const reader = new FileReader(); + reader.onload = () => { + const dataUrl = typeof reader.result === "string" ? reader.result : null; + applyBackgroundImage(dataUrl); + persistBackgroundImage(dataUrl); + setThemeState((current) => { + const nextState = { ...current, backgroundImage: dataUrl }; + void persistThemePreference(nextState); + return nextState; + }); + }; + reader.readAsDataURL(file); + } + + function clearBackground() { + applyBackgroundImage(null); + persistBackgroundImage(null); + setThemeState((current) => { + const nextState = { ...current, backgroundImage: null }; + void persistThemePreference(nextState); + return nextState; + }); + } + + return ( +

+ + +

+ +

{profileDraft.displayName || session.displayName}

{session.email ?? session.id}

+ {session.status} +

+ + +

+ +

个人资料

+ {profileResult && } +

+ + 昵称 + setProfileDraft((current) => ({ ...current, displayName: event.target.value }))} /> + + + 头像 URL + setProfileDraft((current) => ({ ...current, avatarUrl: event.target.value }))} /> + +

+ + 手机号 + setProfileDraft((current) => ({ ...current, phone: event.target.value }))} /> + + + QQ + setProfileDraft((current) => ({ ...current, qq: event.target.value }))} /> + +

+ + 联系方式备注 +

setProfileDraft((current) => ({ ...current, contactNote: event.target.value }))} />
+          </label>
+          <button type="submit" className="profile-save-button">
+            <Sparkles size={14} />
+            <span>保存资料</span>
+          </button>
+        </form>
+
+        <section className="console-panel profile-settings-form" aria-label="theme preferences">
+          <div className="panel-header">
+            <h2>界面偏好</h2>
+            {themeResult && <ResultBadge status={themeResult.status} label={themeResult.label} />}
+          </div>
+          <div className="profile-panel-title">
+            <Palette size={15} />
+            <strong>主题配色</strong>
+          </div>
+          <div className="palette-grid profile-palette-grid">
+            {themePalettes.map((palette) => (
+              <button key={palette.id} type="button" className={cx("palette-option", palette.id === themeState.paletteId && "palette-option-active")} aria-pressed={palette.id === themeState.paletteId} title={palette.summary} onClick={() => selectPalette(palette.id)}>
+                <span className="palette-swatch-row" aria-hidden="true">
+                  {palette.swatches.map((swatch) => (
+                    <span key={swatch} style={{ background: swatch }} />
+                  ))}
+                </span>
+                <span className="palette-option-label">{palette.id === themeState.paletteId ? <Sparkles size={13} /> : <MoonStar size={13} />}{palette.label}</span>
+              </button>
+            ))}
+          </div>
+          <div className="profile-panel-title">
+            <MoonStar size={15} />
+            <strong>背景桌面</strong>
+          </div>
+          <div className="background-preset-grid profile-background-grid">
+            {themeBackgroundPresets.map((preset) => (
+              <button key={preset.id} type="button" className={cx("background-preset-option", preset.id === themeState.backgroundPresetId && "background-preset-option-active")} aria-pressed={preset.id === themeState.backgroundPresetId} title={themeState.backgroundImage ? `${preset.summary}，移除上传背景后显示` : preset.summary} onClick={() => selectBackgroundPreset(preset.id)}>
+                <span className="background-preset-preview" style={{ background: preset.preview }} aria-hidden="true" />
+                <span className="background-preset-label">{preset.id === themeState.backgroundPresetId ? <Sparkles size={13} /> : <MoonStar size={13} />}{preset.label}</span>
+              </button>
+            ))}
+          </div>
+          <div className="theme-background-actions">
+            <label className="theme-upload" title="上传自定义背景桌面">
+              <Upload size={14} />
+              <span>上传背景</span>
+              <input type="file" accept="image/*" style={{ display: "none" }} onChange={handleBackgroundUpload} />
+            </label>
+            {themeState.backgroundImage && (
+              <button type="button" className="theme-upload" title="移除自定义背景" onClick={clearBackground}>
+                <X size={14} />
+                <span>移除背景</span>
+              </button>
+            )}
+          </div>
+          <span className="theme-background-note">{themeState.backgroundImage ? "自定义上传背景正在显示，预设会作为移除后的备用桌面。" : "当前使用内置背景桌面。"}</span>
+        </section>
+      </section>
+    </div>
+  );
+}
diff --git a/platform_web/pages/README.md b/platform_web/pages/README.md
new file mode 100644
index 0000000..8d110d2
--- /dev/null
+++ b/platform_web/pages/README.md
@@ -0,0 +1,25 @@
+# platform_web/pages
+
+First-party page implementations live here after routes and contracts are defined.
+
+Required page groups:
+
+- `home`
+- `servers`
+- `plugins`
+- `users`
+- `ai-providers`
+- `plugin-pages`
+
+Do not put shared API clients, shared DTOs, route definitions, or bridge contracts in page files.
+
+## Visual Rules
+
+Pages must use the shared black-mecha / magical-girl visual system from `../theme/` instead of page-local card systems or unrelated palettes.
+
+- Reuse shared shell, card, panel, table, drawer, dialog, status, command, log, diff, plugin group, and operation history classes from `theme/base.css`.
+- Keep page surfaces translucent enough for the selected built-in or uploaded background desktop to remain visible.
+- Ambient magical particles are global shell chrome. Pages must not add fixed decorative sparkles, hearts, moons, snowflakes, sigils, or custom backdrop layers.
+- Do not introduce opaque white cards, heavy dark dashboards, stock marketing layouts, or single-page custom gradients that bypass the theme tokens.
+- Preserve text/icons for status and operation results; do not rely on color-only cues.
+- Read `../theme/README.md` before adding a new page surface pattern.
diff --git a/platform_web/pages/ServerDetailPage.test.tsx b/platform_web/pages/ServerDetailPage.test.tsx
new file mode 100644
index 0000000..4ff6aeb
--- /dev/null
+++ b/platform_web/pages/ServerDetailPage.test.tsx
@@ -0,0 +1,86 @@
+import { describe, expect, it } from "vitest";
+
+import { configDiffViewFromPreview } from "./ServerDetailPage";
+import serverDetailPageSource from "./ServerDetailPage.tsx?raw";
+import type { ServerConfigDiffPreviewResponse } from "../api/types";
+
+const preview: ServerConfigDiffPreviewResponse = {
+  serverInstanceId: "server-1",
+  configVersion: 7,
+  key: "server.properties",
+  currentContent: "max-players=20\npvp=true\n",
+  proposedContent: "max-players=40\npvp=true\n",
+  diff: [
+    { kind: "removed", oldNumber: 1, content: "max-players=20" },
+    { kind: "added", newNumber: 1, content: "max-players=40" },
+    { kind: "context", oldNumber: 2, newNumber: 2, content: "pvp=true" }
+  ],
+  hasChanges: true,
+  source: "platform-review",
+  reviewedAt: "2026-07-06T00:00:00Z"
+};
+
+describe("ServerDetailPage config write approval", () => {
+  it("maps platform diff preview responses into the display diff without losing approval metadata", () => {
+    const view = configDiffViewFromPreview(preview);
+
+    expect(view).toMatchObject({
+      serverInstanceId: "server-1",
+      configVersion: 7,
+      key: "server.properties",
+      source: "platform-review",
+      summary: "+1 / -1 行变更",
+      nextContent: "max-players=40\npvp=true\n"
+    });
+    expect(view.lines).toEqual([
+      { kind: "removed", text: "max-players=20" },
+      { kind: "added", text: "max-players=40" },
+      { kind: "same", text: "pvp=true" }
+    ]);
+  });
+
+  it("uses config preview and approval APIs instead of generic config.write job creation", () => {
+    expect(serverDetailPageSource).toContain("previewServerConfigDiff");
+    expect(serverDetailPageSource).toContain("approveServerConfigWrite");
+    expect(serverDetailPageSource).not.toContain('capability: "config.write"');
+  });
+
+  it("does not locally mutate visible config after dispatching approval jobs", () => {
+    expect(serverDetailPageSource).not.toContain("setCurrentConfig(suggestion.diff.nextContent)");
+    expect(serverDetailPageSource).not.toContain("content: diff.nextContent");
+  });
+
+  it("uses platform-mediated artifact download and bridge references without backend internals", () => {
+    expect(serverDetailPageSource).toContain("openArtifactDownload");
+    expect(serverDetailPageSource).toContain("readArtifactContent");
+    expect(serverDetailPageSource).toContain("parsePluginArtifactReference");
+    expect(serverDetailPageSource).toContain("浏览器制品传输");
+    expect(serverDetailPageSource).not.toContain("storage://");
+    expect(serverDetailPageSource).not.toContain("unix://");
+    expect(serverDetailPageSource).not.toContain("Bearer ");
+  });
+
+  it("routes plugin lifecycle controls through platform lifecycle APIs instead of generic jobs", () => {
+    expect(serverDetailPageSource).toContain('action === "install" || action === "restart" || action === "status"');
+    expect(serverDetailPageSource).toContain('action !== "start" && action !== "stop"');
+    expect(serverDetailPageSource).toContain('control.lifecycleAction === "start" || control.lifecycleAction === "stop"');
+    expect(serverDetailPageSource).toContain("platformApiClient.startServerInstance(instance.id");
+    expect(serverDetailPageSource).toContain("platformApiClient.stopServerInstance(instance.id");
+    expect(serverDetailPageSource).toContain("serverLifecycleCommandRequest(instance, \"start\")");
+    expect(serverDetailPageSource).toContain("serverLifecycleCommandRequest(instance, \"stop\")");
+    expect(serverDetailPageSource).not.toContain('capability: "process.start"');
+    expect(serverDetailPageSource).not.toContain('capability: "process.stop"');
+  });
+
+  it("keeps plugin lifecycle and bridge-visible output on platform-owned logical references", () => {
+    expect(serverDetailPageSource).toContain("parsePluginArtifactReference(result)");
+    expect(serverDetailPageSource).toContain("platformApiClient.openArtifactDownload(artifact.id)");
+    expect(serverDetailPageSource).toContain("platformApiClient.readArtifactContent(reference.artifactId");
+    expect(serverDetailPageSource).toContain("replace(/Bearer\\s+[^\\s]+/gi, \"[token]\")");
+    expect(serverDetailPageSource).toContain("replace(/sk-[A-Za-z0-9_-]+/g, \"[secret]\")");
+    expect(serverDetailPageSource).not.toContain("storage://bucket");
+    expect(serverDetailPageSource).not.toContain("runSocket");
+    expect(serverDetailPageSource).not.toContain("rawApiKey");
+    expect(serverDetailPageSource).not.toContain("apiKeyRef");
+  });
+});
diff --git a/platform_web/pages/ServerDetailPage.tsx b/platform_web/pages/ServerDetailPage.tsx
new file mode 100644
index 0000000..ce555d9
--- /dev/null
+++ b/platform_web/pages/ServerDetailPage.tsx
@@ -0,0 +1,1544 @@
+import { ChevronDown, ChevronRight, Download, MoonStar, PackageOpen, ShieldCheck, Sparkles, Square, UserRoundMinus, UserRoundPlus, WandSparkles } from "lucide-react";
+import { type FormEvent, useCallback, useEffect, useMemo, useState } from "react";
+
+import { platformApiClient } from "../api/client";
+import type {
+  ConfigDiffLineResponse,
+  ArtifactDownloadReferenceResponse,
+  ArtifactResponse,
+  GamePluginResponse,
+  JobResponse,
+  LogEntryBody,
+  LogStreamResponse,
+  ServerConfigDiffPreviewResponse,
+  ServerConfigResponse,
+  ServerInstanceResponse,
+  ServerMemberResponse,
+  ServerMetricsResponse
+} from "../api/types";
+import { ConfirmDialog, DiffView, UsageMeter } from "../components/OperationControls";
+import { DiagnosticSummary, EmptyState, ErrorState, LoadingState, ResultBadge } from "../components/StateViews";
+import type { PageComponentProps } from "../contracts/page";
+import type { PluginBridgeAction, PluginBridgeManifestContract } from "../contracts/pluginBridge";
+import { canStartServer, canStopServer, pluginLabel } from "../contracts/serverManagement";
+import {
+  serverDetailSections,
+  serverIsOnline,
+  type ConfigDiffView,
+  type LlmSuggestionView,
+  type PluginControlDescriptor,
+  type PluginControlGroupView,
+  type ServerDetailSection
+} from "../contracts/workspace";
+import { serverLifecycleCommandRequest } from "../schemas/serverManagement";
+import { buildConfigDiff, diffHasChanges } from "../utils/diff";
+import { createPluginBridgeDispatcher, createPluginBridgeHostContext, parsePluginArtifactReference } from "../utils/pluginBridgeHost";
+import { cx } from "../utils/classes";
+import { stateLabel, statusClass } from "./ServersPage";
+
+type LoadState<T> = { status: "loading" } | { status: "error"; reason: string } | { status: "ready"; data: T };
+
+const fallbackConfig = "# server.properties\nmax-players=20\nmotd=Welcome to the server\npvp=true\nview-distance=8\n";
+const defaultConfigKey = "server.properties";
+
+export function ServerDetailPage({ session, params, operations, onNavigate }: PageComponentProps) {
+  const serverId = params.serverId ?? "";
+  const [section, setSection] = useState<ServerDetailSection>("overview");
+  const [instance, setInstance] = useState<LoadState<ServerInstanceResponse>>({ status: "loading" });
+  const [metrics, setMetrics] = useState<ServerMetricsResponse | null>(null);
+  const [plugins, setPlugins] = useState<GamePluginResponse[]>([]);
+  const [jobs, setJobs] = useState<JobResponse[]>([]);
+  const [artifacts, setArtifacts] = useState<ArtifactResponse[]>([]);
+  const [confirm, setConfirm] = useState<null | { title: string; description: string; danger?: boolean; run: () => Promise<void> }>(null);
+  const [confirmBusy, setConfirmBusy] = useState(false);
+
+  const refresh = useCallback(async () => {
+    if (!serverId) {
+      setInstance({ status: "error", reason: "缺少服务器 ID" });
+      return;
+    }
+    setInstance({ status: "loading" });
+    try {
+      const [detail, pluginResponse, jobResponse] = await Promise.all([
+        platformApiClient.getServerInstance(serverId),
+        platformApiClient.listGamePlugins(),
+        platformApiClient.listJobs(serverId)
+      ]);
+      setInstance({ status: "ready", data: detail });
+      setPlugins(pluginResponse.items);
+      setJobs(jobResponse.items);
+      const artifactLists = await Promise.all(
+        jobResponse.items.slice(0, 20).map((job) =>
+          platformApiClient
+            .listArtifacts({ ownerKind: "job", ownerId: job.id, state: "available" })
+            .then((response) => response.items)
+            .catch(() => [] as ArtifactResponse[])
+        )
+      );
+      setArtifacts(uniqueArtifacts(artifactLists.flat()));
+    } catch (error) {
+      setInstance({ status: "error", reason: error instanceof Error ? error.message : "加载失败" });
+      setArtifacts([]);
+    }
+    try {
+      const metricsResponse = await platformApiClient.listServerMetrics();
+      setMetrics(metricsResponse.items.find((item) => item.serverInstanceId === serverId) ?? null);
+    } catch {
+      setMetrics(null);
+    }
+  }, [serverId]);
+
+  useEffect(() => {
+    void refresh();
+  }, [refresh]);
+
+  const serverOperations = useMemo(
+    () => operations.operations.filter((operation) => operation.targetId === serverId || operation.targetId.startsWith(`${serverId}:`)),
+    [operations.operations, serverId]
+  );
+
+  function requestLifecycle(current: ServerInstanceResponse, action: "start" | "stop") {
+    setConfirm({
+      title: action === "start" ? "启动服务器" : "停止服务器",
+      description:
+        action === "start"
+          ? `确认启动服务器 ${current.name}（${current.id}）？`
+          : `停止服务器 ${current.name}（${current.id}）会断开所有在线玩家，确认继续？`,
+      danger: action === "stop",
+      run: async () => {
+        const operationId = operations.begin({
+          intent: action === "start" ? "启动服务器" : "停止服务器",
+          targetKind: "server",
+          targetId: current.id,
+          requester: session.displayName
+        });
+        try {
+          const result =
+            action === "start"
+              ? await platformApiClient.startServerInstance(current.id, serverLifecycleCommandRequest(current, "start"))
+              : await platformApiClient.stopServerInstance(current.id, serverLifecycleCommandRequest(current, "stop"));
+          operations.succeed(operationId, `任务 ${result.job.id}（${result.job.capability}）已派发`, result.job);
+          await refresh();
+        } catch (error) {
+          operations.fail(operationId, error instanceof Error ? error.message : "操作失败", operationId);
+        }
+      }
+    });
+  }
+
+  if (!serverId) {
+    return (
+      <EmptyState title="未选择服务器" description="请从服务器列表进入详情页。" actionLabel="返回服务器列表" onAction={() => onNavigate("servers")} />
+    );
+  }
+
+  return (
+    <section className="server-detail-page" aria-labelledby="server-detail-title">
+      <div className="action-strip">
+        <button type="button" className="icon-command" onClick={() => onNavigate("servers")}>
+          <MoonStar size={16} />
+          <span>返回列表</span>
+        </button>
+        <button type="button" className="icon-command" onClick={() => void refresh()}>
+          <Sparkles size={16} />
+          <span>刷新</span>
+        </button>
+      </div>
+
+      {instance.status === "loading" && <LoadingState label="正在加载服务器详情…" />}
+      {instance.status === "error" && (
+        <ErrorState title="服务器详情加载失败" reason={instance.reason} diagnosticId={`server-detail:${serverId}`} onRetry={() => void refresh()} />
+      )}
+
+      {instance.status !== "ready" && (
+        <nav className="section-tabs" aria-label="server sections">
+          {serverDetailSections.map((entry) => (
+            <button
+              key={entry.id}
+              type="button"
+              className={cx("section-tab", section === entry.id && "section-tab-active")}
+              aria-current={section === entry.id ? "page" : undefined}
+              onClick={() => setSection(entry.id)}
+            >
+              {entry.label}
+            </button>
+          ))}
+        </nav>
+      )}
+
+      {instance.status === "ready" && (
+        <>
+          <header className="server-detail-header">
+            <div className="server-detail-title-row">
+              <div>
+                <h1 id="server-detail-title">{instance.data.name}</h1>
+                <span className="provider-id">
+                  {instance.data.id} · 插件 {instance.data.pluginId}@{instance.data.pluginVersion} · 节点 {instance.data.runEndpointId}
+                </span>
+              </div>
+              <div className="action-strip">
+                <span className={cx("status-pill", statusClass(instance.data.state))}>{stateLabel(instance.data.state)}</span>
+                <button
+                  type="button"
+                  className="icon-command"
+                  disabled={!canStartServer(instance.data.state) || operations.isPending(instance.data.id, "启动服务器")}
+                  onClick={() => requestLifecycle(instance.data, "start")}
+                >
+                  <WandSparkles size={15} />
+                  <span>启动</span>
+                </button>
+                <button
+                  type="button"
+                  className="icon-command danger-command"
+                  disabled={!canStopServer(instance.data.state) || operations.isPending(instance.data.id, "停止服务器")}
+                  onClick={() => requestLifecycle(instance.data, "stop")}
+                >
+                  <Square size={15} />
+                  <span>停止</span>
+                </button>
+              </div>
+            </div>
+            <div className="server-detail-stat-strip">
+              <HeaderStat label="状态" value={serverIsOnline(instance.data.state) ? "在线" : "离线"} />
+              <HeaderStat label="玩家" value={metrics?.playerCount !== undefined ? `${metrics.playerCount}${metrics.maxPlayers ? `/${metrics.maxPlayers}` : ""}` : "--"} />
+              <HeaderStat label="TPS" value={metrics?.tps !== undefined ? metrics.tps.toFixed(1) : "--"} />
+              <HeaderStat label="延迟" value={metrics?.latencyMs !== undefined ? `${Math.round(metrics.latencyMs)}ms` : "--"} />
+              <HeaderStat label="CPU" value={metrics?.cpuPercent !== undefined ? `${Math.round(metrics.cpuPercent)}%` : "--"} />
+              <HeaderStat label="内存" value={metrics?.memoryPercent !== undefined ? `${Math.round(metrics.memoryPercent)}%` : "--"} />
+              <HeaderStat label="磁盘" value={metrics?.diskPercent !== undefined ? `${Math.round(metrics.diskPercent)}%` : "--"} />
+            </div>
+          </header>
+
+          <nav className="section-tabs" aria-label="server sections">
+            {serverDetailSections.map((entry) => (
+              <button
+                key={entry.id}
+                type="button"
+                className={cx("section-tab", section === entry.id && "section-tab-active")}
+                aria-current={section === entry.id ? "page" : undefined}
+                onClick={() => setSection(entry.id)}
+              >
+                {entry.label}
+              </button>
+            ))}
+          </nav>
+
+          {section === "overview" && <OverviewSection instance={instance.data} metrics={metrics} jobs={jobs} onOpenLogs={() => setSection("logs")} />}
+          {section === "overview" && <ServerAdministratorsSection instance={instance.data} session={session} onChanged={(next) => setInstance({ status: "ready", data: next })} />}
+          {section === "logs" && <LogsSection serverId={serverId} />}
+          {section === "config" && <ConfigSection serverId={serverId} instance={instance.data} session={session} operations={operations} />}
+          {section === "plugins" && <PluginControlsSection serverId={serverId} instance={instance.data} plugins={plugins} artifacts={artifacts} session={session} operations={operations} />}
+          {section === "llm" && <LlmSection serverId={serverId} instance={instance.data} session={session} operations={operations} />}
+          {section === "history" && <HistorySection serverId={serverId} serverOperations={serverOperations} jobs={jobs} artifacts={artifacts} />}
+        </>
+      )}
+
+      <ConfirmDialog
+        open={confirm !== null}
+        title={confirm?.title ?? ""}
+        description={confirm?.description ?? ""}
+        confirmLabel="确认执行"
+        danger={confirm?.danger}
+        busy={confirmBusy}
+        onCancel={() => setConfirm(null)}
+        onConfirm={() => {
+          if (!confirm) {
+            return;
+          }
+          setConfirmBusy(true);
+          void confirm.run().finally(() => {
+            setConfirmBusy(false);
+            setConfirm(null);
+          });
+        }}
+      />
+    </section>
+  );
+}
+
+function uniqueArtifacts(artifacts: ArtifactResponse[]): ArtifactResponse[] {
+  const byID = new Map<string, ArtifactResponse>();
+  for (const artifact of artifacts) {
+    byID.set(artifact.id, artifact);
+  }
+  return [...byID.values()];
+}
+
+interface ServerAdministratorsSectionProps {
+  instance: ServerInstanceResponse;
+  session: PageComponentProps["session"];
+  onChanged: (instance: ServerInstanceResponse) => void;
+}
+
+function ServerAdministratorsSection({ instance, session, onChanged }: ServerAdministratorsSectionProps) {
+  const [candidates, setCandidates] = useState<LoadState<ServerMemberResponse[]>>({ status: "loading" });
+  const [selectedUserId, setSelectedUserId] = useState("");
+  const [busyUserId, setBusyUserId] = useState<string | null>(null);
+  const [result, setResult] = useState<{ status: "succeeded" | "failed"; label: string } | null>(null);
+  const isOwner = instance.ownerUserId === session.id;
+
+  const refreshCandidates = useCallback(async () => {
+    if (!isOwner) {
+      setCandidates({ status: "ready", data: [] });
+      return;
+    }
+    setCandidates({ status: "loading" });
+    try {
+      const response = await platformApiClient.listServerAdministratorCandidates(instance.id);
+      setCandidates({ status: "ready", data: response.items });
+      setSelectedUserId((current) => (response.items.some((user) => user.id === current) ? current : response.items[0]?.id ?? ""));
+    } catch (error) {
+      setCandidates({ status: "error", reason: error instanceof Error ? error.message : "加载候选管理员失败" });
+    }
+  }, [instance.id, isOwner]);
+
+  useEffect(() => {
+    void refreshCandidates();
+  }, [refreshCandidates]);
+
+  async function addAdministrator(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault();
+    if (!selectedUserId) {
+      return;
+    }
+    setBusyUserId(selectedUserId);
+    setResult(null);
+    try {
+      const next = await platformApiClient.addServerAdministrator(instance.id, { userId: selectedUserId });
+      onChanged(next);
+      setResult({ status: "succeeded", label: "已添加服务器管理员" });
+      await refreshCandidates();
+    } catch (error) {
+      setResult({ status: "failed", label: error instanceof Error ? error.message : "添加管理员失败" });
+    } finally {
+      setBusyUserId(null);
+    }
+  }
+
+  async function removeAdministrator(userId: string) {
+    setBusyUserId(userId);
+    setResult(null);
+    try {
+      const next = await platformApiClient.removeServerAdministrator(instance.id, userId);
+      onChanged(next);
+      setResult({ status: "succeeded", label: "已移除服务器管理员" });
+      await refreshCandidates();
+    } catch (error) {
+      setResult({ status: "failed", label: error instanceof Error ? error.message : "移除管理员失败" });
+    } finally {
+      setBusyUserId(null);
+    }
+  }
+
+  return (
+    <article className="console-panel" aria-label="server administrators">
+      <div className="panel-header">
+        <h2>
+          <ShieldCheck size={16} style={{ verticalAlign: "-2px" }} /> 管理成员
+        </h2>
+        <span className="page-status">{isOwner ? "服主可邀请/移除管理员" : "仅服主可调整成员"}</span>
+      </div>
+      {result && (
+        <div style={{ marginBottom: 10 }}>
+          <ResultBadge status={result.status} label={result.label} />
+        </div>
+      )}
+      <div className="action-list">
+        <span>服主：{instance.ownerUserId || "未绑定"}</span>
+        <span>服务器管理员：{instance.adminUserIds.length > 0 ? instance.adminUserIds.join(" / ") : "暂无"}</span>
+      </div>
+      {isOwner && (
+        <>
+          <form className="provider-form" style={{ marginTop: 12 }} onSubmit={(event) => void addAdministrator(event)} aria-label="邀请服务器管理员">
+            <div className="form-grid">
+              <label>
+                邀请管理员
+                <select value={selectedUserId} onChange={(event) => setSelectedUserId(event.target.value)} disabled={candidates.status !== "ready" || candidates.data.length === 0}>
+                  {candidates.status === "ready" && candidates.data.length === 0 && <option value="">暂无可邀请用户</option>}
+                  {candidates.status === "ready" &&
+                    candidates.data.map((user) => (
+                      <option key={user.id} value={user.id}>
+                        {user.displayName}（{user.email ?? user.id}）
+                      </option>
+                    ))}
+                </select>
+              </label>
+            </div>
+            {candidates.status === "loading" && <LoadingState label="正在加载可邀请用户…" compact />}
+            {candidates.status === "error" && (
+              <ErrorState title="候选管理员加载失败" reason={candidates.reason} diagnosticId={`server-admin-candidates:${instance.id}`} onRetry={() => void refreshCandidates()} compact />
+            )}
+            <button type="submit" className="primary-command" disabled={!selectedUserId || busyUserId !== null}>
+              <UserRoundPlus size={14} />
+              <span>{busyUserId === selectedUserId ? "邀请中…" : "邀请为管理员"}</span>
+            </button>
+          </form>
+          {instance.adminUserIds.length > 0 && (
+            <div className="resource-list" style={{ marginTop: 12 }}>
+              {instance.adminUserIds.map((userId) => (
+                <article key={userId} className="resource-list-item">
+                  <span>
+                    <strong>{userId}</strong>
+                    <span className="provider-id">服务器管理员</span>
+                  </span>
+                  <button type="button" className="theme-upload" disabled={busyUserId !== null} onClick={() => void removeAdministrator(userId)}>
+                    <UserRoundMinus size={13} />
+                    <span>{busyUserId === userId ? "移除中…" : "移除"}</span>
+                  </button>
+                </article>
+              ))}
+            </div>
+          )}
+        </>
+      )}
+    </article>
+  );
+}
+
+function HeaderStat({ label, value }: { label: string; value: string }) {
+  return (
+    <span className="server-card-stat">
+      <span>{label}</span>
+      <strong>{value}</strong>
+    </span>
+  );
+}
+
+interface OverviewSectionProps {
+  instance: ServerInstanceResponse;
+  metrics: ServerMetricsResponse | null;
+  jobs: JobResponse[];
+  onOpenLogs: () => void;
+}
+
+function OverviewSection({ instance, metrics, jobs, onOpenLogs }: OverviewSectionProps) {
+  const pending = jobs.filter((job) => job.state === "queued" || job.state === "accepted" || job.state === "running");
+  const failed = jobs.filter((job) => job.state === "failed");
+  return (
+    <div className="overview-two-col">
+      <article className="console-panel">
+        <div className="panel-header">
+          <h2>资源使用</h2>
+          <span className="page-status">{metrics ? new Date(metrics.collectedAt).toLocaleTimeString() : "暂无指标"}</span>
+        </div>
+        <div className="server-card-meters">
+          <UsageMeter label="CPU" percent={metrics?.cpuPercent} />
+          <UsageMeter label="内存" percent={metrics?.memoryPercent} />
+          <UsageMeter label="磁盘" percent={metrics?.diskPercent} />
+        </div>
+      </article>
+      <article className="console-panel">
+        <div className="panel-header">
+          <h2>需要关注</h2>
+          <button type="button" className="icon-command" onClick={onOpenLogs}>
+            查看日志
+          </button>
+        </div>
+        <div className="action-list">
+          {instance.state === "failed" && <span>⚠ 服务器处于异常状态，建议查看日志与操作历史。</span>}
+          {failed.length > 0 && <span>⚠ 最近有 {failed.length} 个任务失败。</span>}
+          {pending.length > 0 ? (
+            <span>
+              进行中任务：{pending[0].capability}（{pending[0].state}，{pending[0].progress.percent}%）
+            </span>
+          ) : (
+            <span>当前没有进行中的任务。</span>
+          )}
+          <span>配置版本：v{instance.configVersion}，最近更新 {new Date(instance.updatedAt).toLocaleString()}</span>
+        </div>
+      </article>
+    </div>
+  );
+}
+
+interface LogsSectionProps {
+  serverId: string;
+}
+
+interface LogFilterState {
+  level: string;
+  keyword: string;
+  source: string;
+  sinceMinutes: string;
+}
+
+function LogsSection({ serverId }: LogsSectionProps) {
+  const [streams, setStreams] = useState<LoadState<LogStreamResponse[]>>({ status: "loading" });
+  const [entries, setEntries] = useState<Array<LogEntryBody & { source: string }>>([]);
+  const [filter, setFilter] = useState<LogFilterState>({ level: "all", keyword: "", source: "all", sinceMinutes: "all" });
+  const [selected, setSelected] = useState<(LogEntryBody & { source: string }) | null>(null);
+
+  const refresh = useCallback(async () => {
+    setStreams({ status: "loading" });
+    try {
+      const response = await platformApiClient.listLogStreams();
+      const serverStreams = response.items.filter((stream) => stream.serverInstanceId === serverId);
+      setStreams({ status: "ready", data: serverStreams });
+      const collected: Array<LogEntryBody & { source: string }> = [];
+      for (const stream of serverStreams) {
+        try {
+          const cursor = await platformApiClient.queryLogStream({ logStreamId: stream.id, afterSeq: 0, limit: 200 });
+          collected.push(...cursor.entries.map((entry) => ({ ...entry, source: stream.source || stream.streamKey })));
+        } catch {
+          // one unreadable stream should not blank the rest
+        }
+      }
+      collected.sort((a, b) => (a.timestamp < b.timestamp ? 1 : -1));
+      setEntries(collected);
+    } catch (error) {
+      setStreams({ status: "error", reason: error instanceof Error ? error.message : "加载失败" });
+    }
+  }, [serverId]);
+
+  useEffect(() => {
+    void refresh();
+  }, [refresh]);
+
+  const sources = useMemo(() => [...new Set(entries.map((entry) => entry.source))], [entries]);
+
+  const visible = useMemo(() => {
+    const keyword = filter.keyword.trim().toLowerCase();
+    const sinceMs = filter.sinceMinutes === "all" ? null : Date.now() - Number(filter.sinceMinutes) * 60_000;
+    return entries.filter((entry) => {
+      if (filter.level !== "all" && (entry.level ?? "info").toLowerCase() !== filter.level) {
+        return false;
+      }
+      if (filter.source !== "all" && entry.source !== filter.source) {
+        return false;
+      }
+      if (keyword && !entry.line.toLowerCase().includes(keyword)) {
+        return false;
+      }
+      if (sinceMs !== null && new Date(entry.timestamp).getTime() < sinceMs) {
+        return false;
+      }
+      return true;
+    });
+  }, [entries, filter]);
+
+  return (
+    <article className="console-panel" aria-label="server logs">
+      <div className="panel-header">
+        <h2>日志</h2>
+        <button type="button" className="icon-command" onClick={() => void refresh()}>
+          <Sparkles size={14} />
+          <span>刷新</span>
+        </button>
+      </div>
+      <div className="log-filter-bar">
+        <select value={filter.level} aria-label="按级别过滤" onChange={(event) => setFilter((current) => ({ ...current, level: event.target.value }))}>
+          <option value="all">全部级别</option>
+          <option value="error">error</option>
+          <option value="warn">warn</option>
+          <option value="info">info</option>
+          <option value="debug">debug</option>
+        </select>
+        <select value={filter.source} aria-label="按来源过滤" onChange={(event) => setFilter((current) => ({ ...current, source: event.target.value }))}>
+          <option value="all">全部来源</option>
+          {sources.map((source) => (
+            <option key={source} value={source}>
+              {source}
+            </option>
+          ))}
+        </select>
+        <select
+          value={filter.sinceMinutes}
+          aria-label="按时间过滤"
+          onChange={(event) => setFilter((current) => ({ ...current, sinceMinutes: event.target.value }))}
+        >
+          <option value="all">全部时间</option>
+          <option value="15">最近 15 分钟</option>
+          <option value="60">最近 1 小时</option>
+          <option value="1440">最近 24 小时</option>
+        </select>
+        <input
+          type="search"
+          value={filter.keyword}
+          placeholder="关键字"
+          aria-label="按关键字过滤"
+          onChange={(event) => setFilter((current) => ({ ...current, keyword: event.target.value }))}
+        />
+      </div>
+      {streams.status === "loading" && <LoadingState label="正在加载日志…" compact />}
+      {streams.status === "error" && <ErrorState title="日志加载失败" reason={streams.reason} diagnosticId={`logs:${serverId}`} onRetry={() => void refresh()} compact />}
+      {streams.status === "ready" && entries.length === 0 && (
+        <EmptyState title="暂无日志" description="该服务器还没有已入库的日志流，或运行端尚未上报日志。" actionLabel="刷新" onAction={() => void refresh()} />
+      )}
+      {streams.status === "ready" && entries.length > 0 && visible.length === 0 && (
+        <EmptyState title="没有匹配的日志" description="调整级别、来源、时间范围或关键字后再试。" />
+      )}
+      {visible.length > 0 && (
+        <div className="log-list" role="list">
+          {visible.map((entry) => (
+            <button key={`${entry.source}-${entry.seq}`} type="button" className="log-line" role="listitem" onClick={() => setSelected(entry)}>
+              <time>{new Date(entry.timestamp).toLocaleTimeString()}</time>
+              <span className={cx("log-level", levelClass(entry.level))}>{(entry.level ?? "info").toUpperCase()}</span>
+              <span>{entry.line}</span>
+            </button>
+          ))}
+        </div>
+      )}
+
+      {selected && (
+        <div className="drawer-backdrop" role="presentation" onClick={() => setSelected(null)}>
+          <div className="drawer-panel" role="dialog" aria-modal="true" aria-label="日志详情" onClick={(event) => event.stopPropagation()}>
+            <div className="panel-header">
+              <h2>日志详情</h2>
+              <button type="button" className="drawer-close" onClick={() => setSelected(null)}>
+                关闭
+              </button>
+            </div>
+            <dl className="detail-list">
+              <div>
+                <dt>时间</dt>
+                <dd>{new Date(selected.timestamp).toLocaleString()}</dd>
+              </div>
+              <div>
+                <dt>级别</dt>
+                <dd>{(selected.level ?? "info").toUpperCase()}</dd>
+              </div>
+              <div>
+                <dt>来源</dt>
+                <dd>{selected.source}</dd>
+              </div>
+              <div>
+                <dt>序号</dt>
+                <dd>{selected.seq}</dd>
+              </div>
+              <div>
+                <dt>内容</dt>
+                <dd>{selected.line}</dd>
+              </div>
+              {selected.fields && Object.keys(selected.fields).length > 0 && (
+                <div>
+                  <dt>字段</dt>
+                  <dd>
+                    {Object.entries(selected.fields)
+                      .map(([key, value]) => `${key}=${value}`)
+                      .join(" ")}
+                  </dd>
+                </div>
+              )}
+            </dl>
+            <DiagnosticSummary diagnosticId={`log:${serverId}:${selected.source}:${selected.seq}`} detail={selected.line} />
+          </div>
+        </div>
+      )}
+    </article>
+  );
+}
+
+function levelClass(level?: string): string {
+  const normalized = (level ?? "info").toLowerCase();
+  if (normalized === "error" || normalized === "fatal") {
+    return "log-level-error";
+  }
+  if (normalized === "warn" || normalized === "warning") {
+    return "log-level-warn";
+  }
+  return "log-level-info";
+}
+
+interface ConfigSectionProps {
+  serverId: string;
+  instance: ServerInstanceResponse;
+  session: PageComponentProps["session"];
+  operations: PageComponentProps["operations"];
+}
+
+function ConfigSection({ serverId, instance, session, operations }: ConfigSectionProps) {
+  const [config, setConfig] = useState<LoadState<{ content: string; source: "api" | "local" }>>({ status: "loading" });
+  const [draft, setDraft] = useState("");
+  const [diff, setDiff] = useState<ConfigDiffView | null>(null);
+  const [previewBusy, setPreviewBusy] = useState(false);
+  const [previewError, setPreviewError] = useState<string | null>(null);
+
+  const refresh = useCallback(async () => {
+    setConfig({ status: "loading" });
+    try {
+      const response: ServerConfigResponse = await platformApiClient.getServerConfig(serverId);
+      setConfig({ status: "ready", data: { content: response.content, source: "api" } });
+      setDraft(response.content);
+    } catch {
+      setConfig({ status: "ready", data: { content: fallbackConfig, source: "local" } });
+      setDraft(fallbackConfig);
+    }
+  }, [serverId]);
+
+  useEffect(() => {
+    void refresh();
+  }, [refresh]);
+
+  async function prepareDiff(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault();
+    if (config.status !== "ready") {
+      return;
+    }
+    setPreviewBusy(true);
+    setPreviewError(null);
+    try {
+      const preview = await platformApiClient.previewServerConfigDiff(serverId, {
+        expectedConfigVersion: instance.configVersion,
+        key: defaultConfigKey,
+        proposedContent: draft
+      });
+      setDiff(configDiffViewFromPreview(preview));
+    } catch (error) {
+      setPreviewError(error instanceof Error ? error.message : "配置差异预览失败");
+    } finally {
+      setPreviewBusy(false);
+    }
+  }
+
+  async function submitDiff() {
+    if (!diff || config.status !== "ready") {
+      return;
+    }
+    const operationId = operations.begin({ intent: "写入配置", targetKind: "config", targetId: serverId, requester: session.displayName });
+    try {
+      const dispatch = await platformApiClient.approveServerConfigWrite(serverId, {
+        expectedConfigVersion: diff.configVersion ?? instance.configVersion,
+        key: diff.key ?? defaultConfigKey,
+        proposedContent: diff.nextContent,
+        proposedContentInputRef: diff.proposedContentInputRef,
+        idempotencyKey: `web:config.write:${serverId}:${Date.now()}`
+      });
+      const job = dispatch.job;
+      operations.succeed(operationId, `配置写入任务 ${job.id} 已派发`, job);
+      setDiff(null);
+    } catch (error) {
+      operations.fail(operationId, error instanceof Error ? error.message : "配置写入任务派发失败", operationId);
+    }
+  }
+
+  const writeOperation = operations.operations.find((operation) => operation.intent === "写入配置" && operation.targetId === serverId);
+
+  return (
+    <article className="console-panel" aria-label="server configuration">
+      <div className="panel-header">
+        <h2>配置</h2>
+        {config.status === "ready" && (
+          <span className="page-status">{config.data.source === "api" ? `配置版本 v${instance.configVersion}` : "本地示例配置（配置读取接口未提供）"}</span>
+        )}
+      </div>
+      {writeOperation && (
+        <div style={{ marginBottom: 10 }}>
+          <ResultBadge
+            status={writeOperation.status}
+            label={
+              writeOperation.status === "pending"
+                ? "配置写入中…"
+                : writeOperation.status === "succeeded"
+                  ? (writeOperation.message ?? "写入任务已派发")
+                  : `写入失败：${writeOperation.errorReason}（诊断 ${writeOperation.diagnosticId}）`
+            }
+          />
+        </div>
+      )}
+      {config.status === "loading" && <LoadingState label="正在加载配置…" compact />}
+      {previewError && <ErrorState title="配置差异预览失败" reason={previewError} compact />}
+      {config.status === "ready" && (
+        <form className="provider-form" style={{ border: 0, padding: 0 }} onSubmit={(event) => void prepareDiff(event)}>
+          <label>
+            配置内容
+            <textarea value={draft} onChange={(event) => setDraft(event.target.value)} rows={10} aria-label="配置编辑器" />
+          </label>
+          <button type="submit" className="primary-command" disabled={previewBusy || draft === config.data.content}>
+            {previewBusy ? "预览中…" : "预览变更"}
+          </button>
+        </form>
+      )}
+
+      {diff && (
+        <div className="drawer-backdrop" role="presentation" onClick={() => setDiff(null)}>
+          <div className="drawer-panel" role="dialog" aria-modal="true" aria-label="配置变更确认" onClick={(event) => event.stopPropagation()}>
+            <div className="panel-header">
+              <h2>确认配置变更</h2>
+              <span className="page-status">{diff.summary}</span>
+            </div>
+            <p style={{ margin: 0, color: "var(--ink-soft)", fontSize: 14 }}>
+              目标服务器：<strong>{instance.name}</strong>（{serverId}）。请检查平台返回的差异，确认后才会派发写入任务。
+            </p>
+            <DiffView lines={diff.lines} />
+            <div className="confirm-actions">
+              <button type="button" onClick={() => setDiff(null)}>
+                取消
+              </button>
+              <button type="button" className="confirm-primary" disabled={!diffHasChanges(diff)} onClick={() => void submitDiff()}>
+                确认并派发写入任务
+              </button>
+            </div>
+          </div>
+        </div>
+      )}
+    </article>
+  );
+}
+
+interface PluginControlsSectionProps {
+  serverId: string;
+  instance: ServerInstanceResponse;
+  plugins: GamePluginResponse[];
+  artifacts: ArtifactResponse[];
+  session: PageComponentProps["session"];
+  operations: PageComponentProps["operations"];
+}
+
+function controlsForPlugin(plugin: GamePluginResponse): PluginControlDescriptor[] {
+  const controls: PluginControlDescriptor[] = [];
+  for (const [action] of Object.entries(plugin.lifecycleActions)) {
+    if (action === "install" || action === "restart" || action === "status") {
+      continue;
+    }
+    if (action !== "start" && action !== "stop") {
+      continue;
+    }
+    controls.push({
+      key: `lifecycle:${action}`,
+      label: lifecycleControlLabel(action),
+      description: `通过平台生命周期 API 执行插件声明的 ${action} 动作`,
+      capability: `process.${action}`,
+      lifecycleAction: action,
+      dangerous: action === "stop"
+    });
+  }
+  for (const bridgeAction of plugin.bridgeActions) {
+    if (bridgeAction === "jobs.dispatch") {
+      controls.push({
+        key: "bridge:gift",
+        label: "发送礼物",
+        description: "通过插件任务向在线玩家发放礼物",
+        capability: "plugin.gift.send",
+        dangerous: false
+      });
+      controls.push({
+        key: "bridge:activity",
+        label: "调整活动",
+        description: "修改插件当前的活动配置",
+        capability: "plugin.activity.update",
+        dangerous: false
+      });
+    }
+    if (bridgeAction === "logs.query") {
+      controls.push({
+        key: "bridge:module-restart",
+        label: "重启插件模块",
+        description: "重启该插件在此服务器上的运行模块",
+        capability: "plugin.module.restart",
+        dangerous: true
+      });
+    }
+  }
+  const unique = new Map(controls.map((control) => [control.key, control]));
+  return [...unique.values()];
+}
+
+function lifecycleControlLabel(action: string): string {
+  switch (action) {
+    case "start":
+      return "启动进程";
+    case "stop":
+      return "停止进程";
+    case "restart":
+      return "重启进程";
+    default:
+      return action;
+  }
+}
+
+function PluginControlsSection({ serverId, instance, plugins, artifacts, session, operations }: PluginControlsSectionProps) {
+  const [collapsed, setCollapsed] = useState<Set<string>>(new Set());
+  const [confirmControl, setConfirmControl] = useState<null | { plugin: PluginControlGroupView; control: PluginControlDescriptor }>(null);
+  const [confirmBusy, setConfirmBusy] = useState(false);
+
+  const groups = useMemo<PluginControlGroupView[]>(() => {
+    const installed = plugins.filter((plugin) => plugin.id === instance.pluginId || plugin.status === "installed");
+    const relevant = installed.some((plugin) => plugin.id === instance.pluginId)
+      ? installed.filter((plugin) => plugin.id === instance.pluginId)
+      : installed;
+    return relevant.map((plugin) => ({
+      pluginId: plugin.id,
+      pluginName: pluginLabel(plugin, plugin.id),
+      version: plugin.version,
+      status: plugin.status,
+      controls: controlsForPlugin(plugin)
+    }));
+  }, [plugins, instance.pluginId]);
+
+  function toggleGroup(pluginId: string) {
+    setCollapsed((current) => {
+      const next = new Set(current);
+      if (next.has(pluginId)) {
+        next.delete(pluginId);
+      } else {
+        next.add(pluginId);
+      }
+      return next;
+    });
+  }
+
+  async function dispatchControl(group: PluginControlGroupView, control: PluginControlDescriptor) {
+    const operationId = operations.begin({
+      intent: control.label,
+      targetKind: "plugin",
+      targetId: `${serverId}:${group.pluginId}`,
+      requester: session.displayName
+    });
+    try {
+      if (control.lifecycleAction === "start" || control.lifecycleAction === "stop") {
+        const result =
+          control.lifecycleAction === "start"
+            ? await platformApiClient.startServerInstance(instance.id, serverLifecycleCommandRequest(instance, "start"))
+            : await platformApiClient.stopServerInstance(instance.id, serverLifecycleCommandRequest(instance, "stop"));
+        operations.succeed(operationId, `平台生命周期任务 ${result.job.id} 已派发（${result.job.capability}）`, result.job);
+        return;
+      }
+      const job = await platformApiClient.createJob({
+        id: `job-${control.capability.replaceAll(".", "-")}-${serverId}-${Date.now()}`,
+        serverInstanceId: serverId,
+        runEndpointId: instance.runEndpointId,
+        capability: control.capability,
+        idempotencyKey: `web:${control.capability}:${serverId}:${group.pluginId}:${Date.now()}`
+      });
+      operations.succeed(operationId, `任务 ${job.id} 已派发（${control.capability}）`, job);
+    } catch (error) {
+      operations.fail(operationId, error instanceof Error ? error.message : "插件操作派发失败", operationId);
+    }
+  }
+
+  return (
+    <div className="operation-list" aria-label="plugin controls">
+      {groups.length === 0 && (
+        <EmptyState title="该服务器没有可控制的插件" description="安装插件后，这里会按插件分组显示可用的日常操作。" />
+      )}
+      {groups.map((group) => {
+        const isCollapsed = collapsed.has(group.pluginId);
+        return (
+          <article key={group.pluginId} className="plugin-group">
+            <button type="button" className="plugin-group-header" aria-expanded={!isCollapsed} onClick={() => toggleGroup(group.pluginId)}>
+              <span>
+                <strong>{group.pluginName}</strong>
+                <span className="provider-id">
+                  {group.pluginId}@{group.version} · 作用于 {serverId}
+                </span>
+              </span>
+              {isCollapsed ? <ChevronRight size={18} /> : <ChevronDown size={18} />}
+            </button>
+            {!isCollapsed && (
+              <div className="plugin-group-body">
+                {plugins.find((plugin) => plugin.id === group.pluginId) && (
+                  <PluginBridgeExecutionPanel
+                    plugin={plugins.find((plugin) => plugin.id === group.pluginId)!}
+                    serverId={serverId}
+                    serverInstance={instance}
+                    artifacts={artifacts}
+                  />
+                )}
+                {group.controls.length === 0 && <span className="provider-id">该插件未声明可用控制项。</span>}
+                {group.controls.map((control) => {
+                  const targetId = `${serverId}:${group.pluginId}`;
+                  const latest = operations.operations.find((operation) => operation.targetId === targetId && operation.intent === control.label);
+                  const pending = latest?.status === "pending";
+                  return (
+                    <div key={control.key} className="plugin-control-row">
+                      <span>
+                        <strong>{control.label}</strong>
+                        <p>{control.description}</p>
+                        {latest && (
+                          <ResultBadge
+                            status={latest.status}
+                            label={
+                              latest.status === "pending"
+                                ? "执行中…"
+                                : latest.status === "succeeded"
+                                  ? (latest.message ?? "已完成")
+                                  : `失败：${latest.errorReason}（诊断 ${latest.diagnosticId}）`
+                            }
+                          />
+                        )}
+                      </span>
+                      <button
+                        type="button"
+                        className={cx("icon-command", control.dangerous && "danger-command")}
+                        disabled={pending}
+                        onClick={() => setConfirmControl({ plugin: group, control })}
+                      >
+                        {pending ? "执行中…" : "执行"}
+                      </button>
+                    </div>
+                  );
+                })}
+              </div>
+            )}
+          </article>
+        );
+      })}
+
+      <ConfirmDialog
+        open={confirmControl !== null}
+        title={`执行「${confirmControl?.control.label ?? ""}」`}
+        description={`目标：服务器 ${serverId} 的插件 ${confirmControl?.plugin.pluginName ?? ""}。该操作只影响当前服务器实例。`}
+        confirmLabel="确认执行"
+        danger={confirmControl?.control.dangerous}
+        busy={confirmBusy}
+        onCancel={() => setConfirmControl(null)}
+        onConfirm={() => {
+          if (!confirmControl) {
+            return;
+          }
+          setConfirmBusy(true);
+          void dispatchControl(confirmControl.plugin, confirmControl.control).finally(() => {
+            setConfirmBusy(false);
+            setConfirmControl(null);
+          });
+        }}
+      />
+    </div>
+  );
+}
+
+interface PluginBridgeExecutionPanelProps {
+  plugin: GamePluginResponse;
+  serverId: string;
+  serverInstance: ServerInstanceResponse;
+  artifacts: ArtifactResponse[];
+}
+
+function PluginBridgeExecutionPanel({ plugin, serverId, serverInstance, artifacts }: PluginBridgeExecutionPanelProps) {
+  const [pendingAction, setPendingAction] = useState<PluginBridgeAction | null>(null);
+  const [result, setResult] = useState<{ status: "succeeded" | "failed" | "pending"; label: string } | null>(null);
+  const page = plugin.pages[0];
+  if (!page || plugin.bridgeActions.length === 0) {
+    return null;
+  }
+  const contract: PluginBridgeManifestContract = {
+    id: plugin.id,
+    declaredPermissions: plugin.declaredPermissions as PluginBridgeManifestContract["declaredPermissions"],
+    bridgeActions: plugin.bridgeActions as PluginBridgeAction[],
+    pages: plugin.pages.map((item) => ({
+      key: item.key,
+      title: item.title,
+      path: item.path,
+      permissions: item.permissions as PluginBridgeManifestContract["declaredPermissions"],
+      bridgeActions: item.bridgeActions as PluginBridgeAction[] | undefined
+    })),
+    aiPurposes: plugin.aiPurposes
+  };
+  const context = createPluginBridgeHostContext({
+    plugin: contract,
+    routeKey: page.key,
+    serverInstanceId: serverId,
+    themeTokens: { colorScheme: "dark", accentColor: "#7dd3fc" }
+  });
+  const executableActions = context.bridgeActions.filter(
+    (action) => action === "server.instances.read" || action === "files.request" || action === "artifacts.open" || action === "ai.invoke"
+  );
+
+  async function execute(action: PluginBridgeAction) {
+    setPendingAction(action);
+    setResult({ status: "pending", label: "桥接请求执行中" });
+    const dispatch = createPluginBridgeDispatcher(context, platformApiClient);
+    const response = await dispatch({
+      requestId: `web:bridge:${serverId}:${plugin.id}:${action}:${Date.now()}`,
+      action,
+      aiPurpose: action === "ai.invoke" ? plugin.aiPurposes[0] : undefined,
+      payload: bridgePayloadForAction(action, serverInstance, artifacts[0])
+    });
+    setPendingAction(null);
+    if (response.status === "ok" || response.status === "queued") {
+      setResult({ status: "succeeded", label: bridgeResultLabel(response.status, response.result) });
+      return;
+    }
+    setResult({ status: "failed", label: response.error?.message ?? "桥接执行被拒绝" });
+  }
+
+  return (
+    <div className="plugin-control-row" aria-label="plugin bridge execution">
+      <span>
+        <strong>{page.title} 桥接执行</strong>
+        <p>{context.permissions.join(" / ") || "无可用权限"}</p>
+        {result && <ResultBadge status={result.status} label={result.label} />}
+      </span>
+      <div className="action-strip">
+        {executableActions.slice(0, 3).map((action) => (
+          <button
+            key={action}
+            type="button"
+            className="icon-command"
+            disabled={pendingAction !== null || (action === "artifacts.open" && artifacts.length === 0)}
+            onClick={() => void execute(action)}
+            title={`执行 ${action}`}
+          >
+            <Sparkles size={14} />
+            <span>{pendingAction === action ? "执行中" : bridgeActionLabel(action)}</span>
+          </button>
+        ))}
+      </div>
+    </div>
+  );
+}
+
+function bridgePayloadForAction(action: PluginBridgeAction, serverInstance: ServerInstanceResponse, artifact?: ArtifactResponse): Record<string, string> | undefined {
+  if (action === "files.request") {
+    return { operation: "read", key: "logs/latest.log", expectedConfigVersion: String(serverInstance.configVersion) };
+  }
+  if (action === "artifacts.open" && artifact) {
+    return { artifactId: artifact.id };
+  }
+  return undefined;
+}
+
+function bridgeActionLabel(action: PluginBridgeAction): string {
+  switch (action) {
+    case "server.instances.read":
+      return "读取上下文";
+    case "files.request":
+      return "请求文件";
+    case "ai.invoke":
+      return "AI 调用";
+    case "artifacts.open":
+      return "打开制品";
+    default:
+      return action;
+  }
+}
+
+function bridgeResultLabel(status: string, result?: Record<string, string>): string {
+  if (status === "queued") {
+    return `已派发任务 ${result?.jobId ?? ""}`.trim();
+  }
+  if (result?.recommendation) {
+    return "AI 建议已返回";
+  }
+  if (parsePluginArtifactReference(result)) {
+    return "制品引用已返回";
+  }
+  return result?.serverInstanceId ? `服务器上下文 ${result.serverInstanceId} 已返回` : "桥接请求已完成";
+}
+
+interface LlmSectionProps {
+  serverId: string;
+  instance: ServerInstanceResponse;
+  session: PageComponentProps["session"];
+  operations: PageComponentProps["operations"];
+}
+
+function LlmSection({ serverId, instance, session, operations }: LlmSectionProps) {
+  const [prompt, setPrompt] = useState("");
+  const [currentConfig, setCurrentConfig] = useState<string>(fallbackConfig);
+  const [suggestion, setSuggestion] = useState<LlmSuggestionView | null>(null);
+  const [confirming, setConfirming] = useState(false);
+  const [busy, setBusy] = useState(false);
+
+  useEffect(() => {
+    let cancelled = false;
+    void platformApiClient
+      .getServerConfig(serverId)
+      .then((response) => {
+        if (!cancelled) {
+          setCurrentConfig(response.content);
+        }
+      })
+      .catch(() => {
+        // keep the local fallback config
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, [serverId]);
+
+  async function requestSuggestion(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault();
+    if (!prompt.trim()) {
+      return;
+    }
+    setBusy(true);
+    setSuggestion(null);
+    try {
+      const response = await platformApiClient.suggestServerConfig({ serverInstanceId: serverId, prompt: prompt.trim(), currentConfig });
+      const preview = response.suggestedConfig
+        ? await platformApiClient.previewServerConfigDiff(serverId, {
+            expectedConfigVersion: instance.configVersion,
+            key: defaultConfigKey,
+            proposedContent: response.suggestedConfig
+          })
+        : undefined;
+      setSuggestion({
+        serverInstanceId: serverId,
+        source: "api",
+        recommendation: response.recommendation,
+        diff: preview ? configDiffViewFromPreview(preview) : undefined
+      });
+    } catch {
+      setSuggestion(buildLocalSuggestion(serverId, prompt.trim(), currentConfig));
+    } finally {
+      setBusy(false);
+    }
+  }
+
+  async function applySuggestion() {
+    if (!suggestion?.diff) {
+      return;
+    }
+    const operationId = operations.begin({ intent: "应用 AI 配置建议", targetKind: "llm", targetId: serverId, requester: session.displayName });
+    try {
+      const dispatch = await platformApiClient.approveServerConfigWrite(serverId, {
+        expectedConfigVersion: suggestion.diff.configVersion ?? instance.configVersion,
+        key: suggestion.diff.key ?? defaultConfigKey,
+        proposedContent: suggestion.diff.nextContent,
+        proposedContentInputRef: suggestion.diff.proposedContentInputRef,
+        idempotencyKey: `web:config.write.llm:${serverId}:${Date.now()}`
+      });
+      const job = dispatch.job;
+      operations.succeed(operationId, `AI 建议已确认，写入任务 ${job.id} 已派发`, job);
+      setSuggestion(null);
+      setConfirming(false);
+    } catch (error) {
+      operations.fail(operationId, error instanceof Error ? error.message : "写入任务派发失败", operationId);
+      setConfirming(false);
+    }
+  }
+
+  const llmOperation = operations.operations.find((operation) => operation.intent === "应用 AI 配置建议" && operation.targetId === serverId);
+
+  return (
+    <article className="console-panel" aria-label="llm configuration assistance">
+      <div className="panel-header">
+        <h2>
+          <Sparkles size={16} style={{ verticalAlign: "-2px" }} /> AI 配置助手
+        </h2>
+        <span className="page-status">建议仅作用于 {serverId}</span>
+      </div>
+      <p style={{ margin: "0 0 12px", color: "var(--ink-soft)", fontSize: 13.5 }}>
+        AI 建议会先生成推荐说明和配置差异，<strong>不会自动写入</strong>。只有你确认差异后，平台才会派发写入任务。前端不会接触任何 AI 提供商密钥。
+      </p>
+      {llmOperation && (
+        <div style={{ marginBottom: 10 }}>
+          <ResultBadge
+            status={llmOperation.status}
+            label={
+              llmOperation.status === "pending"
+                ? "写入中…"
+                : llmOperation.status === "succeeded"
+                  ? (llmOperation.message ?? "已派发")
+                  : `失败：${llmOperation.errorReason}（诊断 ${llmOperation.diagnosticId}）`
+            }
+          />
+        </div>
+      )}
+      <form className="provider-form" style={{ border: 0, padding: 0 }} onSubmit={(event) => void requestSuggestion(event)}>
+        <label>
+          想让 AI 帮你调整什么？
+          <textarea
+            value={prompt}
+            rows={3}
+            placeholder="例如：把最大玩家数提高到 40，并关闭 PVP"
+            onChange={(event) => setPrompt(event.target.value)}
+          />
+        </label>
+        <button type="submit" className="primary-command" disabled={busy || !prompt.trim()}>
+          {busy ? "生成建议中…" : "生成建议"}
+        </button>
+      </form>
+
+      {suggestion && (
+        <div style={{ display: "grid", gap: 12, marginTop: 14 }}>
+          <div className="panel-header" style={{ marginBottom: 0 }}>
+            <h3>AI 建议</h3>
+            <span className="page-status">{suggestion.source === "api" ? "平台 LLM" : "本地建议（LLM 接口未提供）"}</span>
+          </div>
+          <p style={{ margin: 0, color: "var(--ink-soft)", fontSize: 14 }}>{suggestion.recommendation}</p>
+          {suggestion.diff ? (
+            <>
+              <DiffView lines={suggestion.diff.lines} />
+              <div className="confirm-actions">
+                <button type="button" onClick={() => setSuggestion(null)}>
+                  放弃建议
+                </button>
+                <button type="button" className="confirm-primary" onClick={() => setConfirming(true)}>
+                  确认差异并写入
+                </button>
+              </div>
+            </>
+          ) : (
+            <span className="provider-id">该建议没有生成可应用的配置差异，仅供参考。</span>
+          )}
+        </div>
+      )}
+
+      <ConfirmDialog
+        open={confirming}
+        title="确认应用 AI 配置建议"
+        description={`即将向服务器 ${instance.name}（${serverId}）派发配置写入任务。写入内容以上方差异为准。`}
+        confirmLabel="确认写入"
+        busy={llmOperation?.status === "pending"}
+        onCancel={() => setConfirming(false)}
+        onConfirm={() => void applySuggestion()}
+      />
+    </article>
+  );
+}
+
+function buildLocalSuggestion(serverId: string, prompt: string, currentConfig: string): LlmSuggestionView {
+  const lines = currentConfig.split("\n");
+  const next = [...lines];
+  const changed: string[] = [];
+  const playerMatch = prompt.match(/(\d+)\s*(?:人|名玩家|players?)/i) ?? prompt.match(/玩家[^\d]*(\d+)/);
+  if (playerMatch) {
+    const index = next.findIndex((line) => line.startsWith("max-players="));
+    if (index >= 0) {
+      next[index] = `max-players=${playerMatch[1]}`;
+      changed.push(`max-players 调整为 ${playerMatch[1]}`);
+    }
+  }
+  if (/关闭\s*pvp|禁用\s*pvp|pvp.*(off|false|关)/i.test(prompt)) {
+    const index = next.findIndex((line) => line.startsWith("pvp="));
+    if (index >= 0) {
+      next[index] = "pvp=false";
+      changed.push("pvp 关闭");
+    }
+  }
+  if (/开启\s*pvp|pvp.*(on|true|开)/i.test(prompt)) {
+    const index = next.findIndex((line) => line.startsWith("pvp="));
+    if (index >= 0) {
+      next[index] = "pvp=true";
+      changed.push("pvp 开启");
+    }
+  }
+  const nextContent = next.join("\n");
+  if (changed.length === 0) {
+    return {
+      serverInstanceId: serverId,
+      source: "local",
+      recommendation: `暂时无法为“${prompt}”生成配置差异。平台 LLM 建议接口尚未提供；本地建议引擎只支持常见字段（如 max-players、pvp）。`
+    };
+  }
+  return {
+    serverInstanceId: serverId,
+    source: "local",
+    recommendation: `根据请求“${prompt}”，建议：${changed.join("；")}。请确认差异后再写入。`,
+    diff: buildConfigDiff(serverId, currentConfig, nextContent)
+  };
+}
+
+export function configDiffViewFromPreview(preview: ServerConfigDiffPreviewResponse): ConfigDiffView {
+  const lines = preview.diff.map(configDiffLineFromPreviewLine);
+  const added = lines.filter((line) => line.kind === "added").length;
+  const removed = lines.filter((line) => line.kind === "removed").length;
+  return {
+    serverInstanceId: preview.serverInstanceId,
+    configVersion: preview.configVersion,
+    key: preview.key,
+    source: preview.source,
+    summary: `+${added} / -${removed} 行变更`,
+    lines,
+    nextContent: preview.proposedContent ?? "",
+    proposedContentInputRef: preview.proposedContentInputRef
+  };
+}
+
+function configDiffLineFromPreviewLine(line: ConfigDiffLineResponse): ConfigDiffView["lines"][number] {
+  return {
+    kind: line.kind === "context" ? "same" : line.kind,
+    text: line.content
+  };
+}
+
+interface HistorySectionProps {
+  serverId: string;
+  serverOperations: PageComponentProps["operations"]["operations"];
+  jobs: JobResponse[];
+  artifacts: ArtifactResponse[];
+}
+
+function HistorySection({ serverId, serverOperations, jobs, artifacts }: HistorySectionProps) {
+  return (
+    <div className="overview-two-col" aria-label="operation history">
+      <article className="console-panel">
+        <div className="panel-header">
+          <h2>本次会话操作</h2>
+        </div>
+        {serverOperations.length === 0 ? (
+          <EmptyState title="暂无操作记录" description="在本页发起启动、停止、插件控制或配置写入后，这里会显示完整的操作生命周期。" />
+        ) : (
+          <div className="operation-list">
+            {serverOperations.map((operation) => (
+              <div key={operation.id} className="operation-item">
+                <div className="operation-item-head">
+                  <strong>{operation.intent}</strong>
+                  <ResultBadge
+                    status={operation.status}
+                    label={operation.status === "pending" ? "进行中" : operation.status === "succeeded" ? "成功" : "失败"}
+                  />
+                </div>
+                <div className="operation-meta">
+                  <span>
+                    操作 <code>{operation.id}</code>
+                  </span>
+                  {operation.jobId && (
+                    <span>
+                      任务 <code>{operation.jobId}</code>
+                      {operation.jobState ? `（${operation.jobState}）` : ""}
+                    </span>
+                  )}
+                  <span>目标 {operation.targetId}</span>
+                  <span>发起人 {operation.requester}</span>
+                  <span>{new Date(operation.updatedAt).toLocaleString()}</span>
+                </div>
+                {operation.message && <span className="provider-id">{operation.message}</span>}
+                {operation.status === "failed" && operation.errorReason && (
+                  <span className="provider-id">
+                    失败原因：{operation.errorReason}
+                    {operation.diagnosticId ? `（诊断 ${operation.diagnosticId}）` : ""}
+                  </span>
+                )}
+              </div>
+            ))}
+          </div>
+        )}
+      </article>
+      <article className="console-panel">
+        <div className="panel-header">
+          <h2>平台任务记录</h2>
+        </div>
+        {jobs.length === 0 ? (
+          <EmptyState title="暂无任务" description="该服务器还没有平台侧任务记录。" />
+        ) : (
+          <div className="operation-list">
+            {jobs.slice(0, 20).map((job) => (
+              <div key={job.id} className="operation-item">
+                <div className="operation-item-head">
+                  <strong>{job.capability}</strong>
+                  <span className={cx("status-pill", job.state === "succeeded" ? "status-active" : job.state === "failed" ? "status-error" : "status-disabled")}>
+                    {job.state}
+                  </span>
+                </div>
+                <div className="operation-meta">
+                  <span>
+                    任务 <code>{job.id}</code>
+                  </span>
+                  <span>进度 {job.progress.percent}%</span>
+                  <span>{new Date(job.updatedAt).toLocaleString()}</span>
+                </div>
+                {job.progress.message && <span className="provider-id">{job.progress.message}</span>}
+              </div>
+            ))}
+          </div>
+        )}
+      </article>
+      <ArtifactDownloadPanel serverId={serverId} artifacts={artifacts} />
+    </div>
+  );
+}
+
+interface ArtifactDownloadPanelProps {
+  serverId: string;
+  artifacts: ArtifactResponse[];
+}
+
+function ArtifactDownloadPanel({ serverId, artifacts }: ArtifactDownloadPanelProps) {
+  const [activeId, setActiveId] = useState<string | null>(null);
+  const [result, setResult] = useState<Record<string, { status: "pending" | "succeeded" | "failed"; label: string; progress?: number }>>({});
+
+  async function downloadArtifact(artifact: ArtifactResponse) {
+    setActiveId(artifact.id);
+    setResult((current) => ({ ...current, [artifact.id]: { status: "pending", label: "正在打开制品", progress: 0 } }));
+    try {
+      const reference = await platformApiClient.openArtifactDownload(artifact.id);
+      const chunks: ArrayBuffer[] = [];
+      let offset = 0;
+      while (offset < reference.sizeBytes) {
+        const chunk = await platformApiClient.readArtifactContent(reference.artifactId, offset, reference.chunkSizeBytes);
+        chunks.push(chunk.payload);
+        offset += chunk.payload.byteLength;
+        const progress = Math.min(100, Math.round((offset / reference.sizeBytes) * 100));
+        setResult((current) => ({ ...current, [artifact.id]: { status: "pending", label: `传输 ${progress}%`, progress } }));
+        if (chunk.payload.byteLength === 0) {
+          break;
+        }
+      }
+      openArtifactBlob(reference, chunks);
+      setResult((current) => ({ ...current, [artifact.id]: { status: "succeeded", label: `已打开 ${safeArtifactFilename(reference.filename)}`, progress: 100 } }));
+    } catch (error) {
+      setResult((current) => ({ ...current, [artifact.id]: { status: "failed", label: safeArtifactError(error) } }));
+    } finally {
+      setActiveId(null);
+    }
+  }
+
+  return (
+    <article className="console-panel">
+      <div className="panel-header">
+        <h2>
+          <PackageOpen size={16} />
+          浏览器制品传输
+        </h2>
+      </div>
+      {artifacts.length === 0 ? (
+        <EmptyState title="暂无可下载制品" description="该服务器当前没有已完成的可用制品。" />
+      ) : (
+        <div className="operation-list">
+          {artifacts.slice(0, 12).map((artifact) => {
+            const itemResult = result[artifact.id];
+            return (
+              <div key={artifact.id} className="operation-item">
+                <div className="operation-item-head">
+                  <strong>{artifact.id}</strong>
+                  <ResultBadge status={itemResult?.status ?? "pending"} label={itemResult?.label ?? artifact.state} />
+                </div>
+                <div className="operation-meta">
+                  <span>服务器 {serverId}</span>
+                  <span>{formatBytes(artifact.sizeBytes)}</span>
+                  <span>{artifact.checksum}</span>
+                </div>
+                {itemResult?.progress !== undefined && <UsageMeter label="传输" percent={itemResult.progress} />}
+                <div className="action-strip">
+                  <button type="button" className="icon-command" disabled={activeId !== null} onClick={() => void downloadArtifact(artifact)}>
+                    <Download size={14} />
+                    <span>{activeId === artifact.id ? "传输中" : "打开"}</span>
+                  </button>
+                </div>
+              </div>
+            );
+          })}
+        </div>
+      )}
+    </article>
+  );
+}
+
+function openArtifactBlob(reference: ArtifactDownloadReferenceResponse, chunks: ArrayBuffer[]) {
+  if (typeof document === "undefined" || typeof URL === "undefined") {
+    return;
+  }
+  const blob = new Blob(chunks, { type: reference.contentType });
+  const url = URL.createObjectURL(blob);
+  const anchor = document.createElement("a");
+  anchor.href = url;
+  anchor.download = safeArtifactFilename(reference.filename);
+  anchor.rel = "noopener";
+  document.body.append(anchor);
+  anchor.click();
+  anchor.remove();
+  URL.revokeObjectURL(url);
+}
+
+function safeArtifactFilename(filename: string): string {
+  const cleaned = filename.replace(/[\\/]/g, "").trim();
+  return cleaned || "artifact.bin";
+}
+
+function safeArtifactError(error: unknown): string {
+  const message = error instanceof Error ? error.message : "制品传输失败";
+  return message.replace(/\/Users\/[^\s]+/g, "[path]").replace(/Bearer\s+[^\s]+/gi, "[token]").replace(/sk-[A-Za-z0-9_-]+/g, "[secret]");
+}
+
+function formatBytes(value: number): string {
+  if (value < 1024) {
+    return `${value} B`;
+  }
+  if (value < 1024 * 1024) {
+    return `${(value / 1024).toFixed(1)} KiB`;
+  }
+  return `${(value / (1024 * 1024)).toFixed(1)} MiB`;
+}
diff --git a/platform_web/pages/ServersPage.tsx b/platform_web/pages/ServersPage.tsx
new file mode 100644
index 0000000..7fe4d8a
--- /dev/null
+++ b/platform_web/pages/ServersPage.tsx
@@ -0,0 +1,330 @@
+import { CakeSlice, Candy, Search, Sparkles } from "lucide-react";
+import { type ChangeEvent, type FormEvent, useCallback, useEffect, useMemo, useState } from "react";
+
+import { platformApiClient } from "../api/client";
+import type { GamePluginResponse, JobResponse, RunEndpointResponse, ServerInstanceResponse, ServerMetricsResponse } from "../api/types";
+import { UsageMeter } from "../components/OperationControls";
+import { EmptyState, ErrorState, LoadingState, ResultBadge } from "../components/StateViews";
+import type { PageComponentProps } from "../contracts/page";
+import {
+  defaultServerCreateForm,
+  endpointLabel,
+  pendingJobsForServer,
+  pluginLabel,
+  type ServerCreateFormState
+} from "../contracts/serverManagement";
+import { filterServerCards, serverIsOnline, type ServerCardView, type ServerStatusFilter } from "../contracts/workspace";
+import { serverCreateRequestFromForm } from "../schemas/serverManagement";
+import { isPlatformAdmin } from "../contracts/workspace";
+import { cx } from "../utils/classes";
+
+type ListState = "loading" | "ready" | "error";
+
+const statusFilters: Array<{ id: ServerStatusFilter; label: string }> = [
+  { id: "all", label: "全部" },
+  { id: "online", label: "在线" },
+  { id: "offline", label: "离线" },
+  { id: "attention", label: "需关注" }
+];
+
+export function ServersPage({ session, operations, onNavigate }: PageComponentProps) {
+  const [listState, setListState] = useState<ListState>("loading");
+  const [listError, setListError] = useState<string>("");
+  const [plugins, setPlugins] = useState<GamePluginResponse[]>([]);
+  const [endpoints, setEndpoints] = useState<RunEndpointResponse[]>([]);
+  const [instances, setInstances] = useState<ServerInstanceResponse[]>([]);
+  const [jobs, setJobs] = useState<JobResponse[]>([]);
+  const [metrics, setMetrics] = useState<Map<string, ServerMetricsResponse>>(new Map());
+  const [metricsPending, setMetricsPending] = useState(true);
+  const [keyword, setKeyword] = useState("");
+  const [statusFilter, setStatusFilter] = useState<ServerStatusFilter>("all");
+  const [form, setForm] = useState<ServerCreateFormState>(() => defaultServerCreateForm([], []));
+  const [showCreate, setShowCreate] = useState(false);
+
+  const refresh = useCallback(async () => {
+    setListState("loading");
+    try {
+      const [pluginResponse, endpointResponse, instanceResponse, jobResponse] = await Promise.all([
+        platformApiClient.listGamePlugins(),
+        platformApiClient.listRunEndpoints(),
+        platformApiClient.listServerInstances(),
+        platformApiClient.listJobs()
+      ]);
+      setPlugins(pluginResponse.items);
+      setEndpoints(endpointResponse.items);
+      setInstances(instanceResponse.items);
+      setJobs(jobResponse.items);
+      setForm((current) => ({
+        ...current,
+        pluginId: pluginResponse.items.some((plugin) => plugin.id === current.pluginId) ? current.pluginId : pluginResponse.items[0]?.id || "",
+        runEndpointId: endpointResponse.items.some((endpoint) => endpoint.id === current.runEndpointId)
+          ? current.runEndpointId
+          : endpointResponse.items[0]?.id || ""
+      }));
+      setListState("ready");
+      setListError("");
+    } catch (error) {
+      setListState("error");
+      setListError(error instanceof Error ? error.message : "加载失败");
+    }
+    setMetricsPending(true);
+    try {
+      const metricsResponse = await platformApiClient.listServerMetrics();
+      setMetrics(new Map(metricsResponse.items.map((item) => [item.serverInstanceId, item])));
+    } catch {
+      setMetrics(new Map());
+    } finally {
+      setMetricsPending(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    void refresh();
+  }, [refresh]);
+
+  const cards = useMemo<ServerCardView[]>(
+    () =>
+      instances.map((instance) => ({
+        instance,
+        metrics: metrics.get(instance.id),
+        pendingJobs: pendingJobsForServer(jobs, instance.id).length
+      })),
+    [instances, jobs, metrics]
+  );
+
+  const visibleCards = useMemo(() => filterServerCards(cards, keyword, statusFilter), [cards, keyword, statusFilter]);
+  const createPending = operations.isPending("platform", "创建服务器");
+
+  function updateForm(event: ChangeEvent<HTMLInputElement | HTMLSelectElement>) {
+    const { name, value } = event.target;
+    setForm((current) => ({ ...current, [name]: value }));
+  }
+
+  async function handleCreate(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault();
+    const operationId = operations.begin({ intent: "创建服务器", targetKind: "server", targetId: "platform", requester: session.displayName });
+    try {
+      const result = await platformApiClient.createServerWorkflow(serverCreateRequestFromForm(form));
+      operations.succeed(operationId, `已创建实例 ${result.instance.id}，安装任务 ${result.job.id} 已派发`, result.job);
+      setForm(defaultServerCreateForm(plugins, endpoints));
+      setShowCreate(false);
+      await refresh();
+    } catch (error) {
+      operations.fail(operationId, error instanceof Error ? error.message : "创建失败", operationId);
+    }
+  }
+
+  const latestCreate = operations.operations.find((operation) => operation.intent === "创建服务器");
+
+  return (
+    <section className="servers-page" aria-labelledby="server-page-title">
+      <header className="page-header">
+        <div>
+          <p className="page-kicker">{isPlatformAdmin(session) ? "平台管理员" : "我的服务器"}</p>
+          <h1 id="server-page-title" className="page-title">
+            服务器管理
+          </h1>
+        </div>
+        <div className="action-strip">
+          <button type="button" className="icon-command" title="刷新服务器状态" onClick={() => void refresh()}>
+            <Sparkles size={16} />
+            <span>刷新</span>
+          </button>
+          <button type="button" className="icon-command" title="创建服务器" onClick={() => setShowCreate((current) => !current)}>
+            <Candy size={16} />
+            <span>创建服务器</span>
+          </button>
+        </div>
+      </header>
+
+      {latestCreate && (
+        <div className="inline-result-strip" aria-live="polite">
+          <ResultBadge
+            status={latestCreate.status}
+            label={
+              latestCreate.status === "pending"
+                ? "创建中…"
+                : latestCreate.status === "succeeded"
+                  ? (latestCreate.message ?? "创建成功")
+                  : `创建失败：${latestCreate.errorReason ?? "未知原因"}（诊断 ${latestCreate.diagnosticId ?? latestCreate.id}）`
+            }
+          />
+        </div>
+      )}
+
+      {showCreate && (
+        <form className="provider-form" onSubmit={(event) => void handleCreate(event)} aria-label="创建服务器">
+          <div className="form-header">
+            <h2>创建服务器</h2>
+          </div>
+          <div className="form-grid">
+            <label>
+              实例 ID
+              <input name="id" value={form.id} onChange={updateForm} placeholder="server-example-3" required />
+            </label>
+            <label>
+              名称
+              <input name="name" value={form.name} onChange={updateForm} placeholder="Example Survival #3" required />
+            </label>
+            <label>
+              插件
+              <select name="pluginId" value={form.pluginId} onChange={updateForm} required>
+                {plugins.map((plugin) => (
+                  <option key={plugin.id} value={plugin.id}>
+                    {pluginLabel(plugin, plugin.id)}
+                  </option>
+                ))}
+              </select>
+            </label>
+            <label>
+              运行节点
+              <select name="runEndpointId" value={form.runEndpointId} onChange={updateForm} required>
+                {endpoints.map((endpoint) => (
+                  <option key={endpoint.id} value={endpoint.id}>
+                    {endpointLabel(endpoint, endpoint.id)}
+                  </option>
+                ))}
+              </select>
+            </label>
+          </div>
+          <button type="submit" className="primary-command" disabled={createPending} title="创建服务器">
+            <Sparkles size={16} />
+            <span>{createPending ? "创建中…" : "创建并安装"}</span>
+          </button>
+        </form>
+      )}
+
+      <div className="server-toolbar" role="search">
+        <Search size={16} aria-hidden="true" />
+        <input
+          type="search"
+          value={keyword}
+          placeholder="搜索服务器名称、ID 或插件"
+          aria-label="搜索服务器"
+          onChange={(event) => setKeyword(event.target.value)}
+        />
+        {statusFilters.map((filter) => (
+          <button
+            key={filter.id}
+            type="button"
+            className={cx("segmented-button", statusFilter === filter.id && "segmented-button-active")}
+            onClick={() => setStatusFilter(filter.id)}
+          >
+            {filter.label}
+          </button>
+        ))}
+      </div>
+
+      {listState === "loading" && <LoadingState label="正在加载服务器列表…" />}
+      {listState === "error" && <ErrorState title="服务器列表加载失败" reason={listError} diagnosticId="server-list" onRetry={() => void refresh()} />}
+      {listState === "ready" && cards.length === 0 && (
+        <EmptyState
+          icon={<CakeSlice size={26} />}
+          title="暂无可管理的服务器"
+          description={
+            isPlatformAdmin(session)
+              ? "平台还没有服务器实例。点击上方“创建服务器”开始，或检查运行节点状态。"
+              : "当前账号名下没有可管理的服务器。如果这不符合预期，请联系平台管理员为你分配服务器，或点击刷新重试。"
+          }
+          actionLabel="刷新"
+          onAction={() => void refresh()}
+        />
+      )}
+      {listState === "ready" && cards.length > 0 && visibleCards.length === 0 && (
+        <EmptyState title="没有匹配的服务器" description="调整搜索关键字或状态筛选后再试。" actionLabel="清除筛选" onAction={() => {
+          setKeyword("");
+          setStatusFilter("all");
+        }} />
+      )}
+
+      {visibleCards.length > 0 && (
+        <div className="server-card-grid" aria-label="server list">
+          {visibleCards.map((card) => (
+            <ServerCard key={card.instance.id} card={card} metricsPending={metricsPending} onOpen={() => onNavigate("serverDetail", { serverId: card.instance.id })} />
+          ))}
+        </div>
+      )}
+    </section>
+  );
+}
+
+interface ServerCardProps {
+  card: ServerCardView;
+  metricsPending: boolean;
+  onOpen: () => void;
+}
+
+function ServerCard({ card, metricsPending, onOpen }: ServerCardProps) {
+  const { instance, metrics, pendingJobs } = card;
+  const online = serverIsOnline(instance.state);
+  return (
+    <button type="button" className="server-card" onClick={onOpen} aria-label={`打开 ${instance.name} 详情`}>
+      <div className="server-card-head">
+        <span>
+          <strong>{instance.name}</strong>
+          <span className="provider-id">{instance.id}</span>
+        </span>
+        <span className={cx("status-pill", statusClass(instance.state))}>{stateLabel(instance.state)}</span>
+      </div>
+      <div className="server-card-stats">
+        <span className="server-card-stat">
+          <span>玩家</span>
+          <strong>{formatStat(metrics?.playerCount, metricsPending, (value) => (metrics?.maxPlayers ? `${value}/${metrics.maxPlayers}` : `${value}`))}</strong>
+        </span>
+        <span className="server-card-stat">
+          <span>TPS</span>
+          <strong>{formatStat(metrics?.tps, metricsPending, (value) => value.toFixed(1))}</strong>
+        </span>
+        <span className="server-card-stat">
+          <span>延迟</span>
+          <strong>{formatStat(metrics?.latencyMs, metricsPending, (value) => `${Math.round(value)}ms`)}</strong>
+        </span>
+        <span className="server-card-stat">
+          <span>任务</span>
+          <strong>{pendingJobs > 0 ? `${pendingJobs} 进行中` : online ? "空闲" : "--"}</strong>
+        </span>
+      </div>
+      <div className="server-card-meters">
+        <UsageMeter label="CPU" percent={metrics?.cpuPercent} />
+        <UsageMeter label="内存" percent={metrics?.memoryPercent} />
+        <UsageMeter label="磁盘" percent={metrics?.diskPercent} />
+      </div>
+    </button>
+  );
+}
+
+function formatStat(value: number | undefined, pending: boolean, format: (value: number) => string): string {
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return format(value);
+  }
+  return pending ? "…" : "--";
+}
+
+export function stateLabel(state: ServerInstanceResponse["state"]): string {
+  switch (state) {
+    case "installing":
+      return "安装中";
+    case "ready":
+      return "就绪";
+    case "running":
+      return "运行中";
+    case "stopped":
+      return "已停止";
+    case "failed":
+      return "异常";
+    case "draft":
+      return "草稿";
+    case "deleted":
+      return "已删除";
+  }
+}
+
+export function statusClass(state: ServerInstanceResponse["state"]): string {
+  if (state === "running" || state === "ready") {
+    return "status-active";
+  }
+  if (state === "failed" || state === "deleted") {
+    return "status-error";
+  }
+  return "status-disabled";
+}
diff --git a/platform_web/pages/UsersPage.tsx b/platform_web/pages/UsersPage.tsx
new file mode 100644
index 0000000..3746332
--- /dev/null
+++ b/platform_web/pages/UsersPage.tsx
@@ -0,0 +1,296 @@
+import { HeartHandshake, Sparkles, UserRoundCheck, UserRoundPlus } from "lucide-react";
+import { type FormEvent, useEffect, useMemo, useState } from "react";
+
+import { platformApiClient } from "../api/client";
+import type { UserCreateRequest, UserResponse, UserStatus } from "../api/types";
+import { EmptyState, ErrorState, LoadingState, ResultBadge } from "../components/StateViews";
+import { PageFrame } from "../components/PageFrame";
+import type { PageComponentProps } from "../contracts/page";
+import { userAccess } from "../contracts/shell";
+import { isPlatformAdmin } from "../contracts/workspace";
+import { cx } from "../utils/classes";
+
+const roleOptions = [
+  { value: "platform-admin", label: "平台管理员" },
+  { value: "server-owner", label: "服主" },
+  { value: "server-admin", label: "服务器管理员" }
+];
+
+const statusOptions: Array<{ value: UserStatus; label: string }> = [
+  { value: "active", label: "启用" },
+  { value: "pending", label: "待审核" },
+  { value: "disabled", label: "停用" }
+];
+
+const fallbackUsers: UserResponse[] = userAccess.map((user, index) => ({
+  id: user.id,
+  displayName: user.displayName,
+  email: `${user.id}@local.example.test`,
+  status: user.status,
+  roles: user.roles,
+  profile: {
+    phone: index === 0 ? "13800000000" : "",
+    qq: index === 0 ? "10001" : "",
+    contactNote: user.review
+  },
+  createdAt: "2026-07-03T00:00:00Z",
+  updatedAt: "2026-07-03T00:00:00Z"
+}));
+
+export function UsersPage({ session, operations }: PageComponentProps) {
+  const [users, setUsers] = useState<UserResponse[]>(fallbackUsers);
+  const [loading, setLoading] = useState(true);
+  const [source, setSource] = useState<"api" | "local">("local");
+  const [loadError, setLoadError] = useState("");
+  const [result, setResult] = useState<{ status: "pending" | "succeeded" | "failed"; label: string }>();
+  const [draft, setDraft] = useState<UserCreateRequest>({
+    displayName: "",
+    email: "",
+    roles: ["server-admin"],
+    status: "pending",
+    profile: { phone: "", qq: "", contactNote: "" }
+  });
+
+  useEffect(() => {
+    let cancelled = false;
+    void platformApiClient
+      .listUsers()
+      .then((response) => {
+        if (!cancelled) {
+          setUsers(response.items);
+          setSource("api");
+          setLoadError("");
+        }
+      })
+      .catch(() => {
+        if (!cancelled) {
+          setUsers(fallbackUsers);
+          setSource("local");
+          setLoadError("账号 API 加载失败，当前显示本地样例；创建与状态更新仍会尝试平台 API。");
+        }
+      })
+      .finally(() => {
+        if (!cancelled) {
+          setLoading(false);
+        }
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+
+  const counts = useMemo(
+    () => ({
+      active: users.filter((user) => user.status === "active").length,
+      pending: users.filter((user) => user.status === "pending").length,
+      roleCount: new Set(users.flatMap((user) => user.roles)).size
+    }),
+    [users]
+  );
+
+  async function createUser(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault();
+    const request: UserCreateRequest = {
+      ...draft,
+      displayName: draft.displayName.trim(),
+      email: draft.email?.trim(),
+      roles: draft.roles.length ? draft.roles : ["server-admin"],
+      profile: {
+        phone: draft.profile?.phone?.trim(),
+        qq: draft.profile?.qq?.trim(),
+        contactNote: draft.profile?.contactNote?.trim()
+      }
+    };
+    const operationId = operations.begin({ intent: "创建用户", targetKind: "platform", targetId: "users", requester: session.displayName });
+    setResult({ status: "pending", label: `正在创建用户 ${operationId}` });
+    try {
+      const created = await platformApiClient.createUser(request);
+      setUsers((current) => [created, ...current.filter((user) => user.id !== created.id)]);
+      operations.succeed(operationId, `用户已创建：${created.id}`);
+      setSource("api");
+      setLoadError("");
+      setResult({ status: "succeeded", label: `已创建 ${created.displayName}` });
+    } catch (error) {
+      operations.fail(operationId, error instanceof Error ? error.message : "用户创建失败");
+      setResult({ status: "failed", label: "用户创建失败，未写入数据库" });
+    }
+    setDraft({ displayName: "", email: "", roles: ["server-admin"], status: "pending", profile: { phone: "", qq: "", contactNote: "" } });
+  }
+
+  async function setUserStatus(user: UserResponse, status: UserStatus) {
+    const operationId = operations.begin({ intent: "更新用户状态", targetKind: "platform", targetId: user.id, requester: session.displayName });
+    setResult({ status: "pending", label: `正在更新 ${user.displayName}` });
+    try {
+      const updated = await platformApiClient.updateUser(user.id, { status });
+      setUsers((current) => current.map((item) => (item.id === updated.id ? updated : item)));
+      operations.succeed(operationId, `用户状态已更新：${updated.id}`);
+      setSource("api");
+      setLoadError("");
+      setResult({ status: "succeeded", label: `${updated.displayName} 已${statusLabel(updated.status)}` });
+    } catch (error) {
+      operations.fail(operationId, error instanceof Error ? error.message : "用户状态更新失败");
+      setResult({ status: "failed", label: "状态更新失败，未写入数据库" });
+    }
+  }
+
+  function toggleRole(role: string) {
+    setDraft((current) => {
+      const nextRoles = current.roles.includes(role) ? current.roles.filter((item) => item !== role) : [...current.roles, role];
+      return { ...current, roles: nextRoles };
+    });
+  }
+
+  if (!isPlatformAdmin(session)) {
+    return (
+      <div className="console-page">
+        <PageFrame kicker="身份" title="用户管理" status="无访问权限" metrics={[]} />
+        <section className="console-panel">
+          <div className="state-view state-error" role="alert">
+            <HeartHandshake size={24} />
+            <strong>当前账号不能管理用户</strong>
+            <p>服务器用户不会看到用户管理导航；直接访问该页时应返回角色默认工作区。</p>
+          </div>
+        </section>
+      </div>
+    );
+  }
+
+  return (
+    <div className="console-page">
+      <PageFrame
+        kicker="身份"
+        title="用户管理"
+        status={source === "api" ? "账号 API 已连接" : "本地回退"}
+        metrics={[
+          { label: "用户", value: `${users.length}`, tone: "success" },
+          { label: "角色", value: `${counts.roleCount}`, tone: "neutral" },
+          { label: "待审核", value: `${counts.pending}`, tone: "warning" }
+        ]}
+      />
+
+      {loading && <LoadingState label="正在加载用户列表…" />}
+      {loadError && <ErrorState title="用户 API 暂不可用" reason={loadError} diagnosticId="user-management:fallback" compact />}
+
+      <section className="console-panel">
+        <div className="panel-header">
+          <h2>创建用户</h2>
+          {loading ? <ResultBadge status="pending" label="加载用户…" /> : result && <ResultBadge status={result.status} label={result.label} />}
+        </div>
+        <form className="management-form" onSubmit={createUser}>
+          <label>
+            <span>显示名称</span>
+            <input value={draft.displayName} required onChange={(event) => setDraft((current) => ({ ...current, displayName: event.target.value }))} />
+          </label>
+          <label>
+            <span>邮箱</span>
+            <input value={draft.email} type="email" onChange={(event) => setDraft((current) => ({ ...current, email: event.target.value }))} />
+          </label>
+          <label>
+            <span>手机号</span>
+            <input
+              value={draft.profile?.phone ?? ""}
+              inputMode="tel"
+              onChange={(event) => setDraft((current) => ({ ...current, profile: { ...current.profile, phone: event.target.value } }))}
+            />
+          </label>
+          <label>
+            <span>QQ</span>
+            <input
+              value={draft.profile?.qq ?? ""}
+              inputMode="numeric"
+              onChange={(event) => setDraft((current) => ({ ...current, profile: { ...current.profile, qq: event.target.value } }))}
+            />
+          </label>
+          <label>
+            <span>备注</span>
+            <input
+              value={draft.profile?.contactNote ?? ""}
+              onChange={(event) => setDraft((current) => ({ ...current, profile: { ...current.profile, contactNote: event.target.value } }))}
+            />
+          </label>
+          <label>
+            <span>状态</span>
+            <select value={draft.status} onChange={(event) => setDraft((current) => ({ ...current, status: event.target.value as UserStatus }))}>
+              {statusOptions.map((option) => (
+                <option key={option.value} value={option.value}>
+                  {option.label}
+                </option>
+              ))}
+            </select>
+          </label>
+          <div className="role-selector" aria-label="角色">
+            {roleOptions.map((role) => (
+              <button key={role.value} type="button" className={cx("role-chip", draft.roles.includes(role.value) && "role-chip-active")} onClick={() => toggleRole(role.value)}>
+                <Sparkles size={13} />
+                <span>{role.label}</span>
+              </button>
+            ))}
+          </div>
+          <button type="submit" className="profile-save-button">
+            <UserRoundPlus size={14} />
+            <span>创建用户</span>
+          </button>
+        </form>
+      </section>
+
+      <section className="console-panel">
+        <div className="panel-header">
+          <h2>访问列表</h2>
+          <span className="page-status">{source === "api" ? "平台数据" : "本地样例 / 待同步"}</span>
+        </div>
+        {users.length === 0 ? (
+          <EmptyState title="暂无用户" description="平台暂未返回可管理账号。创建用户后会在这里显示 API 连接结果。" />
+        ) : (
+          <div className="resource-list user-management-list">
+            {users.map((user) => (
+              <article key={user.id} className="resource-list-item user-management-item">
+                <div>
+                  <strong>{user.displayName}</strong>
+                  <span className="provider-id">{user.email ?? user.id}</span>
+                </div>
+                <span className={cx("status-pill", statusClass(user.status))}>
+                  <UserRoundCheck size={13} />
+                  {statusLabel(user.status)}
+                </span>
+                <span>{user.roles.map(roleLabel).join(" / ")}</span>
+                <span>{profileSummary(user)}</span>
+                <div className="user-actions" aria-label={`${user.displayName} 状态操作`}>
+                  {statusOptions.map((option) => (
+                    <button
+                      key={option.value}
+                      type="button"
+                      className="theme-upload"
+                      disabled={user.status === option.value}
+                      aria-label={`将 ${user.displayName} 设为${option.label}`}
+                      onClick={() => void setUserStatus(user, option.value)}
+                    >
+                      {option.label}
+                    </button>
+                  ))}
+                </div>
+              </article>
+            ))}
+          </div>
+        )}
+      </section>
+    </div>
+  );
+}
+
+function statusLabel(status: UserStatus): string {
+  return status === "active" ? "启用" : status === "pending" ? "待审核" : "停用";
+}
+
+function statusClass(status: UserStatus): string {
+  return status === "active" ? "status-active" : status === "pending" ? "status-pending" : "status-disabled";
+}
+
+function roleLabel(role: string): string {
+  const matched = roleOptions.find((option) => option.value === role || option.value.replace("-", "") === role.toLowerCase());
+  return matched?.label ?? role;
+}
+
+function profileSummary(user: UserResponse): string {
+  const parts = [user.profile?.phone, user.profile?.qq ? `QQ ${user.profile.qq}` : undefined, user.profile?.contactNote].filter(Boolean);
+  return parts.length > 0 ? parts.join(" · ") : "暂无联系方式";
+}
diff --git a/platform_web/pages/pageRegistry.tsx b/platform_web/pages/pageRegistry.tsx
new file mode 100644
index 0000000..19106d0
--- /dev/null
+++ b/platform_web/pages/pageRegistry.tsx
@@ -0,0 +1,22 @@
+import type { ComponentType } from "react";
+
+import type { PageComponentProps, PageId } from "../contracts/page";
+import { AiProvidersPage } from "./AiProvidersPage";
+import { HomePage } from "./HomePage";
+import { MaintenancePage } from "./MaintenancePage";
+import { PluginsPage } from "./PluginsPage";
+import { ProfileSettingsPage } from "./ProfileSettingsPage";
+import { ServerDetailPage } from "./ServerDetailPage";
+import { ServersPage } from "./ServersPage";
+import { UsersPage } from "./UsersPage";
+
+export const pageRegistry: Record<PageId, ComponentType<PageComponentProps>> = {
+  home: HomePage,
+  servers: ServersPage,
+  serverDetail: ServerDetailPage,
+  plugins: PluginsPage,
+  profileSettings: ProfileSettingsPage,
+  users: UsersPage,
+  aiProviders: AiProvidersPage,
+  maintenance: MaintenancePage
+};
diff --git a/platform_web/routes/routes.md b/platform_web/routes/routes.md
new file mode 100644
index 0000000..5ec5684
--- /dev/null
+++ b/platform_web/routes/routes.md
@@ -0,0 +1,25 @@
+# Platform Web Routes
+
+First-party routes must be declared here before page implementation.
+
+## Required Navigation
+
+- `/`: 平台概览（平台管理员默认落地页）.
+- `/servers`: 服务器管理（服主/服务器管理员默认落地页）.
+- `/servers/:serverId`: 服务器详情 route（日常运维工作台：概览、日志、配置、插件控制、AI 助手、操作历史）.
+- `/plugins`: 插件市场.
+- `/users`: 用户管理.
+- `/ai-providers`: AI 提供商管理.
+- `/maintenance`: 系统维护（审计事件与运行节点）.
+- `/plugin-pages/:pluginId/:routeKey`: platform-hosted plugin page route.
+
+## Role Scoping
+
+Navigation entries are generated from the current user's capability set (`contracts/workspace.ts`):
+
+- Platform administrators see 平台概览、服务器管理、插件市场、用户管理、AI 提供商管理、系统维护.
+- Server owners and server administrators see only 服务器管理 and their server detail workspaces; unauthorized hashes redirect to the role default workspace.
+- Default landing: platform administrators land on `/`, server owners/administrators land on `/servers`.
+- Server creation opens inline from 服务器管理 (no separate `/servers/new` page).
+
+Server and plugin detail flows must use routes, modals, or drawers. Do not build a fixed left-list/right-detail page.
diff --git a/platform_web/routes/routes.test.ts b/platform_web/routes/routes.test.ts
new file mode 100644
index 0000000..6796793
--- /dev/null
+++ b/platform_web/routes/routes.test.ts
@@ -0,0 +1,86 @@
+import { describe, expect, it } from "vitest";
+
+import { defaultPageForUser, firstPartyRoutes, hashForPage, navigationRoutesForUser, resolveRouteHash, routeForPage } from "./routes";
+import { initialNavigationState } from "../stores/navigation";
+import { capabilitiesForRoles, type CurrentUserView } from "../contracts/workspace";
+
+const platformAdmin: CurrentUserView = {
+  id: "user-admin",
+  displayName: "Admin",
+  status: "active",
+  roles: ["platformAdmin"],
+  capabilities: capabilitiesForRoles(["platformAdmin"]),
+  profile: {},
+  source: "local"
+};
+
+const serverAdmin: CurrentUserView = {
+  id: "user-server",
+  displayName: "Server Operator",
+  status: "active",
+  roles: ["serverAdmin"],
+  capabilities: capabilitiesForRoles(["serverAdmin"]),
+  profile: {},
+  source: "local"
+};
+
+describe("console shell routes", () => {
+  it("resolves known hashes and paths", () => {
+    expect(resolveRouteHash("#/servers", platformAdmin).route.id).toBe("servers");
+    expect(resolveRouteHash("#/profile", platformAdmin).route.id).toBe("profileSettings");
+    expect(resolveRouteHash("#/aiProviders", platformAdmin).route.id).toBe("aiProviders");
+    expect(resolveRouteHash("#/ai-providers", platformAdmin).route.id).toBe("aiProviders");
+    expect(resolveRouteHash("#/unknown", platformAdmin).route.id).toBe("home");
+    expect(resolveRouteHash("#/plugins", platformAdmin).route.id).toBe("plugins");
+  });
+
+  it("resolves server detail hashes with params", () => {
+    const resolved = resolveRouteHash("#/servers/server-example-1", platformAdmin);
+    expect(resolved.route.id).toBe("serverDetail");
+    expect(resolved.params.serverId).toBe("server-example-1");
+    expect(hashForPage("serverDetail", { serverId: "server-example-1" })).toBe("#/servers/server-example-1");
+  });
+
+  it("keeps route metadata available for shell navigation", () => {
+    expect(firstPartyRoutes.map((route) => route.id)).toContain("maintenance");
+    expect(firstPartyRoutes.map((route) => route.id)).toContain("profileSettings");
+    expect(routeForPage("users")).toMatchObject({ label: "用户管理", hash: "#/users" });
+    expect(routeForPage("profileSettings")).toMatchObject({ label: "个人设置", hash: "#/profile" });
+  });
+
+  it("routes platform administrators to the platform overview by default", () => {
+    expect(defaultPageForUser(platformAdmin)).toBe("home");
+    expect(initialNavigationState(platformAdmin, "").pageId).toBe("home");
+  });
+
+  it("routes server owners and administrators to the server list by default", () => {
+    expect(defaultPageForUser(serverAdmin)).toBe("servers");
+    expect(initialNavigationState(serverAdmin, "").pageId).toBe("servers");
+  });
+
+  it("hides platform-only navigation from server-only users", () => {
+    const labels = navigationRoutesForUser(serverAdmin).map((route) => route.label);
+    expect(labels).toContain("服务器管理");
+    expect(labels).not.toContain("平台概览");
+    expect(labels).not.toContain("用户管理");
+    expect(labels).not.toContain("AI 提供商管理");
+    expect(labels).not.toContain("系统维护");
+    expect(labels).not.toContain("个人设置");
+  });
+
+  it("shows all platform areas to platform administrators", () => {
+    const labels = navigationRoutesForUser(platformAdmin).map((route) => route.label);
+    expect(labels).toEqual(["平台概览", "服务器管理", "插件市场", "用户管理", "AI 提供商管理", "系统维护"]);
+  });
+
+  it("allows every authenticated role to open profile settings", () => {
+    expect(initialNavigationState(platformAdmin, "#/profile").pageId).toBe("profileSettings");
+    expect(initialNavigationState(serverAdmin, "#/profile").pageId).toBe("profileSettings");
+  });
+
+  it("redirects unauthorized hashes to the role default workspace", () => {
+    expect(initialNavigationState(serverAdmin, "#/home").pageId).toBe("servers");
+    expect(initialNavigationState(serverAdmin, "#/users").pageId).toBe("servers");
+    expect(initialNavigationState(serverAdmin, "#/servers/server-1").pageId).toBe("serverDetail");
+  });
+});
diff --git a/platform_web/routes/routes.ts b/platform_web/routes/routes.ts
new file mode 100644
index 0000000..3b21efe
--- /dev/null
+++ b/platform_web/routes/routes.ts
@@ -0,0 +1,141 @@
+import type { PageId, PageParams, PageRoute } from "../contracts/page";
+import type { CurrentUserView } from "../contracts/workspace";
+import { isPlatformAdmin } from "../contracts/workspace";
+
+export const firstPartyRoutes: PageRoute[] = [
+  {
+    id: "profileSettings",
+    label: "个人设置",
+    path: "/profile",
+    hash: "#/profile",
+    description: "个人资料与界面偏好",
+    requiredCapability: "profile.settings.manage",
+    showInNav: false
+  },
+  {
+    id: "home",
+    label: "平台概览",
+    path: "/",
+    hash: "#/home",
+    description: "平台运行健康概览",
+    requiredCapability: "platform.overview.read",
+    showInNav: true
+  },
+  {
+    id: "servers",
+    label: "服务器管理",
+    path: "/servers",
+    hash: "#/servers",
+    description: "服务器列表、状态与生命周期",
+    requiredCapability: "servers.read",
+    showInNav: true
+  },
+  {
+    id: "serverDetail",
+    label: "服务器详情",
+    path: "/servers/:serverId",
+    hash: "#/servers/:serverId",
+    description: "单服务器日常运维工作台",
+    requiredCapability: "servers.read",
+    showInNav: false
+  },
+  {
+    id: "plugins",
+    label: "插件市场",
+    path: "/plugins",
+    hash: "#/plugins",
+    description: "插件发现、安装状态与文档",
+    requiredCapability: "plugins.market.read",
+    showInNav: true
+  },
+  {
+    id: "users",
+    label: "用户管理",
+    path: "/users",
+    hash: "#/users",
+    description: "用户、角色和访问审核",
+    requiredCapability: "users.manage",
+    showInNav: true
+  },
+  {
+    id: "aiProviders",
+    label: "AI 提供商管理",
+    path: "/ai-providers",
+    hash: "#/aiProviders",
+    description: "平台中介模型配置",
+    requiredCapability: "aiProviders.manage",
+    showInNav: true
+  },
+  {
+    id: "maintenance",
+    label: "系统维护",
+    path: "/maintenance",
+    hash: "#/maintenance",
+    description: "审计事件与运行节点健康",
+    requiredCapability: "system.maintenance",
+    showInNav: true
+  }
+];
+
+const routesById = new Map(firstPartyRoutes.map((route) => [route.id, route]));
+
+export interface ResolvedRoute {
+  route: PageRoute;
+  params: PageParams;
+}
+
+export function routeForPage(pageId: PageId): PageRoute {
+  return routesById.get(pageId) ?? firstPartyRoutes[0];
+}
+
+export function hashForPage(pageId: PageId, params: PageParams = {}): string {
+  const route = routeForPage(pageId);
+  if (pageId === "serverDetail" && params.serverId) {
+    return `#/servers/${encodeURIComponent(params.serverId)}`;
+  }
+  return route.hash;
+}
+
+export function defaultPageForUser(user: CurrentUserView): PageId {
+  return isPlatformAdmin(user) ? "home" : "servers";
+}
+
+export function navigationRoutesForUser(user: CurrentUserView): PageRoute[] {
+  return firstPartyRoutes.filter((route) => route.showInNav && user.capabilities.includes(route.requiredCapability));
+}
+
+export function canAccessRoute(user: CurrentUserView, pageId: PageId): boolean {
+  const route = routesById.get(pageId);
+  if (!route) {
+    return false;
+  }
+  return user.capabilities.includes(route.requiredCapability);
+}
+
+export function resolveRouteHash(hash: string, user?: CurrentUserView): ResolvedRoute {
+  const fallback: ResolvedRoute = {
+    route: routeForPage(user ? defaultPageForUser(user) : "servers"),
+    params: {}
+  };
+  const normalized = hash.replace(/^#/, "");
+  if (!normalized || normalized === "/") {
+    return fallback;
+  }
+  const segments = normalized.replace(/^\//, "").split("/").filter(Boolean);
+  if (segments.length === 0) {
+    return fallback;
+  }
+  if (segments[0] === "servers" && segments.length > 1) {
+    return { route: routeForPage("serverDetail"), params: { serverId: decodeURIComponent(segments[1]) } };
+  }
+  const key = segments[0];
+  const byId = routesById.get(key as PageId);
+  if (byId) {
+    return { route: byId, params: {} };
+  }
+  const byPath = firstPartyRoutes.find((route) => route.path === `/${key}`);
+  if (byPath) {
+    return { route: byPath, params: {} };
+  }
+  return fallback;
+}
diff --git a/platform_web/schemas/aiProviders.ts b/platform_web/schemas/aiProviders.ts
new file mode 100644
index 0000000..4f0a5eb
--- /dev/null
+++ b/platform_web/schemas/aiProviders.ts
@@ -0,0 +1,28 @@
+import type { AiProviderRequest, AiProviderUpdateRequest } from "../api/types";
+import type { AiProviderFormState } from "../contracts/aiProviders";
+
+export function aiProviderCreateRequestFromForm(form: AiProviderFormState): AiProviderRequest {
+  return {
+    id: form.id.trim(),
+    ...aiProviderUpdateRequestFromForm(form)
+  };
+}
+
+export function aiProviderUpdateRequestFromForm(form: AiProviderFormState): AiProviderUpdateRequest {
+  const models = form.modelsText
+    .split(",")
+    .map((model) => model.trim())
+    .filter(Boolean);
+
+  return {
+    name: form.name.trim(),
+    kind: form.kind,
+    baseUrl: form.baseUrl.trim(),
+    apiKeyRef: form.apiKeyRef.trim(),
+    models,
+    defaultModel: form.defaultModel.trim() || models[0],
+    relayMode: form.relayMode,
+    timeoutMs: Number.parseInt(form.timeoutMs, 10),
+    redactionPolicy: form.redactionPolicy.trim() || "default"
+  };
+}
diff --git a/platform_web/schemas/env.ts b/platform_web/schemas/env.ts
new file mode 100644
index 0000000..510ad59
--- /dev/null
+++ b/platform_web/schemas/env.ts
@@ -0,0 +1,11 @@
+export interface WebRuntimeEnv {
+  platformApiBaseUrl: string;
+  enableLocalAuthFallback: boolean;
+}
+
+export function readWebRuntimeEnv(): WebRuntimeEnv {
+  return {
+    platformApiBaseUrl: import.meta.env.VITE_PLATFORM_API_BASE_URL ?? "/api/v1",
+    enableLocalAuthFallback: import.meta.env.VITE_ENABLE_LOCAL_AUTH_FALLBACK === "true"
+  };
+}
diff --git a/platform_web/schemas/frontend-structure.md b/platform_web/schemas/frontend-structure.md
new file mode 100644
index 0000000..469054a
--- /dev/null
+++ b/platform_web/schemas/frontend-structure.md
@@ -0,0 +1,12 @@
+# Frontend Structure Rules
+
+Validation rules for future frontend checks:
+
+- Page components must not define shared API request/response types.
+- Route definitions must live under `routes/`.
+- API clients must live under `api/`.
+- Plugin bridge contracts must live under `contracts/`.
+- Validation schemas must live under `schemas/`.
+- Visual theme tokens, shared surface styles, and background behavior must live under `theme/`, and `theme/README.md` must document the active style contract.
+- Full-workspace magical ultimate-effect behavior must live in `components/MagicalParticleLayer.tsx` and be mounted from shared shell chrome, not copied into individual pages.
+- Shared utilities must live under `utils/`.
diff --git a/platform_web/schemas/serverManagement.ts b/platform_web/schemas/serverManagement.ts
new file mode 100644
index 0000000..0083539
--- /dev/null
+++ b/platform_web/schemas/serverManagement.ts
@@ -0,0 +1,24 @@
+import type { ServerLifecycleCommandRequest, ServerLifecycleCreateRequest, ServerInstanceResponse } from "../api/types";
+import type { ServerCreateFormState } from "../contracts/serverManagement";
+
+export function serverCreateRequestFromForm(form: ServerCreateFormState, sequence = Date.now()): ServerLifecycleCreateRequest {
+  const id = form.id.trim();
+  return {
+    id,
+    pluginId: form.pluginId.trim(),
+    runEndpointId: form.runEndpointId.trim(),
+    name: form.name.trim(),
+    idempotencyKey: lifecycleIdempotencyKey("create", id, sequence)
+  };
+}
+
+export function serverLifecycleCommandRequest(instance: ServerInstanceResponse, action: "start" | "stop", sequence = Date.now()): ServerLifecycleCommandRequest {
+  return {
+    expectedConfigVersion: instance.configVersion,
+    idempotencyKey: lifecycleIdempotencyKey(action, instance.id, sequence)
+  };
+}
+
+export function lifecycleIdempotencyKey(action: "create" | "start" | "stop", serverInstanceId: string, sequence: number): string {
+  return `web:${action}:${serverInstanceId}:${sequence}`;
+}
diff --git a/platform_web/stores/navigation.ts b/platform_web/stores/navigation.ts
new file mode 100644
index 0000000..d7b8ab6
--- /dev/null
+++ b/platform_web/stores/navigation.ts
@@ -0,0 +1,23 @@
+import type { PageId, PageParams } from "../contracts/page";
+import type { CurrentUserView } from "../contracts/workspace";
+import { canAccessRoute, defaultPageForUser, resolveRouteHash } from "../routes/routes";
+import { firstPartyRoutes } from "../routes/routes";
+
+const routeIds: PageId[] = firstPartyRoutes.map((route) => route.id);
+
+export function isPageId(value: string): value is PageId {
+  return routeIds.includes(value as PageId);
+}
+
+export interface NavigationState {
+  pageId: PageId;
+  params: PageParams;
+}
+
+export function initialNavigationState(user: CurrentUserView, hash = typeof window === "undefined" ? "" : window.location.hash): NavigationState {
+  const resolved = resolveRouteHash(hash, user);
+  if (!canAccessRoute(user, resolved.route.id)) {
+    return { pageId: defaultPageForUser(user), params: {} };
+  }
+  return { pageId: resolved.route.id, params: resolved.params };
+}
diff --git a/platform_web/stores/operations.ts b/platform_web/stores/operations.ts
new file mode 100644
index 0000000..3192d46
--- /dev/null
+++ b/platform_web/stores/operations.ts
@@ -0,0 +1,93 @@
+import { useCallback, useRef, useState } from "react";
+
+import type { JobResponse } from "../api/types";
+import type { OperationRecord, OperationStatus } from "../contracts/workspace";
+
+export interface BeginOperationInput {
+  intent: string;
+  targetKind: OperationRecord["targetKind"];
+  targetId: string;
+  requester?: string;
+}
+
+export interface OperationUpdate {
+  status?: OperationStatus;
+  job?: JobResponse;
+  message?: string;
+  errorReason?: string;
+  diagnosticId?: string;
+}
+
+export interface OperationTracker {
+  operations: OperationRecord[];
+  begin: (input: BeginOperationInput) => string;
+  update: (operationId: string, update: OperationUpdate) => void;
+  succeed: (operationId: string, message?: string, job?: JobResponse) => void;
+  fail: (operationId: string, errorReason: string, diagnosticId?: string) => void;
+  isPending: (targetId: string, intent?: string) => boolean;
+}
+
+export function useOperationTracker(): OperationTracker {
+  const [operations, setOperations] = useState<OperationRecord[]>([]);
+  const sequence = useRef(0);
+
+  const begin = useCallback((input: BeginOperationInput): string => {
+    sequence.current += 1;
+    const now = new Date().toISOString();
+    const record: OperationRecord = {
+      id: `op-${Date.now()}-${sequence.current}`,
+      intent: input.intent,
+      targetKind: input.targetKind,
+      targetId: input.targetId,
+      requester: input.requester ?? "当前用户",
+      status: "pending",
+      createdAt: now,
+      updatedAt: now
+    };
+    setOperations((current) => [record, ...current]);
+    return record.id;
+  }, []);
+
+  const update = useCallback((operationId: string, patch: OperationUpdate) => {
+    setOperations((current) =>
+      current.map((operation) =>
+        operation.id === operationId
+          ? {
+              ...operation,
+              status: patch.status ?? operation.status,
+              jobId: patch.job?.id ?? operation.jobId,
+              jobState: patch.job?.state ?? operation.jobState,
+              message: patch.message ?? operation.message,
+              errorReason: patch.errorReason ?? operation.errorReason,
+              diagnosticId: patch.diagnosticId ?? operation.diagnosticId,
+              updatedAt: new Date().toISOString()
+            }
+          : operation
+      )
+    );
+  }, []);
+
+  const succeed = useCallback(
+    (operationId: string, message?: string, job?: JobResponse) => {
+      update(operationId, { status: "succeeded", message, job });
+    },
+    [update]
+  );
+
+  const fail = useCallback(
+    (operationId: string, errorReason: string, diagnosticId?: string) => {
+      update(operationId, { status: "failed", errorReason, diagnosticId: diagnosticId ?? operationId });
+    },
+    [update]
+  );
+
+  const isPending = useCallback(
+    (targetId: string, intent?: string) =>
+      operations.some(
+        (operation) => operation.status === "pending" && operation.targetId === targetId && (intent === undefined || operation.intent === intent)
+      ),
+    [operations]
+  );
+
+  return { operations, begin, update, succeed, fail, isPending };
+}
diff --git a/platform_web/stores/session.test.ts b/platform_web/stores/session.test.ts
new file mode 100644
index 0000000..f67ce80
--- /dev/null
+++ b/platform_web/stores/session.test.ts
@@ -0,0 +1,69 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import { setPlatformApiSessionToken } from "../api/client";
+import { rolesFromBackendRoles } from "../contracts/workspace";
+import { currentUserFromResponse, loadCurrentUser, localFallbackUser } from "./session";
+
+describe("session store helpers", () => {
+  afterEach(() => {
+    setPlatformApiSessionToken(null);
+    vi.restoreAllMocks();
+    vi.unstubAllGlobals();
+  });
+
+  it("does not grant platform administrator access for local fallback", () => {
+    expect(localFallbackUser.roles).toEqual(["serverAdmin"]);
+    expect(localFallbackUser.capabilities).not.toContain("users.manage");
+  });
+
+  it("maps backend platform admin roles only from API responses", () => {
+    const user = currentUserFromResponse({ id: "user-admin", displayName: "Operator", status: "active", roles: ["platform-admin"] }, "api");
+    expect(user.roles).toEqual(["platformAdmin"]);
+    expect(user.capabilities).toContain("users.manage");
+    expect(rolesFromBackendRoles(["server-admin"])).toEqual(["serverAdmin"]);
+  });
+
+  it("returns null without a stored API session token", async () => {
+    stubWindowStorage(new Map());
+    await expect(loadCurrentUser()).resolves.toBeNull();
+  });
+
+  it("loads current user with a stored API bearer token", async () => {
+    const storage = new Map([["platform-web.session.apiToken", "session-token"]]);
+    stubWindowStorage(storage);
+    const fetchMock = vi.fn(async (_input: RequestInfo | URL, init?: RequestInit) => {
+      expect(new Headers(init?.headers).get("Authorization")).toBe("Bearer session-token");
+      return jsonResponse({ id: "user-admin", displayName: "Operator", status: "active", roles: ["platform-admin"] });
+    });
+    vi.stubGlobal("fetch", fetchMock);
+
+    await expect(loadCurrentUser()).resolves.toMatchObject({ id: "user-admin", roles: ["platformAdmin"], source: "api" });
+    expect(storage.get("platform-web.session.apiToken")).toBe("session-token");
+  });
+
+  it("clears stale stored API session tokens", async () => {
+    const storage = new Map([["platform-web.session.apiToken", "stale-token"]]);
+    stubWindowStorage(storage);
+    vi.stubGlobal("fetch", vi.fn(async () => jsonResponse({ message: "authentication required" }, 401)));
+
+    await expect(loadCurrentUser()).resolves.toBeNull();
+    expect(storage.has("platform-web.session.apiToken")).toBe(false);
+  });
+});
+
+function stubWindowStorage(values: Map<string, string>) {
+  vi.stubGlobal("window", {
+    localStorage: {
+      getItem: (key: string) => values.get(key) ?? null,
+      setItem: (key: string, value: string) => values.set(key, value),
+      removeItem: (key: string) => values.delete(key)
+    }
+  });
+}
+
+function jsonResponse(body: unknown, status = 200): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "Content-Type": "application/json" }
+  });
+}
diff --git a/platform_web/stores/session.ts b/platform_web/stores/session.ts
new file mode 100644
index 0000000..50ebf24
--- /dev/null
+++ b/platform_web/stores/session.ts
@@ -0,0 +1,281 @@
+import { useEffect, useState } from "react";
+
+import { platformApiClient, setPlatformApiSessionToken } from "../api/client";
+import type {
+  AuthSessionResponse,
+  CurrentUserResponse,
+  LoginRequest,
+  RegisterRequest,
+  UserProfileUpdateRequest,
+  UserThemePreferenceRequest,
+  UserThemePreferenceResponse
+} from "../api/types";
+import type { CurrentUserView } from "../contracts/workspace";
+import { capabilitiesForRoles, rolesFromBackendRoles } from "../contracts/workspace";
+import { readWebRuntimeEnv } from "../schemas/env";
+import { defaultThemeBackgroundId, defaultThemePaletteId, loadThemeState } from "../theme/tokens";
+
+const sessionTokenStorageKey = "platform-web.session.apiToken";
+const localFallbackEnabled = readWebRuntimeEnv().enableLocalAuthFallback;
+
+export const localFallbackUser: CurrentUserView = {
+  id: "local-server-operator",
+  displayName: "Local Server Operator",
+  email: "local.server@example.test",
+  status: "active",
+  roles: ["serverAdmin"],
+  capabilities: capabilitiesForRoles(["serverAdmin"]),
+  profile: {
+    phone: "",
+    qq: "",
+    contactNote: "本地开发回退账号，仅限服务器工作台"
+  },
+  source: "local"
+};
+
+export interface AuthFormState {
+  mode: "login" | "register";
+  pending: boolean;
+  error?: string;
+  success?: string;
+}
+
+export interface SessionState {
+  user?: CurrentUserView;
+  loaded: boolean;
+  authenticated: boolean;
+  authUnavailable: boolean;
+  localFallbackAvailable: boolean;
+  auth: AuthFormState;
+  login: (request: LoginRequest) => Promise<void>;
+  register: (request: RegisterRequest) => Promise<void>;
+  logout: () => Promise<void>;
+  continueWithLocalFallback: () => void;
+  switchAuthMode: (mode: AuthFormState["mode"]) => void;
+  updateProfile: (request: UserProfileUpdateRequest) => Promise<CurrentUserView>;
+  updateThemePreference: (request: UserThemePreferenceRequest) => Promise<UserThemePreferenceResponse>;
+}
+
+export async function loadCurrentUser(): Promise<CurrentUserView | null> {
+  const storedToken = readStoredSessionToken();
+  setPlatformApiSessionToken(storedToken);
+  if (!storedToken) {
+    return null;
+  }
+  try {
+    const response = await platformApiClient.getCurrentUser();
+    return currentUserFromResponse(response, "api");
+  } catch {
+    persistSessionToken(null);
+    setPlatformApiSessionToken(null);
+    return null;
+  }
+}
+
+export function useSession(): SessionState {
+  const [user, setUser] = useState<CurrentUserView | undefined>();
+  const [loaded, setLoaded] = useState(false);
+  const [authUnavailable, setAuthUnavailable] = useState(false);
+  const [auth, setAuth] = useState<AuthFormState>({ mode: "login", pending: false });
+
+  useEffect(() => {
+    let cancelled = false;
+    void loadCurrentUser().then((currentUser) => {
+      if (cancelled) {
+        return;
+      }
+      setUser(currentUser ?? undefined);
+      setAuthUnavailable(!currentUser);
+      setLoaded(true);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+
+  async function login(request: LoginRequest) {
+    setAuth({ mode: "login", pending: true });
+    try {
+      const response = await platformApiClient.login(request);
+      finishAuth(response, "登录成功");
+    } catch (error) {
+      setAuth({
+        mode: "login",
+        pending: false,
+        error: error instanceof Error ? error.message : "登录失败，请重试。"
+      });
+    }
+  }
+
+  async function register(request: RegisterRequest) {
+    setAuth({ mode: "register", pending: true });
+    try {
+      const response = await platformApiClient.register(request);
+      const nextUser = currentUserFromResponse(response.user, "api");
+      if (response.status === "authenticated") {
+        setUser(nextUser);
+        persistSessionToken(response.sessionId ?? null);
+        setPlatformApiSessionToken(response.sessionId ?? null);
+      }
+      setAuth({
+        mode: response.status === "authenticated" ? "login" : "register",
+        pending: false,
+        success: response.message ?? (response.status === "authenticated" ? "注册成功，已进入工作台。" : "注册申请已提交，等待平台管理员审核。")
+      });
+    } catch (error) {
+      setAuth({
+        mode: "register",
+        pending: false,
+        error: error instanceof Error ? error.message : "注册失败，请稍后重试。"
+      });
+    }
+  }
+
+  async function logout() {
+    try {
+      await platformApiClient.logout();
+    } catch {
+      // Local fallback logout still clears the visible session.
+    }
+    persistSessionToken(null);
+    setPlatformApiSessionToken(null);
+    setUser(undefined);
+    setAuthUnavailable(false);
+    setAuth({ mode: "login", pending: false, success: "已退出登录。" });
+  }
+
+  function continueWithLocalFallback() {
+    if (!localFallbackEnabled) {
+      setAuth({ mode: "login", pending: false, error: "本地回退未启用，请使用真实账号登录。" });
+      return;
+    }
+    setUser(localFallbackUser);
+    setAuthUnavailable(false);
+    setAuth({ mode: "login", pending: false, success: "已进入本地回退工作台。" });
+  }
+
+  function switchAuthMode(mode: AuthFormState["mode"]) {
+    setAuth({ mode, pending: false });
+  }
+
+  async function updateProfile(request: UserProfileUpdateRequest): Promise<CurrentUserView> {
+    const current = user ?? localFallbackUser;
+    try {
+      const response = await platformApiClient.updateCurrentUserProfile(request);
+      const nextUser = currentUserFromResponse(response, "api");
+      setUser(nextUser);
+      return nextUser;
+    } catch {
+      const nextUser: CurrentUserView = {
+        ...current,
+        displayName: request.displayName,
+        profile: {
+          avatarUrl: request.avatarUrl,
+          phone: request.phone,
+          qq: request.qq,
+          contactNote: request.contactNote
+        },
+        source: "local"
+      };
+      setUser(nextUser);
+      return nextUser;
+    }
+  }
+
+  async function updateThemePreference(request: UserThemePreferenceRequest): Promise<UserThemePreferenceResponse> {
+    const current = user ?? localFallbackUser;
+    try {
+      const response = await platformApiClient.updateCurrentUserTheme(request);
+      setUser({ ...current, themePreference: response, source: "api" });
+      return response;
+    } catch {
+      const response: UserThemePreferenceResponse = {
+        ...request,
+        userId: current.id,
+        persistence: "local",
+        updatedAt: new Date().toISOString()
+      };
+      const nextUser = { ...current, themePreference: response, source: "local" as const };
+      setUser(nextUser);
+      return response;
+    }
+  }
+
+  function finishAuth(response: AuthSessionResponse, fallbackMessage: string) {
+    const nextUser = currentUserFromResponse(response.user, "api");
+    setUser(nextUser);
+    persistSessionToken(response.sessionId ?? null);
+    setPlatformApiSessionToken(response.sessionId ?? null);
+    setAuthUnavailable(false);
+    setAuth({ mode: "login", pending: false, success: response.message ?? fallbackMessage });
+  }
+
+  return {
+    user,
+    loaded,
+    authenticated: Boolean(user),
+    authUnavailable,
+    localFallbackAvailable: localFallbackEnabled,
+    auth,
+    login,
+    register,
+    logout,
+    continueWithLocalFallback,
+    switchAuthMode,
+    updateProfile,
+    updateThemePreference
+  };
+}
+
+export function currentUserFromResponse(response: CurrentUserResponse, source: CurrentUserView["source"]): CurrentUserView {
+  const roles = rolesFromBackendRoles(response.roles);
+  const themeState = loadThemeState();
+  return {
+    id: response.id,
+    displayName: response.displayName,
+    email: response.email,
+    status: response.status ?? "active",
+    roles,
+    capabilities: response.capabilities?.length ? (response.capabilities as CurrentUserView["capabilities"]) : capabilitiesForRoles(roles),
+    profile: response.profile ?? {},
+    themePreference:
+      response.themePreference ??
+      (source === "local"
+        ? {
+            userId: response.id,
+            paletteId: themeState.paletteId || defaultThemePaletteId,
+            backgroundPresetId: themeState.backgroundPresetId || defaultThemeBackgroundId,
+            backgroundImage: themeState.backgroundImage,
+            persistence: "local",
+            updatedAt: new Date().toISOString()
+          }
+        : undefined),
+    source
+  };
+}
+
+function readStoredSessionToken(): string | null {
+  if (typeof window === "undefined") {
+    return null;
+  }
+  try {
+    return window.localStorage.getItem(sessionTokenStorageKey);
+  } catch {
+    return null;
+  }
+}
+
+function persistSessionToken(token: string | null) {
+  if (typeof window === "undefined") {
+    return;
+  }
+  try {
+    if (token) {
+      window.localStorage.setItem(sessionTokenStorageKey, token);
+    } else {
+      window.localStorage.removeItem(sessionTokenStorageKey);
+    }
+  } catch {
+    // Storage can be unavailable; the in-memory session remains usable.
+  }
+}
diff --git a/platform_web/theme/README.md b/platform_web/theme/README.md
new file mode 100644
index 0000000..c1cf270
--- /dev/null
+++ b/platform_web/theme/README.md
@@ -0,0 +1,61 @@
+# platform_web/theme
+
+This directory owns the platform_web visual system. Keep the console in a unified game-operations style with two first-party theme families: the default black mecha console and the optional magical-girl console.
+
+## Style Contract
+
+- The UI is a game operations console, not a landing page and not a generic SaaS dashboard.
+- The default visual language is black mecha: dark cockpit panels, cyan scanner light, angular frame cuts, tactical grid lines, and amber energy accents.
+- The optional magical-girl visual language uses pink moonlight, jelly glass, gold star borders, ribbon glow, and large visible magic-circle motifs.
+- The primary menu is a compact admin sidebar with two states: an expanded text menu and a collapsed icon rail. It must keep the same route order, readable Chinese labels, icon-only tooltips in collapsed mode, and active state framing. In the magical-girl theme it should feel like a pink moonlit operations rail; in the default theme it should feel like a black mecha console rail with restrained scanner accents.
+- Global floating decoration must come from `components/MagicalParticleLayer.tsx`, using a full-workspace background image layer plus a lightweight global particle DOM layer that reads the active theme variables. Do not add fixed page-local decorative spans or page-local backdrop systems for sparkles, hearts, moons, sigils, or snowflakes.
+- Each theme must have its own visible low-cost ultimate effect: mecha themes use scanner/core/targeting effects, and magical-girl themes use large magic circles, star glints, and ribbon bursts. Do not implement the global effect as dozens of tiny rotating particles.
+- The background desktop is part of the interface. Major surfaces must remain translucent enough for the selected built-in or uploaded background to show through while preserving readable text.
+- Operational clarity wins over decoration. Logs, diffs, forms, errors, warning states, destructive confirmations, LLM review output, and operation/job feedback must stay readable and traceable.
+- Default visual assets must be original CSS/generated motifs. Do not bundle recognizable third-party character art. Users may upload their own backgrounds.
+
+## Files
+
+- `tokens.ts`: theme palette IDs, built-in desktop preset IDs, CSS variable values, local-storage keys, apply/persist helpers, and the live palette-change event used to keep shell chrome synchronized after theme switches.
+- `base.css`: shared CSS primitives for the shell, collapsible sidebar navigation, account/profile panel, cards, panels, tables, drawers, dialogs, logs, diffs, plugin groups, command buttons, mecha frame cuts, magical star frames, global background/particle layer placement, and responsive behavior.
+- `tokens.test.ts`: tests that lock the default black mecha palette, built-in mecha/magical desktop presets, palette-variable cleanup, and theme-change notifications.
+- `base-css.test.js`: CSS contract tests for shared frame behavior that should not be represented in TypeScript token tests.
+
+## Background Rules
+
+- `defaultThemePaletteId` must remain `mecha-black` unless an OpenSpec change explicitly replaces the visual direction.
+- `defaultThemeBackgroundId` should point to a built-in mecha desktop preset that works without uploaded imagery.
+- Built-in presets use CSS variables named `--workspace-background-pattern-*` and render behind the app shell.
+- Uploaded backgrounds use `--workspace-background-image`, set `data-custom-background="true"`, and take visual precedence over the selected preset.
+- Removing an uploaded background must reveal the selected built-in preset again.
+- Theme palette switches must keep uploaded backgrounds intact. Changing from magical-girl to black mecha, or back again, must not clear `--workspace-background-image` or alter the custom-background fallback preset.
+- Any new preset must include an `id`, `label`, `summary`, `preview`, and all required `--workspace-background-pattern-*` variables. Current presets are 机甲格纳库 and 粉月魔法阵.
+
+## Theme Switching Rules
+
+- `applyThemePalette()` is the single writer for active palette variables. It must remove the union of known palette variables before applying the selected palette so previous-theme variables, such as magical-girl accessory SVGs, cannot leak into black mecha.
+- After applying a palette, `applyThemePalette()` must dispatch `themePaletteChangeEvent`. Shell chrome such as the sidebar subtitle and mini swatch strip should subscribe to that event instead of keeping stale local theme labels.
+- `data-theme-palette` on the document root is the source of truth for theme-specific CSS selectors. Do not infer the active theme from route state, component-local state, or background preset IDs.
+- Theme changes must be visually atomic: root marker, CSS variables, menu/sidebar chrome, active navigation frame, and shared surface accessories should all reflect the same selected palette immediately.
+
+## Surface Rules
+
+- Use shared classes such as `metric-card`, `overview-card`, `console-panel`, `catalog-card`, `server-card`, `server-detail-header`, `resource-table-wrap`, `provider-table-wrap`, `drawer-panel`, `confirm-panel`, `plugin-group`, and `operation-item` instead of creating page-local card styles.
+- Shared framed surfaces should use `var(--panel-material)`, `var(--panel-shadow)`, `var(--frame-corner)`, and `var(--frame-accent)` so each theme can change structure, fill, and glow style beyond simple color swaps.
+- A visual region should have only one ornamental frame at a hierarchy level. If a `.state-view` is nested inside a shared framed parent such as `.console-panel`, `.catalog-card`, `.server-card`, `.resource-table-wrap`, `.provider-table-wrap`, `.server-table-wrap`, `.plugin-group`, or `.operation-item`, the parent owns the frame and the nested state view must render as transparent, borderless content with no `::before` or `::after` accessory.
+- Standalone `.state-view` instances may keep their own readable state treatment when they are not inside an already framed surface.
+- Menu frames should use `var(--menu-item-bg)`, `var(--menu-item-active-bg)`, `var(--menu-glyph-bg)`, `var(--menu-title-shadow)`, and `var(--menu-active-outline)` so each theme changes active-state treatment, icon material, and rail/sidebar structure.
+- Shared decoration variables are part of the contract: `--frosted-edge`, `--frosted-surface`, `--corner-sparkle`, `--jelly-highlight`, `--sugar-dust`, `--crystal-edge-glow`, and `--jelly-inset`. In mecha themes these become scanner/grid/bevel materials; in magical themes they become star, ribbon, and jelly-glass materials.
+- Full-screen ambient motifs use the shared `MagicalParticleLayer` background layer and global particle DOM layer. They should remain non-interactive, theme-colored, reduced-motion aware, and behind operational surfaces. Page code should not create one-off fixed decoration containers.
+- Keep framed repeated items at 8px radius or less. Pills and circular avatars are allowed for native pill/circle controls.
+- Do not replace shared panels with opaque white cards, heavy dark themes, unthemed gradients, or one-off color systems.
+- Do not use color as the only status signal. Pair color with text or familiar status icons.
+
+## Adding UI
+
+1. Reuse existing shared surface, command, table, form, status, and state-view classes first.
+2. If a new shared pattern is truly needed, add it in `base.css` and describe its intended use here.
+3. When placing empty/loading/error states inside an existing shared panel, verify the state view does not introduce a second framed panel or accessory layer.
+4. If a new palette or background preset is added, update `tokens.ts`, `tokens.test.ts`, and any CSS contract tests together.
+5. Run `npm run typecheck`, `npm test`, `npm run build`, `scripts/check-structure.sh`, and `openspec validate <change> --strict` before claiming completion.
+6. For page or interaction changes, perform a browser walkthrough before marking visual acceptance tasks complete. At minimum, switch black mecha -> magical-girl -> black mecha with both built-in and uploaded backgrounds when the change touches theme switching, frame accessories, or custom-background styling.
diff --git a/platform_web/theme/base-css.test.js b/platform_web/theme/base-css.test.js
new file mode 100644
index 0000000..27de365
--- /dev/null
+++ b/platform_web/theme/base-css.test.js
@@ -0,0 +1,13 @@
+import { readFileSync } from "node:fs";
+import { describe, expect, it } from "vitest";
+
+describe("platform web shared theme CSS", () => {
+  it("suppresses nested state frames inside shared framed surfaces", () => {
+    const themeCss = readFileSync(new URL("./base.css", import.meta.url), "utf8");
+    const nestedStateReset = themeCss.slice(themeCss.indexOf("A state view inside an already framed surface"));
+
+    expect(nestedStateReset).toContain(".state-view::after");
+    expect(nestedStateReset).toContain("content: none");
+    expect(nestedStateReset).toContain("background: transparent");
+  });
+});
diff --git a/platform_web/theme/base.css b/platform_web/theme/base.css
new file mode 100644
index 0000000..88bdd67
--- /dev/null
+++ b/platform_web/theme/base.css
@@ -0,0 +1,3852 @@
+:root {
+  --ink: #e7f7ff;
+  --ink-soft: #a4bfca;
+  --ink-faint: #6f8b98;
+  --surface: rgba(5, 9, 15, 0.68);
+  --surface-solid: rgba(8, 13, 20, 0.94);
+  --surface-raised: rgba(12, 20, 29, 0.78);
+  --line: rgba(84, 227, 255, 0.24);
+  --line-strong: rgba(104, 239, 255, 0.62);
+  --accent: #48e6ff;
+  --accent-deep: #9af7ff;
+  --accent-soft: rgba(72, 230, 255, 0.14);
+  --teal: #4fffd7;
+  --teal-soft: rgba(79, 255, 215, 0.14);
+  --pink: #ff4d6d;
+  --pink-soft: rgba(255, 77, 109, 0.13);
+  --gold: #ffb84d;
+  --gold-soft: rgba(255, 184, 77, 0.18);
+  --danger: #ff5a6e;
+  --danger-soft: rgba(255, 90, 110, 0.14);
+  --success: #4fffd7;
+  --success-soft: rgba(79, 255, 215, 0.14);
+  --background-base: #05070b;
+  --background-glow-1: rgba(72, 230, 255, 0.16);
+  --background-glow-2: rgba(255, 184, 77, 0.11);
+  --background-glow-3: rgba(255, 77, 109, 0.1);
+  --rim-light: rgba(180, 248, 255, 0.64);
+  --candy-glow: rgba(72, 230, 255, 0.32);
+  --glass-wash: linear-gradient(145deg, rgba(39, 56, 68, 0.82), rgba(5, 9, 15, 0.66) 46%, rgba(72, 230, 255, 0.1));
+  --shine-sweep: linear-gradient(112deg, transparent 0 38%, rgba(132, 243, 255, 0.24) 46%, transparent 56%);
+  --glass-tint: rgba(72, 230, 255, 0.08);
+  --crystal-rim: rgba(137, 239, 255, 0.64);
+  --moonbeam: rgba(60, 176, 255, 0.34);
+  --diamond-line: rgba(119, 237, 255, 0.34);
+  --glass-shadow: rgba(0, 0, 0, 0.56);
+  --crystal-spark: rgba(172, 250, 255, 0.92);
+  --sparkle: rgba(196, 252, 255, 0.96);
+  --sparkle-gold: rgba(255, 184, 77, 0.82);
+  --corner-sparkle: linear-gradient(135deg, rgba(72, 230, 255, 0.72) 0 2px, transparent 2px 100%), linear-gradient(315deg, rgba(255, 184, 77, 0.72) 0 2px, transparent 2px 100%), radial-gradient(circle at 86% 18%, rgba(132, 243, 255, 0.88) 0 1.4px, transparent 2.4px);
+  --jelly-highlight: linear-gradient(145deg, rgba(132, 243, 255, 0.16), transparent 32%), radial-gradient(circle at 82% 16%, rgba(255, 184, 77, 0.16), transparent 24%);
+  --sugar-dust: linear-gradient(90deg, rgba(72, 230, 255, 0.08) 1px, transparent 1px), linear-gradient(180deg, rgba(72, 230, 255, 0.07) 1px, transparent 1px), radial-gradient(circle at 88% 18%, rgba(255, 184, 77, 0.62) 0 1.2px, transparent 2px);
+  --crystal-edge-glow: 0 0 0 1px rgba(72, 230, 255, 0.28), 0 0 22px rgba(72, 230, 255, 0.2), 0 0 44px rgba(0, 0, 0, 0.48);
+  --jelly-inset: inset 0 1px 0 rgba(180, 248, 255, 0.22), inset 0 -1px 0 rgba(72, 230, 255, 0.16), inset 0 0 24px rgba(72, 230, 255, 0.08);
+  --frosted-edge: linear-gradient(180deg, rgba(132, 243, 255, 0.18), rgba(7, 12, 18, 0.74) 48%, rgba(255, 184, 77, 0.1));
+  --frosted-surface: linear-gradient(145deg, rgba(18, 29, 40, 0.92), rgba(6, 10, 16, 0.72) 48%, rgba(72, 230, 255, 0.08));
+  --frame-corner: linear-gradient(135deg, rgba(72, 230, 255, 0.9) 0 2px, transparent 2px), linear-gradient(315deg, rgba(255, 184, 77, 0.72) 0 2px, transparent 2px);
+  --frame-accent: linear-gradient(90deg, rgba(72, 230, 255, 0), rgba(72, 230, 255, 0.78), rgba(255, 184, 77, 0.58), rgba(72, 230, 255, 0));
+  --frame-accessory-top: none;
+  --frame-accessory-bottom: none;
+  --frame-accessory-heart: var(--frame-accessory-top);
+  --frame-accessory-wand: var(--frame-accessory-top);
+  --frame-accessory-moon: var(--frame-accessory-top);
+  --frame-accessory-ribbon: var(--frame-accessory-bottom);
+  --frame-accessory-crystal: var(--frame-accessory-bottom);
+  --frame-accessory-circle: var(--frame-accessory-bottom);
+  --frame-accessory-image: var(--frame-accessory-top);
+  --frame-accessory-opacity: 0.22;
+  --frame-accessory-size: 44px 16px;
+  --menu-item-bg: linear-gradient(90deg, rgba(72, 230, 255, 0.14) 0 1px, transparent 1px 100%), linear-gradient(135deg, rgba(17, 31, 43, 0.94), rgba(4, 8, 13, 0.82) 58%, rgba(255, 184, 77, 0.08));
+  --menu-item-active-bg: linear-gradient(90deg, rgba(72, 230, 255, 0.44) 0 3px, transparent 3px 100%), linear-gradient(135deg, rgba(20, 51, 64, 0.98), rgba(6, 11, 18, 0.9) 52%, rgba(255, 184, 77, 0.18));
+  --menu-glyph-bg: linear-gradient(135deg, rgba(72, 230, 255, 0.28), rgba(255, 184, 77, 0.14)), repeating-linear-gradient(90deg, rgba(137, 239, 255, 0.18) 0 1px, transparent 1px 6px), rgba(5, 9, 15, 0.9);
+  --menu-title-shadow: 0 0 14px rgba(72, 230, 255, 0.5), 0 0 2px rgba(255, 184, 77, 0.8);
+  --menu-active-outline: linear-gradient(90deg, rgba(72, 230, 255, 0.95), rgba(255, 184, 77, 0.72), rgba(72, 230, 255, 0.95));
+  --panel-material: var(--sugar-dust), var(--glass-wash), linear-gradient(135deg, rgba(4, 8, 13, 0.78), rgba(13, 23, 32, 0.64));
+  --panel-shadow: var(--jelly-inset), inset 0 0 0 1px rgba(119, 237, 255, 0.24), inset 9px 0 0 rgba(72, 230, 255, 0.08), 0 18px 42px rgba(0, 0, 0, 0.5), 0 0 34px rgba(72, 230, 255, 0.14);
+  --ultimate-effect-alpha: 0.86;
+  --custom-background-overlay: linear-gradient(180deg, rgba(4, 7, 11, 0.62), rgba(4, 7, 11, 0.78));
+  --code-surface: #05090f;
+  --code-ink: #dffcff;
+  --code-muted: #87afba;
+  --workspace-background-image: none;
+  --workspace-background-pattern-image: radial-gradient(circle at 76% 18%, transparent 0 68px, rgba(72, 230, 255, 0.3) 69px 71px, transparent 72px), radial-gradient(circle at 76% 18%, transparent 0 34px, rgba(255, 184, 77, 0.24) 35px 36px, transparent 37px), conic-gradient(from 0deg at 76% 18%, transparent 0 8%, rgba(72, 230, 255, 0.24) 8% 9%, transparent 9% 28%, rgba(72, 230, 255, 0.18) 28% 29%, transparent 29% 100%), linear-gradient(90deg, rgba(72, 230, 255, 0.08) 1px, transparent 1px), linear-gradient(180deg, rgba(72, 230, 255, 0.07) 1px, transparent 1px), linear-gradient(135deg, transparent 0 48%, rgba(255, 184, 77, 0.1) 49% 50%, transparent 51% 100%), radial-gradient(circle at 20% 78%, rgba(255, 77, 109, 0.12), transparent 28%);
+  --workspace-background-pattern-size: auto, auto, auto, 42px 42px, 42px 42px, 180px 180px, auto;
+  --workspace-background-pattern-position: center, center, center, 0 0, 0 0, 0 0, center;
+  --workspace-background-pattern-repeat: no-repeat, no-repeat, no-repeat, repeat, repeat, repeat, no-repeat;
+  --workspace-background-pattern-opacity: 0.92;
+  --workspace-background-pattern-filter: saturate(1.18) contrast(1.08);
+  color: var(--ink);
+  background: var(--background-base);
+  font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  font-synthesis: none;
+  text-rendering: optimizeLegibility;
+}
+
+* {
+  box-sizing: border-box;
+}
+
+body {
+  margin: 0;
+  min-width: 320px;
+  min-height: 100vh;
+}
+
+button {
+  font: inherit;
+}
+
+/* ---- app shell with themed background ---- */
+
+.app-shell {
+  min-height: 100vh;
+  display: grid;
+  grid-template-columns: var(--sidebar-width, 216px) minmax(0, 1fr);
+  position: relative;
+  isolation: isolate;
+  transition: grid-template-columns 180ms ease;
+  background:
+    radial-gradient(1200px 520px at 82% -12%, var(--background-glow-1), transparent 62%),
+    radial-gradient(900px 440px at -12% 26%, var(--background-glow-2), transparent 58%),
+    radial-gradient(760px 390px at 64% 110%, var(--background-glow-3), transparent 62%),
+    linear-gradient(135deg, rgba(255, 255, 255, 0.06), transparent 48%),
+    var(--background-base);
+}
+
+.app-shell-sidebar-collapsed {
+  --sidebar-width: 72px;
+}
+
+.workspace-background-layer {
+  content: "";
+  position: fixed;
+  inset: 0;
+  z-index: 0;
+  background-image: var(--workspace-background-image), var(--workspace-background-pattern-image);
+  background-size: cover, var(--workspace-background-pattern-size);
+  background-position: center, var(--workspace-background-pattern-position);
+  background-repeat: no-repeat, var(--workspace-background-pattern-repeat);
+  filter: var(--workspace-background-pattern-filter);
+  opacity: var(--workspace-background-pattern-opacity);
+  pointer-events: none;
+}
+
+/* readability overlay above user-uploaded backgrounds */
+:root[data-custom-background="true"] .workspace-background-layer::after {
+  content: "";
+  position: absolute;
+  inset: 0;
+  background:
+    linear-gradient(90deg, rgba(4, 7, 11, 0.28) 0, rgba(4, 7, 11, 0.1) 216px, transparent 42%),
+    linear-gradient(180deg, rgba(4, 7, 11, 0.02), rgba(4, 7, 11, 0.1));
+  pointer-events: none;
+}
+
+:root[data-custom-background="true"] .workspace-background-layer {
+  filter: saturate(0.92) contrast(0.96) brightness(0.94);
+  opacity: 1;
+}
+
+.global-particle-layer {
+  position: fixed;
+  inset: 0;
+  z-index: 0;
+  width: 100%;
+  height: 100%;
+  pointer-events: none;
+  opacity: var(--ultimate-effect-alpha);
+  mix-blend-mode: screen;
+  overflow: hidden;
+}
+
+:root[data-custom-background="true"] .global-particle-layer {
+  opacity: 0.08;
+}
+
+.global-particle-layer span {
+  position: absolute;
+  display: block;
+  pointer-events: none;
+}
+
+.global-particle-orbit {
+  right: 9vw;
+  bottom: 6vh;
+  width: min(36vw, 440px);
+  aspect-ratio: 1;
+  border: 2px solid color-mix(in srgb, var(--accent) 42%, transparent);
+  border-radius: 50%;
+  box-shadow: 0 0 34px color-mix(in srgb, var(--accent) 18%, transparent), inset 0 0 42px color-mix(in srgb, var(--accent) 12%, transparent);
+  opacity: 0.62;
+  transform: rotate(12deg);
+}
+
+.global-particle-orbit::before,
+.global-particle-orbit::after {
+  content: "";
+  position: absolute;
+  inset: 18%;
+  border: 1px solid color-mix(in srgb, var(--gold) 34%, transparent);
+  border-radius: inherit;
+}
+
+.global-particle-orbit::after {
+  inset: 34%;
+  border-color: color-mix(in srgb, var(--accent) 28%, transparent);
+}
+
+.global-particle-orbit-secondary {
+  right: 23vw;
+  top: 9vh;
+  bottom: auto;
+  width: min(18vw, 230px);
+  opacity: 0.36;
+  transform: rotate(-18deg);
+}
+
+.global-particle-sweep {
+  top: -12vh;
+  left: 63vw;
+  width: 28px;
+  height: 118vh;
+  background: linear-gradient(180deg, transparent, color-mix(in srgb, var(--accent) 42%, transparent), transparent);
+  opacity: 0.42;
+  transform: rotate(24deg);
+  filter: blur(1px);
+}
+
+.global-particle-ribbon {
+  left: -12vw;
+  bottom: 24vh;
+  width: 128vw;
+  height: 120px;
+  background: linear-gradient(90deg, transparent, color-mix(in srgb, var(--pink) 24%, transparent), color-mix(in srgb, var(--gold) 16%, transparent), transparent);
+  opacity: 0.28;
+  transform: rotate(-11deg);
+  filter: blur(18px);
+}
+
+:root[data-theme-palette="magical-girl"] .global-particle-ribbon {
+  display: none;
+}
+
+.global-particle-frame {
+  width: 120px;
+  height: 120px;
+  border: 2px solid color-mix(in srgb, var(--gold) 44%, transparent);
+  opacity: 0.46;
+}
+
+.global-particle-frame-tl {
+  top: 18px;
+  left: 20px;
+  border-right: 0;
+  border-bottom: 0;
+}
+
+.global-particle-frame-br {
+  right: 22px;
+  bottom: 24px;
+  border-left: 0;
+  border-top: 0;
+}
+
+.global-particle-glint {
+  --particle-index: 0;
+  --particle-x: 12%;
+  --particle-y: 16%;
+  left: var(--particle-x);
+  top: var(--particle-y);
+  width: 9px;
+  height: 9px;
+  opacity: 0.46;
+  transform: rotate(45deg);
+}
+
+.global-particle-glint::before,
+.global-particle-glint::after {
+  content: "";
+  position: absolute;
+  inset: 0;
+  background: color-mix(in srgb, var(--sparkle) 76%, transparent);
+  border-radius: 999px;
+}
+
+.global-particle-glint::after {
+  transform: rotate(90deg);
+}
+
+:root[data-theme-palette="mecha-black"] .global-particle-ribbon {
+  background: repeating-linear-gradient(90deg, transparent 0 80px, color-mix(in srgb, var(--gold) 24%, transparent) 81px 86px, transparent 87px 150px);
+  opacity: 0.32;
+  filter: blur(2px);
+}
+
+:root[data-theme-palette="mecha-black"] .global-particle-glint {
+  width: 6px;
+  height: 18px;
+  border: 1px solid color-mix(in srgb, var(--accent) 54%, transparent);
+  background: color-mix(in srgb, var(--accent) 18%, transparent);
+}
+
+:root[data-theme-palette="mecha-black"] .global-particle-glint::before,
+:root[data-theme-palette="mecha-black"] .global-particle-glint::after {
+  display: none;
+}
+
+:root[data-theme-palette="magical-girl"] .global-particle-orbit {
+  border-color: color-mix(in srgb, var(--sparkle) 62%, transparent);
+  box-shadow: 0 0 44px color-mix(in srgb, var(--pink) 28%, transparent), inset 0 0 34px color-mix(in srgb, var(--gold) 14%, transparent);
+}
+
+:root[data-theme-palette="magical-girl"] .global-particle-frame {
+  border-radius: 22px;
+  box-shadow: 0 0 22px color-mix(in srgb, var(--gold) 22%, transparent);
+}
+
+@media (prefers-reduced-motion: no-preference) {
+  .global-particle-orbit {
+    animation: particle-orbit-drift 22s linear infinite;
+  }
+
+  .global-particle-orbit-secondary {
+    animation-duration: 30s;
+    animation-direction: reverse;
+  }
+
+  .global-particle-sweep {
+    animation: particle-sweep 12s ease-in-out infinite;
+  }
+
+  .global-particle-glint {
+    animation: particle-glint 4.8s ease-in-out infinite;
+    animation-delay: calc(var(--particle-index) * -0.42s);
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .global-particle-layer * {
+    animation: none !important;
+  }
+}
+
+@keyframes particle-orbit-drift {
+  from {
+    transform: rotate(12deg);
+  }
+
+  to {
+    transform: rotate(372deg);
+  }
+}
+
+@keyframes particle-sweep {
+  0%,
+  100% {
+    transform: translateX(-18vw) rotate(24deg);
+    opacity: 0.18;
+  }
+
+  48% {
+    transform: translateX(18vw) rotate(24deg);
+    opacity: 0.46;
+  }
+}
+
+@keyframes particle-glint {
+  0%,
+  100% {
+    opacity: 0.18;
+    transform: scale(0.72) rotate(45deg);
+  }
+
+  50% {
+    opacity: 0.68;
+    transform: scale(1.16) rotate(45deg);
+  }
+}
+
+.app-sidebar {
+  position: relative;
+  z-index: 1;
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+  width: var(--sidebar-width, 216px);
+  min-width: 0;
+  padding: 16px 10px;
+  border-right: 1px solid color-mix(in srgb, var(--line) 72%, transparent);
+  background:
+    radial-gradient(circle at 92% 3%, color-mix(in srgb, var(--sparkle) 72%, transparent) 0 2px, transparent 3px),
+    linear-gradient(180deg, color-mix(in srgb, var(--surface-raised) 86%, transparent), color-mix(in srgb, var(--surface-solid) 72%, transparent));
+  backdrop-filter: blur(26px) saturate(1.2);
+  box-shadow: inset -1px 0 0 color-mix(in srgb, var(--rim-light) 24%, transparent), 12px 0 34px rgba(0, 0, 0, 0.34);
+  transition: width 180ms ease, padding 180ms ease;
+}
+
+.app-brand {
+  display: grid;
+  grid-template-columns: 36px minmax(0, 1fr);
+  align-items: center;
+  gap: 9px;
+  min-height: 42px;
+  padding: 0 2px;
+  font-weight: 800;
+  color: var(--ink);
+  overflow: hidden;
+}
+
+.app-brand > span:last-child {
+  display: grid;
+  gap: 2px;
+  min-width: 0;
+}
+
+.app-brand strong,
+.app-brand-subtitle,
+.app-nav-copy strong,
+.provider-id {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.app-brand-subtitle {
+  color: var(--ink-faint);
+  font-size: 11px;
+  letter-spacing: 0.02em;
+}
+
+.app-brand-mark {
+  display: inline-flex;
+  width: 36px;
+  height: 36px;
+  flex: 0 0 36px;
+  align-items: center;
+  justify-content: center;
+  border: 1px solid color-mix(in srgb, var(--line-strong) 68%, transparent);
+  border-radius: 50%;
+  background: var(--menu-glyph-bg);
+  color: var(--accent-deep);
+  box-shadow: inset 0 1px 0 color-mix(in srgb, var(--rim-light) 42%, transparent), 0 0 18px color-mix(in srgb, var(--accent) 18%, transparent);
+}
+
+.app-menu-toolbar {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 8px;
+  min-height: 30px;
+  padding: 0 2px;
+  color: var(--ink-faint);
+  font-size: 11px;
+}
+
+.app-menu-toggle {
+  min-height: 30px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 6px;
+  padding: 0 8px;
+  border: 1px solid transparent;
+  border-radius: 8px;
+  background: transparent;
+  color: var(--ink-soft);
+  cursor: pointer;
+}
+
+.app-menu-toggle:hover,
+.app-menu-toggle:focus-visible {
+  border-color: var(--line);
+  color: var(--accent-deep);
+  outline: none;
+  background: color-mix(in srgb, var(--accent-soft) 58%, transparent);
+}
+
+.app-nav {
+  display: grid;
+  gap: 6px;
+  align-content: start;
+}
+
+.app-nav-group {
+  position: relative;
+  min-width: 0;
+}
+
+.app-nav-group::before,
+.app-nav-group::after {
+  display: none;
+}
+
+.app-nav-group-button {
+  width: 100%;
+  min-height: 38px;
+  display: grid;
+  grid-template-columns: 34px minmax(0, 1fr);
+  align-items: center;
+  gap: 8px;
+  padding: 3px 9px 3px 3px;
+  border: 1px solid transparent;
+  border-radius: 8px;
+  color: var(--ink-soft);
+  background: transparent;
+  cursor: pointer;
+  text-align: left;
+  position: relative;
+}
+
+.app-nav-group-button::before {
+  content: "";
+  position: absolute;
+  inset: 9px auto 9px 0;
+  width: 3px;
+  border-radius: 999px;
+  background: var(--accent);
+  opacity: 0;
+  pointer-events: none;
+}
+
+.app-nav-group-button:hover,
+.app-nav-group-button:focus-visible {
+  border-color: color-mix(in srgb, var(--line) 72%, transparent);
+  color: var(--ink);
+  outline: none;
+  background: color-mix(in srgb, var(--surface-raised) 78%, transparent);
+}
+
+.app-nav-icon {
+  width: 34px;
+  height: 34px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  border: 0;
+  border-radius: 8px;
+  background: transparent;
+  color: var(--ink-faint);
+  position: relative;
+  z-index: 1;
+}
+
+.app-nav-copy {
+  min-width: 0;
+  display: grid;
+}
+
+.app-nav-copy strong {
+  color: var(--ink);
+  font-size: 13px;
+  line-height: 1.18;
+  letter-spacing: -0.01em;
+}
+
+.app-nav-item-active {
+  color: var(--accent-deep);
+  background: var(--menu-item-active-bg);
+  border-color: color-mix(in srgb, var(--line-strong) 82%, transparent);
+  font-weight: 800;
+  box-shadow: inset 0 0 0 1px color-mix(in srgb, var(--rim-light) 18%, transparent), 0 0 18px color-mix(in srgb, var(--accent) 12%, transparent);
+}
+
+.app-nav-item-active::before {
+  opacity: 1;
+}
+
+.app-nav-item-active .app-nav-icon {
+  color: var(--accent-deep);
+}
+
+:root[data-theme-palette="mecha-black"] .app-sidebar {
+  clip-path: none;
+}
+
+:root[data-theme-palette="mecha-black"] .app-nav-group-button,
+:root[data-theme-palette="mecha-black"] .app-menu-toggle,
+:root[data-theme-palette="mecha-black"] .app-session,
+:root[data-theme-palette="mecha-black"] .app-account-button,
+:root[data-theme-palette="mecha-black"] .palette-option,
+:root[data-theme-palette="mecha-black"] .background-preset-option {
+  clip-path: none;
+}
+
+:root[data-theme-palette="mecha-black"] .app-nav-icon {
+  clip-path: none;
+}
+
+:root[data-theme-palette="mecha-black"] .app-nav-item-active {
+  background:
+    var(--frame-accessory-top) right 6px top 3px / 32px 12px no-repeat,
+    linear-gradient(90deg, rgba(72, 230, 255, 0.42) 0 3px, transparent 3px),
+    linear-gradient(135deg, rgba(23, 36, 48, 0.96), rgba(6, 10, 16, 0.88));
+}
+
+:root[data-theme-palette="magical-girl"] .app-sidebar {
+  background:
+    radial-gradient(circle at 92% 3%, rgba(255, 255, 255, 0.56) 0 2px, transparent 3px),
+    linear-gradient(180deg, rgba(255, 220, 239, 0.14), rgba(103, 27, 62, 0.36) 46%, rgba(62, 16, 40, 0.42));
+  background-size: auto, auto;
+  background-position: center, center;
+  background-repeat: no-repeat, no-repeat;
+  border-right-color: rgba(255, 214, 235, 0.42);
+  box-shadow:
+    inset -1px 0 0 rgba(255, 255, 255, 0.3),
+    inset 0 0 0 1px rgba(255, 214, 235, 0.12),
+    14px 0 34px rgba(72, 0, 34, 0.24);
+}
+
+:root[data-theme-palette="magical-girl"] .app-brand-mark,
+:root[data-theme-palette="magical-girl"] .app-nav-icon {
+  border-radius: 999px;
+}
+
+:root[data-theme-palette="magical-girl"] .app-nav-group-button {
+  border-radius: 14px;
+}
+
+:root[data-theme-palette="magical-girl"] .app-nav-item-active {
+  background:
+    var(--frame-accessory-top) right 6px top 3px / 32px 12px no-repeat,
+    linear-gradient(90deg, rgba(255, 221, 117, 0.78) 0 3px, transparent 3px),
+    var(--menu-item-active-bg);
+  box-shadow:
+    var(--jelly-inset),
+    0 0 0 1px rgba(255, 255, 255, 0.42),
+    0 10px 24px var(--glass-shadow),
+    0 0 24px rgba(255, 221, 117, 0.34),
+    0 0 30px rgba(255, 119, 200, 0.26);
+}
+
+.app-shell-sidebar-collapsed .app-sidebar {
+  align-items: center;
+  gap: 14px;
+  padding: 14px 8px;
+}
+
+.app-shell-sidebar-collapsed .app-brand {
+  display: flex;
+  justify-content: center;
+  width: 100%;
+  padding: 0;
+}
+
+.app-shell-sidebar-collapsed .app-brand > span:last-child,
+.app-shell-sidebar-collapsed .app-menu-toolbar > span,
+.app-shell-sidebar-collapsed .app-menu-toggle span,
+.app-shell-sidebar-collapsed .app-nav-copy,
+.app-shell-sidebar-collapsed .app-account-button > span:not(.account-avatar),
+.app-shell-sidebar-collapsed .account-chevron,
+.app-shell-sidebar-collapsed .palette-mini-strip {
+  display: none;
+}
+
+.app-shell-sidebar-collapsed .app-menu-toolbar {
+  justify-content: center;
+  width: 100%;
+}
+
+.app-shell-sidebar-collapsed .app-menu-toggle {
+  width: 40px;
+  min-height: 36px;
+  padding: 0;
+}
+
+.app-shell-sidebar-collapsed .app-nav {
+  width: 100%;
+  gap: 12px;
+  justify-items: center;
+}
+
+.app-shell-sidebar-collapsed .app-nav-group {
+  width: 100%;
+}
+
+.app-shell-sidebar-collapsed .app-nav-group-button {
+  width: 44px;
+  min-height: 44px;
+  grid-template-columns: 1fr;
+  place-items: center;
+  padding: 0;
+  margin: 0 auto;
+}
+
+.app-shell-sidebar-collapsed .app-nav-icon {
+  width: 44px;
+  height: 44px;
+}
+
+.app-shell-sidebar-collapsed .app-session {
+  width: 100%;
+  justify-items: center;
+  padding: 8px 0;
+  background: transparent;
+  border-color: transparent;
+  box-shadow: none;
+}
+
+.app-shell-sidebar-collapsed .app-account-button {
+  width: 44px;
+  min-height: 44px;
+  grid-template-columns: 1fr;
+  place-items: center;
+  padding: 0;
+}
+
+.app-session {
+  margin-top: auto;
+  display: grid;
+  gap: 8px;
+  padding: 8px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--sugar-dust), var(--glass-wash), var(--glass-tint), var(--surface);
+  backdrop-filter: blur(22px) saturate(1.28);
+  box-shadow: var(--jelly-inset), inset 0 0 0 1px var(--diamond-line), 0 12px 32px var(--glass-shadow), 0 0 26px rgba(255, 255, 255, 0.16);
+  font-size: 12px;
+  color: var(--ink-soft);
+  position: relative;
+  overflow: hidden;
+}
+
+.app-session strong {
+  color: var(--ink);
+}
+
+.app-account-button {
+  width: 100%;
+  min-height: 38px;
+  display: grid;
+  grid-template-columns: 28px minmax(0, 1fr) auto;
+  align-items: center;
+  gap: 6px;
+  padding: 5px;
+  border: 1px solid transparent;
+  border-radius: 8px;
+  background: var(--jelly-highlight), var(--glass-wash), rgba(255, 255, 255, 0.2);
+  color: var(--ink-soft);
+  cursor: pointer;
+  text-align: left;
+}
+
+.app-account-button:hover,
+.app-account-button:focus-visible {
+  border-color: var(--line-strong);
+  outline: none;
+}
+
+.account-avatar {
+  display: inline-flex;
+  width: 28px;
+  height: 28px;
+  align-items: center;
+  justify-content: center;
+  border: 1px solid var(--crystal-rim);
+  border-radius: 50%;
+  background:
+    var(--corner-sparkle),
+    radial-gradient(circle at 30% 20%, rgba(255, 255, 255, 0.86), transparent 34%),
+    linear-gradient(135deg, var(--pink), var(--accent));
+  background-size: 36px 36px, auto, auto;
+  background-position: right -5px top -4px, center, center;
+  background-repeat: no-repeat;
+  color: #ffffff;
+  box-shadow: var(--jelly-inset), 0 8px 20px var(--candy-glow), 0 0 16px var(--moonbeam);
+}
+
+.account-avatar img {
+  width: 100%;
+  height: 100%;
+  border-radius: inherit;
+  object-fit: cover;
+}
+
+.account-chevron {
+  color: var(--accent-deep);
+}
+
+.palette-mini-strip {
+  display: flex;
+  gap: 5px;
+  min-height: 18px;
+  padding: 4px 6px;
+  border: 1px solid rgba(255, 255, 255, 0.42);
+  border-radius: 999px;
+  background: rgba(255, 255, 255, 0.24);
+  box-shadow: var(--jelly-inset);
+  backdrop-filter: blur(12px) saturate(1.18);
+}
+
+.palette-mini-strip span {
+  flex: 1 1 0;
+  min-width: 0;
+  min-height: 12px;
+  border: 1px solid rgba(255, 255, 255, 0.88);
+  border-radius: 999px;
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.86), 0 3px 10px rgba(255, 255, 255, 0.22);
+}
+
+.profile-panel {
+  display: grid;
+  gap: 12px;
+  padding-top: 12px;
+  border-top: 1px solid var(--line);
+}
+
+.profile-form,
+.theme-panel {
+  display: grid;
+  gap: 9px;
+}
+
+.profile-panel-title {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  color: var(--accent-deep);
+}
+
+.profile-form label {
+  display: grid;
+  gap: 4px;
+  color: var(--ink-soft);
+  font-size: 12px;
+  font-weight: 700;
+}
+
+.profile-form input {
+  width: 100%;
+  min-height: 34px;
+  border: 1px solid var(--line-strong);
+  border-radius: 8px;
+  padding: 0 10px;
+  background: var(--jelly-highlight), var(--glass-wash), var(--surface-solid);
+  color: var(--ink);
+  font: inherit;
+  box-shadow: var(--jelly-inset);
+}
+
+.profile-form input:focus {
+  border-color: var(--accent);
+  outline: 2px solid var(--accent-soft);
+}
+
+.profile-save-button {
+  min-height: 34px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 6px;
+  border: 1px solid var(--rim-light);
+  border-radius: 999px;
+  background:
+    var(--sugar-dust),
+    var(--corner-sparkle),
+    linear-gradient(145deg, rgba(255, 255, 255, 0.72), transparent 36%),
+    linear-gradient(135deg, var(--accent), var(--pink));
+  background-size: auto, 44px 44px, auto, auto;
+  background-position: center, right 8px top 2px, center, center;
+  background-repeat: no-repeat, no-repeat, no-repeat, no-repeat;
+  color: #ffffff;
+  cursor: pointer;
+  font-weight: 700;
+  box-shadow: var(--jelly-inset), 0 10px 24px var(--candy-glow), 0 0 18px var(--moonbeam);
+}
+
+.profile-save-button:hover,
+.profile-save-button:focus-visible {
+  outline: none;
+  filter: brightness(1.03);
+}
+
+.profile-save-result {
+  display: inline-flex;
+  min-height: 24px;
+  align-items: center;
+  justify-content: center;
+  border-radius: 999px;
+  background: var(--success-soft);
+  color: var(--success);
+  font-size: 12px;
+  font-weight: 700;
+}
+
+.palette-grid {
+  display: grid;
+  gap: 7px;
+}
+
+.palette-option {
+  display: grid;
+  gap: 5px;
+  min-height: 54px;
+  padding: 8px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--sugar-dust), var(--jelly-highlight), var(--glass-wash), var(--glass-tint), var(--surface-solid);
+  color: var(--ink-soft);
+  cursor: pointer;
+  text-align: left;
+  box-shadow: var(--jelly-inset), 0 8px 18px var(--glass-shadow);
+}
+
+.palette-option:hover,
+.palette-option:focus-visible {
+  border-color: var(--accent);
+  outline: none;
+}
+
+.palette-option-active {
+  border-color: var(--line-strong);
+  color: var(--accent-deep);
+  background: var(--sugar-dust), var(--corner-sparkle), var(--jelly-highlight), var(--glass-wash), var(--accent-soft);
+  background-size: auto, 46px 46px, auto, auto, auto;
+  background-position: center, right 8px top 4px, center, center, center;
+  background-repeat: no-repeat, no-repeat, no-repeat, no-repeat, no-repeat;
+  box-shadow: var(--jelly-inset), 0 8px 22px var(--candy-glow), 0 0 18px var(--moonbeam);
+}
+
+.palette-swatch-row {
+  display: grid;
+  grid-template-columns: repeat(5, minmax(0, 1fr));
+  gap: 4px;
+}
+
+.palette-swatch-row span {
+  min-height: 14px;
+  border: 1px solid rgba(255, 255, 255, 0.78);
+  border-radius: 999px;
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.78);
+}
+
+.palette-option-label {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  font-size: 12px;
+  font-weight: 700;
+}
+
+.theme-background-actions {
+  display: flex;
+  gap: 7px;
+  flex-wrap: wrap;
+}
+
+.background-preset-grid {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 7px;
+}
+
+.background-preset-option {
+  display: grid;
+  gap: 6px;
+  min-height: 76px;
+  padding: 8px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--jelly-highlight), var(--glass-wash), var(--glass-tint), var(--surface-solid);
+  color: var(--ink-soft);
+  cursor: pointer;
+  text-align: left;
+  box-shadow: inset 0 1px 0 var(--crystal-rim), 0 8px 20px var(--glass-shadow);
+}
+
+.background-preset-option:hover,
+.background-preset-option:focus-visible {
+  border-color: var(--accent);
+  outline: none;
+}
+
+.background-preset-option-active {
+  border-color: var(--line-strong);
+  color: var(--accent-deep);
+  background: var(--corner-sparkle), var(--jelly-highlight), var(--glass-wash), var(--accent-soft);
+  background-size: 46px 46px, auto, auto, auto;
+  background-position: right 8px top 4px, center, center, center;
+  background-repeat: no-repeat;
+  box-shadow: inset 0 1px 0 var(--rim-light), inset 0 0 0 1px var(--diamond-line), 0 10px 24px var(--candy-glow);
+}
+
+.background-preset-preview {
+  min-height: 34px;
+  border: 1px solid var(--crystal-rim);
+  border-radius: 8px;
+  box-shadow: inset 0 1px 0 var(--rim-light), 0 0 18px var(--moonbeam);
+}
+
+.background-preset-label {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  min-width: 0;
+  font-size: 12px;
+  font-weight: 700;
+}
+
+.theme-background-note {
+  display: block;
+  padding: 7px 9px;
+  border: 1px dashed var(--line-strong);
+  border-radius: 8px;
+  background: var(--glass-wash), var(--accent-soft);
+  color: var(--ink-soft);
+  font-size: 12px;
+  line-height: 1.45;
+}
+
+.theme-upload {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  min-height: 32px;
+  padding: 0 10px;
+  border: 1px solid var(--line);
+  border-radius: 999px;
+  background: var(--jelly-highlight), var(--glass-wash), var(--surface-solid);
+  color: var(--ink-soft);
+  cursor: pointer;
+  font-size: 12px;
+  font-weight: 700;
+  box-shadow: inset 0 1px 0 var(--crystal-rim);
+}
+
+.theme-upload:hover,
+.theme-upload:focus-visible {
+  border-color: var(--accent);
+  outline: none;
+}
+
+.theme-upload:disabled {
+  cursor: default;
+  opacity: 0.58;
+}
+
+/* ---- authentication and management forms ---- */
+
+.auth-shell {
+  min-height: 100vh;
+  display: grid;
+  place-items: center;
+  padding: 24px;
+  position: relative;
+  isolation: isolate;
+  background:
+    radial-gradient(900px 430px at 82% 10%, var(--background-glow-1), transparent 64%),
+    radial-gradient(740px 420px at 14% 82%, var(--background-glow-3), transparent 62%),
+    var(--workspace-background-pattern-image),
+    var(--background-base);
+  background-size: auto, auto, var(--workspace-background-pattern-size), auto;
+}
+
+.auth-card {
+  width: min(100%, 460px);
+  display: grid;
+  gap: 16px;
+  padding: 22px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--sugar-dust), var(--glass-wash), var(--glass-tint), var(--surface-raised);
+  backdrop-filter: blur(24px) saturate(1.28);
+  box-shadow: var(--jelly-inset), inset 0 0 0 1px var(--diamond-line), 0 22px 58px var(--glass-shadow), 0 0 42px var(--moonbeam);
+  position: relative;
+  overflow: hidden;
+}
+
+.auth-card::before {
+  content: "";
+  position: absolute;
+  inset: 0;
+  background: var(--shine-sweep), var(--jelly-highlight);
+  background-repeat: no-repeat;
+  background-position: right 16px top 12px, center;
+  opacity: 0.42;
+  pointer-events: none;
+}
+
+.auth-brand,
+.auth-form,
+.auth-mode-tabs,
+.auth-copy {
+  position: relative;
+  z-index: 1;
+}
+
+.auth-brand {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+}
+
+.auth-brand h1 {
+  margin: 0;
+  color: var(--ink);
+  font-size: 24px;
+  line-height: 1.18;
+}
+
+.auth-copy {
+  margin: 0;
+  color: var(--ink-soft);
+  line-height: 1.6;
+}
+
+.auth-mode-tabs {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 8px;
+}
+
+.auth-mode-tabs button,
+.role-chip {
+  min-height: 36px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 6px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--jelly-highlight), var(--glass-wash), var(--surface-solid);
+  color: var(--ink-soft);
+  cursor: pointer;
+  font-weight: 700;
+  box-shadow: var(--jelly-inset), 0 8px 18px var(--glass-shadow);
+}
+
+.auth-mode-tabs button:hover,
+.auth-mode-tabs button:focus-visible,
+.role-chip:hover,
+.role-chip:focus-visible {
+  border-color: var(--accent);
+  outline: none;
+}
+
+.auth-mode-active,
+.role-chip-active {
+  color: var(--accent-deep) !important;
+  border-color: var(--line-strong) !important;
+  background: var(--corner-sparkle), var(--jelly-highlight), var(--glass-wash), var(--accent-soft) !important;
+}
+
+.auth-form,
+.management-form {
+  display: grid;
+  gap: 10px;
+}
+
+.auth-form label,
+.management-form label {
+  display: grid;
+  gap: 5px;
+  color: var(--ink-soft);
+  font-size: 12px;
+  font-weight: 700;
+}
+
+.auth-form input,
+.management-form input,
+.management-form select {
+  width: 100%;
+  min-height: 36px;
+  border: 1px solid var(--line-strong);
+  border-radius: 8px;
+  padding: 0 10px;
+  background: var(--jelly-highlight), var(--glass-wash), var(--surface-solid);
+  color: var(--ink);
+  font: inherit;
+  box-shadow: var(--jelly-inset);
+}
+
+.auth-form input:focus,
+.management-form input:focus,
+.management-form select:focus {
+  border-color: var(--accent);
+  outline: 2px solid var(--accent-soft);
+}
+
+.auth-result {
+  display: grid;
+  gap: 3px;
+  padding: 9px 10px;
+  border: 1px dashed var(--line-strong);
+  border-radius: 8px;
+  background: var(--glass-wash), var(--accent-soft);
+  color: var(--ink-soft);
+  font-size: 12px;
+  line-height: 1.45;
+}
+
+.auth-result strong {
+  color: var(--ink);
+}
+
+.auth-result-error {
+  border-color: rgba(194, 85, 130, 0.45);
+  background: var(--danger-soft);
+  color: var(--danger);
+}
+
+.auth-result-success {
+  border-color: rgba(25, 125, 116, 0.38);
+  background: var(--success-soft);
+  color: var(--success);
+}
+
+.auth-submit,
+.auth-local-action {
+  width: 100%;
+}
+
+.management-form {
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  align-items: end;
+}
+
+.role-selector {
+  grid-column: 1 / -1;
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+}
+
+.user-management-list {
+  gap: 10px;
+}
+
+.user-management-item {
+  grid-template-columns: minmax(180px, 1.2fr) auto minmax(160px, 1fr) minmax(180px, 1.2fr) minmax(220px, auto);
+}
+
+.user-actions {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+  justify-content: flex-end;
+}
+
+.profile-settings-page {
+  gap: 18px;
+}
+
+.profile-settings-hero {
+  display: grid;
+  grid-template-columns: auto minmax(0, 1fr) auto;
+  align-items: center;
+  gap: 14px;
+}
+
+.profile-settings-avatar {
+  width: 72px;
+  height: 72px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  border: 1px solid var(--crystal-rim);
+  border-radius: 50%;
+  background:
+    var(--corner-sparkle),
+    radial-gradient(circle at 30% 20%, rgba(255, 255, 255, 0.86), transparent 34%),
+    linear-gradient(135deg, var(--pink), var(--accent));
+  background-size: 54px 54px, auto, auto;
+  background-position: right -5px top -4px, center, center;
+  background-repeat: no-repeat;
+  color: #ffffff;
+  box-shadow: var(--jelly-inset), 0 10px 26px var(--candy-glow), 0 0 18px var(--moonbeam);
+  overflow: hidden;
+}
+
+.profile-settings-avatar img {
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+}
+
+.profile-settings-hero h2 {
+  margin: 0 0 4px;
+  color: var(--ink);
+  font-size: 22px;
+  line-height: 1.2;
+}
+
+.profile-settings-hero p {
+  margin: 0 0 8px;
+  color: var(--ink-soft);
+}
+
+.profile-settings-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 8px;
+  flex-wrap: wrap;
+}
+
+.profile-settings-grid {
+  display: grid;
+  grid-template-columns: minmax(280px, 0.9fr) minmax(360px, 1.1fr);
+  gap: 16px;
+  align-items: start;
+}
+
+.profile-settings-form {
+  display: grid;
+  gap: 12px;
+}
+
+.profile-settings-form label {
+  display: grid;
+  gap: 5px;
+  color: var(--ink-soft);
+  font-size: 12px;
+  font-weight: 700;
+}
+
+.profile-settings-form input,
+.profile-settings-form textarea {
+  width: 100%;
+  min-height: 38px;
+  border: 1px solid var(--line-strong);
+  border-radius: 8px;
+  padding: 0 10px;
+  background: var(--jelly-highlight), var(--glass-wash), var(--surface-solid);
+  color: var(--ink);
+  font: inherit;
+  box-shadow: var(--jelly-inset);
+}
+
+.profile-settings-form textarea {
+  min-height: 92px;
+  padding: 10px;
+  resize: vertical;
+}
+
+.profile-settings-form input:focus,
+.profile-settings-form textarea:focus {
+  border-color: var(--accent);
+  outline: 2px solid var(--accent-soft);
+}
+
+.profile-settings-form-row {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 10px;
+}
+
+.profile-palette-grid {
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+}
+
+.profile-background-grid {
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+}
+
+.app-main {
+  position: relative;
+  z-index: 1;
+  min-width: 0;
+  padding: 24px;
+}
+
+/* ---- page frame ---- */
+
+.page-frame {
+  width: min(100%, 1180px);
+  display: grid;
+  gap: 18px;
+}
+
+.page-header {
+  display: flex;
+  align-items: flex-end;
+  justify-content: space-between;
+  gap: 16px;
+  min-height: 52px;
+}
+
+.page-kicker {
+  margin: 0 0 6px;
+  font-size: 13px;
+  color: var(--accent-deep);
+  font-weight: 700;
+  letter-spacing: 0;
+}
+
+.page-title {
+  margin: 0;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  font-size: 28px;
+  line-height: 1.18;
+  font-weight: 720;
+  letter-spacing: 0;
+  color: var(--ink);
+}
+
+.page-title svg {
+  color: var(--pink);
+  filter: drop-shadow(0 0 10px var(--candy-glow));
+  flex: 0 0 auto;
+}
+
+.page-status {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  min-height: 30px;
+  padding: 0 10px;
+  border-radius: 999px;
+  border: 1px solid rgba(255, 255, 255, 0.58);
+  background: var(--glass-wash), var(--gold-soft);
+  color: #6f4d00;
+  font-size: 13px;
+  white-space: nowrap;
+  box-shadow: inset 0 1px 0 var(--crystal-rim), 0 8px 20px var(--glass-shadow);
+}
+
+.page-status-ready {
+  background: var(--success-soft);
+  color: var(--success);
+}
+
+/* ---- metric cards ---- */
+
+.metric-grid {
+  display: grid;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  gap: 12px;
+}
+
+.metric-card,
+.overview-card {
+  min-height: 104px;
+  display: grid;
+  align-content: space-between;
+  gap: 12px;
+  padding: 16px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--panel-material);
+  backdrop-filter: blur(22px) saturate(1.28);
+  box-shadow: var(--panel-shadow);
+  position: relative;
+  isolation: isolate;
+  overflow: hidden;
+}
+
+.metric-card::before,
+.overview-card::before,
+.console-panel::before,
+.catalog-card::before,
+.server-card::before,
+.server-detail-header::before {
+  content: "";
+  position: absolute;
+  inset: 0;
+  border-radius: inherit;
+  padding: 1px;
+  background: linear-gradient(135deg, rgba(255, 255, 255, 0.9), color-mix(in srgb, var(--accent) 35%, transparent), color-mix(in srgb, var(--pink) 24%, transparent), rgba(255, 255, 255, 0.46));
+  mask: linear-gradient(#000 0 0) content-box, linear-gradient(#000 0 0);
+  mask-composite: exclude;
+  opacity: 0.86;
+  z-index: 2;
+  pointer-events: none;
+}
+
+.metric-card::after,
+.overview-card::after,
+.console-panel::after,
+.catalog-card::after,
+.server-card::after,
+.server-detail-header::after,
+.confirm-panel::after,
+.drawer-panel::after {
+  content: "";
+  position: absolute;
+  inset: 0;
+  background: var(--frame-accessory-top), var(--frame-accessory-bottom), var(--shine-sweep), var(--jelly-highlight);
+  background-size: var(--frame-accessory-size), 34px 34px, auto;
+  background-repeat: no-repeat, no-repeat, no-repeat, no-repeat;
+  background-position: right 6px top 5px, left 6px bottom 5px, right 10px top 8px, center;
+  opacity: var(--frame-accessory-opacity);
+  z-index: 0;
+  pointer-events: none;
+}
+
+.metric-label {
+  color: var(--ink-faint);
+  font-size: 13px;
+}
+
+.metric-value {
+  color: var(--ink);
+  font-size: 24px;
+  line-height: 1.2;
+  font-weight: 700;
+}
+
+.metric-tone-success {
+  border-top: 3px solid var(--teal);
+}
+
+.metric-tone-warning {
+  border-top: 3px solid var(--gold);
+}
+
+.metric-tone-neutral {
+  border-top: 3px solid var(--accent);
+}
+
+.metric-detail {
+  margin: 0;
+  color: var(--ink-faint);
+  font-size: 13px;
+}
+
+/* ---- generic page/panel layout ---- */
+
+.console-page {
+  width: min(100%, 1180px);
+  display: grid;
+  gap: 16px;
+}
+
+.console-page > * {
+  min-width: 0;
+}
+
+.console-grid {
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  gap: 12px;
+}
+
+.overview-card {
+  min-height: 132px;
+  gap: 10px;
+}
+
+.overview-card p {
+  margin: 0;
+  color: var(--ink-faint);
+  font-size: 13px;
+}
+
+.console-panel,
+.catalog-card {
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--panel-material);
+  backdrop-filter: blur(22px) saturate(1.28);
+  box-shadow: var(--panel-shadow);
+  padding: 16px;
+  position: relative;
+  isolation: isolate;
+  overflow: hidden;
+}
+
+:where(
+  .metric-card,
+  .overview-card,
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .server-detail-header,
+  .resource-table-wrap,
+  .provider-table-wrap,
+  .server-table-wrap,
+  .plugin-group,
+  .operation-item,
+  .confirm-panel,
+  .drawer-panel
+) > * {
+  position: relative;
+  z-index: 1;
+}
+
+:root[data-theme-palette="mecha-black"] .metric-card,
+:root[data-theme-palette="mecha-black"] .overview-card,
+:root[data-theme-palette="mecha-black"] .console-panel,
+:root[data-theme-palette="mecha-black"] .catalog-card,
+:root[data-theme-palette="mecha-black"] .server-card,
+:root[data-theme-palette="mecha-black"] .drawer-panel,
+:root[data-theme-palette="mecha-black"] .confirm-panel,
+:root[data-theme-palette="mecha-black"] .plugin-group,
+:root[data-theme-palette="mecha-black"] .operation-item {
+  clip-path: polygon(0 0, calc(100% - 12px) 0, 100% 12px, 100% 100%, 12px 100%, 0 calc(100% - 12px));
+}
+
+:root[data-theme-palette="magical-girl"] .metric-card,
+:root[data-theme-palette="magical-girl"] .overview-card,
+:root[data-theme-palette="magical-girl"] .console-panel,
+:root[data-theme-palette="magical-girl"] .catalog-card,
+:root[data-theme-palette="magical-girl"] .server-card,
+:root[data-theme-palette="magical-girl"] .server-detail-header,
+:root[data-theme-palette="magical-girl"] .resource-table-wrap,
+:root[data-theme-palette="magical-girl"] .provider-table-wrap,
+:root[data-theme-palette="magical-girl"] .server-table-wrap,
+:root[data-theme-palette="magical-girl"] .drawer-panel,
+:root[data-theme-palette="magical-girl"] .confirm-panel,
+:root[data-theme-palette="magical-girl"] .plugin-group,
+:root[data-theme-palette="magical-girl"] .operation-item {
+  background-image: var(--corner-sparkle), var(--panel-material);
+  background-size: 56px 56px, auto;
+  background-position: right 6px top 4px, center;
+  background-repeat: no-repeat, no-repeat;
+  overflow: visible;
+}
+
+:root[data-theme-palette="magical-girl"] :where(
+  .metric-card,
+  .overview-card,
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .server-detail-header,
+  .resource-table-wrap,
+  .provider-table-wrap,
+  .server-table-wrap,
+  .drawer-panel,
+  .confirm-panel,
+  .plugin-group,
+  .operation-item,
+  .server-toolbar,
+  .state-view
+) {
+  --frame-accessory-image: var(--frame-accessory-heart);
+}
+
+:root[data-theme-palette="magical-girl"] :where(
+  .metric-card,
+  .overview-card,
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .plugin-group,
+  .operation-item
+):nth-child(6n + 2) {
+  --frame-accessory-image: var(--frame-accessory-wand);
+}
+
+:root[data-theme-palette="magical-girl"] :where(
+  .metric-card,
+  .overview-card,
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .plugin-group,
+  .operation-item
+):nth-child(6n + 3) {
+  --frame-accessory-image: var(--frame-accessory-moon);
+}
+
+:root[data-theme-palette="magical-girl"] :where(
+  .metric-card,
+  .overview-card,
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .plugin-group,
+  .operation-item
+):nth-child(6n + 4) {
+  --frame-accessory-image: var(--frame-accessory-ribbon);
+}
+
+:root[data-theme-palette="magical-girl"] :where(
+  .metric-card,
+  .overview-card,
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .plugin-group,
+  .operation-item
+):nth-child(6n + 5) {
+  --frame-accessory-image: var(--frame-accessory-crystal);
+}
+
+:root[data-theme-palette="magical-girl"] :where(
+  .metric-card,
+  .overview-card,
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .plugin-group,
+  .operation-item
+):nth-child(6n) {
+  --frame-accessory-image: var(--frame-accessory-circle);
+}
+
+:root[data-theme-palette="magical-girl"] .resource-table-wrap {
+  --frame-accessory-image: var(--frame-accessory-circle);
+}
+
+:root[data-theme-palette="magical-girl"] .provider-table-wrap {
+  --frame-accessory-image: var(--frame-accessory-wand);
+}
+
+:root[data-theme-palette="magical-girl"] .server-table-wrap {
+  --frame-accessory-image: var(--frame-accessory-crystal);
+}
+
+:root[data-theme-palette="magical-girl"] .server-toolbar {
+  --frame-accessory-image: var(--frame-accessory-moon);
+}
+
+:root[data-theme-palette="magical-girl"] .state-view {
+  --frame-accessory-image: var(--frame-accessory-ribbon);
+}
+
+:root[data-theme-palette="magical-girl"] .metric-card::before,
+:root[data-theme-palette="magical-girl"] .overview-card::before,
+:root[data-theme-palette="magical-girl"] .console-panel::before,
+:root[data-theme-palette="magical-girl"] .catalog-card::before,
+:root[data-theme-palette="magical-girl"] .server-card::before,
+:root[data-theme-palette="magical-girl"] .server-detail-header::before {
+  background: linear-gradient(180deg, rgba(255, 238, 248, 0.88), rgba(255, 221, 117, 0.7), rgba(255, 119, 200, 0.62));
+  opacity: 0.72;
+}
+
+:root[data-theme-palette="magical-girl"] .metric-card::after,
+:root[data-theme-palette="magical-girl"] .overview-card::after,
+:root[data-theme-palette="magical-girl"] .console-panel::after,
+:root[data-theme-palette="magical-girl"] .catalog-card::after,
+:root[data-theme-palette="magical-girl"] .server-card::after,
+:root[data-theme-palette="magical-girl"] .server-detail-header::after,
+:root[data-theme-palette="magical-girl"] .confirm-panel::after,
+:root[data-theme-palette="magical-girl"] .drawer-panel::after {
+  inset: -14px;
+  background-image: var(--frame-accessory-image);
+  background-size: var(--frame-accessory-size);
+  background-repeat: no-repeat;
+  background-position: right -4px top -6px;
+  opacity: var(--frame-accessory-opacity);
+  filter: drop-shadow(0 0 4px rgba(255, 119, 200, 0.58)) drop-shadow(0 0 2px rgba(255, 221, 117, 0.42));
+}
+
+:root[data-theme-palette="mecha-black"] .metric-card::before,
+:root[data-theme-palette="mecha-black"] .overview-card::before,
+:root[data-theme-palette="mecha-black"] .console-panel::before,
+:root[data-theme-palette="mecha-black"] .catalog-card::before,
+:root[data-theme-palette="mecha-black"] .server-card::before,
+:root[data-theme-palette="mecha-black"] .server-detail-header::before {
+  background: linear-gradient(135deg, rgba(72, 230, 255, 0.72), rgba(255, 184, 77, 0.42), rgba(72, 230, 255, 0.18));
+  opacity: 0.76;
+}
+
+:root[data-custom-background="true"] .app-sidebar {
+  background:
+    radial-gradient(circle at 92% 3%, rgba(255, 255, 255, 0.18) 0 2px, transparent 3px),
+    linear-gradient(180deg, rgba(8, 10, 16, 0.42), rgba(8, 10, 16, 0.3));
+}
+
+:root[data-custom-background="true"] {
+  --frame-accessory-opacity: 0.04;
+  --surface: rgba(5, 10, 16, 0.76);
+  --surface-solid: rgba(5, 10, 16, 0.92);
+  --surface-raised: rgba(7, 13, 20, 0.82);
+  --glass-tint: transparent;
+  --glass-wash: linear-gradient(145deg, rgba(255, 255, 255, 0.08), rgba(5, 10, 16, 0.76) 44%, rgba(255, 255, 255, 0.03));
+  --panel-material: linear-gradient(145deg, rgba(255, 255, 255, 0.075), rgba(5, 10, 16, 0.86) 48%, rgba(5, 10, 16, 0.76));
+  --panel-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.13), inset 0 0 0 1px rgba(255, 255, 255, 0.045), 0 18px 38px rgba(0, 0, 0, 0.32);
+}
+
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] {
+  --frame-accessory-opacity: 0.82;
+  --surface: rgba(34, 27, 34, 0.5);
+  --surface-solid: rgba(24, 20, 26, 0.78);
+  --surface-raised: rgba(44, 34, 43, 0.58);
+  --line: rgba(255, 185, 226, 0.52);
+  --line-strong: rgba(255, 236, 249, 0.78);
+  --glass-wash: linear-gradient(145deg, rgba(255, 236, 249, 0.16), rgba(38, 30, 38, 0.48) 46%, rgba(255, 221, 117, 0.06));
+  --panel-material: linear-gradient(145deg, rgba(255, 246, 253, 0.14), rgba(39, 31, 39, 0.5) 44%, rgba(24, 21, 27, 0.46));
+  --panel-shadow: inset 0 1px 0 rgba(255, 246, 253, 0.3), inset 0 0 0 1px rgba(255, 185, 226, 0.12), 0 16px 34px rgba(20, 10, 18, 0.26), 0 0 20px rgba(255, 119, 200, 0.14);
+}
+
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .app-sidebar {
+  border-right-color: rgba(255, 226, 244, 0.42);
+  background:
+    linear-gradient(180deg, rgba(52, 37, 50, 0.66), rgba(22, 20, 27, 0.58)),
+    rgba(20, 18, 24, 0.42);
+  -webkit-backdrop-filter: blur(14px) saturate(1.04);
+  backdrop-filter: blur(14px) saturate(1.04);
+  box-shadow: inset -1px 0 0 rgba(255, 246, 253, 0.18), 10px 0 28px rgba(18, 10, 17, 0.22), 0 0 18px rgba(255, 119, 200, 0.1);
+}
+
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .page-header > div:first-child {
+  border-color: rgba(255, 226, 244, 0.28);
+  background:
+    linear-gradient(135deg, rgba(255, 246, 253, 0.13), transparent 36%),
+    rgba(38, 30, 38, 0.48);
+  -webkit-backdrop-filter: blur(8px) saturate(1.02);
+  backdrop-filter: blur(8px) saturate(1.02);
+}
+
+:root[data-custom-background="true"] .app-sidebar {
+  border-right-color: rgba(210, 239, 246, 0.24);
+  background:
+    linear-gradient(180deg, rgba(5, 10, 16, 0.76), rgba(5, 9, 14, 0.68)),
+    rgba(4, 8, 12, 0.58);
+  -webkit-backdrop-filter: blur(18px) saturate(0.9);
+  backdrop-filter: blur(18px) saturate(0.9);
+  box-shadow: inset -1px 0 0 rgba(255, 255, 255, 0.12), 10px 0 28px rgba(0, 0, 0, 0.22);
+}
+
+:root[data-custom-background="true"] .app-brand-subtitle,
+:root[data-custom-background="true"] .provider-id,
+:root[data-custom-background="true"] .app-menu-toolbar,
+:root[data-custom-background="true"] .profile-settings-form label,
+:root[data-custom-background="true"] .profile-form label {
+  color: rgba(222, 242, 248, 0.72);
+}
+
+:root[data-custom-background="true"] .app-nav-copy strong,
+:root[data-custom-background="true"] .app-brand strong,
+:root[data-custom-background="true"] .profile-settings-hero h2,
+:root[data-custom-background="true"] .page-title,
+:root[data-custom-background="true"] .panel-header h2,
+:root[data-custom-background="true"] .form-header h2 {
+  color: rgba(247, 253, 255, 0.96);
+  text-shadow: 0 1px 2px rgba(0, 0, 0, 0.34);
+}
+
+:root[data-custom-background="true"] .app-nav-icon,
+:root[data-custom-background="true"] .app-nav-group-button,
+:root[data-custom-background="true"] .page-kicker,
+:root[data-custom-background="true"] .profile-settings-hero p,
+:root[data-custom-background="true"] .theme-background-note,
+:root[data-custom-background="true"] .metric-detail,
+:root[data-custom-background="true"] .overview-card p,
+:root[data-custom-background="true"] .catalog-card p {
+  color: rgba(224, 243, 249, 0.82);
+}
+
+:root[data-custom-background="true"] .page-header > div:first-child {
+  display: grid;
+  justify-items: start;
+  padding: 7px 12px 9px;
+  border: 1px solid rgba(255, 255, 255, 0.08);
+  border-radius: 8px;
+  background:
+    linear-gradient(135deg, rgba(255, 255, 255, 0.055), transparent 36%),
+    rgba(5, 10, 16, 0.38);
+  -webkit-backdrop-filter: blur(10px) saturate(0.8);
+  backdrop-filter: blur(10px) saturate(0.8);
+  box-shadow: 0 10px 22px rgba(0, 0, 0, 0.18);
+}
+
+:root[data-custom-background="true"] .page-kicker {
+  margin-bottom: 4px;
+  text-shadow: 0 1px 2px rgba(0, 0, 0, 0.42);
+}
+
+:root[data-custom-background="true"] .app-nav-item-active {
+  background:
+    linear-gradient(90deg, color-mix(in srgb, var(--accent) 72%, transparent) 0 3px, transparent 3px),
+    linear-gradient(135deg, rgba(7, 16, 23, 0.78), rgba(7, 14, 20, 0.56));
+  border-color: color-mix(in srgb, var(--accent) 64%, rgba(255, 255, 255, 0.18));
+  box-shadow: inset 0 0 0 1px rgba(255, 255, 255, 0.12), 0 8px 22px rgba(0, 0, 0, 0.22);
+}
+
+:root[data-custom-background="true"] .metric-card,
+:root[data-custom-background="true"] .overview-card,
+:root[data-custom-background="true"] .console-panel,
+:root[data-custom-background="true"] .catalog-card,
+:root[data-custom-background="true"] .server-card,
+:root[data-custom-background="true"] .server-detail-header,
+:root[data-custom-background="true"] .server-toolbar,
+:root[data-custom-background="true"] .state-view,
+:root[data-custom-background="true"] .resource-table-wrap,
+:root[data-custom-background="true"] .provider-table-wrap,
+:root[data-custom-background="true"] .server-table-wrap,
+:root[data-custom-background="true"] .plugin-group,
+:root[data-custom-background="true"] .operation-item,
+:root[data-custom-background="true"] .confirm-panel,
+:root[data-custom-background="true"] .drawer-panel {
+  -webkit-backdrop-filter: blur(16px) saturate(0.78);
+  backdrop-filter: blur(16px) saturate(0.78);
+}
+
+:root[data-custom-background="true"] .metric-card,
+:root[data-custom-background="true"] .overview-card,
+:root[data-custom-background="true"] .console-panel,
+:root[data-custom-background="true"] .catalog-card,
+:root[data-custom-background="true"] .server-card,
+:root[data-custom-background="true"] .server-detail-header,
+:root[data-custom-background="true"] .server-toolbar,
+:root[data-custom-background="true"] .state-view,
+:root[data-custom-background="true"] .drawer-panel,
+:root[data-custom-background="true"] .confirm-panel,
+:root[data-custom-background="true"] .plugin-group,
+:root[data-custom-background="true"] .operation-item,
+:root[data-custom-background="true"] .resource-table-wrap,
+:root[data-custom-background="true"] .provider-table-wrap,
+:root[data-custom-background="true"] .server-table-wrap {
+  background:
+    linear-gradient(135deg, rgba(255, 255, 255, 0.065), transparent 30%),
+    linear-gradient(180deg, rgba(5, 10, 16, 0.86), rgba(5, 10, 16, 0.78));
+  border-color: color-mix(in srgb, var(--line-strong) 44%, rgba(255, 255, 255, 0.16));
+  -webkit-backdrop-filter: blur(16px) saturate(0.78);
+  backdrop-filter: blur(16px) saturate(0.78);
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.12), inset 0 0 0 1px rgba(255, 255, 255, 0.04), 0 16px 34px rgba(0, 0, 0, 0.3);
+}
+
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .metric-card,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .overview-card,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .console-panel,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .catalog-card,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-card,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-detail-header,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-toolbar,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .state-view,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .drawer-panel,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .confirm-panel,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .plugin-group,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .operation-item,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .resource-table-wrap,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .provider-table-wrap,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-table-wrap {
+  background:
+    radial-gradient(circle at 100% 0, rgba(255, 185, 226, 0.18), transparent 30%),
+    linear-gradient(135deg, rgba(255, 246, 253, 0.13), transparent 32%),
+    linear-gradient(180deg, rgba(42, 32, 41, 0.42), rgba(24, 21, 27, 0.36));
+  border-color: color-mix(in srgb, var(--line-strong) 76%, rgba(255, 255, 255, 0.2));
+  -webkit-backdrop-filter: none;
+  backdrop-filter: none;
+  box-shadow: inset 0 1px 0 rgba(255, 246, 253, 0.28), inset 0 0 0 1px rgba(255, 185, 226, 0.1), 0 16px 32px rgba(18, 10, 17, 0.26), 0 0 20px rgba(255, 119, 200, 0.14);
+}
+
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-toolbar,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .state-view {
+  position: relative;
+  isolation: isolate;
+  overflow: visible;
+}
+
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-toolbar::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .state-view::after {
+  content: "";
+  position: absolute;
+  inset: -14px;
+  border-radius: inherit;
+  background-image: var(--frame-accessory-image);
+  background-size: var(--frame-accessory-size);
+  background-repeat: no-repeat;
+  background-position: right -4px top -6px;
+  opacity: var(--frame-accessory-opacity);
+  filter: drop-shadow(0 0 4px rgba(255, 119, 200, 0.62)) drop-shadow(0 0 2px rgba(255, 221, 117, 0.46));
+  z-index: 0;
+  pointer-events: none;
+}
+
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-toolbar > *,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .state-view > * {
+  position: relative;
+  z-index: 1;
+}
+
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .metric-card::before,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .overview-card::before,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .console-panel::before,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .catalog-card::before,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-card::before,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-detail-header::before {
+  background: linear-gradient(180deg, rgba(255, 246, 253, 0.96), rgba(255, 221, 117, 0.72), rgba(255, 119, 200, 0.78));
+  opacity: 0.84;
+}
+
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .metric-card::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .overview-card::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .console-panel::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .catalog-card::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-card::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-detail-header::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-toolbar::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .state-view::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .confirm-panel::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .drawer-panel::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .resource-table-wrap::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .provider-table-wrap::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-table-wrap::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .plugin-group::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .operation-item::after {
+  inset: -14px;
+  background-image: var(--frame-accessory-image);
+  background-size: var(--frame-accessory-size);
+  background-repeat: no-repeat;
+  background-position: right -4px top -6px;
+  opacity: var(--frame-accessory-opacity);
+  filter: drop-shadow(0 0 4px rgba(255, 119, 200, 0.62)) drop-shadow(0 0 2px rgba(255, 221, 117, 0.46));
+}
+
+:root[data-custom-background="true"] .metric-card::after,
+:root[data-custom-background="true"] .overview-card::after,
+:root[data-custom-background="true"] .console-panel::after,
+:root[data-custom-background="true"] .catalog-card::after,
+:root[data-custom-background="true"] .server-card::after,
+:root[data-custom-background="true"] .server-detail-header::after,
+:root[data-custom-background="true"] .server-toolbar::after,
+:root[data-custom-background="true"] .state-view::after,
+:root[data-custom-background="true"] .confirm-panel::after,
+:root[data-custom-background="true"] .drawer-panel::after,
+:root[data-custom-background="true"] .resource-table-wrap::after,
+:root[data-custom-background="true"] .provider-table-wrap::after,
+:root[data-custom-background="true"] .server-table-wrap::after,
+:root[data-custom-background="true"] .plugin-group::after,
+:root[data-custom-background="true"] .operation-item::after {
+  opacity: 0.04;
+}
+
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .metric-card::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .overview-card::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .console-panel::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .catalog-card::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-card::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-detail-header::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-toolbar::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .state-view::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .confirm-panel::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .drawer-panel::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .resource-table-wrap::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .provider-table-wrap::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .server-table-wrap::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .plugin-group::after,
+:root[data-custom-background="true"][data-theme-palette="magical-girl"] .operation-item::after {
+  opacity: var(--frame-accessory-opacity);
+}
+
+:root[data-theme-palette="magical-girl"] .resource-table-wrap::after,
+:root[data-theme-palette="magical-girl"] .provider-table-wrap::after,
+:root[data-theme-palette="magical-girl"] .server-table-wrap::after {
+  inset: -10px;
+  background-image: var(--frame-accessory-image);
+  background-size: 60px 40px;
+  background-position: right -2px top -4px;
+}
+
+:root[data-theme-palette="magical-girl"] :where(
+  .metric-card,
+  .overview-card,
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .server-detail-header,
+  .plugin-group,
+  .operation-item,
+  .confirm-panel
+) {
+  overflow: visible;
+}
+
+:root[data-custom-background="true"] .global-particle-layer {
+  opacity: 0.03;
+}
+
+:root[data-custom-background="true"] .profile-settings-form input,
+:root[data-custom-background="true"] .profile-settings-form textarea,
+:root[data-custom-background="true"] .profile-form input,
+:root[data-custom-background="true"] .provider-form input,
+:root[data-custom-background="true"] .provider-form select,
+:root[data-custom-background="true"] .provider-form textarea,
+:root[data-custom-background="true"] .server-toolbar input[type="search"],
+:root[data-custom-background="true"] .server-toolbar select,
+:root[data-custom-background="true"] .log-filter-bar input,
+:root[data-custom-background="true"] .log-filter-bar select {
+  background: rgba(5, 10, 16, 0.94);
+  border-color: color-mix(in srgb, var(--accent) 48%, rgba(255, 255, 255, 0.18));
+  color: rgba(247, 253, 255, 0.96);
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.1), 0 8px 18px rgba(0, 0, 0, 0.18);
+}
+
+:root[data-custom-background="true"] .palette-option,
+:root[data-custom-background="true"] .background-preset-option,
+:root[data-custom-background="true"] .theme-upload,
+:root[data-custom-background="true"] .state-action,
+:root[data-custom-background="true"] .action-strip button,
+:root[data-custom-background="true"] .segmented-button,
+:root[data-custom-background="true"] .icon-command,
+:root[data-custom-background="true"] .row-actions button,
+:root[data-custom-background="true"] .app-account-button,
+:root[data-custom-background="true"] .app-session {
+  background: linear-gradient(135deg, rgba(255, 255, 255, 0.055), transparent 34%), rgba(5, 10, 16, 0.84);
+  border-color: color-mix(in srgb, var(--line-strong) 40%, rgba(255, 255, 255, 0.14));
+  color: rgba(229, 246, 251, 0.9);
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.12), 0 7px 16px rgba(0, 0, 0, 0.16);
+}
+
+:root[data-custom-background="true"] .palette-option-active,
+:root[data-custom-background="true"] .background-preset-option-active,
+:root[data-custom-background="true"] .segmented-button-active {
+  background: linear-gradient(135deg, color-mix(in srgb, var(--accent) 10%, transparent), rgba(5, 10, 16, 0.78));
+  border-color: color-mix(in srgb, var(--accent) 58%, rgba(255, 255, 255, 0.18));
+  color: rgba(247, 253, 255, 0.96);
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.16), 0 0 0 1px color-mix(in srgb, var(--accent) 18%, transparent), 0 9px 20px rgba(0, 0, 0, 0.2);
+}
+
+:root[data-custom-background="true"] .profile-save-button,
+:root[data-custom-background="true"] .primary-command {
+  background: linear-gradient(135deg, color-mix(in srgb, var(--accent) 78%, #ffffff 6%), color-mix(in srgb, var(--pink) 58%, #0b1620 42%));
+  border-color: color-mix(in srgb, var(--accent-deep) 72%, rgba(255, 255, 255, 0.22));
+  color: #ffffff;
+  text-shadow: 0 1px 2px rgba(0, 0, 0, 0.36);
+  box-shadow: 0 10px 24px rgba(0, 0, 0, 0.28), 0 0 18px color-mix(in srgb, var(--accent) 24%, transparent);
+}
+
+:root[data-custom-background="true"] .page-status,
+:root[data-custom-background="true"] .job-chip,
+:root[data-custom-background="true"] .status-disabled,
+:root[data-custom-background="true"] .status-pending,
+:root[data-custom-background="true"] .result-badge-pending {
+  background: rgba(76, 54, 18, 0.62);
+  border: 1px solid rgba(255, 214, 109, 0.42);
+  color: #ffe6a3;
+}
+
+:root[data-custom-background="true"] .page-status-ready,
+:root[data-custom-background="true"] .status-active,
+:root[data-custom-background="true"] .result-badge-succeeded,
+:root[data-custom-background="true"] .action-result-success {
+  background: rgba(79, 255, 215, 0.16);
+  border: 1px solid rgba(79, 255, 215, 0.36);
+  color: #b9fff2;
+}
+
+:root[data-custom-background="true"] .status-error,
+:root[data-custom-background="true"] .result-badge-failed,
+:root[data-custom-background="true"] .action-result-failed {
+  background: rgba(255, 90, 110, 0.16);
+  border: 1px solid rgba(255, 138, 157, 0.36);
+  color: #ffc6d0;
+}
+
+:root[data-custom-background="true"] .state-error {
+  background:
+    linear-gradient(135deg, rgba(255, 126, 153, 0.08), transparent 34%),
+    linear-gradient(180deg, rgba(12, 10, 16, 0.9), rgba(8, 10, 15, 0.82));
+  border-color: rgba(255, 138, 157, 0.46);
+  color: rgba(248, 238, 244, 0.9);
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.12), 0 16px 36px rgba(0, 0, 0, 0.34);
+}
+
+:root[data-custom-background="true"] .state-error p {
+  color: rgba(255, 211, 224, 0.82);
+}
+
+:root[data-custom-background="true"] .state-error strong {
+  color: rgba(255, 246, 250, 0.96);
+}
+
+.panel-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  margin-bottom: 12px;
+  flex-wrap: wrap;
+}
+
+.panel-header h2,
+.panel-header h3 {
+  margin: 0;
+  color: var(--ink);
+  font-size: 17px;
+  line-height: 1.25;
+}
+
+.action-list {
+  display: grid;
+  gap: 8px;
+  color: var(--ink-soft);
+}
+
+/* ---- shared state views ---- */
+
+.state-view {
+  display: grid;
+  justify-items: center;
+  align-content: center;
+  gap: 8px;
+  min-height: 130px;
+  padding: 20px;
+  border: 1px dashed var(--line-strong);
+  border-radius: 8px;
+  background: var(--glass-wash), var(--surface);
+  color: var(--ink-soft);
+  text-align: center;
+  box-shadow: inset 0 1px 0 var(--crystal-rim), 0 12px 30px var(--glass-shadow);
+}
+
+.state-view p {
+  margin: 0;
+  max-width: 460px;
+  font-size: 13px;
+  color: var(--ink-faint);
+}
+
+.state-view strong {
+  color: var(--ink);
+}
+
+.state-icon {
+  display: inline-flex;
+  color: var(--accent);
+}
+
+.state-error {
+  border-color: rgba(214, 51, 92, 0.5);
+  background: var(--danger-soft);
+}
+
+.state-error .state-icon {
+  color: var(--danger);
+}
+
+.state-compact {
+  min-height: 56px;
+  padding: 10px;
+  grid-auto-flow: column;
+  align-items: center;
+  gap: 8px;
+}
+
+.state-spinner {
+  animation: state-spin 1s linear infinite;
+}
+
+@keyframes state-spin {
+  to {
+    transform: rotate(360deg);
+  }
+}
+
+.state-action {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  min-height: 34px;
+  padding: 0 12px;
+  border: 1px solid var(--line-strong);
+  border-radius: 8px;
+  background: var(--surface-solid);
+  color: var(--accent-deep);
+  cursor: pointer;
+  font-weight: 700;
+}
+
+.state-action:hover,
+.state-action:focus-visible {
+  border-color: var(--accent);
+  outline: none;
+}
+
+.result-badge {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  min-height: 26px;
+  padding: 0 8px;
+  border-radius: 999px;
+  font-size: 12px;
+  font-weight: 700;
+  white-space: nowrap;
+}
+
+.result-badge-pending {
+  color: #6b4b00;
+  background: var(--gold-soft);
+}
+
+.result-badge-succeeded {
+  color: var(--success);
+  background: var(--success-soft);
+}
+
+.result-badge-failed {
+  color: var(--danger);
+  background: var(--danger-soft);
+}
+
+.diagnostic-summary {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  font-size: 12px;
+  color: var(--ink-soft);
+}
+
+.diagnostic-summary code {
+  padding: 2px 6px;
+  border-radius: 6px;
+  background: var(--accent-soft);
+  overflow-wrap: anywhere;
+}
+
+.diagnostic-copy {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  min-height: 24px;
+  padding: 0 6px;
+  border: 1px solid var(--line);
+  border-radius: 6px;
+  background: var(--surface-solid);
+  color: var(--ink-soft);
+  cursor: pointer;
+  font-size: 11px;
+}
+
+/* ---- tables ---- */
+
+.resource-table-wrap,
+.provider-table-wrap,
+.server-table-wrap {
+  min-width: 0;
+  overflow: auto;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--glass-wash), var(--glass-tint), var(--surface);
+  backdrop-filter: blur(16px) saturate(1.12);
+  box-shadow: inset 0 1px 0 var(--crystal-rim), inset 0 0 0 1px var(--diamond-line), 0 14px 34px var(--glass-shadow);
+  position: relative;
+  isolation: isolate;
+}
+
+.resource-table-wrap::before,
+.provider-table-wrap::before,
+.server-table-wrap::before,
+.plugin-group::before,
+.operation-item::before {
+  content: "";
+  position: absolute;
+  inset: 0;
+  border-radius: inherit;
+  padding: 1px;
+  background: linear-gradient(135deg, rgba(255, 255, 255, 0.74), color-mix(in srgb, var(--accent) 26%, transparent), rgba(255, 255, 255, 0.2));
+  mask: linear-gradient(#000 0 0) content-box, linear-gradient(#000 0 0);
+  mask-composite: exclude;
+  opacity: 0.72;
+  z-index: 2;
+  pointer-events: none;
+}
+
+.resource-table-wrap::after,
+.provider-table-wrap::after,
+.server-table-wrap::after,
+.plugin-group::after,
+.operation-item::after {
+  content: "";
+  position: absolute;
+  inset: 0;
+  border-radius: inherit;
+  background: var(--frame-accessory-top), var(--frame-accessory-bottom), var(--jelly-highlight);
+  background-size: var(--frame-accessory-size), auto;
+  background-repeat: no-repeat, no-repeat, no-repeat;
+  background-position: right 6px top 5px, left 6px bottom 5px, center;
+  opacity: 0.16;
+  z-index: 0;
+  pointer-events: none;
+}
+
+:root[data-theme-palette="magical-girl"] .resource-table-wrap::after,
+:root[data-theme-palette="magical-girl"] .provider-table-wrap::after,
+:root[data-theme-palette="magical-girl"] .server-table-wrap::after,
+:root[data-theme-palette="magical-girl"] .plugin-group::after,
+:root[data-theme-palette="magical-girl"] .operation-item::after {
+  inset: -12px;
+  background-image: var(--frame-accessory-image);
+  background-size: 62px 40px;
+  background-position: right -3px top -4px;
+  opacity: var(--frame-accessory-opacity);
+}
+
+.resource-table,
+.provider-table {
+  width: 100%;
+  min-width: 760px;
+  border-collapse: collapse;
+}
+
+.provider-table {
+  min-width: 780px;
+  table-layout: fixed;
+}
+
+.resource-table th,
+.resource-table td,
+.provider-table th,
+.provider-table td {
+  padding: 12px;
+  border-bottom: 1px solid rgba(124, 92, 255, 0.1);
+  text-align: left;
+  vertical-align: middle;
+  font-size: 14px;
+}
+
+.resource-table th,
+.provider-table th {
+  color: var(--ink-faint);
+  font-size: 12px;
+  font-weight: 700;
+  background: var(--accent-soft);
+}
+
+.server-table {
+  min-width: 860px;
+}
+
+.server-panel-header {
+  margin: 0;
+  padding: 14px;
+  border-bottom: 1px solid rgba(124, 92, 255, 0.12);
+}
+
+/* ---- buttons ---- */
+
+.action-strip {
+  display: flex;
+  gap: 8px;
+  flex-wrap: wrap;
+  align-items: center;
+}
+
+.action-strip button,
+.segmented-button,
+.icon-command,
+.primary-command,
+.row-actions button,
+.table-link-button {
+  border: 1px solid var(--line-strong);
+  background: var(--jelly-highlight), var(--glass-wash), var(--surface-solid);
+  color: var(--ink-soft);
+  cursor: pointer;
+  box-shadow: inset 0 1px 0 var(--crystal-rim), inset 0 -1px 0 rgba(255, 255, 255, 0.28), 0 8px 18px var(--glass-shadow);
+}
+
+.action-strip button {
+  min-height: 36px;
+  padding: 0 12px;
+  border-radius: 8px;
+}
+
+.segmented-button {
+  min-height: 34px;
+  padding: 0 12px;
+  border-radius: 8px;
+}
+
+.segmented-button-active {
+  border-color: var(--accent);
+  background: var(--glass-wash), var(--accent-soft);
+  color: var(--accent-deep);
+  font-weight: 700;
+  box-shadow: inset 0 1px 0 var(--crystal-rim), 0 8px 20px var(--candy-glow);
+}
+
+.icon-command,
+.primary-command {
+  min-height: 36px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 8px;
+  border-radius: 8px;
+  padding: 0 12px;
+}
+
+.action-strip button:hover,
+.action-strip button:focus-visible,
+.icon-command:hover,
+.icon-command:focus-visible,
+.primary-command:hover,
+.primary-command:focus-visible,
+.row-actions button:hover,
+.row-actions button:focus-visible,
+.table-link-button:hover,
+.table-link-button:focus-visible,
+.segmented-button:hover,
+.segmented-button:focus-visible {
+  border-color: var(--accent);
+  outline: none;
+  color: var(--ink);
+  box-shadow: inset 0 1px 0 var(--crystal-rim), 0 0 0 2px var(--accent-soft), 0 12px 26px var(--glass-shadow);
+}
+
+.primary-command {
+  width: 100%;
+  background:
+    var(--corner-sparkle),
+    linear-gradient(145deg, rgba(255, 255, 255, 0.72), transparent 36%),
+    linear-gradient(135deg, var(--accent), var(--pink));
+  background-size: 48px 48px, auto, auto;
+  background-position: right 8px top 4px, center, center;
+  background-repeat: no-repeat;
+  border-color: var(--accent-deep);
+  color: #ffffff;
+  font-weight: 700;
+  box-shadow: 0 12px 26px var(--candy-glow), inset 0 1px 0 var(--crystal-rim), inset 0 -2px 0 rgba(255, 255, 255, 0.24), 0 0 18px var(--moonbeam);
+}
+
+.action-strip .primary-command {
+  width: auto;
+  min-width: 112px;
+}
+
+.provider-form .primary-command,
+.catalog-card .primary-command {
+  width: 100%;
+}
+
+.primary-command:disabled,
+.icon-command:disabled {
+  opacity: 0.55;
+  cursor: not-allowed;
+  box-shadow: inset 0 1px 0 var(--crystal-rim);
+}
+
+.danger-command {
+  border-color: rgba(214, 51, 92, 0.5);
+  color: var(--danger);
+}
+
+.danger-command:hover,
+.danger-command:focus-visible {
+  border-color: var(--danger);
+}
+
+/* ---- catalog / detail lists ---- */
+
+.catalog-grid {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 14px;
+}
+
+.catalog-card {
+  min-width: 0;
+  display: grid;
+  gap: 12px;
+}
+
+.catalog-card-active {
+  border-color: var(--accent);
+  box-shadow: var(--panel-shadow), 0 0 0 2px var(--accent-soft);
+}
+
+.catalog-card p {
+  margin: 0;
+  color: var(--ink-soft);
+  font-size: 13px;
+  line-height: 1.55;
+}
+
+.detail-list {
+  display: grid;
+  gap: 10px;
+  margin: 0;
+}
+
+.detail-list div {
+  display: grid;
+  grid-template-columns: 96px minmax(0, 1fr);
+  gap: 10px;
+}
+
+.detail-list dt {
+  color: var(--ink-faint);
+  font-size: 13px;
+}
+
+.detail-list dd {
+  margin: 0;
+  color: var(--ink-soft);
+  overflow-wrap: anywhere;
+}
+
+.resource-list {
+  display: grid;
+  gap: 10px;
+}
+
+.resource-list-item {
+  display: grid;
+  grid-template-columns: minmax(180px, 1fr) auto minmax(140px, 1fr) minmax(140px, 1fr);
+  gap: 12px;
+  align-items: center;
+  padding: 12px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--glass-wash), var(--glass-tint), var(--surface);
+  box-shadow: inset 0 1px 0 var(--crystal-rim);
+  min-width: 0;
+}
+
+.resource-list-item > * {
+  min-width: 0;
+}
+
+/* ---- page containers ---- */
+
+.ai-providers-page,
+.servers-page,
+.server-detail-page,
+.maintenance-page {
+  width: min(100%, 1180px);
+  display: grid;
+  gap: 16px;
+}
+
+.ai-provider-header {
+  min-height: 52px;
+}
+
+.ai-provider-metrics {
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+}
+
+.ai-provider-toolbar {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  min-height: 40px;
+  flex-wrap: wrap;
+}
+
+.ai-provider-workspace,
+.server-workspace {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) minmax(300px, 360px);
+  gap: 14px;
+  align-items: start;
+}
+
+.ai-provider-workspace > *,
+.server-workspace > * {
+  min-width: 0;
+}
+
+.provider-form {
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--glass-wash), var(--glass-tint), var(--surface);
+  backdrop-filter: blur(18px) saturate(1.2);
+  box-shadow: inset 0 1px 0 var(--crystal-rim), inset 0 0 0 1px var(--diamond-line), 0 16px 36px var(--glass-shadow);
+  display: grid;
+  gap: 12px;
+  padding: 14px;
+  align-self: start;
+}
+
+.job-chip {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  min-height: 26px;
+  padding: 0 8px;
+  border-radius: 999px;
+  color: #6b4b00;
+  background: var(--gold-soft);
+  font-size: 12px;
+  font-weight: 700;
+  white-space: nowrap;
+}
+
+.provider-row-active {
+  background: var(--accent-soft);
+}
+
+.provider-row-active td:first-child {
+  box-shadow: inset 3px 0 0 var(--accent);
+}
+
+.table-link-button {
+  display: block;
+  width: 100%;
+  min-height: 28px;
+  padding: 0;
+  border: 0;
+  color: var(--accent-deep);
+  background: transparent;
+  text-align: left;
+  font-weight: 700;
+}
+
+.provider-id {
+  display: block;
+  color: var(--ink-faint);
+  font-size: 12px;
+  overflow-wrap: anywhere;
+}
+
+.status-pill {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  min-height: 26px;
+  padding: 0 8px;
+  border-radius: 999px;
+  font-size: 12px;
+  font-weight: 700;
+  white-space: nowrap;
+  box-shadow: inset 0 1px 0 color-mix(in srgb, currentColor 18%, transparent);
+}
+
+.status-active {
+  color: var(--success);
+  background: var(--success-soft);
+}
+
+.status-disabled {
+  color: #6b4b00;
+  background: var(--gold-soft);
+}
+
+.status-pending {
+  color: #6b4b00;
+  background: var(--gold-soft);
+}
+
+.status-error {
+  color: var(--danger);
+  background: var(--danger-soft);
+}
+
+.secret-ref {
+  display: block;
+  max-width: 100%;
+  color: var(--ink-soft);
+  font-size: 12px;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.row-actions {
+  display: flex;
+  gap: 6px;
+  justify-content: flex-end;
+  flex-wrap: wrap;
+}
+
+.row-actions button {
+  width: 32px;
+  height: 32px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  border-radius: 8px;
+  padding: 0;
+}
+
+.row-actions button:disabled {
+  border-color: var(--line);
+  color: #9aa8ae;
+  background: rgba(243, 246, 247, 0.9);
+  cursor: not-allowed;
+}
+
+.form-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 10px;
+  min-height: 32px;
+}
+
+.form-header h2 {
+  margin: 0;
+  color: var(--ink);
+  font-size: 17px;
+  line-height: 1.25;
+}
+
+.action-result {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  min-height: 26px;
+  padding: 0 8px;
+  border-radius: 999px;
+  font-size: 12px;
+  white-space: nowrap;
+}
+
+.action-result-success {
+  color: var(--success);
+  background: var(--success-soft);
+}
+
+.action-result-failed {
+  color: var(--danger);
+  background: var(--danger-soft);
+}
+
+.provider-form label {
+  display: grid;
+  gap: 6px;
+  color: var(--ink-soft);
+  font-size: 13px;
+  font-weight: 700;
+}
+
+.provider-form input,
+.provider-form select,
+.provider-form textarea {
+  width: 100%;
+  min-height: 38px;
+  border: 1px solid var(--line-strong);
+  border-radius: 8px;
+  padding: 0 10px;
+  background: var(--surface-solid);
+  color: var(--ink);
+  font: inherit;
+}
+
+.provider-form textarea {
+  min-height: 120px;
+  padding: 10px;
+  resize: vertical;
+  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+  font-size: 13px;
+}
+
+.provider-form input:focus,
+.provider-form select:focus,
+.provider-form textarea:focus {
+  border-color: var(--accent);
+  outline: 2px solid var(--accent-soft);
+}
+
+.provider-form input:disabled {
+  color: var(--ink-faint);
+  background: rgba(243, 246, 247, 0.9);
+}
+
+.form-grid {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 10px;
+}
+
+/* ---- server cards ---- */
+
+.server-toolbar {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  flex-wrap: wrap;
+  min-width: 0;
+  padding: 10px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--frosted-surface), var(--glass-tint), color-mix(in srgb, var(--surface) 82%, transparent);
+  box-shadow: inset 0 1px 0 var(--crystal-rim);
+}
+
+.server-toolbar input[type="search"] {
+  flex: 1 1 220px;
+  min-height: 38px;
+  border: 1px solid var(--line-strong);
+  border-radius: 8px;
+  padding: 0 12px;
+  background: var(--surface-solid);
+  color: var(--ink);
+  font: inherit;
+}
+
+.server-toolbar select {
+  min-height: 38px;
+  border: 1px solid var(--line-strong);
+  border-radius: 8px;
+  padding: 0 10px;
+  background: var(--surface-solid);
+  color: var(--ink);
+  font: inherit;
+  min-width: 180px;
+}
+
+.server-toolbar select:focus {
+  border-color: var(--accent);
+  outline: 2px solid var(--accent-soft);
+}
+
+.server-toolbar input[type="search"]:focus {
+  border-color: var(--accent);
+  outline: 2px solid var(--accent-soft);
+}
+
+.server-card-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(310px, 1fr));
+  gap: 14px;
+}
+
+.server-card {
+  display: grid;
+  gap: 12px;
+  padding: 16px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--frosted-surface), var(--glass-tint), var(--surface);
+  backdrop-filter: blur(22px) saturate(1.28);
+  text-align: left;
+  cursor: pointer;
+  transition: transform 120ms ease, border-color 120ms ease;
+  box-shadow: var(--jelly-inset), inset 0 0 0 1px var(--diamond-line), 0 18px 42px var(--glass-shadow), 0 0 28px rgba(255, 255, 255, 0.2);
+  position: relative;
+  overflow: hidden;
+  min-width: 0;
+}
+
+.server-card:hover,
+.server-card:focus-visible {
+  border-color: var(--accent);
+  outline: none;
+  transform: translateY(-2px);
+}
+
+.server-card-head {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 10px;
+}
+
+.server-card-head > span:first-child {
+  min-width: 0;
+}
+
+.server-card-head strong {
+  display: block;
+  font-size: 16px;
+  color: var(--ink);
+  overflow-wrap: anywhere;
+}
+
+.server-card-stats {
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  gap: 8px;
+}
+
+.server-card-stat {
+  display: grid;
+  gap: 2px;
+  padding: 8px;
+  border-radius: 8px;
+  background: var(--jelly-highlight), var(--glass-wash), var(--accent-soft);
+  min-height: 52px;
+  align-content: center;
+  box-shadow: inset 0 1px 0 var(--crystal-rim);
+  min-width: 0;
+}
+
+.server-card-stat span {
+  color: var(--ink-faint);
+  font-size: 11px;
+}
+
+.server-card-stat strong {
+  font-size: 14px;
+  color: var(--ink);
+  overflow-wrap: anywhere;
+}
+
+.server-card-meters {
+  display: grid;
+  gap: 6px;
+}
+
+.usage-meter {
+  display: grid;
+  grid-template-columns: 52px minmax(0, 1fr) 44px;
+  gap: 8px;
+  align-items: center;
+  font-size: 12px;
+  color: var(--ink-soft);
+}
+
+.usage-meter-track {
+  height: 8px;
+  border-radius: 999px;
+  background: rgba(255, 255, 255, 0.62);
+  box-shadow: inset 0 0 0 1px var(--line);
+  overflow: hidden;
+}
+
+.usage-meter-fill {
+  height: 100%;
+  border-radius: 999px;
+  background: linear-gradient(90deg, var(--teal), var(--accent), var(--pink));
+  box-shadow: 0 0 10px var(--candy-glow);
+}
+
+.usage-meter-fill.usage-high {
+  background: linear-gradient(90deg, var(--gold), var(--danger));
+}
+
+.usage-meter-value {
+  text-align: right;
+  font-weight: 700;
+  color: var(--ink);
+}
+
+/* ---- server detail ---- */
+
+.server-detail-header {
+  display: grid;
+  gap: 12px;
+  padding: 18px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--glass-wash), var(--glass-tint), var(--surface);
+  backdrop-filter: blur(22px) saturate(1.28);
+  box-shadow: inset 0 1px 0 var(--crystal-rim), inset 0 0 0 1px var(--diamond-line), 0 18px 42px var(--glass-shadow), 0 0 24px rgba(255, 255, 255, 0.18);
+  position: relative;
+  overflow: hidden;
+}
+
+.server-detail-title-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  flex-wrap: wrap;
+}
+
+.server-detail-title-row > div:first-child {
+  min-width: 0;
+}
+
+.server-detail-title-row h1 {
+  margin: 0;
+  font-size: 24px;
+  color: var(--ink);
+  overflow-wrap: anywhere;
+}
+
+.server-detail-stat-strip {
+  display: grid;
+  grid-template-columns: repeat(7, minmax(0, 1fr));
+  gap: 8px;
+}
+
+.section-tabs {
+  display: flex;
+  gap: 6px;
+  flex-wrap: wrap;
+  padding: 8px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--frosted-surface), color-mix(in srgb, var(--surface) 72%, transparent);
+  box-shadow: inset 0 1px 0 var(--crystal-rim);
+}
+
+.section-tab {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  min-height: 38px;
+  padding: 0 14px;
+  border: 1px solid var(--line-strong);
+  border-radius: 999px;
+  background: var(--jelly-highlight), var(--glass-wash), var(--surface-solid);
+  color: var(--ink-soft);
+  cursor: pointer;
+  white-space: nowrap;
+}
+
+.section-tab:hover,
+.section-tab:focus-visible {
+  border-color: var(--accent);
+  outline: none;
+}
+
+.section-tab-active {
+  background:
+    var(--corner-sparkle),
+    linear-gradient(145deg, rgba(255, 255, 255, 0.72), transparent 36%),
+    linear-gradient(135deg, var(--accent), var(--pink));
+  background-size: 46px 46px, auto, auto;
+  background-position: right 8px top 4px, center, center;
+  background-repeat: no-repeat;
+  border-color: var(--accent-deep);
+  color: #ffffff;
+  font-weight: 700;
+  box-shadow: 0 10px 24px var(--candy-glow), inset 0 1px 0 var(--crystal-rim), 0 0 18px var(--moonbeam);
+}
+
+.overview-two-col {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 14px;
+}
+
+/* ---- logs ---- */
+
+.log-filter-bar {
+  display: flex;
+  gap: 8px;
+  flex-wrap: wrap;
+  align-items: center;
+}
+
+.log-filter-bar input,
+.log-filter-bar select {
+  min-height: 36px;
+  border: 1px solid var(--line-strong);
+  border-radius: 8px;
+  padding: 0 10px;
+  background: var(--surface-solid);
+  color: var(--ink);
+  font: inherit;
+  font-size: 13px;
+}
+
+.log-filter-bar input:focus,
+.log-filter-bar select:focus {
+  border-color: var(--accent);
+  outline: 2px solid var(--accent-soft);
+}
+
+.log-list {
+  display: grid;
+  gap: 4px;
+  max-height: 420px;
+  overflow: auto;
+  padding: 10px;
+  border-radius: 8px;
+  background:
+    radial-gradient(circle at 92% 0, rgba(255, 255, 255, 0.1), transparent 36%),
+    var(--code-surface);
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.16), 0 14px 32px rgba(255, 255, 255, 0.12);
+  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+  font-size: 12.5px;
+}
+
+.log-line {
+  display: grid;
+  grid-template-columns: 72px 64px minmax(0, 1fr);
+  gap: 10px;
+  width: 100%;
+  padding: 4px 8px;
+  border: 0;
+  border-radius: 6px;
+  background: transparent;
+  color: var(--code-ink);
+  text-align: left;
+  cursor: pointer;
+}
+
+.log-line:hover,
+.log-line:focus-visible {
+  background: rgba(124, 92, 255, 0.22);
+  outline: none;
+}
+
+.log-line time {
+  color: var(--code-muted);
+}
+
+.log-line .log-level {
+  font-weight: 700;
+}
+
+.log-level-error {
+  color: #ff7a9c;
+}
+
+.log-level-warn {
+  color: #ffc861;
+}
+
+.log-level-info {
+  color: #7ce3d3;
+}
+
+.log-line span:last-child {
+  overflow-wrap: anywhere;
+}
+
+/* ---- drawer ---- */
+
+.drawer-backdrop {
+  position: fixed;
+  inset: 0;
+  z-index: 40;
+  background: rgba(61, 36, 65, 0.34);
+  backdrop-filter: blur(6px);
+  display: flex;
+  justify-content: flex-end;
+}
+
+.drawer-panel {
+  width: min(440px, 100%);
+  height: 100%;
+  overflow: auto;
+  display: grid;
+  align-content: start;
+  gap: 14px;
+  padding: 20px;
+  background: var(--glass-wash), var(--glass-tint), var(--surface-raised);
+  backdrop-filter: blur(24px) saturate(1.28);
+  border-left: 1px solid var(--line);
+  box-shadow: inset 1px 0 0 var(--crystal-rim), -18px 0 42px var(--glass-shadow);
+  position: relative;
+  overflow: hidden;
+}
+
+.plugin-detail-panel {
+  width: 100%;
+  height: auto;
+  overflow: visible;
+  border: 1px solid var(--line);
+  border-left: 1px solid var(--line);
+  border-radius: 8px;
+  box-shadow: var(--panel-shadow);
+}
+
+.plugin-detail-actions {
+  align-items: stretch;
+}
+
+.drawer-panel h2 {
+  margin: 0;
+  font-size: 18px;
+  color: var(--ink);
+}
+
+.drawer-close {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  min-height: 34px;
+  padding: 0 12px;
+  border: 1px solid var(--line-strong);
+  border-radius: 8px;
+  background: var(--surface-solid);
+  color: var(--ink-soft);
+  cursor: pointer;
+}
+
+/* ---- diff view ---- */
+
+.diff-view {
+  display: grid;
+  gap: 2px;
+  padding: 12px;
+  border-radius: 8px;
+  background:
+    radial-gradient(circle at 92% 0, rgba(255, 255, 255, 0.1), transparent 36%),
+    var(--code-surface);
+  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+  font-size: 12.5px;
+  max-height: 360px;
+  overflow: auto;
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.16), 0 14px 32px rgba(255, 255, 255, 0.12);
+}
+
+.diff-line {
+  display: grid;
+  grid-template-columns: 20px minmax(0, 1fr);
+  gap: 8px;
+  padding: 2px 8px;
+  border-radius: 4px;
+  color: var(--code-ink);
+  overflow-wrap: anywhere;
+}
+
+.diff-line-added {
+  background: rgba(25, 184, 166, 0.18);
+  color: #8df0dd;
+}
+
+.diff-line-removed {
+  background: rgba(214, 51, 92, 0.2);
+  color: #ff9cb6;
+  text-decoration: line-through;
+}
+
+/* ---- plugin control groups ---- */
+
+.plugin-group {
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--glass-wash), var(--glass-tint), var(--surface);
+  box-shadow: inset 0 1px 0 var(--crystal-rim), inset 0 0 0 1px var(--diamond-line);
+  overflow: hidden;
+  position: relative;
+}
+
+.plugin-group .server-card-stats {
+  margin-bottom: 12px;
+}
+
+.plugin-group-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 10px;
+  width: 100%;
+  padding: 14px 16px;
+  border: 0;
+  background: transparent;
+  cursor: pointer;
+  text-align: left;
+}
+
+.plugin-group-header strong {
+  color: var(--ink);
+  font-size: 15px;
+}
+
+.plugin-group-body {
+  display: grid;
+  gap: 10px;
+  padding: 0 16px 16px;
+}
+
+.plugin-control-row {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  gap: 12px;
+  align-items: center;
+  padding: 12px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--jelly-highlight), var(--glass-wash), rgba(255, 255, 255, 0.24);
+  box-shadow: inset 0 1px 0 var(--crystal-rim);
+  min-width: 0;
+}
+
+.plugin-control-row > div {
+  min-width: 0;
+}
+
+.plugin-control-row p {
+  margin: 2px 0 0;
+  color: var(--ink-faint);
+  font-size: 12.5px;
+}
+
+/* ---- operation history ---- */
+
+.operation-list {
+  display: grid;
+  gap: 10px;
+}
+
+.operation-item {
+  display: grid;
+  gap: 8px;
+  padding: 12px 14px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--glass-wash), var(--glass-tint), var(--surface);
+  box-shadow: inset 0 1px 0 var(--crystal-rim);
+  position: relative;
+  overflow: hidden;
+  min-width: 0;
+}
+
+.operation-item-head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 10px;
+  flex-wrap: wrap;
+}
+
+.operation-item-head > strong {
+  min-width: 0;
+  overflow-wrap: anywhere;
+}
+
+.operation-item-head strong {
+  color: var(--ink);
+}
+
+.operation-meta {
+  display: flex;
+  gap: 10px;
+  flex-wrap: wrap;
+  color: var(--ink-faint);
+  font-size: 12px;
+}
+
+.operation-meta span {
+  min-width: 0;
+  overflow-wrap: anywhere;
+}
+
+.inline-result-strip {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  flex-wrap: wrap;
+  padding: 10px 12px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--frosted-surface), var(--surface);
+  box-shadow: inset 0 1px 0 var(--crystal-rim);
+}
+
+.operation-meta code {
+  padding: 1px 6px;
+  border-radius: 6px;
+  background: var(--accent-soft);
+  overflow-wrap: anywhere;
+}
+
+/* ---- signals ---- */
+
+.signal-list {
+  display: grid;
+  gap: 8px;
+}
+
+.signal-item {
+  display: grid;
+  grid-template-columns: auto minmax(0, 1fr) auto;
+  gap: 10px;
+  align-items: center;
+  width: 100%;
+  padding: 10px 12px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--jelly-highlight), var(--glass-wash), var(--surface-solid);
+  color: var(--ink-soft);
+  cursor: pointer;
+  text-align: left;
+}
+
+.signal-item:hover,
+.signal-item:focus-visible {
+  border-color: var(--accent);
+  outline: none;
+}
+
+.signal-item strong {
+  display: block;
+  color: var(--ink);
+  font-size: 13.5px;
+}
+
+.signal-item p {
+  margin: 2px 0 0;
+  font-size: 12.5px;
+  color: var(--ink-faint);
+}
+
+.signal-tone-warning .state-icon,
+.signal-tone-warning svg {
+  color: var(--gold);
+}
+
+.signal-tone-error svg {
+  color: var(--danger);
+}
+
+.signal-tone-info svg {
+  color: var(--teal);
+}
+
+/* ---- confirm dialog ---- */
+
+.confirm-backdrop {
+  position: fixed;
+  inset: 0;
+  z-index: 50;
+  display: grid;
+  place-items: center;
+  padding: 16px;
+  background: rgba(61, 36, 65, 0.38);
+  backdrop-filter: blur(6px);
+}
+
+.confirm-panel {
+  width: min(460px, 100%);
+  display: grid;
+  gap: 14px;
+  padding: 20px;
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  background: var(--frosted-surface), var(--glass-tint), var(--surface-raised);
+  backdrop-filter: blur(24px) saturate(1.28);
+  box-shadow: var(--jelly-inset), inset 0 0 0 1px var(--diamond-line), 0 18px 48px var(--glass-shadow), 0 0 34px var(--moonbeam);
+  position: relative;
+  overflow: hidden;
+}
+
+.confirm-panel h2 {
+  margin: 0;
+  font-size: 18px;
+  color: var(--ink);
+}
+
+.confirm-panel p {
+  margin: 0;
+  color: var(--ink-soft);
+  font-size: 14px;
+}
+
+.confirm-actions {
+  display: flex;
+  gap: 8px;
+  justify-content: flex-end;
+  flex-wrap: wrap;
+}
+
+.confirm-actions button {
+  min-height: 38px;
+  padding: 0 16px;
+  border-radius: 8px;
+  border: 1px solid var(--line-strong);
+  background: var(--surface-solid);
+  color: var(--ink-soft);
+  cursor: pointer;
+}
+
+.confirm-actions .confirm-primary {
+  background: linear-gradient(135deg, var(--accent), var(--accent-deep));
+  border-color: var(--accent-deep);
+  color: #ffffff;
+  font-weight: 700;
+}
+
+.confirm-actions .confirm-danger {
+  background: var(--danger);
+  border-color: var(--danger);
+  color: #ffffff;
+  font-weight: 700;
+}
+
+/* ---- narrow screens ---- */
+
+@media (max-width: 760px) {
+  .auth-shell {
+    padding: 14px;
+    place-items: stretch;
+  }
+
+  .auth-card {
+    align-self: center;
+  }
+
+  .management-form,
+  .user-management-item,
+  .profile-settings-hero,
+  .profile-settings-grid,
+  .profile-settings-form-row,
+  .profile-palette-grid,
+  .profile-background-grid {
+    grid-template-columns: 1fr;
+  }
+
+  .user-actions,
+  .profile-settings-actions {
+    justify-content: flex-start;
+  }
+
+  .app-shell {
+    grid-template-columns: 1fr;
+  }
+
+  .app-sidebar {
+    position: sticky;
+    top: 0;
+    z-index: 10;
+    width: 100%;
+    min-width: 0;
+    display: grid;
+    grid-template-columns: minmax(0, 1fr) auto;
+    gap: 10px 12px;
+    align-items: center;
+    padding: 10px 12px;
+    border-right: 0;
+    border-bottom: 1px solid var(--line);
+    overflow: visible;
+  }
+
+  .app-brand {
+    min-height: 44px;
+    grid-template-columns: 40px minmax(0, 1fr);
+  }
+
+  .app-brand-mark {
+    width: 40px;
+    height: 40px;
+    flex-basis: 40px;
+  }
+
+  .app-brand strong {
+    font-size: 15px;
+  }
+
+  .app-brand-subtitle {
+    font-size: 11px;
+  }
+
+  .app-menu-toolbar {
+    justify-content: flex-end;
+    min-height: 40px;
+  }
+
+  .app-menu-toolbar > span,
+  .app-menu-toggle span {
+    display: none;
+  }
+
+  .app-menu-toggle {
+    width: 40px;
+    min-height: 40px;
+    padding: 0;
+  }
+
+  .app-nav {
+    grid-column: 1 / -1;
+    display: flex;
+    gap: 8px;
+    width: 100%;
+    max-width: 100%;
+    min-width: 0;
+    max-height: none;
+    overflow-x: auto;
+    overflow-y: hidden;
+    overscroll-behavior: contain;
+    padding: 2px 2px 6px;
+    scrollbar-width: none;
+  }
+
+  .app-nav::-webkit-scrollbar {
+    display: none;
+  }
+
+  .app-nav-group {
+    flex: 0 0 auto;
+  }
+
+  .app-nav-group-button {
+    width: 52px;
+    min-height: 52px;
+    grid-template-columns: 1fr;
+    place-items: center;
+    gap: 0;
+    padding: 0;
+  }
+
+  .app-nav-icon {
+    width: 52px;
+    height: 52px;
+  }
+
+  .app-nav-icon svg {
+    width: 22px;
+    height: 22px;
+  }
+
+  .app-nav-copy strong {
+    display: none;
+  }
+
+  .app-session {
+    grid-column: 1 / -1;
+    margin-top: 0;
+    grid-auto-flow: column;
+    align-items: center;
+    justify-content: space-between;
+    padding: 8px;
+  }
+
+  .app-account-button {
+    min-height: 40px;
+  }
+
+  .app-main {
+    padding: 14px;
+  }
+
+  .page-header {
+    align-items: flex-start;
+    flex-direction: column;
+  }
+
+  .page-title {
+    font-size: 24px;
+  }
+
+  .metric-grid,
+  .console-grid,
+  .catalog-grid,
+  .resource-list-item,
+  .overview-two-col,
+  .server-card-grid {
+    grid-template-columns: 1fr;
+  }
+
+  .ai-provider-metrics,
+  .server-metrics,
+  .ai-provider-workspace,
+  .server-workspace,
+  .form-grid {
+    grid-template-columns: 1fr;
+  }
+
+  .server-detail-stat-strip {
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+  }
+
+  .server-card-stats {
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+  }
+
+  .section-tabs {
+    overflow-x: auto;
+    flex-wrap: nowrap;
+    padding-bottom: 4px;
+  }
+
+  .server-toolbar {
+    align-items: stretch;
+  }
+
+  .server-toolbar input[type="search"],
+  .server-toolbar select {
+    flex: 1 1 100%;
+    min-width: 0;
+  }
+
+  .server-card-head,
+  .server-detail-title-row,
+  .plugin-control-row {
+    grid-template-columns: 1fr;
+    align-items: stretch;
+  }
+
+  .server-card-head,
+  .server-detail-title-row {
+    display: grid;
+  }
+
+  .server-detail-title-row .action-strip {
+    align-items: stretch;
+  }
+
+  .server-detail-title-row .action-strip > * {
+    flex: 1 1 auto;
+  }
+
+  .resource-table,
+  .provider-table {
+    min-width: 680px;
+  }
+
+  .log-line {
+    grid-template-columns: minmax(0, 1fr);
+    gap: 2px;
+  }
+
+  .ai-provider-toolbar {
+    align-items: stretch;
+  }
+
+  .segmented-button,
+  .icon-command {
+    flex: 1 1 auto;
+  }
+
+  .provider-form {
+    order: -1;
+  }
+
+  .drawer-panel {
+    width: 100%;
+  }
+}
+
+/* A state view inside an already framed surface is content, not a second frame. */
+:root[data-theme-palette] :where(
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .resource-table-wrap,
+  .provider-table-wrap,
+  .server-table-wrap,
+  .plugin-group,
+  .operation-item
+) .state-view {
+  border: 0;
+  background: transparent;
+  box-shadow: none;
+  clip-path: none;
+  -webkit-backdrop-filter: none;
+  backdrop-filter: none;
+}
+
+:root[data-theme-palette] :where(
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .resource-table-wrap,
+  .provider-table-wrap,
+  .server-table-wrap,
+  .plugin-group,
+  .operation-item
+) .state-view::before,
+:root[data-theme-palette] :where(
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .resource-table-wrap,
+  .provider-table-wrap,
+  .server-table-wrap,
+  .plugin-group,
+  .operation-item
+) .state-view::after {
+  content: none;
+  background: none;
+  box-shadow: none;
+  filter: none;
+}
+
+:root[data-custom-background="true"][data-theme-palette] :where(
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .resource-table-wrap,
+  .provider-table-wrap,
+  .server-table-wrap,
+  .plugin-group,
+  .operation-item
+) .state-view {
+  border: 0;
+  background: transparent;
+  box-shadow: none;
+  clip-path: none;
+  -webkit-backdrop-filter: none;
+  backdrop-filter: none;
+}
+
+:root[data-custom-background="true"][data-theme-palette] :where(
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .resource-table-wrap,
+  .provider-table-wrap,
+  .server-table-wrap,
+  .plugin-group,
+  .operation-item
+) .state-view::before,
+:root[data-custom-background="true"][data-theme-palette] :where(
+  .console-panel,
+  .catalog-card,
+  .server-card,
+  .resource-table-wrap,
+  .provider-table-wrap,
+  .server-table-wrap,
+  .plugin-group,
+  .operation-item
+) .state-view::after {
+  content: none;
+  background: none;
+  box-shadow: none;
+  filter: none;
+}
diff --git a/platform_web/theme/tokens.test.ts b/platform_web/theme/tokens.test.ts
new file mode 100644
index 0000000..2f20201
--- /dev/null
+++ b/platform_web/theme/tokens.test.ts
@@ -0,0 +1,121 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import {
+  applyThemePalette,
+  defaultThemeBackgroundId,
+  defaultThemePaletteId,
+  getThemeBackgroundPreset,
+  getThemePalette,
+  themeBackgroundPresets,
+  themePaletteChangeEvent,
+  themePalettes
+} from "./tokens";
+
+afterEach(() => {
+  vi.unstubAllGlobals();
+});
+
+describe("platform web theme palettes", () => {
+  it("offers black mecha and magical-girl palettes with usable swatches", () => {
+    expect(themePalettes.map((palette) => palette.label)).toEqual(["黑色机甲", "魔法少女"]);
+
+    for (const palette of themePalettes) {
+      expect(palette.swatches.length).toBeGreaterThanOrEqual(5);
+      expect(palette.variables["--accent"]).toMatch(/^#[0-9a-f]{6}$/i);
+      expect(palette.variables["--surface"]).toContain("rgba");
+      expect(palette.variables["--rim-light"]).toContain("rgba");
+      expect(palette.variables["--crystal-rim"]).toContain("rgba");
+      expect(palette.variables["--sparkle-gold"]).toContain("rgba");
+      expect(palette.variables["--panel-material"]).toContain("var");
+      expect(palette.variables["--menu-item-bg"]).toContain("gradient");
+      expect(palette.variables["--frame-accessory-top"]).toContain("data:image/svg+xml");
+      expect(palette.variables["--frame-accessory-bottom"]).toContain("data:image/svg+xml");
+      expect(palette.variables["--frame-accessory-opacity"]).toMatch(/^0\.\d{2}$/);
+      expect(accessorySizeNumbers(palette.variables["--frame-accessory-size"])).toEqual(
+        expect.arrayContaining([expect.any(Number)])
+      );
+      expect(palette.variables["--custom-background-overlay"]).toBe("transparent");
+
+      const accessoryOpacity = Number(palette.variables["--frame-accessory-opacity"]);
+      const largestAccessoryDimension = Math.max(...accessorySizeNumbers(palette.variables["--frame-accessory-size"]));
+
+      if (palette.id === "magical-girl") {
+        expect(accessoryOpacity).toBeGreaterThanOrEqual(0.65);
+        expect(largestAccessoryDimension).toBeGreaterThanOrEqual(56);
+        expect(largestAccessoryDimension).toBeLessThanOrEqual(80);
+        expect(
+          new Set([
+            palette.variables["--frame-accessory-heart"],
+            palette.variables["--frame-accessory-wand"],
+            palette.variables["--frame-accessory-moon"],
+            palette.variables["--frame-accessory-ribbon"],
+            palette.variables["--frame-accessory-crystal"],
+            palette.variables["--frame-accessory-circle"]
+          ]).size
+        ).toBe(6);
+      } else {
+        expect(accessoryOpacity).toBeLessThanOrEqual(0.4);
+        expect(largestAccessoryDimension).toBeLessThanOrEqual(60);
+      }
+    }
+  });
+
+  it("falls back to the default black mecha palette", () => {
+    expect(defaultThemePaletteId).toBe("mecha-black");
+    expect(getThemePalette("missing").id).toBe("mecha-black");
+  });
+
+  it("clears stale palette variables and publishes the active palette", () => {
+    const removeProperty = vi.fn();
+    const setProperty = vi.fn();
+    const dispatchEvent = vi.fn(() => true);
+
+    class TestCustomEvent<T> {
+      readonly type: string;
+      readonly detail: T | null;
+
+      constructor(type: string, init?: CustomEventInit<T>) {
+        this.type = type;
+        this.detail = init?.detail ?? null;
+      }
+    }
+
+    vi.stubGlobal("document", {
+      documentElement: {
+        dataset: {},
+        style: { removeProperty, setProperty }
+      }
+    });
+    vi.stubGlobal("window", { dispatchEvent });
+    vi.stubGlobal("CustomEvent", TestCustomEvent);
+
+    applyThemePalette("mecha-black");
+
+    expect(removeProperty).toHaveBeenCalledWith("--frame-accessory-heart");
+    expect(setProperty).toHaveBeenCalledWith("--accent", "#48e6ff");
+    expect(dispatchEvent).toHaveBeenCalledWith(
+      expect.objectContaining({
+        type: themePaletteChangeEvent,
+        detail: { paletteId: "mecha-black" }
+      })
+    );
+  });
+
+  it("offers mecha and magical desktop presets with a mecha default", () => {
+    expect(defaultThemeBackgroundId).toBe("mecha-grid");
+    expect(themeBackgroundPresets.map((preset) => preset.label)).toEqual(["机甲格纳库", "粉月魔法阵"]);
+
+    for (const preset of themeBackgroundPresets) {
+      expect(preset.preview).toContain("gradient");
+      expect(preset.variables["--workspace-background-pattern-image"]).toContain("gradient");
+      expect(preset.variables["--workspace-background-pattern-opacity"]).toMatch(/^0\./);
+    }
+
+    expect(getThemeBackgroundPreset("missing").id).toBe("mecha-grid");
+  });
+
+});
+
+function accessorySizeNumbers(sizeValue: string): number[] {
+  return Array.from(sizeValue.matchAll(/(\d+)px/g), (match) => Number(match[1]));
+}
diff --git a/platform_web/theme/tokens.ts b/platform_web/theme/tokens.ts
new file mode 100644
index 0000000..c329730
--- /dev/null
+++ b/platform_web/theme/tokens.ts
@@ -0,0 +1,368 @@
+export const themeTokens = {
+  appName: "Mecha Game Console",
+  contentMaxWidth: "1180px",
+  accent: "#48e6ff",
+  accentSecondary: "#ff77c8",
+  narrowBreakpoint: 760
+} as const;
+
+export type ThemePaletteId = "mecha-black" | "magical-girl";
+export type ThemeBackgroundId = "mecha-grid" | "magic-stage";
+
+export const themePaletteChangeEvent = "platform-web:theme-palette-change";
+
+export interface ThemePaletteChangeDetail {
+  paletteId: ThemePaletteId;
+}
+
+export interface ThemePalette {
+  id: ThemePaletteId;
+  label: string;
+  summary: string;
+  swatches: string[];
+  variables: Record<string, string>;
+}
+
+export interface ThemeBackgroundPreset {
+  id: ThemeBackgroundId;
+  label: string;
+  summary: string;
+  preview: string;
+  variables: Record<string, string>;
+}
+
+export interface WorkspaceThemeState {
+  paletteId: ThemePaletteId;
+  backgroundPresetId: ThemeBackgroundId;
+  backgroundImage: string | null;
+}
+
+const backgroundStorageKey = "platform-web.theme.background";
+const backgroundPresetStorageKey = "platform-web.theme.backgroundPreset";
+const paletteStorageKey = "platform-web.theme.palette";
+
+const mechaFrameAccessoryTop =
+  "url(\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 132 48'%3E%3Cg fill='none' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M18 31h34l9-12h28l7 8h18' stroke='%2348e6ff' stroke-opacity='.86' stroke-width='2.4'/%3E%3Cpath d='M75 17h16l10 10M25 36h22M100 32h15' stroke='%23ffb84d' stroke-opacity='.68' stroke-width='1.7'/%3E%3Ccircle cx='58' cy='24' r='8' stroke='%239af7ff' stroke-opacity='.58' stroke-width='1.6'/%3E%3Cpath d='M58 15v18M49 24h18' stroke='%239af7ff' stroke-opacity='.34' stroke-width='1.2'/%3E%3Cpath d='M106 10l4 4 6-1-4 4 2 6-6-3-5 4 1-7-5-4 6 1z' stroke='%23ffb84d' stroke-opacity='.58' stroke-width='1.4'/%3E%3C/g%3E%3C/svg%3E\")";
+
+const mechaFrameAccessoryBottom =
+  "url(\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 132 56'%3E%3Cg fill='none' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M14 38h30l12-19 15 25h25' stroke='%2348e6ff' stroke-opacity='.78' stroke-width='2.4'/%3E%3Cpath d='M34 38l9-13 8 13M74 37h21' stroke='%23ffb84d' stroke-opacity='.62' stroke-width='1.7'/%3E%3Ccircle cx='100' cy='26' r='15' stroke='%239af7ff' stroke-opacity='.54' stroke-width='1.6'/%3E%3Ccircle cx='100' cy='26' r='7' stroke='%23ffb84d' stroke-opacity='.62' stroke-width='1.4'/%3E%3Cpath d='M84 26h32M100 10v32M89 15l22 22M111 15L89 37' stroke='%239af7ff' stroke-opacity='.28' stroke-width='1.1'/%3E%3Cpath d='M18 20l11-7 16 4-13 9z' stroke='%239af7ff' stroke-opacity='.58' stroke-width='1.5'/%3E%3C/g%3E%3C/svg%3E\")";
+
+const magicalFrameAccessoryHeart =
+  "url(\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 72 48'%3E%3Cg fill='none' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M36 38S23 29 23 20c0-7 9-9 13-3 4-6 13-4 13 3 0 9-13 18-13 18z' fill='%23ff77c8' fill-opacity='.12' stroke='%23fff6fb' stroke-width='2'/%3E%3Cpath d='M22 20c-6-4-11-2-15 2 5 0 8 2 11 6-5-1-8 1-10 4 7-1 12 1 17 5M50 20c6-4 11-2 15 2-5 0-8 2-11 6 5-1 8 1 10 4-7-1-12 1-17 5' stroke='%23ffd66d' stroke-opacity='.92' stroke-width='1.7'/%3E%3Cpath d='M36 8l2 4 5 1-4 3 1 5-4-3-4 3 1-5-4-3 5-1z' fill='%23ffd66d' fill-opacity='.22' stroke='%23ffd66d' stroke-width='1.4'/%3E%3C/g%3E%3C/svg%3E\")";
+
+const magicalFrameAccessoryWand =
+  "url(\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 72 48'%3E%3Cg fill='none' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M18 40L45 13' stroke='%23ff77c8' stroke-width='3'/%3E%3Cpath d='M49 5l3 6 7 1-5 5 1 7-6-4-7 4 2-7-6-5 7-1z' fill='%23ffd66d' fill-opacity='.2' stroke='%23ffd66d' stroke-width='1.9'/%3E%3Cpath d='M12 14l1.5 3 3.5.5-2.5 2.5.5 3.5-3-2-3 2 .5-3.5L6 17.5l3.5-.5zM59 29l1.5 3 3.5.5-2.5 2.5.5 3.5-3-2-3 2 .5-3.5-2.5-2.5 3.5-.5z' stroke='%23fff6fb' stroke-opacity='.9' stroke-width='1.3'/%3E%3Cpath d='M15 36l7 7' stroke='%23ffd66d' stroke-opacity='.86' stroke-width='1.6'/%3E%3C/g%3E%3C/svg%3E\")";
+
+const magicalFrameAccessoryMoon =
+  "url(\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 72 48'%3E%3Cg fill='none' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M42 8c-9 2-15 10-13 19 2 10 12 15 21 11-6-1-11-6-12-12-2-7 0-13 4-18z' fill='%23ff77c8' fill-opacity='.1' stroke='%23fff6fb' stroke-width='2'/%3E%3Cpath d='M19 19l2.5 5 5.5 1-4 4 1 6-5-3-5 3 1-6-4-4 5.5-1z' fill='%23ffd66d' fill-opacity='.2' stroke='%23ffd66d' stroke-width='1.7'/%3E%3Cpath d='M48 10c5 1 9 4 12 8M50 38c5-2 9-5 12-10' stroke='%23ff77c8' stroke-opacity='.84' stroke-width='1.6'/%3E%3Ccircle cx='59' cy='24' r='2' fill='%23fff6fb'/%3E%3C/g%3E%3C/svg%3E\")";
+
+const magicalFrameAccessoryRibbon =
+  "url(\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 72 48'%3E%3Cg fill='none' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M35 22c-7-8-17-9-20-4-3 6 5 12 20 8M37 22c7-8 17-9 20-4 3 6-5 12-20 8' fill='%23ff77c8' fill-opacity='.12' stroke='%23fff6fb' stroke-width='2'/%3E%3Cpath d='M35 25L23 42l13-5 5 5 3-17M37 25l12 17-13-5-5 5-3-17' stroke='%23ff77c8' stroke-width='1.8'/%3E%3Ccircle cx='36' cy='24' r='5' fill='%23ffd66d' fill-opacity='.18' stroke='%23ffd66d' stroke-width='1.6'/%3E%3Cpath d='M10 10l1.5 3 3.5.5-2.5 2.5.5 3.5-3-2-3 2 .5-3.5L4 13.5l3.5-.5zM60 8l1.5 3 3.5.5-2.5 2.5.5 3.5-3-2-3 2 .5-3.5-2.5-2.5 3.5-.5z' stroke='%23ffd66d' stroke-width='1.2'/%3E%3C/g%3E%3C/svg%3E\")";
+
+const magicalFrameAccessoryCrystal =
+  "url(\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 72 48'%3E%3Cg fill='none' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M36 5l16 14-6 22H26l-6-22z' fill='%23ff77c8' fill-opacity='.09' stroke='%23fff6fb' stroke-width='2'/%3E%3Cpath d='M20 19h32M36 5l-8 14 8 22 8-22zM26 41l10-22 10 22' stroke='%23ffd66d' stroke-opacity='.88' stroke-width='1.35'/%3E%3Cpath d='M10 16l2 4 4 .5-3 3 .8 4.5-3.8-2.4L6 28l1-4.5-3-3 4-.5zM59 9l1.5 3 3.5.5-2.5 2.5.5 3.5-3-2-3 2 .5-3.5-2.5-2.5 3.5-.5z' stroke='%23ff77c8' stroke-width='1.3'/%3E%3C/g%3E%3C/svg%3E\")";
+
+const magicalFrameAccessoryCircle =
+  "url(\"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 72 48'%3E%3Cg fill='none' stroke-linecap='round' stroke-linejoin='round'%3E%3Ccircle cx='36' cy='24' r='18' stroke='%23fff6fb' stroke-width='1.7'/%3E%3Ccircle cx='36' cy='24' r='11' stroke='%23ffd66d' stroke-width='1.4'/%3E%3Cpath d='M36 6v36M18 24h36M23 11l26 26M49 11L23 37' stroke='%23ff77c8' stroke-opacity='.68' stroke-width='1.1'/%3E%3Cpath d='M36 14l3 6 7 1-5 5 1 7-6-4-6 4 1-7-5-5 7-1z' fill='%23ffd66d' fill-opacity='.12' stroke='%23ffd66d' stroke-width='1.2'/%3E%3C/g%3E%3C/svg%3E\")";
+
+const mechaMaterialVariables = {
+  "--surface": "rgba(5, 12, 18, 0.58)",
+  "--surface-solid": "rgba(6, 14, 21, 0.88)",
+  "--surface-raised": "rgba(10, 24, 32, 0.64)",
+  "--glass-wash": "linear-gradient(145deg, rgba(33, 55, 64, 0.46), rgba(5, 12, 18, 0.42) 46%, rgba(72, 230, 255, 0.08))",
+  "--shine-sweep": "linear-gradient(112deg, transparent 0 38%, rgba(132, 243, 255, 0.24) 46%, transparent 56%)",
+  "--glass-tint": "rgba(72, 230, 255, 0.08)",
+  "--crystal-rim": "rgba(137, 239, 255, 0.64)",
+  "--moonbeam": "rgba(60, 176, 255, 0.34)",
+  "--diamond-line": "rgba(119, 237, 255, 0.34)",
+  "--glass-shadow": "rgba(0, 0, 0, 0.56)",
+  "--crystal-spark": "rgba(172, 250, 255, 0.92)",
+  "--sparkle": "rgba(196, 252, 255, 0.96)",
+  "--sparkle-gold": "rgba(255, 184, 77, 0.82)",
+  "--corner-sparkle":
+    "linear-gradient(135deg, rgba(72, 230, 255, 0.72) 0 2px, transparent 2px 100%), linear-gradient(315deg, rgba(255, 184, 77, 0.72) 0 2px, transparent 2px 100%), radial-gradient(circle at 86% 18%, rgba(132, 243, 255, 0.88) 0 1.4px, transparent 2.4px)",
+  "--jelly-highlight": "linear-gradient(145deg, rgba(132, 243, 255, 0.16), transparent 32%), radial-gradient(circle at 82% 16%, rgba(255, 184, 77, 0.16), transparent 24%)",
+  "--sugar-dust":
+    "linear-gradient(90deg, rgba(72, 230, 255, 0.08) 1px, transparent 1px), linear-gradient(180deg, rgba(72, 230, 255, 0.07) 1px, transparent 1px), radial-gradient(circle at 88% 18%, rgba(255, 184, 77, 0.62) 0 1.2px, transparent 2px)",
+  "--crystal-edge-glow": "0 0 0 1px rgba(72, 230, 255, 0.28), 0 0 22px rgba(72, 230, 255, 0.2), 0 0 44px rgba(0, 0, 0, 0.48)",
+  "--jelly-inset": "inset 0 1px 0 rgba(180, 248, 255, 0.22), inset 0 -1px 0 rgba(72, 230, 255, 0.16), inset 0 0 24px rgba(72, 230, 255, 0.08)",
+  "--frosted-edge": "linear-gradient(180deg, rgba(132, 243, 255, 0.18), rgba(7, 12, 18, 0.74) 48%, rgba(255, 184, 77, 0.1))",
+  "--frosted-surface": "linear-gradient(145deg, rgba(14, 28, 38, 0.62), rgba(5, 12, 18, 0.46) 48%, rgba(72, 230, 255, 0.07))",
+  "--frame-corner": "linear-gradient(135deg, rgba(72, 230, 255, 0.9) 0 2px, transparent 2px), linear-gradient(315deg, rgba(255, 184, 77, 0.72) 0 2px, transparent 2px)",
+  "--frame-accent": "linear-gradient(90deg, rgba(72, 230, 255, 0), rgba(72, 230, 255, 0.78), rgba(255, 184, 77, 0.58), rgba(72, 230, 255, 0))",
+  "--frame-accessory-top": mechaFrameAccessoryTop,
+  "--frame-accessory-bottom": mechaFrameAccessoryBottom,
+  "--frame-accessory-opacity": "0.22",
+  "--frame-accessory-size": "44px 16px, 48px 20px",
+  "--menu-item-bg": "linear-gradient(90deg, rgba(72, 230, 255, 0.14) 0 1px, transparent 1px 100%), linear-gradient(135deg, rgba(17, 31, 43, 0.94), rgba(4, 8, 13, 0.82) 58%, rgba(255, 184, 77, 0.08))",
+  "--menu-item-active-bg": "linear-gradient(90deg, rgba(72, 230, 255, 0.44) 0 3px, transparent 3px 100%), linear-gradient(135deg, rgba(20, 51, 64, 0.98), rgba(6, 11, 18, 0.9) 52%, rgba(255, 184, 77, 0.18))",
+  "--menu-glyph-bg": "linear-gradient(135deg, rgba(72, 230, 255, 0.28), rgba(255, 184, 77, 0.14)), repeating-linear-gradient(90deg, rgba(137, 239, 255, 0.18) 0 1px, transparent 1px 6px), rgba(5, 9, 15, 0.9)",
+  "--menu-title-shadow": "0 0 14px rgba(72, 230, 255, 0.5), 0 0 2px rgba(255, 184, 77, 0.8)",
+  "--menu-active-outline": "linear-gradient(90deg, rgba(72, 230, 255, 0.95), rgba(255, 184, 77, 0.72), rgba(72, 230, 255, 0.95))",
+  "--panel-material": "var(--sugar-dust), var(--glass-wash), linear-gradient(135deg, rgba(5, 12, 18, 0.46), rgba(10, 24, 32, 0.38))",
+  "--panel-shadow": "var(--jelly-inset), inset 0 0 0 1px rgba(119, 237, 255, 0.24), inset 9px 0 0 rgba(72, 230, 255, 0.06), 0 18px 42px rgba(0, 0, 0, 0.42), 0 0 28px rgba(72, 230, 255, 0.11)"
+} as const;
+
+const magicalMaterialVariables = {
+  "--surface": "rgba(88, 18, 52, 0.48)",
+  "--surface-solid": "rgba(78, 14, 46, 0.82)",
+  "--surface-raised": "rgba(118, 26, 68, 0.54)",
+  "--glass-wash": "linear-gradient(180deg, rgba(255, 226, 242, 0.2), rgba(120, 24, 68, 0.32) 56%, rgba(72, 12, 42, 0.28))",
+  "--shine-sweep": "radial-gradient(circle at 88% 12%, rgba(255, 255, 255, 0.58) 0 2px, transparent 3px)",
+  "--glass-tint": "rgba(255, 119, 200, 0.1)",
+  "--crystal-rim": "rgba(255, 236, 250, 0.92)",
+  "--moonbeam": "rgba(255, 185, 226, 0.76)",
+  "--diamond-line": "rgba(255, 217, 239, 0.72)",
+  "--glass-shadow": "rgba(72, 0, 34, 0.36)",
+  "--crystal-spark": "rgba(255, 246, 253, 0.98)",
+  "--sparkle": "rgba(255, 255, 255, 0.98)",
+  "--sparkle-gold": "rgba(255, 221, 117, 0.9)",
+  "--corner-sparkle":
+    "radial-gradient(circle at 86% 14%, rgba(255, 255, 255, 0.98) 0 2.4px, transparent 3.2px), radial-gradient(circle at 93% 23%, rgba(255, 221, 117, 0.92) 0 1.8px, transparent 2.8px)",
+  "--jelly-highlight": "radial-gradient(circle at 18% 14%, rgba(255, 255, 255, 0.72), transparent 30%), linear-gradient(145deg, rgba(255, 255, 255, 0.34), transparent 34%)",
+  "--sugar-dust":
+    "radial-gradient(circle at 14% 20%, rgba(255, 255, 255, 0.95) 0 1.4px, transparent 2.2px), radial-gradient(circle at 86% 18%, rgba(255, 221, 117, 0.9) 0 1.6px, transparent 2.6px), radial-gradient(circle at 78% 84%, rgba(255, 119, 200, 0.76) 0 1.8px, transparent 2.8px)",
+  "--crystal-edge-glow": "0 0 0 1px rgba(255, 217, 239, 0.78), 0 0 18px rgba(255, 119, 200, 0.46), 0 0 34px rgba(255, 221, 117, 0.18)",
+  "--jelly-inset": "inset 0 1px 0 rgba(255, 255, 255, 0.52), inset 0 -1px 0 rgba(255, 119, 200, 0.28), inset 0 0 20px rgba(255, 255, 255, 0.18)",
+  "--frosted-edge": "linear-gradient(180deg, rgba(255, 255, 255, 0.58), rgba(255, 119, 200, 0.2) 48%, rgba(255, 221, 117, 0.18))",
+  "--frosted-surface": "linear-gradient(180deg, rgba(255, 226, 242, 0.18), rgba(118, 24, 66, 0.36) 52%, rgba(72, 12, 42, 0.28))",
+  "--frame-corner": "radial-gradient(circle at 0 0, rgba(255, 221, 117, 0.9) 0 4px, transparent 5px), radial-gradient(circle at 100% 100%, rgba(255, 119, 200, 0.9) 0 4px, transparent 5px)",
+  "--frame-accent": "linear-gradient(90deg, rgba(255, 221, 117, 0), rgba(255, 221, 117, 0.86), rgba(255, 119, 200, 0.78), rgba(255, 221, 117, 0))",
+  "--frame-accessory-top": magicalFrameAccessoryWand,
+  "--frame-accessory-bottom": magicalFrameAccessoryCircle,
+  "--frame-accessory-heart": magicalFrameAccessoryHeart,
+  "--frame-accessory-wand": magicalFrameAccessoryWand,
+  "--frame-accessory-moon": magicalFrameAccessoryMoon,
+  "--frame-accessory-ribbon": magicalFrameAccessoryRibbon,
+  "--frame-accessory-crystal": magicalFrameAccessoryCrystal,
+  "--frame-accessory-circle": magicalFrameAccessoryCircle,
+  "--frame-accessory-opacity": "0.78",
+  "--frame-accessory-size": "68px 44px",
+  "--menu-item-bg": "radial-gradient(circle at 92% 12%, rgba(255, 255, 255, 0.52) 0 3px, transparent 4px), linear-gradient(180deg, rgba(255, 185, 226, 0.22), rgba(135, 10, 65, 0.42) 68%, rgba(94, 0, 44, 0.48))",
+  "--menu-item-active-bg": "radial-gradient(circle at 96% 18%, rgba(255, 255, 255, 0.72) 0 3px, transparent 4px), linear-gradient(180deg, rgba(255, 203, 232, 0.34), rgba(177, 22, 86, 0.58) 54%, rgba(105, 0, 48, 0.62))",
+  "--menu-glyph-bg": "radial-gradient(circle at 30% 22%, rgba(255, 255, 255, 0.78), transparent 34%), radial-gradient(circle at 72% 80%, rgba(255, 221, 117, 0.42), transparent 30%), linear-gradient(135deg, rgba(255, 119, 200, 0.82), rgba(255, 221, 117, 0.44))",
+  "--menu-title-shadow": "0 2px 0 rgba(96, 24, 24, 0.86), 1px 0 0 rgba(96, 24, 24, 0.86), -1px 0 0 rgba(96, 24, 24, 0.86), 0 0 12px rgba(255, 221, 117, 0.48)",
+  "--menu-active-outline": "linear-gradient(90deg, rgba(255, 221, 117, 0.96), rgba(255, 246, 253, 0.92), rgba(255, 119, 200, 0.9), rgba(255, 221, 117, 0.96))",
+  "--panel-material": "var(--sugar-dust), var(--glass-wash), linear-gradient(180deg, rgba(106, 22, 60, 0.3), rgba(72, 12, 42, 0.3))",
+  "--panel-shadow": "var(--jelly-inset), inset 0 0 0 1px rgba(255, 217, 239, 0.5), 0 18px 42px rgba(72, 0, 34, 0.28), 0 0 30px rgba(255, 119, 200, 0.2), 0 0 16px rgba(255, 221, 117, 0.1)"
+} as const;
+
+export const themePalettes: ThemePalette[] = [
+  {
+    id: "mecha-black",
+    label: "黑色机甲",
+    summary: "黑钢面板、青蓝扫描线、琥珀能量灯",
+    swatches: ["#05090f", "#111c28", "#48e6ff", "#ffb84d", "#e7f7ff"],
+    variables: {
+      "--ink": "#e7f7ff",
+      "--ink-soft": "#b9d2dc",
+      "--ink-faint": "#84a1ad",
+      ...mechaMaterialVariables,
+      "--line": "rgba(116, 236, 255, 0.32)",
+      "--line-strong": "rgba(132, 243, 255, 0.7)",
+      "--accent": "#48e6ff",
+      "--accent-deep": "#9af7ff",
+      "--accent-soft": "rgba(72, 230, 255, 0.16)",
+      "--teal": "#4fffd7",
+      "--teal-soft": "rgba(79, 255, 215, 0.14)",
+      "--pink": "#ff4d6d",
+      "--pink-soft": "rgba(255, 77, 109, 0.13)",
+      "--gold": "#ffb84d",
+      "--gold-soft": "rgba(255, 184, 77, 0.18)",
+      "--danger": "#ff5a6e",
+      "--danger-soft": "rgba(255, 90, 110, 0.14)",
+      "--success": "#4fffd7",
+      "--success-soft": "rgba(79, 255, 215, 0.18)",
+      "--background-base": "#05070b",
+      "--background-glow-1": "rgba(72, 230, 255, 0.16)",
+      "--background-glow-2": "rgba(255, 184, 77, 0.11)",
+      "--background-glow-3": "rgba(255, 77, 109, 0.1)",
+      "--rim-light": "rgba(180, 248, 255, 0.64)",
+      "--candy-glow": "rgba(72, 230, 255, 0.32)",
+      "--ultimate-effect-alpha": "0.86",
+      "--custom-background-overlay": "transparent",
+      "--code-surface": "#05090f",
+      "--code-ink": "#dffcff",
+      "--code-muted": "#87afba"
+    }
+  },
+  {
+    id: "magical-girl",
+    label: "魔法少女",
+    summary: "粉色舞台、金色星框、显眼魔法阵",
+    swatches: ["#8b0a40", "#ff77c8", "#ffd66d", "#fff6fb", "#8cf0ff"],
+    variables: {
+      "--ink": "#fff8fd",
+      "--ink-soft": "#ffe8f5",
+      "--ink-faint": "#ffd0e9",
+      ...magicalMaterialVariables,
+      "--line": "rgba(255, 201, 230, 0.42)",
+      "--line-strong": "rgba(255, 225, 139, 0.76)",
+      "--accent": "#ff77c8",
+      "--accent-deep": "#fff6fb",
+      "--accent-soft": "rgba(255, 119, 200, 0.18)",
+      "--teal": "#8cf0ff",
+      "--teal-soft": "rgba(140, 240, 255, 0.16)",
+      "--pink": "#ff8fd2",
+      "--pink-soft": "rgba(255, 143, 210, 0.22)",
+      "--gold": "#ffd66d",
+      "--gold-soft": "rgba(255, 214, 109, 0.24)",
+      "--danger": "#ff8a9d",
+      "--danger-soft": "rgba(255, 138, 157, 0.18)",
+      "--success": "#8cf0ff",
+      "--success-soft": "rgba(140, 240, 255, 0.2)",
+      "--background-base": "#7a0b39",
+      "--background-glow-1": "rgba(255, 119, 200, 0.42)",
+      "--background-glow-2": "rgba(255, 214, 109, 0.28)",
+      "--background-glow-3": "rgba(140, 240, 255, 0.18)",
+      "--rim-light": "rgba(255, 255, 255, 0.92)",
+      "--candy-glow": "rgba(255, 119, 200, 0.48)",
+      "--ultimate-effect-alpha": "0.96",
+      "--custom-background-overlay": "transparent",
+      "--code-surface": "#4b092a",
+      "--code-ink": "#fff4fb",
+      "--code-muted": "#ffc6e4"
+    }
+  }
+];
+
+const themePaletteVariableNames = Array.from(new Set(themePalettes.flatMap((palette) => Object.keys(palette.variables))));
+
+export const defaultThemePaletteId: ThemePaletteId = "mecha-black";
+export const defaultThemeBackgroundId: ThemeBackgroundId = "mecha-grid";
+
+export const themeBackgroundPresets: ThemeBackgroundPreset[] = [
+  {
+    id: "mecha-grid",
+    label: "机甲格纳库",
+    summary: "黑钢格栅、雷达圆环、青蓝扫描光",
+    preview:
+      "radial-gradient(circle at 76% 18%, rgba(72, 230, 255, 0.86), transparent 18%), repeating-linear-gradient(90deg, rgba(72, 230, 255, 0.34) 0 1px, transparent 1px 18px), linear-gradient(135deg, #05090f, #111c28)",
+    variables: {
+      "--workspace-background-pattern-image":
+        "radial-gradient(circle at 76% 18%, transparent 0 68px, rgba(72, 230, 255, 0.3) 69px 71px, transparent 72px), radial-gradient(circle at 76% 18%, transparent 0 34px, rgba(255, 184, 77, 0.24) 35px 36px, transparent 37px), conic-gradient(from 0deg at 76% 18%, transparent 0 8%, rgba(72, 230, 255, 0.24) 8% 9%, transparent 9% 28%, rgba(72, 230, 255, 0.18) 28% 29%, transparent 29% 100%), linear-gradient(90deg, rgba(72, 230, 255, 0.08) 1px, transparent 1px), linear-gradient(180deg, rgba(72, 230, 255, 0.07) 1px, transparent 1px), linear-gradient(135deg, transparent 0 48%, rgba(255, 184, 77, 0.1) 49% 50%, transparent 51% 100%), radial-gradient(circle at 20% 78%, rgba(255, 77, 109, 0.12), transparent 28%)",
+      "--workspace-background-pattern-size": "auto, auto, auto, 42px 42px, 42px 42px, 180px 180px, auto",
+      "--workspace-background-pattern-position": "center, center, center, 0 0, 0 0, 0 0, center",
+      "--workspace-background-pattern-repeat": "no-repeat, no-repeat, no-repeat, repeat, repeat, repeat, no-repeat",
+      "--workspace-background-pattern-opacity": "0.92",
+      "--workspace-background-pattern-filter": "saturate(1.18) contrast(1.08)"
+    }
+  },
+  {
+    id: "magic-stage",
+    label: "粉月魔法阵",
+    summary: "粉色舞台、星星边框、底部大型魔法阵",
+    preview:
+      "radial-gradient(circle at 86% 86%, transparent 0 28%, rgba(255, 255, 255, 0.72) 29% 30%, transparent 31%), radial-gradient(circle at 25% 22%, #ff77c8, transparent 34%), linear-gradient(180deg, #f08bb4, #8b0a40)",
+    variables: {
+      "--workspace-background-pattern-image":
+        "radial-gradient(circle, rgba(255, 255, 255, 0.9) 0 1.4px, transparent 2.2px), radial-gradient(circle, rgba(255, 221, 117, 0.86) 0 1.8px, transparent 2.8px), radial-gradient(circle at 88% 84%, transparent 0 112px, rgba(255, 255, 255, 0.28) 113px 115px, transparent 116px), radial-gradient(circle at 88% 84%, transparent 0 72px, rgba(255, 119, 200, 0.28) 73px 75px, transparent 76px), conic-gradient(from 30deg at 88% 84%, transparent 0 8%, rgba(255, 221, 117, 0.18) 8% 9%, transparent 9% 24%, rgba(255, 255, 255, 0.18) 24% 25%, transparent 25% 100%), linear-gradient(180deg, rgba(255, 203, 226, 0.26), rgba(122, 11, 57, 0.12)), radial-gradient(circle at 18% 20%, rgba(255, 143, 210, 0.28), transparent 28%)",
+      "--workspace-background-pattern-size": "76px 76px, 118px 118px, auto, auto, auto, auto, auto",
+      "--workspace-background-pattern-position": "12px 18px, 42px 58px, center, center, center, center, center",
+      "--workspace-background-pattern-repeat": "repeat, repeat, no-repeat, no-repeat, no-repeat, no-repeat, no-repeat",
+      "--workspace-background-pattern-opacity": "0.96",
+      "--workspace-background-pattern-filter": "saturate(1.24)"
+    }
+  }
+];
+
+export function getThemePalette(id: string | null | undefined): ThemePalette {
+  return themePalettes.find((palette) => palette.id === id) ?? themePalettes[0];
+}
+
+export function getThemeBackgroundPreset(id: string | null | undefined): ThemeBackgroundPreset {
+  return themeBackgroundPresets.find((preset) => preset.id === id) ?? themeBackgroundPresets[0];
+}
+
+export function loadThemeState(): WorkspaceThemeState {
+  if (typeof window === "undefined") {
+    return { paletteId: defaultThemePaletteId, backgroundPresetId: defaultThemeBackgroundId, backgroundImage: null };
+  }
+  try {
+    return {
+      paletteId: getThemePalette(window.localStorage.getItem(paletteStorageKey)).id,
+      backgroundPresetId: getThemeBackgroundPreset(window.localStorage.getItem(backgroundPresetStorageKey)).id,
+      backgroundImage: window.localStorage.getItem(backgroundStorageKey)
+    };
+  } catch {
+    return { paletteId: defaultThemePaletteId, backgroundPresetId: defaultThemeBackgroundId, backgroundImage: null };
+  }
+}
+
+export function persistThemePalette(paletteId: ThemePaletteId): void {
+  if (typeof window === "undefined") {
+    return;
+  }
+  try {
+    window.localStorage.setItem(paletteStorageKey, paletteId);
+  } catch {
+    // storage may be unavailable; the palette stays session-only
+  }
+}
+
+export function persistThemeBackgroundPreset(backgroundPresetId: ThemeBackgroundId): void {
+  if (typeof window === "undefined") {
+    return;
+  }
+  try {
+    window.localStorage.setItem(backgroundPresetStorageKey, backgroundPresetId);
+  } catch {
+    // storage may be unavailable; the preset stays session-only
+  }
+}
+
+export function persistBackgroundImage(dataUrl: string | null): void {
+  if (typeof window === "undefined") {
+    return;
+  }
+  try {
+    if (dataUrl) {
+      window.localStorage.setItem(backgroundStorageKey, dataUrl);
+    } else {
+      window.localStorage.removeItem(backgroundStorageKey);
+    }
+  } catch {
+    // storage may be unavailable (private mode); the background stays session-only
+  }
+}
+
+export function applyThemePalette(paletteId: ThemePaletteId): void {
+  if (typeof document === "undefined") {
+    return;
+  }
+  const palette = getThemePalette(paletteId);
+  for (const name of themePaletteVariableNames) {
+    document.documentElement.style.removeProperty(name);
+  }
+  for (const [name, value] of Object.entries(palette.variables)) {
+    document.documentElement.style.setProperty(name, value);
+  }
+  document.documentElement.dataset.themePalette = palette.id;
+  if (typeof window !== "undefined") {
+    window.dispatchEvent(new CustomEvent<ThemePaletteChangeDetail>(themePaletteChangeEvent, { detail: { paletteId: palette.id } }));
+  }
+}
+
+export function applyThemeBackgroundPreset(backgroundPresetId: ThemeBackgroundId): void {
+  if (typeof document === "undefined") {
+    return;
+  }
+  const preset = getThemeBackgroundPreset(backgroundPresetId);
+  for (const [name, value] of Object.entries(preset.variables)) {
+    document.documentElement.style.setProperty(name, value);
+  }
+  document.documentElement.dataset.themeBackground = preset.id;
+}
+
+export function applyBackgroundImage(dataUrl: string | null): void {
+  if (typeof document === "undefined") {
+    return;
+  }
+  if (dataUrl) {
+    document.documentElement.style.setProperty("--workspace-background-image", `url(${JSON.stringify(dataUrl)})`);
+    document.documentElement.dataset.customBackground = "true";
+  } else {
+    document.documentElement.style.removeProperty("--workspace-background-image");
+    delete document.documentElement.dataset.customBackground;
+  }
+}
diff --git a/platform_web/tsconfig.json b/platform_web/tsconfig.json
new file mode 100644
index 0000000..abc1205
--- /dev/null
+++ b/platform_web/tsconfig.json
@@ -0,0 +1,33 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "useDefineForClassFields": true,
+    "lib": ["DOM", "DOM.Iterable", "ES2022"],
+    "allowJs": false,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "strict": true,
+    "forceConsistentCasingInFileNames": true,
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+    "types": ["vite/client"]
+  },
+  "include": [
+    "api",
+    "app",
+    "components",
+    "contracts",
+    "pages",
+    "routes",
+    "schemas",
+    "stores",
+    "theme",
+    "utils",
+    "vite.config.ts"
+  ]
+}
diff --git a/platform_web/utils/classes.ts b/platform_web/utils/classes.ts
new file mode 100644
index 0000000..a79920d
--- /dev/null
+++ b/platform_web/utils/classes.ts
@@ -0,0 +1,3 @@
+export function cx(...tokens: Array<string | false | null | undefined>): string {
+  return tokens.filter(Boolean).join(" ");
+}
diff --git a/platform_web/utils/diff.ts b/platform_web/utils/diff.ts
new file mode 100644
index 0000000..0f3b42a
--- /dev/null
+++ b/platform_web/utils/diff.ts
@@ -0,0 +1,56 @@
+import type { ConfigDiffView, DiffLine } from "../contracts/workspace";
+
+export function computeLineDiff(previous: string, next: string): DiffLine[] {
+  const previousLines = previous.split("\n");
+  const nextLines = next.split("\n");
+  const m = previousLines.length;
+  const n = nextLines.length;
+  // classic LCS table; config files are small enough for O(m*n)
+  const lcs: number[][] = Array.from({ length: m + 1 }, () => new Array<number>(n + 1).fill(0));
+  for (let i = m - 1; i >= 0; i -= 1) {
+    for (let j = n - 1; j >= 0; j -= 1) {
+      lcs[i][j] = previousLines[i] === nextLines[j] ? lcs[i + 1][j + 1] + 1 : Math.max(lcs[i + 1][j], lcs[i][j + 1]);
+    }
+  }
+  const lines: DiffLine[] = [];
+  let i = 0;
+  let j = 0;
+  while (i < m && j < n) {
+    if (previousLines[i] === nextLines[j]) {
+      lines.push({ kind: "same", text: previousLines[i] });
+      i += 1;
+      j += 1;
+    } else if (lcs[i + 1][j] >= lcs[i][j + 1]) {
+      lines.push({ kind: "removed", text: previousLines[i] });
+      i += 1;
+    } else {
+      lines.push({ kind: "added", text: nextLines[j] });
+      j += 1;
+    }
+  }
+  while (i < m) {
+    lines.push({ kind: "removed", text: previousLines[i] });
+    i += 1;
+  }
+  while (j < n) {
+    lines.push({ kind: "added", text: nextLines[j] });
+    j += 1;
+  }
+  return lines;
+}
+
+export function buildConfigDiff(serverInstanceId: string, previous: string, next: string): ConfigDiffView {
+  const lines = computeLineDiff(previous, next);
+  const added = lines.filter((line) => line.kind === "added").length;
+  const removed = lines.filter((line) => line.kind === "removed").length;
+  return {
+    serverInstanceId,
+    summary: `+${added} / -${removed} 行变更`,
+    lines,
+    nextContent: next
+  };
+}
+
+export function diffHasChanges(diff: ConfigDiffView): boolean {
+  return diff.lines.some((line) => line.kind !== "same");
+}
diff --git a/platform_web/utils/pluginBridgeHost.test.ts b/platform_web/utils/pluginBridgeHost.test.ts
new file mode 100644
index 0000000..767ea1f
--- /dev/null
+++ b/platform_web/utils/pluginBridgeHost.test.ts
@@ -0,0 +1,171 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { PluginBridgeManifestContract } from "../contracts/pluginBridge";
+import {
+  createPluginBridgeDispatcher,
+  createPluginBridgeHostContext,
+  filterAllowedPermissions,
+  parsePluginArtifactReference,
+  validateBridgeExecutionRequest
+} from "./pluginBridgeHost";
+
+const plugin: PluginBridgeManifestContract = {
+  id: "game.example",
+  declaredPermissions: ["server.read", "server.logs.read", "server.files.read", "server.artifacts.read", "ai.invoke"],
+  bridgeActions: ["server.instances.read", "logs.query", "files.request", "artifacts.open", "ai.invoke"],
+  pages: [
+    {
+      key: "logs",
+      title: "Logs",
+      path: "/logs",
+      permissions: ["server.logs.read", "server.files.read", "server.artifacts.read", "ai.invoke"],
+      bridgeActions: ["logs.query", "files.request", "artifacts.open", "ai.invoke"]
+    }
+  ],
+  aiPurposes: ["logs.diagnose"]
+};
+
+describe("plugin bridge host utilities", () => {
+  it("filters page permissions against manifest permissions", () => {
+    expect(filterAllowedPermissions(plugin.declaredPermissions, ["server.logs.read", "server.artifacts.read"])).toEqual(["server.logs.read", "server.artifacts.read"]);
+  });
+
+  it("creates safe host context without secret-bearing fields", () => {
+    const context = createPluginBridgeHostContext({
+      plugin,
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      themeTokens: { colorScheme: "dark", accentColor: "#22c55e" }
+    });
+
+    expect(context).toEqual({
+      pluginId: "game.example",
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      themeTokens: { colorScheme: "dark", accentColor: "#22c55e" },
+      permissions: ["server.logs.read", "server.files.read", "server.artifacts.read", "ai.invoke"],
+      bridgeActions: ["logs.query", "files.request", "artifacts.open", "ai.invoke"],
+      aiPurposes: ["logs.diagnose"]
+    });
+    expect(context).not.toHaveProperty("apiKey");
+    expect(context).not.toHaveProperty("runCredential");
+    expect(context).not.toHaveProperty("hostPath");
+  });
+
+  it("builds bridge execution requests through the platform client", async () => {
+    const context = createPluginBridgeHostContext({
+      plugin,
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      themeTokens: { colorScheme: "dark", accentColor: "#22c55e" }
+    });
+    const client = {
+      executePluginBridge: vi.fn(async () => ({
+        requestId: "req-1",
+        pluginId: "game.example",
+        routeKey: "logs",
+        serverInstanceId: "server-1",
+        action: "logs.query",
+        status: "ok",
+        result: { entryCount: "0" }
+      }))
+    };
+
+    const dispatch = createPluginBridgeDispatcher(context, client);
+    await expect(dispatch({ requestId: "req-1", action: "logs.query", payload: { logStreamId: "log-1" } })).resolves.toMatchObject({
+      status: "ok",
+      result: { entryCount: "0" }
+    });
+    expect(client.executePluginBridge).toHaveBeenCalledWith({
+      requestId: "req-1",
+      pluginId: "game.example",
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      action: "logs.query",
+      aiPurpose: undefined,
+      payload: { logStreamId: "log-1" }
+    });
+  });
+
+  it("rejects denied, unsafe, and cancelled bridge execution locally", async () => {
+    const context = createPluginBridgeHostContext({
+      plugin,
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      themeTokens: { colorScheme: "dark", accentColor: "#22c55e" }
+    });
+    expect(validateBridgeExecutionRequest(context, { requestId: "req-denied", action: "server.instances.read" })).toMatchObject({ code: "unsupported_action" });
+    expect(
+      validateBridgeExecutionRequest(context, { requestId: "req-unsafe", action: "files.request", payload: { key: "/Users/tasia/.ssh/id_rsa" } })
+    ).toMatchObject({ code: "unsafe_payload" });
+
+    const client = { executePluginBridge: vi.fn() };
+    const controller = new AbortController();
+    controller.abort();
+    const dispatch = createPluginBridgeDispatcher(context, client);
+    await expect(dispatch({ requestId: "req-cancel", action: "logs.query", payload: { logStreamId: "log-1" } }, controller.signal)).resolves.toMatchObject({
+      status: "cancelled",
+      error: { code: "cancelled" }
+    });
+    expect(client.executePluginBridge).not.toHaveBeenCalled();
+  });
+
+  it("dispatches mediated AI requests without provider configuration", async () => {
+    const context = createPluginBridgeHostContext({
+      plugin,
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      themeTokens: { colorScheme: "dark", accentColor: "#22c55e" }
+    });
+    expect(validateBridgeExecutionRequest(context, { requestId: "ai-denied", action: "ai.invoke", aiPurpose: "config.suggest" })).toMatchObject({ code: "ai_purpose_denied" });
+    const client = {
+      executePluginBridge: vi.fn(async () => ({
+        requestId: "ai-1",
+        pluginId: "game.example",
+        routeKey: "logs",
+        serverInstanceId: "server-1",
+        action: "ai.invoke",
+        status: "ok",
+        result: { recommendation: "Mock AI recommendation", mocked: "true" }
+      }))
+    };
+    const dispatch = createPluginBridgeDispatcher(context, client);
+    const response = await dispatch({ requestId: "ai-1", action: "ai.invoke", aiPurpose: "logs.diagnose", payload: { prompt: "Summarize logs" } });
+    expect(response).toMatchObject({ status: "ok", result: { mocked: "true" } });
+    const serialized = JSON.stringify(response);
+    expect(serialized).not.toContain("apiKeyRef");
+    expect(serialized).not.toContain("rawApiKey");
+    expect(serialized).not.toContain("baseUrl");
+  });
+
+  it("parses safe artifact bridge references and rejects backend internals", () => {
+    expect(
+      parsePluginArtifactReference({
+        artifactId: "artifact-1",
+        filename: "artifact-1.bin",
+        contentType: "application/octet-stream",
+        sizeBytes: "128",
+        checksum: "sha256:abc",
+        downloadUrl: "/api/v1/artifacts/artifact-1/content",
+        expiresAt: "2026-07-03T00:15:00Z",
+        rangeSupported: "true",
+        chunkSizeBytes: "1048576",
+        storageBehavior: "platform-memory-transfer-session"
+      })
+    ).toMatchObject({ artifactId: "artifact-1", downloadUrl: "/api/v1/artifacts/artifact-1/content", rangeSupported: true });
+
+    expect(
+      parsePluginArtifactReference({
+        artifactId: "artifact-1",
+        filename: "/Users/tasia/artifact.bin",
+        contentType: "application/octet-stream",
+        sizeBytes: "128",
+        checksum: "sha256:abc",
+        downloadUrl: "storage://bucket/artifact-1",
+        expiresAt: "2026-07-03T00:15:00Z",
+        rangeSupported: "true",
+        chunkSizeBytes: "1048576"
+      })
+    ).toBeNull();
+  });
+});
diff --git a/platform_web/utils/pluginBridgeHost.ts b/platform_web/utils/pluginBridgeHost.ts
new file mode 100644
index 0000000..5df61f6
--- /dev/null
+++ b/platform_web/utils/pluginBridgeHost.ts
@@ -0,0 +1,209 @@
+import type {
+  PluginBridgeAction,
+  PluginBridgeExecuteEnvelope,
+  PluginBridgeExecutionResult,
+  PluginBridgeHostContext,
+  PluginBridgeManifestContract,
+  PluginBridgeThemeTokens,
+  PluginPermission
+} from "../contracts/pluginBridge";
+import type { PlatformApiClient } from "../api/client";
+
+export function createPluginBridgeHostContext(input: {
+  plugin: PluginBridgeManifestContract;
+  routeKey: string;
+  serverInstanceId?: string;
+  themeTokens: PluginBridgeThemeTokens;
+}): PluginBridgeHostContext {
+  const page = input.plugin.pages.find((candidate) => candidate.key === input.routeKey);
+  const permissions = filterAllowedPermissions(input.plugin.declaredPermissions, page?.permissions);
+  const bridgeActions =
+    page?.bridgeActions === undefined
+      ? [...input.plugin.bridgeActions]
+      : page.bridgeActions.filter((action) => input.plugin.bridgeActions.includes(action));
+
+  return {
+    pluginId: input.plugin.id,
+    routeKey: input.routeKey,
+    serverInstanceId: input.serverInstanceId,
+    themeTokens: input.themeTokens,
+    permissions,
+    bridgeActions,
+    aiPurposes: [...(input.plugin.aiPurposes ?? [])]
+  };
+}
+
+export function filterAllowedPermissions(
+  declaredPermissions: PluginPermission[],
+  pagePermissions: PluginPermission[] | undefined
+): PluginPermission[] {
+  if (pagePermissions === undefined) {
+    return [...declaredPermissions];
+  }
+  return pagePermissions.filter((permission) => declaredPermissions.includes(permission));
+}
+
+export function createPluginBridgeDispatcher(context: PluginBridgeHostContext, client: Pick<PlatformApiClient, "executePluginBridge">) {
+  return async function dispatchBridgeRequest(envelope: PluginBridgeExecuteEnvelope, signal?: AbortSignal): Promise<PluginBridgeExecutionResult> {
+    const localError = validateBridgeExecutionRequest(context, envelope);
+    if (localError) {
+      return {
+        requestId: envelope.requestId,
+        action: envelope.action,
+        status: "denied",
+        error: localError
+      };
+    }
+    if (signal?.aborted) {
+      return {
+        requestId: envelope.requestId,
+        action: envelope.action,
+        status: "cancelled",
+        error: { code: "cancelled", message: "bridge request was cancelled" }
+      };
+    }
+    try {
+      const response = await client.executePluginBridge({
+        requestId: envelope.requestId,
+        pluginId: context.pluginId,
+        routeKey: context.routeKey,
+        serverInstanceId: context.serverInstanceId,
+        action: envelope.action,
+        aiPurpose: envelope.aiPurpose,
+        payload: envelope.payload
+      });
+      return {
+        requestId: response.requestId,
+        action: response.action as PluginBridgeAction,
+        status: response.status,
+        result: response.result,
+        error: response.error
+      };
+    } catch (error) {
+      return {
+        requestId: envelope.requestId,
+        action: envelope.action,
+        status: "error",
+        error: { code: "platform_error", message: error instanceof Error ? error.message : "bridge execution failed" }
+      };
+    }
+  };
+}
+
+export function validateBridgeExecutionRequest(context: PluginBridgeHostContext, envelope: PluginBridgeExecuteEnvelope): PluginBridgeExecutionResult["error"] | null {
+  if (!envelope.requestId.trim()) {
+    return { code: "validation", message: "requestId is required" };
+  }
+  if (!context.bridgeActions.includes(envelope.action)) {
+    return { code: "unsupported_action", message: "bridge action is not allowed for this page" };
+  }
+  for (const permission of requiredPermissions(envelope.action)) {
+    if (!context.permissions.includes(permission)) {
+      return { code: "permission_denied", message: "bridge action is missing required permission" };
+    }
+  }
+  if (envelope.action === "ai.invoke" && (!envelope.aiPurpose || !context.aiPurposes.includes(envelope.aiPurpose))) {
+    return { code: "ai_purpose_denied", message: "AI purpose is not allowed for this plugin" };
+  }
+  const payload = envelope.payload ?? {};
+  if (Object.keys(payload).length > 16) {
+    return { code: "payload_too_large", message: "bridge payload has too many keys" };
+  }
+  const encodedSize = Object.entries(payload).reduce((sum, [key, value]) => sum + key.length + value.length, 0);
+  if (encodedSize > 4096) {
+    return { code: "payload_too_large", message: "bridge payload is too large" };
+  }
+  for (const [key, value] of Object.entries(payload)) {
+    if (!key.trim() || key !== key.trim()) {
+      return { code: "validation", message: "bridge payload key is invalid" };
+    }
+    if (containsUnsafeBridgeContent(key) || containsUnsafeBridgeContent(value)) {
+      return { code: "unsafe_payload", message: "bridge payload contains unsafe content" };
+    }
+  }
+  return null;
+}
+
+export interface PluginArtifactReference {
+  artifactId: string;
+  filename: string;
+  contentType: string;
+  sizeBytes: number;
+  checksum: string;
+  downloadUrl: string;
+  expiresAt: string;
+  rangeSupported: boolean;
+  chunkSizeBytes: number;
+  storageBehavior?: string;
+}
+
+export function parsePluginArtifactReference(result: Record<string, string> | undefined): PluginArtifactReference | null {
+  if (!result) {
+    return null;
+  }
+  const sizeBytes = Number(result.sizeBytes);
+  const chunkSizeBytes = Number(result.chunkSizeBytes);
+  const reference: PluginArtifactReference = {
+    artifactId: result.artifactId ?? "",
+    filename: result.filename ?? "artifact.bin",
+    contentType: result.contentType ?? "application/octet-stream",
+    sizeBytes,
+    checksum: result.checksum ?? "",
+    downloadUrl: result.downloadUrl ?? "",
+    expiresAt: result.expiresAt ?? "",
+    rangeSupported: result.rangeSupported === "true",
+    chunkSizeBytes,
+    storageBehavior: result.storageBehavior
+  };
+  if (!reference.artifactId || !Number.isFinite(sizeBytes) || sizeBytes <= 0 || !Number.isFinite(chunkSizeBytes) || chunkSizeBytes <= 0) {
+    return null;
+  }
+  if (!reference.downloadUrl.startsWith(`/api/v1/artifacts/${encodeURIComponent(reference.artifactId)}/content`)) {
+    return null;
+  }
+  for (const value of Object.values(reference)) {
+    if (typeof value === "string" && containsUnsafeBridgeContent(value)) {
+      return null;
+    }
+  }
+  return reference;
+}
+
+function requiredPermissions(action: PluginBridgeAction): PluginPermission[] {
+  switch (action) {
+    case "server.instances.read":
+      return ["server.read"];
+    case "jobs.dispatch":
+      return ["server.lifecycle"];
+    case "logs.query":
+      return ["server.logs.read"];
+    case "artifacts.open":
+      return ["server.artifacts.read"];
+    case "files.request":
+      return ["server.files.read"];
+    case "ai.invoke":
+      return ["ai.invoke"];
+    default:
+      return [];
+  }
+}
+
+function containsUnsafeBridgeContent(value: string): boolean {
+  const lowered = value.trim().toLowerCase();
+  if (!lowered) {
+    return false;
+  }
+  return (
+    lowered.includes("/users/") ||
+    lowered.includes("/private/") ||
+    lowered.includes("unix://") ||
+    lowered.includes("tcp://") ||
+    lowered.includes("bearer ") ||
+    lowered.startsWith("sk-") ||
+    lowered.includes("password=") ||
+    lowered.includes("api_key=") ||
+    lowered.includes("apikey=") ||
+    lowered.includes("host path") ||
+    lowered.includes("rawapikey")
+  );
+}
diff --git a/platform_web/vite.config.ts b/platform_web/vite.config.ts
new file mode 100644
index 0000000..2d03e87
--- /dev/null
+++ b/platform_web/vite.config.ts
@@ -0,0 +1,26 @@
+import { loadEnv } from "vite";
+import { defineConfig } from "vitest/config";
+import react from "@vitejs/plugin-react-swc";
+
+export default defineConfig(({ mode }) => {
+  const env = loadEnv(mode, ".", "");
+  const platformProxyTarget = env.PLATFORM_API_PROXY || "http://127.0.0.1:8080";
+  return {
+  plugins: [react()],
+  server: {
+    host: "127.0.0.1",
+    port: 5173,
+    proxy: {
+      "/api/v1": platformProxyTarget,
+      "/healthz": platformProxyTarget
+    }
+  },
+  preview: {
+    host: "127.0.0.1",
+    port: 4173
+  },
+  test: {
+    environment: "node"
+  }
+  };
+});
diff --git a/plugins/AGENTS.md b/plugins/AGENTS.md
new file mode 100644
index 0000000..4b55105
--- /dev/null
+++ b/plugins/AGENTS.md
@@ -0,0 +1,19 @@
+# AGENTS.md for plugins
+
+This file applies to `plugins/`.
+
+## Plugin Boundary
+
+Plugins are game management plugins. Do not model unrelated billing, cloud sales, host provider behavior, or independent plugin backend services here.
+
+## Structure Rules
+
+Manifests, schemas, SDK contracts, example plugins, and test fixtures must live in dedicated directories. Do not bury action schemas or bridge types inside UI page code.
+
+## Security Rules
+
+Plugins must never receive raw AI provider keys, run credentials, raw host paths, or direct storage endpoints. Use platform-mediated bridge calls for jobs, logs, files, artifacts, and AI.
+
+## Local Development
+
+Local plugin development should exercise real platform-run flows through dev registration instead of bypassing platform authorization.
diff --git a/plugins/README.md b/plugins/README.md
new file mode 100644
index 0000000..03f2940
--- /dev/null
+++ b/plugins/README.md
@@ -0,0 +1,49 @@
+# plugins
+
+Game management plugin workspace.
+
+A game management plugin defines how the platform creates and manages one type of game server. One installed plugin can create many server instances.
+
+## Plugin Responsibilities
+
+- Manifest identity and server type declaration.
+- Create-server form schema.
+- Lifecycle action definitions.
+- Required run capabilities.
+- Optional plugin pages hosted by platform_web.
+- AI/file/log permissions declared for platform authorization.
+
+## Required Directory Plan
+
+Implementation should use dedicated directories for:
+
+- `manifests/`: plugin manifest examples or shared manifest schemas.
+- `schemas/`: action, config, and create-form schemas.
+- `sdk/`: plugin bridge SDK and shared contracts.
+- `examples/`: example game management plugins.
+- `tests/`: plugin contract tests and fixtures.
+
+Plugins must use the platform bridge and must not connect directly to run, log storage, artifact storage internals, or AI provider endpoints.
+
+Manifest validation is the plugin-side installability gate. The shared manifest schema defines identity, version, server type/display metadata, create form schema reference, lifecycle action references, required run capabilities, scoped permissions, optional pages, tags, and AI purposes. `scripts/validate-manifest.ts` also scans manifest and create-form content for unsafe raw host path, raw credential, direct run, and raw AI/provider key requests.
+
+Validated manifests are registered through the platform registry API rather than by plugin code importing platform internals. Platform stores registry metadata only and repeats safety validation before a plugin becomes installable.
+
+## Development Baseline
+
+Tooling:
+
+- Node 22.17.0.
+- npm 11.6.1.
+- TypeScript 5.
+
+Commands:
+
+```bash
+npm install
+npm run typecheck
+npm run test
+npm run validate:manifest
+```
+
+Current plugin behavior includes SDK bridge contracts, manifest schema validation, the `examples/dev-game-plugin` fixture, platform registry metadata registration, marketplace projections, hosted plugin-page bridge execution, and platform-mediated lifecycle job dispatch. Marketplace package acquisition, remote plugin hosting policies, and external package distribution remain future OpenSpec work.
diff --git a/plugins/docs/local-development.md b/plugins/docs/local-development.md
new file mode 100644
index 0000000..bf9711c
--- /dev/null
+++ b/plugins/docs/local-development.md
@@ -0,0 +1,24 @@
+# Local Plugin Development
+
+Local development must exercise the same platform-mediated flows used by installed plugins.
+
+## Flow
+
+1. Validate the plugin manifest with `npm run validate:manifest`.
+2. Register the validated manifest with platform `POST /api/v1/game-plugins/register-manifest` using a manifest artifact reference and the manifest payload.
+3. Serve plugin page from a local dev server or static directory.
+4. Select a test server instance and run endpoint.
+5. Use platform bridge calls for jobs, logs, files, artifacts, and AI.
+
+Plugins must not bypass platform authorization by calling run directly.
+
+Manifest validation rejects raw host paths, raw credentials, direct run sockets, and raw AI/provider keys. Platform registration repeats the same safety class of validation before storing registry metadata, so a plugin workspace validation result is not treated as a trusted backend bypass.
+
+For full local stack proof, run the repository local debug workspace:
+
+```bash
+scripts/local-debug-start.sh
+scripts/local-debug-smoke.sh
+```
+
+That workflow registers `plugins/examples/dev-game-plugin/manifest.json`, creates a safe `server-local-debug` fixture through platform APIs, and verifies that plugin/browser evidence exposes only logical IDs, platform routes, job refs, log refs, artifact refs, and safe metadata.
diff --git a/plugins/examples/dev-game-plugin/manifest.json b/plugins/examples/dev-game-plugin/manifest.json
new file mode 100644
index 0000000..2abd6c0
--- /dev/null
+++ b/plugins/examples/dev-game-plugin/manifest.json
@@ -0,0 +1,83 @@
+{
+  "$schema": "../../manifests/game-plugin.manifest.schema.json",
+  "id": "game.example",
+  "name": "Example Server",
+  "description": "Development game management plugin for local registry and lifecycle testing.",
+  "version": "0.1.0",
+  "kind": "game-plugin",
+  "tags": ["example", "development"],
+  "server": {
+    "type": "example",
+    "displayName": "Example Server",
+    "supportedOS": ["windows", "linux", "darwin"],
+    "createFormSchema": "schemas/create-form.schema.json"
+  },
+  "capabilities": [
+    "process.install",
+    "process.start",
+    "process.stop",
+    "process.restart",
+    "process.status",
+    "files.list",
+    "files.read",
+    "files.patch",
+    "logs.read",
+    "artifacts.read",
+    "artifacts.write",
+    "ai.invoke"
+  ],
+  "bridge": {
+    "actions": [
+      "server.instances.read",
+      "jobs.dispatch",
+      "logs.query",
+      "artifacts.open",
+      "files.request",
+      "ai.invoke"
+    ]
+  },
+  "permissions": [
+    "server.create",
+    "server.read",
+    "server.lifecycle",
+    "server.files.read",
+    "server.files.write",
+    "server.logs.read",
+    "server.artifacts.read",
+    "server.artifacts.write",
+    "ai.invoke"
+  ],
+  "actions": {
+    "install": "actions/install.json",
+    "start": "actions/start.json",
+    "stop": "actions/stop.json",
+    "restart": "actions/restart.json",
+    "status": "actions/status.json"
+  },
+  "pages": [
+    {
+      "key": "overview",
+      "title": "概览",
+      "path": "/overview",
+      "permissions": ["server.read"],
+      "bridgeActions": ["server.instances.read"]
+    },
+    {
+      "key": "config",
+      "title": "配置",
+      "path": "/config",
+      "permissions": ["server.files.read", "server.files.write", "ai.invoke"],
+      "bridgeActions": ["files.request", "ai.invoke"]
+    },
+    {
+      "key": "logs",
+      "title": "日志",
+      "path": "/logs",
+      "permissions": ["server.logs.read", "ai.invoke"],
+      "bridgeActions": ["logs.query", "ai.invoke"]
+    }
+  ],
+  "ai": {
+    "purposes": ["config.suggest", "logs.diagnose"]
+  }
+}
diff --git a/plugins/examples/dev-game-plugin/schemas/create-form.schema.json b/plugins/examples/dev-game-plugin/schemas/create-form.schema.json
new file mode 100644
index 0000000..4b53889
--- /dev/null
+++ b/plugins/examples/dev-game-plugin/schemas/create-form.schema.json
@@ -0,0 +1,17 @@
+{
+  "fields": [
+    {
+      "key": "serverName",
+      "label": "服务器名称",
+      "type": "text",
+      "required": true
+    },
+    {
+      "key": "gamePort",
+      "label": "游戏端口",
+      "type": "port",
+      "required": true,
+      "default": 27015
+    }
+  ]
+}
diff --git a/plugins/examples/scum-server-plugin/actions/install.json b/plugins/examples/scum-server-plugin/actions/install.json
new file mode 100644
index 0000000..813bad2
--- /dev/null
+++ b/plugins/examples/scum-server-plugin/actions/install.json
@@ -0,0 +1,8 @@
+{
+  "command": ["true"],
+  "env": {
+    "GAME_ID": "scum",
+    "SERVER_TEMPLATE": "scum-local-proof"
+  },
+  "timeoutMs": 30000
+}
diff --git a/plugins/examples/scum-server-plugin/actions/restart.json b/plugins/examples/scum-server-plugin/actions/restart.json
new file mode 100644
index 0000000..7c70bcb
--- /dev/null
+++ b/plugins/examples/scum-server-plugin/actions/restart.json
@@ -0,0 +1,8 @@
+{
+  "command": ["true"],
+  "env": {
+    "GAME_ID": "scum",
+    "SERVER_ACTION": "restart"
+  },
+  "timeoutMs": 30000
+}
diff --git a/plugins/examples/scum-server-plugin/actions/start.json b/plugins/examples/scum-server-plugin/actions/start.json
new file mode 100644
index 0000000..f06fd92
--- /dev/null
+++ b/plugins/examples/scum-server-plugin/actions/start.json
@@ -0,0 +1,8 @@
+{
+  "command": ["true"],
+  "env": {
+    "GAME_ID": "scum",
+    "SERVER_ACTION": "start"
+  },
+  "timeoutMs": 30000
+}
diff --git a/plugins/examples/scum-server-plugin/actions/status.json b/plugins/examples/scum-server-plugin/actions/status.json
new file mode 100644
index 0000000..0740893
--- /dev/null
+++ b/plugins/examples/scum-server-plugin/actions/status.json
@@ -0,0 +1,8 @@
+{
+  "command": ["true"],
+  "env": {
+    "GAME_ID": "scum",
+    "SERVER_ACTION": "status"
+  },
+  "timeoutMs": 30000
+}
diff --git a/plugins/examples/scum-server-plugin/actions/stop.json b/plugins/examples/scum-server-plugin/actions/stop.json
new file mode 100644
index 0000000..bce61ce
--- /dev/null
+++ b/plugins/examples/scum-server-plugin/actions/stop.json
@@ -0,0 +1,8 @@
+{
+  "command": ["true"],
+  "env": {
+    "GAME_ID": "scum",
+    "SERVER_ACTION": "stop"
+  },
+  "timeoutMs": 30000
+}
diff --git a/plugins/examples/scum-server-plugin/manifest.json b/plugins/examples/scum-server-plugin/manifest.json
new file mode 100644
index 0000000..59e4962
--- /dev/null
+++ b/plugins/examples/scum-server-plugin/manifest.json
@@ -0,0 +1,83 @@
+{
+  "$schema": "../../manifests/game-plugin.manifest.schema.json",
+  "id": "game.scum",
+  "name": "SCUM Server",
+  "description": "First-party local SCUM game server management plugin for platform-mediated lifecycle proof.",
+  "version": "0.1.0",
+  "kind": "game-plugin",
+  "tags": ["scum", "survival", "dedicated-server", "local-proof"],
+  "server": {
+    "type": "scum",
+    "displayName": "SCUM Dedicated Server",
+    "supportedOS": ["windows", "linux"],
+    "createFormSchema": "schemas/create-form.schema.json"
+  },
+  "capabilities": [
+    "process.install",
+    "process.start",
+    "process.stop",
+    "process.restart",
+    "process.status",
+    "files.list",
+    "files.read",
+    "files.patch",
+    "logs.read",
+    "artifacts.read",
+    "artifacts.write",
+    "ai.invoke"
+  ],
+  "bridge": {
+    "actions": [
+      "server.instances.read",
+      "jobs.dispatch",
+      "logs.query",
+      "artifacts.open",
+      "files.request",
+      "ai.invoke"
+    ]
+  },
+  "permissions": [
+    "server.create",
+    "server.read",
+    "server.lifecycle",
+    "server.files.read",
+    "server.files.write",
+    "server.logs.read",
+    "server.artifacts.read",
+    "server.artifacts.write",
+    "ai.invoke"
+  ],
+  "actions": {
+    "install": "actions/install.json",
+    "start": "actions/start.json",
+    "stop": "actions/stop.json",
+    "restart": "actions/restart.json",
+    "status": "actions/status.json"
+  },
+  "pages": [
+    {
+      "key": "overview",
+      "title": "SCUM 概览",
+      "path": "/overview",
+      "permissions": ["server.read", "server.lifecycle"],
+      "bridgeActions": ["server.instances.read", "jobs.dispatch"]
+    },
+    {
+      "key": "config",
+      "title": "SCUM 配置",
+      "path": "/config",
+      "permissions": ["server.files.read", "server.files.write", "ai.invoke"],
+      "bridgeActions": ["files.request", "ai.invoke"]
+    },
+    {
+      "key": "logs",
+      "title": "SCUM 日志",
+      "path": "/logs",
+      "permissions": ["server.logs.read", "server.artifacts.read", "ai.invoke"],
+      "bridgeActions": ["logs.query", "artifacts.open", "ai.invoke"]
+    }
+  ],
+  "ai": {
+    "purposes": ["config.suggest", "logs.diagnose"]
+  }
+}
diff --git a/plugins/examples/scum-server-plugin/schemas/create-form.schema.json b/plugins/examples/scum-server-plugin/schemas/create-form.schema.json
new file mode 100644
index 0000000..227f47a
--- /dev/null
+++ b/plugins/examples/scum-server-plugin/schemas/create-form.schema.json
@@ -0,0 +1,31 @@
+{
+  "fields": [
+    {
+      "key": "serverName",
+      "label": "SCUM 服务器名称",
+      "type": "text",
+      "required": true
+    },
+    {
+      "key": "gamePort",
+      "label": "游戏端口",
+      "type": "port",
+      "required": true,
+      "default": 7777
+    },
+    {
+      "key": "queryPort",
+      "label": "查询端口",
+      "type": "port",
+      "required": true,
+      "default": 27015
+    },
+    {
+      "key": "maxPlayers",
+      "label": "最大玩家数",
+      "type": "number",
+      "required": true,
+      "default": 64
+    }
+  ]
+}
diff --git a/plugins/manifests/game-plugin.manifest.schema.json b/plugins/manifests/game-plugin.manifest.schema.json
new file mode 100644
index 0000000..3e6385e
--- /dev/null
+++ b/plugins/manifests/game-plugin.manifest.schema.json
@@ -0,0 +1,145 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://browser.local/schemas/game-plugin.manifest.schema.json",
+  "title": "GamePluginManifest",
+  "type": "object",
+  "required": ["id", "name", "version", "kind", "server", "capabilities", "permissions"],
+  "additionalProperties": false,
+  "properties": {
+    "$schema": { "type": "string" },
+    "id": { "type": "string", "pattern": "^game\\.[a-z0-9][a-z0-9._-]*$" },
+    "name": { "type": "string", "minLength": 1, "maxLength": 80 },
+    "description": { "type": "string", "minLength": 1, "maxLength": 240 },
+    "version": { "type": "string", "minLength": 1, "maxLength": 40 },
+    "kind": { "const": "game-plugin" },
+    "tags": {
+      "type": "array",
+      "items": { "type": "string", "pattern": "^[a-z0-9][a-z0-9._-]*$" },
+      "uniqueItems": true,
+      "maxItems": 8
+    },
+    "server": {
+      "type": "object",
+      "required": ["type", "displayName", "createFormSchema"],
+      "additionalProperties": false,
+      "properties": {
+        "type": { "type": "string", "pattern": "^[a-z0-9][a-z0-9._-]*$", "maxLength": 80 },
+        "displayName": { "type": "string", "minLength": 1, "maxLength": 80 },
+        "supportedOS": { "type": "array", "items": { "enum": ["windows", "linux", "darwin"] } },
+        "createFormSchema": { "$ref": "#/$defs/relativeJsonRef" }
+      }
+    },
+    "bridge": {
+      "type": "object",
+      "required": ["actions"],
+      "additionalProperties": false,
+      "properties": {
+        "actions": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/bridgeAction" },
+          "uniqueItems": true,
+          "minItems": 1
+        }
+      }
+    },
+    "capabilities": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/runCapability" },
+      "uniqueItems": true
+    },
+    "permissions": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/pluginPermission" },
+      "uniqueItems": true
+    },
+    "actions": {
+      "type": "object",
+      "required": ["install", "start", "stop"],
+      "additionalProperties": false,
+      "properties": {
+        "install": { "$ref": "#/$defs/relativeJsonRef" },
+        "start": { "$ref": "#/$defs/relativeJsonRef" },
+        "stop": { "$ref": "#/$defs/relativeJsonRef" },
+        "restart": { "$ref": "#/$defs/relativeJsonRef" },
+        "status": { "$ref": "#/$defs/relativeJsonRef" }
+      }
+    },
+    "pages": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["key", "title", "path"],
+        "additionalProperties": false,
+        "properties": {
+          "key": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" },
+          "title": { "type": "string", "minLength": 1, "maxLength": 40 },
+          "path": { "type": "string", "pattern": "^/[a-z0-9_./-]*$" },
+          "permissions": { "type": "array", "items": { "$ref": "#/$defs/pluginPermission" }, "uniqueItems": true },
+          "bridgeActions": { "type": "array", "items": { "$ref": "#/$defs/bridgeAction" }, "uniqueItems": true }
+        }
+      }
+    },
+    "ai": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "purposes": { "type": "array", "items": { "$ref": "#/$defs/aiPurpose" }, "uniqueItems": true }
+      }
+    }
+  },
+  "$defs": {
+    "relativeJsonRef": {
+      "type": "string",
+      "pattern": "^(?!/)(?![A-Za-z]:)(?!.*://)(?!.*\\.\\.)[a-zA-Z0-9_./-]+\\.json$"
+    },
+    "runCapability": {
+      "enum": [
+        "process.install",
+        "process.start",
+        "process.stop",
+        "process.restart",
+        "process.status",
+        "files.list",
+        "files.read",
+        "files.write",
+        "files.patch",
+        "logs.read",
+        "artifacts.read",
+        "artifacts.write",
+        "ai.invoke"
+      ]
+    },
+    "pluginPermission": {
+      "enum": [
+        "server.create",
+        "server.read",
+        "server.lifecycle",
+        "server.files.read",
+        "server.files.write",
+        "server.logs.read",
+        "server.artifacts.read",
+        "server.artifacts.write",
+        "ai.invoke"
+      ]
+    },
+    "bridgeAction": {
+      "enum": [
+        "server.instances.read",
+        "jobs.dispatch",
+        "logs.query",
+        "artifacts.open",
+        "files.request",
+        "ai.invoke"
+      ]
+    },
+    "aiPurpose": {
+      "enum": [
+        "config.read",
+        "config.generate",
+        "config.suggest",
+        "logs.diagnose",
+        "files.suggest"
+      ]
+    }
+  }
+}
diff --git a/plugins/package-lock.json b/plugins/package-lock.json
new file mode 100644
index 0000000..52febaf
--- /dev/null
+++ b/plugins/package-lock.json
@@ -0,0 +1,1602 @@
+{
+  "name": "browser-game-plugins",
+  "version": "0.1.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "browser-game-plugins",
+      "version": "0.1.0",
+      "dependencies": {
+        "ajv": "8.18.0"
+      },
+      "devDependencies": {
+        "@types/node": "25.3.3",
+        "tsx": "4.21.0",
+        "typescript": "5.9.3",
+        "vitest": "4.0.18"
+      }
+    },
+    "node_modules/@esbuild/aix-ppc64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/aix-ppc64/-/aix-ppc64-0.27.3.tgz",
+      "integrity": "sha512-9fJMTNFTWZMh5qwrBItuziu834eOCUcEqymSH7pY+zoMVEZg3gcPuBNxH1EvfVYe9h0x/Ptw8KBzv7qxb7l8dg==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/android-arm/-/android-arm-0.27.3.tgz",
+      "integrity": "sha512-i5D1hPY7GIQmXlXhs2w8AWHhenb00+GxjxRncS2ZM7YNVGNfaMxgzSGuO8o8SJzRc/oZwU2bcScvVERk03QhzA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/android-arm64/-/android-arm64-0.27.3.tgz",
+      "integrity": "sha512-YdghPYUmj/FX2SYKJ0OZxf+iaKgMsKHVPF1MAq/P8WirnSpCStzKJFjOjzsW0QQ7oIAiccHdcqjbHmJxRb/dmg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-x64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/android-x64/-/android-x64-0.27.3.tgz",
+      "integrity": "sha512-IN/0BNTkHtk8lkOM8JWAYFg4ORxBkZQf9zXiEOfERX/CzxW3Vg1ewAhU7QSWQpVIzTW+b8Xy+lGzdYXV6UZObQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-arm64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/darwin-arm64/-/darwin-arm64-0.27.3.tgz",
+      "integrity": "sha512-Re491k7ByTVRy0t3EKWajdLIr0gz2kKKfzafkth4Q8A5n1xTHrkqZgLLjFEHVD+AXdUGgQMq+Godfq45mGpCKg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-x64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/darwin-x64/-/darwin-x64-0.27.3.tgz",
+      "integrity": "sha512-vHk/hA7/1AckjGzRqi6wbo+jaShzRowYip6rt6q7VYEDX4LEy1pZfDpdxCBnGtl+A5zq8iXDcyuxwtv3hNtHFg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/freebsd-arm64/-/freebsd-arm64-0.27.3.tgz",
+      "integrity": "sha512-ipTYM2fjt3kQAYOvo6vcxJx3nBYAzPjgTCk7QEgZG8AUO3ydUhvelmhrbOheMnGOlaSFUoHXB6un+A7q4ygY9w==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-x64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/freebsd-x64/-/freebsd-x64-0.27.3.tgz",
+      "integrity": "sha512-dDk0X87T7mI6U3K9VjWtHOXqwAMJBNN2r7bejDsc+j03SEjtD9HrOl8gVFByeM0aJksoUuUVU9TBaZa2rgj0oA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/linux-arm/-/linux-arm-0.27.3.tgz",
+      "integrity": "sha512-s6nPv2QkSupJwLYyfS+gwdirm0ukyTFNl3KTgZEAiJDd+iHZcbTPPcWCcRYH+WlNbwChgH2QkE9NSlNrMT8Gfw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/linux-arm64/-/linux-arm64-0.27.3.tgz",
+      "integrity": "sha512-sZOuFz/xWnZ4KH3YfFrKCf1WyPZHakVzTiqji3WDc0BCl2kBwiJLCXpzLzUBLgmp4veFZdvN5ChW4Eq/8Fc2Fg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ia32": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/linux-ia32/-/linux-ia32-0.27.3.tgz",
+      "integrity": "sha512-yGlQYjdxtLdh0a3jHjuwOrxQjOZYD/C9PfdbgJJF3TIZWnm/tMd/RcNiLngiu4iwcBAOezdnSLAwQDPqTmtTYg==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-loong64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/linux-loong64/-/linux-loong64-0.27.3.tgz",
+      "integrity": "sha512-WO60Sn8ly3gtzhyjATDgieJNet/KqsDlX5nRC5Y3oTFcS1l0KWba+SEa9Ja1GfDqSF1z6hif/SkpQJbL63cgOA==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-mips64el": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/linux-mips64el/-/linux-mips64el-0.27.3.tgz",
+      "integrity": "sha512-APsymYA6sGcZ4pD6k+UxbDjOFSvPWyZhjaiPyl/f79xKxwTnrn5QUnXR5prvetuaSMsb4jgeHewIDCIWljrSxw==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ppc64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/linux-ppc64/-/linux-ppc64-0.27.3.tgz",
+      "integrity": "sha512-eizBnTeBefojtDb9nSh4vvVQ3V9Qf9Df01PfawPcRzJH4gFSgrObw+LveUyDoKU3kxi5+9RJTCWlj4FjYXVPEA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-riscv64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/linux-riscv64/-/linux-riscv64-0.27.3.tgz",
+      "integrity": "sha512-3Emwh0r5wmfm3ssTWRQSyVhbOHvqegUDRd0WhmXKX2mkHJe1SFCMJhagUleMq+Uci34wLSipf8Lagt4LlpRFWQ==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-s390x": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/linux-s390x/-/linux-s390x-0.27.3.tgz",
+      "integrity": "sha512-pBHUx9LzXWBc7MFIEEL0yD/ZVtNgLytvx60gES28GcWMqil8ElCYR4kvbV2BDqsHOvVDRrOxGySBM9Fcv744hw==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-x64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/linux-x64/-/linux-x64-0.27.3.tgz",
+      "integrity": "sha512-Czi8yzXUWIQYAtL/2y6vogER8pvcsOsk5cpwL4Gk5nJqH5UZiVByIY8Eorm5R13gq+DQKYg0+JyQoytLQas4dA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-arm64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/netbsd-arm64/-/netbsd-arm64-0.27.3.tgz",
+      "integrity": "sha512-sDpk0RgmTCR/5HguIZa9n9u+HVKf40fbEUt+iTzSnCaGvY9kFP0YKBWZtJaraonFnqef5SlJ8/TiPAxzyS+UoA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-x64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/netbsd-x64/-/netbsd-x64-0.27.3.tgz",
+      "integrity": "sha512-P14lFKJl/DdaE00LItAukUdZO5iqNH7+PjoBm+fLQjtxfcfFE20Xf5CrLsmZdq5LFFZzb5JMZ9grUwvtVYzjiA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-arm64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/openbsd-arm64/-/openbsd-arm64-0.27.3.tgz",
+      "integrity": "sha512-AIcMP77AvirGbRl/UZFTq5hjXK+2wC7qFRGoHSDrZ5v5b8DK/GYpXW3CPRL53NkvDqb9D+alBiC/dV0Fb7eJcw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-x64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/openbsd-x64/-/openbsd-x64-0.27.3.tgz",
+      "integrity": "sha512-DnW2sRrBzA+YnE70LKqnM3P+z8vehfJWHXECbwBmH/CU51z6FiqTQTHFenPlHmo3a8UgpLyH3PT+87OViOh1AQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openharmony-arm64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/openharmony-arm64/-/openharmony-arm64-0.27.3.tgz",
+      "integrity": "sha512-NinAEgr/etERPTsZJ7aEZQvvg/A6IsZG/LgZy+81wON2huV7SrK3e63dU0XhyZP4RKGyTm7aOgmQk0bGp0fy2g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/sunos-x64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/sunos-x64/-/sunos-x64-0.27.3.tgz",
+      "integrity": "sha512-PanZ+nEz+eWoBJ8/f8HKxTTD172SKwdXebZ0ndd953gt1HRBbhMsaNqjTyYLGLPdoWHy4zLU7bDVJztF5f3BHA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-arm64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/win32-arm64/-/win32-arm64-0.27.3.tgz",
+      "integrity": "sha512-B2t59lWWYrbRDw/tjiWOuzSsFh1Y/E95ofKz7rIVYSQkUYBjfSgf6oeYPNWHToFRr2zx52JKApIcAS/D5TUBnA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-ia32": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/win32-ia32/-/win32-ia32-0.27.3.tgz",
+      "integrity": "sha512-QLKSFeXNS8+tHW7tZpMtjlNb7HKau0QDpwm49u0vUp9y1WOF+PEzkU84y9GqYaAVW8aH8f3GcBck26jh54cX4Q==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-x64": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/@esbuild/win32-x64/-/win32-x64-0.27.3.tgz",
+      "integrity": "sha512-4uJGhsxuptu3OcpVAzli+/gWusVGwZZHTlS63hh++ehExkVT8SgiEf7/uC/PclrPPkLhZqGgCTjd0VWLo6xMqA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.5.5",
+      "resolved": "https://registry.npmmirror.com/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
+      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@rollup/rollup-android-arm-eabi": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.59.0.tgz",
+      "integrity": "sha512-upnNBkA6ZH2VKGcBj9Fyl9IGNPULcjXRlg0LLeaioQWueH30p6IXtJEbKAgvyv+mJaMxSm1l6xwDXYjpEMiLMg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@rollup/rollup-android-arm64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.59.0.tgz",
+      "integrity": "sha512-hZ+Zxj3SySm4A/DylsDKZAeVg0mvi++0PYVceVyX7hemkw7OreKdCvW2oQ3T1FMZvCaQXqOTHb8qmBShoqk69Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@rollup/rollup-darwin-arm64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.59.0.tgz",
+      "integrity": "sha512-W2Psnbh1J8ZJw0xKAd8zdNgF9HRLkdWwwdWqubSVk0pUuQkoHnv7rx4GiF9rT4t5DIZGAsConRE3AxCdJ4m8rg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@rollup/rollup-darwin-x64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.59.0.tgz",
+      "integrity": "sha512-ZW2KkwlS4lwTv7ZVsYDiARfFCnSGhzYPdiOU4IM2fDbL+QGlyAbjgSFuqNRbSthybLbIJ915UtZBtmuLrQAT/w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@rollup/rollup-freebsd-arm64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.59.0.tgz",
+      "integrity": "sha512-EsKaJ5ytAu9jI3lonzn3BgG8iRBjV4LxZexygcQbpiU0wU0ATxhNVEpXKfUa0pS05gTcSDMKpn3Sx+QB9RlTTA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-freebsd-x64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.59.0.tgz",
+      "integrity": "sha512-d3DuZi2KzTMjImrxoHIAODUZYoUUMsuUiY4SRRcJy6NJoZ6iIqWnJu9IScV9jXysyGMVuW+KNzZvBLOcpdl3Vg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.59.0.tgz",
+      "integrity": "sha512-t4ONHboXi/3E0rT6OZl1pKbl2Vgxf9vJfWgmUoCEVQVxhW6Cw/c8I6hbbu7DAvgp82RKiH7TpLwxnJeKv2pbsw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm-musleabihf": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.59.0.tgz",
+      "integrity": "sha512-CikFT7aYPA2ufMD086cVORBYGHffBo4K8MQ4uPS/ZnY54GKj36i196u8U+aDVT2LX4eSMbyHtyOh7D7Zvk2VvA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.59.0.tgz",
+      "integrity": "sha512-jYgUGk5aLd1nUb1CtQ8E+t5JhLc9x5WdBKew9ZgAXg7DBk0ZHErLHdXM24rfX+bKrFe+Xp5YuJo54I5HFjGDAA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm64-musl": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.59.0.tgz",
+      "integrity": "sha512-peZRVEdnFWZ5Bh2KeumKG9ty7aCXzzEsHShOZEFiCQlDEepP1dpUl/SrUNXNg13UmZl+gzVDPsiCwnV1uI0RUA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-loong64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.59.0.tgz",
+      "integrity": "sha512-gbUSW/97f7+r4gHy3Jlup8zDG190AuodsWnNiXErp9mT90iCy9NKKU0Xwx5k8VlRAIV2uU9CsMnEFg/xXaOfXg==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-loong64-musl": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.59.0.tgz",
+      "integrity": "sha512-yTRONe79E+o0FWFijasoTjtzG9EBedFXJMl888NBEDCDV9I2wGbFFfJQQe63OijbFCUZqxpHz1GzpbtSFikJ4Q==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-ppc64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.59.0.tgz",
+      "integrity": "sha512-sw1o3tfyk12k3OEpRddF68a1unZ5VCN7zoTNtSn2KndUE+ea3m3ROOKRCZxEpmT9nsGnogpFP9x6mnLTCaoLkA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-ppc64-musl": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.59.0.tgz",
+      "integrity": "sha512-+2kLtQ4xT3AiIxkzFVFXfsmlZiG5FXYW7ZyIIvGA7Bdeuh9Z0aN4hVyXS/G1E9bTP/vqszNIN/pUKCk/BTHsKA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-riscv64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.59.0.tgz",
+      "integrity": "sha512-NDYMpsXYJJaj+I7UdwIuHHNxXZ/b/N2hR15NyH3m2qAtb/hHPA4g4SuuvrdxetTdndfj9b1WOmy73kcPRoERUg==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-riscv64-musl": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.59.0.tgz",
+      "integrity": "sha512-nLckB8WOqHIf1bhymk+oHxvM9D3tyPndZH8i8+35p/1YiVoVswPid2yLzgX7ZJP0KQvnkhM4H6QZ5m0LzbyIAg==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-s390x-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.59.0.tgz",
+      "integrity": "sha512-oF87Ie3uAIvORFBpwnCvUzdeYUqi2wY6jRFWJAy1qus/udHFYIkplYRW+wo+GRUP4sKzYdmE1Y3+rY5Gc4ZO+w==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-x64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.59.0.tgz",
+      "integrity": "sha512-3AHmtQq/ppNuUspKAlvA8HtLybkDflkMuLK4DPo77DfthRb71V84/c4MlWJXixZz4uruIH4uaa07IqoAkG64fg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-x64-musl": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.59.0.tgz",
+      "integrity": "sha512-2UdiwS/9cTAx7qIUZB/fWtToJwvt0Vbo0zmnYt7ED35KPg13Q0ym1g442THLC7VyI6JfYTP4PiSOWyoMdV2/xg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-openbsd-x64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.59.0.tgz",
+      "integrity": "sha512-M3bLRAVk6GOwFlPTIxVBSYKUaqfLrn8l0psKinkCFxl4lQvOSz8ZrKDz2gxcBwHFpci0B6rttydI4IpS4IS/jQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-openharmony-arm64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.59.0.tgz",
+      "integrity": "sha512-tt9KBJqaqp5i5HUZzoafHZX8b5Q2Fe7UjYERADll83O4fGqJ49O1FsL6LpdzVFQcpwvnyd0i+K/VSwu/o/nWlA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-arm64-msvc": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.59.0.tgz",
+      "integrity": "sha512-V5B6mG7OrGTwnxaNUzZTDTjDS7F75PO1ae6MJYdiMu60sq0CqN5CVeVsbhPxalupvTX8gXVSU9gq+Rx1/hvu6A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-ia32-msvc": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.59.0.tgz",
+      "integrity": "sha512-UKFMHPuM9R0iBegwzKF4y0C4J9u8C6MEJgFuXTBerMk7EJ92GFVFYBfOZaSGLu6COf7FxpQNqhNS4c4icUPqxA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-x64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.59.0.tgz",
+      "integrity": "sha512-laBkYlSS1n2L8fSo1thDNGrCTQMmxjYY5G0WFWjFFYZkKPjsMBsgJfGf4TLxXrF6RyhI60L8TMOjBMvXiTcxeA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-x64-msvc": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.59.0.tgz",
+      "integrity": "sha512-2HRCml6OztYXyJXAvdDXPKcawukWY2GpR5/nxKp4iBgiO3wcoEGkAaqctIbZcNB6KlUQBIqt8VYkNSj2397EfA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@standard-schema/spec": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmmirror.com/@standard-schema/spec/-/spec-1.1.0.tgz",
+      "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/chai": {
+      "version": "5.2.3",
+      "resolved": "https://registry.npmmirror.com/@types/chai/-/chai-5.2.3.tgz",
+      "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/deep-eql": "*",
+        "assertion-error": "^2.0.1"
+      }
+    },
+    "node_modules/@types/deep-eql": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmmirror.com/@types/deep-eql/-/deep-eql-4.0.2.tgz",
+      "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/estree": {
+      "version": "1.0.8",
+      "resolved": "https://registry.npmmirror.com/@types/estree/-/estree-1.0.8.tgz",
+      "integrity": "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/node": {
+      "version": "25.3.3",
+      "resolved": "https://registry.npmmirror.com/@types/node/-/node-25.3.3.tgz",
+      "integrity": "sha512-DpzbrH7wIcBaJibpKo9nnSQL0MTRdnWttGyE5haGwK86xgMOkFLp7vEyfQPGLOJh5wNYiJ3V9PmUMDhV9u8kkQ==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "undici-types": "~7.18.0"
+      }
+    },
+    "node_modules/@vitest/expect": {
+      "version": "4.0.18",
+      "resolved": "https://registry.npmmirror.com/@vitest/expect/-/expect-4.0.18.tgz",
+      "integrity": "sha512-8sCWUyckXXYvx4opfzVY03EOiYVxyNrHS5QxX3DAIi5dpJAAkyJezHCP77VMX4HKA2LDT/Jpfo8i2r5BE3GnQQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@standard-schema/spec": "^1.0.0",
+        "@types/chai": "^5.2.2",
+        "@vitest/spy": "4.0.18",
+        "@vitest/utils": "4.0.18",
+        "chai": "^6.2.1",
+        "tinyrainbow": "^3.0.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/mocker": {
+      "version": "4.0.18",
+      "resolved": "https://registry.npmmirror.com/@vitest/mocker/-/mocker-4.0.18.tgz",
+      "integrity": "sha512-HhVd0MDnzzsgevnOWCBj5Otnzobjy5wLBe4EdeeFGv8luMsGcYqDuFRMcttKWZA5vVO8RFjexVovXvAM4JoJDQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/spy": "4.0.18",
+        "estree-walker": "^3.0.3",
+        "magic-string": "^0.30.21"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "msw": "^2.4.9",
+        "vite": "^6.0.0 || ^7.0.0-0"
+      },
+      "peerDependenciesMeta": {
+        "msw": {
+          "optional": true
+        },
+        "vite": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@vitest/pretty-format": {
+      "version": "4.0.18",
+      "resolved": "https://registry.npmmirror.com/@vitest/pretty-format/-/pretty-format-4.0.18.tgz",
+      "integrity": "sha512-P24GK3GulZWC5tz87ux0m8OADrQIUVDPIjjj65vBXYG17ZeU3qD7r+MNZ1RNv4l8CGU2vtTRqixrOi9fYk/yKw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tinyrainbow": "^3.0.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/runner": {
+      "version": "4.0.18",
+      "resolved": "https://registry.npmmirror.com/@vitest/runner/-/runner-4.0.18.tgz",
+      "integrity": "sha512-rpk9y12PGa22Jg6g5M3UVVnTS7+zycIGk9ZNGN+m6tZHKQb7jrP7/77WfZy13Y/EUDd52NDsLRQhYKtv7XfPQw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/utils": "4.0.18",
+        "pathe": "^2.0.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/snapshot": {
+      "version": "4.0.18",
+      "resolved": "https://registry.npmmirror.com/@vitest/snapshot/-/snapshot-4.0.18.tgz",
+      "integrity": "sha512-PCiV0rcl7jKQjbgYqjtakly6T1uwv/5BQ9SwBLekVg/EaYeQFPiXcgrC2Y7vDMA8dM1SUEAEV82kgSQIlXNMvA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/pretty-format": "4.0.18",
+        "magic-string": "^0.30.21",
+        "pathe": "^2.0.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/spy": {
+      "version": "4.0.18",
+      "resolved": "https://registry.npmmirror.com/@vitest/spy/-/spy-4.0.18.tgz",
+      "integrity": "sha512-cbQt3PTSD7P2OARdVW3qWER5EGq7PHlvE+QfzSC0lbwO+xnt7+XH06ZzFjFRgzUX//JmpxrCu92VdwvEPlWSNw==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/utils": {
+      "version": "4.0.18",
+      "resolved": "https://registry.npmmirror.com/@vitest/utils/-/utils-4.0.18.tgz",
+      "integrity": "sha512-msMRKLMVLWygpK3u2Hybgi4MNjcYJvwTb0Ru09+fOyCXIgT5raYP041DRRdiJiI3k/2U6SEbAETB3YtBrUkCFA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/pretty-format": "4.0.18",
+        "tinyrainbow": "^3.0.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/ajv": {
+      "version": "8.18.0",
+      "resolved": "https://registry.npmmirror.com/ajv/-/ajv-8.18.0.tgz",
+      "integrity": "sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
+    "node_modules/assertion-error": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmmirror.com/assertion-error/-/assertion-error-2.0.1.tgz",
+      "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/chai": {
+      "version": "6.2.2",
+      "resolved": "https://registry.npmmirror.com/chai/-/chai-6.2.2.tgz",
+      "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/es-module-lexer": {
+      "version": "1.7.0",
+      "resolved": "https://registry.npmmirror.com/es-module-lexer/-/es-module-lexer-1.7.0.tgz",
+      "integrity": "sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/esbuild": {
+      "version": "0.27.3",
+      "resolved": "https://registry.npmmirror.com/esbuild/-/esbuild-0.27.3.tgz",
+      "integrity": "sha512-8VwMnyGCONIs6cWue2IdpHxHnAjzxnw2Zr7MkVxB2vjmQ2ivqGFb4LEG3SMnv0Gb2F/G/2yA8zUaiL1gywDCCg==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.27.3",
+        "@esbuild/android-arm": "0.27.3",
+        "@esbuild/android-arm64": "0.27.3",
+        "@esbuild/android-x64": "0.27.3",
+        "@esbuild/darwin-arm64": "0.27.3",
+        "@esbuild/darwin-x64": "0.27.3",
+        "@esbuild/freebsd-arm64": "0.27.3",
+        "@esbuild/freebsd-x64": "0.27.3",
+        "@esbuild/linux-arm": "0.27.3",
+        "@esbuild/linux-arm64": "0.27.3",
+        "@esbuild/linux-ia32": "0.27.3",
+        "@esbuild/linux-loong64": "0.27.3",
+        "@esbuild/linux-mips64el": "0.27.3",
+        "@esbuild/linux-ppc64": "0.27.3",
+        "@esbuild/linux-riscv64": "0.27.3",
+        "@esbuild/linux-s390x": "0.27.3",
+        "@esbuild/linux-x64": "0.27.3",
+        "@esbuild/netbsd-arm64": "0.27.3",
+        "@esbuild/netbsd-x64": "0.27.3",
+        "@esbuild/openbsd-arm64": "0.27.3",
+        "@esbuild/openbsd-x64": "0.27.3",
+        "@esbuild/openharmony-arm64": "0.27.3",
+        "@esbuild/sunos-x64": "0.27.3",
+        "@esbuild/win32-arm64": "0.27.3",
+        "@esbuild/win32-ia32": "0.27.3",
+        "@esbuild/win32-x64": "0.27.3"
+      }
+    },
+    "node_modules/estree-walker": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmmirror.com/estree-walker/-/estree-walker-3.0.3.tgz",
+      "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/estree": "^1.0.0"
+      }
+    },
+    "node_modules/expect-type": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmmirror.com/expect-type/-/expect-type-1.4.0.tgz",
+      "integrity": "sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
+    "node_modules/fast-deep-equal": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmmirror.com/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+      "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
+      "license": "MIT"
+    },
+    "node_modules/fast-uri": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmmirror.com/fast-uri/-/fast-uri-3.1.0.tgz",
+      "integrity": "sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fastify"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fastify"
+        }
+      ],
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmmirror.com/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmmirror.com/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/get-tsconfig": {
+      "version": "4.13.6",
+      "resolved": "https://registry.npmmirror.com/get-tsconfig/-/get-tsconfig-4.13.6.tgz",
+      "integrity": "sha512-shZT/QMiSHc/YBLxxOkMtgSid5HFoauqCE3/exfsEcwg1WkeqjG+V40yBbBrsD+jW2HDXcs28xOfcbm2jI8Ddw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "resolve-pkg-maps": "^1.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/privatenumber/get-tsconfig?sponsor=1"
+      }
+    },
+    "node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmmirror.com/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "license": "MIT"
+    },
+    "node_modules/magic-string": {
+      "version": "0.30.21",
+      "resolved": "https://registry.npmmirror.com/magic-string/-/magic-string-0.30.21.tgz",
+      "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.5"
+      }
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.11",
+      "resolved": "https://registry.npmmirror.com/nanoid/-/nanoid-3.3.11.tgz",
+      "integrity": "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/obug": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmmirror.com/obug/-/obug-2.1.1.tgz",
+      "integrity": "sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==",
+      "dev": true,
+      "funding": [
+        "https://github.com/sponsors/sxzz",
+        "https://opencollective.com/debug"
+      ],
+      "license": "MIT"
+    },
+    "node_modules/pathe": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmmirror.com/pathe/-/pathe-2.0.3.tgz",
+      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmmirror.com/picocolors/-/picocolors-1.1.1.tgz",
+      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/picomatch": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmmirror.com/picomatch/-/picomatch-4.0.3.tgz",
+      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/postcss": {
+      "version": "8.5.8",
+      "resolved": "https://registry.npmmirror.com/postcss/-/postcss-8.5.8.tgz",
+      "integrity": "sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.11",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/require-from-string": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmmirror.com/require-from-string/-/require-from-string-2.0.2.tgz",
+      "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/resolve-pkg-maps": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmmirror.com/resolve-pkg-maps/-/resolve-pkg-maps-1.0.0.tgz",
+      "integrity": "sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/privatenumber/resolve-pkg-maps?sponsor=1"
+      }
+    },
+    "node_modules/rollup": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/rollup/-/rollup-4.59.0.tgz",
+      "integrity": "sha512-2oMpl67a3zCH9H79LeMcbDhXW/UmWG/y2zuqnF2jQq5uq9TbM9TVyXvA4+t+ne2IIkBdrLpAaRQAvo7YI/Yyeg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/estree": "1.0.8"
+      },
+      "bin": {
+        "rollup": "dist/bin/rollup"
+      },
+      "engines": {
+        "node": ">=18.0.0",
+        "npm": ">=8.0.0"
+      },
+      "optionalDependencies": {
+        "@rollup/rollup-android-arm-eabi": "4.59.0",
+        "@rollup/rollup-android-arm64": "4.59.0",
+        "@rollup/rollup-darwin-arm64": "4.59.0",
+        "@rollup/rollup-darwin-x64": "4.59.0",
+        "@rollup/rollup-freebsd-arm64": "4.59.0",
+        "@rollup/rollup-freebsd-x64": "4.59.0",
+        "@rollup/rollup-linux-arm-gnueabihf": "4.59.0",
+        "@rollup/rollup-linux-arm-musleabihf": "4.59.0",
+        "@rollup/rollup-linux-arm64-gnu": "4.59.0",
+        "@rollup/rollup-linux-arm64-musl": "4.59.0",
+        "@rollup/rollup-linux-loong64-gnu": "4.59.0",
+        "@rollup/rollup-linux-loong64-musl": "4.59.0",
+        "@rollup/rollup-linux-ppc64-gnu": "4.59.0",
+        "@rollup/rollup-linux-ppc64-musl": "4.59.0",
+        "@rollup/rollup-linux-riscv64-gnu": "4.59.0",
+        "@rollup/rollup-linux-riscv64-musl": "4.59.0",
+        "@rollup/rollup-linux-s390x-gnu": "4.59.0",
+        "@rollup/rollup-linux-x64-gnu": "4.59.0",
+        "@rollup/rollup-linux-x64-musl": "4.59.0",
+        "@rollup/rollup-openbsd-x64": "4.59.0",
+        "@rollup/rollup-openharmony-arm64": "4.59.0",
+        "@rollup/rollup-win32-arm64-msvc": "4.59.0",
+        "@rollup/rollup-win32-ia32-msvc": "4.59.0",
+        "@rollup/rollup-win32-x64-gnu": "4.59.0",
+        "@rollup/rollup-win32-x64-msvc": "4.59.0",
+        "fsevents": "~2.3.2"
+      }
+    },
+    "node_modules/siginfo": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmmirror.com/siginfo/-/siginfo-2.0.0.tgz",
+      "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmmirror.com/source-map-js/-/source-map-js-1.2.1.tgz",
+      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/stackback": {
+      "version": "0.0.2",
+      "resolved": "https://registry.npmmirror.com/stackback/-/stackback-0.0.2.tgz",
+      "integrity": "sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/std-env": {
+      "version": "3.10.0",
+      "resolved": "https://registry.npmmirror.com/std-env/-/std-env-3.10.0.tgz",
+      "integrity": "sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tinybench": {
+      "version": "2.9.0",
+      "resolved": "https://registry.npmmirror.com/tinybench/-/tinybench-2.9.0.tgz",
+      "integrity": "sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tinyexec": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmmirror.com/tinyexec/-/tinyexec-1.0.2.tgz",
+      "integrity": "sha512-W/KYk+NFhkmsYpuHq5JykngiOCnxeVL8v8dFnqxSD8qEEdRfXk1SDM6JzNqcERbcGYj9tMrDQBYV9cjgnunFIg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.15",
+      "resolved": "https://registry.npmmirror.com/tinyglobby/-/tinyglobby-0.2.15.tgz",
+      "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.3"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/tinyrainbow": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmmirror.com/tinyrainbow/-/tinyrainbow-3.0.3.tgz",
+      "integrity": "sha512-PSkbLUoxOFRzJYjjxHJt9xro7D+iilgMX/C9lawzVuYiIdcihh9DXmVibBe8lmcFrRi/VzlPjBxbN7rH24q8/Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/tsx": {
+      "version": "4.21.0",
+      "resolved": "https://registry.npmmirror.com/tsx/-/tsx-4.21.0.tgz",
+      "integrity": "sha512-5C1sg4USs1lfG0GFb2RLXsdpXqBSEhAaA/0kPL01wxzpMqLILNxIxIOKiILz+cdg/pLnOUxFYOR5yhHU666wbw==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "esbuild": "~0.27.0",
+        "get-tsconfig": "^4.7.5"
+      },
+      "bin": {
+        "tsx": "dist/cli.mjs"
+      },
+      "engines": {
+        "node": ">=18.0.0"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmmirror.com/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/undici-types": {
+      "version": "7.18.2",
+      "resolved": "https://registry.npmmirror.com/undici-types/-/undici-types-7.18.2.tgz",
+      "integrity": "sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/vite": {
+      "version": "7.3.1",
+      "resolved": "https://registry.npmmirror.com/vite/-/vite-7.3.1.tgz",
+      "integrity": "sha512-w+N7Hifpc3gRjZ63vYBXA56dvvRlNWRczTdmCBBa+CotUzAPf5b7YMdMR/8CQoeYE5LX3W4wj6RYTgonm1b9DA==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "esbuild": "^0.27.0",
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.3",
+        "postcss": "^8.5.6",
+        "rollup": "^4.43.0",
+        "tinyglobby": "^0.2.15"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "funding": {
+        "url": "https://github.com/vitejs/vite?sponsor=1"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      },
+      "peerDependencies": {
+        "@types/node": "^20.19.0 || >=22.12.0",
+        "jiti": ">=1.21.0",
+        "less": "^4.0.0",
+        "lightningcss": "^1.21.0",
+        "sass": "^1.70.0",
+        "sass-embedded": "^1.70.0",
+        "stylus": ">=0.54.8",
+        "sugarss": "^5.0.0",
+        "terser": "^5.16.0",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "jiti": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "lightningcss": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/vitest": {
+      "version": "4.0.18",
+      "resolved": "https://registry.npmmirror.com/vitest/-/vitest-4.0.18.tgz",
+      "integrity": "sha512-hOQuK7h0FGKgBAas7v0mSAsnvrIgAvWmRFjmzpJ7SwFHH3g1k2u37JtYwOwmEKhK6ZO3v9ggDBBm0La1LCK4uQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/expect": "4.0.18",
+        "@vitest/mocker": "4.0.18",
+        "@vitest/pretty-format": "4.0.18",
+        "@vitest/runner": "4.0.18",
+        "@vitest/snapshot": "4.0.18",
+        "@vitest/spy": "4.0.18",
+        "@vitest/utils": "4.0.18",
+        "es-module-lexer": "^1.7.0",
+        "expect-type": "^1.2.2",
+        "magic-string": "^0.30.21",
+        "obug": "^2.1.1",
+        "pathe": "^2.0.3",
+        "picomatch": "^4.0.3",
+        "std-env": "^3.10.0",
+        "tinybench": "^2.9.0",
+        "tinyexec": "^1.0.2",
+        "tinyglobby": "^0.2.15",
+        "tinyrainbow": "^3.0.3",
+        "vite": "^6.0.0 || ^7.0.0",
+        "why-is-node-running": "^2.3.0"
+      },
+      "bin": {
+        "vitest": "vitest.mjs"
+      },
+      "engines": {
+        "node": "^20.0.0 || ^22.0.0 || >=24.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "@edge-runtime/vm": "*",
+        "@opentelemetry/api": "^1.9.0",
+        "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
+        "@vitest/browser-playwright": "4.0.18",
+        "@vitest/browser-preview": "4.0.18",
+        "@vitest/browser-webdriverio": "4.0.18",
+        "@vitest/ui": "4.0.18",
+        "happy-dom": "*",
+        "jsdom": "*"
+      },
+      "peerDependenciesMeta": {
+        "@edge-runtime/vm": {
+          "optional": true
+        },
+        "@opentelemetry/api": {
+          "optional": true
+        },
+        "@types/node": {
+          "optional": true
+        },
+        "@vitest/browser-playwright": {
+          "optional": true
+        },
+        "@vitest/browser-preview": {
+          "optional": true
+        },
+        "@vitest/browser-webdriverio": {
+          "optional": true
+        },
+        "@vitest/ui": {
+          "optional": true
+        },
+        "happy-dom": {
+          "optional": true
+        },
+        "jsdom": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/why-is-node-running": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmmirror.com/why-is-node-running/-/why-is-node-running-2.3.0.tgz",
+      "integrity": "sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "siginfo": "^2.0.0",
+        "stackback": "0.0.2"
+      },
+      "bin": {
+        "why-is-node-running": "cli.js"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    }
+  }
+}
diff --git a/plugins/package.json b/plugins/package.json
new file mode 100644
index 0000000..1b75e1a
--- /dev/null
+++ b/plugins/package.json
@@ -0,0 +1,20 @@
+{
+  "name": "browser-game-plugins",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "validate:manifest": "tsx scripts/validate-manifest.ts examples/dev-game-plugin/manifest.json && tsx scripts/validate-manifest.ts examples/scum-server-plugin/manifest.json"
+  },
+  "dependencies": {
+    "ajv": "8.18.0"
+  },
+  "devDependencies": {
+    "@types/node": "25.3.3",
+    "tsx": "4.21.0",
+    "typescript": "5.9.3",
+    "vitest": "4.0.18"
+  }
+}
diff --git a/plugins/schemas/create-form.schema.json b/plugins/schemas/create-form.schema.json
new file mode 100644
index 0000000..ec6a5f0
--- /dev/null
+++ b/plugins/schemas/create-form.schema.json
@@ -0,0 +1,26 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://browser.local/schemas/plugin-create-form.schema.json",
+  "title": "PluginCreateFormSchema",
+  "type": "object",
+  "required": ["fields"],
+  "additionalProperties": false,
+  "properties": {
+    "fields": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["key", "label", "type"],
+        "additionalProperties": false,
+        "properties": {
+          "key": { "type": "string", "pattern": "^[a-zA-Z][a-zA-Z0-9_]*$" },
+          "label": { "type": "string", "minLength": 1, "maxLength": 60 },
+          "type": { "enum": ["text", "number", "boolean", "select", "path", "port"] },
+          "required": { "type": "boolean" },
+          "default": {},
+          "options": { "type": "array", "items": { "type": "string" } }
+        }
+      }
+    }
+  }
+}
diff --git a/plugins/scripts/validate-manifest.ts b/plugins/scripts/validate-manifest.ts
new file mode 100644
index 0000000..2a2e483
--- /dev/null
+++ b/plugins/scripts/validate-manifest.ts
@@ -0,0 +1,150 @@
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+import { Ajv2020, type AnySchema, type ErrorObject } from "ajv/dist/2020.js";
+
+const rootDir = fileURLToPath(new URL("..", import.meta.url));
+const manifestSchemaPath = path.join(rootDir, "manifests", "game-plugin.manifest.schema.json");
+const createFormSchemaPath = path.join(rootDir, "schemas", "create-form.schema.json");
+
+function readJson(filePath: string): unknown {
+  return JSON.parse(fs.readFileSync(filePath, "utf8"));
+}
+
+function formatErrors(prefix: string, errors: ErrorObject[] | null | undefined): string[] {
+  return (errors ?? []).map((error) => `${prefix}${error.instancePath}: ${error.message}`);
+}
+
+function unsafeFieldReason(fieldName: string): string | undefined {
+  const compact = fieldName.toLowerCase().replace(/[^a-z0-9]/g, "");
+  if (compact.includes("rawapikey") || compact.includes("apikey") || compact.includes("providerkey")) {
+    return "raw AI/provider key field is not allowed";
+  }
+  if (compact.includes("runcredential") || compact.includes("runsocket") || compact.includes("directrun")) {
+    return "direct run access field is not allowed";
+  }
+  if (compact.includes("hostpath") || compact.includes("rawpath")) {
+    return "raw host path field is not allowed";
+  }
+  return undefined;
+}
+
+function unsafeStringReasons(value: string): string[] {
+  const trimmed = value.trim();
+  const lowered = trimmed.toLowerCase();
+  if (trimmed === "") {
+    return [];
+  }
+
+  const reasons: string[] = [];
+  if (
+    lowered.startsWith("sk-") ||
+    lowered.startsWith("sk_") ||
+    lowered.includes("bearer ") ||
+    lowered.includes("api_key=") ||
+    lowered.includes("apikey=") ||
+    lowered.includes("raw api key") ||
+    lowered.includes("raw credential") ||
+    lowered.includes("provider key") ||
+    lowered.includes("ai key")
+  ) {
+    reasons.push("raw credential or AI/provider key content is not allowed");
+  }
+  if (
+    lowered.includes("direct run") ||
+    lowered.includes("run socket") ||
+    lowered.includes("run credential") ||
+    lowered.includes("run token") ||
+    lowered.includes("direct socket")
+  ) {
+    reasons.push("direct run access request is not allowed");
+  }
+  if (
+    lowered.startsWith("file://") ||
+    lowered.startsWith("\\\\") ||
+    /^[a-z]:[\\/]/i.test(trimmed) ||
+    /^\/(users|etc|var|tmp|home|root|private|volumes|opt)\//i.test(trimmed) ||
+    lowered.includes("host path") ||
+    lowered.includes("raw host path")
+  ) {
+    reasons.push("raw host path access is not allowed");
+  }
+  return reasons;
+}
+
+function scanUnsafeValues(value: unknown, location: string): string[] {
+  if (typeof value === "string") {
+    return unsafeStringReasons(value).map((reason) => `${location}: ${reason}`);
+  }
+  if (Array.isArray(value)) {
+    return value.flatMap((item, index) => scanUnsafeValues(item, `${location}[${index}]`));
+  }
+  if (typeof value === "object" && value !== null) {
+    return Object.entries(value).flatMap(([key, child]) => {
+      const keyReason = unsafeFieldReason(key);
+      const keyErrors = keyReason ? [`${location}.${key}: ${keyReason}`] : [];
+      return [...keyErrors, ...scanUnsafeValues(child, `${location}.${key}`)];
+    });
+  }
+  return [];
+}
+
+function isSafeRelativeJsonRef(value: string): boolean {
+  return /^(?!\/)(?![A-Za-z]:)(?!.*:\/\/)(?!.*\.\.)[a-zA-Z0-9_./-]+\.json$/.test(value);
+}
+
+export function validateManifestFile(manifestPath: string): string[] {
+  const absoluteManifestPath = path.resolve(rootDir, manifestPath);
+  const manifest = readJson(absoluteManifestPath);
+  const manifestDir = path.dirname(absoluteManifestPath);
+
+  const ajv = new Ajv2020({ allErrors: true });
+  const validateManifest = ajv.compile(readJson(manifestSchemaPath) as AnySchema);
+  const validateCreateForm = ajv.compile(readJson(createFormSchemaPath) as AnySchema);
+
+  const errors: string[] = [];
+  if (!validateManifest(manifest)) {
+    errors.push(...formatErrors("manifest", validateManifest.errors));
+  }
+
+  errors.push(...scanUnsafeValues(manifest, "manifest"));
+
+  if (typeof manifest === "object" && manifest !== null && "server" in manifest) {
+    const server = (manifest as { server?: { createFormSchema?: string } }).server;
+    if (server?.createFormSchema) {
+      if (!isSafeRelativeJsonRef(server.createFormSchema)) {
+        errors.push("createFormSchema: unsafe file reference");
+        return errors;
+      }
+      const createFormPath = path.resolve(manifestDir, server.createFormSchema);
+      if (!fs.existsSync(createFormPath)) {
+        errors.push(`createFormSchema: missing file ${server.createFormSchema}`);
+      } else {
+        const createForm = readJson(createFormPath);
+        if (!validateCreateForm(createForm)) {
+          errors.push(...formatErrors("createForm", validateCreateForm.errors));
+        }
+        errors.push(...scanUnsafeValues(createForm, "createForm"));
+      }
+    }
+  }
+
+  return errors;
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
+  const target = process.argv[2];
+  if (!target) {
+    console.error("usage: npm run validate:manifest -- <manifest-path>");
+    process.exit(2);
+  }
+
+  const errors = validateManifestFile(target);
+  if (errors.length > 0) {
+    console.error(errors.join("\n"));
+    process.exit(1);
+  }
+
+  console.log(`validated ${target}`);
+}
diff --git a/plugins/sdk/bridge-contract.md b/plugins/sdk/bridge-contract.md
new file mode 100644
index 0000000..1548f5d
--- /dev/null
+++ b/plugins/sdk/bridge-contract.md
@@ -0,0 +1,35 @@
+# Plugin Bridge Contract
+
+Plugins use the platform bridge for every privileged action.
+
+## Allowed Bridge Areas
+
+- `server.instances`: read current server instance context.
+- `jobs.dispatch`: request platform-authorized run jobs.
+- `logs.query`: query historical logs by server, stream, time range, cursor, or analysis window.
+- `artifacts.open`: request platform-mediated artifact download references.
+- `files.request`: request scoped file list/read/patch/replace operations through platform jobs.
+- `ai.invoke`: request platform-mediated AI assistance.
+- `theme.tokens`: read safe platform theme tokens.
+
+## Execution Envelopes
+
+Plugin pages build execution requests with `createBridgeExecutionRequest` and hand them to the host-provided bridge transport. The SDK never owns `fetch`, platform authorization headers, run sockets, or provider credentials.
+
+Execution responses use `requestId`, plugin/page/server scope, action, status, optional result refs, and optional safe errors. Use `parseBridgeExecutionResponse` before reading results so plugin code handles denied, deferred, and failed states uniformly.
+
+AI requests use `createAIInvocationRequest` with an explicit purpose, prompt, scoped context refs, and optional current config. Use `parseAIInvocationResponse` to consume recommendations and safe errors. Plugin code must not include provider API keys, provider base URLs, bearer tokens, or direct transport details in AI request payloads.
+
+Artifact open requests use `createArtifactOpenRequest` with an artifact ID that belongs to the current server/job scope. Use `parseArtifactReference` to consume the bridge result. Parsed references contain platform-owned download URLs, filename, content type, size, checksum, expiry, range support, and chunk size; they do not contain bytes or raw storage adapter locations.
+
+## Forbidden Data
+
+The bridge must not expose:
+
+- raw run credentials.
+- raw host paths.
+- AI provider API keys.
+- platform auth storage.
+- storage backend endpoints.
+- unrestricted artifact storage credentials.
+- direct storage URLs or presigned backend URLs.
diff --git a/plugins/sdk/index.ts b/plugins/sdk/index.ts
new file mode 100644
index 0000000..84cd3aa
--- /dev/null
+++ b/plugins/sdk/index.ts
@@ -0,0 +1,384 @@
+export type PluginPermission =
+  | "server.create"
+  | "server.read"
+  | "server.lifecycle"
+  | "server.files.read"
+  | "server.files.write"
+  | "server.logs.read"
+  | "server.artifacts.read"
+  | "server.artifacts.write"
+  | "ai.invoke";
+
+export type RunCapability =
+  | "process.install"
+  | "process.start"
+  | "process.stop"
+  | "process.restart"
+  | "process.status"
+  | "files.list"
+  | "files.read"
+  | "files.write"
+  | "files.patch"
+  | "logs.read"
+  | "artifacts.read"
+  | "artifacts.write"
+  | "ai.invoke";
+
+export type AIPurpose = "config.read" | "config.generate" | "config.suggest" | "logs.diagnose" | "files.suggest";
+
+export type PluginBridgeAction =
+  | "server.instances.read"
+  | "jobs.dispatch"
+  | "logs.query"
+  | "artifacts.open"
+  | "files.request"
+  | "ai.invoke";
+
+export type PluginBridgeRequestPayload = Record<string, unknown>;
+
+export type PluginBridgeRequest<TPayload extends PluginBridgeRequestPayload = PluginBridgeRequestPayload> = {
+  id: string;
+  pluginId: string;
+  routeKey: string;
+  serverInstanceId?: string;
+  action: PluginBridgeAction;
+  payload: TPayload;
+};
+
+export type PluginBridgeResponse<TResult = unknown> =
+  | {
+      id: string;
+      ok: true;
+      result: TResult;
+    }
+  | {
+      id: string;
+      ok: false;
+      error: PluginBridgeError;
+    };
+
+export interface PluginBridgeError {
+  code: "unsupported_action" | "missing_permission" | "invalid_payload" | "denied" | "permission_denied" | "unsafe_payload" | "platform_error" | "deferred";
+  message: string;
+  details?: string[];
+}
+
+export interface PluginBridgeExecutionRequest<TPayload extends Record<string, string> = Record<string, string>> {
+  requestId: string;
+  pluginId: string;
+  routeKey: string;
+  serverInstanceId?: string;
+  action: PluginBridgeAction;
+  aiPurpose?: AIPurpose;
+  payload?: TPayload;
+}
+
+export interface PluginAIInvocationRequest {
+  requestId: string;
+  pluginId: string;
+  routeKey: string;
+  serverInstanceId?: string;
+  purpose: AIPurpose;
+  prompt: string;
+  currentConfig?: string;
+  contextRefs?: Record<string, string>;
+}
+
+export interface PluginAIInvocationResponse {
+  requestId: string;
+  purpose: AIPurpose;
+  status: "ok" | "denied" | "error" | string;
+  recommendation?: string;
+  suggestedConfig?: string;
+  usage?: { model?: string; mocked?: boolean; inputTokens?: number; outputTokens?: number };
+  error?: PluginBridgeError;
+}
+
+export type PluginArtifactOpenPayload = Record<string, string> & {
+  artifactId: string;
+};
+
+export type PluginLifecycleDispatchPayload = Record<string, string> & {
+  lifecycleAction: "start" | "stop";
+  capability: "process.start" | "process.stop";
+  expectedConfigVersion: string;
+  idempotencyKey: string;
+};
+
+export interface PluginArtifactReference {
+  artifactId: string;
+  filename: string;
+  contentType: string;
+  sizeBytes: number;
+  checksum: string;
+  downloadUrl: string;
+  expiresAt: string;
+  rangeSupported: boolean;
+  chunkSizeBytes: number;
+  storageBehavior?: string;
+}
+
+export type PluginBridgeExecutionResponse<TResult extends Record<string, string> = Record<string, string>> = {
+  requestId: string;
+  pluginId: string;
+  routeKey: string;
+  serverInstanceId?: string;
+  action: PluginBridgeAction;
+  status: "ok" | "queued" | "denied" | "unsupported" | "cancelled" | "error" | string;
+  result?: TResult;
+  error?: PluginBridgeError;
+};
+
+export type PluginBridgeActionPolicy = {
+  permissions: PluginPermission[];
+  aiPurposeRequired?: boolean;
+};
+
+export const pluginBridgeActionPolicies: Record<PluginBridgeAction, PluginBridgeActionPolicy> = {
+  "server.instances.read": { permissions: ["server.read"] },
+  "jobs.dispatch": { permissions: ["server.lifecycle"] },
+  "logs.query": { permissions: ["server.logs.read"] },
+  "artifacts.open": { permissions: ["server.artifacts.read"] },
+  "files.request": { permissions: ["server.files.read"] },
+  "ai.invoke": { permissions: ["ai.invoke"], aiPurposeRequired: true }
+};
+
+export type PluginLifecycleAction = "install" | "start" | "stop" | "restart" | "status";
+
+export type GamePluginActions = Partial<Record<PluginLifecycleAction, string>> & {
+  install: string;
+  start: string;
+  stop: string;
+};
+
+export interface GamePluginPage {
+  key: string;
+  title: string;
+  path: string;
+  permissions?: PluginPermission[];
+  bridgeActions?: PluginBridgeAction[];
+}
+
+export interface GamePluginBridge {
+  actions: PluginBridgeAction[];
+}
+
+export interface GamePluginManifest {
+  id: `game.${string}`;
+  name: string;
+  description?: string;
+  version: string;
+  kind: "game-plugin";
+  tags?: string[];
+  server: {
+    type: string;
+    displayName: string;
+    supportedOS?: Array<"windows" | "linux" | "darwin">;
+    createFormSchema: string;
+  };
+  bridge?: GamePluginBridge;
+  capabilities: RunCapability[];
+  permissions: PluginPermission[];
+  actions?: GamePluginActions;
+  pages?: GamePluginPage[];
+  ai?: {
+    purposes?: AIPurpose[];
+  };
+}
+
+export interface PluginBridgeContext {
+  pluginId: string;
+  routeKey: string;
+  serverInstanceId?: string;
+  permissions: PluginPermission[];
+  aiPurposes?: AIPurpose[];
+}
+
+export function hasPluginPermission(context: PluginBridgeContext, permission: PluginPermission): boolean {
+  return context.permissions.includes(permission);
+}
+
+export function canRequestBridgeAction(
+  context: PluginBridgeContext,
+  action: PluginBridgeAction,
+  options: { aiPurpose?: AIPurpose } = {}
+): boolean {
+  const policy = pluginBridgeActionPolicies[action];
+  if (!policy.permissions.every((permission) => hasPluginPermission(context, permission))) {
+    return false;
+  }
+  if (policy.aiPurposeRequired) {
+    return typeof options.aiPurpose === "string" && (context.aiPurposes ?? []).includes(options.aiPurpose);
+  }
+  return true;
+}
+
+export function createBridgeRequest<TPayload extends PluginBridgeRequestPayload>(input: {
+  id: string;
+  context: PluginBridgeContext;
+  action: PluginBridgeAction;
+  payload: TPayload;
+}): PluginBridgeRequest<TPayload> {
+  return {
+    id: input.id,
+    pluginId: input.context.pluginId,
+    routeKey: input.context.routeKey,
+    serverInstanceId: input.context.serverInstanceId,
+    action: input.action,
+    payload: input.payload
+  };
+}
+
+export function createBridgeExecutionRequest<TPayload extends Record<string, string>>(input: {
+  requestId: string;
+  context: PluginBridgeContext;
+  action: PluginBridgeAction;
+  aiPurpose?: AIPurpose;
+  payload?: TPayload;
+}): PluginBridgeExecutionRequest<TPayload> {
+  return {
+    requestId: input.requestId,
+    pluginId: input.context.pluginId,
+    routeKey: input.context.routeKey,
+    serverInstanceId: input.context.serverInstanceId,
+    action: input.action,
+    aiPurpose: input.aiPurpose,
+    payload: input.payload
+  };
+}
+
+export function createArtifactOpenRequest(input: {
+  requestId: string;
+  context: PluginBridgeContext;
+  artifactId: string;
+}): PluginBridgeExecutionRequest<PluginArtifactOpenPayload> {
+  return createBridgeExecutionRequest({
+    requestId: input.requestId,
+    context: input.context,
+    action: "artifacts.open",
+    payload: { artifactId: input.artifactId }
+  });
+}
+
+export function createLifecycleDispatchRequest(input: {
+  requestId: string;
+  context: PluginBridgeContext;
+  action: "start" | "stop";
+  expectedConfigVersion: number;
+  idempotencyKey: string;
+}): PluginBridgeExecutionRequest<PluginLifecycleDispatchPayload> {
+  return createBridgeExecutionRequest({
+    requestId: input.requestId,
+    context: input.context,
+    action: "jobs.dispatch",
+    payload: {
+      lifecycleAction: input.action,
+      capability: input.action === "start" ? "process.start" : "process.stop",
+      expectedConfigVersion: String(input.expectedConfigVersion),
+      idempotencyKey: input.idempotencyKey
+    }
+  });
+}
+
+export function parseArtifactReference(result: Record<string, string> | undefined): PluginArtifactReference | undefined {
+  if (!result) {
+    return undefined;
+  }
+  const sizeBytes = Number(result.sizeBytes);
+  const chunkSizeBytes = Number(result.chunkSizeBytes);
+  const reference: PluginArtifactReference = {
+    artifactId: result.artifactId ?? "",
+    filename: result.filename ?? "artifact.bin",
+    contentType: result.contentType ?? "application/octet-stream",
+    sizeBytes,
+    checksum: result.checksum ?? "",
+    downloadUrl: result.downloadUrl ?? "",
+    expiresAt: result.expiresAt ?? "",
+    rangeSupported: result.rangeSupported === "true",
+    chunkSizeBytes,
+    storageBehavior: result.storageBehavior
+  };
+  if (!reference.artifactId || !Number.isFinite(sizeBytes) || sizeBytes <= 0 || !Number.isFinite(chunkSizeBytes) || chunkSizeBytes <= 0) {
+    return undefined;
+  }
+  if (!reference.downloadUrl.startsWith(`/api/v1/artifacts/${encodeURIComponent(reference.artifactId)}/content`)) {
+    return undefined;
+  }
+  for (const value of Object.values(reference)) {
+    if (typeof value === "string" && containsUnsafeReferenceContent(value)) {
+      return undefined;
+    }
+  }
+  return reference;
+}
+
+export function parseBridgeExecutionResponse<TResult extends Record<string, string>>(response: PluginBridgeExecutionResponse<TResult>): PluginBridgeExecutionResponse<TResult> {
+  const safeError = response.error ? bridgeError(response.error.code, response.error.message, response.error.details ?? []) : undefined;
+  return {
+    requestId: response.requestId,
+    pluginId: response.pluginId,
+    routeKey: response.routeKey,
+    serverInstanceId: response.serverInstanceId,
+    action: response.action,
+    status: response.status,
+    result: response.result ? { ...response.result } : undefined,
+    error: safeError
+  };
+}
+
+export function createAIInvocationRequest(input: {
+  requestId: string;
+  context: PluginBridgeContext;
+  purpose: AIPurpose;
+  prompt: string;
+  currentConfig?: string;
+  contextRefs?: Record<string, string>;
+}): PluginAIInvocationRequest {
+  return {
+    requestId: input.requestId,
+    pluginId: input.context.pluginId,
+    routeKey: input.context.routeKey,
+    serverInstanceId: input.context.serverInstanceId,
+    purpose: input.purpose,
+    prompt: input.prompt,
+    currentConfig: input.currentConfig,
+    contextRefs: input.contextRefs
+  };
+}
+
+export function parseAIInvocationResponse(response: PluginAIInvocationResponse): PluginAIInvocationResponse {
+  return {
+    requestId: response.requestId,
+    purpose: response.purpose,
+    status: response.status,
+    recommendation: response.recommendation,
+    suggestedConfig: response.suggestedConfig,
+    usage: response.usage ? { ...response.usage } : undefined,
+    error: response.error ? bridgeError(response.error.code, response.error.message, response.error.details ?? []) : undefined
+  };
+}
+
+export function bridgeError(
+  code: PluginBridgeError["code"],
+  message: string,
+  details: string[] = []
+): PluginBridgeError {
+  return { code, message, details };
+}
+
+function containsUnsafeReferenceContent(value: string): boolean {
+  const lowered = value.trim().toLowerCase();
+  return (
+    lowered.includes("/users/") ||
+    lowered.includes("/private/") ||
+    lowered.includes("unix://") ||
+    lowered.includes("tcp://") ||
+    lowered.includes("bearer ") ||
+    lowered.includes("password=") ||
+    lowered.includes("api_key=") ||
+    lowered.includes("apikey=") ||
+    lowered.includes("storage://") ||
+    lowered.includes("file://") ||
+    lowered.startsWith("sk-")
+  );
+}
diff --git a/plugins/tests/fixtures/create-form.invalid.json b/plugins/tests/fixtures/create-form.invalid.json
new file mode 100644
index 0000000..ed73a1a
--- /dev/null
+++ b/plugins/tests/fixtures/create-form.invalid.json
@@ -0,0 +1,9 @@
+{
+  "fields": [
+    {
+      "key": "serverName",
+      "type": "text",
+      "required": true
+    }
+  ]
+}
diff --git a/plugins/tests/fixtures/create-form.valid.json b/plugins/tests/fixtures/create-form.valid.json
new file mode 100644
index 0000000..5469460
--- /dev/null
+++ b/plugins/tests/fixtures/create-form.valid.json
@@ -0,0 +1,10 @@
+{
+  "fields": [
+    {
+      "key": "serverName",
+      "label": "Server name",
+      "type": "text",
+      "required": true
+    }
+  ]
+}
diff --git a/plugins/tests/fixtures/invalid-create-form-manifest.json b/plugins/tests/fixtures/invalid-create-form-manifest.json
new file mode 100644
index 0000000..3ebb053
--- /dev/null
+++ b/plugins/tests/fixtures/invalid-create-form-manifest.json
@@ -0,0 +1,20 @@
+{
+  "$schema": "../../manifests/game-plugin.manifest.schema.json",
+  "id": "game.invalid-form",
+  "name": "Invalid Form Fixture",
+  "description": "Fixture with a create form schema violation.",
+  "version": "0.1.0",
+  "kind": "game-plugin",
+  "server": {
+    "type": "invalid-form",
+    "displayName": "Invalid Form Fixture",
+    "createFormSchema": "create-form.invalid.json"
+  },
+  "capabilities": ["process.start", "process.stop", "logs.read"],
+  "permissions": ["server.read", "server.lifecycle", "server.logs.read"],
+  "actions": {
+    "install": "actions/install.json",
+    "start": "actions/start.json",
+    "stop": "actions/stop.json"
+  }
+}
diff --git a/plugins/tests/fixtures/unsafe-manifest.json b/plugins/tests/fixtures/unsafe-manifest.json
new file mode 100644
index 0000000..9a1e653
--- /dev/null
+++ b/plugins/tests/fixtures/unsafe-manifest.json
@@ -0,0 +1,23 @@
+{
+  "$schema": "../../manifests/game-plugin.manifest.schema.json",
+  "id": "game.unsafe",
+  "name": "Unsafe Fixture",
+  "description": "Requests direct run socket access and raw AI key material.",
+  "version": "0.1.0",
+  "kind": "game-plugin",
+  "server": {
+    "type": "unsafe",
+    "displayName": "Unsafe Fixture",
+    "createFormSchema": "create-form.valid.json"
+  },
+  "capabilities": ["process.start", "process.stop", "logs.read", "ai.invoke"],
+  "permissions": ["server.read", "server.lifecycle", "server.logs.read", "ai.invoke"],
+  "actions": {
+    "install": "actions/install.json",
+    "start": "actions/start.json",
+    "stop": "actions/stop.json"
+  },
+  "ai": {
+    "purposes": ["logs.diagnose"]
+  }
+}
diff --git a/plugins/tests/manifest-validation.test.ts b/plugins/tests/manifest-validation.test.ts
new file mode 100644
index 0000000..52f63b3
--- /dev/null
+++ b/plugins/tests/manifest-validation.test.ts
@@ -0,0 +1,269 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  bridgeError,
+  canRequestBridgeAction,
+  createAIInvocationRequest,
+  createArtifactOpenRequest,
+  createBridgeExecutionRequest,
+  createLifecycleDispatchRequest,
+  createBridgeRequest,
+  hasPluginPermission,
+  parseArtifactReference,
+  parseBridgeExecutionResponse,
+  parseAIInvocationResponse,
+  type PluginBridgeContext
+} from "../sdk/index.js";
+import { validateManifestFile } from "../scripts/validate-manifest.js";
+
+describe("plugin manifest validation", () => {
+  it("accepts the development example manifest", () => {
+    expect(validateManifestFile("examples/dev-game-plugin/manifest.json")).toEqual([]);
+  });
+
+  it("accepts the SCUM server plugin manifest", () => {
+    expect(validateManifestFile("examples/scum-server-plugin/manifest.json")).toEqual([]);
+  });
+
+  it("rejects a manifest with an invalid create form schema", () => {
+    const errors = validateManifestFile("tests/fixtures/invalid-create-form-manifest.json");
+
+    expect(errors.some((error) => error.includes("createForm") && error.includes("label"))).toBe(true);
+  });
+
+  it("rejects unsafe direct run and raw AI key requests", () => {
+    const errors = validateManifestFile("tests/fixtures/unsafe-manifest.json");
+
+    expect(errors.some((error) => error.includes("direct run access"))).toBe(true);
+    expect(errors.some((error) => error.includes("raw credential or AI/provider key"))).toBe(true);
+  });
+});
+
+describe("plugin SDK", () => {
+  it("checks declared bridge permissions", () => {
+    const context: PluginBridgeContext = {
+      pluginId: "game.example",
+      routeKey: "logs",
+      permissions: ["server.read", "server.logs.read", "server.artifacts.read"]
+    };
+
+    expect(hasPluginPermission(context, "server.logs.read")).toBe(true);
+    expect(hasPluginPermission(context, "server.artifacts.read")).toBe(true);
+    expect(hasPluginPermission(context, "ai.invoke")).toBe(false);
+  });
+
+  it("builds typed bridge request envelopes without owning transport", () => {
+    const context: PluginBridgeContext = {
+      pluginId: "game.example",
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      permissions: ["server.read", "server.logs.read"]
+    };
+
+    const request = createBridgeRequest({
+      id: "request-1",
+      context,
+      action: "logs.query",
+      payload: { streamKey: "stdout", limit: 100 }
+    });
+
+    expect(request).toEqual({
+      id: "request-1",
+      pluginId: "game.example",
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      action: "logs.query",
+      payload: { streamKey: "stdout", limit: 100 }
+    });
+  });
+
+  it("checks bridge action permissions and AI purposes locally", () => {
+    const context: PluginBridgeContext = {
+      pluginId: "game.example",
+      routeKey: "logs",
+      permissions: ["server.read", "server.logs.read", "ai.invoke"],
+      aiPurposes: ["logs.diagnose"]
+    };
+
+    expect(canRequestBridgeAction(context, "logs.query")).toBe(true);
+    expect(canRequestBridgeAction(context, "files.request")).toBe(false);
+    expect(canRequestBridgeAction(context, "ai.invoke", { aiPurpose: "logs.diagnose" })).toBe(true);
+    expect(canRequestBridgeAction(context, "ai.invoke", { aiPurpose: "config.suggest" })).toBe(false);
+  });
+
+  it("returns safe bridge errors without credential or transport fields", () => {
+    const error = bridgeError("missing_permission", "Permission is required", ["server.files.read"]);
+
+    expect(error).toEqual({
+      code: "missing_permission",
+      message: "Permission is required",
+      details: ["server.files.read"]
+    });
+    expect(error).not.toHaveProperty("apiKey");
+    expect(error).not.toHaveProperty("runSocket");
+    expect(error).not.toHaveProperty("hostPath");
+  });
+
+  it("builds and parses execution envelopes without owning transport", () => {
+    const context: PluginBridgeContext = {
+      pluginId: "game.example",
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      permissions: ["server.read", "server.logs.read"]
+    };
+
+    const request = createBridgeExecutionRequest({
+      requestId: "exec-1",
+      context,
+      action: "logs.query",
+      payload: { logStreamId: "log-1", limit: "100" }
+    });
+    expect(request).toEqual({
+      requestId: "exec-1",
+      pluginId: "game.example",
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      action: "logs.query",
+      aiPurpose: undefined,
+      payload: { logStreamId: "log-1", limit: "100" }
+    });
+    expect(request).not.toHaveProperty("fetch");
+    expect(request).not.toHaveProperty("authorization");
+
+    const parsed = parseBridgeExecutionResponse({
+      requestId: "exec-1",
+      pluginId: "game.example",
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      action: "logs.query",
+      status: "ok",
+      result: { entryCount: "0" }
+    });
+    expect(parsed).toMatchObject({ status: "ok", result: { entryCount: "0" } });
+    expect(parsed).not.toHaveProperty("apiKey");
+    expect(parsed).not.toHaveProperty("runSocket");
+  });
+
+  it("builds mediated AI requests and parses redacted responses", () => {
+    const context: PluginBridgeContext = {
+      pluginId: "game.example",
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      permissions: ["ai.invoke"],
+      aiPurposes: ["logs.diagnose"]
+    };
+
+    const request = createAIInvocationRequest({
+      requestId: "ai-1",
+      context,
+      purpose: "logs.diagnose",
+      prompt: "Summarize warnings",
+      contextRefs: { server: "server://server-1" }
+    });
+    expect(request).toMatchObject({ pluginId: "game.example", purpose: "logs.diagnose", prompt: "Summarize warnings" });
+    expect(request).not.toHaveProperty("apiKeyRef");
+    expect(request).not.toHaveProperty("providerBaseUrl");
+
+    const parsed = parseAIInvocationResponse({
+      requestId: "ai-1",
+      purpose: "logs.diagnose",
+      status: "ok",
+      recommendation: "Review the warning trend.",
+      usage: { model: "mock", mocked: true, inputTokens: 5, outputTokens: 6 }
+    });
+    expect(parsed).toMatchObject({ status: "ok", usage: { mocked: true } });
+    expect(JSON.stringify(parsed)).not.toContain("sk-");
+    expect(JSON.stringify(parsed)).not.toContain("apiKeyRef");
+  });
+
+  it("builds artifact open envelopes and parses safe platform references", () => {
+    const context: PluginBridgeContext = {
+      pluginId: "game.example",
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      permissions: ["server.artifacts.read"]
+    };
+
+    expect(canRequestBridgeAction(context, "artifacts.open")).toBe(true);
+    expect(
+      createArtifactOpenRequest({ requestId: "artifact-open-1", context, artifactId: "artifact-1" })
+    ).toEqual({
+      requestId: "artifact-open-1",
+      pluginId: "game.example",
+      routeKey: "logs",
+      serverInstanceId: "server-1",
+      action: "artifacts.open",
+      aiPurpose: undefined,
+      payload: { artifactId: "artifact-1" }
+    });
+
+    const reference = parseArtifactReference({
+      artifactId: "artifact-1",
+      filename: "artifact-1.bin",
+      contentType: "application/octet-stream",
+      sizeBytes: "64",
+      checksum: "sha256:abc",
+      downloadUrl: "/api/v1/artifacts/artifact-1/content",
+      expiresAt: "2026-07-03T00:15:00Z",
+      rangeSupported: "true",
+      chunkSizeBytes: "1048576",
+      storageBehavior: "platform-memory-transfer-session"
+    });
+    expect(reference).toMatchObject({ artifactId: "artifact-1", rangeSupported: true });
+    expect(JSON.stringify(reference)).not.toContain("/Users/");
+    expect(JSON.stringify(reference)).not.toContain("storage://");
+    expect(JSON.stringify(reference)).not.toContain("Bearer ");
+
+    expect(
+      parseArtifactReference({
+        artifactId: "artifact-1",
+        filename: "artifact.bin",
+        contentType: "application/octet-stream",
+        sizeBytes: "64",
+        checksum: "sha256:abc",
+        downloadUrl: "storage://bucket/artifact-1",
+        expiresAt: "2026-07-03T00:15:00Z",
+        rangeSupported: "true",
+        chunkSizeBytes: "1048576"
+      })
+    ).toBeUndefined();
+  });
+
+  it("builds lifecycle dispatch envelopes without direct run transport", () => {
+    const context: PluginBridgeContext = {
+      pluginId: "game.example",
+      routeKey: "overview",
+      serverInstanceId: "server-1",
+      permissions: ["server.lifecycle"]
+    };
+
+    expect(canRequestBridgeAction(context, "jobs.dispatch")).toBe(true);
+    const request = createLifecycleDispatchRequest({
+      requestId: "lifecycle-start-1",
+      context,
+      action: "start",
+      expectedConfigVersion: 2,
+      idempotencyKey: "idem-lifecycle-start"
+    });
+
+    expect(request).toEqual({
+      requestId: "lifecycle-start-1",
+      pluginId: "game.example",
+      routeKey: "overview",
+      serverInstanceId: "server-1",
+      action: "jobs.dispatch",
+      aiPurpose: undefined,
+      payload: {
+        lifecycleAction: "start",
+        capability: "process.start",
+        expectedConfigVersion: "2",
+        idempotencyKey: "idem-lifecycle-start"
+      }
+    });
+    expect(JSON.stringify(request)).not.toContain("http://");
+    expect(JSON.stringify(request)).not.toContain("unix://");
+    expect(JSON.stringify(request)).not.toContain("/Users/");
+    expect(JSON.stringify(request)).not.toContain("Bearer ");
+    expect(JSON.stringify(request)).not.toContain("sk-");
+  });
+});
diff --git a/plugins/tsconfig.json b/plugins/tsconfig.json
new file mode 100644
index 0000000..6326f37
--- /dev/null
+++ b/plugins/tsconfig.json
@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "strict": true,
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "skipLibCheck": true,
+    "types": ["node"]
+  },
+  "include": [
+    "sdk/**/*.ts",
+    "scripts/**/*.ts",
+    "tests/**/*.ts"
+  ]
+}
diff --git a/run/.env.example b/run/.env.example
new file mode 100644
index 0000000..a9644f2
--- /dev/null
+++ b/run/.env.example
@@ -0,0 +1,13 @@
+RUN_MODE=worker
+RUN_PLATFORM_URL=http://127.0.0.1:8080
+RUN_ENDPOINT_ID=run-local
+RUN_DISPLAY_NAME=Local Run
+RUN_VERSION=0.1.0
+RUN_REGISTRATION_TOKEN=local-registration
+RUN_WORKSPACE_ROOT=.run-workspace
+RUN_SPOOL_ROOT=.run-workspace/spool
+RUN_MAX_JOBS=1
+RUN_HEARTBEAT_INTERVAL_MS=15000
+RUN_POLL_INTERVAL_MS=2000
+RUN_RETRY_BACKOFF_MS=1000
+
diff --git a/run/AGENTS.md b/run/AGENTS.md
new file mode 100644
index 0000000..20672be
--- /dev/null
+++ b/run/AGENTS.md
@@ -0,0 +1,23 @@
+# AGENTS.md for run
+
+This file applies to `run/`.
+
+## Channel Rules
+
+Do not rebuild the old all-in-one WebSocket model. Keep these workloads separate:
+
+- Control: hello, heartbeat, version, capabilities, capacity.
+- Job: claim, ack, progress, result, cancel, reconcile.
+- Logs: local spool, batch upload, sequence acknowledgement, retry.
+- Artifacts: chunks, checksums, resume, throttling.
+- Game client bridge: optional in-game command/snapshot channel.
+
+Artifact transfer must not block control heartbeats, job result reporting, or log upload.
+
+## Structure Rules
+
+Protocol structs live in `protocol/`. Local runtime types live in `runtime/` or `domain/`. Shared helpers live in `shared/` only when needed by multiple packages.
+
+## Safety Rules
+
+Run must enforce scoped paths and never expose raw host paths, local secrets, or unrestricted command execution to platform_web or plugins.
diff --git a/run/Dockerfile b/run/Dockerfile
new file mode 100644
index 0000000..47e4824
--- /dev/null
+++ b/run/Dockerfile
@@ -0,0 +1,29 @@
+# syntax=docker/dockerfile:1
+
+FROM golang:1.25.1-alpine AS build
+WORKDIR /src
+COPY run/go.mod ./
+RUN go mod download
+COPY run/ ./
+RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -o /out/run ./cmd/run
+
+FROM alpine:3.21
+RUN addgroup -S run && adduser -S run -G run
+WORKDIR /app
+COPY --from=build /out/run /app/run
+RUN mkdir -p /data/run/workspace /data/run/spool && chown -R run:run /data/run
+USER run
+ENV RUN_MODE=worker \
+    RUN_PLATFORM_URL=http://platform:8080 \
+    RUN_ENDPOINT_ID=run-docker \
+    RUN_DISPLAY_NAME="Docker Run" \
+    RUN_VERSION=0.1.0 \
+    RUN_REGISTRATION_TOKEN=local-registration \
+    RUN_WORKSPACE_ROOT=/data/run/workspace \
+    RUN_SPOOL_ROOT=/data/run/spool \
+    RUN_MAX_JOBS=1 \
+    RUN_HEARTBEAT_INTERVAL_MS=15000 \
+    RUN_POLL_INTERVAL_MS=2000 \
+    RUN_RETRY_BACKOFF_MS=1000
+ENTRYPOINT ["/app/run"]
+
diff --git a/run/README.md b/run/README.md
new file mode 100644
index 0000000..d5236f9
--- /dev/null
+++ b/run/README.md
@@ -0,0 +1,66 @@
+# run
+
+Machine-side executor for scoped server operations.
+
+## Responsibilities
+
+- Register with platform and report heartbeat, version, capabilities, and capacity.
+- Claim and execute jobs for server lifecycle, file/config work, backups, updates, and bounded database or command work.
+- Collect server logs into local spool and upload acknowledged batches.
+- Transfer artifacts with chunking, checksums, resume, throttling, and low priority.
+- Optionally coordinate with a game client bridge when a specific game requires in-game commands or snapshots.
+
+## Required Directory Plan
+
+Implementation should use dedicated directories for:
+
+- `api/`: platform-facing HTTP/gRPC client adapters.
+- `protocol/`: control, job, log, artifact, and game-client bridge DTOs.
+- `domain/`: executor domain types.
+- `runtime/`: local execution and server process orchestration.
+- `spool/`: local durable log/job/artifact queues.
+- `artifact/`: chunk transfer implementation.
+- `logingest/`: log collectors and uploaders.
+- `config/`: configuration structures and loading.
+- `shared/`: small shared helpers.
+
+Logs and artifacts must have separate queues and priority controls.
+
+## Development Baseline
+
+Tooling:
+
+- Go 1.25.1.
+- Module: `browser.local/run`.
+
+Commands:
+
+```bash
+go test ./...
+go run ./cmd/run
+```
+
+Runtime configuration:
+
+- `RUN_MODE`: local mode, default `smoke`.
+- `RUN_PLATFORM_URL`: platform base URL, default `http://127.0.0.1:8080`.
+- `RUN_ENDPOINT_ID`, `RUN_DISPLAY_NAME`, `RUN_VERSION`, `RUN_REGISTRATION_TOKEN`: worker identity and registration metadata.
+- `RUN_WORKSPACE_ROOT`, `RUN_SPOOL_ROOT`: scoped local server workspace and separate local log/artifact queues.
+- `RUN_MAX_JOBS`, `RUN_HEARTBEAT_INTERVAL_MS`, `RUN_POLL_INTERVAL_MS`, `RUN_RETRY_BACKOFF_MS`: worker capacity and scheduling controls.
+
+For local direct debugging, copy `run/.env.example` to `run/.env`, edit the values, and run:
+
+```bash
+set -a
+source .env
+set +a
+go run ./cmd/run
+```
+
+Use `RUN_MODE=worker` when you want the executor to register, heartbeat, claim jobs, and execute lifecycle templates. Use `RUN_MODE=smoke` for a one-shot config summary.
+
+In Docker, `RUN_PLATFORM_URL` must be `http://platform:8080` because `platform` is the compose service name. Locally, keep it as `http://127.0.0.1:8080`.
+
+Current executable behavior includes smoke mode plus worker mode. Worker mode registers with platform, sends lightweight heartbeat metadata, claims lifecycle jobs, acknowledges leases, reports bounded progress, executes scoped `process.install`, `process.start`, and `process.stop` command templates inside per-server workspaces, polls cancellation, submits terminal results, and reconciles active jobs.
+
+Lifecycle templates are JSON files addressed by logical keys under the server workspace. They resolve to direct executable/argument vectors, not shell strings. Absolute paths, parent traversal, raw credentials, direct sockets, shell launchers, unsafe environment keys, and unsafe output are rejected or redacted. Process stdout/stderr is written to the log spool, and lifecycle result metadata is queued through artifact hooks so control heartbeat and job result submission stay independent from log and artifact work.
diff --git a/run/api/artifact_client_test.go b/run/api/artifact_client_test.go
new file mode 100644
index 0000000..a251ed7
--- /dev/null
+++ b/run/api/artifact_client_test.go
@@ -0,0 +1,154 @@
+package api
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"browser.local/run/protocol"
+)
+
+func TestPlatformClientArtifactMethodsPostJSONAndDecodeResponses(t *testing.T) {
+	seen := map[string]bool{}
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		seen[r.URL.Path] = true
+		switch r.URL.Path {
+		case "/api/v1/run/artifacts/open":
+			var request protocol.ArtifactTransferOpenRequest
+			decodeTestRequest(t, r, &request)
+			if request.ArtifactID != "artifact-1" || request.ChunkSizeBytes != 8 {
+				t.Fatalf("unexpected artifact open request: %+v", request)
+			}
+			writeTestJSON(t, w, validArtifactOpenResponse())
+		case "/api/v1/run/artifacts/chunks":
+			var request protocol.ArtifactChunkUploadRequest
+			decodeTestRequest(t, r, &request)
+			if request.TransferID != "transfer-1" || request.ChunkIndex != 0 || string(request.Payload) != "payload" {
+				t.Fatalf("unexpected artifact chunk request: %+v", request)
+			}
+			writeTestJSON(t, w, protocol.ArtifactChunkUploadResponse{Accepted: true, TransferID: "transfer-1", ArtifactID: "artifact-1", ChunkIndex: 0, ReceivedChunkIndexes: []int{0}, NextMissingChunkIndex: 1, ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/artifacts/status":
+			var request protocol.ArtifactTransferStatusRequest
+			decodeTestRequest(t, r, &request)
+			if request.TransferID != "transfer-1" {
+				t.Fatalf("unexpected artifact status request: %+v", request)
+			}
+			writeTestJSON(t, w, protocol.ArtifactTransferStatusResponse{Accepted: true, TransferID: "transfer-1", ArtifactID: "artifact-1", Direction: "upload", TotalChunks: 2, ChunkSizeBytes: 8, ReceivedChunkIndexes: []int{0}, NextMissingChunkIndex: 1, ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/artifacts/complete":
+			var request protocol.ArtifactTransferCompleteRequest
+			decodeTestRequest(t, r, &request)
+			if request.Checksum == "" || request.SizeBytes != 7 {
+				t.Fatalf("unexpected artifact complete request: %+v", request)
+			}
+			response := protocol.ArtifactTransferCompleteResponse{Accepted: true, TransferID: "transfer-1", Artifact: validArtifactMetadata("available"), Completed: true, ServerTime: fixedClientTestTime()}
+			writeTestJSON(t, w, response)
+		default:
+			t.Fatalf("unexpected request path %s", r.URL.Path)
+		}
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	ctx := context.Background()
+	open, err := client.OpenArtifactTransfer(ctx, validClientArtifactOpen())
+	if err != nil || !open.Accepted || open.TransferID != "transfer-1" {
+		t.Fatalf("open artifact response=%+v err=%v", open, err)
+	}
+	chunk, err := client.UploadArtifactChunk(ctx, validClientArtifactChunk())
+	if err != nil || chunk.NextMissingChunkIndex != 1 {
+		t.Fatalf("upload artifact chunk response=%+v err=%v", chunk, err)
+	}
+	status, err := client.QueryArtifactTransferStatus(ctx, validClientArtifactStatus())
+	if err != nil || len(status.ReceivedChunkIndexes) != 1 {
+		t.Fatalf("artifact status response=%+v err=%v", status, err)
+	}
+	complete, err := client.CompleteArtifactTransfer(ctx, validClientArtifactComplete())
+	if err != nil || !complete.Completed || complete.Artifact.State != "available" {
+		t.Fatalf("complete artifact response=%+v err=%v", complete, err)
+	}
+
+	for _, path := range []string{"/api/v1/run/artifacts/open", "/api/v1/run/artifacts/chunks", "/api/v1/run/artifacts/status", "/api/v1/run/artifacts/complete"} {
+		if !seen[path] {
+			t.Fatalf("expected request to %s", path)
+		}
+	}
+}
+
+func TestPlatformClientArtifactMethodReturnsErrorForPlatformFailure(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusBadRequest)
+		_, _ = w.Write([]byte(`{"code":"validation_failed"}`))
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	if _, err := client.OpenArtifactTransfer(context.Background(), validClientArtifactOpen()); err == nil {
+		t.Fatal("expected platform error")
+	}
+}
+
+func TestArtifactChunkPayloadUsesJSONBase64Encoding(t *testing.T) {
+	encoded, err := json.Marshal(validClientArtifactChunk())
+	if err != nil {
+		t.Fatalf("marshal artifact chunk: %v", err)
+	}
+	if !json.Valid(encoded) || !containsJSONPayloadField(encoded) {
+		t.Fatalf("expected JSON encoded payload field, got %s", string(encoded))
+	}
+}
+
+func validClientArtifactOpen() protocol.ArtifactTransferOpenRequest {
+	return protocol.ArtifactTransferOpenRequest{
+		RunEndpointID:  "run-local",
+		SessionToken:   "session-token",
+		ArtifactID:     "artifact-1",
+		Direction:      "upload",
+		OwnerKind:      "job",
+		OwnerID:        "job-1",
+		SizeBytes:      7,
+		ChunkSizeBytes: 8,
+		Checksum:       validSHA256Checksum(),
+		IdempotencyKey: "artifact-upload-1",
+	}
+}
+
+func validClientArtifactChunk() protocol.ArtifactChunkUploadRequest {
+	return protocol.ArtifactChunkUploadRequest{RunEndpointID: "run-local", SessionToken: "session-token", TransferID: "transfer-1", ArtifactID: "artifact-1", ChunkIndex: 0, Offset: 0, SizeBytes: 7, Checksum: validSHA256Checksum(), Payload: []byte("payload")}
+}
+
+func validClientArtifactStatus() protocol.ArtifactTransferStatusRequest {
+	return protocol.ArtifactTransferStatusRequest{RunEndpointID: "run-local", SessionToken: "session-token", TransferID: "transfer-1", ArtifactID: "artifact-1"}
+}
+
+func validClientArtifactComplete() protocol.ArtifactTransferCompleteRequest {
+	return protocol.ArtifactTransferCompleteRequest{RunEndpointID: "run-local", SessionToken: "session-token", TransferID: "transfer-1", ArtifactID: "artifact-1", Checksum: validSHA256Checksum(), SizeBytes: 7}
+}
+
+func validArtifactOpenResponse() protocol.ArtifactTransferOpenResponse {
+	return protocol.ArtifactTransferOpenResponse{Accepted: true, TransferID: "transfer-1", Direction: "upload", Artifact: validArtifactMetadata("uploading"), TotalChunks: 2, ChunkSizeBytes: 8, NextMissingChunkIndex: 0, ServerTime: fixedClientTestTime()}
+}
+
+func validArtifactMetadata(state string) protocol.ArtifactMetadata {
+	return protocol.ArtifactMetadata{ID: "artifact-1", OwnerKind: "job", OwnerID: "job-1", SizeBytes: 7, Checksum: validSHA256Checksum(), State: state, CreatedAt: fixedClientTestTime(), UpdatedAt: fixedClientTestTime()}
+}
+
+func validSHA256Checksum() string {
+	return "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
+}
+
+func containsJSONPayloadField(encoded []byte) bool {
+	var body map[string]any
+	if err := json.Unmarshal(encoded, &body); err != nil {
+		return false
+	}
+	_, exists := body["payload"]
+	return exists
+}
diff --git a/run/api/channel_isolation_test.go b/run/api/channel_isolation_test.go
new file mode 100644
index 0000000..91e6268
--- /dev/null
+++ b/run/api/channel_isolation_test.go
@@ -0,0 +1,105 @@
+package api
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+	"time"
+
+	"browser.local/run/protocol"
+)
+
+func TestPlatformClientLightweightChannelsCompleteWhileArtifactChunkIsBlocked(t *testing.T) {
+	artifactStarted := make(chan struct{})
+	releaseArtifact := make(chan struct{})
+	artifactDone := make(chan struct{})
+
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		switch r.URL.Path {
+		case "/api/v1/run/artifacts/chunks":
+			var request protocol.ArtifactChunkUploadRequest
+			decodeTestRequest(t, r, &request)
+			if request.ChunkIndex != 0 || len(request.Payload) == 0 {
+				t.Fatalf("unexpected artifact payload: %+v", request)
+			}
+			close(artifactStarted)
+			<-releaseArtifact
+			writeTestJSON(t, w, protocol.ArtifactChunkUploadResponse{Accepted: true, TransferID: request.TransferID, ArtifactID: request.ArtifactID, ChunkIndex: request.ChunkIndex, ReceivedChunkIndexes: []int{0}, NextMissingChunkIndex: 1, ServerTime: fixedClientTestTime()})
+			close(artifactDone)
+		case "/api/v1/run/control/heartbeat":
+			var request protocol.RunHeartbeatRequest
+			decodeTestRequest(t, r, &request)
+			writeTestJSON(t, w, protocol.RunHeartbeatResponse{Accepted: true, RunEndpointID: request.RunEndpointID, NextHeartbeatSeconds: 15, ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/jobs/result":
+			var request protocol.RunJobResultRequest
+			decodeTestRequest(t, r, &request)
+			encoded, _ := json.Marshal(request)
+			for _, forbidden := range []string{"payload", "entries", "/Users/", "unix://", "tcp://", "Bearer ", "sk-", "password="} {
+				if strings.Contains(string(encoded), forbidden) {
+					t.Fatalf("job result carried forbidden transfer content %q: %s", forbidden, string(encoded))
+				}
+			}
+			job := validRunJobAssignment()
+			job.State = request.State
+			job.ResultRef = request.ResultRef
+			writeTestJSON(t, w, protocol.RunJobResultResponse{Accepted: true, Job: job, ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/logs/batches":
+			var request protocol.LogBatchIngestRequest
+			decodeTestRequest(t, r, &request)
+			if len(request.Entries) != 1 || request.FirstSeq != 1 || request.LastSeq != 1 {
+				t.Fatalf("unexpected log batch: %+v", request)
+			}
+			writeTestJSON(t, w, protocol.LogBatchIngestResponse{Accepted: true, LogStreamID: request.LogStreamID, AcceptedFrom: 1, AcceptedTo: 1, LatestSeq: 1, ServerTime: fixedClientTestTime()})
+		default:
+			t.Fatalf("unexpected request path %s", r.URL.Path)
+		}
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+
+	errCh := make(chan error, 1)
+	go func() {
+		_, err := client.UploadArtifactChunk(context.Background(), validClientArtifactChunk())
+		errCh <- err
+	}()
+
+	select {
+	case <-artifactStarted:
+	case <-time.After(time.Second):
+		t.Fatal("artifact request did not start")
+	}
+
+	lightCtx, cancel := context.WithTimeout(context.Background(), time.Second)
+	defer cancel()
+	if _, err := client.Heartbeat(lightCtx, validRunHeartbeatRequest("session-token")); err != nil {
+		t.Fatalf("heartbeat should not wait for artifact chunk: %v", err)
+	}
+	if _, err := client.CompleteJob(lightCtx, validRunJobResultRequest()); err != nil {
+		t.Fatalf("job result should not wait for artifact chunk: %v", err)
+	}
+	if _, err := client.IngestLogBatch(lightCtx, validClientLogBatch()); err != nil {
+		t.Fatalf("log ingest should not wait for artifact chunk: %v", err)
+	}
+
+	select {
+	case <-artifactDone:
+		t.Fatal("artifact chunk completed before release")
+	default:
+	}
+	close(releaseArtifact)
+	select {
+	case err := <-errCh:
+		if err != nil {
+			t.Fatalf("artifact chunk upload: %v", err)
+		}
+	case <-time.After(time.Second):
+		t.Fatal("artifact chunk did not finish after release")
+	}
+}
diff --git a/run/api/job_client_test.go b/run/api/job_client_test.go
new file mode 100644
index 0000000..3c5937d
--- /dev/null
+++ b/run/api/job_client_test.go
@@ -0,0 +1,234 @@
+package api
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	"browser.local/run/protocol"
+)
+
+func TestPlatformClientJobMethodsPostJSONAndDecodeResponses(t *testing.T) {
+	seen := map[string]bool{}
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		seen[r.URL.Path] = true
+		switch r.URL.Path {
+		case "/api/v1/run/jobs/claim":
+			var request protocol.RunJobClaimRequest
+			decodeTestRequest(t, r, &request)
+			if request.RunEndpointID != "run-local" || request.SessionToken != "session-token" {
+				t.Fatalf("unexpected claim request: %+v", request)
+			}
+			writeTestJSON(t, w, validRunJobClaimResponse())
+		case "/api/v1/run/jobs/ack":
+			var request protocol.RunJobAckRequest
+			decodeTestRequest(t, r, &request)
+			if request.JobID != "job-1" || request.LeaseToken != "lease-1" {
+				t.Fatalf("unexpected ack request: %+v", request)
+			}
+			writeTestJSON(t, w, protocol.RunJobAckResponse{Accepted: true, Job: validRunJobAssignment(), ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/jobs/progress":
+			var request protocol.RunJobProgressRequest
+			decodeTestRequest(t, r, &request)
+			if request.Progress.Percent != 40 {
+				t.Fatalf("unexpected progress request: %+v", request)
+			}
+			assignment := validRunJobAssignment()
+			assignment.Progress.Percent = 40
+			writeTestJSON(t, w, protocol.RunJobProgressResponse{Accepted: true, Job: assignment, ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/jobs/result":
+			var request protocol.RunJobResultRequest
+			decodeTestRequest(t, r, &request)
+			if request.State != "succeeded" || request.ResultRef == "" {
+				t.Fatalf("unexpected result request: %+v", request)
+			}
+			assignment := validRunJobAssignment()
+			assignment.State = "succeeded"
+			assignment.ResultRef = request.ResultRef
+			writeTestJSON(t, w, protocol.RunJobResultResponse{Accepted: true, Job: assignment, ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/jobs/cancel":
+			var request protocol.RunJobCancelPollRequest
+			decodeTestRequest(t, r, &request)
+			if request.JobID != "job-1" {
+				t.Fatalf("unexpected cancel request: %+v", request)
+			}
+			writeTestJSON(t, w, protocol.RunJobCancelPollResponse{Accepted: true, RunEndpointID: "run-local", HasCancel: true, JobID: "job-1", Reason: "stop", ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/jobs/reconcile":
+			var request protocol.RunJobReconcileRequest
+			decodeTestRequest(t, r, &request)
+			if len(request.ActiveJobIDs) != 1 || request.ActiveJobIDs[0] != "job-1" {
+				t.Fatalf("unexpected reconcile request: %+v", request)
+			}
+			writeTestJSON(t, w, protocol.RunJobReconcileResponse{Accepted: true, RunEndpointID: "run-local", ActiveJobs: []protocol.RunJobAssignment{validRunJobAssignment()}, ServerTime: fixedClientTestTime()})
+		default:
+			t.Fatalf("unexpected request path %s", r.URL.Path)
+		}
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	ctx := context.Background()
+	claim, err := client.ClaimJob(ctx, validRunJobClaimRequest())
+	if err != nil || !claim.HasJob {
+		t.Fatalf("claim job response=%+v err=%v", claim, err)
+	}
+	if _, err := client.AckJob(ctx, validRunJobAckRequest()); err != nil {
+		t.Fatalf("ack job: %v", err)
+	}
+	if _, err := client.UpdateJobProgress(ctx, validRunJobProgressRequest()); err != nil {
+		t.Fatalf("progress job: %v", err)
+	}
+	if _, err := client.CompleteJob(ctx, validRunJobResultRequest()); err != nil {
+		t.Fatalf("complete job: %v", err)
+	}
+	if _, err := client.PollJobCancel(ctx, validRunJobCancelPollRequest()); err != nil {
+		t.Fatalf("poll cancel: %v", err)
+	}
+	if _, err := client.ReconcileJobs(ctx, validRunJobReconcileRequest()); err != nil {
+		t.Fatalf("reconcile jobs: %v", err)
+	}
+
+	for _, path := range []string{"/api/v1/run/jobs/claim", "/api/v1/run/jobs/ack", "/api/v1/run/jobs/progress", "/api/v1/run/jobs/result", "/api/v1/run/jobs/cancel", "/api/v1/run/jobs/reconcile"} {
+		if !seen[path] {
+			t.Fatalf("expected request to %s", path)
+		}
+	}
+}
+
+func TestPlatformClientJobMethodReturnsErrorForPlatformFailure(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusBadRequest)
+		_, _ = w.Write([]byte(`{"code":"validation_failed"}`))
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	if _, err := client.ClaimJob(context.Background(), validRunJobClaimRequest()); err == nil {
+		t.Fatal("expected platform error")
+	}
+}
+
+func TestPlatformClientJobLifecycleFlow(t *testing.T) {
+	assignment := validRunJobAssignment()
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		switch r.URL.Path {
+		case "/api/v1/run/jobs/claim":
+			assignment.State = "accepted"
+			writeTestJSON(t, w, protocol.RunJobClaimResponse{Accepted: true, RunEndpointID: "run-local", HasJob: true, Job: &assignment, NextPollSeconds: 2, ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/jobs/ack":
+			assignment.State = "running"
+			writeTestJSON(t, w, protocol.RunJobAckResponse{Accepted: true, Job: assignment, ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/jobs/progress":
+			assignment.Progress.Percent = 70
+			writeTestJSON(t, w, protocol.RunJobProgressResponse{Accepted: true, Job: assignment, ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/jobs/result":
+			assignment.State = "succeeded"
+			assignment.Progress.Percent = 100
+			assignment.ResultRef = "artifact://jobs/job-1/result"
+			writeTestJSON(t, w, protocol.RunJobResultResponse{Accepted: true, Job: assignment, ServerTime: fixedClientTestTime()})
+		case "/api/v1/run/jobs/reconcile":
+			writeTestJSON(t, w, protocol.RunJobReconcileResponse{Accepted: true, RunEndpointID: "run-local", UnknownJobIDs: []string{"local-only"}, ServerTime: fixedClientTestTime()})
+		default:
+			t.Fatalf("unexpected request path %s", r.URL.Path)
+		}
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	ctx := context.Background()
+	claim, err := client.ClaimJob(ctx, validRunJobClaimRequest())
+	if err != nil {
+		t.Fatalf("claim job: %v", err)
+	}
+	ack, err := client.AckJob(ctx, protocol.RunJobAckRequest{RunEndpointID: "run-local", SessionToken: "session-token", JobID: claim.Job.JobID, LeaseToken: claim.Job.LeaseToken, Attempt: claim.Job.Attempt})
+	if err != nil {
+		t.Fatalf("ack job: %v", err)
+	}
+	progress, err := client.UpdateJobProgress(ctx, protocol.RunJobProgressRequest{RunEndpointID: "run-local", SessionToken: "session-token", JobID: ack.Job.JobID, LeaseToken: ack.Job.LeaseToken, Attempt: ack.Job.Attempt, Progress: protocol.RunJobProgressReport{Percent: 70}})
+	if err != nil {
+		t.Fatalf("progress job: %v", err)
+	}
+	result, err := client.CompleteJob(ctx, protocol.RunJobResultRequest{RunEndpointID: "run-local", SessionToken: "session-token", JobID: progress.Job.JobID, LeaseToken: progress.Job.LeaseToken, Attempt: progress.Job.Attempt, State: "succeeded", Progress: protocol.RunJobProgressReport{Percent: 100}, ResultRef: "artifact://jobs/job-1/result"})
+	if err != nil {
+		t.Fatalf("complete job: %v", err)
+	}
+	reconcile, err := client.ReconcileJobs(ctx, protocol.RunJobReconcileRequest{RunEndpointID: "run-local", SessionToken: "session-token", ActiveJobIDs: []string{"local-only"}})
+	if err != nil {
+		t.Fatalf("reconcile jobs: %v", err)
+	}
+	if claim.Job.State != "accepted" || ack.Job.State != "running" || progress.Job.Progress.Percent != 70 || result.Job.State != "succeeded" || len(reconcile.UnknownJobIDs) != 1 {
+		t.Fatalf("unexpected lifecycle responses: claim=%+v ack=%+v progress=%+v result=%+v reconcile=%+v", claim, ack, progress, result, reconcile)
+	}
+}
+
+func decodeTestRequest(t *testing.T, r *http.Request, target any) {
+	t.Helper()
+	if r.Method != http.MethodPost {
+		t.Fatalf("expected POST, got %s", r.Method)
+	}
+	if contentType := r.Header.Get("Content-Type"); contentType != "application/json" {
+		t.Fatalf("expected JSON content type, got %q", contentType)
+	}
+	if err := json.NewDecoder(r.Body).Decode(target); err != nil {
+		t.Fatalf("decode request: %v", err)
+	}
+}
+
+func fixedClientTestTime() time.Time {
+	return time.Date(2026, 7, 3, 12, 0, 0, 0, time.UTC)
+}
+
+func validRunJobClaimRequest() protocol.RunJobClaimRequest {
+	return protocol.RunJobClaimRequest{RunEndpointID: "run-local", SessionToken: "session-token", Capabilities: []string{"process.start"}, Capacity: protocol.RunCapacityReport{MaxJobs: 4}}
+}
+
+func validRunJobAckRequest() protocol.RunJobAckRequest {
+	return protocol.RunJobAckRequest{RunEndpointID: "run-local", SessionToken: "session-token", JobID: "job-1", LeaseToken: "lease-1", Attempt: 1, Message: "started"}
+}
+
+func validRunJobProgressRequest() protocol.RunJobProgressRequest {
+	return protocol.RunJobProgressRequest{RunEndpointID: "run-local", SessionToken: "session-token", JobID: "job-1", LeaseToken: "lease-1", Attempt: 1, Progress: protocol.RunJobProgressReport{Percent: 40, Message: "working"}}
+}
+
+func validRunJobResultRequest() protocol.RunJobResultRequest {
+	return protocol.RunJobResultRequest{RunEndpointID: "run-local", SessionToken: "session-token", JobID: "job-1", LeaseToken: "lease-1", Attempt: 1, State: "succeeded", Progress: protocol.RunJobProgressReport{Percent: 100}, ResultRef: "artifact://jobs/job-1/result", Message: "done"}
+}
+
+func validRunJobCancelPollRequest() protocol.RunJobCancelPollRequest {
+	return protocol.RunJobCancelPollRequest{RunEndpointID: "run-local", SessionToken: "session-token", JobID: "job-1", LeaseToken: "lease-1"}
+}
+
+func validRunJobReconcileRequest() protocol.RunJobReconcileRequest {
+	return protocol.RunJobReconcileRequest{RunEndpointID: "run-local", SessionToken: "session-token", ActiveJobIDs: []string{"job-1"}}
+}
+
+func validRunJobClaimResponse() protocol.RunJobClaimResponse {
+	job := validRunJobAssignment()
+	return protocol.RunJobClaimResponse{Accepted: true, RunEndpointID: "run-local", HasJob: true, Job: &job, NextPollSeconds: 2, ServerTime: fixedClientTestTime()}
+}
+
+func validRunJobAssignment() protocol.RunJobAssignment {
+	return protocol.RunJobAssignment{
+		JobID:          "job-1",
+		RunEndpointID:  "run-local",
+		Capability:     "process.start",
+		IdempotencyKey: "idem-1",
+		State:          "accepted",
+		LeaseToken:     "lease-1",
+		Attempt:        1,
+		CreatedAt:      fixedClientTestTime(),
+		UpdatedAt:      fixedClientTestTime(),
+	}
+}
diff --git a/run/api/log_ingest_client_test.go b/run/api/log_ingest_client_test.go
new file mode 100644
index 0000000..4ea9975
--- /dev/null
+++ b/run/api/log_ingest_client_test.go
@@ -0,0 +1,81 @@
+package api
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	"browser.local/run/protocol"
+)
+
+func TestPlatformClientIngestLogBatchPostsJSONAndDecodesResponse(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost || r.URL.Path != "/api/v1/run/logs/batches" {
+			t.Fatalf("unexpected request %s %s", r.Method, r.URL.Path)
+		}
+		if contentType := r.Header.Get("Content-Type"); contentType != "application/json" {
+			t.Fatalf("expected JSON content type, got %q", contentType)
+		}
+		var request protocol.LogBatchIngestRequest
+		if err := json.NewDecoder(r.Body).Decode(&request); err != nil {
+			t.Fatalf("decode log ingest request: %v", err)
+		}
+		if request.LogStreamID != "log-1" || request.FirstSeq != 1 || request.LastSeq != 1 || len(request.Entries) != 1 {
+			t.Fatalf("unexpected log ingest payload: %+v", request)
+		}
+		writeTestJSON(t, w, protocol.LogBatchIngestResponse{Accepted: true, LogStreamID: "log-1", AcceptedFrom: 1, AcceptedTo: 1, LatestSeq: 1, ServerTime: fixedClientTestTime()})
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	response, err := client.IngestLogBatch(context.Background(), validClientLogBatch())
+	if err != nil {
+		t.Fatalf("ingest log batch: %v", err)
+	}
+	if !response.Accepted || response.LatestSeq != 1 {
+		t.Fatalf("unexpected log ingest response: %+v", response)
+	}
+}
+
+func TestPlatformClientIngestLogBatchReturnsErrorForPlatformFailure(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusBadRequest)
+		_, _ = w.Write([]byte(`{"code":"validation_failed"}`))
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	if _, err := client.IngestLogBatch(context.Background(), validClientLogBatch()); err == nil {
+		t.Fatal("expected platform error")
+	}
+}
+
+func validClientLogBatch() protocol.LogBatchIngestRequest {
+	return protocol.LogBatchIngestRequest{
+		RunEndpointID:    "run-local",
+		SessionToken:     "session-token",
+		LogStreamID:      "log-1",
+		ServerInstanceID: "server-1",
+		StreamKey:        "stdout",
+		Source:           "process",
+		FirstSeq:         1,
+		LastSeq:          1,
+		Compression:      "none",
+		Checksum:         "sha256:test",
+		Entries: []protocol.LogEntry{{
+			Seq:       1,
+			Timestamp: time.Date(2026, 7, 3, 12, 0, 1, 0, time.UTC),
+			Level:     "info",
+			Line:      "line",
+		}},
+	}
+}
diff --git a/run/api/platform_client.go b/run/api/platform_client.go
new file mode 100644
index 0000000..7beac42
--- /dev/null
+++ b/run/api/platform_client.go
@@ -0,0 +1,125 @@
+package api
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"net/url"
+	"strings"
+
+	"browser.local/run/protocol"
+)
+
+type PlatformClient struct {
+	baseURL    string
+	httpClient *http.Client
+}
+
+func NewPlatformClient(rawURL string) (PlatformClient, error) {
+	return NewPlatformClientWithHTTPClient(rawURL, http.DefaultClient)
+}
+
+func NewPlatformClientWithHTTPClient(rawURL string, httpClient *http.Client) (PlatformClient, error) {
+	parsed, err := url.Parse(rawURL)
+	if err != nil {
+		return PlatformClient{}, err
+	}
+	if parsed.Scheme == "" || parsed.Host == "" {
+		return PlatformClient{}, fmt.Errorf("platform URL must include scheme and host")
+	}
+	if httpClient == nil {
+		httpClient = http.DefaultClient
+	}
+
+	return PlatformClient{baseURL: strings.TrimRight(parsed.String(), "/"), httpClient: httpClient}, nil
+}
+
+func (c PlatformClient) BaseURL() string {
+	return c.baseURL
+}
+
+func (c PlatformClient) Hello(ctx context.Context, request protocol.RunHelloRequest) (protocol.RunHelloResponse, error) {
+	return postPlatformJSON[protocol.RunHelloRequest, protocol.RunHelloResponse](ctx, c, "/api/v1/run/control/hello", request)
+}
+
+func (c PlatformClient) Heartbeat(ctx context.Context, request protocol.RunHeartbeatRequest) (protocol.RunHeartbeatResponse, error) {
+	return postPlatformJSON[protocol.RunHeartbeatRequest, protocol.RunHeartbeatResponse](ctx, c, "/api/v1/run/control/heartbeat", request)
+}
+
+func (c PlatformClient) ClaimJob(ctx context.Context, request protocol.RunJobClaimRequest) (protocol.RunJobClaimResponse, error) {
+	return postPlatformJSON[protocol.RunJobClaimRequest, protocol.RunJobClaimResponse](ctx, c, "/api/v1/run/jobs/claim", request)
+}
+
+func (c PlatformClient) AckJob(ctx context.Context, request protocol.RunJobAckRequest) (protocol.RunJobAckResponse, error) {
+	return postPlatformJSON[protocol.RunJobAckRequest, protocol.RunJobAckResponse](ctx, c, "/api/v1/run/jobs/ack", request)
+}
+
+func (c PlatformClient) UpdateJobProgress(ctx context.Context, request protocol.RunJobProgressRequest) (protocol.RunJobProgressResponse, error) {
+	return postPlatformJSON[protocol.RunJobProgressRequest, protocol.RunJobProgressResponse](ctx, c, "/api/v1/run/jobs/progress", request)
+}
+
+func (c PlatformClient) CompleteJob(ctx context.Context, request protocol.RunJobResultRequest) (protocol.RunJobResultResponse, error) {
+	return postPlatformJSON[protocol.RunJobResultRequest, protocol.RunJobResultResponse](ctx, c, "/api/v1/run/jobs/result", request)
+}
+
+func (c PlatformClient) PollJobCancel(ctx context.Context, request protocol.RunJobCancelPollRequest) (protocol.RunJobCancelPollResponse, error) {
+	return postPlatformJSON[protocol.RunJobCancelPollRequest, protocol.RunJobCancelPollResponse](ctx, c, "/api/v1/run/jobs/cancel", request)
+}
+
+func (c PlatformClient) ReconcileJobs(ctx context.Context, request protocol.RunJobReconcileRequest) (protocol.RunJobReconcileResponse, error) {
+	return postPlatformJSON[protocol.RunJobReconcileRequest, protocol.RunJobReconcileResponse](ctx, c, "/api/v1/run/jobs/reconcile", request)
+}
+
+func (c PlatformClient) IngestLogBatch(ctx context.Context, request protocol.LogBatchIngestRequest) (protocol.LogBatchIngestResponse, error) {
+	return postPlatformJSON[protocol.LogBatchIngestRequest, protocol.LogBatchIngestResponse](ctx, c, "/api/v1/run/logs/batches", request)
+}
+
+func (c PlatformClient) OpenArtifactTransfer(ctx context.Context, request protocol.ArtifactTransferOpenRequest) (protocol.ArtifactTransferOpenResponse, error) {
+	return postPlatformJSON[protocol.ArtifactTransferOpenRequest, protocol.ArtifactTransferOpenResponse](ctx, c, "/api/v1/run/artifacts/open", request)
+}
+
+func (c PlatformClient) UploadArtifactChunk(ctx context.Context, request protocol.ArtifactChunkUploadRequest) (protocol.ArtifactChunkUploadResponse, error) {
+	return postPlatformJSON[protocol.ArtifactChunkUploadRequest, protocol.ArtifactChunkUploadResponse](ctx, c, "/api/v1/run/artifacts/chunks", request)
+}
+
+func (c PlatformClient) QueryArtifactTransferStatus(ctx context.Context, request protocol.ArtifactTransferStatusRequest) (protocol.ArtifactTransferStatusResponse, error) {
+	return postPlatformJSON[protocol.ArtifactTransferStatusRequest, protocol.ArtifactTransferStatusResponse](ctx, c, "/api/v1/run/artifacts/status", request)
+}
+
+func (c PlatformClient) CompleteArtifactTransfer(ctx context.Context, request protocol.ArtifactTransferCompleteRequest) (protocol.ArtifactTransferCompleteResponse, error) {
+	return postPlatformJSON[protocol.ArtifactTransferCompleteRequest, protocol.ArtifactTransferCompleteResponse](ctx, c, "/api/v1/run/artifacts/complete", request)
+}
+
+func postPlatformJSON[Request any, Response any](ctx context.Context, client PlatformClient, path string, request Request) (Response, error) {
+	var response Response
+
+	var body bytes.Buffer
+	if err := json.NewEncoder(&body).Encode(request); err != nil {
+		return response, fmt.Errorf("encode platform request: %w", err)
+	}
+
+	httpRequest, err := http.NewRequestWithContext(ctx, http.MethodPost, client.baseURL+path, &body)
+	if err != nil {
+		return response, fmt.Errorf("build platform request: %w", err)
+	}
+	httpRequest.Header.Set("Content-Type", "application/json")
+	httpRequest.Header.Set("Accept", "application/json")
+
+	httpResponse, err := client.httpClient.Do(httpRequest)
+	if err != nil {
+		return response, fmt.Errorf("send platform request: %w", err)
+	}
+	defer httpResponse.Body.Close()
+
+	if httpResponse.StatusCode < http.StatusOK || httpResponse.StatusCode >= http.StatusMultipleChoices {
+		message, _ := io.ReadAll(io.LimitReader(httpResponse.Body, 4096))
+		return response, fmt.Errorf("platform request failed: status=%d body=%s", httpResponse.StatusCode, strings.TrimSpace(string(message)))
+	}
+	if err := json.NewDecoder(httpResponse.Body).Decode(&response); err != nil {
+		return response, fmt.Errorf("decode platform response: %w", err)
+	}
+	return response, nil
+}
diff --git a/run/api/platform_client_test.go b/run/api/platform_client_test.go
new file mode 100644
index 0000000..07de19b
--- /dev/null
+++ b/run/api/platform_client_test.go
@@ -0,0 +1,212 @@
+package api
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	"browser.local/run/protocol"
+)
+
+func TestNewPlatformClientNormalizesBaseURL(t *testing.T) {
+	client, err := NewPlatformClient("http://platform.test/")
+	if err != nil {
+		t.Fatalf("unexpected error: %v", err)
+	}
+	if client.BaseURL() != "http://platform.test" {
+		t.Fatalf("expected normalized base URL, got %q", client.BaseURL())
+	}
+}
+
+func TestNewPlatformClientRequiresAbsoluteURL(t *testing.T) {
+	if _, err := NewPlatformClient("platform.local"); err == nil {
+		t.Fatal("expected error for URL without scheme and host")
+	}
+}
+
+func TestPlatformClientHelloPostsJSONAndDecodesResponse(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost || r.URL.Path != "/api/v1/run/control/hello" {
+			t.Fatalf("unexpected request %s %s", r.Method, r.URL.Path)
+		}
+		if contentType := r.Header.Get("Content-Type"); contentType != "application/json" {
+			t.Fatalf("expected JSON content type, got %q", contentType)
+		}
+		var request protocol.RunHelloRequest
+		if err := json.NewDecoder(r.Body).Decode(&request); err != nil {
+			t.Fatalf("decode hello request: %v", err)
+		}
+		if request.RunEndpointID != "run-local" || request.CapabilityReport.Fingerprint != "cap-v1" {
+			t.Fatalf("unexpected hello payload: %+v", request)
+		}
+		writeTestJSON(t, w, protocol.RunHelloResponse{
+			Accepted:                 true,
+			RunEndpointID:            "run-local",
+			SessionToken:             "session-token",
+			ServerTime:               time.Date(2026, 7, 3, 12, 0, 0, 0, time.UTC),
+			HeartbeatIntervalSeconds: 15,
+		})
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	response, err := client.Hello(context.Background(), validRunHelloRequest())
+	if err != nil {
+		t.Fatalf("hello: %v", err)
+	}
+	if !response.Accepted || response.SessionToken != "session-token" || response.HeartbeatIntervalSeconds != 15 {
+		t.Fatalf("unexpected hello response: %+v", response)
+	}
+}
+
+func TestPlatformClientHeartbeatPostsJSONAndDecodesResponse(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost || r.URL.Path != "/api/v1/run/control/heartbeat" {
+			t.Fatalf("unexpected request %s %s", r.Method, r.URL.Path)
+		}
+		var request protocol.RunHeartbeatRequest
+		if err := json.NewDecoder(r.Body).Decode(&request); err != nil {
+			t.Fatalf("decode heartbeat request: %v", err)
+		}
+		if request.SessionToken != "session-token" || request.Capacity.RunningJobs != 1 {
+			t.Fatalf("unexpected heartbeat payload: %+v", request)
+		}
+		writeTestJSON(t, w, protocol.RunHeartbeatResponse{
+			Accepted:             true,
+			RunEndpointID:        "run-local",
+			NextHeartbeatSeconds: 15,
+			RefreshCapabilities:  true,
+			ServerTime:           time.Date(2026, 7, 3, 12, 0, 0, 0, time.UTC),
+		})
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	response, err := client.Heartbeat(context.Background(), validRunHeartbeatRequest("session-token"))
+	if err != nil {
+		t.Fatalf("heartbeat: %v", err)
+	}
+	if !response.Accepted || !response.RefreshCapabilities || response.NextHeartbeatSeconds != 15 {
+		t.Fatalf("unexpected heartbeat response: %+v", response)
+	}
+}
+
+func TestPlatformClientReturnsErrorForPlatformFailure(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusBadRequest)
+		_, _ = w.Write([]byte(`{"code":"validation_failed"}`))
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	if _, err := client.Hello(context.Background(), validRunHelloRequest()); err == nil {
+		t.Fatal("expected platform error")
+	}
+}
+
+func TestPlatformClientHelloThenHeartbeatFlow(t *testing.T) {
+	var activeSessionToken string
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		switch r.URL.Path {
+		case "/api/v1/run/control/hello":
+			var request protocol.RunHelloRequest
+			if err := json.NewDecoder(r.Body).Decode(&request); err != nil {
+				t.Fatalf("decode hello request: %v", err)
+			}
+			if request.RegistrationToken == "" || request.RunEndpointID != "run-local" {
+				t.Fatalf("unexpected hello request: %+v", request)
+			}
+			activeSessionToken = "session-token"
+			writeTestJSON(t, w, protocol.RunHelloResponse{
+				Accepted:                 true,
+				RunEndpointID:            request.RunEndpointID,
+				SessionToken:             activeSessionToken,
+				ServerTime:               time.Date(2026, 7, 3, 12, 0, 0, 0, time.UTC),
+				HeartbeatIntervalSeconds: 15,
+			})
+		case "/api/v1/run/control/heartbeat":
+			var request protocol.RunHeartbeatRequest
+			if err := json.NewDecoder(r.Body).Decode(&request); err != nil {
+				t.Fatalf("decode heartbeat request: %v", err)
+			}
+			if request.SessionToken != activeSessionToken {
+				t.Fatalf("heartbeat did not use active session token: %+v", request)
+			}
+			writeTestJSON(t, w, protocol.RunHeartbeatResponse{
+				Accepted:             true,
+				RunEndpointID:        request.RunEndpointID,
+				NextHeartbeatSeconds: 15,
+				ServerTime:           time.Date(2026, 7, 3, 12, 0, 0, 0, time.UTC),
+			})
+		default:
+			t.Fatalf("unexpected request path %s", r.URL.Path)
+		}
+	}))
+	defer server.Close()
+
+	client, err := NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	hello, err := client.Hello(context.Background(), validRunHelloRequest())
+	if err != nil {
+		t.Fatalf("hello: %v", err)
+	}
+	heartbeat, err := client.Heartbeat(context.Background(), validRunHeartbeatRequest(hello.SessionToken))
+	if err != nil {
+		t.Fatalf("heartbeat: %v", err)
+	}
+	if !hello.Accepted || !heartbeat.Accepted {
+		t.Fatalf("expected accepted hello and heartbeat, got %+v %+v", hello, heartbeat)
+	}
+}
+
+func writeTestJSON(t *testing.T, w http.ResponseWriter, value any) {
+	t.Helper()
+	w.Header().Set("Content-Type", "application/json")
+	if err := json.NewEncoder(w).Encode(value); err != nil {
+		t.Fatalf("encode response: %v", err)
+	}
+}
+
+func validRunHelloRequest() protocol.RunHelloRequest {
+	return protocol.RunHelloRequest{
+		RegistrationToken: "registration-token",
+		RunEndpointID:     "run-local",
+		DisplayName:       "Local Run",
+		Version:           "0.1.0",
+		Status:            "online",
+		Platform:          "darwin/arm64",
+		CapabilityReport: protocol.RunCapabilityReport{
+			Capabilities: []string{"control.hello", "control.heartbeat"},
+			Fingerprint:  "cap-v1",
+		},
+		Capacity: protocol.RunCapacityReport{MaxJobs: 4},
+	}
+}
+
+func validRunHeartbeatRequest(sessionToken string) protocol.RunHeartbeatRequest {
+	return protocol.RunHeartbeatRequest{
+		RunEndpointID:         "run-local",
+		SessionToken:          sessionToken,
+		Version:               "0.1.0",
+		Status:                "online",
+		CapabilityFingerprint: "cap-v1",
+		Capacity: protocol.RunCapacityReport{
+			MaxJobs:     4,
+			RunningJobs: 1,
+		},
+	}
+}
diff --git a/run/artifact/README.md b/run/artifact/README.md
new file mode 100644
index 0000000..3f86411
--- /dev/null
+++ b/run/artifact/README.md
@@ -0,0 +1,13 @@
+# run/artifact
+
+Artifact transfer implementation lives here.
+
+Artifact transfer is lower priority than control, job ack/result, and log ingest. Implement concurrency and bandwidth limits before enabling large transfers.
+
+Artifact uploads must remain chunked and resumable. Slow, queued, or retrying artifact chunks must not prevent:
+
+- control hello/heartbeat calls,
+- job claim/ack/progress/result/cancel/reconcile calls,
+- durable log batch selection, upload, acknowledgement, or cleanup.
+
+Artifact queue entries may contain bounded transfer metadata and chunk bytes only. They must not expose host paths, raw credentials, direct sockets, run session transport details, or plugin/browser storage credentials.
diff --git a/run/cmd/run/main.go b/run/cmd/run/main.go
new file mode 100644
index 0000000..cb61838
--- /dev/null
+++ b/run/cmd/run/main.go
@@ -0,0 +1,61 @@
+package main
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"os"
+	"os/signal"
+
+	"browser.local/run/api"
+	"browser.local/run/config"
+	runruntime "browser.local/run/runtime"
+	"browser.local/run/spool"
+)
+
+func main() {
+	cfg := config.Load()
+	client, err := api.NewPlatformClient(cfg.PlatformURL)
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "invalid platform URL: %v\n", err)
+		os.Exit(1)
+	}
+
+	if cfg.Mode == "worker" {
+		logSpool, err := spool.NewLogSpool(cfg.SpoolRoot)
+		if err != nil {
+			fmt.Fprintf(os.Stderr, "initialize log spool: %v\n", err)
+			os.Exit(1)
+		}
+		artifactQueue, err := spool.NewArtifactQueue(cfg.SpoolRoot)
+		if err != nil {
+			fmt.Fprintf(os.Stderr, "initialize artifact queue: %v\n", err)
+			os.Exit(1)
+		}
+		worker, err := runruntime.NewWorker(
+			cfg,
+			client,
+			runruntime.WithProcessLogSink(&runruntime.SpoolLogSink{Spool: logSpool}),
+			runruntime.WithLifecycleArtifactHook(&runruntime.QueueArtifactHook{Queue: artifactQueue}),
+		)
+		if err != nil {
+			fmt.Fprintf(os.Stderr, "initialize worker: %v\n", err)
+			os.Exit(1)
+		}
+		ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt)
+		defer stop()
+		if err := worker.Run(ctx); err != nil && err != context.Canceled {
+			fmt.Fprintf(os.Stderr, "run worker stopped: %v\n", err)
+			os.Exit(1)
+		}
+		return
+	}
+
+	summary := runruntime.SmokeSummary(cfg)
+	summary.PlatformURL = client.BaseURL()
+
+	if err := json.NewEncoder(os.Stdout).Encode(summary); err != nil {
+		fmt.Fprintf(os.Stderr, "encode smoke summary: %v\n", err)
+		os.Exit(1)
+	}
+}
diff --git a/run/config/config.go b/run/config/config.go
new file mode 100644
index 0000000..68a302a
--- /dev/null
+++ b/run/config/config.go
@@ -0,0 +1,83 @@
+package config
+
+import (
+	"os"
+	"path/filepath"
+	"strconv"
+	"time"
+)
+
+const (
+	DefaultMode        = "smoke"
+	DefaultPlatformURL = "http://127.0.0.1:8080"
+	DefaultEndpointID  = "run-local"
+	DefaultDisplayName = "Local Run"
+	DefaultVersion     = "0.1.0"
+)
+
+type Config struct {
+	Mode              string
+	PlatformURL       string
+	RunEndpointID     string
+	DisplayName       string
+	Version           string
+	RegistrationToken string
+	WorkspaceRoot     string
+	SpoolRoot         string
+	MaxJobs           int
+	HeartbeatInterval time.Duration
+	PollInterval      time.Duration
+	RetryBackoff      time.Duration
+}
+
+func Load() Config {
+	mode := os.Getenv("RUN_MODE")
+	if mode == "" {
+		mode = DefaultMode
+	}
+
+	platformURL := os.Getenv("RUN_PLATFORM_URL")
+	if platformURL == "" {
+		platformURL = DefaultPlatformURL
+	}
+
+	workspaceRoot := envOrDefault("RUN_WORKSPACE_ROOT", filepath.Join(".", ".run-workspace"))
+	return Config{
+		Mode:              mode,
+		PlatformURL:       platformURL,
+		RunEndpointID:     envOrDefault("RUN_ENDPOINT_ID", DefaultEndpointID),
+		DisplayName:       envOrDefault("RUN_DISPLAY_NAME", DefaultDisplayName),
+		Version:           envOrDefault("RUN_VERSION", DefaultVersion),
+		RegistrationToken: envOrDefault("RUN_REGISTRATION_TOKEN", "local-registration"),
+		WorkspaceRoot:     workspaceRoot,
+		SpoolRoot:         envOrDefault("RUN_SPOOL_ROOT", filepath.Join(workspaceRoot, "spool")),
+		MaxJobs:           intEnvOrDefault("RUN_MAX_JOBS", 1),
+		HeartbeatInterval: durationEnvOrDefault("RUN_HEARTBEAT_INTERVAL_MS", 15*time.Second),
+		PollInterval:      durationEnvOrDefault("RUN_POLL_INTERVAL_MS", 2*time.Second),
+		RetryBackoff:      durationEnvOrDefault("RUN_RETRY_BACKOFF_MS", time.Second),
+	}
+}
+
+func envOrDefault(key string, fallback string) string {
+	value := os.Getenv(key)
+	if value == "" {
+		return fallback
+	}
+	return value
+}
+
+func intEnvOrDefault(key string, fallback int) int {
+	value, err := strconv.Atoi(os.Getenv(key))
+	if err != nil || value <= 0 {
+		return fallback
+	}
+	return value
+}
+
+func durationEnvOrDefault(key string, fallback time.Duration) time.Duration {
+	value, err := strconv.Atoi(os.Getenv(key))
+	if err != nil || value <= 0 {
+		return fallback
+	}
+	return time.Duration(value) * time.Millisecond
+}
diff --git a/run/config/config_test.go b/run/config/config_test.go
new file mode 100644
index 0000000..61a48d7
--- /dev/null
+++ b/run/config/config_test.go
@@ -0,0 +1,54 @@
+package config
+
+import "testing"
+
+func TestLoadUsesDefaults(t *testing.T) {
+	t.Setenv("RUN_MODE", "")
+	t.Setenv("RUN_PLATFORM_URL", "")
+
+	cfg := Load()
+	if cfg.Mode != DefaultMode {
+		t.Fatalf("expected mode %q, got %q", DefaultMode, cfg.Mode)
+	}
+	if cfg.PlatformURL != DefaultPlatformURL {
+		t.Fatalf("expected platform URL %q, got %q", DefaultPlatformURL, cfg.PlatformURL)
+	}
+	if cfg.RunEndpointID != DefaultEndpointID || cfg.DisplayName != DefaultDisplayName || cfg.Version != DefaultVersion {
+		t.Fatalf("expected worker defaults, got %+v", cfg)
+	}
+	if cfg.MaxJobs != 1 || cfg.HeartbeatInterval <= 0 || cfg.PollInterval <= 0 || cfg.RetryBackoff <= 0 {
+		t.Fatalf("expected positive worker scheduling defaults, got %+v", cfg)
+	}
+}
+
+func TestLoadUsesEnvironment(t *testing.T) {
+	t.Setenv("RUN_MODE", "worker")
+	t.Setenv("RUN_PLATFORM_URL", "http://platform.test")
+	t.Setenv("RUN_ENDPOINT_ID", "run-edge")
+	t.Setenv("RUN_DISPLAY_NAME", "Edge Run")
+	t.Setenv("RUN_VERSION", "1.2.3")
+	t.Setenv("RUN_REGISTRATION_TOKEN", "registration-token")
+	t.Setenv("RUN_WORKSPACE_ROOT", "/tmp/run-workspace")
+	t.Setenv("RUN_SPOOL_ROOT", "/tmp/run-spool")
+	t.Setenv("RUN_MAX_JOBS", "3")
+	t.Setenv("RUN_HEARTBEAT_INTERVAL_MS", "250")
+	t.Setenv("RUN_POLL_INTERVAL_MS", "125")
+	t.Setenv("RUN_RETRY_BACKOFF_MS", "75")
+
+	cfg := Load()
+	if cfg.Mode != "worker" {
+		t.Fatalf("expected configured mode, got %q", cfg.Mode)
+	}
+	if cfg.PlatformURL != "http://platform.test" {
+		t.Fatalf("expected configured platform URL, got %q", cfg.PlatformURL)
+	}
+	if cfg.RunEndpointID != "run-edge" || cfg.DisplayName != "Edge Run" || cfg.Version != "1.2.3" || cfg.RegistrationToken != "registration-token" {
+		t.Fatalf("expected configured worker identity, got %+v", cfg)
+	}
+	if cfg.WorkspaceRoot != "/tmp/run-workspace" || cfg.SpoolRoot != "/tmp/run-spool" || cfg.MaxJobs != 3 {
+		t.Fatalf("expected configured worker paths/capacity, got %+v", cfg)
+	}
+	if cfg.HeartbeatInterval.Milliseconds() != 250 || cfg.PollInterval.Milliseconds() != 125 || cfg.RetryBackoff.Milliseconds() != 75 {
+		t.Fatalf("expected configured durations, got %+v", cfg)
+	}
+}
diff --git a/run/domain/status.go b/run/domain/status.go
new file mode 100644
index 0000000..04e07fa
--- /dev/null
+++ b/run/domain/status.go
@@ -0,0 +1,9 @@
+package domain
+
+type ExecutorStatus struct {
+	Mode            string   `json:"mode"`
+	PlatformURL     string   `json:"platformUrl"`
+	Status          string   `json:"status"`
+	ExposedHostPath bool     `json:"exposedHostPath"`
+	Capabilities    []string `json:"capabilities"`
+}
diff --git a/run/go.mod b/run/go.mod
new file mode 100644
index 0000000..713610f
--- /dev/null
+++ b/run/go.mod
@@ -0,0 +1,3 @@
+module browser.local/run
+
+go 1.25.1
diff --git a/run/logingest/README.md b/run/logingest/README.md
new file mode 100644
index 0000000..51fc1ca
--- /dev/null
+++ b/run/logingest/README.md
@@ -0,0 +1,7 @@
+# run/logingest
+
+Log collectors and uploaders live here.
+
+Collectors read process output and server log files, assign stream IDs and sequence numbers, write to local spool, and upload batches to platform ingest APIs.
+
+Do not send primary run-to-platform logs through the UI realtime channel.
diff --git a/run/protocol/artifact.go b/run/protocol/artifact.go
new file mode 100644
index 0000000..3474dae
--- /dev/null
+++ b/run/protocol/artifact.go
@@ -0,0 +1,101 @@
+package protocol
+
+import "time"
+
+type ArtifactMetadata struct {
+	ID        string    `json:"id"`
+	OwnerKind string    `json:"ownerKind"`
+	OwnerID   string    `json:"ownerId"`
+	SizeBytes int64     `json:"sizeBytes"`
+	Checksum  string    `json:"checksum"`
+	State     string    `json:"state"`
+	CreatedAt time.Time `json:"createdAt"`
+	UpdatedAt time.Time `json:"updatedAt"`
+}
+
+type ArtifactTransferOpenRequest struct {
+	RunEndpointID  string `json:"runEndpointId"`
+	SessionToken   string `json:"sessionToken"`
+	ArtifactID     string `json:"artifactId"`
+	Direction      string `json:"direction"`
+	OwnerKind      string `json:"ownerKind"`
+	OwnerID        string `json:"ownerId"`
+	SizeBytes      int64  `json:"sizeBytes"`
+	ChunkSizeBytes int    `json:"chunkSizeBytes"`
+	Checksum       string `json:"checksum"`
+	IdempotencyKey string `json:"idempotencyKey"`
+}
+
+type ArtifactTransferOpenResponse struct {
+	Accepted              bool             `json:"accepted"`
+	TransferID            string           `json:"transferId"`
+	Direction             string           `json:"direction"`
+	Artifact              ArtifactMetadata `json:"artifact"`
+	TotalChunks           int              `json:"totalChunks"`
+	ChunkSizeBytes        int              `json:"chunkSizeBytes"`
+	ReceivedChunkIndexes  []int            `json:"receivedChunkIndexes"`
+	NextMissingChunkIndex int              `json:"nextMissingChunkIndex"`
+	Completed             bool             `json:"completed"`
+	Duplicate             bool             `json:"duplicate"`
+	ServerTime            time.Time        `json:"serverTime"`
+}
+
+type ArtifactChunkUploadRequest struct {
+	RunEndpointID string `json:"runEndpointId"`
+	SessionToken  string `json:"sessionToken"`
+	TransferID    string `json:"transferId"`
+	ArtifactID    string `json:"artifactId"`
+	ChunkIndex    int    `json:"chunkIndex"`
+	Offset        int64  `json:"offset"`
+	SizeBytes     int    `json:"sizeBytes"`
+	Checksum      string `json:"checksum"`
+	Payload       []byte `json:"payload"`
+}
+
+type ArtifactChunkUploadResponse struct {
+	Accepted              bool      `json:"accepted"`
+	TransferID            string    `json:"transferId"`
+	ArtifactID            string    `json:"artifactId"`
+	ChunkIndex            int       `json:"chunkIndex"`
+	ReceivedChunkIndexes  []int     `json:"receivedChunkIndexes"`
+	NextMissingChunkIndex int       `json:"nextMissingChunkIndex"`
+	Duplicate             bool      `json:"duplicate"`
+	ServerTime            time.Time `json:"serverTime"`
+}
+
+type ArtifactTransferStatusRequest struct {
+	RunEndpointID string `json:"runEndpointId"`
+	SessionToken  string `json:"sessionToken"`
+	TransferID    string `json:"transferId"`
+	ArtifactID    string `json:"artifactId"`
+}
+
+type ArtifactTransferStatusResponse struct {
+	Accepted              bool      `json:"accepted"`
+	TransferID            string    `json:"transferId"`
+	ArtifactID            string    `json:"artifactId"`
+	Direction             string    `json:"direction"`
+	TotalChunks           int       `json:"totalChunks"`
+	ChunkSizeBytes        int       `json:"chunkSizeBytes"`
+	ReceivedChunkIndexes  []int     `json:"receivedChunkIndexes"`
+	NextMissingChunkIndex int       `json:"nextMissingChunkIndex"`
+	Completed             bool      `json:"completed"`
+	ServerTime            time.Time `json:"serverTime"`
+}
+
+type ArtifactTransferCompleteRequest struct {
+	RunEndpointID string `json:"runEndpointId"`
+	SessionToken  string `json:"sessionToken"`
+	TransferID    string `json:"transferId"`
+	ArtifactID    string `json:"artifactId"`
+	Checksum      string `json:"checksum"`
+	SizeBytes     int64  `json:"sizeBytes"`
+}
+
+type ArtifactTransferCompleteResponse struct {
+	Accepted   bool             `json:"accepted"`
+	TransferID string           `json:"transferId"`
+	Artifact   ArtifactMetadata `json:"artifact"`
+	Completed  bool             `json:"completed"`
+	ServerTime time.Time        `json:"serverTime"`
+}
diff --git a/run/protocol/artifact.md b/run/protocol/artifact.md
new file mode 100644
index 0000000..9aef2c6
--- /dev/null
+++ b/run/protocol/artifact.md
@@ -0,0 +1,44 @@
+# Run Artifact Contract
+
+Artifacts move files and large payloads between platform and run without blocking logs or control.
+
+## Implemented Routes
+
+- `POST /api/v1/run/artifacts/open`: opens a run-to-platform upload transfer and returns resume state.
+- `POST /api/v1/run/artifacts/chunks`: uploads one bounded chunk with byte range and checksum metadata.
+- `POST /api/v1/run/artifacts/status`: queries received chunks and the next missing chunk index.
+- `POST /api/v1/run/artifacts/complete`: verifies all chunks and final checksum before marking the artifact available.
+
+Browser-facing artifact downloads are implemented through platform-owned routes after a run upload completes:
+
+- `POST /api/v1/artifacts/{id}/download`: returns safe download metadata and a platform content route.
+- `GET /api/v1/artifacts/{id}/content`: returns bounded byte ranges for authorized browser or plugin-page reads.
+
+## Payloads
+
+- `ArtifactTransferOpenRequest`: run ID, session token, artifact ID, upload direction, owner scope, size, chunk size, checksum, and idempotency key.
+- `ArtifactTransferOpenResponse`: transfer ID, artifact metadata, total chunks, received chunk indexes, next missing chunk index, duplicate flag, and server time.
+- `ArtifactChunkUploadRequest`: transfer ID, artifact ID, chunk index, byte offset, size, checksum, and JSON byte payload.
+- `ArtifactChunkUploadResponse`: accepted chunk index, received chunk indexes, next missing chunk index, duplicate flag, and server time.
+- `ArtifactTransferStatusRequest`: run ID, session token, transfer ID, and artifact ID.
+- `ArtifactTransferStatusResponse`: transfer direction, total chunks, received chunk indexes, next missing chunk index, completion flag, and server time.
+- `ArtifactTransferCompleteRequest`: transfer ID, artifact ID, final checksum, and final size.
+- `ArtifactTransferCompleteResponse`: completed artifact metadata and server time.
+
+## Local Queue
+
+Run stores unacknowledged `ArtifactChunkUploadRequest` payloads in the local artifact queue. A queued chunk may be removed only after the platform acknowledges the same transfer ID, artifact ID, and chunk index. The queue must not store or expose raw host paths.
+
+## Rules
+
+- Transfers must be resumable.
+- Transfers must be checksummed.
+- Artifact concurrency must be limited.
+- Artifact transfer must not block control heartbeat, job ack/result, or log upload.
+- Artifact transfer is lower priority than control, job lifecycle metadata, and durable log ingest.
+- Slow or retrying artifact chunks must not prevent log spool acknowledgement cleanup or terminal job result submission.
+- Control, job, and log routes must reject artifact chunk payloads or transport details rather than accepting them through lightweight channel payloads.
+
+## Deferred Channels
+
+Platform-to-run download, browser artifact upload, external object storage, presigned URLs, and production throttling policies remain separate future work.
diff --git a/run/protocol/control.go b/run/protocol/control.go
new file mode 100644
index 0000000..658ee96
--- /dev/null
+++ b/run/protocol/control.go
@@ -0,0 +1,52 @@
+package protocol
+
+import "time"
+
+type RunCapacityReport struct {
+	MaxJobs     int    `json:"maxJobs"`
+	RunningJobs int    `json:"runningJobs"`
+	QueuedJobs  int    `json:"queuedJobs"`
+	Summary     string `json:"summary,omitempty"`
+}
+
+type RunCapabilityReport struct {
+	Capabilities []string `json:"capabilities"`
+	Fingerprint  string   `json:"fingerprint"`
+}
+
+type RunHelloRequest struct {
+	RegistrationToken string              `json:"registrationToken"`
+	RunEndpointID     string              `json:"runEndpointId"`
+	DisplayName       string              `json:"displayName"`
+	Version           string              `json:"version"`
+	Status            string              `json:"status"`
+	Platform          string              `json:"platform,omitempty"`
+	CapabilityReport  RunCapabilityReport `json:"capabilityReport"`
+	Capacity          RunCapacityReport   `json:"capacity"`
+}
+
+type RunHelloResponse struct {
+	Accepted                 bool      `json:"accepted"`
+	RunEndpointID            string    `json:"runEndpointId"`
+	SessionToken             string    `json:"sessionToken"`
+	ServerTime               time.Time `json:"serverTime"`
+	HeartbeatIntervalSeconds int       `json:"heartbeatIntervalSeconds"`
+	FeatureFlags             []string  `json:"featureFlags,omitempty"`
+}
+
+type RunHeartbeatRequest struct {
+	RunEndpointID         string            `json:"runEndpointId"`
+	SessionToken          string            `json:"sessionToken"`
+	Version               string            `json:"version"`
+	Status                string            `json:"status"`
+	CapabilityFingerprint string            `json:"capabilityFingerprint"`
+	Capacity              RunCapacityReport `json:"capacity"`
+}
+
+type RunHeartbeatResponse struct {
+	Accepted             bool      `json:"accepted"`
+	RunEndpointID        string    `json:"runEndpointId"`
+	NextHeartbeatSeconds int       `json:"nextHeartbeatSeconds"`
+	RefreshCapabilities  bool      `json:"refreshCapabilities"`
+	ServerTime           time.Time `json:"serverTime"`
+}
diff --git a/run/protocol/control.md b/run/protocol/control.md
new file mode 100644
index 0000000..850096b
--- /dev/null
+++ b/run/protocol/control.md
@@ -0,0 +1,28 @@
+# Run Control Contract
+
+Control is the lightweight high-priority channel between run and platform.
+
+## Implemented Routes
+
+- `POST /api/v1/run/control/hello`: registers run metadata and receives a platform-issued session token.
+- `POST /api/v1/run/control/heartbeat`: reports status, capacity, and capability fingerprint using the active session token.
+
+## Payloads
+
+- `RunHelloRequest`: registration token, run ID, display name, version, status, platform, capability summary, and capacity summary.
+- `RunHelloResponse`: session token, server time, polling hints, and feature flags.
+- `RunHeartbeatRequest`: session token, version, status, capacity, and current capability fingerprint.
+- `RunHeartbeatResponse`: accepted status, next heartbeat interval, and optional capability refresh request.
+- `RunCapabilityReport`: capability names and compact fingerprint metadata.
+- `RunCapacityReport`: max jobs, active jobs, queued jobs, and local resource summary.
+
+## Rules
+
+- Control payloads must be small.
+- Control must not carry logs, artifact chunks, or long job result bodies.
+- Control must have priority over job execution, log upload, and artifact transfer.
+- Heartbeat capacity summaries must remain metadata-only and must not mention or carry heavy channel payloads.
+
+## Deferred Channels
+
+Durable log ingest, artifact chunk transfer, and the optional game client bridge remain separate channels. The job channel is separate from control and uses `/api/v1/run/jobs/*` routes.
diff --git a/run/protocol/game-client-bridge.md b/run/protocol/game-client-bridge.md
new file mode 100644
index 0000000..48478c3
--- /dev/null
+++ b/run/protocol/game-client-bridge.md
@@ -0,0 +1,17 @@
+# Game Client Bridge Contract
+
+The game client bridge is optional and exists only for games that need in-game command execution or snapshots.
+
+## Payloads
+
+- `ClientHello`: game client credential, server instance ID, version, and display name.
+- `ClientHeartbeat`: session token, version, status, and game connection status.
+- `ClientCommandPoll`: session token and batch limit.
+- `ClientCommandResult`: command ID, status, bounded output, and timestamp.
+- `ClientSnapshot`: snapshot mode, raw bounded text or structured data reference, and timestamp.
+
+## Rules
+
+- The bridge must not carry run lifecycle jobs.
+- The bridge must not carry run log ingest batches.
+- Games without in-game bridge needs should not enable this channel.
diff --git a/run/protocol/job.go b/run/protocol/job.go
new file mode 100644
index 0000000..231993c
--- /dev/null
+++ b/run/protocol/job.go
@@ -0,0 +1,132 @@
+package protocol
+
+import "time"
+
+const (
+	RunCapabilityProcessInstall = "process.install"
+	RunCapabilityProcessStart   = "process.start"
+	RunCapabilityProcessStop    = "process.stop"
+	RunCapabilityLogsRead       = "logs.read"
+	RunCapabilityConfigWrite    = "config.write"
+	RunCapabilityFilesRead      = "files.read"
+	RunCapabilityFilesWrite     = "files.write"
+)
+
+type RunJobProgressReport struct {
+	Percent int    `json:"percent"`
+	Message string `json:"message,omitempty"`
+}
+
+type RunJobAssignment struct {
+	JobID            string               `json:"jobId"`
+	ServerInstanceID string               `json:"serverInstanceId,omitempty"`
+	RunEndpointID    string               `json:"runEndpointId"`
+	Capability       string               `json:"capability"`
+	TargetKey        string               `json:"targetKey,omitempty"`
+	InputRef         string               `json:"inputRef,omitempty"`
+	IdempotencyKey   string               `json:"idempotencyKey"`
+	State            string               `json:"state"`
+	Progress         RunJobProgressReport `json:"progress"`
+	ResultRef        string               `json:"resultRef,omitempty"`
+	LeaseToken       string               `json:"leaseToken"`
+	Attempt          int                  `json:"attempt"`
+	CreatedAt        time.Time            `json:"createdAt"`
+	UpdatedAt        time.Time            `json:"updatedAt"`
+}
+
+type RunJobClaimRequest struct {
+	RunEndpointID string            `json:"runEndpointId"`
+	SessionToken  string            `json:"sessionToken"`
+	Capabilities  []string          `json:"capabilities"`
+	Capacity      RunCapacityReport `json:"capacity"`
+}
+
+type RunJobClaimResponse struct {
+	Accepted        bool              `json:"accepted"`
+	RunEndpointID   string            `json:"runEndpointId"`
+	HasJob          bool              `json:"hasJob"`
+	Job             *RunJobAssignment `json:"job,omitempty"`
+	NextPollSeconds int               `json:"nextPollSeconds"`
+	ServerTime      time.Time         `json:"serverTime"`
+}
+
+type RunJobAckRequest struct {
+	RunEndpointID string `json:"runEndpointId"`
+	SessionToken  string `json:"sessionToken"`
+	JobID         string `json:"jobId"`
+	LeaseToken    string `json:"leaseToken"`
+	Attempt       int    `json:"attempt"`
+	Message       string `json:"message,omitempty"`
+}
+
+type RunJobAckResponse struct {
+	Accepted   bool             `json:"accepted"`
+	Job        RunJobAssignment `json:"job"`
+	ServerTime time.Time        `json:"serverTime"`
+}
+
+type RunJobProgressRequest struct {
+	RunEndpointID string               `json:"runEndpointId"`
+	SessionToken  string               `json:"sessionToken"`
+	JobID         string               `json:"jobId"`
+	LeaseToken    string               `json:"leaseToken"`
+	Attempt       int                  `json:"attempt"`
+	Progress      RunJobProgressReport `json:"progress"`
+	Sequence      uint64               `json:"sequence,omitempty"`
+}
+
+type RunJobProgressResponse struct {
+	Accepted   bool             `json:"accepted"`
+	Job        RunJobAssignment `json:"job"`
+	ServerTime time.Time        `json:"serverTime"`
+}
+
+type RunJobResultRequest struct {
+	RunEndpointID string               `json:"runEndpointId"`
+	SessionToken  string               `json:"sessionToken"`
+	JobID         string               `json:"jobId"`
+	LeaseToken    string               `json:"leaseToken"`
+	Attempt       int                  `json:"attempt"`
+	State         string               `json:"state"`
+	Progress      RunJobProgressReport `json:"progress"`
+	ResultRef     string               `json:"resultRef,omitempty"`
+	Message       string               `json:"message,omitempty"`
+	ErrorCode     string               `json:"errorCode,omitempty"`
+}
+
+type RunJobResultResponse struct {
+	Accepted   bool             `json:"accepted"`
+	Job        RunJobAssignment `json:"job"`
+	ServerTime time.Time        `json:"serverTime"`
+}
+
+type RunJobCancelPollRequest struct {
+	RunEndpointID string `json:"runEndpointId"`
+	SessionToken  string `json:"sessionToken"`
+	JobID         string `json:"jobId,omitempty"`
+	LeaseToken    string `json:"leaseToken,omitempty"`
+}
+
+type RunJobCancelPollResponse struct {
+	Accepted      bool      `json:"accepted"`
+	RunEndpointID string    `json:"runEndpointId"`
+	HasCancel     bool      `json:"hasCancel"`
+	JobID         string    `json:"jobId,omitempty"`
+	Reason        string    `json:"reason,omitempty"`
+	RequestedAt   time.Time `json:"requestedAt,omitempty"`
+	ServerTime    time.Time `json:"serverTime"`
+}
+
+type RunJobReconcileRequest struct {
+	RunEndpointID string   `json:"runEndpointId"`
+	SessionToken  string   `json:"sessionToken"`
+	ActiveJobIDs  []string `json:"activeJobIds"`
+}
+
+type RunJobReconcileResponse struct {
+	Accepted      bool               `json:"accepted"`
+	RunEndpointID string             `json:"runEndpointId"`
+	ActiveJobs    []RunJobAssignment `json:"activeJobs"`
+	UnknownJobIDs []string           `json:"unknownJobIds"`
+	ServerTime    time.Time          `json:"serverTime"`
+}
diff --git a/run/protocol/job.md b/run/protocol/job.md
new file mode 100644
index 0000000..b83be4c
--- /dev/null
+++ b/run/protocol/job.md
@@ -0,0 +1,57 @@
+# Run Job Contract
+
+Jobs execute bounded server management work.
+
+## Implemented Routes
+
+- `POST /api/v1/run/jobs/claim`: claims one queued job for the registered run endpoint.
+- `POST /api/v1/run/jobs/ack`: acknowledges an active leased job before execution.
+- `POST /api/v1/run/jobs/progress`: reports bounded progress for an active leased job.
+- `POST /api/v1/run/jobs/result`: submits a bounded terminal result for an active leased job.
+- `POST /api/v1/run/jobs/cancel`: polls platform cancellation requests for active leased jobs.
+- `POST /api/v1/run/jobs/reconcile`: reconciles platform-known active jobs after run restart or reconnect.
+
+## Payloads
+
+- `RunJobClaimRequest`: session token, run ID, capacity, and supported capabilities.
+- `RunJobClaimResponse`: optional job assignment with identity, capability, server instance, logical target key, scoped input ref, idempotency key, lease token, attempt, and polling hint.
+- `RunJobAckRequest`: job ID, run ID, session token, lease token, attempt, and bounded message.
+- `RunJobProgressRequest`: job ID, run ID, session token, lease token, attempt, percent, sequence, and bounded message.
+- `RunJobResultRequest`: job ID, run ID, session token, lease token, attempt, terminal state, progress, bounded message, error code, and result reference.
+- `RunJobCancelPollRequest`: run ID, session token, and optional job lease identity.
+- `RunJobReconcileRequest`: run ID, session token, and active local job IDs.
+
+## Local Journal
+
+Run must keep a local short-term journal for accepted jobs so duplicate delivery, reconnect, and restart can be reconciled.
+
+## Lifecycle Executor
+
+The runtime worker executes these bounded lifecycle job capabilities:
+
+- `process.install`
+- `process.start`
+- `process.stop`
+
+Platform-dispatched config/file jobs are now represented in the run job payload and validated before execution by later worker implementations:
+
+- `config.write`: writes approved config content addressed by a logical config key plus scoped `input://...` ref.
+- `files.read`: reads a declared logical file key and returns results through bounded metadata or artifact refs.
+- `files.write`: writes content addressed by a logical file key plus scoped `input://...` or `artifact://...` ref.
+
+The executor resolves lifecycle action templates under the scoped server workspace and runs direct command/argument vectors through the process supervisor. It does not run unrestricted shell strings, execute arbitrary plugin code, expose host paths, return raw credentials, open direct sockets, or embed logs/artifacts in job result payloads.
+
+## Rules
+
+- Job ack must be sent before execution.
+- Terminal result must be replayable while the journal retains the job.
+- Large files must be passed as artifact references, not embedded in job payloads.
+- Config/file job payloads must use logical target keys and scoped input/artifact refs.
+- Job payloads must not include logs, artifact chunks, raw host paths, raw credentials, direct sockets, or large inline result bodies.
+- Process stdout/stderr must be redacted and written to the log spool rather than embedded in progress/result bodies.
+- Job ack/progress/result/cancel/reconcile calls are lightweight lifecycle metadata and must be able to complete while artifact/file transfer work is active or retrying.
+- Terminal results must remain idempotent under log and artifact retry pressure and must reference artifacts by safe `artifact://...` refs rather than embedding transfer payloads.
+
+## Deferred Channels
+
+Durable log ingest, artifact chunk transfer, and optional game client bridge traffic remain separate channels and must not be multiplexed through job result payloads. Artifact transfer carries chunk payloads only through `/api/v1/run/artifacts/*` routes.
diff --git a/run/protocol/job_validation.go b/run/protocol/job_validation.go
new file mode 100644
index 0000000..e98bc93
--- /dev/null
+++ b/run/protocol/job_validation.go
@@ -0,0 +1,58 @@
+package protocol
+
+import "strings"
+
+const maxRunLogicalFileKeyLength = 160
+
+func ValidateRunJobAssignment(assignment RunJobAssignment) error {
+	if assignment.JobID == "" || assignment.RunEndpointID == "" || assignment.Capability == "" {
+		return ValidationError("jobId, runEndpointId, and capability are required")
+	}
+	switch assignment.Capability {
+	case RunCapabilityConfigWrite, RunCapabilityFilesRead, RunCapabilityFilesWrite:
+		if assignment.ServerInstanceID == "" {
+			return ValidationError("serverInstanceId is required for scoped file jobs")
+		}
+		if !ValidLogicalFileKey(assignment.TargetKey) {
+			return ValidationError("targetKey is not allowed")
+		}
+	}
+	switch assignment.Capability {
+	case RunCapabilityConfigWrite, RunCapabilityFilesWrite:
+		if !ValidScopedInputRef(assignment.InputRef) {
+			return ValidationError("inputRef is not allowed")
+		}
+	}
+	return nil
+}
+
+type ValidationError string
+
+func (err ValidationError) Error() string { return string(err) }
+
+func ValidLogicalFileKey(key string) bool {
+	trimmed := strings.TrimSpace(key)
+	if trimmed == "" || trimmed != key || len([]rune(key)) > maxRunLogicalFileKeyLength {
+		return false
+	}
+	lower := strings.ToLower(key)
+	if strings.HasPrefix(key, "/") || strings.Contains(key, "..") || strings.Contains(key, `\`) || strings.Contains(key, "://") || strings.Contains(lower, "/users/") || strings.Contains(lower, "password=") || strings.Contains(lower, "secret=") || strings.Contains(lower, "sk-") || strings.Contains(lower, "bearer ") {
+		return false
+	}
+	for _, char := range key {
+		if (char >= 'a' && char <= 'z') || (char >= 'A' && char <= 'Z') || (char >= '0' && char <= '9') || char == '_' || char == '-' || char == '.' || char == '/' {
+			continue
+		}
+		return false
+	}
+	return true
+}
+
+func ValidScopedInputRef(ref string) bool {
+	trimmed := strings.TrimSpace(ref)
+	lower := strings.ToLower(ref)
+	if trimmed == "" || trimmed != ref || strings.Contains(lower, "/users/") || strings.Contains(lower, "password=") || strings.Contains(lower, "secret=") || strings.Contains(lower, "sk-") || strings.Contains(lower, "bearer ") {
+		return false
+	}
+	return strings.HasPrefix(ref, "input://") || strings.HasPrefix(ref, "artifact://")
+}
diff --git a/run/protocol/job_validation_test.go b/run/protocol/job_validation_test.go
new file mode 100644
index 0000000..272d3aa
--- /dev/null
+++ b/run/protocol/job_validation_test.go
@@ -0,0 +1,46 @@
+package protocol
+
+import (
+	"strings"
+	"testing"
+)
+
+func TestValidateRunJobAssignmentScopedFilePayloads(t *testing.T) {
+	assignment := RunJobAssignment{
+		JobID:            "job-config-write",
+		ServerInstanceID: "server-1",
+		RunEndpointID:    "run-local",
+		Capability:       RunCapabilityConfigWrite,
+		TargetKey:        "server.properties",
+		InputRef:         "input://server-config/server-1/server.properties/v1",
+		IdempotencyKey:   "idem-config",
+	}
+	if err := ValidateRunJobAssignment(assignment); err != nil {
+		t.Fatalf("expected valid config write assignment: %v", err)
+	}
+
+	assignment.TargetKey = "/Users/tasia/server.properties"
+	if err := ValidateRunJobAssignment(assignment); err == nil || !strings.Contains(err.Error(), "targetKey") {
+		t.Fatalf("expected raw host path rejection, got %v", err)
+	}
+
+	assignment.TargetKey = "server.properties"
+	assignment.InputRef = "sk-raw-secret"
+	if err := ValidateRunJobAssignment(assignment); err == nil || !strings.Contains(err.Error(), "inputRef") {
+		t.Fatalf("expected raw credential ref rejection, got %v", err)
+	}
+}
+
+func TestValidateRunJobAssignmentScopedReadDoesNotRequireInputRef(t *testing.T) {
+	assignment := RunJobAssignment{
+		JobID:            "job-files-read",
+		ServerInstanceID: "server-1",
+		RunEndpointID:    "run-local",
+		Capability:       RunCapabilityFilesRead,
+		TargetKey:        "logs/latest.log",
+		IdempotencyKey:   "idem-read",
+	}
+	if err := ValidateRunJobAssignment(assignment); err != nil {
+		t.Fatalf("expected valid file read assignment: %v", err)
+	}
+}
diff --git a/run/protocol/log-ingest.md b/run/protocol/log-ingest.md
new file mode 100644
index 0000000..b3fb766
--- /dev/null
+++ b/run/protocol/log-ingest.md
@@ -0,0 +1,30 @@
+# Run Log Ingest Contract
+
+Logs are durable historical data. They are not transported as best-effort UI messages.
+
+## Implemented Routes
+
+- `POST /api/v1/run/logs/batches`: uploads one bounded log batch and receives an acknowledgement range.
+- `POST /api/v1/log-streams/query`: queries stored log entries after a stream sequence cursor.
+
+## Payloads
+
+- `LogBatchIngestRequest`: run ID, session token, server instance ID, stream ID, source, sequence range, compression metadata, checksum, and bounded entries.
+- `LogEntry`: sequence, timestamp, level, line, parser metadata, and redaction state.
+- `LogBatchIngestResponse`: accepted sequence range, latest acknowledged sequence, duplicate flag, retry hint, and server time.
+- `LogStreamCursorRequest`: stream ID, sequence cursor, and limit.
+- `LogStreamCursorResponse`: ordered entries, next cursor, and latest acknowledged sequence.
+
+## Local Spool
+
+Run must write unacknowledged logs to a local spool/WAL before upload. Segments may be removed only after platform acknowledgement.
+
+## Priority
+
+Log flush has higher priority than artifact transfer. Artifact work must slow down when log spool pressure rises.
+
+Log spool retry state is independent from artifact/file retry state. Acknowledged log batches may be removed even when artifact chunks are still pending, and artifact chunk acknowledgement must not alter log sequence state. Log ingest payloads carry bounded entries only and must not include artifact chunks, file bodies, host paths, raw credentials, or direct socket details.
+
+## Deferred Channels
+
+Browser live tail, external log storage backends, and optional game client bridge traffic remain separate future channels. Artifact transfer uses its own lower-priority channel and must not be multiplexed through log ingest.
diff --git a/run/protocol/log_ingest.go b/run/protocol/log_ingest.go
new file mode 100644
index 0000000..540aee1
--- /dev/null
+++ b/run/protocol/log_ingest.go
@@ -0,0 +1,50 @@
+package protocol
+
+import "time"
+
+type LogEntry struct {
+	Seq       uint64            `json:"seq"`
+	Timestamp time.Time         `json:"timestamp"`
+	Level     string            `json:"level,omitempty"`
+	Line      string            `json:"line"`
+	Fields    map[string]string `json:"fields,omitempty"`
+	Redacted  bool              `json:"redacted"`
+}
+
+type LogBatchIngestRequest struct {
+	RunEndpointID    string     `json:"runEndpointId"`
+	SessionToken     string     `json:"sessionToken"`
+	LogStreamID      string     `json:"logStreamId"`
+	ServerInstanceID string     `json:"serverInstanceId"`
+	StreamKey        string     `json:"streamKey"`
+	Source           string     `json:"source"`
+	FirstSeq         uint64     `json:"firstSeq"`
+	LastSeq          uint64     `json:"lastSeq"`
+	Compression      string     `json:"compression"`
+	Checksum         string     `json:"checksum"`
+	Entries          []LogEntry `json:"entries"`
+}
+
+type LogBatchIngestResponse struct {
+	Accepted      bool      `json:"accepted"`
+	LogStreamID   string    `json:"logStreamId"`
+	AcceptedFrom  uint64    `json:"acceptedFrom"`
+	AcceptedTo    uint64    `json:"acceptedTo"`
+	LatestSeq     uint64    `json:"latestSeq"`
+	Duplicate     bool      `json:"duplicate"`
+	RetryAfterSec int       `json:"retryAfterSec,omitempty"`
+	ServerTime    time.Time `json:"serverTime"`
+}
+
+type LogStreamCursorRequest struct {
+	LogStreamID string `json:"logStreamId"`
+	AfterSeq    uint64 `json:"afterSeq"`
+	Limit       int    `json:"limit"`
+}
+
+type LogStreamCursorResponse struct {
+	LogStreamID string     `json:"logStreamId"`
+	Entries     []LogEntry `json:"entries"`
+	NextSeq     uint64     `json:"nextSeq"`
+	LatestSeq   uint64     `json:"latestSeq"`
+}
diff --git a/run/runtime/lifecycle.go b/run/runtime/lifecycle.go
new file mode 100644
index 0000000..2da0d5d
--- /dev/null
+++ b/run/runtime/lifecycle.go
@@ -0,0 +1,454 @@
+package runtime
+
+import (
+	"bytes"
+	"context"
+	"crypto/sha256"
+	"encoding/hex"
+	"encoding/json"
+	"fmt"
+	"net/url"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"regexp"
+	"strings"
+	"time"
+
+	"browser.local/run/protocol"
+)
+
+const (
+	lifecycleResultStateSucceeded = "succeeded"
+	lifecycleResultStateFailed    = "failed"
+	lifecycleResultStateCancelled = "cancelled"
+
+	defaultLifecycleTimeout = 30 * time.Second
+	maxLifecycleOutputBytes = 4096
+)
+
+var (
+	commandNamePattern    = regexp.MustCompile(`^[A-Za-z0-9._-]+$`)
+	envNamePattern        = regexp.MustCompile(`^[A-Z][A-Z0-9_]{0,63}$`)
+	disallowedExecutables = map[string]struct{}{
+		"bash":       {},
+		"cmd":        {},
+		"fish":       {},
+		"powershell": {},
+		"pwsh":       {},
+		"sh":         {},
+		"zsh":        {},
+	}
+)
+
+type LifecycleExecutor struct {
+	workspaceRoot string
+	supervisor    ProcessSupervisor
+	logSink       ProcessLogSink
+	artifactHook  LifecycleArtifactHook
+}
+
+type LifecycleExecutionResult struct {
+	State     string
+	Progress  protocol.RunJobProgressReport
+	ResultRef string
+	Message   string
+	ErrorCode string
+}
+
+type LifecycleExecutorOption func(*LifecycleExecutor)
+
+func NewLifecycleExecutor(options ...LifecycleExecutorOption) LifecycleExecutor {
+	executor := LifecycleExecutor{
+		workspaceRoot: filepath.Join(".", ".run-workspace"),
+		supervisor:    OSProcessSupervisor{},
+		logSink:       NoopProcessLogSink{},
+		artifactHook:  StaticLifecycleArtifactHook{},
+	}
+	for _, option := range options {
+		option(&executor)
+	}
+	return executor
+}
+
+func WithLifecycleWorkspaceRoot(root string) LifecycleExecutorOption {
+	return func(executor *LifecycleExecutor) {
+		if strings.TrimSpace(root) != "" {
+			executor.workspaceRoot = root
+		}
+	}
+}
+
+func WithProcessSupervisor(supervisor ProcessSupervisor) LifecycleExecutorOption {
+	return func(executor *LifecycleExecutor) {
+		if supervisor != nil {
+			executor.supervisor = supervisor
+		}
+	}
+}
+
+func WithProcessLogSink(sink ProcessLogSink) LifecycleExecutorOption {
+	return func(executor *LifecycleExecutor) {
+		if sink != nil {
+			executor.logSink = sink
+		}
+	}
+}
+
+func WithLifecycleArtifactHook(hook LifecycleArtifactHook) LifecycleExecutorOption {
+	return func(executor *LifecycleExecutor) {
+		if hook != nil {
+			executor.artifactHook = hook
+		}
+	}
+}
+
+func SupportedLifecycleCapabilities() []string {
+	return []string{
+		protocol.RunCapabilityProcessInstall,
+		protocol.RunCapabilityProcessStart,
+		protocol.RunCapabilityProcessStop,
+	}
+}
+
+func SupportedRunCapabilities() []string {
+	capabilities := append([]string(nil), SupportedLifecycleCapabilities()...)
+	capabilities = append(capabilities, protocol.RunCapabilityLogsRead)
+	return capabilities
+}
+
+func (executor LifecycleExecutor) SupportedCapabilities() []string {
+	return SupportedLifecycleCapabilities()
+}
+
+func (executor LifecycleExecutor) Execute(assignment protocol.RunJobAssignment) LifecycleExecutionResult {
+	return executor.ExecuteContext(context.Background(), assignment)
+}
+
+func (executor LifecycleExecutor) ExecuteContext(ctx context.Context, assignment protocol.RunJobAssignment) LifecycleExecutionResult {
+	if !isSupportedLifecycleCapability(assignment.Capability) {
+		return lifecycleFailure("unsupported_lifecycle_capability", "unsupported lifecycle capability")
+	}
+	command, err := executor.ResolveCommand(assignment)
+	if err != nil {
+		return lifecycleFailure("unsafe_lifecycle_command", err.Error())
+	}
+	result, err := executor.supervisor.Run(ctx, command)
+	if err != nil && ctx.Err() != nil {
+		return LifecycleExecutionResult{
+			State:     lifecycleResultStateCancelled,
+			Progress:  protocol.RunJobProgressReport{Percent: 100, Message: "lifecycle action cancelled"},
+			Message:   "lifecycle action cancelled",
+			ErrorCode: "lifecycle_cancelled",
+		}
+	}
+	executor.writeProcessLogs(ctx, assignment, result)
+	if err != nil {
+		return lifecycleFailure("lifecycle_process_failed", RedactText(err.Error()))
+	}
+	if result.ExitCode != 0 {
+		return lifecycleFailure("lifecycle_process_failed", fmt.Sprintf("lifecycle command exited with code %d", result.ExitCode))
+	}
+	artifactRef, err := executor.artifactHook.QueueLifecycleResult(ctx, assignment, result)
+	if err != nil {
+		return lifecycleFailure("lifecycle_artifact_hook_failed", err.Error())
+	}
+	return LifecycleExecutionResult{
+		State:     lifecycleResultStateSucceeded,
+		Progress:  protocol.RunJobProgressReport{Percent: 100, Message: "lifecycle action completed"},
+		ResultRef: artifactRef,
+		Message:   fmt.Sprintf("%s completed", assignment.Capability),
+	}
+}
+
+func (executor LifecycleExecutor) ResolveCommand(assignment protocol.RunJobAssignment) (ProcessCommand, error) {
+	workdir, err := scopedServerWorkspace(executor.workspaceRoot, assignment.ServerInstanceID)
+	if err != nil {
+		return ProcessCommand{}, err
+	}
+	if err := os.MkdirAll(workdir, 0o755); err != nil {
+		return ProcessCommand{}, fmt.Errorf("create scoped workspace: %w", err)
+	}
+	template := LifecycleActionTemplate{
+		Command:   []string{"true"},
+		TimeoutMS: int(defaultLifecycleTimeout / time.Millisecond),
+	}
+	if assignment.TargetKey != "" {
+		path, err := scopedPath(workdir, assignment.TargetKey)
+		if err != nil {
+			return ProcessCommand{}, err
+		}
+		file, err := os.Open(path)
+		if err != nil {
+			return ProcessCommand{}, fmt.Errorf("open lifecycle action template: %w", err)
+		}
+		decodeErr := json.NewDecoder(file).Decode(&template)
+		closeErr := file.Close()
+		if decodeErr != nil {
+			return ProcessCommand{}, fmt.Errorf("decode lifecycle action template: %w", decodeErr)
+		}
+		if closeErr != nil {
+			return ProcessCommand{}, fmt.Errorf("close lifecycle action template: %w", closeErr)
+		}
+	}
+	return template.ToProcessCommand(workdir)
+}
+
+func (executor LifecycleExecutor) writeProcessLogs(ctx context.Context, assignment protocol.RunJobAssignment, result ProcessResult) {
+	for _, item := range []struct {
+		stream string
+		body   string
+	}{
+		{stream: "stdout", body: result.Stdout},
+		{stream: "stderr", body: result.Stderr},
+	} {
+		for _, line := range splitBoundedLines(item.body) {
+			_ = executor.logSink.Append(ctx, assignment, item.stream, line)
+		}
+	}
+}
+
+type LifecycleActionTemplate struct {
+	Command   []string          `json:"command"`
+	Env       map[string]string `json:"env,omitempty"`
+	TimeoutMS int               `json:"timeoutMs,omitempty"`
+}
+
+func (template LifecycleActionTemplate) ToProcessCommand(workdir string) (ProcessCommand, error) {
+	if len(template.Command) == 0 {
+		return ProcessCommand{}, fmt.Errorf("command is required")
+	}
+	for i, part := range template.Command {
+		if strings.TrimSpace(part) == "" {
+			return ProcessCommand{}, fmt.Errorf("command part is required")
+		}
+		if containsUnsafeRuntimeText(part) {
+			return ProcessCommand{}, fmt.Errorf("command contains unsafe content")
+		}
+		if i == 0 {
+			if !commandNamePattern.MatchString(part) || strings.Contains(part, "/") || filepath.IsAbs(part) {
+				return ProcessCommand{}, fmt.Errorf("command executable must be an allowlisted name")
+			}
+			if _, disallowed := disallowedExecutables[strings.ToLower(part)]; disallowed {
+				return ProcessCommand{}, fmt.Errorf("command executable must not be a shell")
+			}
+			continue
+		}
+		if strings.ContainsAny(part, "|;&`$<>") {
+			return ProcessCommand{}, fmt.Errorf("command arguments must not contain shell metacharacters")
+		}
+	}
+	env := make(map[string]string, len(template.Env))
+	for key, value := range template.Env {
+		if !envNamePattern.MatchString(key) || !strings.HasPrefix(key, "GAME_") && !strings.HasPrefix(key, "SERVER_") && !strings.HasPrefix(key, "RUN_") {
+			return ProcessCommand{}, fmt.Errorf("env key is not allowlisted")
+		}
+		if containsUnsafeRuntimeText(value) {
+			return ProcessCommand{}, fmt.Errorf("env value contains unsafe content")
+		}
+		env[key] = value
+	}
+	timeout := defaultLifecycleTimeout
+	if template.TimeoutMS > 0 {
+		timeout = time.Duration(template.TimeoutMS) * time.Millisecond
+	}
+	if timeout > 5*time.Minute {
+		return ProcessCommand{}, fmt.Errorf("timeout is too large")
+	}
+	return ProcessCommand{WorkDir: workdir, Args: append([]string(nil), template.Command...), Env: env, Timeout: timeout}, nil
+}
+
+type ProcessCommand struct {
+	WorkDir string
+	Args    []string
+	Env     map[string]string
+	Timeout time.Duration
+}
+
+type ProcessResult struct {
+	ExitCode int
+	Stdout   string
+	Stderr   string
+}
+
+type ProcessSupervisor interface {
+	Run(context.Context, ProcessCommand) (ProcessResult, error)
+}
+
+type OSProcessSupervisor struct{}
+
+func (supervisor OSProcessSupervisor) Run(ctx context.Context, command ProcessCommand) (ProcessResult, error) {
+	if len(command.Args) == 0 {
+		return ProcessResult{ExitCode: -1}, fmt.Errorf("command is required")
+	}
+	if command.Timeout > 0 {
+		var cancel context.CancelFunc
+		ctx, cancel = context.WithTimeout(ctx, command.Timeout)
+		defer cancel()
+	}
+	cmd := exec.CommandContext(ctx, command.Args[0], command.Args[1:]...)
+	cmd.Dir = command.WorkDir
+	cmd.Env = os.Environ()
+	for key, value := range command.Env {
+		cmd.Env = append(cmd.Env, key+"="+value)
+	}
+	var stdout bytes.Buffer
+	var stderr bytes.Buffer
+	cmd.Stdout = ioLimitWriter{Writer: &stdout, Limit: maxLifecycleOutputBytes}
+	cmd.Stderr = ioLimitWriter{Writer: &stderr, Limit: maxLifecycleOutputBytes}
+	err := cmd.Run()
+	result := ProcessResult{Stdout: RedactText(stdout.String()), Stderr: RedactText(stderr.String())}
+	if cmd.ProcessState != nil {
+		result.ExitCode = cmd.ProcessState.ExitCode()
+	}
+	if err != nil {
+		return result, err
+	}
+	return result, nil
+}
+
+type ioLimitWriter struct {
+	Writer *bytes.Buffer
+	Limit  int
+}
+
+func (writer ioLimitWriter) Write(p []byte) (int, error) {
+	remaining := writer.Limit - writer.Writer.Len()
+	if remaining > 0 {
+		if len(p) > remaining {
+			_, _ = writer.Writer.Write(p[:remaining])
+		} else {
+			_, _ = writer.Writer.Write(p)
+		}
+	}
+	return len(p), nil
+}
+
+type ProcessLogSink interface {
+	Append(context.Context, protocol.RunJobAssignment, string, string) error
+}
+
+type NoopProcessLogSink struct{}
+
+func (NoopProcessLogSink) Append(context.Context, protocol.RunJobAssignment, string, string) error {
+	return nil
+}
+
+type LifecycleArtifactHook interface {
+	QueueLifecycleResult(context.Context, protocol.RunJobAssignment, ProcessResult) (string, error)
+}
+
+type StaticLifecycleArtifactHook struct{}
+
+func (StaticLifecycleArtifactHook) QueueLifecycleResult(_ context.Context, assignment protocol.RunJobAssignment, _ ProcessResult) (string, error) {
+	return fmt.Sprintf("artifact://jobs/%s/lifecycle-result", url.PathEscape(assignment.JobID)), nil
+}
+
+func LifecycleResultRequest(assignment protocol.RunJobAssignment, sessionToken string, result LifecycleExecutionResult) protocol.RunJobResultRequest {
+	return protocol.RunJobResultRequest{
+		RunEndpointID: assignment.RunEndpointID,
+		SessionToken:  sessionToken,
+		JobID:         assignment.JobID,
+		LeaseToken:    assignment.LeaseToken,
+		Attempt:       assignment.Attempt,
+		State:         result.State,
+		Progress:      result.Progress,
+		ResultRef:     result.ResultRef,
+		Message:       result.Message,
+		ErrorCode:     result.ErrorCode,
+	}
+}
+
+func isSupportedLifecycleCapability(capability string) bool {
+	for _, supported := range SupportedLifecycleCapabilities() {
+		if capability == supported {
+			return true
+		}
+	}
+	return false
+}
+
+func lifecycleFailure(code string, message string) LifecycleExecutionResult {
+	return LifecycleExecutionResult{
+		State:     lifecycleResultStateFailed,
+		Progress:  protocol.RunJobProgressReport{Percent: 100, Message: RedactText(message)},
+		Message:   RedactText(message),
+		ErrorCode: code,
+	}
+}
+
+func scopedServerWorkspace(root string, serverInstanceID string) (string, error) {
+	if strings.TrimSpace(serverInstanceID) == "" {
+		return "", fmt.Errorf("server instance id is required")
+	}
+	if containsUnsafeRuntimeText(serverInstanceID) || strings.ContainsAny(serverInstanceID, `/\`) || serverInstanceID == "." || serverInstanceID == ".." {
+		return "", fmt.Errorf("server instance id is unsafe")
+	}
+	return scopedPath(root, serverInstanceID)
+}
+
+func scopedPath(root string, key string) (string, error) {
+	if strings.TrimSpace(root) == "" {
+		return "", fmt.Errorf("workspace root is required")
+	}
+	if strings.TrimSpace(key) == "" {
+		return "", fmt.Errorf("logical key is required")
+	}
+	if filepath.IsAbs(key) || strings.Contains(key, "..") || strings.Contains(key, `\`) || containsUnsafeRuntimeText(key) {
+		return "", fmt.Errorf("logical key is unsafe")
+	}
+	cleanRoot, err := filepath.Abs(root)
+	if err != nil {
+		return "", err
+	}
+	candidate := filepath.Clean(filepath.Join(cleanRoot, filepath.FromSlash(key)))
+	rel, err := filepath.Rel(cleanRoot, candidate)
+	if err != nil {
+		return "", err
+	}
+	if rel == "." || strings.HasPrefix(rel, "..") || filepath.IsAbs(rel) {
+		return "", fmt.Errorf("logical key escapes workspace")
+	}
+	return candidate, nil
+}
+
+func containsUnsafeRuntimeText(value string) bool {
+	normalized := strings.ToLower(value)
+	for _, marker := range []string{"/users/", "/.ssh/", "password=", "apikey", "api_key", "secret=", "bearer ", "sk-", "unix://", "tcp://", "://"} {
+		if strings.Contains(normalized, marker) {
+			return true
+		}
+	}
+	return false
+}
+
+func RedactText(value string) string {
+	redacted := value
+	replacements := []string{"/Users/", "[host]/", "Bearer ", "Bearer [redacted] ", "sk-", "sk-[redacted]", "password=", "password=[redacted]", "api_key=", "api_key=[redacted]", "secret=", "secret=[redacted]", "unix://", "socket://"}
+	for i := 0; i+1 < len(replacements); i += 2 {
+		redacted = strings.ReplaceAll(redacted, replacements[i], replacements[i+1])
+	}
+	if len(redacted) > maxLifecycleOutputBytes {
+		return redacted[:maxLifecycleOutputBytes]
+	}
+	return redacted
+}
+
+func splitBoundedLines(value string) []string {
+	value = RedactText(value)
+	lines := strings.Split(value, "\n")
+	out := make([]string, 0, len(lines))
+	for _, line := range lines {
+		line = strings.TrimRight(line, "\r")
+		if strings.TrimSpace(line) == "" {
+			continue
+		}
+		out = append(out, line)
+	}
+	return out
+}
+
+func checksumForText(value string) string {
+	sum := sha256.Sum256([]byte(value))
+	return "sha256:" + hex.EncodeToString(sum[:])
+}
diff --git a/run/runtime/lifecycle_test.go b/run/runtime/lifecycle_test.go
new file mode 100644
index 0000000..8adb320
--- /dev/null
+++ b/run/runtime/lifecycle_test.go
@@ -0,0 +1,252 @@
+package runtime
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+	"time"
+
+	"browser.local/run/config"
+	"browser.local/run/protocol"
+)
+
+func TestLifecycleExecutorHandlesSupportedJobs(t *testing.T) {
+	executor := NewLifecycleExecutor()
+	for _, capability := range SupportedLifecycleCapabilities() {
+		assignment := lifecycleAssignment(capability)
+		result := executor.Execute(assignment)
+		if result.State != "succeeded" || result.Progress.Percent != 100 || result.ResultRef == "" {
+			t.Fatalf("expected successful bounded result for %s, got %+v", capability, result)
+		}
+		for _, forbidden := range []string{"host path", "/Users/", "run socket", "api_key", "sk-"} {
+			if strings.Contains(result.Message, forbidden) || strings.Contains(result.ResultRef, forbidden) {
+				t.Fatalf("lifecycle result exposed forbidden content %q: %+v", forbidden, result)
+			}
+		}
+	}
+}
+
+func TestLifecycleExecutorRejectsUnsupportedJobs(t *testing.T) {
+	result := NewLifecycleExecutor().Execute(lifecycleAssignment("files.write"))
+	if result.State != "failed" || result.ErrorCode != "unsupported_lifecycle_capability" || result.ResultRef != "" {
+		t.Fatalf("expected unsupported lifecycle failure, got %+v", result)
+	}
+}
+
+func TestLifecycleResultRequestUsesAssignmentLease(t *testing.T) {
+	assignment := lifecycleAssignment(protocol.RunCapabilityProcessStart)
+	execution := NewLifecycleExecutor().Execute(assignment)
+	request := LifecycleResultRequest(assignment, "session-token", execution)
+
+	if request.RunEndpointID != assignment.RunEndpointID || request.JobID != assignment.JobID || request.LeaseToken != assignment.LeaseToken || request.Attempt != assignment.Attempt {
+		t.Fatalf("expected result request to use assignment lease, got %+v", request)
+	}
+	if request.SessionToken != "session-token" || request.State != "succeeded" {
+		t.Fatalf("unexpected result request: %+v", request)
+	}
+}
+
+func TestLifecycleExecutorRunsScopedCommandTemplateAndHooks(t *testing.T) {
+	root := t.TempDir()
+	assignment := lifecycleAssignment(protocol.RunCapabilityProcessStart)
+	serverRoot := filepath.Join(root, assignment.ServerInstanceID)
+	if err := os.MkdirAll(filepath.Join(serverRoot, "actions"), 0o755); err != nil {
+		t.Fatalf("create action dir: %v", err)
+	}
+	template := LifecycleActionTemplate{
+		Command: []string{"echo", "server-ready"},
+		Env:     map[string]string{"GAME_MODE": "test"},
+	}
+	body, err := json.Marshal(template)
+	if err != nil {
+		t.Fatalf("marshal template: %v", err)
+	}
+	if err := os.WriteFile(filepath.Join(serverRoot, "actions", "start.json"), body, 0o644); err != nil {
+		t.Fatalf("write template: %v", err)
+	}
+	assignment.TargetKey = "actions/start.json"
+	logSink := &recordingLogSink{}
+	artifactHook := &recordingArtifactHook{}
+
+	result := NewLifecycleExecutor(
+		WithLifecycleWorkspaceRoot(root),
+		WithProcessLogSink(logSink),
+		WithLifecycleArtifactHook(artifactHook),
+	).Execute(assignment)
+
+	if result.State != "succeeded" || result.ResultRef != "artifact://jobs/job-1/lifecycle-result" {
+		t.Fatalf("expected scoped lifecycle success, got %+v", result)
+	}
+	if len(logSink.lines) != 1 || logSink.lines[0] != "stdout:server-ready" {
+		t.Fatalf("expected process stdout to be logged, got %+v", logSink.lines)
+	}
+	if !artifactHook.called {
+		t.Fatal("expected artifact hook to be called")
+	}
+}
+
+func TestLifecycleExecutorRejectsUnsafeTemplates(t *testing.T) {
+	root := t.TempDir()
+	assignment := lifecycleAssignment(protocol.RunCapabilityProcessStart)
+	serverRoot := filepath.Join(root, assignment.ServerInstanceID)
+	if err := os.MkdirAll(filepath.Join(serverRoot, "actions"), 0o755); err != nil {
+		t.Fatalf("create action dir: %v", err)
+	}
+	for name, template := range map[string]LifecycleActionTemplate{
+		"absolute": {Command: []string{"/bin/echo", "nope"}},
+		"shell":    {Command: []string{"sh", "-c", "echo nope"}},
+		"secret":   {Command: []string{"echo", "sk-secret"}},
+		"env":      {Command: []string{"echo", "ok"}, Env: map[string]string{"AWS_SECRET_ACCESS_KEY": "secret"}},
+	} {
+		body, err := json.Marshal(template)
+		if err != nil {
+			t.Fatalf("marshal %s: %v", name, err)
+		}
+		actionPath := filepath.Join(serverRoot, "actions", name+".json")
+		if err := os.WriteFile(actionPath, body, 0o644); err != nil {
+			t.Fatalf("write %s: %v", name, err)
+		}
+		unsafeAssignment := assignment
+		unsafeAssignment.TargetKey = "actions/" + name + ".json"
+		result := NewLifecycleExecutor(WithLifecycleWorkspaceRoot(root)).Execute(unsafeAssignment)
+		if result.State != "failed" || result.ErrorCode != "unsafe_lifecycle_command" {
+			t.Fatalf("expected unsafe command rejection for %s, got %+v", name, result)
+		}
+	}
+}
+
+func TestLifecycleExecutorRejectsWorkspaceEscapes(t *testing.T) {
+	root := t.TempDir()
+	assignment := lifecycleAssignment(protocol.RunCapabilityProcessStart)
+	assignment.TargetKey = "../outside.json"
+
+	result := NewLifecycleExecutor(WithLifecycleWorkspaceRoot(root)).Execute(assignment)
+
+	if result.State != "failed" || result.ErrorCode != "unsafe_lifecycle_command" {
+		t.Fatalf("expected workspace escape rejection, got %+v", result)
+	}
+}
+
+func TestLifecycleExecutorKeepsSiblingInstanceWorkspacesIsolated(t *testing.T) {
+	root := t.TempDir()
+	first := lifecycleAssignment(protocol.RunCapabilityProcessStart)
+	first.ServerInstanceID = "server-alpha"
+	second := lifecycleAssignment(protocol.RunCapabilityProcessStop)
+	second.JobID = "job-2"
+	second.ServerInstanceID = "server-beta"
+	for _, assignment := range []protocol.RunJobAssignment{first, second} {
+		serverRoot := filepath.Join(root, assignment.ServerInstanceID)
+		if err := os.MkdirAll(filepath.Join(serverRoot, "actions"), 0o755); err != nil {
+			t.Fatalf("create action dir for %s: %v", assignment.ServerInstanceID, err)
+		}
+		body, err := json.Marshal(LifecycleActionTemplate{Command: []string{"echo", assignment.ServerInstanceID}})
+		if err != nil {
+			t.Fatalf("marshal template: %v", err)
+		}
+		if err := os.WriteFile(filepath.Join(serverRoot, "actions", "lifecycle.json"), body, 0o644); err != nil {
+			t.Fatalf("write template for %s: %v", assignment.ServerInstanceID, err)
+		}
+	}
+	first.TargetKey = "actions/lifecycle.json"
+	second.TargetKey = "actions/lifecycle.json"
+	logSink := &recordingLogSink{}
+	executor := NewLifecycleExecutor(WithLifecycleWorkspaceRoot(root), WithProcessLogSink(logSink))
+
+	firstResult := executor.Execute(first)
+	secondResult := executor.Execute(second)
+
+	if firstResult.State != "succeeded" || secondResult.State != "succeeded" {
+		t.Fatalf("expected both lifecycle jobs to succeed, got first=%+v second=%+v", firstResult, secondResult)
+	}
+	joined := strings.Join(logSink.lines, "\n")
+	if !strings.Contains(joined, "stdout:server-alpha") || !strings.Contains(joined, "stdout:server-beta") {
+		t.Fatalf("expected instance-specific output, got %q", joined)
+	}
+	if _, err := os.Stat(filepath.Join(root, "server-alpha", "actions", "lifecycle.json")); err != nil {
+		t.Fatalf("expected alpha template to remain scoped: %v", err)
+	}
+	if _, err := os.Stat(filepath.Join(root, "server-beta", "actions", "lifecycle.json")); err != nil {
+		t.Fatalf("expected beta template to remain scoped: %v", err)
+	}
+}
+
+func TestLifecycleExecutorCancelsRunningCommand(t *testing.T) {
+	ctx, cancel := context.WithCancel(context.Background())
+	cancel()
+
+	result := NewLifecycleExecutor(WithProcessSupervisor(blockingSupervisor{})).ExecuteContext(ctx, lifecycleAssignment(protocol.RunCapabilityProcessStart))
+
+	if result.State != "cancelled" || result.ErrorCode != "lifecycle_cancelled" {
+		t.Fatalf("expected cancelled lifecycle result, got %+v", result)
+	}
+}
+
+func TestSmokeSummaryReportsLifecycleCapabilities(t *testing.T) {
+	summary := SmokeSummary(config.Config{Mode: "smoke", PlatformURL: "http://platform.test"})
+	for _, capability := range SupportedLifecycleCapabilities() {
+		if !containsCapability(summary.Capabilities, capability) {
+			t.Fatalf("expected smoke capabilities to include %s, got %+v", capability, summary.Capabilities)
+		}
+	}
+}
+
+func TestSmokeSummaryReportsLogReadCapability(t *testing.T) {
+	summary := SmokeSummary(config.Config{Mode: "smoke", PlatformURL: "http://platform.test"})
+	if !containsCapability(summary.Capabilities, protocol.RunCapabilityLogsRead) {
+		t.Fatalf("expected smoke capabilities to include %s, got %+v", protocol.RunCapabilityLogsRead, summary.Capabilities)
+	}
+}
+
+type recordingLogSink struct {
+	lines []string
+}
+
+func (sink *recordingLogSink) Append(_ context.Context, _ protocol.RunJobAssignment, stream string, line string) error {
+	sink.lines = append(sink.lines, stream+":"+line)
+	return nil
+}
+
+type recordingArtifactHook struct {
+	called bool
+}
+
+func (hook *recordingArtifactHook) QueueLifecycleResult(_ context.Context, assignment protocol.RunJobAssignment, _ ProcessResult) (string, error) {
+	hook.called = true
+	return fmt.Sprintf("artifact://jobs/%s/lifecycle-result", assignment.JobID), nil
+}
+
+type blockingSupervisor struct{}
+
+func (blockingSupervisor) Run(ctx context.Context, _ ProcessCommand) (ProcessResult, error) {
+	<-ctx.Done()
+	return ProcessResult{ExitCode: -1}, ctx.Err()
+}
+
+func lifecycleAssignment(capability string) protocol.RunJobAssignment {
+	now := time.Date(2026, 7, 3, 12, 0, 0, 0, time.UTC)
+	return protocol.RunJobAssignment{
+		JobID:            "job-1",
+		ServerInstanceID: "server-1",
+		RunEndpointID:    "run-local",
+		Capability:       capability,
+		IdempotencyKey:   "idem-1",
+		State:            "accepted",
+		LeaseToken:       "lease-1",
+		Attempt:          1,
+		CreatedAt:        now,
+		UpdatedAt:        now,
+	}
+}
+
+func containsCapability(capabilities []string, capability string) bool {
+	for _, item := range capabilities {
+		if item == capability {
+			return true
+		}
+	}
+	return false
+}
diff --git a/run/runtime/smoke.go b/run/runtime/smoke.go
new file mode 100644
index 0000000..b5e885b
--- /dev/null
+++ b/run/runtime/smoke.go
@@ -0,0 +1,19 @@
+package runtime
+
+import (
+	"browser.local/run/config"
+	"browser.local/run/domain"
+)
+
+func SmokeSummary(cfg config.Config) domain.ExecutorStatus {
+	return domain.ExecutorStatus{
+		Mode:            cfg.Mode,
+		PlatformURL:     cfg.PlatformURL,
+		Status:          "ok",
+		ExposedHostPath: false,
+		Capabilities: append([]string{
+			"control.hello",
+			"control.heartbeat",
+		}, SupportedRunCapabilities()...),
+	}
+}
diff --git a/run/runtime/smoke_test.go b/run/runtime/smoke_test.go
new file mode 100644
index 0000000..927159b
--- /dev/null
+++ b/run/runtime/smoke_test.go
@@ -0,0 +1,24 @@
+package runtime
+
+import (
+	"testing"
+
+	"browser.local/run/config"
+)
+
+func TestSmokeSummaryDoesNotExposeHostPaths(t *testing.T) {
+	summary := SmokeSummary(config.Config{
+		Mode:        "smoke",
+		PlatformURL: "http://platform.test",
+	})
+
+	if summary.Status != "ok" {
+		t.Fatalf("expected ok status, got %q", summary.Status)
+	}
+	if summary.ExposedHostPath {
+		t.Fatal("smoke summary must not expose host paths")
+	}
+	if len(summary.Capabilities) == 0 {
+		t.Fatal("expected baseline capabilities")
+	}
+}
diff --git a/run/runtime/worker.go b/run/runtime/worker.go
new file mode 100644
index 0000000..2e95980
--- /dev/null
+++ b/run/runtime/worker.go
@@ -0,0 +1,384 @@
+package runtime
+
+import (
+	"context"
+	"fmt"
+	"runtime"
+	"strings"
+	"sync"
+	"time"
+
+	"browser.local/run/config"
+	"browser.local/run/protocol"
+	"browser.local/run/spool"
+)
+
+type WorkerClient interface {
+	Hello(context.Context, protocol.RunHelloRequest) (protocol.RunHelloResponse, error)
+	Heartbeat(context.Context, protocol.RunHeartbeatRequest) (protocol.RunHeartbeatResponse, error)
+	ClaimJob(context.Context, protocol.RunJobClaimRequest) (protocol.RunJobClaimResponse, error)
+	AckJob(context.Context, protocol.RunJobAckRequest) (protocol.RunJobAckResponse, error)
+	UpdateJobProgress(context.Context, protocol.RunJobProgressRequest) (protocol.RunJobProgressResponse, error)
+	CompleteJob(context.Context, protocol.RunJobResultRequest) (protocol.RunJobResultResponse, error)
+	PollJobCancel(context.Context, protocol.RunJobCancelPollRequest) (protocol.RunJobCancelPollResponse, error)
+	ReconcileJobs(context.Context, protocol.RunJobReconcileRequest) (protocol.RunJobReconcileResponse, error)
+}
+
+type Worker struct {
+	cfg      config.Config
+	client   WorkerClient
+	executor LifecycleExecutor
+	state    WorkerState
+	journal  *JobJournal
+}
+
+type WorkerState struct {
+	RunEndpointID string
+	SessionToken  string
+	Capabilities  []string
+	Capacity      protocol.RunCapacityReport
+	LastHeartbeat time.Time
+	Sequence      uint64
+}
+
+func NewWorker(cfg config.Config, client WorkerClient, options ...LifecycleExecutorOption) (*Worker, error) {
+	if client == nil {
+		return nil, fmt.Errorf("worker client is required")
+	}
+	if cfg.RunEndpointID == "" {
+		cfg.RunEndpointID = config.DefaultEndpointID
+	}
+	if cfg.DisplayName == "" {
+		cfg.DisplayName = config.DefaultDisplayName
+	}
+	if cfg.Version == "" {
+		cfg.Version = config.DefaultVersion
+	}
+	if cfg.MaxJobs <= 0 {
+		cfg.MaxJobs = 1
+	}
+	executorOptions := append([]LifecycleExecutorOption{
+		WithLifecycleWorkspaceRoot(cfg.WorkspaceRoot),
+	}, options...)
+	return &Worker{
+		cfg:      cfg,
+		client:   client,
+		executor: NewLifecycleExecutor(executorOptions...),
+		state: WorkerState{
+			RunEndpointID: cfg.RunEndpointID,
+			Capabilities:  SupportedRunCapabilities(),
+			Capacity:      protocol.RunCapacityReport{MaxJobs: cfg.MaxJobs},
+		},
+		journal: NewJobJournal(),
+	}, nil
+}
+
+func (worker *Worker) Register(ctx context.Context) error {
+	response, err := worker.client.Hello(ctx, protocol.RunHelloRequest{
+		RegistrationToken: worker.cfg.RegistrationToken,
+		RunEndpointID:     worker.cfg.RunEndpointID,
+		DisplayName:       worker.cfg.DisplayName,
+		Version:           worker.cfg.Version,
+		Status:            "online",
+		Platform:          runtime.GOOS,
+		CapabilityReport: protocol.RunCapabilityReport{
+			Capabilities: worker.state.Capabilities,
+			Fingerprint:  capabilityFingerprint(worker.state.Capabilities),
+		},
+		Capacity: worker.capacityReport(),
+	})
+	if err != nil {
+		return err
+	}
+	if !response.Accepted || response.SessionToken == "" {
+		return fmt.Errorf("run hello was not accepted")
+	}
+	worker.state.SessionToken = response.SessionToken
+	if sink, ok := worker.executor.logSink.(*SpoolLogSink); ok {
+		sink.RunEndpointID = worker.state.RunEndpointID
+		sink.SessionToken = worker.state.SessionToken
+	}
+	if hook, ok := worker.executor.artifactHook.(*QueueArtifactHook); ok {
+		hook.RunEndpointID = worker.state.RunEndpointID
+		hook.SessionToken = worker.state.SessionToken
+	}
+	return nil
+}
+
+func (worker *Worker) HeartbeatOnce(ctx context.Context) error {
+	if worker.state.SessionToken == "" {
+		return fmt.Errorf("worker is not registered")
+	}
+	response, err := worker.client.Heartbeat(ctx, protocol.RunHeartbeatRequest{
+		RunEndpointID:         worker.state.RunEndpointID,
+		SessionToken:          worker.state.SessionToken,
+		Version:               worker.cfg.Version,
+		Status:                "online",
+		CapabilityFingerprint: capabilityFingerprint(worker.state.Capabilities),
+		Capacity:              worker.capacityReport(),
+	})
+	if err != nil {
+		return err
+	}
+	if !response.Accepted {
+		return fmt.Errorf("heartbeat was not accepted")
+	}
+	worker.state.LastHeartbeat = response.ServerTime
+	return nil
+}
+
+func (worker *Worker) ClaimAndRunOnce(ctx context.Context) (bool, error) {
+	if worker.state.SessionToken == "" {
+		return false, fmt.Errorf("worker is not registered")
+	}
+	claim, err := worker.client.ClaimJob(ctx, protocol.RunJobClaimRequest{
+		RunEndpointID: worker.state.RunEndpointID,
+		SessionToken:  worker.state.SessionToken,
+		Capabilities:  worker.state.Capabilities,
+		Capacity:      worker.capacityReport(),
+	})
+	if err != nil {
+		return false, err
+	}
+	if !claim.Accepted || !claim.HasJob || claim.Job == nil {
+		return false, nil
+	}
+	assignment := *claim.Job
+	worker.journal.MarkActive(assignment)
+	ack, err := worker.client.AckJob(ctx, protocol.RunJobAckRequest{
+		RunEndpointID: worker.state.RunEndpointID,
+		SessionToken:  worker.state.SessionToken,
+		JobID:         assignment.JobID,
+		LeaseToken:    assignment.LeaseToken,
+		Attempt:       assignment.Attempt,
+		Message:       "job accepted by run worker",
+	})
+	if err != nil {
+		return true, err
+	}
+	assignment = ack.Job
+	worker.journal.MarkActive(assignment)
+	worker.state.Sequence++
+	if _, err := worker.client.UpdateJobProgress(ctx, protocol.RunJobProgressRequest{
+		RunEndpointID: worker.state.RunEndpointID,
+		SessionToken:  worker.state.SessionToken,
+		JobID:         assignment.JobID,
+		LeaseToken:    assignment.LeaseToken,
+		Attempt:       assignment.Attempt,
+		Progress:      protocol.RunJobProgressReport{Percent: 10, Message: "lifecycle execution started"},
+		Sequence:      worker.state.Sequence,
+	}); err != nil {
+		return true, err
+	}
+	jobCtx, cancel := context.WithCancel(ctx)
+	cancelled := make(chan protocol.RunJobCancelPollResponse, 1)
+	go func() {
+		cancelPoll, pollErr := worker.client.PollJobCancel(ctx, protocol.RunJobCancelPollRequest{
+			RunEndpointID: worker.state.RunEndpointID,
+			SessionToken:  worker.state.SessionToken,
+			JobID:         assignment.JobID,
+			LeaseToken:    assignment.LeaseToken,
+		})
+		if pollErr == nil && cancelPoll.HasCancel {
+			cancel()
+			cancelled <- cancelPoll
+			return
+		}
+		cancelled <- protocol.RunJobCancelPollResponse{Accepted: true}
+	}()
+	execution := worker.executor.ExecuteContext(jobCtx, assignment)
+	cancel()
+	select {
+	case poll := <-cancelled:
+		if poll.HasCancel && execution.State == lifecycleResultStateSucceeded {
+			execution = LifecycleExecutionResult{
+				State:     lifecycleResultStateCancelled,
+				Progress:  protocol.RunJobProgressReport{Percent: 100, Message: "cancelled by platform"},
+				Message:   "cancelled by platform",
+				ErrorCode: "lifecycle_cancelled",
+			}
+		}
+	default:
+	}
+	if _, err := worker.client.CompleteJob(ctx, LifecycleResultRequest(assignment, worker.state.SessionToken, execution)); err != nil {
+		return true, err
+	}
+	worker.journal.MarkTerminal(assignment.JobID)
+	return true, nil
+}
+
+func (worker *Worker) ReconcileOnce(ctx context.Context) error {
+	if worker.state.SessionToken == "" {
+		return fmt.Errorf("worker is not registered")
+	}
+	response, err := worker.client.ReconcileJobs(ctx, protocol.RunJobReconcileRequest{
+		RunEndpointID: worker.state.RunEndpointID,
+		SessionToken:  worker.state.SessionToken,
+		ActiveJobIDs:  worker.journal.ActiveJobIDs(),
+	})
+	if err != nil {
+		return err
+	}
+	for _, job := range response.ActiveJobs {
+		worker.journal.MarkActive(job)
+	}
+	for _, unknown := range response.UnknownJobIDs {
+		worker.journal.MarkTerminal(unknown)
+	}
+	return nil
+}
+
+func (worker *Worker) Run(ctx context.Context) error {
+	if err := worker.Register(ctx); err != nil {
+		return err
+	}
+	heartbeatInterval := durationOrDefault(worker.cfg.HeartbeatInterval, 15*time.Second)
+	jobInterval := durationOrDefault(worker.cfg.PollInterval, 2*time.Second)
+	heartbeatTicker := time.NewTicker(heartbeatInterval)
+	jobTicker := time.NewTicker(jobInterval)
+	defer heartbeatTicker.Stop()
+	defer jobTicker.Stop()
+	for {
+		select {
+		case <-ctx.Done():
+			return ctx.Err()
+		case <-heartbeatTicker.C:
+			if err := worker.HeartbeatOnce(ctx); err != nil {
+				heartbeatTicker.Reset(boundedRetryBackoff(worker.cfg.RetryBackoff))
+				continue
+			}
+			heartbeatTicker.Reset(heartbeatInterval)
+		case <-jobTicker.C:
+			if _, err := worker.ClaimAndRunOnce(ctx); err != nil {
+				jobTicker.Reset(boundedRetryBackoff(worker.cfg.RetryBackoff))
+				continue
+			}
+			jobTicker.Reset(jobInterval)
+		}
+	}
+}
+
+func (worker *Worker) capacityReport() protocol.RunCapacityReport {
+	return protocol.RunCapacityReport{
+		MaxJobs:     worker.state.Capacity.MaxJobs,
+		RunningJobs: worker.journal.ActiveCount(),
+		QueuedJobs:  0,
+		Summary:     "worker control active; job capacity reported separately",
+	}
+}
+
+func (worker *Worker) State() WorkerState {
+	state := worker.state
+	state.Capabilities = append([]string(nil), state.Capabilities...)
+	return state
+}
+
+type JobJournal struct {
+	mu     sync.Mutex
+	active map[string]protocol.RunJobAssignment
+}
+
+func NewJobJournal() *JobJournal {
+	return &JobJournal{active: map[string]protocol.RunJobAssignment{}}
+}
+
+func (journal *JobJournal) MarkActive(job protocol.RunJobAssignment) {
+	journal.mu.Lock()
+	defer journal.mu.Unlock()
+	journal.active[job.JobID] = job
+}
+
+func (journal *JobJournal) MarkTerminal(jobID string) {
+	journal.mu.Lock()
+	defer journal.mu.Unlock()
+	delete(journal.active, jobID)
+}
+
+func (journal *JobJournal) ActiveJobIDs() []string {
+	journal.mu.Lock()
+	defer journal.mu.Unlock()
+	ids := make([]string, 0, len(journal.active))
+	for id := range journal.active {
+		ids = append(ids, id)
+	}
+	return ids
+}
+
+func (journal *JobJournal) ActiveCount() int {
+	journal.mu.Lock()
+	defer journal.mu.Unlock()
+	return len(journal.active)
+}
+
+type SpoolLogSink struct {
+	RunEndpointID string
+	SessionToken  string
+	Spool         spool.LogSpool
+	seq           uint64
+}
+
+func (sink *SpoolLogSink) Append(_ context.Context, assignment protocol.RunJobAssignment, stream string, line string) error {
+	sink.seq++
+	entry := protocol.LogEntry{Seq: sink.seq, Timestamp: time.Now().UTC(), Level: "info", Line: RedactText(line), Redacted: line != RedactText(line)}
+	logStreamID := fmt.Sprintf("job.%s.%s", assignment.JobID, stream)
+	return sink.Spool.Enqueue(protocol.LogBatchIngestRequest{
+		RunEndpointID:    sink.RunEndpointID,
+		SessionToken:     sink.SessionToken,
+		LogStreamID:      logStreamID,
+		ServerInstanceID: assignment.ServerInstanceID,
+		StreamKey:        stream,
+		Source:           "process",
+		FirstSeq:         sink.seq,
+		LastSeq:          sink.seq,
+		Checksum:         checksumForText(entry.Line),
+		Entries:          []protocol.LogEntry{entry},
+	})
+}
+
+type QueueArtifactHook struct {
+	RunEndpointID string
+	SessionToken  string
+	Queue         spool.ArtifactQueue
+}
+
+func (hook QueueArtifactHook) QueueLifecycleResult(_ context.Context, assignment protocol.RunJobAssignment, result ProcessResult) (string, error) {
+	ref := fmt.Sprintf("artifact://jobs/%s/lifecycle-result", assignment.JobID)
+	payload := []byte(RedactText(result.Stdout + result.Stderr))
+	if len(payload) == 0 {
+		payload = []byte("lifecycle result metadata")
+	}
+	artifactID := "artifact-" + assignment.JobID + "-lifecycle"
+	if err := hook.Queue.Enqueue(protocol.ArtifactChunkUploadRequest{
+		RunEndpointID: hook.RunEndpointID,
+		SessionToken:  hook.SessionToken,
+		TransferID:    "transfer-" + assignment.JobID,
+		ArtifactID:    artifactID,
+		ChunkIndex:    0,
+		Offset:        0,
+		SizeBytes:     len(payload),
+		Checksum:      checksumForText(string(payload)),
+		Payload:       payload,
+	}); err != nil {
+		return "", err
+	}
+	return ref, nil
+}
+
+func capabilityFingerprint(capabilities []string) string {
+	return checksumForText(strings.Join(capabilities, ","))
+}
+
+func durationOrDefault(value time.Duration, fallback time.Duration) time.Duration {
+	if value <= 0 {
+		return fallback
+	}
+	return value
+}
+
+func boundedRetryBackoff(value time.Duration) time.Duration {
+	value = durationOrDefault(value, time.Second)
+	if value > 30*time.Second {
+		return 30 * time.Second
+	}
+	return value
+}
diff --git a/run/runtime/worker_test.go b/run/runtime/worker_test.go
new file mode 100644
index 0000000..61de3f0
--- /dev/null
+++ b/run/runtime/worker_test.go
@@ -0,0 +1,401 @@
+package runtime
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"reflect"
+	"strings"
+	"testing"
+	"time"
+
+	"browser.local/run/api"
+	"browser.local/run/config"
+	"browser.local/run/protocol"
+	"browser.local/run/spool"
+)
+
+func TestWorkerRegistersHeartbeatsAndStoresSession(t *testing.T) {
+	client := newFakeWorkerClient()
+	worker, err := NewWorker(workerTestConfig(t), client)
+	if err != nil {
+		t.Fatalf("new worker: %v", err)
+	}
+
+	if err := worker.Register(context.Background()); err != nil {
+		t.Fatalf("register: %v", err)
+	}
+	if worker.State().SessionToken != "session-token" {
+		t.Fatalf("expected session token stored, got %+v", worker.State())
+	}
+	if len(client.helloRequests) != 1 || client.helloRequests[0].RegistrationToken != "registration-token" || len(client.helloRequests[0].CapabilityReport.Capabilities) == 0 {
+		t.Fatalf("unexpected hello request: %+v", client.helloRequests)
+	}
+
+	if err := worker.HeartbeatOnce(context.Background()); err != nil {
+		t.Fatalf("heartbeat: %v", err)
+	}
+	if len(client.heartbeatRequests) != 1 {
+		t.Fatalf("expected heartbeat request")
+	}
+	heartbeat := client.heartbeatRequests[0]
+	if heartbeat.SessionToken != "session-token" || heartbeat.Capacity.MaxJobs != 2 || heartbeat.Capacity.RunningJobs != 0 {
+		t.Fatalf("unexpected heartbeat request: %+v", heartbeat)
+	}
+	for _, forbidden := range []string{"/Users/", "unix://", "Bearer ", "sk-", "password=", "artifact", "log"} {
+		if containsText(heartbeat.Capacity.Summary, forbidden) {
+			t.Fatalf("heartbeat summary exposed forbidden fragment %q: %+v", forbidden, heartbeat)
+		}
+	}
+}
+
+func TestWorkerClaimsAcksProgressAndCompletesJob(t *testing.T) {
+	client := newFakeWorkerClient()
+	client.claimJob = workerJobAssignment(protocol.RunCapabilityProcessStart)
+	worker, err := NewWorker(workerTestConfig(t), client, WithProcessSupervisor(staticSupervisor{stdout: "server ready\n"}))
+	if err != nil {
+		t.Fatalf("new worker: %v", err)
+	}
+	if err := worker.Register(context.Background()); err != nil {
+		t.Fatalf("register: %v", err)
+	}
+
+	handled, err := worker.ClaimAndRunOnce(context.Background())
+	if err != nil || !handled {
+		t.Fatalf("claim/run handled=%v err=%v", handled, err)
+	}
+	if len(client.ackRequests) != 1 || len(client.progressRequests) != 1 || len(client.resultRequests) != 1 || len(client.cancelPollRequests) != 1 {
+		t.Fatalf("expected ack/progress/result/cancel calls, got ack=%d progress=%d result=%d cancel=%d", len(client.ackRequests), len(client.progressRequests), len(client.resultRequests), len(client.cancelPollRequests))
+	}
+	if client.progressRequests[0].Progress.Percent != 10 || client.resultRequests[0].State != "succeeded" || client.resultRequests[0].ResultRef == "" {
+		t.Fatalf("unexpected job channel payloads: progress=%+v result=%+v", client.progressRequests[0], client.resultRequests[0])
+	}
+	if worker.journal.ActiveCount() != 0 {
+		t.Fatalf("expected terminal job removed from journal")
+	}
+}
+
+func TestWorkerHandlesCancellationAndReconcile(t *testing.T) {
+	client := newFakeWorkerClient()
+	client.claimJob = workerJobAssignment(protocol.RunCapabilityProcessStart)
+	client.cancelResponse = protocol.RunJobCancelPollResponse{Accepted: true, RunEndpointID: "run-test", HasCancel: true, JobID: "job-worker", Reason: "operator requested", ServerTime: workerTestTime()}
+	worker, err := NewWorker(workerTestConfig(t), client, WithProcessSupervisor(blockingSupervisor{}))
+	if err != nil {
+		t.Fatalf("new worker: %v", err)
+	}
+	if err := worker.Register(context.Background()); err != nil {
+		t.Fatalf("register: %v", err)
+	}
+
+	handled, err := worker.ClaimAndRunOnce(context.Background())
+	if err != nil || !handled {
+		t.Fatalf("claim/run handled=%v err=%v", handled, err)
+	}
+	if len(client.resultRequests) != 1 || client.resultRequests[0].State != "cancelled" || client.resultRequests[0].ErrorCode != "lifecycle_cancelled" {
+		t.Fatalf("expected cancelled terminal result, got %+v", client.resultRequests)
+	}
+
+	worker.journal.MarkActive(workerJobAssignment(protocol.RunCapabilityProcessStart))
+	client.reconcileResponse = protocol.RunJobReconcileResponse{
+		Accepted:      true,
+		RunEndpointID: "run-test",
+		ActiveJobs:    []protocol.RunJobAssignment{workerJobAssignment(protocol.RunCapabilityProcessStop)},
+		UnknownJobIDs: []string{"job-worker"},
+		ServerTime:    workerTestTime(),
+	}
+	if err := worker.ReconcileOnce(context.Background()); err != nil {
+		t.Fatalf("reconcile: %v", err)
+	}
+	if ids := worker.journal.ActiveJobIDs(); !reflect.DeepEqual(ids, []string{"job-worker-stop"}) {
+		t.Fatalf("expected reconcile to replace active job ids, got %+v", ids)
+	}
+}
+
+func TestWorkerSpoolHooksUseRegisteredSession(t *testing.T) {
+	client := newFakeWorkerClient()
+	client.claimJob = workerJobAssignment(protocol.RunCapabilityProcessStart)
+	logSpool, err := spool.NewLogSpool(t.TempDir())
+	if err != nil {
+		t.Fatalf("log spool: %v", err)
+	}
+	artifactQueue, err := spool.NewArtifactQueue(t.TempDir())
+	if err != nil {
+		t.Fatalf("artifact queue: %v", err)
+	}
+	worker, err := NewWorker(
+		workerTestConfig(t),
+		client,
+		WithProcessSupervisor(staticSupervisor{stdout: "started password=hidden\n"}),
+		WithProcessLogSink(&SpoolLogSink{Spool: logSpool}),
+		WithLifecycleArtifactHook(&QueueArtifactHook{Queue: artifactQueue}),
+	)
+	if err != nil {
+		t.Fatalf("new worker: %v", err)
+	}
+	if err := worker.Register(context.Background()); err != nil {
+		t.Fatalf("register: %v", err)
+	}
+	if _, err := worker.ClaimAndRunOnce(context.Background()); err != nil {
+		t.Fatalf("claim/run: %v", err)
+	}
+	logs, err := logSpool.Pending()
+	if err != nil {
+		t.Fatalf("pending logs: %v", err)
+	}
+	if len(logs) != 1 || logs[0].RunEndpointID != "run-test" || logs[0].SessionToken != "session-token" || containsText(logs[0].Entries[0].Line, "password=hidden") {
+		t.Fatalf("unexpected spooled logs: %+v", logs)
+	}
+	chunks, err := artifactQueue.Pending()
+	if err != nil {
+		t.Fatalf("pending artifact chunks: %v", err)
+	}
+	if len(chunks) != 1 || chunks[0].RunEndpointID != "run-test" || chunks[0].SessionToken != "session-token" {
+		t.Fatalf("unexpected artifact chunks: %+v", chunks)
+	}
+}
+
+func TestWorkerRetryBackoffIsBounded(t *testing.T) {
+	if got := boundedRetryBackoff(75 * time.Millisecond); got != 75*time.Millisecond {
+		t.Fatalf("expected configured backoff, got %s", got)
+	}
+	if got := boundedRetryBackoff(time.Minute); got != 30*time.Second {
+		t.Fatalf("expected capped backoff, got %s", got)
+	}
+}
+
+func TestWorkerIntegrationWithPlatformLikeServer(t *testing.T) {
+	assignment := workerJobAssignment(protocol.RunCapabilityProcessStart)
+	seen := []string{}
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		seen = append(seen, r.URL.Path)
+		switch r.URL.Path {
+		case "/api/v1/run/control/hello":
+			var request protocol.RunHelloRequest
+			decodeWorkerTestJSON(t, r, &request)
+			if request.RunEndpointID != "run-test" || request.Capacity.MaxJobs != 2 {
+				t.Fatalf("unexpected hello: %+v", request)
+			}
+			writeWorkerTestJSON(t, w, protocol.RunHelloResponse{Accepted: true, RunEndpointID: request.RunEndpointID, SessionToken: "session-token", HeartbeatIntervalSeconds: 15, ServerTime: workerTestTime()})
+		case "/api/v1/run/control/heartbeat":
+			var request protocol.RunHeartbeatRequest
+			decodeWorkerTestJSON(t, r, &request)
+			if request.SessionToken != "session-token" || request.Capacity.RunningJobs != 0 {
+				t.Fatalf("unexpected heartbeat: %+v", request)
+			}
+			writeWorkerTestJSON(t, w, protocol.RunHeartbeatResponse{Accepted: true, RunEndpointID: request.RunEndpointID, NextHeartbeatSeconds: 15, ServerTime: workerTestTime()})
+		case "/api/v1/run/jobs/claim":
+			var request protocol.RunJobClaimRequest
+			decodeWorkerTestJSON(t, r, &request)
+			if request.SessionToken != "session-token" || len(request.Capabilities) == 0 {
+				t.Fatalf("unexpected claim: %+v", request)
+			}
+			writeWorkerTestJSON(t, w, protocol.RunJobClaimResponse{Accepted: true, RunEndpointID: request.RunEndpointID, HasJob: true, Job: &assignment, NextPollSeconds: 2, ServerTime: workerTestTime()})
+		case "/api/v1/run/jobs/ack":
+			var request protocol.RunJobAckRequest
+			decodeWorkerTestJSON(t, r, &request)
+			if request.JobID != assignment.JobID || request.LeaseToken != assignment.LeaseToken {
+				t.Fatalf("unexpected ack: %+v", request)
+			}
+			assignment.State = "running"
+			writeWorkerTestJSON(t, w, protocol.RunJobAckResponse{Accepted: true, Job: assignment, ServerTime: workerTestTime()})
+		case "/api/v1/run/jobs/progress":
+			var request protocol.RunJobProgressRequest
+			decodeWorkerTestJSON(t, r, &request)
+			if request.Progress.Percent != 10 {
+				t.Fatalf("unexpected progress: %+v", request)
+			}
+			assignment.Progress = request.Progress
+			writeWorkerTestJSON(t, w, protocol.RunJobProgressResponse{Accepted: true, Job: assignment, ServerTime: workerTestTime()})
+		case "/api/v1/run/jobs/cancel":
+			var request protocol.RunJobCancelPollRequest
+			decodeWorkerTestJSON(t, r, &request)
+			if request.JobID != assignment.JobID {
+				t.Fatalf("unexpected cancel poll: %+v", request)
+			}
+			writeWorkerTestJSON(t, w, protocol.RunJobCancelPollResponse{Accepted: true, RunEndpointID: request.RunEndpointID, ServerTime: workerTestTime()})
+		case "/api/v1/run/jobs/result":
+			var request protocol.RunJobResultRequest
+			decodeWorkerTestJSON(t, r, &request)
+			if request.State != "succeeded" || request.ResultRef == "" {
+				t.Fatalf("unexpected result: %+v", request)
+			}
+			assignment.State = request.State
+			assignment.ResultRef = request.ResultRef
+			writeWorkerTestJSON(t, w, protocol.RunJobResultResponse{Accepted: true, Job: assignment, ServerTime: workerTestTime()})
+		default:
+			t.Fatalf("unexpected path: %s", r.URL.Path)
+		}
+	}))
+	defer server.Close()
+
+	client, err := api.NewPlatformClient(server.URL)
+	if err != nil {
+		t.Fatalf("platform client: %v", err)
+	}
+	cfg := workerTestConfig(t)
+	cfg.PlatformURL = server.URL
+	worker, err := NewWorker(cfg, client, WithProcessSupervisor(staticSupervisor{stdout: "integration ok\n"}))
+	if err != nil {
+		t.Fatalf("new worker: %v", err)
+	}
+	if err := worker.Register(context.Background()); err != nil {
+		t.Fatalf("register: %v", err)
+	}
+	if err := worker.HeartbeatOnce(context.Background()); err != nil {
+		t.Fatalf("heartbeat: %v", err)
+	}
+	if handled, err := worker.ClaimAndRunOnce(context.Background()); err != nil || !handled {
+		t.Fatalf("claim/run handled=%v err=%v", handled, err)
+	}
+	expected := []string{
+		"/api/v1/run/control/hello",
+		"/api/v1/run/control/heartbeat",
+		"/api/v1/run/jobs/claim",
+		"/api/v1/run/jobs/ack",
+		"/api/v1/run/jobs/progress",
+		"/api/v1/run/jobs/cancel",
+		"/api/v1/run/jobs/result",
+	}
+	if !reflect.DeepEqual(seen, expected) {
+		t.Fatalf("unexpected platform flow: %+v", seen)
+	}
+}
+
+type fakeWorkerClient struct {
+	helloRequests      []protocol.RunHelloRequest
+	heartbeatRequests  []protocol.RunHeartbeatRequest
+	claimRequests      []protocol.RunJobClaimRequest
+	ackRequests        []protocol.RunJobAckRequest
+	progressRequests   []protocol.RunJobProgressRequest
+	resultRequests     []protocol.RunJobResultRequest
+	cancelPollRequests []protocol.RunJobCancelPollRequest
+	reconcileRequests  []protocol.RunJobReconcileRequest
+	claimJob           protocol.RunJobAssignment
+	cancelResponse     protocol.RunJobCancelPollResponse
+	reconcileResponse  protocol.RunJobReconcileResponse
+}
+
+func newFakeWorkerClient() *fakeWorkerClient {
+	return &fakeWorkerClient{
+		cancelResponse:    protocol.RunJobCancelPollResponse{Accepted: true, RunEndpointID: "run-test", ServerTime: workerTestTime()},
+		reconcileResponse: protocol.RunJobReconcileResponse{Accepted: true, RunEndpointID: "run-test", ServerTime: workerTestTime()},
+	}
+}
+
+func (client *fakeWorkerClient) Hello(_ context.Context, request protocol.RunHelloRequest) (protocol.RunHelloResponse, error) {
+	client.helloRequests = append(client.helloRequests, request)
+	return protocol.RunHelloResponse{Accepted: true, RunEndpointID: request.RunEndpointID, SessionToken: "session-token", ServerTime: workerTestTime(), HeartbeatIntervalSeconds: 15}, nil
+}
+
+func (client *fakeWorkerClient) Heartbeat(_ context.Context, request protocol.RunHeartbeatRequest) (protocol.RunHeartbeatResponse, error) {
+	client.heartbeatRequests = append(client.heartbeatRequests, request)
+	return protocol.RunHeartbeatResponse{Accepted: true, RunEndpointID: request.RunEndpointID, NextHeartbeatSeconds: 15, ServerTime: workerTestTime()}, nil
+}
+
+func (client *fakeWorkerClient) ClaimJob(_ context.Context, request protocol.RunJobClaimRequest) (protocol.RunJobClaimResponse, error) {
+	client.claimRequests = append(client.claimRequests, request)
+	if client.claimJob.JobID == "" {
+		return protocol.RunJobClaimResponse{Accepted: true, RunEndpointID: request.RunEndpointID, HasJob: false, NextPollSeconds: 2, ServerTime: workerTestTime()}, nil
+	}
+	job := client.claimJob
+	return protocol.RunJobClaimResponse{Accepted: true, RunEndpointID: request.RunEndpointID, HasJob: true, Job: &job, NextPollSeconds: 2, ServerTime: workerTestTime()}, nil
+}
+
+func (client *fakeWorkerClient) AckJob(_ context.Context, request protocol.RunJobAckRequest) (protocol.RunJobAckResponse, error) {
+	client.ackRequests = append(client.ackRequests, request)
+	job := client.claimJob
+	job.State = "running"
+	return protocol.RunJobAckResponse{Accepted: true, Job: job, ServerTime: workerTestTime()}, nil
+}
+
+func (client *fakeWorkerClient) UpdateJobProgress(_ context.Context, request protocol.RunJobProgressRequest) (protocol.RunJobProgressResponse, error) {
+	client.progressRequests = append(client.progressRequests, request)
+	job := client.claimJob
+	job.Progress = request.Progress
+	return protocol.RunJobProgressResponse{Accepted: true, Job: job, ServerTime: workerTestTime()}, nil
+}
+
+func (client *fakeWorkerClient) CompleteJob(_ context.Context, request protocol.RunJobResultRequest) (protocol.RunJobResultResponse, error) {
+	client.resultRequests = append(client.resultRequests, request)
+	job := client.claimJob
+	job.State = request.State
+	job.Progress = request.Progress
+	job.ResultRef = request.ResultRef
+	return protocol.RunJobResultResponse{Accepted: true, Job: job, ServerTime: workerTestTime()}, nil
+}
+
+func (client *fakeWorkerClient) PollJobCancel(_ context.Context, request protocol.RunJobCancelPollRequest) (protocol.RunJobCancelPollResponse, error) {
+	client.cancelPollRequests = append(client.cancelPollRequests, request)
+	return client.cancelResponse, nil
+}
+
+func (client *fakeWorkerClient) ReconcileJobs(_ context.Context, request protocol.RunJobReconcileRequest) (protocol.RunJobReconcileResponse, error) {
+	client.reconcileRequests = append(client.reconcileRequests, request)
+	return client.reconcileResponse, nil
+}
+
+type staticSupervisor struct {
+	stdout string
+	stderr string
+	err    error
+}
+
+func (supervisor staticSupervisor) Run(context.Context, ProcessCommand) (ProcessResult, error) {
+	return ProcessResult{ExitCode: 0, Stdout: supervisor.stdout, Stderr: supervisor.stderr}, supervisor.err
+}
+
+func workerTestConfig(t *testing.T) config.Config {
+	t.Helper()
+	return config.Config{
+		Mode:              "worker",
+		PlatformURL:       "http://platform.test",
+		RunEndpointID:     "run-test",
+		DisplayName:       "Run Test",
+		Version:           "0.1.0-test",
+		RegistrationToken: "registration-token",
+		WorkspaceRoot:     t.TempDir(),
+		SpoolRoot:         t.TempDir(),
+		MaxJobs:           2,
+		HeartbeatInterval: time.Second,
+		PollInterval:      time.Second,
+		RetryBackoff:      time.Millisecond,
+	}
+}
+
+func workerJobAssignment(capability string) protocol.RunJobAssignment {
+	job := lifecycleAssignment(capability)
+	job.JobID = "job-worker"
+	if capability == protocol.RunCapabilityProcessStop {
+		job.JobID = "job-worker-stop"
+	}
+	job.RunEndpointID = "run-test"
+	job.ServerInstanceID = "server-worker"
+	return job
+}
+
+func workerTestTime() time.Time {
+	return time.Date(2026, 7, 6, 12, 0, 0, 0, time.UTC)
+}
+
+func containsText(value string, needle string) bool {
+	return strings.Contains(value, needle)
+}
+
+func decodeWorkerTestJSON(t *testing.T, r *http.Request, target any) {
+	t.Helper()
+	if r.Method != http.MethodPost {
+		t.Fatalf("expected POST, got %s", r.Method)
+	}
+	if err := json.NewDecoder(r.Body).Decode(target); err != nil {
+		t.Fatalf("decode request: %v", err)
+	}
+}
+
+func writeWorkerTestJSON(t *testing.T, w http.ResponseWriter, value any) {
+	t.Helper()
+	w.Header().Set("Content-Type", "application/json")
+	if err := json.NewEncoder(w).Encode(value); err != nil {
+		t.Fatalf("encode response: %v", err)
+	}
+}
diff --git a/run/spool/README.md b/run/spool/README.md
new file mode 100644
index 0000000..0ea1a38
--- /dev/null
+++ b/run/spool/README.md
@@ -0,0 +1,19 @@
+# run/spool
+
+Local durable queues live here.
+
+Required spool areas:
+
+- `logs`: unacknowledged log segments.
+- `jobs`: accepted job journal for duplicate detection and reconciliation.
+- `artifacts`: incomplete artifact transfer state.
+
+Spool pressure must be visible in run capacity reports.
+
+## Channel Isolation
+
+- Log and artifact retry state are stored in separate spool areas and are acknowledged independently.
+- Acknowledging a log batch must not scan, remove, or block on artifact chunks.
+- Acknowledging an artifact chunk must not scan, remove, or block on log batches.
+- Control heartbeat and job ack/result payloads remain metadata-only; they must never carry spool file paths, artifact chunks, log entries, raw credentials, direct sockets, or large inline bodies.
+- Artifact transfer backlog is lower priority than log flush, job lifecycle calls, and control heartbeat.
diff --git a/run/spool/artifact_queue.go b/run/spool/artifact_queue.go
new file mode 100644
index 0000000..03953dc
--- /dev/null
+++ b/run/spool/artifact_queue.go
@@ -0,0 +1,125 @@
+package spool
+
+import (
+	"encoding/json"
+	"fmt"
+	"os"
+	"path/filepath"
+	"sort"
+	"strings"
+
+	"browser.local/run/protocol"
+)
+
+type ArtifactQueue struct {
+	dir string
+}
+
+func NewArtifactQueue(dir string) (ArtifactQueue, error) {
+	if strings.TrimSpace(dir) == "" {
+		return ArtifactQueue{}, fmt.Errorf("spool directory is required")
+	}
+	artifactDir := filepath.Join(dir, "artifacts")
+	if err := os.MkdirAll(artifactDir, 0o755); err != nil {
+		return ArtifactQueue{}, fmt.Errorf("create artifact queue: %w", err)
+	}
+	return ArtifactQueue{dir: artifactDir}, nil
+}
+
+func (queue ArtifactQueue) Enqueue(chunk protocol.ArtifactChunkUploadRequest) error {
+	path := queue.chunkPath(chunk)
+	tmp := path + ".tmp"
+	file, err := os.OpenFile(tmp, os.O_CREATE|os.O_TRUNC|os.O_WRONLY, 0o644)
+	if err != nil {
+		return fmt.Errorf("open artifact queue chunk: %w", err)
+	}
+	encodeErr := json.NewEncoder(file).Encode(chunk)
+	closeErr := file.Close()
+	if encodeErr != nil {
+		_ = os.Remove(tmp)
+		return fmt.Errorf("encode artifact queue chunk: %w", encodeErr)
+	}
+	if closeErr != nil {
+		_ = os.Remove(tmp)
+		return fmt.Errorf("close artifact queue chunk: %w", closeErr)
+	}
+	if err := os.Rename(tmp, path); err != nil {
+		_ = os.Remove(tmp)
+		return fmt.Errorf("commit artifact queue chunk: %w", err)
+	}
+	return nil
+}
+
+func (queue ArtifactQueue) Pending() ([]protocol.ArtifactChunkUploadRequest, error) {
+	entries, err := os.ReadDir(queue.dir)
+	if err != nil {
+		return nil, fmt.Errorf("read artifact queue: %w", err)
+	}
+	paths := make([]string, 0, len(entries))
+	for _, entry := range entries {
+		if entry.IsDir() || !strings.HasSuffix(entry.Name(), ".json") {
+			continue
+		}
+		paths = append(paths, filepath.Join(queue.dir, entry.Name()))
+	}
+	sort.Strings(paths)
+	chunks := make([]protocol.ArtifactChunkUploadRequest, 0, len(paths))
+	for _, path := range paths {
+		file, err := os.Open(path)
+		if err != nil {
+			return nil, fmt.Errorf("open artifact queue chunk: %w", err)
+		}
+		var chunk protocol.ArtifactChunkUploadRequest
+		decodeErr := json.NewDecoder(file).Decode(&chunk)
+		closeErr := file.Close()
+		if decodeErr != nil {
+			return nil, fmt.Errorf("decode artifact queue chunk: %w", decodeErr)
+		}
+		if closeErr != nil {
+			return nil, fmt.Errorf("close artifact queue chunk: %w", closeErr)
+		}
+		chunks = append(chunks, chunk)
+	}
+	return chunks, nil
+}
+
+func (queue ArtifactQueue) Ack(response protocol.ArtifactChunkUploadResponse) error {
+	if !response.Accepted {
+		return nil
+	}
+	entries, err := os.ReadDir(queue.dir)
+	if err != nil {
+		return fmt.Errorf("read artifact queue: %w", err)
+	}
+	for _, entry := range entries {
+		if entry.IsDir() || !strings.HasSuffix(entry.Name(), ".json") {
+			continue
+		}
+		path := filepath.Join(queue.dir, entry.Name())
+		file, err := os.Open(path)
+		if err != nil {
+			return fmt.Errorf("open artifact queue chunk: %w", err)
+		}
+		var chunk protocol.ArtifactChunkUploadRequest
+		decodeErr := json.NewDecoder(file).Decode(&chunk)
+		closeErr := file.Close()
+		if decodeErr != nil {
+			return fmt.Errorf("decode artifact queue chunk: %w", decodeErr)
+		}
+		if closeErr != nil {
+			return fmt.Errorf("close artifact queue chunk: %w", closeErr)
+		}
+		if chunk.TransferID == response.TransferID && chunk.ArtifactID == response.ArtifactID && chunk.ChunkIndex == response.ChunkIndex {
+			if err := os.Remove(path); err != nil {
+				return fmt.Errorf("remove acknowledged artifact queue chunk: %w", err)
+			}
+		}
+	}
+	return nil
+}
+
+func (queue ArtifactQueue) chunkPath(chunk protocol.ArtifactChunkUploadRequest) string {
+	transferID := sanitizeSegmentName(chunk.TransferID)
+	artifactID := sanitizeSegmentName(chunk.ArtifactID)
+	return filepath.Join(queue.dir, fmt.Sprintf("%s-%s-%020d.json", transferID, artifactID, chunk.ChunkIndex))
+}
diff --git a/run/spool/artifact_queue_test.go b/run/spool/artifact_queue_test.go
new file mode 100644
index 0000000..45dae9b
--- /dev/null
+++ b/run/spool/artifact_queue_test.go
@@ -0,0 +1,75 @@
+package spool
+
+import (
+	"testing"
+
+	"browser.local/run/protocol"
+)
+
+func TestArtifactQueueRetainsPendingAndRemovesAcknowledgedChunk(t *testing.T) {
+	queue, err := NewArtifactQueue(t.TempDir())
+	if err != nil {
+		t.Fatalf("new artifact queue: %v", err)
+	}
+	first := validQueuedArtifactChunk(0)
+	second := validQueuedArtifactChunk(1)
+	if err := queue.Enqueue(first); err != nil {
+		t.Fatalf("enqueue first: %v", err)
+	}
+	if err := queue.Enqueue(second); err != nil {
+		t.Fatalf("enqueue second: %v", err)
+	}
+	pending, err := queue.Pending()
+	if err != nil {
+		t.Fatalf("pending before ack: %v", err)
+	}
+	if len(pending) != 2 {
+		t.Fatalf("expected two pending chunks, got %+v", pending)
+	}
+
+	if err := queue.Ack(protocol.ArtifactChunkUploadResponse{Accepted: true, TransferID: "transfer-1", ArtifactID: "artifact-1", ChunkIndex: 0}); err != nil {
+		t.Fatalf("ack first: %v", err)
+	}
+	pending, err = queue.Pending()
+	if err != nil {
+		t.Fatalf("pending after ack: %v", err)
+	}
+	if len(pending) != 1 || pending[0].ChunkIndex != 1 {
+		t.Fatalf("expected second chunk pending, got %+v", pending)
+	}
+}
+
+func TestArtifactQueueRetainsChunkWhenAckDoesNotMatch(t *testing.T) {
+	queue, err := NewArtifactQueue(t.TempDir())
+	if err != nil {
+		t.Fatalf("new artifact queue: %v", err)
+	}
+	if err := queue.Enqueue(validQueuedArtifactChunk(0)); err != nil {
+		t.Fatalf("enqueue: %v", err)
+	}
+	if err := queue.Ack(protocol.ArtifactChunkUploadResponse{Accepted: true, TransferID: "transfer-1", ArtifactID: "artifact-1", ChunkIndex: 1}); err != nil {
+		t.Fatalf("ack mismatch: %v", err)
+	}
+	pending, err := queue.Pending()
+	if err != nil {
+		t.Fatalf("pending: %v", err)
+	}
+	if len(pending) != 1 || pending[0].ChunkIndex != 0 {
+		t.Fatalf("expected original chunk pending, got %+v", pending)
+	}
+}
+
+func validQueuedArtifactChunk(index int) protocol.ArtifactChunkUploadRequest {
+	payload := []byte{byte(index), byte(index + 1)}
+	return protocol.ArtifactChunkUploadRequest{
+		RunEndpointID: "run-local",
+		SessionToken:  "session-token",
+		TransferID:    "transfer-1",
+		ArtifactID:    "artifact-1",
+		ChunkIndex:    index,
+		Offset:        int64(index * len(payload)),
+		SizeBytes:     len(payload),
+		Checksum:      "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+		Payload:       payload,
+	}
+}
diff --git a/run/spool/channel_isolation_test.go b/run/spool/channel_isolation_test.go
new file mode 100644
index 0000000..c9c16ef
--- /dev/null
+++ b/run/spool/channel_isolation_test.go
@@ -0,0 +1,85 @@
+package spool
+
+import (
+	"testing"
+
+	"browser.local/run/protocol"
+)
+
+func TestLogSpoolAckIsIndependentFromArtifactBacklog(t *testing.T) {
+	root := t.TempDir()
+	logSpool, err := NewLogSpool(root)
+	if err != nil {
+		t.Fatalf("new log spool: %v", err)
+	}
+	artifactQueue, err := NewArtifactQueue(root)
+	if err != nil {
+		t.Fatalf("new artifact queue: %v", err)
+	}
+
+	if err := logSpool.Enqueue(validSpoolLogBatch(1, 1)); err != nil {
+		t.Fatalf("enqueue log: %v", err)
+	}
+	for i := 0; i < 3; i++ {
+		if err := artifactQueue.Enqueue(validQueuedArtifactChunk(i)); err != nil {
+			t.Fatalf("enqueue artifact chunk %d: %v", i, err)
+		}
+	}
+
+	if err := logSpool.Ack(protocol.LogBatchIngestResponse{Accepted: true, LogStreamID: "log-1", AcceptedFrom: 1, AcceptedTo: 1}); err != nil {
+		t.Fatalf("ack log batch: %v", err)
+	}
+	logs, err := logSpool.Pending()
+	if err != nil {
+		t.Fatalf("pending logs: %v", err)
+	}
+	if len(logs) != 0 {
+		t.Fatalf("expected log batch removed despite artifact backlog, got %+v", logs)
+	}
+	chunks, err := artifactQueue.Pending()
+	if err != nil {
+		t.Fatalf("pending artifacts: %v", err)
+	}
+	if len(chunks) != 3 {
+		t.Fatalf("artifact backlog should remain independent, got %+v", chunks)
+	}
+}
+
+func TestArtifactAckIsIndependentFromLogBacklog(t *testing.T) {
+	root := t.TempDir()
+	logSpool, err := NewLogSpool(root)
+	if err != nil {
+		t.Fatalf("new log spool: %v", err)
+	}
+	artifactQueue, err := NewArtifactQueue(root)
+	if err != nil {
+		t.Fatalf("new artifact queue: %v", err)
+	}
+
+	for _, batch := range []protocol.LogBatchIngestRequest{validSpoolLogBatch(1, 1), validSpoolLogBatch(2, 2)} {
+		if err := logSpool.Enqueue(batch); err != nil {
+			t.Fatalf("enqueue log batch: %v", err)
+		}
+	}
+	if err := artifactQueue.Enqueue(validQueuedArtifactChunk(0)); err != nil {
+		t.Fatalf("enqueue artifact chunk: %v", err)
+	}
+
+	if err := artifactQueue.Ack(protocol.ArtifactChunkUploadResponse{Accepted: true, TransferID: "transfer-1", ArtifactID: "artifact-1", ChunkIndex: 0}); err != nil {
+		t.Fatalf("ack artifact chunk: %v", err)
+	}
+	chunks, err := artifactQueue.Pending()
+	if err != nil {
+		t.Fatalf("pending artifacts: %v", err)
+	}
+	if len(chunks) != 0 {
+		t.Fatalf("expected artifact chunk removed despite log backlog, got %+v", chunks)
+	}
+	logs, err := logSpool.Pending()
+	if err != nil {
+		t.Fatalf("pending logs: %v", err)
+	}
+	if len(logs) != 2 {
+		t.Fatalf("log backlog should remain independent, got %+v", logs)
+	}
+}
diff --git a/run/spool/log_spool.go b/run/spool/log_spool.go
new file mode 100644
index 0000000..915d67d
--- /dev/null
+++ b/run/spool/log_spool.go
@@ -0,0 +1,136 @@
+package spool
+
+import (
+	"encoding/json"
+	"fmt"
+	"os"
+	"path/filepath"
+	"sort"
+	"strings"
+
+	"browser.local/run/protocol"
+)
+
+type LogSpool struct {
+	dir string
+}
+
+func NewLogSpool(dir string) (LogSpool, error) {
+	if strings.TrimSpace(dir) == "" {
+		return LogSpool{}, fmt.Errorf("spool directory is required")
+	}
+	logDir := filepath.Join(dir, "logs")
+	if err := os.MkdirAll(logDir, 0o755); err != nil {
+		return LogSpool{}, fmt.Errorf("create log spool: %w", err)
+	}
+	return LogSpool{dir: logDir}, nil
+}
+
+func (spool LogSpool) Enqueue(batch protocol.LogBatchIngestRequest) error {
+	path := spool.batchPath(batch)
+	tmp := path + ".tmp"
+	file, err := os.OpenFile(tmp, os.O_CREATE|os.O_TRUNC|os.O_WRONLY, 0o644)
+	if err != nil {
+		return fmt.Errorf("open log spool segment: %w", err)
+	}
+	encodeErr := json.NewEncoder(file).Encode(batch)
+	closeErr := file.Close()
+	if encodeErr != nil {
+		_ = os.Remove(tmp)
+		return fmt.Errorf("encode log spool segment: %w", encodeErr)
+	}
+	if closeErr != nil {
+		_ = os.Remove(tmp)
+		return fmt.Errorf("close log spool segment: %w", closeErr)
+	}
+	if err := os.Rename(tmp, path); err != nil {
+		_ = os.Remove(tmp)
+		return fmt.Errorf("commit log spool segment: %w", err)
+	}
+	return nil
+}
+
+func (spool LogSpool) Pending() ([]protocol.LogBatchIngestRequest, error) {
+	entries, err := os.ReadDir(spool.dir)
+	if err != nil {
+		return nil, fmt.Errorf("read log spool: %w", err)
+	}
+	paths := make([]string, 0, len(entries))
+	for _, entry := range entries {
+		if entry.IsDir() || !strings.HasSuffix(entry.Name(), ".json") {
+			continue
+		}
+		paths = append(paths, filepath.Join(spool.dir, entry.Name()))
+	}
+	sort.Strings(paths)
+	batches := make([]protocol.LogBatchIngestRequest, 0, len(paths))
+	for _, path := range paths {
+		file, err := os.Open(path)
+		if err != nil {
+			return nil, fmt.Errorf("open log spool segment: %w", err)
+		}
+		var batch protocol.LogBatchIngestRequest
+		decodeErr := json.NewDecoder(file).Decode(&batch)
+		closeErr := file.Close()
+		if decodeErr != nil {
+			return nil, fmt.Errorf("decode log spool segment: %w", decodeErr)
+		}
+		if closeErr != nil {
+			return nil, fmt.Errorf("close log spool segment: %w", closeErr)
+		}
+		batches = append(batches, batch)
+	}
+	return batches, nil
+}
+
+func (spool LogSpool) Ack(response protocol.LogBatchIngestResponse) error {
+	entries, err := os.ReadDir(spool.dir)
+	if err != nil {
+		return fmt.Errorf("read log spool: %w", err)
+	}
+	for _, entry := range entries {
+		if entry.IsDir() || !strings.HasSuffix(entry.Name(), ".json") {
+			continue
+		}
+		path := filepath.Join(spool.dir, entry.Name())
+		file, err := os.Open(path)
+		if err != nil {
+			return fmt.Errorf("open log spool segment: %w", err)
+		}
+		var batch protocol.LogBatchIngestRequest
+		decodeErr := json.NewDecoder(file).Decode(&batch)
+		closeErr := file.Close()
+		if decodeErr != nil {
+			return fmt.Errorf("decode log spool segment: %w", decodeErr)
+		}
+		if closeErr != nil {
+			return fmt.Errorf("close log spool segment: %w", closeErr)
+		}
+		if batch.LogStreamID == response.LogStreamID && batch.FirstSeq >= response.AcceptedFrom && batch.LastSeq <= response.AcceptedTo {
+			if err := os.Remove(path); err != nil {
+				return fmt.Errorf("remove acknowledged log spool segment: %w", err)
+			}
+		}
+	}
+	return nil
+}
+
+func (spool LogSpool) batchPath(batch protocol.LogBatchIngestRequest) string {
+	streamID := sanitizeSegmentName(batch.LogStreamID)
+	return filepath.Join(spool.dir, fmt.Sprintf("%s-%020d-%020d.json", streamID, batch.FirstSeq, batch.LastSeq))
+}
+
+func sanitizeSegmentName(value string) string {
+	var builder strings.Builder
+	for _, r := range value {
+		if r >= 'a' && r <= 'z' || r >= 'A' && r <= 'Z' || r >= '0' && r <= '9' || r == '-' || r == '_' || r == '.' {
+			builder.WriteRune(r)
+			continue
+		}
+		builder.WriteByte('_')
+	}
+	if builder.Len() == 0 {
+		return "stream"
+	}
+	return builder.String()
+}
diff --git a/run/spool/log_spool_test.go b/run/spool/log_spool_test.go
new file mode 100644
index 0000000..baa7485
--- /dev/null
+++ b/run/spool/log_spool_test.go
@@ -0,0 +1,81 @@
+package spool
+
+import (
+	"testing"
+	"time"
+
+	"browser.local/run/protocol"
+)
+
+func TestLogSpoolRetainsPendingAndRemovesAcknowledgedBatch(t *testing.T) {
+	spool, err := NewLogSpool(t.TempDir())
+	if err != nil {
+		t.Fatalf("new log spool: %v", err)
+	}
+	first := validSpoolLogBatch(1, 2)
+	second := validSpoolLogBatch(3, 3)
+	if err := spool.Enqueue(first); err != nil {
+		t.Fatalf("enqueue first: %v", err)
+	}
+	if err := spool.Enqueue(second); err != nil {
+		t.Fatalf("enqueue second: %v", err)
+	}
+	pending, err := spool.Pending()
+	if err != nil {
+		t.Fatalf("pending before ack: %v", err)
+	}
+	if len(pending) != 2 {
+		t.Fatalf("expected two pending batches, got %+v", pending)
+	}
+
+	if err := spool.Ack(protocol.LogBatchIngestResponse{LogStreamID: "log-1", AcceptedFrom: 1, AcceptedTo: 2}); err != nil {
+		t.Fatalf("ack first: %v", err)
+	}
+	pending, err = spool.Pending()
+	if err != nil {
+		t.Fatalf("pending after ack: %v", err)
+	}
+	if len(pending) != 1 || pending[0].FirstSeq != 3 {
+		t.Fatalf("expected second batch pending, got %+v", pending)
+	}
+}
+
+func TestLogSpoolRetainsBatchWhenAckDoesNotCoverRange(t *testing.T) {
+	spool, err := NewLogSpool(t.TempDir())
+	if err != nil {
+		t.Fatalf("new log spool: %v", err)
+	}
+	if err := spool.Enqueue(validSpoolLogBatch(1, 2)); err != nil {
+		t.Fatalf("enqueue: %v", err)
+	}
+	if err := spool.Ack(protocol.LogBatchIngestResponse{LogStreamID: "log-1", AcceptedFrom: 1, AcceptedTo: 1}); err != nil {
+		t.Fatalf("partial ack: %v", err)
+	}
+	pending, err := spool.Pending()
+	if err != nil {
+		t.Fatalf("pending: %v", err)
+	}
+	if len(pending) != 1 {
+		t.Fatalf("expected batch to remain pending, got %+v", pending)
+	}
+}
+
+func validSpoolLogBatch(firstSeq uint64, lastSeq uint64) protocol.LogBatchIngestRequest {
+	entries := make([]protocol.LogEntry, 0, lastSeq-firstSeq+1)
+	for seq := firstSeq; seq <= lastSeq; seq++ {
+		entries = append(entries, protocol.LogEntry{Seq: seq, Timestamp: time.Date(2026, 7, 3, 12, 0, int(seq), 0, time.UTC), Level: "info", Line: "line"})
+	}
+	return protocol.LogBatchIngestRequest{
+		RunEndpointID:    "run-local",
+		SessionToken:     "session-token",
+		LogStreamID:      "log-1",
+		ServerInstanceID: "server-1",
+		StreamKey:        "stdout",
+		Source:           "process",
+		FirstSeq:         firstSeq,
+		LastSeq:          lastSeq,
+		Compression:      "none",
+		Checksum:         "sha256:test",
+		Entries:          entries,
+	}
+}
diff --git a/scripts/browser-acceptance.sh b/scripts/browser-acceptance.sh
new file mode 100755
index 0000000..d6693bd
--- /dev/null
+++ b/scripts/browser-acceptance.sh
@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+# shellcheck source=scripts/local-debug-env.sh
+source "$ROOT_DIR/scripts/local-debug-env.sh"
+
+export BROWSER_ACCEPTANCE_EVIDENCE_DIR="${BROWSER_ACCEPTANCE_EVIDENCE_DIR:-$LOCAL_DEBUG_ROOT/browser-acceptance}"
+export LOCAL_DEBUG_PLATFORM_URL="${LOCAL_DEBUG_PLATFORM_URL:-$(local_debug_platform_url)}"
+export LOCAL_DEBUG_WEB_URL="${LOCAL_DEBUG_WEB_URL:-$(local_debug_web_url)}"
+
+SELF_STARTED="${BROWSER_ACCEPTANCE_SELF_START:-true}"
+
+cleanup() {
+  if [[ "$SELF_STARTED" == "true" ]]; then
+    LOCAL_DEBUG_ROOT="$LOCAL_DEBUG_ROOT" \
+    LOCAL_DEBUG_PLATFORM_PORT="$LOCAL_DEBUG_PLATFORM_PORT" \
+    LOCAL_DEBUG_WEB_PORT="$LOCAL_DEBUG_WEB_PORT" \
+      "$ROOT_DIR/scripts/local-debug-stop.sh" >/dev/null 2>&1 || true
+  fi
+}
+
+if [[ "$SELF_STARTED" == "true" ]]; then
+  trap cleanup EXIT
+  "$ROOT_DIR/scripts/local-debug-reset.sh"
+  "$ROOT_DIR/scripts/local-debug-start.sh"
+else
+  curl -fsS "$LOCAL_DEBUG_PLATFORM_URL/healthz" >/dev/null
+  curl -fsS "$LOCAL_DEBUG_WEB_URL" >/dev/null
+fi
+
+"$ROOT_DIR/scripts/local-debug-smoke.sh"
+
+mkdir -p "$BROWSER_ACCEPTANCE_EVIDENCE_DIR"
+node "$ROOT_DIR/platform_web/acceptance/browser-acceptance.mjs"
diff --git a/scripts/check-all.sh b/scripts/check-all.sh
new file mode 100755
index 0000000..c3d33a4
--- /dev/null
+++ b/scripts/check-all.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+ensure_node_deps() {
+  local dir="$1"
+  if [[ ! -d "$dir/node_modules" ]]; then
+    (cd "$dir" && npm ci)
+  fi
+}
+
+"$ROOT_DIR/scripts/check-structure.sh"
+
+(cd "$ROOT_DIR/platform" && go test ./...)
+(cd "$ROOT_DIR/run" && go test ./...)
+
+ensure_node_deps "$ROOT_DIR/platform_web"
+(cd "$ROOT_DIR/platform_web" && npm run typecheck && npm run test && npm run build)
+
+ensure_node_deps "$ROOT_DIR/plugins"
+(cd "$ROOT_DIR/plugins" && npm run typecheck && npm run test && npm run validate:manifest)
+
+printf 'full check passed\n'
diff --git a/scripts/check-structure.sh b/scripts/check-structure.sh
new file mode 100755
index 0000000..2e59f66
--- /dev/null
+++ b/scripts/check-structure.sh
@@ -0,0 +1,146 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+required_paths=(
+  "AGENTS.md"
+  "README.md"
+  "scripts/check-all.sh"
+  "run/AGENTS.md"
+  "run/README.md"
+  "run/go.mod"
+  "run/cmd/run/main.go"
+  "platform/AGENTS.md"
+  "platform/README.md"
+  "platform/go.mod"
+  "platform/cmd/platform/main.go"
+  "platform_web/AGENTS.md"
+  "platform_web/README.md"
+  "platform_web/package.json"
+  "platform_web/package-lock.json"
+  "platform_web/tsconfig.json"
+  "platform_web/vite.config.ts"
+  "platform_web/index.html"
+  "plugins/AGENTS.md"
+  "plugins/README.md"
+  "plugins/package.json"
+  "plugins/package-lock.json"
+  "plugins/tsconfig.json"
+  "platform/api"
+  "platform/dto"
+  "platform/domain"
+  "platform/model"
+  "platform/repo"
+  "platform/service"
+  "platform/protocol"
+  "platform/validator"
+  "platform/config"
+  "platform/shared"
+  "platform/api/health_handler.go"
+  "platform/api/health_handler_test.go"
+  "platform/config/config.go"
+  "platform/config/config_test.go"
+  "platform/dto/health.go"
+  "platform/domain/resources.md"
+  "platform/api/routes.md"
+  "platform/protocol/run-contracts.md"
+  "platform/protocol/ai-provider-contracts.md"
+  "platform/protocol/server-lifecycle.md"
+  "run/api"
+  "run/protocol"
+  "run/domain"
+  "run/runtime"
+  "run/spool"
+  "run/artifact"
+  "run/logingest"
+  "run/config"
+  "run/shared"
+  "run/api/platform_client.go"
+  "run/api/platform_client_test.go"
+  "run/config/config.go"
+  "run/config/config_test.go"
+  "run/domain/status.go"
+  "run/runtime/smoke.go"
+  "run/runtime/smoke_test.go"
+  "run/protocol/control.md"
+  "run/protocol/job.md"
+  "run/protocol/log-ingest.md"
+  "run/protocol/artifact.md"
+  "run/protocol/game-client-bridge.md"
+  "platform_web/api"
+  "platform_web/routes"
+  "platform_web/pages"
+  "platform_web/components"
+  "platform_web/stores"
+  "platform_web/contracts"
+  "platform_web/schemas"
+  "platform_web/theme"
+  "platform_web/utils"
+  "platform_web/app/App.tsx"
+  "platform_web/app/App.test.tsx"
+  "platform_web/app/main.tsx"
+  "platform_web/components/AppShell.tsx"
+  "platform_web/components/MagicalParticleLayer.tsx"
+  "platform_web/components/PageFrame.tsx"
+  "platform_web/contracts/page.ts"
+  "platform_web/pages/HomePage.tsx"
+  "platform_web/pages/ServersPage.tsx"
+  "platform_web/pages/PluginsPage.tsx"
+  "platform_web/pages/UsersPage.tsx"
+  "platform_web/pages/AiProvidersPage.tsx"
+  "platform_web/pages/pageRegistry.tsx"
+  "platform_web/routes/routes.ts"
+  "platform_web/theme/base.css"
+  "platform_web/theme/README.md"
+  "platform_web/theme/tokens.ts"
+  "platform_web/routes/routes.md"
+  "platform_web/api/contracts.md"
+  "platform_web/api/client.ts"
+  "platform_web/api/types.ts"
+  "platform_web/contracts/pages.md"
+  "platform_web/contracts/plugin-page-bridge.md"
+  "platform_web/schemas/env.ts"
+  "platform_web/stores/navigation.ts"
+  "platform_web/utils/classes.ts"
+  "plugins/manifests"
+  "plugins/schemas"
+  "plugins/sdk"
+  "plugins/examples"
+  "plugins/tests"
+  "plugins/manifests/game-plugin.manifest.schema.json"
+  "plugins/schemas/create-form.schema.json"
+  "plugins/sdk/bridge-contract.md"
+  "plugins/sdk/index.ts"
+  "plugins/examples/dev-game-plugin/manifest.json"
+  "plugins/examples/dev-game-plugin/schemas/create-form.schema.json"
+  "plugins/examples/scum-server-plugin/manifest.json"
+  "plugins/examples/scum-server-plugin/schemas/create-form.schema.json"
+  "plugins/examples/scum-server-plugin/actions/install.json"
+  "plugins/examples/scum-server-plugin/actions/start.json"
+  "plugins/examples/scum-server-plugin/actions/stop.json"
+  "plugins/examples/scum-server-plugin/actions/restart.json"
+  "plugins/examples/scum-server-plugin/actions/status.json"
+  "plugins/scripts/validate-manifest.ts"
+  "plugins/tests/manifest-validation.test.ts"
+  "openspec/changes/bootstrap-game-server-platform-architecture/proposal.md"
+  "openspec/changes/bootstrap-game-server-platform-architecture/design.md"
+  "openspec/changes/bootstrap-game-server-platform-architecture/tasks.md"
+  "openspec/changes/bootstrap-game-server-platform-architecture/specs/project-workspace-governance/spec.md"
+  "openspec/changes/bootstrap-game-server-platform-architecture/specs/game-server-platform-core/spec.md"
+  "openspec/changes/bootstrap-game-server-platform-architecture/specs/run-execution-channel/spec.md"
+  "openspec/changes/bootstrap-game-server-platform-architecture/specs/game-plugin-system/spec.md"
+  "openspec/changes/bootstrap-game-server-platform-architecture/specs/platform-web-console/spec.md"
+)
+
+missing=0
+for path in "${required_paths[@]}"; do
+  if [[ ! -e "$path" ]]; then
+    printf 'missing required path: %s\n' "$path" >&2
+    missing=1
+  fi
+done
+
+if [[ "$missing" -ne 0 ]]; then
+  exit 1
+fi
+
+printf 'structure check passed\n'
diff --git a/scripts/local-debug-env.sh b/scripts/local-debug-env.sh
new file mode 100755
index 0000000..a3c1b18
--- /dev/null
+++ b/scripts/local-debug-env.sh
@@ -0,0 +1,51 @@
+#!/usr/bin/env bash
+# Shared configuration for the first-party local debug workspace.
+
+set -euo pipefail
+
+LOCAL_DEBUG_SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+LOCAL_DEBUG_ROOT_DIR="$(cd "$LOCAL_DEBUG_SCRIPT_DIR/.." && pwd)"
+
+export LOCAL_DEBUG_ROOT="${LOCAL_DEBUG_ROOT:-$LOCAL_DEBUG_ROOT_DIR/.local-debug}"
+export LOCAL_DEBUG_LOG_DIR="${LOCAL_DEBUG_LOG_DIR:-$LOCAL_DEBUG_ROOT/logs}"
+export LOCAL_DEBUG_PID_DIR="${LOCAL_DEBUG_PID_DIR:-$LOCAL_DEBUG_ROOT/pids}"
+export GOCACHE="${GOCACHE:-$LOCAL_DEBUG_ROOT/go-build-cache}"
+
+export LOCAL_DEBUG_PLATFORM_PORT="${LOCAL_DEBUG_PLATFORM_PORT:-18080}"
+export LOCAL_DEBUG_WEB_PORT="${LOCAL_DEBUG_WEB_PORT:-5173}"
+
+export PLATFORM_ADDR="${PLATFORM_ADDR:-127.0.0.1:$LOCAL_DEBUG_PLATFORM_PORT}"
+export PLATFORM_STORAGE_BACKEND="${PLATFORM_STORAGE_BACKEND:-file}"
+export PLATFORM_DATA_DIR="${PLATFORM_DATA_DIR:-$LOCAL_DEBUG_ROOT/platform}"
+export PLATFORM_METADATA_PATH="${PLATFORM_METADATA_PATH:-$PLATFORM_DATA_DIR/metadata.json}"
+export PLATFORM_LOG_BODY_BACKEND="${PLATFORM_LOG_BODY_BACKEND:-file}"
+export PLATFORM_LOG_DIR="${PLATFORM_LOG_DIR:-$PLATFORM_DATA_DIR/logs}"
+
+export RUN_MODE="${RUN_MODE:-worker}"
+export RUN_PLATFORM_URL="${RUN_PLATFORM_URL:-http://127.0.0.1:$LOCAL_DEBUG_PLATFORM_PORT}"
+export RUN_ENDPOINT_ID="${RUN_ENDPOINT_ID:-run-local-debug}"
+export RUN_DISPLAY_NAME="${RUN_DISPLAY_NAME:-Local Debug Run}"
+export RUN_VERSION="${RUN_VERSION:-0.1.0-local-debug}"
+export RUN_REGISTRATION_TOKEN="${RUN_REGISTRATION_TOKEN:-local-debug-registration}"
+export RUN_WORKSPACE_ROOT="${RUN_WORKSPACE_ROOT:-$LOCAL_DEBUG_ROOT/run/workspace}"
+export RUN_SPOOL_ROOT="${RUN_SPOOL_ROOT:-$LOCAL_DEBUG_ROOT/run/spool}"
+export RUN_MAX_JOBS="${RUN_MAX_JOBS:-1}"
+export RUN_HEARTBEAT_INTERVAL_MS="${RUN_HEARTBEAT_INTERVAL_MS:-2000}"
+export RUN_POLL_INTERVAL_MS="${RUN_POLL_INTERVAL_MS:-1000}"
+export RUN_RETRY_BACKOFF_MS="${RUN_RETRY_BACKOFF_MS:-500}"
+
+export PLATFORM_API_PROXY="${PLATFORM_API_PROXY:-http://127.0.0.1:$LOCAL_DEBUG_PLATFORM_PORT}"
+export VITE_PLATFORM_API_BASE_URL="${VITE_PLATFORM_API_BASE_URL:-/api/v1}"
+export VITE_ENABLE_LOCAL_AUTH_FALLBACK="${VITE_ENABLE_LOCAL_AUTH_FALLBACK:-false}"
+
+local_debug_platform_url() {
+  printf 'http://127.0.0.1:%s' "$LOCAL_DEBUG_PLATFORM_PORT"
+}
+
+local_debug_web_url() {
+  printf 'http://127.0.0.1:%s' "$LOCAL_DEBUG_WEB_PORT"
+}
+
+local_debug_forbidden_pattern() {
+  printf '%s' '(/Users/|/private/|unix://|tcp://|Bearer |sk-|password=|apiKeyRef|rawApiKey|sessionToken|run session token|direct run URL|plugin-owned transport)'
+}
diff --git a/scripts/local-debug-reset.sh b/scripts/local-debug-reset.sh
new file mode 100755
index 0000000..b2ae88c
--- /dev/null
+++ b/scripts/local-debug-reset.sh
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+# shellcheck source=scripts/local-debug-env.sh
+source "$ROOT_DIR/scripts/local-debug-env.sh"
+
+case "$LOCAL_DEBUG_ROOT" in
+  "$ROOT_DIR/.local-debug" | /private/tmp/browser-local-debug-* | /tmp/browser-local-debug-*)
+    ;;
+  *)
+    printf 'refusing to reset unexpected LOCAL_DEBUG_ROOT: %s\n' "$LOCAL_DEBUG_ROOT" >&2
+    printf 'allowed roots: %s/.local-debug, /private/tmp/browser-local-debug-*, /tmp/browser-local-debug-*\n' "$ROOT_DIR" >&2
+    exit 1
+    ;;
+esac
+
+"$ROOT_DIR/scripts/local-debug-stop.sh"
+
+printf 'deleting local debug root only: %s\n' "$LOCAL_DEBUG_ROOT"
+rm -rf "$LOCAL_DEBUG_ROOT"
+printf 'local debug reset complete\n'
diff --git a/scripts/local-debug-smoke.sh b/scripts/local-debug-smoke.sh
new file mode 100755
index 0000000..8670f1b
--- /dev/null
+++ b/scripts/local-debug-smoke.sh
@@ -0,0 +1,383 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+# shellcheck source=scripts/local-debug-env.sh
+source "$ROOT_DIR/scripts/local-debug-env.sh"
+
+PLATFORM_URL="$(local_debug_platform_url)"
+API_URL="$PLATFORM_URL/api/v1"
+WORK_DIR="$LOCAL_DEBUG_ROOT/smoke"
+mkdir -p "$WORK_DIR"
+
+SELF_STARTED_PIDS=()
+
+cleanup_self_started() {
+  local pid
+  for pid in "${SELF_STARTED_PIDS[@]:-}"; do
+    if [[ -n "$pid" ]] && kill -0 "$pid" 2>/dev/null; then
+      kill "$pid" 2>/dev/null || true
+    fi
+  done
+}
+
+wait_for_url() {
+  local name="$1"
+  local url="$2"
+  local attempts="${3:-30}"
+  printf 'waiting for %s at %s\n' "$name" "$url"
+  for _ in $(seq 1 "$attempts"); do
+    if curl -fsS "$url" >/dev/null 2>&1; then
+      printf '%s is ready\n' "$name"
+      return 0
+    fi
+    sleep 1
+  done
+  printf '%s did not become ready at %s\n' "$name" "$url" >&2
+  return 1
+}
+
+start_self_hosted_stack() {
+  mkdir -p "$LOCAL_DEBUG_LOG_DIR" "$LOCAL_DEBUG_PID_DIR" "$PLATFORM_DATA_DIR" "$PLATFORM_LOG_DIR" "$RUN_WORKSPACE_ROOT" "$RUN_SPOOL_ROOT" "$GOCACHE"
+  trap cleanup_self_started EXIT
+
+  printf 'self-starting platform for local debug smoke\n'
+  (
+    cd "$ROOT_DIR/platform"
+    exec env \
+      GOCACHE="$GOCACHE" \
+      PLATFORM_ADDR="$PLATFORM_ADDR" \
+      PLATFORM_STORAGE_BACKEND="$PLATFORM_STORAGE_BACKEND" \
+      PLATFORM_DATA_DIR="$PLATFORM_DATA_DIR" \
+      PLATFORM_METADATA_PATH="$PLATFORM_METADATA_PATH" \
+      PLATFORM_LOG_BODY_BACKEND="$PLATFORM_LOG_BODY_BACKEND" \
+      PLATFORM_LOG_DIR="$PLATFORM_LOG_DIR" \
+      go run ./cmd/platform
+  ) >"$LOCAL_DEBUG_LOG_DIR/platform.log" 2>&1 &
+  SELF_STARTED_PIDS+=("$!")
+  printf '%s' "$!" >"$LOCAL_DEBUG_PID_DIR/platform.pid"
+  wait_for_url platform "$PLATFORM_URL/healthz" 45
+
+  printf 'self-starting run worker for local debug smoke\n'
+  (
+    cd "$ROOT_DIR/run"
+    exec env \
+      GOCACHE="$GOCACHE" \
+      RUN_MODE="$RUN_MODE" \
+      RUN_PLATFORM_URL="$RUN_PLATFORM_URL" \
+      RUN_ENDPOINT_ID="$RUN_ENDPOINT_ID" \
+      RUN_DISPLAY_NAME="$RUN_DISPLAY_NAME" \
+      RUN_VERSION="$RUN_VERSION" \
+      RUN_REGISTRATION_TOKEN="$RUN_REGISTRATION_TOKEN" \
+      RUN_WORKSPACE_ROOT="$RUN_WORKSPACE_ROOT" \
+      RUN_SPOOL_ROOT="$RUN_SPOOL_ROOT" \
+      RUN_MAX_JOBS="$RUN_MAX_JOBS" \
+      RUN_HEARTBEAT_INTERVAL_MS="$RUN_HEARTBEAT_INTERVAL_MS" \
+      RUN_POLL_INTERVAL_MS="$RUN_POLL_INTERVAL_MS" \
+      RUN_RETRY_BACKOFF_MS="$RUN_RETRY_BACKOFF_MS" \
+      go run ./cmd/run
+  ) >"$LOCAL_DEBUG_LOG_DIR/run.log" 2>&1 &
+  SELF_STARTED_PIDS+=("$!")
+  printf '%s' "$!" >"$LOCAL_DEBUG_PID_DIR/run.pid"
+
+  printf 'self-starting platform_web for local debug smoke\n'
+  (
+    cd "$ROOT_DIR"
+    exec env \
+      PLATFORM_API_PROXY="$PLATFORM_API_PROXY" \
+      VITE_PLATFORM_API_BASE_URL="$VITE_PLATFORM_API_BASE_URL" \
+      VITE_ENABLE_LOCAL_AUTH_FALLBACK="$VITE_ENABLE_LOCAL_AUTH_FALLBACK" \
+      npm --prefix platform_web run dev -- --port "$LOCAL_DEBUG_WEB_PORT"
+  ) >"$LOCAL_DEBUG_LOG_DIR/platform_web.log" 2>&1 &
+  SELF_STARTED_PIDS+=("$!")
+  printf '%s' "$!" >"$LOCAL_DEBUG_PID_DIR/platform_web.pid"
+  wait_for_url platform_web "$(local_debug_web_url)" 45
+}
+
+if [[ "${LOCAL_DEBUG_SELF_START:-false}" == "true" ]]; then
+  start_self_hosted_stack
+fi
+
+json_post() {
+  local url="$1"
+  local body_file="$2"
+  local output_file="$3"
+  local status
+  status="$(curl -sS -H 'Content-Type: application/json' --data-binary "@$body_file" "$url" -o "$output_file" -w '%{http_code}')"
+  case "$status" in
+    2*)
+      return 0
+      ;;
+    *)
+      printf 'POST %s failed with HTTP %s\n' "$url" "$status" >&2
+      return 1
+      ;;
+  esac
+}
+
+json_get() {
+  local url="$1"
+  local output_file="$2"
+  shift 2
+  curl -fsS "$@" "$url" >"$output_file"
+}
+
+require_file_contains() {
+  local file="$1"
+  local pattern="$2"
+  if ! grep -Eq "$pattern" "$file"; then
+    printf 'expected %s to contain pattern: %s\n' "$file" "$pattern" >&2
+    sed -n '1,120p' "$file" >&2
+    exit 1
+  fi
+}
+
+reject_forbidden_fragments() {
+  local file="$1"
+  local pattern
+  pattern="$(local_debug_forbidden_pattern)"
+  if grep -Eq "$pattern" "$file"; then
+    printf 'forbidden local-debug fragment found in %s\n' "$file" >&2
+    grep -En "$pattern" "$file" >&2
+    exit 1
+  fi
+}
+
+session_token_from_login() {
+  node -e 'const fs=require("fs"); const data=JSON.parse(fs.readFileSync(process.argv[1],"utf8")); if (!data.sessionId) process.exit(2); process.stdout.write(data.sessionId);' "$1"
+}
+
+json_id() {
+  node -e 'const fs=require("fs"); const data=JSON.parse(fs.readFileSync(process.argv[1],"utf8")); const id=data.instance?.id || data.serverInstance?.id || data.id || ((data.items||[])[0]||{}).id; if (!id) process.exit(2); process.stdout.write(id);' "$1"
+}
+
+printf 'checking platform health at %s\n' "$PLATFORM_URL"
+json_get "$PLATFORM_URL/healthz" "$WORK_DIR/health.json"
+require_file_contains "$WORK_DIR/health.json" '"status"[[:space:]]*:[[:space:]]*"ok"'
+
+cat >"$WORK_DIR/login.request.json" <<'JSON'
+{"account":"operator.local@example.test","password":"operator-local"}
+JSON
+json_post "$API_URL/auth/login" "$WORK_DIR/login.request.json" "$WORK_DIR/login.response.json"
+SESSION_ID="$(session_token_from_login "$WORK_DIR/login.response.json")"
+AUTH_HEADER=(-H "Authorization: Bearer $SESSION_ID")
+require_file_contains "$WORK_DIR/login.response.json" '"status"[[:space:]]*:[[:space:]]*"active"'
+
+printf 'validating plugin manifests\n'
+(cd "$ROOT_DIR/plugins" && npm run validate:manifest)
+
+node - "$ROOT_DIR/plugins/examples/dev-game-plugin/manifest.json" "$WORK_DIR/register-plugin.request.json" <<'NODE'
+const fs = require("fs");
+const manifestPath = process.argv[2];
+const outputPath = process.argv[3];
+const source = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+const manifest = {
+  id: source.id,
+  name: source.name,
+  description: "Development plugin",
+  version: source.version,
+  kind: "game-plugin",
+  tags: ["example", "development"],
+  server: {
+    type: source.server.type,
+    displayName: source.server.displayName,
+    supportedOs: ["linux", "darwin"],
+    createFormSchema: source.server.createFormSchema
+  },
+  capabilities: ["process.install", "process.start", "process.stop"],
+  permissions: ["server.read", "server.lifecycle", "server.logs.read", "server.artifacts.read"],
+  actions: {
+    install: source.actions.install,
+    start: source.actions.start,
+    stop: source.actions.stop,
+    restart: source.actions.restart
+  },
+  pages: [
+    {
+      key: "logs",
+      title: "Logs",
+      path: "/logs",
+      permissions: ["server.read", "server.lifecycle", "server.logs.read", "server.artifacts.read"],
+      bridgeActions: ["server.instances.read", "jobs.dispatch", "logs.query", "artifacts.open"]
+    }
+  ],
+  bridge: { actions: ["server.instances.read", "jobs.dispatch", "logs.query", "artifacts.open"] },
+  ai: { purposes: [] }
+};
+fs.writeFileSync(outputPath, JSON.stringify({
+  manifestRef: "artifact://manifests/game.example/0.1.0",
+  manifest
+}, null, 2));
+NODE
+
+printf 'registering dev plugin through platform API\n'
+if ! json_post "$API_URL/game-plugins/register-manifest" "$WORK_DIR/register-plugin.request.json" "$WORK_DIR/register-plugin.response.json"; then
+  json_get "$API_URL/game-plugins/game.example" "$WORK_DIR/register-plugin.response.json"
+fi
+reject_forbidden_fragments "$WORK_DIR/register-plugin.response.json"
+
+node - "$ROOT_DIR/plugins/examples/scum-server-plugin/manifest.json" "$WORK_DIR/register-scum-plugin.request.json" <<'NODE'
+const fs = require("fs");
+const manifestPath = process.argv[2];
+const outputPath = process.argv[3];
+const source = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+const manifest = {
+  id: source.id,
+  name: source.name,
+  description: "SCUM local proof plugin",
+  version: source.version,
+  kind: "game-plugin",
+  tags: source.tags,
+  server: {
+    type: source.server.type,
+    displayName: source.server.displayName,
+    supportedOs: ["linux"],
+    createFormSchema: source.server.createFormSchema
+  },
+  capabilities: ["process.install", "process.start", "process.stop"],
+  permissions: ["server.create", "server.read", "server.lifecycle", "server.logs.read", "server.artifacts.read"],
+  actions: {
+    install: source.actions.install,
+    start: source.actions.start,
+    stop: source.actions.stop,
+    restart: source.actions.restart
+  },
+  pages: [
+    {
+      key: "overview",
+      title: "SCUM Overview",
+      path: "/overview",
+      permissions: ["server.read", "server.lifecycle", "server.logs.read", "server.artifacts.read"],
+      bridgeActions: ["server.instances.read", "jobs.dispatch", "logs.query", "artifacts.open"]
+    },
+    {
+      key: "logs",
+      title: "SCUM Logs",
+      path: "/logs",
+      permissions: ["server.read", "server.lifecycle", "server.logs.read", "server.artifacts.read"],
+      bridgeActions: ["server.instances.read", "jobs.dispatch", "logs.query", "artifacts.open"]
+    }
+  ],
+  bridge: { actions: ["server.instances.read", "jobs.dispatch", "logs.query", "artifacts.open"] },
+  ai: { purposes: [] }
+};
+fs.writeFileSync(outputPath, JSON.stringify({
+  manifestRef: "artifact://manifests/game.scum/0.1.0",
+  manifest
+}, null, 2));
+NODE
+
+printf 'registering SCUM plugin through platform API\n'
+if ! json_post "$API_URL/game-plugins/register-manifest" "$WORK_DIR/register-scum-plugin.request.json" "$WORK_DIR/register-scum-plugin.response.json"; then
+  json_get "$API_URL/game-plugins/game.scum" "$WORK_DIR/register-scum-plugin.response.json"
+fi
+reject_forbidden_fragments "$WORK_DIR/register-scum-plugin.response.json"
+
+printf 'waiting for run endpoint heartbeat\n'
+for _ in $(seq 1 20); do
+  if json_get "$API_URL/run/endpoints?status=online" "$WORK_DIR/run-endpoints.response.json" && grep -q "$RUN_ENDPOINT_ID" "$WORK_DIR/run-endpoints.response.json"; then
+    break
+  fi
+  sleep 1
+done
+require_file_contains "$WORK_DIR/run-endpoints.response.json" "$RUN_ENDPOINT_ID"
+reject_forbidden_fragments "$WORK_DIR/run-endpoints.response.json"
+
+cat >"$WORK_DIR/create-server.request.json" <<JSON
+{
+  "id": "server-local-debug",
+  "pluginId": "game.example",
+  "runEndpointId": "$RUN_ENDPOINT_ID",
+  "name": "Local Debug Example Server",
+  "idempotencyKey": "local-debug-create"
+}
+JSON
+
+cat >"$WORK_DIR/create-scum-alpha.request.json" <<JSON
+{
+  "id": "scum-alpha",
+  "pluginId": "game.scum",
+  "runEndpointId": "$RUN_ENDPOINT_ID",
+  "name": "SCUM Alpha",
+  "idempotencyKey": "local-debug-scum-alpha-create"
+}
+JSON
+
+cat >"$WORK_DIR/create-scum-beta.request.json" <<JSON
+{
+  "id": "scum-beta",
+  "pluginId": "game.scum",
+  "runEndpointId": "$RUN_ENDPOINT_ID",
+  "name": "SCUM Beta",
+  "idempotencyKey": "local-debug-scum-beta-create"
+}
+JSON
+
+printf 'creating server lifecycle workflow through platform API\n'
+if ! curl -fsS -H 'Content-Type: application/json' "${AUTH_HEADER[@]}" --data-binary "@$WORK_DIR/create-server.request.json" "$API_URL/server-instances/workflows/create" >"$WORK_DIR/create-server.response.json"; then
+  json_get "$API_URL/server-instances/server-local-debug" "$WORK_DIR/create-server.response.json" "${AUTH_HEADER[@]}"
+fi
+reject_forbidden_fragments "$WORK_DIR/create-server.response.json"
+
+printf 'creating SCUM server lifecycle workflows through platform API\n'
+if ! curl -fsS -H 'Content-Type: application/json' "${AUTH_HEADER[@]}" --data-binary "@$WORK_DIR/create-scum-alpha.request.json" "$API_URL/server-instances/workflows/create" >"$WORK_DIR/create-scum-alpha.response.json"; then
+  json_get "$API_URL/server-instances/scum-alpha" "$WORK_DIR/create-scum-alpha.response.json" "${AUTH_HEADER[@]}"
+fi
+if ! curl -fsS -H 'Content-Type: application/json' "${AUTH_HEADER[@]}" --data-binary "@$WORK_DIR/create-scum-beta.request.json" "$API_URL/server-instances/workflows/create" >"$WORK_DIR/create-scum-beta.response.json"; then
+  json_get "$API_URL/server-instances/scum-beta" "$WORK_DIR/create-scum-beta.response.json" "${AUTH_HEADER[@]}"
+fi
+reject_forbidden_fragments "$WORK_DIR/create-scum-alpha.response.json"
+reject_forbidden_fragments "$WORK_DIR/create-scum-beta.response.json"
+require_file_contains "$WORK_DIR/create-scum-alpha.response.json" '"pluginId"[[:space:]]*:[[:space:]]*"game.scum"'
+require_file_contains "$WORK_DIR/create-scum-beta.response.json" '"pluginId"[[:space:]]*:[[:space:]]*"game.scum"'
+
+SERVER_ID="$(json_id "$WORK_DIR/create-server.response.json")"
+SCUM_ALPHA_ID="$(json_id "$WORK_DIR/create-scum-alpha.response.json")"
+SCUM_BETA_ID="$(json_id "$WORK_DIR/create-scum-beta.response.json")"
+
+printf 'checking jobs, logs, artifacts, and marketplace refs\n'
+json_get "$API_URL/server-instances" "$WORK_DIR/server-instances.response.json" "${AUTH_HEADER[@]}"
+json_get "$API_URL/jobs?serverInstanceId=$SERVER_ID" "$WORK_DIR/jobs.response.json" "${AUTH_HEADER[@]}"
+json_get "$API_URL/jobs?serverInstanceId=$SCUM_ALPHA_ID" "$WORK_DIR/scum-alpha-jobs.response.json" "${AUTH_HEADER[@]}"
+json_get "$API_URL/jobs?serverInstanceId=$SCUM_BETA_ID" "$WORK_DIR/scum-beta-jobs.response.json" "${AUTH_HEADER[@]}"
+json_get "$API_URL/log-streams" "$WORK_DIR/log-streams.response.json" "${AUTH_HEADER[@]}"
+json_get "$API_URL/artifacts" "$WORK_DIR/artifacts.response.json" "${AUTH_HEADER[@]}"
+json_get "$API_URL/plugin-marketplace/plugins" "$WORK_DIR/marketplace.response.json" "${AUTH_HEADER[@]}"
+json_get "$API_URL/plugin-marketplace/plugins?serverType=scum&keyword=scum" "$WORK_DIR/scum-marketplace.response.json" "${AUTH_HEADER[@]}"
+require_file_contains "$WORK_DIR/scum-marketplace.response.json" '"id"[[:space:]]*:[[:space:]]*"game.scum"'
+require_file_contains "$WORK_DIR/scum-alpha-jobs.response.json" '"serverInstanceId"[[:space:]]*:[[:space:]]*"scum-alpha"'
+require_file_contains "$WORK_DIR/scum-beta-jobs.response.json" '"serverInstanceId"[[:space:]]*:[[:space:]]*"scum-beta"'
+
+for file in "$WORK_DIR"/server-instances.response.json "$WORK_DIR"/jobs.response.json "$WORK_DIR"/scum-alpha-jobs.response.json "$WORK_DIR"/scum-beta-jobs.response.json "$WORK_DIR"/log-streams.response.json "$WORK_DIR"/artifacts.response.json "$WORK_DIR"/marketplace.response.json "$WORK_DIR"/scum-marketplace.response.json; do
+  reject_forbidden_fragments "$file"
+done
+
+if [[ "$VITE_PLATFORM_API_BASE_URL" != "/api/v1" ]]; then
+  printf 'VITE_PLATFORM_API_BASE_URL must be /api/v1, got %s\n' "$VITE_PLATFORM_API_BASE_URL" >&2
+  exit 1
+fi
+if [[ "$PLATFORM_API_PROXY" != "$PLATFORM_URL" ]]; then
+  printf 'PLATFORM_API_PROXY must be %s, got %s\n' "$PLATFORM_URL" "$PLATFORM_API_PROXY" >&2
+  exit 1
+fi
+if [[ "$VITE_ENABLE_LOCAL_AUTH_FALLBACK" != "false" ]]; then
+  printf 'VITE_ENABLE_LOCAL_AUTH_FALLBACK must stay false for local-debug proof, got %s\n' "$VITE_ENABLE_LOCAL_AUTH_FALLBACK" >&2
+  exit 1
+fi
+
+cat >"$WORK_DIR/browser-walkthrough-checklist.md" <<EOF
+# Local Debug Browser Walkthrough
+
+- Open $(local_debug_web_url)
+- Login with operator.local@example.test / operator-local.
+- Confirm the login path is API-backed and no local fallback banner or fallback workspace appears.
+- Visit 首页, 服务器管理, 插件市场, 用户管理, AI 提供商管理.
+- Open server-local-debug detail and inspect lifecycle history, plugin controls, logs, and artifact references.
+- Confirm 插件市场 can find SCUM Server / game.scum, then open scum-alpha and scum-beta from 服务器管理.
+- Confirm both SCUM servers are backed by game.scum and have separate lifecycle install jobs and operation history.
+- Search visible text for forbidden fragments: /Users/, /private/, unix://, tcp://, Bearer , sk-, password=, apiKeyRef, rawApiKey, run session tokens, direct run URLs, plugin-owned transport details.
+- Acceptance requires platform routes, logical IDs, job refs, log refs, artifact refs, and safe metadata only.
+EOF
+
+printf 'local debug smoke passed\n'
+printf 'evidence directory: %s\n' "$WORK_DIR"
diff --git a/scripts/local-debug-start.sh b/scripts/local-debug-start.sh
new file mode 100755
index 0000000..e68f66c
--- /dev/null
+++ b/scripts/local-debug-start.sh
@@ -0,0 +1,144 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+# shellcheck source=scripts/local-debug-env.sh
+source "$ROOT_DIR/scripts/local-debug-env.sh"
+
+mkdir -p "$LOCAL_DEBUG_LOG_DIR" "$LOCAL_DEBUG_PID_DIR" "$PLATFORM_DATA_DIR" "$PLATFORM_LOG_DIR" "$RUN_WORKSPACE_ROOT" "$RUN_SPOOL_ROOT"
+mkdir -p "$GOCACHE"
+
+managed_pid_running() {
+  local pid_file="$1"
+  if [[ ! -f "$pid_file" ]]; then
+    return 1
+  fi
+  local pid
+  pid="$(cat "$pid_file")"
+  [[ -n "$pid" ]] && kill -0 "$pid" 2>/dev/null
+}
+
+port_listener_pid() {
+  local port="$1"
+  lsof -tiTCP:"$port" -sTCP:LISTEN 2>/dev/null | head -n 1 || true
+}
+
+ensure_port_available() {
+  local name="$1"
+  local port="$2"
+  local pid_file="$LOCAL_DEBUG_PID_DIR/$name.pid"
+  local listener_pid
+  listener_pid="$(port_listener_pid "$port")"
+  if [[ -z "$listener_pid" ]]; then
+    return 0
+  fi
+  if managed_pid_running "$pid_file" && [[ "$listener_pid" == "$(cat "$pid_file")" ]]; then
+    return 0
+  fi
+  printf '%s port %s is already used by pid %s; choose another LOCAL_DEBUG_*_PORT or stop the existing listener\n' "$name" "$port" "$listener_pid" >&2
+  return 1
+}
+
+start_service() {
+  local name="$1"
+  local service_dir="$2"
+  local pid_file="$LOCAL_DEBUG_PID_DIR/$name.pid"
+  shift 2
+
+  if [[ -f "$pid_file" ]]; then
+    local existing_pid
+    existing_pid="$(cat "$pid_file")"
+    if kill -0 "$existing_pid" 2>/dev/null; then
+      printf '%s already running with pid %s\n' "$name" "$existing_pid"
+      return 0
+    fi
+    rm -f "$pid_file"
+  fi
+
+  printf 'starting %s\n' "$name"
+  (
+    cd "$service_dir"
+    exec nohup "$@" >"$LOCAL_DEBUG_LOG_DIR/$name.log" 2>&1
+  ) >/dev/null 2>&1 &
+  printf '%s' "$!" >"$pid_file"
+  printf '%s pid %s log %s\n' "$name" "$(cat "$pid_file")" "$LOCAL_DEBUG_LOG_DIR/$name.log"
+}
+
+wait_for_url() {
+  local name="$1"
+  local url="$2"
+  local attempts="${3:-30}"
+
+  printf 'waiting for %s at %s\n' "$name" "$url"
+  for _ in $(seq 1 "$attempts"); do
+    if curl -fsS "$url" >/dev/null 2>&1; then
+      printf '%s is ready\n' "$name"
+      return 0
+    fi
+    sleep 1
+  done
+
+  printf '%s did not become ready at %s\n' "$name" "$url" >&2
+  return 1
+}
+
+printf 'local debug root: %s\n' "$LOCAL_DEBUG_ROOT"
+printf 'platform: %s\n' "$(local_debug_platform_url)"
+printf 'platform_web: %s\n' "$(local_debug_web_url)"
+printf 'platform log: %s\n' "$LOCAL_DEBUG_LOG_DIR/platform.log"
+printf 'run log: %s\n' "$LOCAL_DEBUG_LOG_DIR/run.log"
+printf 'platform_web log: %s\n' "$LOCAL_DEBUG_LOG_DIR/platform_web.log"
+
+ensure_port_available platform "$LOCAL_DEBUG_PLATFORM_PORT"
+ensure_port_available platform_web "$LOCAL_DEBUG_WEB_PORT"
+
+start_service platform "$ROOT_DIR/platform" env \
+  GOCACHE="$GOCACHE" \
+  PLATFORM_ADDR="$PLATFORM_ADDR" \
+  PLATFORM_STORAGE_BACKEND="$PLATFORM_STORAGE_BACKEND" \
+  PLATFORM_DATA_DIR="$PLATFORM_DATA_DIR" \
+  PLATFORM_METADATA_PATH="$PLATFORM_METADATA_PATH" \
+  PLATFORM_LOG_BODY_BACKEND="$PLATFORM_LOG_BODY_BACKEND" \
+  PLATFORM_LOG_DIR="$PLATFORM_LOG_DIR" \
+  go run ./cmd/platform
+
+wait_for_url platform "$(local_debug_platform_url)/healthz"
+
+start_service run "$ROOT_DIR/run" env \
+  GOCACHE="$GOCACHE" \
+  RUN_MODE="$RUN_MODE" \
+  RUN_PLATFORM_URL="$RUN_PLATFORM_URL" \
+  RUN_ENDPOINT_ID="$RUN_ENDPOINT_ID" \
+  RUN_DISPLAY_NAME="$RUN_DISPLAY_NAME" \
+  RUN_VERSION="$RUN_VERSION" \
+  RUN_REGISTRATION_TOKEN="$RUN_REGISTRATION_TOKEN" \
+  RUN_WORKSPACE_ROOT="$RUN_WORKSPACE_ROOT" \
+  RUN_SPOOL_ROOT="$RUN_SPOOL_ROOT" \
+  RUN_MAX_JOBS="$RUN_MAX_JOBS" \
+  RUN_HEARTBEAT_INTERVAL_MS="$RUN_HEARTBEAT_INTERVAL_MS" \
+  RUN_POLL_INTERVAL_MS="$RUN_POLL_INTERVAL_MS" \
+  RUN_RETRY_BACKOFF_MS="$RUN_RETRY_BACKOFF_MS" \
+  go run ./cmd/run
+
+start_service platform_web "$ROOT_DIR" env \
+  PLATFORM_API_PROXY="$PLATFORM_API_PROXY" \
+  VITE_PLATFORM_API_BASE_URL="$VITE_PLATFORM_API_BASE_URL" \
+  VITE_ENABLE_LOCAL_AUTH_FALLBACK="$VITE_ENABLE_LOCAL_AUTH_FALLBACK" \
+  npm --prefix platform_web run dev -- --port "$LOCAL_DEBUG_WEB_PORT"
+
+wait_for_url platform_web "$(local_debug_web_url)"
+
+cat <<EOF
+
+Local debug stack requested.
+
+Login with:
+  account: operator.local@example.test
+  password: operator-local
+
+Run smoke verification:
+  scripts/local-debug-smoke.sh
+
+Open browser walkthrough:
+  $(local_debug_web_url)
+EOF
diff --git a/scripts/local-debug-stop.sh b/scripts/local-debug-stop.sh
new file mode 100755
index 0000000..5c5acb0
--- /dev/null
+++ b/scripts/local-debug-stop.sh
@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+# shellcheck source=scripts/local-debug-env.sh
+source "$ROOT_DIR/scripts/local-debug-env.sh"
+
+if [[ ! -d "$LOCAL_DEBUG_PID_DIR" ]]; then
+  printf 'no local debug pid directory at %s\n' "$LOCAL_DEBUG_PID_DIR"
+  exit 0
+fi
+
+for name in platform_web run platform; do
+  pid_file="$LOCAL_DEBUG_PID_DIR/$name.pid"
+  if [[ ! -f "$pid_file" ]]; then
+    continue
+  fi
+  pid="$(cat "$pid_file")"
+  if kill -0 "$pid" 2>/dev/null; then
+    printf 'stopping %s pid %s\n' "$name" "$pid"
+    kill "$pid" 2>/dev/null || true
+  else
+    printf '%s pid %s is not running\n' "$name" "$pid"
+  fi
+  rm -f "$pid_file"
+done

{isRegister ? "申请进入服务器工作台" : "登录机甲运维工作台"}

{selectedProvider ? "编辑提供商" : "新增提供商"}

+ 资源负载 +

+ 游戏类型分布 +

+ 最近运营信号 +

运行节点

审计事件

{plugin.name}

{plugin.name}

{profileDraft.displayName || session.displayName}

个人资料