Upload 4 files

Dockerfile

@@ -0,0 +1,22 @@
+FROM python:3.11-slim
+WORKDIR /app
+
+RUN useradd -m -u 1000 user
+
+# Dev tools agents will exec
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    bash git curl nodejs npm \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY . .
+
+# Create workspace dirs
+RUN mkdir -p workspace/code workspace/reports workspace/scratch workspace/shared \
+    .vault_history && chown -R user:user /app
+
+USER user
+EXPOSE 7860
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]

README.md

@@ -1,13 +1,126 @@
 ---
 title: Agent Vault
-emoji: 📊
-colorFrom: gray
-colorTo: gray
-sdk: gradio
-sdk_version: 6.9.0
-app_file: app.py
+emoji: 🗄️
+colorFrom: red
+colorTo: yellow
+sdk: docker
 pinned: false
-short_description: agent-vault
+short_description: Agent Workspace Manager & Remote Execution Environment
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+# 🗄️ VAULT — Agent Workspace Manager & Execution Environment
+
+File manager, version history, and remote code execution for AI agents.
+
+## Workspaces
+
+```
+workspace/
+  code/      — scripts, modules, packages
+  reports/   — generated docs, analysis outputs
+  scratch/   — temp, experiments, throwaway
+  shared/    — cross-agent shared artifacts
+```
+
+## Execution Runtimes
+
+| Runtime | Command | Use |
+|---|---|---|
+| `bash` | `bash -c` | Shell scripts, system ops |
+| `python3` | `python3 -c` | Data analysis, ML, scripting |
+| `node` | `node -e` | JS/TS execution |
+| `npm` | `npm ...` | Package management |
+| `pip` | `pip install` | Python packages |
+| `git` | `git ...` | Version control |
+| `go` | `go run` | Go programs |
+| `cargo` | `cargo ...` | Rust programs |
+
+## MCP Config
+
+```json
+{
+  "mcpServers": {
+    "vault": {
+      "command": "npx",
+      "args": ["-y", "mcp-remote", "https://chris4k-agent-vault.hf.space/mcp/sse"]
+    }
+  }
+}
+```
+
+## MCP Tools
+
+| Tool | Description |
+|---|---|
+| `vault_read` | Read file content |
+| `vault_write` | Write/create file (auto-snapshots) |
+| `vault_list` | List directory contents |
+| `vault_exec` | Execute code (bash/python/node/npm/pip/git) |
+| `vault_diff` | Diff current file vs previous version |
+| `vault_versions` | List version history |
+| `vault_search` | Search by filename or content |
+| `vault_delete` | Delete file or directory |
+| `vault_mkdir` | Create directory |
+| `vault_move` | Move/rename file |
+| `vault_stats` | Workspace statistics |
+
+## REST API
+
+```
+GET  /api/ls?path=code          List directory
+GET  /api/read?path=code/x.py   Read file
+POST /api/write                 Write file
+POST /api/mkdir                 Create directory
+DELETE /api/delete              Delete
+POST /api/move                  Move/rename
+POST /api/copy                  Copy
+GET  /api/search?q=hello        Search
+GET  /api/versions?path=...     List versions
+GET  /api/version?path=...&vid= Get specific version
+GET  /api/diff?path=...         Diff vs last version
+POST /api/exec                  Execute code
+GET  /api/exec/stream           SSE streaming execution
+GET  /api/exec/log              Execution log
+GET  /api/runtimes              Available runtimes
+GET  /api/stats                 Workspace stats
+```
+
+## Agent Usage
+
+```python
+import requests
+BASE = "https://chris4k-agent-vault.hf.space"
+
+# Write a file
+requests.post(f"{BASE}/api/write", json={
+    "path": "code/analysis.py",
+    "content": "import json\nprint(json.dumps({'result': 42}))",
+    "agent": "researcher"
+})
+
+# Execute it
+r = requests.post(f"{BASE}/api/exec", json={
+    "runtime": "python3",
+    "code": "import json\nprint(json.dumps({'result': 42}))",
+    "cwd": "code"
+})
+print(r.json()["output"])
+
+# Read back a file
+content = requests.get(f"{BASE}/api/read?path=reports/output.json").json()["content"]
+
+# Version history
+versions = requests.get(f"{BASE}/api/versions?path=code/analysis.py").json()
+print(versions["versions"])
+
+# Run npm install
+r = requests.post(f"{BASE}/api/exec", json={
+    "runtime": "npm", "code": "install lodash", "cwd": "code"
+})
+```
+
+## Version System
+
+Every `vault_write` auto-snapshots the previous content. Up to 20 versions per file. Diff view shows unified diff between any two versions.
+
+*Chris4K · ki-fusion-labs.de*

main.py

@@ -0,0 +1,1430 @@
+"""
+VAULT — Agent Workspace Manager & Execution Environment
+Docker SDK on HF Spaces.
+
+Workspaces:
+  code/      — scripts, modules, packages
+  reports/   — generated docs, analysis outputs
+  scratch/   — temp, experiments, throwaway
+  shared/    — cross-agent artifacts
+
+Features:
+  - Full file CRUD (read, write, delete, rename, move, copy)
+  - Version history (auto-snapshot on every write, diff view)
+  - Remote execution: bash, python, node, npm, pip, cargo, go
+  - Streaming execution output via SSE
+  - File search (content + filename)
+  - MCP tools: vault_read, vault_write, vault_list, vault_exec,
+                vault_diff, vault_versions, vault_search, vault_delete,
+                vault_mkdir, vault_move, vault_stats
+
+MCP config:
+  {"command":"npx","args":["-y","mcp-remote","https://YOUR_SPACE.hf.space/mcp/sse"]}
+"""
+
+import os, uuid, json, asyncio, time, re, shutil, subprocess, hashlib, difflib
+from pathlib import Path
+from datetime import datetime, timezone
+from typing import Optional
+
+from fastapi import FastAPI, HTTPException, Request
+from fastapi.responses import JSONResponse, HTMLResponse, StreamingResponse
+
+BASE       = Path(__file__).parent
+WS_ROOT    = BASE / "workspace"
+HIST_ROOT  = BASE / ".vault_history"
+META_FILE  = BASE / "vault_meta.json"
+
+# ── Init workspace ────────────────────────────────────────────────
+for d in ["code","reports","scratch","shared"]:
+    (WS_ROOT / d).mkdir(parents=True, exist_ok=True)
+HIST_ROOT.mkdir(exist_ok=True)
+
+# Allowed execution bins  (whitelist for safety on public HF)
+ALLOWED_BINS = {
+    "bash":   ["bash","-c"],
+    "sh":     ["sh","-c"],
+    "python":  ["python3","-c"],
+    "python3": ["python3","-c"],
+    "node":    ["node","-e"],
+    "npm":     ["npm"],            # args passed directly
+    "pip":     ["pip"],
+    "pip3":    ["pip3"],
+    "cargo":   ["cargo"],
+    "go":      ["go"],
+    "git":     ["git"],
+    "cat":     ["cat"],
+    "ls":      ["ls"],
+    "find":    ["find"],
+}
+EXEC_TIMEOUT = int(os.environ.get("VAULT_EXEC_TIMEOUT", "30"))
+MAX_OUTPUT   = 64 * 1024  # 64KB output cap
+
+# ── Meta / stats ──────────────────────────────────────────────────
+def load_meta():
+    if META_FILE.exists():
+        try: return json.loads(META_FILE.read_text())
+        except: pass
+    return {"total_writes":0,"total_execs":0,"exec_log":[],"created_at":int(time.time())}
+
+def save_meta(m):
+    META_FILE.write_text(json.dumps(m, indent=2))
+
+META = load_meta()
+
+# ── Path helpers ──────────────────────────────────────────────────
+def safe_path(rel: str) -> Path:
+    """Resolve rel path inside WS_ROOT, raise if escaping."""
+    rel = rel.lstrip("/")
+    p = (WS_ROOT / rel).resolve()
+    if not str(p).startswith(str(WS_ROOT.resolve())):
+        raise HTTPException(400, f"Path escape attempt: {rel}")
+    return p
+
+def rel(p: Path) -> str:
+    return str(p.relative_to(WS_ROOT))
+
+def file_info(p: Path) -> dict:
+    stat = p.stat()
+    return {
+        "name":     p.name,
+        "path":     rel(p),
+        "type":     "dir" if p.is_dir() else "file",
+        "size":     stat.st_size,
+        "modified": int(stat.st_mtime),
+        "ext":      p.suffix.lower() if p.is_file() else "",
+    }
+
+# ── Version history ───────────────────────────────────────────────
+def hist_dir(rel_path: str) -> Path:
+    safe_key = rel_path.replace("/","__").replace("\\","__")
+    d = HIST_ROOT / safe_key
+    d.mkdir(parents=True, exist_ok=True)
+    return d
+
+def snapshot(rel_path: str, content: str, agent: str = ""):
+    """Save a version snapshot."""
+    hd   = hist_dir(rel_path)
+    ts   = int(time.time())
+    vid  = f"{ts}_{uuid.uuid4().hex[:6]}"
+    sha  = hashlib.sha256(content.encode()).hexdigest()[:12]
+    snap = {"id":vid,"ts":ts,"sha":sha,"agent":agent,"size":len(content.encode())}
+    (hd / f"{vid}.txt").write_text(content, encoding="utf-8", errors="replace")
+    (hd / f"{vid}.meta").write_text(json.dumps(snap))
+    # Keep last 20 versions
+    metas = sorted(hd.glob("*.meta"), key=lambda x: x.stat().st_mtime)
+    if len(metas) > 20:
+        for old_meta in metas[:-20]:
+            old_txt = old_meta.with_suffix(".txt")
+            old_meta.unlink(missing_ok=True)
+            old_txt.unlink(missing_ok=True)
+    return snap
+
+def list_versions(rel_path: str) -> list:
+    hd = hist_dir(rel_path)
+    versions = []
+    for m in sorted(hd.glob("*.meta"), reverse=True):
+        try: versions.append(json.loads(m.read_text()))
+        except: pass
+    return versions
+
+def get_version(rel_path: str, vid: str) -> Optional[str]:
+    hd = hist_dir(rel_path)
+    p  = hd / f"{vid}.txt"
+    return p.read_text(encoding="utf-8", errors="replace") if p.exists() else None
+
+def make_diff(old: str, new: str, fromfile: str = "old", tofile: str = "new") -> str:
+    old_lines = old.splitlines(keepends=True)
+    new_lines = new.splitlines(keepends=True)
+    return "".join(difflib.unified_diff(old_lines, new_lines,
+                                         fromfile=fromfile, tofile=tofile, lineterm=""))
+
+# ── Execution engine ──────────────────────────────────────────────
+def build_cmd(runtime: str, code_or_args: str, extra_args: list = []) -> list:
+    rt = runtime.lower().strip()
+    if rt not in ALLOWED_BINS:
+        raise HTTPException(400, f"Runtime '{rt}' not in allowed list: {sorted(ALLOWED_BINS)}")
+    base = ALLOWED_BINS[rt][:]
+    # Single-string runtimes (bash -c, python3 -c, node -e)
+    if base[-1] in ("-c", "-e"):
+        return base + [code_or_args] + extra_args
+    # Multi-arg tools (npm install, git status, pip install x)
+    return base + code_or_args.split() + extra_args
+
+async def exec_command(runtime: str, code: str, cwd: str = "",
+                        env_extra: dict = {},
+                        timeout: int = EXEC_TIMEOUT) -> dict:
+    cmd = build_cmd(runtime, code)
+    work_dir = str(safe_path(cwd)) if cwd else str(WS_ROOT)
+    env = {**os.environ, **env_extra}
+    t0  = time.time()
+    try:
+        proc = await asyncio.create_subprocess_exec(
+            *cmd,
+            stdout=asyncio.subprocess.PIPE,
+            stderr=asyncio.subprocess.STDOUT,
+            cwd=work_dir,
+            env=env,
+        )
+        try:
+            stdout, _ = await asyncio.wait_for(proc.communicate(), timeout=timeout)
+        except asyncio.TimeoutError:
+            proc.kill()
+            await proc.communicate()
+            return {
+                "ok": False, "exit_code": -1,
+                "output": f"[VAULT] TIMEOUT after {timeout}s",
+                "ms": int((time.time()-t0)*1000),
+                "cmd": " ".join(cmd),
+            }
+        output = stdout.decode("utf-8", errors="replace")
+        if len(output) > MAX_OUTPUT:
+            output = output[:MAX_OUTPUT] + f"\n[VAULT] Output truncated at {MAX_OUTPUT} bytes"
+        ok = proc.returncode == 0
+        result = {
+            "ok": ok, "exit_code": proc.returncode,
+            "output": output, "ms": int((time.time()-t0)*1000),
+            "cmd": " ".join(cmd), "cwd": work_dir,
+        }
+    except Exception as e:
+        result = {"ok":False,"exit_code":-1,"output":f"[VAULT] exec error: {e}",
+                   "ms":int((time.time()-t0)*1000),"cmd":str(cmd)}
+
+    META["total_execs"] += 1
+    entry = {"id":uuid.uuid4().hex[:8],"ts":int(time.time()),
+              "runtime":runtime,"cmd":result.get("cmd","")[:120],
+              "ok":result["ok"],"ms":result["ms"],"exit_code":result["exit_code"]}
+    META["exec_log"] = ([entry] + META.get("exec_log",[]))[:50]
+    save_meta(META)
+    return result
+
+# ── File search ───────────────────────────────────────────────────
+def search_files(query: str, scope: str = "", max_results: int = 40) -> list:
+    root = safe_path(scope) if scope else WS_ROOT
+    q = query.lower()
+    results = []
+    for p in root.rglob("*"):
+        if not p.is_file(): continue
+        if len(results) >= max_results: break
+        match_name = q in p.name.lower()
+        match_content = False
+        snippet = ""
+        if p.stat().st_size < 2*1024*1024:  # 2MB limit for content search
+            try:
+                text = p.read_text(encoding="utf-8", errors="replace")
+                if q in text.lower():
+                    match_content = True
+                    # Find snippet
+                    idx = text.lower().find(q)
+                    snippet = text[max(0,idx-40):idx+80].replace("\n"," ")
+            except: pass
+        if match_name or match_content:
+            results.append({
+                **file_info(p),
+                "match_name": match_name,
+                "match_content": match_content,
+                "snippet": snippet,
+            })
+    return results
+
+# ── Seed workspace ────────────────────────────────────────────────
+def seed():
+    files = {
+        "code/hello.py": '# VAULT — example Python script\nprint("Hello from VAULT!")\n\nfor i in range(5):\n    print(f"  step {i+1}: processing...")\n',
+        "code/analysis.js": '// Example Node.js analysis\nconst data = [1,2,3,4,5,6,7,8,9,10];\nconst mean = data.reduce((a,b) => a+b, 0) / data.length;\nconsole.log(`Mean: ${mean}`);\nconsole.log(`Max: ${Math.max(...data)}`);\nconsole.log(`Min: ${Math.min(...data)}`);\n',
+        "code/install_deps.sh": '#!/bin/bash\n# Install project dependencies\necho "[vault] Installing Python deps..."\npip install requests numpy --quiet\necho "[vault] Done."\n',
+        "reports/README.md": '# Reports\n\nGenerated analysis outputs from agent runs.\n\n## Structure\n- `*.md` — markdown reports\n- `*.json` — structured data outputs\n- `*.csv` — tabular results\n',
+        "scratch/notes.md": '# Scratch Notes\n\nTemporary working notes for agents.\n\n## Active tasks\n- [ ] Analyze MTEB embedding benchmarks\n- [ ] Compare ki-fusion latency vs HF API\n- [x] Set up VAULT workspace\n',
+        "shared/config.json": '{\n  "project": "ki-fusion-labs",\n  "version": "0.1.0",\n  "agents": ["researcher", "coder", "planner", "monitor"],\n  "default_workspace": "scratch",\n  "exec_timeout": 30\n}\n',
+        "shared/agent_contract.md": '# Agent Workspace Contract\n\nAll agents operating in VAULT must follow:\n\n1. **Read** freely from `shared/` and `reports/`\n2. **Write** to your own scoped dir under `scratch/{agent_id}/`\n3. **Code** goes to `code/` with comments\n4. **Reports** go to `reports/` with timestamp prefix\n5. **Never** delete files in `shared/` without broadcast\n',
+    }
+    for path, content in files.items():
+        p = WS_ROOT / path
+        if not p.exists():
+            p.parent.mkdir(parents=True, exist_ok=True)
+            p.write_text(content, encoding="utf-8")
+            snapshot(path, content, "vault-init")
+
+seed()
+
+# ── FastAPI ───────────────────────────────────────────────────────
+app = FastAPI(title="VAULT - Workspace Manager")
+
+def jresp(data, status=200): return JSONResponse(content=data, status_code=status)
+
+# ── File API ──────────────────────────────────────────────────────
+
+@app.get("/api/ls")
+async def list_dir(path: str = ""):
+    p = safe_path(path) if path else WS_ROOT
+    if not p.exists(): raise HTTPException(404, "not found")
+    if p.is_file():
+        return jresp(file_info(p))
+    items = []
+    for child in sorted(p.iterdir(), key=lambda x: (x.is_file(), x.name)):
+        try: items.append(file_info(child))
+        except: pass
+    return jresp({"path": rel(p) if p != WS_ROOT else "", "items": items})
+
+@app.get("/api/read")
+async def read_file(path: str):
+    p = safe_path(path)
+    if not p.exists(): raise HTTPException(404)
+    if p.is_dir(): raise HTTPException(400, "is a directory")
+    if p.stat().st_size > 4*1024*1024:
+        raise HTTPException(413, "File too large (>4MB)")
+    try:
+        content = p.read_text(encoding="utf-8", errors="replace")
+        binary  = False
+    except Exception:
+        content = p.read_bytes().hex()
+        binary  = True
+    return jresp({"path": rel(p), **file_info(p), "content": content, "binary": binary})
+
+@app.post("/api/write")
+async def write_file(request: Request):
+    data    = await request.json()
+    path    = data.get("path","").strip()
+    content = data.get("content","")
+    agent   = data.get("agent","unknown")
+    if not path: raise HTTPException(400, "path required")
+    p = safe_path(path)
+    p.parent.mkdir(parents=True, exist_ok=True)
+    # Snapshot existing before overwrite
+    old_content = None
+    if p.exists() and p.is_file():
+        try: old_content = p.read_text(encoding="utf-8", errors="replace")
+        except: pass
+    p.write_text(content, encoding="utf-8")
+    snap = snapshot(rel(p), content, agent)
+    META["total_writes"] += 1
+    save_meta(META)
+    diff = make_diff(old_content or "", content, "previous", "current") if old_content else ""
+    return jresp({"status":"written","path":rel(p),"snapshot":snap,
+                   "diff_lines": len(diff.splitlines()), "new_file": old_content is None})
+
+@app.post("/api/mkdir")
+async def make_dir(request: Request):
+    data = await request.json()
+    path = data.get("path","").strip()
+    if not path: raise HTTPException(400, "path required")
+    p = safe_path(path)
+    p.mkdir(parents=True, exist_ok=True)
+    return jresp({"status":"created","path":rel(p)})
+
+@app.delete("/api/delete")
+async def delete_path(request: Request):
+    data = await request.json()
+    path = data.get("path","").strip()
+    if not path: raise HTTPException(400)
+    p = safe_path(path)
+    if not p.exists(): raise HTTPException(404)
+    if p.is_dir(): shutil.rmtree(p)
+    else: p.unlink()
+    return jresp({"status":"deleted","path":path})
+
+@app.post("/api/move")
+async def move_path(request: Request):
+    data = await request.json()
+    src  = safe_path(data.get("src",""))
+    dst  = safe_path(data.get("dst",""))
+    if not src.exists(): raise HTTPException(404)
+    dst.parent.mkdir(parents=True, exist_ok=True)
+    shutil.move(str(src), str(dst))
+    return jresp({"status":"moved","from":rel(src),"to":rel(dst)})
+
+@app.post("/api/copy")
+async def copy_path(request: Request):
+    data = await request.json()
+    src  = safe_path(data.get("src",""))
+    dst  = safe_path(data.get("dst",""))
+    if not src.exists(): raise HTTPException(404)
+    dst.parent.mkdir(parents=True, exist_ok=True)
+    if src.is_dir(): shutil.copytree(str(src), str(dst))
+    else: shutil.copy2(str(src), str(dst))
+    return jresp({"status":"copied","from":rel(src),"to":rel(dst)})
+
+@app.get("/api/search")
+async def search(q: str, scope: str = "", limit: int = 30):
+    if not q.strip(): raise HTTPException(400, "q required")
+    return jresp({"query":q,"results":search_files(q, scope, limit)})
+
+# ── Version API ───────────────────────────────────────────────────
+
+@app.get("/api/versions")
+async def versions(path: str):
+    return jresp({"path":path,"versions":list_versions(path)})
+
+@app.get("/api/version")
+async def get_ver(path: str, vid: str):
+    content = get_version(path, vid)
+    if content is None: raise HTTPException(404)
+    return jresp({"path":path,"vid":vid,"content":content})
+
+@app.get("/api/diff")
+async def diff_versions(path: str, from_vid: str = "", to_vid: str = ""):
+    p = safe_path(path)
+    current = p.read_text(encoding="utf-8", errors="replace") if p.exists() else ""
+    vers = list_versions(path)
+    if from_vid:
+        old = get_version(path, from_vid) or ""
+    elif vers:
+        old = get_version(path, vers[-1]["id"]) or ""
+    else:
+        old = ""
+    new = get_version(path, to_vid) if to_vid else current
+    diff = make_diff(old, new or "")
+    return jresp({"path":path,"diff":diff,"lines":len(diff.splitlines())})
+
+# ── Execution API ─────────────────────────────────────────────────
+
+@app.post("/api/exec")
+async def exec_code(request: Request):
+    data    = await request.json()
+    runtime = data.get("runtime","bash")
+    code    = data.get("code","")
+    cwd     = data.get("cwd","")
+    env     = data.get("env",{})
+    timeout = int(data.get("timeout", EXEC_TIMEOUT))
+    if not code.strip(): raise HTTPException(400, "code required")
+    result  = await exec_command(runtime, code, cwd, env, min(timeout, 60))
+    return jresp(result)
+
+@app.get("/api/exec/stream")
+async def exec_stream(runtime: str, code: str, cwd: str = ""):
+    """SSE streaming execution output"""
+    cmd = build_cmd(runtime, code)
+    work_dir = str(safe_path(cwd)) if cwd else str(WS_ROOT)
+    async def stream():
+        yield f"data: {json.dumps({'type':'start','cmd':' '.join(cmd)})}\n\n"
+        try:
+            proc = await asyncio.create_subprocess_exec(
+                *cmd, stdout=asyncio.subprocess.PIPE,
+                stderr=asyncio.subprocess.STDOUT, cwd=work_dir)
+            async for line in proc.stdout:
+                text = line.decode("utf-8", errors="replace").rstrip()
+                yield f"data: {json.dumps({'type':'output','line':text})}\n\n"
+            await proc.wait()
+            yield f"data: {json.dumps({'type':'done','exit_code':proc.returncode})}\n\n"
+        except Exception as e:
+            yield f"data: {json.dumps({'type':'error','message':str(e)})}\n\n"
+    return StreamingResponse(stream(), media_type="text/event-stream",
+        headers={"Cache-Control":"no-cache","X-Accel-Buffering":"no"})
+
+@app.get("/api/exec/log")
+async def exec_log(limit: int = 30):
+    return jresp({"log": META.get("exec_log",[])[:limit]})
+
+@app.get("/api/runtimes")
+async def runtimes():
+    available = {}
+    for name, cmd in ALLOWED_BINS.items():
+        try:
+            r = subprocess.run(["which", cmd[0]], capture_output=True, timeout=2)
+            available[name] = {"available": r.returncode==0, "bin": cmd[0],
+                                 "path": r.stdout.decode().strip()}
+        except: available[name] = {"available": False, "bin": cmd[0]}
+    return jresp(available)
+
+@app.get("/api/stats")
+async def stats():
+    total_size = 0
+    total_files = 0
+    by_ext: dict = {}
+    for p in WS_ROOT.rglob("*"):
+        if p.is_file():
+            total_files += 1
+            sz = p.stat().st_size
+            total_size += sz
+            ext = p.suffix.lower() or "(none)"
+            by_ext[ext] = by_ext.get(ext, 0) + sz
+    return jresp({"total_files":total_files,"total_size":total_size,
+                   "total_writes":META["total_writes"],"total_execs":META["total_execs"],
+                   "by_ext":dict(sorted(by_ext.items(),key=lambda x:-x[1])[:10])})
+
+# ── MCP ───────────────────────────────────────────────────────────
+MCP_TOOLS = [
+    {"name":"vault_read","description":"Read a file from the workspace",
+     "inputSchema":{"type":"object","required":["path"],"properties":{"path":{"type":"string"}}}},
+    {"name":"vault_write","description":"Write/create a file in the workspace",
+     "inputSchema":{"type":"object","required":["path","content"],"properties":{
+         "path":{"type":"string"},"content":{"type":"string"},"agent":{"type":"string"}}}},
+    {"name":"vault_list","description":"List files in a workspace directory",
+     "inputSchema":{"type":"object","properties":{"path":{"type":"string","default":""}}}},
+    {"name":"vault_exec","description":"Execute code in the workspace. Runtimes: bash, python, python3, node, npm, pip, git",
+     "inputSchema":{"type":"object","required":["runtime","code"],"properties":{
+         "runtime":{"type":"string","enum":["bash","sh","python","python3","node","npm","pip","git","go","cargo"]},
+         "code":   {"type":"string","description":"Code to run or command args"},
+         "cwd":    {"type":"string","description":"Working directory (relative to workspace root)"},
+         "timeout":{"type":"integer","default":30}}}},
+    {"name":"vault_diff","description":"Show diff between current file and a previous version",
+     "inputSchema":{"type":"object","required":["path"],"properties":{
+         "path":     {"type":"string"},
+         "from_vid": {"type":"string","description":"Version ID (from vault_versions)"},
+         "to_vid":   {"type":"string"}}}},
+    {"name":"vault_versions","description":"List version history of a file",
+     "inputSchema":{"type":"object","required":["path"],"properties":{"path":{"type":"string"}}}},
+    {"name":"vault_search","description":"Search files by name or content",
+     "inputSchema":{"type":"object","required":["query"],"properties":{
+         "query": {"type":"string"},"scope":{"type":"string"},"limit":{"type":"integer"}}}},
+    {"name":"vault_delete","description":"Delete a file or directory",
+     "inputSchema":{"type":"object","required":["path"],"properties":{"path":{"type":"string"}}}},
+    {"name":"vault_mkdir","description":"Create a directory in the workspace",
+     "inputSchema":{"type":"object","required":["path"],"properties":{"path":{"type":"string"}}}},
+    {"name":"vault_move","description":"Move or rename a file",
+     "inputSchema":{"type":"object","required":["src","dst"],"properties":{
+         "src":{"type":"string"},"dst":{"type":"string"}}}},
+    {"name":"vault_stats","description":"Get workspace statistics",
+     "inputSchema":{"type":"object","properties":{}}},
+]
+
+async def mcp_call(name, args):
+    if name == "vault_read":
+        p = safe_path(args["path"])
+        if not p.exists(): return json.dumps({"error":"not found"})
+        return json.dumps({"content": p.read_text(encoding="utf-8", errors="replace"),
+                            "path": args["path"], **file_info(p)})
+    if name == "vault_write":
+        p = safe_path(args["path"]); p.parent.mkdir(parents=True, exist_ok=True)
+        old = p.read_text(encoding="utf-8",errors="replace") if p.exists() else None
+        p.write_text(args["content"], encoding="utf-8")
+        snap = snapshot(rel(p), args["content"], args.get("agent","mcp"))
+        META["total_writes"] += 1; save_meta(META)
+        return json.dumps({"written": args["path"], "snapshot": snap})
+    if name == "vault_list":
+        p = safe_path(args.get("path","")) if args.get("path") else WS_ROOT
+        items = [file_info(c) for c in sorted(p.iterdir(),key=lambda x:(x.is_file(),x.name))] if p.is_dir() else []
+        return json.dumps({"path": args.get("path",""), "items": items})
+    if name == "vault_exec":
+        r = await exec_command(args["runtime"], args["code"],
+                                args.get("cwd",""), {}, args.get("timeout",30))
+        return json.dumps(r)
+    if name == "vault_diff":
+        p = safe_path(args["path"])
+        curr = p.read_text(encoding="utf-8",errors="replace") if p.exists() else ""
+        vers = list_versions(args["path"])
+        old  = get_version(args["path"], args.get("from_vid") or (vers[-1]["id"] if vers else "")) or ""
+        new  = get_version(args["path"], args["to_vid"]) if args.get("to_vid") else curr
+        return json.dumps({"diff": make_diff(old, new or "")})
+    if name == "vault_versions":
+        return json.dumps({"versions": list_versions(args["path"])})
+    if name == "vault_search":
+        return json.dumps({"results": search_files(args["query"], args.get("scope",""), args.get("limit",20))})
+    if name == "vault_delete":
+        p = safe_path(args["path"])
+        if p.is_dir(): shutil.rmtree(p)
+        else: p.unlink(missing_ok=True)
+        return json.dumps({"deleted": args["path"]})
+    if name == "vault_mkdir":
+        safe_path(args["path"]).mkdir(parents=True, exist_ok=True)
+        return json.dumps({"created": args["path"]})
+    if name == "vault_move":
+        src = safe_path(args["src"]); dst = safe_path(args["dst"])
+        dst.parent.mkdir(parents=True, exist_ok=True)
+        shutil.move(str(src), str(dst))
+        return json.dumps({"moved": {"from": args["src"], "to": args["dst"]}})
+    if name == "vault_stats":
+        total_size=0; total_files=0
+        for p in WS_ROOT.rglob("*"):
+            if p.is_file(): total_files+=1; total_size+=p.stat().st_size
+        return json.dumps({"total_files":total_files,"total_size":total_size,
+                            "total_writes":META["total_writes"],"total_execs":META["total_execs"]})
+    return json.dumps({"error": f"unknown tool: {name}"})
+
+@app.get("/mcp/sse")
+async def mcp_sse():
+    async def stream():
+        init = {"jsonrpc":"2.0","method":"notifications/initialized",
+                "params":{"serverInfo":{"name":"vault","version":"1.0"},"capabilities":{"tools":{}}}}
+        yield f"data: {json.dumps(init)}\n\n"
+        await asyncio.sleep(0.1)
+        yield f"data: {json.dumps({'jsonrpc':'2.0','method':'notifications/tools/list_changed','params':{}})}\n\n"
+        while True:
+            await asyncio.sleep(25)
+            yield f"data: {json.dumps({'jsonrpc':'2.0','method':'ping'})}\n\n"
+    return StreamingResponse(stream(), media_type="text/event-stream",
+        headers={"Cache-Control":"no-cache","X-Accel-Buffering":"no"})
+
+@app.post("/mcp")
+async def mcp_rpc(request: Request):
+    body   = await request.json()
+    method = body.get("method",""); rid = body.get("id",1)
+    if method == "initialize":
+        return jresp({"jsonrpc":"2.0","id":rid,"result":{
+            "serverInfo":{"name":"vault","version":"1.0"},"capabilities":{"tools":{}}}})
+    if method == "tools/list":
+        return jresp({"jsonrpc":"2.0","id":rid,"result":{"tools":MCP_TOOLS}})
+    if method == "tools/call":
+        p = body.get("params",{}); res = await mcp_call(p.get("name",""), p.get("arguments",{}))
+        return jresp({"jsonrpc":"2.0","id":rid,"result":{"content":[{"type":"text","text":res}]}})
+    return jresp({"jsonrpc":"2.0","id":rid,"error":{"code":-32601,"message":"not found"}})
+
+# ── SPA ───────────────────────────────────────────────────────────
+@app.get("/", response_class=HTMLResponse)
+async def ui():
+    return HTMLResponse(content=SPA, media_type="text/html; charset=utf-8")
+
+SPA = r"""<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>VAULT &mdash; Workspace Manager</title>
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link href="https://fonts.googleapis.com/css2?family=Space+Mono:wght@400;700&family=JetBrains+Mono:wght@400;600&display=swap" rel="stylesheet">
+<style>
+:root{
+  --bg:#08080f;--s1:#0f0f1a;--s2:#141422;--bd:#1a1a2e;--bd2:#20203a;
+  --acc:#ff6b00;--acc2:#ff9500;--txt:#d8d8f0;--sub:#4a4a72;--dim:#18182e;
+  --lo:#2ed573;--cr:#ff2244;--warn:#f0c040;--info:#0ea5e9;
+  --code-bg:#0a0a16;--font:'Space Mono',monospace;--mono:'JetBrains Mono',monospace;
+  /* folder colours */
+  --fc:#ffb347;--fc-code:#0ea5e9;--fc-rep:#7c3aed;--fc-scr:#2ed573;--fc-sh:#ff6b9d;
+}
+*{box-sizing:border-box;margin:0;padding:0;}
+html,body{height:100%;overflow:hidden;}
+body{font-family:var(--font);background:var(--bg);color:var(--txt);display:flex;flex-direction:column;height:100vh;}
+body::after{content:'';position:fixed;inset:0;pointer-events:none;
+  background:repeating-linear-gradient(0deg,transparent,transparent 3px,rgba(255,107,0,.004) 3px,rgba(255,107,0,.004) 4px);}
+
+/* HEADER */
+#hdr{flex-shrink:0;display:flex;align-items:center;padding:.7rem 1.4rem;gap:1rem;
+  border-bottom:1px solid var(--bd);background:linear-gradient(180deg,#0d0d1a,var(--bg));z-index:10;}
+#logo{font-size:1.2rem;font-weight:700;letter-spacing:2px;
+  background:linear-gradient(90deg,var(--acc),var(--warn));
+  -webkit-background-clip:text;-webkit-text-fill-color:transparent;background-clip:text;}
+#logo-sub{font-size:.5rem;color:var(--sub);letter-spacing:.25em;text-transform:uppercase;margin-top:2px;}
+#hdr-stats{display:flex;gap:.42rem;flex:1;flex-wrap:wrap;}
+.hs{display:flex;align-items:center;gap:.3rem;background:var(--s1);border:1px solid var(--bd);
+  border-radius:4px;padding:.2rem .48rem;font-size:.52rem;color:var(--sub);}
+.hs-n{font-size:.82rem;font-weight:700;line-height:1;color:var(--txt);}
+.hdr-actions{display:flex;gap:.4rem;flex-shrink:0;}
+.hdr-btn{background:var(--s1);border:1px solid var(--bd2);color:var(--sub);padding:.32rem .65rem;
+  font-family:var(--font);font-size:.6rem;border-radius:4px;cursor:pointer;transition:all .1s;}
+.hdr-btn:hover{border-color:var(--acc);color:var(--acc);}
+.hdr-btn.primary{background:var(--acc);color:#000;border-color:var(--acc);}
+.hdr-btn.primary:hover{background:var(--acc2);}
+
+/* TOOLBAR */
+#toolbar{flex-shrink:0;display:flex;align-items:center;gap:.4rem;
+  padding:.44rem 1.4rem;border-bottom:1px solid var(--bd);background:var(--s1);flex-wrap:wrap;}
+#breadcrumb{font-size:.6rem;color:var(--sub);display:flex;align-items:center;gap:.2rem;flex:1;min-width:0;overflow:hidden;}
+.bc-sep{color:var(--bd2);}
+.bc-part{cursor:pointer;color:var(--sub);transition:color .1s;white-space:nowrap;}
+.bc-part:hover{color:var(--acc);}
+.bc-part.cur{color:var(--txt);}
+#search-input{background:var(--s2);border:1px solid var(--bd2);border-radius:4px;
+  padding:.3rem .55rem;font-family:var(--font);font-size:.62rem;color:var(--txt);outline:none;
+  width:160px;transition:border-color .12s;}
+#search-input:focus{border-color:var(--acc);}
+.tb-btn{background:var(--s2);border:1px solid var(--bd2);color:var(--sub);padding:.3rem .55rem;
+  font-family:var(--font);font-size:.58rem;border-radius:4px;cursor:pointer;transition:all .1s;white-space:nowrap;}
+.tb-btn:hover{border-color:var(--acc);color:var(--acc);}
+
+/* MAIN LAYOUT */
+#main{flex:1;display:flex;min-height:0;overflow:hidden;}
+
+/* FILE TREE PANEL */
+#tree{width:230px;flex-shrink:0;border-right:1px solid var(--bd);display:flex;flex-direction:column;overflow:hidden;}
+#tree-hdr{flex-shrink:0;padding:.45rem .75rem;border-bottom:1px solid var(--bd);
+  font-size:.54rem;font-weight:700;letter-spacing:.1em;color:var(--acc);
+  display:flex;align-items:center;justify-content:space-between;}
+#tree-scroll{flex:1;overflow-y:auto;padding:.35rem 0;}
+#tree-scroll::-webkit-scrollbar{width:3px;}
+#tree-scroll::-webkit-scrollbar-thumb{background:var(--bd2);}
+.ti{display:flex;align-items:center;gap:.35rem;padding:.28rem .75rem;cursor:pointer;
+  font-size:.62rem;color:var(--sub);transition:all .1s;position:relative;
+  white-space:nowrap;overflow:hidden;text-overflow:ellipsis;}
+.ti:hover{background:var(--s1);color:var(--txt);}
+.ti.active{background:var(--dim);color:var(--txt);}
+.ti.active::before{content:'';position:absolute;left:0;top:0;bottom:0;width:2px;background:var(--acc);}
+.ti-icon{font-size:.75rem;flex-shrink:0;}
+.ti-name{flex:1;overflow:hidden;text-overflow:ellipsis;}
+.ti-depth-1{padding-left:1.3rem;}
+.ti-depth-2{padding-left:2rem;}
+.ti-depth-3{padding-left:2.7rem;}
+.tree-section{font-size:.48rem;color:var(--sub);text-transform:uppercase;letter-spacing:.15em;
+  padding:.5rem .75rem .2rem;margin-top:.3rem;}
+
+/* CONTENT AREA */
+#content{flex:1;display:flex;flex-direction:column;overflow:hidden;}
+
+/* TABS */
+#tabs{flex-shrink:0;display:flex;align-items:stretch;border-bottom:1px solid var(--bd);background:var(--s1);overflow-x:auto;}
+#tabs::-webkit-scrollbar{height:2px;}
+.tab-item{display:flex;align-items:center;gap:.38rem;padding:.44rem .9rem;font-size:.6rem;
+  cursor:pointer;color:var(--sub);border-bottom:2px solid transparent;white-space:nowrap;
+  transition:all .1s;flex-shrink:0;}
+.tab-item:hover{color:var(--txt);}
+.tab-item.on{color:var(--acc);border-bottom-color:var(--acc);}
+.tab-close{font-size:.6rem;opacity:.4;width:14px;height:14px;display:flex;align-items:center;
+  justify-content:center;border-radius:3px;}
+.tab-close:hover{opacity:1;background:var(--bd2);}
+#tab-terminal{color:var(--lo);}
+#tab-terminal.on{color:var(--lo);border-bottom-color:var(--lo);}
+
+/* EDITOR */
+#editor-wrap{flex:1;display:flex;flex-direction:column;overflow:hidden;}
+#editor-toolbar{flex-shrink:0;display:flex;align-items:center;gap:.4rem;
+  padding:.38rem .8rem;border-bottom:1px solid var(--bd);background:var(--s2);flex-wrap:wrap;}
+#file-path-display{font-size:.58rem;color:var(--sub);font-family:var(--mono);flex:1;}
+.e-btn{background:var(--s1);border:1px solid var(--bd2);color:var(--sub);padding:.26rem .55rem;
+  font-family:var(--font);font-size:.56rem;border-radius:4px;cursor:pointer;transition:all .1s;}
+.e-btn:hover{border-color:var(--acc);color:var(--acc);}
+.e-btn.save{background:var(--acc);color:#000;border-color:var(--acc);}
+.e-btn.save:hover{background:var(--acc2);}
+.e-btn.run{background:#02130a;color:var(--lo);border-color:rgba(46,213,115,.3);}
+.e-btn.run:hover{background:#041f0f;border-color:var(--lo);}
+#editor-area{flex:1;overflow:hidden;position:relative;}
+#editor{width:100%;height:100%;background:var(--code-bg);color:var(--txt);border:none;outline:none;
+  font-family:var(--mono);font-size:.74rem;line-height:1.65;padding:.9rem 1rem;
+  resize:none;tab-size:2;}
+#editor-placeholder{position:absolute;inset:0;display:flex;flex-direction:column;align-items:center;
+  justify-content:center;gap:.8rem;color:var(--sub);pointer-events:none;}
+#editor-placeholder .big{font-size:2.5rem;opacity:.12;}
+#editor-placeholder .msg{font-size:.6rem;opacity:.35;letter-spacing:.12em;text-transform:uppercase;}
+
+/* FILE BROWSER VIEW */
+#browser-view{flex:1;overflow-y:auto;padding:.6rem .9rem;display:none;}
+#browser-view::-webkit-scrollbar{width:4px;}
+#browser-view::-webkit-scrollbar-thumb{background:var(--bd2);}
+.file-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(140px,1fr));gap:.5rem;}
+.fg-item{background:var(--s1);border:1px solid var(--bd);border-radius:7px;padding:.65rem .75rem;
+  cursor:pointer;transition:all .12s;animation:cin .14s ease;}
+@keyframes cin{from{opacity:0;transform:translateY(2px)}to{opacity:1;transform:none}}
+.fg-item:hover{border-color:var(--bd2);transform:translateY(-2px);}
+.fg-icon{font-size:1.4rem;margin-bottom:.35rem;}
+.fg-name{font-size:.6rem;font-weight:700;color:var(--txt);word-break:break-all;margin-bottom:.2rem;}
+.fg-meta{font-size:.5rem;color:var(--sub);}
+.list-item{display:flex;align-items:center;gap:.5rem;padding:.35rem .55rem;
+  border:1px solid transparent;border-radius:5px;cursor:pointer;transition:all .1s;}
+.list-item:hover{background:var(--s1);border-color:var(--bd);}
+.li-icon{font-size:.9rem;flex-shrink:0;}
+.li-name{font-size:.65rem;color:var(--txt);flex:1;font-family:var(--mono);}
+.li-size{font-size:.52rem;color:var(--sub);width:60px;text-align:right;}
+.li-date{font-size:.5rem;color:var(--dim);width:80px;text-align:right;}
+.li-actions{display:flex;gap:.22rem;opacity:0;transition:opacity .1s;}
+.list-item:hover .li-actions{opacity:1;}
+.li-act{font-size:.52rem;background:var(--s2);border:1px solid var(--bd2);border-radius:3px;
+  padding:1px 5px;cursor:pointer;color:var(--sub);font-family:var(--font);}
+.li-act:hover{color:var(--acc);border-color:var(--acc);}
+.li-act.danger:hover{color:var(--cr);border-color:var(--cr);}
+#view-toggle{display:flex;gap:.2rem;}
+.vt-btn{font-size:.62rem;padding:.24rem .45rem;border-radius:3px;cursor:pointer;
+  background:var(--s2);border:1px solid var(--bd2);color:var(--sub);}
+.vt-btn.on{border-color:var(--acc);color:var(--acc);}
+
+/* TERMINAL */
+#terminal-wrap{flex:1;display:flex;flex-direction:column;overflow:hidden;display:none;}
+#terminal-hdr{flex-shrink:0;display:flex;align-items:center;gap:.5rem;
+  padding:.4rem .9rem;border-bottom:1px solid var(--bd);background:var(--s1);}
+.rt-btn{font-size:.56rem;padding:2px 7px;border-radius:3px;cursor:pointer;border:1px solid;
+  font-family:var(--font);}
+.rt-btn.bash{color:#f0c040;border-color:rgba(240,192,64,.3);background:rgba(240,192,64,.05);}
+.rt-btn.python{color:#0ea5e9;border-color:rgba(14,165,233,.3);background:rgba(14,165,233,.05);}
+.rt-btn.node{color:#2ed573;border-color:rgba(46,213,115,.3);background:rgba(46,213,115,.05);}
+.rt-btn.npm{color:#ff6b9d;border-color:rgba(255,107,157,.3);background:rgba(255,107,157,.05);}
+.rt-btn.git{color:#7c3aed;border-color:rgba(124,58,237,.3);background:rgba(124,58,237,.05);}
+.rt-btn.pip{color:#ff9500;border-color:rgba(255,149,0,.3);background:rgba(255,149,0,.05);}
+.rt-btn.on{opacity:1;}.rt-btn:not(.on){opacity:.45;}
+#term-output{flex:1;overflow-y:auto;background:var(--code-bg);padding:.75rem 1rem;font-family:var(--mono);
+  font-size:.69rem;line-height:1.62;color:var(--lo);}
+#term-output::-webkit-scrollbar{width:3px;}
+#term-output::-webkit-scrollbar-thumb{background:var(--bd2);}
+.t-line{white-space:pre-wrap;word-break:break-word;margin-bottom:.08rem;}
+.t-line.err{color:var(--cr);}.t-line.sys{color:var(--sub);}
+.t-line.ok{color:var(--lo);}.t-line.warn{color:var(--warn);}
+#term-input-row{flex-shrink:0;display:flex;align-items:center;gap:.5rem;
+  padding:.5rem .9rem;border-top:1px solid var(--bd);background:var(--s1);}
+#term-cwd{font-size:.58rem;color:var(--acc);font-family:var(--mono);flex-shrink:0;max-width:120px;
+  overflow:hidden;text-overflow:ellipsis;white-space:nowrap;}
+#term-prompt{font-size:.65rem;color:var(--lo);font-family:var(--mono);flex-shrink:0;}
+#term-input{flex:1;background:transparent;border:none;outline:none;font-family:var(--mono);
+  font-size:.7rem;color:var(--txt);}
+#btn-run-term{background:var(--lo);color:#000;border:none;padding:.32rem .65rem;
+  font-family:var(--font);font-size:.6rem;font-weight:700;border-radius:4px;cursor:pointer;
+  transition:all .1s;}
+#btn-run-term:hover{background:#3eff88;}
+
+/* VERSIONS PANEL */
+#versions-panel{position:absolute;right:0;top:0;bottom:0;width:300px;background:var(--s1);
+  border-left:1px solid var(--bd);z-index:20;display:none;flex-direction:column;overflow:hidden;
+  animation:sldin .15s ease;}
+@keyframes sldin{from{transform:translateX(20px);opacity:0}to{transform:none;opacity:1}}
+#versions-panel.open{display:flex;}
+#vp-hdr{flex-shrink:0;display:flex;align-items:center;justify-content:space-between;
+  padding:.55rem .8rem;border-bottom:1px solid var(--bd);font-size:.58rem;font-weight:700;color:var(--acc);}
+#vp-close{background:none;border:none;color:var(--sub);cursor:pointer;font-size:.8rem;
+  width:22px;height:22px;border-radius:3px;display:flex;align-items:center;justify-content:center;}
+#vp-close:hover{background:var(--bd2);color:var(--txt);}
+#vp-scroll{flex:1;overflow-y:auto;padding:.5rem;}
+.ver-item{background:var(--s2);border:1px solid var(--bd);border-radius:5px;padding:.5rem .65rem;
+  margin-bottom:.35rem;cursor:pointer;transition:all .1s;}
+.ver-item:hover{border-color:var(--bd2);}
+.ver-ts{font-size:.62rem;font-weight:700;color:var(--txt);}
+.ver-meta{font-size:.52rem;color:var(--sub);display:flex;gap:.5rem;margin-top:.2rem;flex-wrap:wrap;}
+.ver-sha{font-family:var(--mono);}.ver-size{}.ver-agent{}
+.ver-acts{display:flex;gap:.3rem;margin-top:.4rem;}
+.ver-btn{font-size:.52rem;background:var(--s1);border:1px solid var(--bd2);border-radius:3px;
+  padding:1px 7px;cursor:pointer;color:var(--sub);font-family:var(--font);}
+.ver-btn:hover{color:var(--acc);border-color:var(--acc);}
+
+/* DIFF VIEW */
+#diff-view{position:absolute;inset:0;background:var(--code-bg);z-index:30;
+  display:none;flex-direction:column;overflow:hidden;}
+#diff-view.open{display:flex;}
+#diff-hdr{flex-shrink:0;display:flex;align-items:center;gap:.6rem;
+  padding:.5rem .9rem;border-bottom:1px solid var(--bd);background:var(--s1);}
+#diff-title{font-size:.65rem;font-weight:700;color:var(--acc);flex:1;}
+#diff-close{background:var(--s2);border:1px solid var(--bd2);color:var(--sub);padding:.28rem .6rem;
+  font-family:var(--font);font-size:.58rem;border-radius:4px;cursor:pointer;}
+#diff-close:hover{color:var(--txt);}
+#diff-content{flex:1;overflow:auto;padding:.8rem 1rem;font-family:var(--mono);font-size:.68rem;line-height:1.6;}
+.d-add{color:var(--lo);background:rgba(46,213,115,.06);}
+.d-rem{color:var(--cr);background:rgba(255,34,68,.06);}
+.d-hdr{color:var(--info);}.d-ctx{color:var(--sub);}
+
+/* MODAL */
+#modal{display:none;position:fixed;inset:0;background:rgba(0,0,0,.8);z-index:100;
+  backdrop-filter:blur(4px);align-items:center;justify-content:center;}
+#modal.open{display:flex;}
+.mdl{background:var(--s1);border:1px solid var(--bd2);border-top:2px solid var(--acc);
+  border-radius:10px;padding:1.3rem;width:420px;max-width:97vw;animation:mdin .15s ease;}
+@keyframes mdin{from{opacity:0;transform:scale(.96)}to{opacity:1;transform:none}}
+.mdl-title{font-size:.78rem;font-weight:700;letter-spacing:2px;color:var(--acc);margin-bottom:.9rem;}
+.mdl-close{position:absolute;top:.7rem;right:.7rem;background:none;border:none;color:var(--sub);
+  cursor:pointer;font-size:.8rem;width:24px;height:24px;border-radius:3px;
+  display:flex;align-items:center;justify-content:center;}
+.mdl-close:hover{background:var(--bd2);color:var(--txt);}
+.mfl{margin-bottom:.6rem;}
+.mfl label{display:block;font-size:.48rem;color:var(--sub);text-transform:uppercase;
+  letter-spacing:.1em;margin-bottom:.2rem;}
+.mfl input,.mfl select{width:100%;background:var(--s2);border:1px solid var(--bd2);border-radius:4px;
+  padding:.38rem .55rem;font-family:var(--font);font-size:.68rem;color:var(--txt);outline:none;
+  transition:border-color .12s;}
+.mfl input:focus,.mfl select:focus{border-color:var(--acc);}
+.mdl-actions{display:flex;gap:.4rem;margin-top:.8rem;}
+.mdl-ok{flex:1;background:var(--acc);color:#000;border:none;padding:.44rem;
+  font-family:var(--font);font-size:.65rem;font-weight:700;letter-spacing:.1em;
+  text-transform:uppercase;border-radius:4px;cursor:pointer;}
+.mdl-ok:hover{background:var(--acc2);}
+.mdl-cancel{background:var(--s2);color:var(--sub);border:1px solid var(--bd2);padding:.44rem .9rem;
+  font-family:var(--font);font-size:.65rem;border-radius:4px;cursor:pointer;}
+.mdl-cancel:hover{background:var(--bd2);}
+
+/* TOAST */
+#toasts{position:fixed;bottom:1rem;right:1rem;z-index:200;display:flex;flex-direction:column;gap:.3rem;}
+.tst{background:var(--s1);border:1px solid var(--bd2);border-left:3px solid var(--acc);
+  padding:.38rem .72rem;font-size:.58rem;border-radius:5px;animation:tin .14s ease;color:var(--txt);}
+.tst.err{border-left-color:var(--cr);}.tst.ok{border-left-color:var(--lo);}
+.tst.warn{border-left-color:var(--warn);}
+@keyframes tin{from{opacity:0;transform:translateX(10px)}to{opacity:1;transform:none}}
+#mcp-hint{position:fixed;bottom:1rem;left:1rem;z-index:10;background:var(--s1);
+  border:1px solid var(--bd2);border-left:3px solid var(--acc2);border-radius:5px;
+  padding:.36rem .72rem;font-size:.51rem;color:var(--sub);}
+#mcp-hint code{color:var(--acc2);}
+</style>
+</head>
+<body>
+
+<div id="hdr">
+  <div>
+    <div id="logo">VAULT</div>
+    <div id="logo-sub">Workspace Manager &amp; Execution Env &middot; ki-fusion-labs.de</div>
+  </div>
+  <div id="hdr-stats">
+    <div class="hs"><span class="hs-n" id="hs-files">—</span>FILES</div>
+    <div class="hs"><span class="hs-n" id="hs-size">—</span>SIZE</div>
+    <div class="hs"><span class="hs-n" id="hs-writes">—</span>WRITES</div>
+    <div class="hs"><span class="hs-n" id="hs-execs">—</span>EXECS</div>
+  </div>
+  <div class="hdr-actions">
+    <button class="hdr-btn" id="btn-new-file">+ File</button>
+    <button class="hdr-btn" id="btn-new-dir">+ Dir</button>
+    <button class="hdr-btn primary" id="btn-open-term">&#9166; Terminal</button>
+  </div>
+</div>
+
+<div id="toolbar">
+  <div id="breadcrumb"><span class="bc-part" data-path="">workspace</span></div>
+  <div id="view-toggle">
+    <button class="vt-btn on" id="vt-list" title="List view">&#9776;</button>
+    <button class="vt-btn" id="vt-grid" title="Grid view">&#9783;</button>
+  </div>
+  <input type="text" id="search-input" placeholder="Search files...">
+  <button class="tb-btn" id="btn-search">&#128269;</button>
+  <button class="tb-btn" id="btn-refresh">&#8635;</button>
+</div>
+
+<div id="main">
+
+  <!-- FILE TREE -->
+  <div id="tree">
+    <div id="tree-hdr"><span>EXPLORER</span><span style="color:var(--sub);font-size:.48rem">WORKSPACE</span></div>
+    <div id="tree-scroll"></div>
+  </div>
+
+  <!-- CONTENT -->
+  <div id="content">
+    <div id="tabs">
+      <div class="tab-item on" id="tab-browser" >&#128193; Browser</div>
+      <div class="tab-item"   id="tab-editor"  >&#9998; Editor</div>
+      <div class="tab-item"   id="tab-terminal">&#62; Terminal</div>
+      <div class="tab-item"   id="tab-exec-log">&#9881; Exec Log</div>
+    </div>
+
+    <!-- BROWSER -->
+    <div id="browser-view"></div>
+
+    <!-- EDITOR -->
+    <div id="editor-wrap" style="display:none;">
+      <div id="editor-toolbar">
+        <span id="file-path-display">No file open</span>
+        <select id="editor-runtime" style="background:var(--s2);border:1px solid var(--bd2);border-radius:4px;padding:.22rem .4rem;font-family:var(--font);font-size:.58rem;color:var(--txt);outline:none;">
+          <option value="bash">bash</option>
+          <option value="python3">python3</option>
+          <option value="node">node</option>
+        </select>
+        <button class="e-btn run" id="btn-run-file">&#9654; Run</button>
+        <button class="e-btn" id="btn-versions">&#8635; History</button>
+        <button class="e-btn" id="btn-diff">&#8660; Diff</button>
+        <button class="e-btn save" id="btn-save">&#x2714; Save</button>
+      </div>
+      <div id="editor-area">
+        <textarea id="editor" spellcheck="false" autocomplete="off" autocorrect="off"></textarea>
+        <div id="editor-placeholder">
+          <div class="big">&#128193;</div>
+          <div class="msg">Click a file to open it</div>
+        </div>
+      </div>
+    </div>
+
+    <!-- TERMINAL -->
+    <div id="terminal-wrap">
+      <div id="terminal-hdr">
+        <span style="font-size:.56rem;color:var(--sub);font-weight:700;letter-spacing:.12em">RUNTIME:</span>
+        <button class="rt-btn bash on" data-rt="bash">bash</button>
+        <button class="rt-btn python" data-rt="python3">python</button>
+        <button class="rt-btn node" data-rt="node">node</button>
+        <button class="rt-btn npm" data-rt="npm">npm</button>
+        <button class="rt-btn git" data-rt="git">git</button>
+        <button class="rt-btn pip" data-rt="pip">pip</button>
+        <span style="flex:1"></span>
+        <button class="tb-btn" id="btn-clear-term">Clear</button>
+      </div>
+      <div id="term-output"></div>
+      <div id="term-input-row">
+        <span id="term-cwd">workspace/</span>
+        <span id="term-prompt">$</span>
+        <input type="text" id="term-input" placeholder="Enter command or code...">
+        <button id="btn-run-term">Run</button>
+      </div>
+    </div>
+
+    <!-- EXEC LOG -->
+    <div id="exec-log-view" style="display:none;flex:1;overflow-y:auto;padding:.6rem .9rem;"></div>
+
+    <!-- VERSIONS PANEL -->
+    <div id="versions-panel">
+      <div id="vp-hdr">
+        <span>VERSION HISTORY</span>
+        <button id="vp-close">&#x2715;</button>
+      </div>
+      <div id="vp-scroll"></div>
+    </div>
+
+    <!-- DIFF VIEW -->
+    <div id="diff-view">
+      <div id="diff-hdr">
+        <span id="diff-title">DIFF</span>
+        <button id="diff-close">Close diff</button>
+      </div>
+      <div id="diff-content"></div>
+    </div>
+
+  </div>
+</div>
+
+<div id="modal" style="position:fixed">
+  <div class="mdl" style="position:relative">
+    <button class="mdl-close" id="mdl-close">&#x2715;</button>
+    <div class="mdl-title" id="mdl-title">NEW FILE</div>
+    <div class="mfl"><label id="mdl-label">Filename</label>
+      <input type="text" id="mdl-input" placeholder="path/to/file.py"></div>
+    <div class="mdl-actions">
+      <button class="mdl-ok" id="mdl-ok">Create</button>
+      <button class="mdl-cancel" id="mdl-cancel">Cancel</button>
+    </div>
+  </div>
+</div>
+
+<div id="toasts"></div>
+<div id="mcp-hint">MCP: <code>vault_read</code> <code>vault_write</code> <code>vault_exec</code> &nbsp;|&nbsp; <code>GET /mcp/sse</code></div>
+
+<script>
+var CWD = '';
+var OPEN_FILE = null;
+var RUNTIME = 'bash';
+var TERM_HISTORY = [];
+var TERM_HI = 0;
+var VIEW_MODE = 'list';
+
+function esc(s){return String(s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');}
+function fmtSize(b){if(b<1024)return b+'B';if(b<1048576)return (b/1024).toFixed(1)+'KB';return (b/1048576).toFixed(1)+'MB';}
+function fmtDate(ts){return new Date(ts*1000).toLocaleString('en-GB',{day:'2-digit',month:'2-digit',hour:'2-digit',minute:'2-digit'});}
+function post(url,data){return fetch(url,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(data)});}
+function del(url,data){return fetch(url,{method:'DELETE',headers:{'Content-Type':'application/json'},body:JSON.stringify(data)});}
+
+function toast(msg,type){
+  var el=document.createElement('div');el.className='tst'+(type?' '+type:'');
+  el.textContent=msg;document.getElementById('toasts').appendChild(el);
+  setTimeout(function(){el.remove();},2600);
+}
+
+var EXT_ICONS = {
+  '.py':'&#128013;','.js':'&#128170;','.ts':'&#128170;','.jsx':'&#128170;','.tsx':'&#128170;',
+  '.sh':'&#128032;','.bash':'&#128032;','.json':'&#128196;','.md':'&#128214;','.txt':'&#128196;',
+  '.html':'&#127760;','.css':'&#127912;','.rs':'&#9881;','.go':'&#128260;',
+  '.yml':'&#128293;','.yaml':'&#128293;','.toml':'&#128293;','.env':'&#128274;',
+  '.sql':'&#128200;','.csv':'&#128200;','.lock':'&#128274;','.gitignore':'&#129300;',
+};
+var DIR_ICONS = {
+  'code':'&#128187;','reports':'&#128202;','scratch':'&#9884;','shared':'&#128257;',
+};
+function fileIcon(item){
+  if(item.type==='dir') return DIR_ICONS[item.name]||'&#128193;';
+  return EXT_ICONS[item.ext]||'&#128196;';
+}
+
+// ── Stats ────────────────────────────────────────────────────────
+function loadStats(){
+  fetch('/api/stats').then(function(r){return r.json();}).then(function(s){
+    document.getElementById('hs-files').textContent=s.total_files;
+    document.getElementById('hs-size').textContent=fmtSize(s.total_size);
+    document.getElementById('hs-writes').textContent=s.total_writes;
+    document.getElementById('hs-execs').textContent=s.total_execs;
+  }).catch(function(){});
+}
+
+// ── File Tree ─────────────────────────────────────────────────────
+function loadTree(){
+  fetch('/api/ls').then(function(r){return r.json();}).then(function(d){
+    var scroll=document.getElementById('tree-scroll');
+    scroll.innerHTML='';
+    var top=['code','reports','scratch','shared'];
+    function addItems(items, depth){
+      items.forEach(function(item){
+        var el=document.createElement('div');
+        el.className='ti ti-depth-'+depth+(OPEN_FILE===item.path?' active':'');
+        el.innerHTML='<span class="ti-icon">'+fileIcon(item)+'</span>'
+          +'<span class="ti-name" title="'+esc(item.name)+'">'+esc(item.name)+'</span>';
+        el.addEventListener('click',function(e){e.stopPropagation();
+          if(item.type==='dir'){
+            CWD=item.path;loadBrowser(item.path);showTab('browser');buildBreadcrumb(item.path);
+          } else { openFile(item.path); }
+        });
+        scroll.appendChild(el);
+      });
+    }
+    // Sort: dirs first
+    var dirs=d.items.filter(function(x){return x.type==='dir';});
+    var files=d.items.filter(function(x){return x.type==='file';});
+    addItems(dirs, 1);
+    addItems(files, 1);
+  }).catch(function(){});
+}
+
+// ── Browser ───────────────────────────────────────────────────────
+function loadBrowser(path){
+  CWD = path || '';
+  fetch('/api/ls?path='+encodeURIComponent(path||'')).then(function(r){return r.json();}).then(function(d){
+    renderBrowser(d.items || []);
+    buildBreadcrumb(path);
+  }).catch(function(){toast('Error loading dir','err');});
+}
+
+function buildBreadcrumb(path){
+  var bc=document.getElementById('breadcrumb');
+  var parts=['workspace'].concat((path||'').split('/').filter(Boolean));
+  var paths=[''];
+  (path||'').split('/').filter(Boolean).forEach(function(p,i,arr){
+    paths.push(arr.slice(0,i+1).join('/'));
+  });
+  bc.innerHTML=parts.map(function(p,i){
+    return '<span class="bc-part'+(i===parts.length-1?' cur':'')+'" data-path="'
+      +esc(paths[i])+'">'+esc(p)+'</span>'+(i<parts.length-1?'<span class="bc-sep">/</span>':'');
+  }).join('');
+  bc.querySelectorAll('.bc-part').forEach(function(el){
+    el.addEventListener('click',function(){loadBrowser(this.getAttribute('data-path'));showTab('browser');});
+  });
+}
+
+function renderBrowser(items){
+  var view=document.getElementById('browser-view');
+  view.style.display='block';
+  if(!items.length){
+    view.innerHTML='<div style="text-align:center;padding:2.5rem;font-size:.62rem;color:var(--sub)">Empty directory</div>';
+    return;
+  }
+  if(VIEW_MODE==='grid'){
+    var html='<div class="file-grid">';
+    items.forEach(function(item){
+      html+='<div class="fg-item" data-path="'+esc(item.path)+'" data-type="'+esc(item.type)+'">'
+        +'<div class="fg-icon">'+fileIcon(item)+'</div>'
+        +'<div class="fg-name">'+esc(item.name)+'</div>'
+        +'<div class="fg-meta">'+(item.type==='file'?fmtSize(item.size):item.type)+'</div>'
+        +'</div>';
+    });
+    html+='</div>';
+    view.innerHTML=html;
+  } else {
+    var html='<div style="padding:.2rem 0">';
+    items.forEach(function(item){
+      html+='<div class="list-item" data-path="'+esc(item.path)+'" data-type="'+esc(item.type)+'">'
+        +'<span class="li-icon">'+fileIcon(item)+'</span>'
+        +'<span class="li-name">'+esc(item.name)+'</span>'
+        +'<span class="li-size">'+(item.type==='file'?fmtSize(item.size):'')+'</span>'
+        +'<span class="li-date">'+fmtDate(item.modified)+'</span>'
+        +'<span class="li-actions">'
+        +(item.type==='file'?'<span class="li-act" data-action="edit">edit</span>':'')
+        +'<span class="li-act" data-action="rename">mv</span>'
+        +'<span class="li-act danger" data-action="delete">rm</span>'
+        +'</span></div>';
+    });
+    html+='</div>';
+    view.innerHTML=html;
+  }
+  // Attach events
+  view.querySelectorAll('[data-path]').forEach(function(el){
+    el.addEventListener('click',function(e){
+      var act=e.target.getAttribute('data-action');
+      var p=this.getAttribute('data-path');
+      var t=this.getAttribute('data-type')||el.getAttribute('data-type');
+      if(act==='edit'||(!act&&t==='file')){openFile(p);}
+      else if(!act&&t==='dir'){loadBrowser(p);showTab('browser');}
+      else if(act==='rename'){renameDialog(p);}
+      else if(act==='delete'){deleteItem(p);}
+    });
+  });
+}
+
+// ── File open / editor ────────────────────────────────────────────
+function openFile(path){
+  OPEN_FILE=path;
+  showTab('editor');
+  document.getElementById('editor-placeholder').style.display='none';
+  document.getElementById('file-path-display').textContent=path;
+  // Set runtime based on extension
+  var ext=(path.split('.').pop()||'').toLowerCase();
+  var rtMap={py:'python3',js:'node',sh:'bash',bash:'bash',ts:'node'};
+  document.getElementById('editor-runtime').value=rtMap[ext]||'bash';
+  fetch('/api/read?path='+encodeURIComponent(path)).then(function(r){return r.json();}).then(function(d){
+    document.getElementById('editor').value=d.content||'';
+    // Update tree active
+    document.querySelectorAll('.ti').forEach(function(el){
+      el.classList.toggle('active',false);
+    });
+    loadTree();
+    toast('Opened: '+path.split('/').pop());
+  }).catch(function(){toast('Error opening file','err');});
+}
+
+document.getElementById('btn-save').addEventListener('click',function(){
+  if(!OPEN_FILE){toast('No file open','warn');return;}
+  var content=document.getElementById('editor').value;
+  post('/api/write',{path:OPEN_FILE,content:content,agent:'vault-ui'}).then(function(r){return r.json();}).then(function(d){
+    toast('Saved: '+OPEN_FILE.split('/').pop(),(d.new_file?'ok':'ok'));
+    loadStats();loadTree();
+  }).catch(function(){toast('Save failed','err');});
+});
+
+document.getElementById('btn-run-file').addEventListener('click',function(){
+  if(!OPEN_FILE){toast('No file open','warn');return;}
+  var content=document.getElementById('editor').value;
+  var runtime=document.getElementById('editor-runtime').value;
+  showTab('terminal');
+  document.getElementById('term-cwd').textContent=OPEN_FILE;
+  termPrint('[vault] Running '+OPEN_FILE+' as '+runtime+'...','sys');
+  post('/api/exec',{runtime:runtime,code:content,cwd:CWD}).then(function(r){return r.json();}).then(function(d){
+    (d.output||'').split('\n').forEach(function(line){
+      termPrint(line, d.ok?'ok':'err');
+    });
+    termPrint('[vault] exit:'+d.exit_code+' ('+d.ms+'ms)','sys');
+    loadStats();
+  }).catch(function(){toast('Exec error','err');});
+});
+
+// ── Versions ──────────────────────────────────────────────────────
+document.getElementById('btn-versions').addEventListener('click',function(){
+  if(!OPEN_FILE){toast('No file open','warn');return;}
+  var panel=document.getElementById('versions-panel');
+  panel.classList.toggle('open');
+  if(!panel.classList.contains('open')) return;
+  fetch('/api/versions?path='+encodeURIComponent(OPEN_FILE)).then(function(r){return r.json();}).then(function(d){
+    var scroll=document.getElementById('vp-scroll');
+    if(!d.versions.length){scroll.innerHTML='<div style="font-size:.6rem;color:var(--sub);padding:1rem">No versions yet</div>';return;}
+    scroll.innerHTML=d.versions.map(function(v){
+      return '<div class="ver-item">'
+        +'<div class="ver-ts">'+fmtDate(v.ts)+'</div>'
+        +'<div class="ver-meta">'
+        +'<span class="ver-sha">&#128274; '+esc(v.sha)+'</span>'
+        +'<span class="ver-size">'+fmtSize(v.size||0)+'</span>'
+        +(v.agent?'<span class="ver-agent">@'+esc(v.agent)+'</span>':'')
+        +'</div>'
+        +'<div class="ver-acts">'
+        +'<button class="ver-btn" data-vid="'+esc(v.id)+'" data-action="restore">Restore</button>'
+        +'<button class="ver-btn" data-vid="'+esc(v.id)+'" data-action="diff">Diff</button>'
+        +'</div></div>';
+    }).join('');
+    scroll.querySelectorAll('[data-vid]').forEach(function(btn){
+      btn.addEventListener('click',function(){
+        var vid=this.getAttribute('data-vid');
+        var act=this.getAttribute('data-action');
+        if(act==='restore'){
+          fetch('/api/version?path='+encodeURIComponent(OPEN_FILE)+'&vid='+encodeURIComponent(vid))
+          .then(function(r){return r.json();}).then(function(d){
+            document.getElementById('editor').value=d.content;
+            toast('Restored version '+vid.substring(0,8),'ok');
+          });
+        } else {
+          fetch('/api/diff?path='+encodeURIComponent(OPEN_FILE)+'&from_vid='+encodeURIComponent(vid))
+          .then(function(r){return r.json();}).then(function(d){showDiff(d.diff,OPEN_FILE+' vs v'+vid.substring(0,8));});
+        }
+      });
+    });
+  });
+});
+
+document.getElementById('vp-close').addEventListener('click',function(){
+  document.getElementById('versions-panel').classList.remove('open');
+});
+
+document.getElementById('btn-diff').addEventListener('click',function(){
+  if(!OPEN_FILE){toast('No file open','warn');return;}
+  fetch('/api/diff?path='+encodeURIComponent(OPEN_FILE)).then(function(r){return r.json();}).then(function(d){
+    showDiff(d.diff,'Diff: '+OPEN_FILE);
+  });
+});
+
+function showDiff(diff,title){
+  var view=document.getElementById('diff-view');
+  view.classList.add('open');
+  document.getElementById('diff-title').textContent=title||'DIFF';
+  var content=document.getElementById('diff-content');
+  if(!diff||!diff.trim()){
+    content.innerHTML='<span style="color:var(--sub)">No changes from last version.</span>';
+    return;
+  }
+  content.innerHTML=diff.split('\n').map(function(line){
+    var cls='d-ctx';
+    if(line.startsWith('+')&&!line.startsWith('+++')){cls='d-add';}
+    else if(line.startsWith('-')&&!line.startsWith('---')){cls='d-rem';}
+    else if(line.startsWith('@@')){cls='d-hdr';}
+    else if(line.startsWith('+++')||line.startsWith('---')){cls='d-hdr';}
+    return '<div class="t-line '+cls+'">'+esc(line)+'</div>';
+  }).join('');
+}
+document.getElementById('diff-close').addEventListener('click',function(){
+  document.getElementById('diff-view').classList.remove('open');
+});
+
+// ── Terminal ──────────────────────────────────────────────────────
+function termPrint(line,cls){
+  var out=document.getElementById('term-output');
+  var el=document.createElement('div');
+  el.className='t-line'+(cls?' '+cls:'');
+  el.textContent=line;
+  out.appendChild(el);
+  out.scrollTop=out.scrollHeight;
+}
+function termClear(){document.getElementById('term-output').innerHTML='';}
+
+document.querySelectorAll('.rt-btn[data-rt]').forEach(function(btn){
+  btn.addEventListener('click',function(){
+    RUNTIME=this.getAttribute('data-rt');
+    document.querySelectorAll('.rt-btn[data-rt]').forEach(function(b){b.classList.remove('on');});
+    this.classList.add('on');
+    document.getElementById('term-prompt').textContent=RUNTIME==='bash'?'$':RUNTIME+'>';
+  });
+});
+
+document.getElementById('btn-clear-term').addEventListener('click',termClear);
+
+function runTerminal(){
+  var input=document.getElementById('term-input');
+  var code=input.value.trim();
+  if(!code) return;
+  TERM_HISTORY.unshift(code); TERM_HI=0;
+  input.value='';
+  termPrint('['+RUNTIME+'] $ '+code,'sys');
+  // Use SSE streaming for better UX
+  var url='/api/exec/stream?runtime='+encodeURIComponent(RUNTIME)+'&code='+encodeURIComponent(code)+'&cwd='+encodeURIComponent(CWD);
+  var src=new EventSource(url);
+  src.onmessage=function(e){
+    try{
+      var d=JSON.parse(e.data);
+      if(d.type==='start'){termPrint('cmd: '+d.cmd,'sys');}
+      else if(d.type==='output'){if(d.line!==undefined)termPrint(d.line);}
+      else if(d.type==='done'){
+        termPrint('[exit '+d.exit_code+']'+(d.exit_code===0?'ok':'err'));
+        src.close();loadStats();
+      }
+      else if(d.type==='error'){termPrint('[error] '+d.message,'err');src.close();}
+    }catch(err){}
+  };
+  src.onerror=function(){src.close();};
+}
+
+document.getElementById('btn-run-term').addEventListener('click',runTerminal);
+document.getElementById('term-input').addEventListener('keydown',function(e){
+  if(e.key==='Enter'){runTerminal();}
+  else if(e.key==='ArrowUp'){if(TERM_HI<TERM_HISTORY.length){this.value=TERM_HISTORY[TERM_HI++];}}
+  else if(e.key==='ArrowDown'){if(TERM_HI>0){this.value=TERM_HISTORY[--TERM_HI]||'';}else this.value='';}
+});
+
+// ── Exec Log ──────────────────────────────────────────────────────
+function loadExecLog(){
+  fetch('/api/exec/log?limit=50').then(function(r){return r.json();}).then(function(d){
+    var view=document.getElementById('exec-log-view');
+    if(!d.log.length){view.innerHTML='<div style="padding:2rem;text-align:center;font-size:.6rem;color:var(--sub)">No executions yet</div>';return;}
+    view.innerHTML=d.log.map(function(e){
+      var col=e.ok?'var(--lo)':'var(--cr)';
+      return '<div style="background:var(--s1);border:1px solid var(--bd);border-radius:6px;padding:.55rem .75rem;margin-bottom:.35rem;">'
+        +'<div style="display:flex;align-items:center;gap:.4rem;margin-bottom:.25rem;flex-wrap:wrap">'
+        +'<span style="font-size:.5rem;padding:1px 5px;border-radius:3px;background:'+col+'18;color:'+col+';border:1px solid '+col+'33">'+esc(e.runtime)+'</span>'
+        +'<span style="font-size:.5rem;color:'+col+';">'+(e.ok?'OK':'FAIL')+'</span>'
+        +'<span style="font-size:.5rem;color:var(--sub);">'+e.ms+'ms</span>'
+        +'<span style="font-size:.48rem;color:var(--dim);margin-left:auto">'+fmtDate(e.ts)+'</span>'
+        +'</div>'
+        +'<div style="font-family:var(--mono);font-size:.62rem;color:var(--sub)">'+esc(e.cmd)+'</div>'
+        +'</div>';
+    }).join('');
+  });
+}
+
+// ── Tabs ──────────────────────────────────────────────────────────
+function showTab(t){
+  document.getElementById('tab-browser').className='tab-item'+(t==='browser'?' on':'');
+  document.getElementById('tab-editor').className='tab-item'+(t==='editor'?' on':'');
+  document.getElementById('tab-terminal').className='tab-item'+(t==='terminal'?' on':'');
+  document.getElementById('tab-exec-log').className='tab-item'+(t==='exec-log'?' on':'');
+  document.getElementById('browser-view').style.display=t==='browser'?'block':'none';
+  document.getElementById('editor-wrap').style.display=t==='editor'?'flex':'none';
+  document.getElementById('terminal-wrap').style.display=t==='terminal'?'flex':'none';
+  document.getElementById('exec-log-view').style.display=t==='exec-log'?'block':'none';
+  if(t==='exec-log') loadExecLog();
+}
+document.getElementById('tab-browser').addEventListener('click',function(){showTab('browser');});
+document.getElementById('tab-editor').addEventListener('click',function(){showTab('editor');});
+document.getElementById('tab-terminal').addEventListener('click',function(){showTab('terminal');});
+document.getElementById('tab-exec-log').addEventListener('click',function(){showTab('exec-log');});
+document.getElementById('btn-open-term').addEventListener('click',function(){showTab('terminal');});
+
+// ── View toggle ───────────────────────────────────────────────────
+document.getElementById('vt-list').addEventListener('click',function(){
+  VIEW_MODE='list';
+  this.className='vt-btn on';document.getElementById('vt-grid').className='vt-btn';
+  loadBrowser(CWD);
+});
+document.getElementById('vt-grid').addEventListener('click',function(){
+  VIEW_MODE='grid';
+  this.className='vt-btn on';document.getElementById('vt-list').className='vt-btn';
+  loadBrowser(CWD);
+});
+
+// ── Search ────────────────────────────────────────────────────────
+document.getElementById('btn-search').addEventListener('click',function(){doSearch();});
+document.getElementById('search-input').addEventListener('keydown',function(e){if(e.key==='Enter')doSearch();});
+function doSearch(){
+  var q=document.getElementById('search-input').value.trim();
+  if(!q){loadBrowser(CWD);return;}
+  fetch('/api/search?q='+encodeURIComponent(q)+'&scope='+encodeURIComponent(CWD)).then(function(r){return r.json();}).then(function(d){
+    var view=document.getElementById('browser-view');
+    view.style.display='block';
+    showTab('browser');
+    if(!d.results.length){view.innerHTML='<div style="padding:2rem;text-align:center;font-size:.6rem;color:var(--sub)">No results for "'+esc(q)+'"</div>';return;}
+    var html='<div style="font-size:.54rem;color:var(--sub);padding:.3rem .3rem .6rem;font-weight:700;letter-spacing:.1em">'+d.results.length+' RESULTS FOR "'+esc(q)+'"</div>';
+    html+=d.results.map(function(r){
+      return '<div class="list-item" data-path="'+esc(r.path)+'" data-type="file">'
+        +'<span class="li-icon">'+fileIcon(r)+'</span>'
+        +'<span class="li-name" style="flex-direction:column;align-items:flex-start">'
+        +'<span>'+esc(r.path)+'</span>'
+        +(r.snippet?'<span style="font-size:.5rem;color:var(--sub);margin-top:.1rem">...'+esc(r.snippet)+'...</span>':'')
+        +'</span>'
+        +'<span class="li-size">'+fmtSize(r.size)+'</span>'
+        +'</div>';
+    }).join('');
+    view.innerHTML=html;
+    view.querySelectorAll('[data-path]').forEach(function(el){
+      el.addEventListener('click',function(){openFile(this.getAttribute('data-path'));});
+    });
+  });
+}
+
+// ── New file / dir dialogs ─────────────────────────────────────────
+var MODAL_MODE = 'file';
+function openModal(mode,title,placeholder,prefill){
+  MODAL_MODE=mode;
+  document.getElementById('mdl-title').textContent=title||'';
+  document.getElementById('mdl-label').textContent=mode==='dir'?'Directory path':'File path';
+  document.getElementById('mdl-input').placeholder=placeholder||'';
+  document.getElementById('mdl-input').value=prefill||(CWD?(CWD+'/'):'');
+  document.getElementById('modal').classList.add('open');
+  setTimeout(function(){document.getElementById('mdl-input').focus();},80);
+}
+function closeModal(){document.getElementById('modal').classList.remove('open');}
+
+document.getElementById('btn-new-file').addEventListener('click',function(){openModal('file','NEW FILE','code/script.py');});
+document.getElementById('btn-new-dir').addEventListener('click',function(){openModal('dir','NEW DIRECTORY','scratch/experiments');});
+document.getElementById('mdl-close').addEventListener('click',closeModal);
+document.getElementById('mdl-cancel').addEventListener('click',closeModal);
+document.getElementById('modal').addEventListener('click',function(e){if(e.target===this)closeModal();});
+document.getElementById('mdl-ok').addEventListener('click',function(){
+  var val=document.getElementById('mdl-input').value.trim();
+  if(!val)return;
+  if(MODAL_MODE==='dir'){
+    post('/api/mkdir',{path:val}).then(function(){toast('Created: '+val,'ok');closeModal();loadBrowser(CWD);loadTree();});
+  } else if(MODAL_MODE==='rename'){
+    post('/api/move',{src:val.split('->')[0].trim(),dst:val.split('->')[1].trim()}).then(function(){toast('Moved','ok');closeModal();loadBrowser(CWD);loadTree();});
+  } else {
+    post('/api/write',{path:val,content:'',agent:'vault-ui'}).then(function(){
+      closeModal();loadBrowser(CWD);loadTree();openFile(val);
+    });
+  }
+});
+
+function renameDialog(path){
+  MODAL_MODE='rename';
+  document.getElementById('mdl-title').textContent='RENAME / MOVE';
+  document.getElementById('mdl-label').textContent='src -> dst';
+  document.getElementById('mdl-input').value=path+' -> '+path;
+  document.getElementById('modal').classList.add('open');
+  setTimeout(function(){document.getElementById('mdl-input').focus();},80);
+}
+
+function deleteItem(path){
+  if(!confirm('Delete '+path+'?'))return;
+  del('/api/delete',{path:path}).then(function(){
+    toast('Deleted: '+path,'ok');loadBrowser(CWD);loadTree();loadStats();
+    if(OPEN_FILE===path){OPEN_FILE=null;document.getElementById('file-path-display').textContent='No file open';}
+  }).catch(function(){toast('Delete failed','err');});
+}
+
+// ── Refresh ───────────────────────────────────────────────────────
+document.getElementById('btn-refresh').addEventListener('click',function(){loadBrowser(CWD);loadTree();loadStats();});
+
+// ── Keyboard shortcuts ─────────────────────────────────────────────
+document.addEventListener('keydown',function(e){
+  if(e.key==='Escape'){closeModal();document.getElementById('diff-view').classList.remove('open');document.getElementById('versions-panel').classList.remove('open');}
+  var typing=document.activeElement&&['INPUT','TEXTAREA','SELECT'].includes(document.activeElement.tagName);
+  if((e.ctrlKey||e.metaKey)&&e.key==='s'&&!typing){e.preventDefault();document.getElementById('btn-save').click();}
+  if(e.key==='F5'&&!typing){e.preventDefault();document.getElementById('btn-refresh').click();}
+});
+
+// ── Init ──────────────────────────────────────────────────────────
+loadStats();
+loadTree();
+loadBrowser('');
+</script>
+</body>
+</html>"""

requirements.txt

@@ -0,0 +1,3 @@
+fastapi>=0.111.0
+uvicorn>=0.30.0
+python-multipart>=0.0.9