Add sandbox manager, multi-layer throttle, monitoring, external testing, cyberpunk UI

README.md

@@ -1,5 +1,5 @@
 ---
-title: Altamira Orchestrator
+title: Altamira AADE
 emoji: 🧠
 colorFrom: indigo
 colorTo: purple
@@ -7,16 +7,31 @@ sdk: docker
 pinned: false
 ---
 
-# Altamira Orchestrator
+# Altamira AADE
 
-Multi-agent orchestration platform running on Hugging Face Spaces.
+Autonomous AI Development Environment — multi-agent orchestration system running on Hugging Face Spaces.
 
-## Stack
+## Architecture
 
-- **Backend:** FastAPI (Python 3.9)
-- **Frontend:** Alpine.js + Tailwind CSS (CDN)
-- **State:** Encrypted file-based (Fernet)
-- **Deployment:** Docker via Hugging Face Spaces
+- **Main Orchestrator Space** — coordinates agents, manages projects, resource vault, sandbox lifecycle
+- **Sandbox Spaces** — dynamically created HF Spaces per project for isolated code execution
+- **Agent System** — Commander, Reviewer, Executor, Monitor roles with DAG-based task scheduling
+
+## Features
+
+| Feature | Description |
+|---------|-------------|
+| Multi-Agent Orchestration | Commander plans, Reviewer gates, Executor applies patches |
+| DAG Scheduler | Topological sort, cycle detection, priority execution |
+| Dynamic Sandboxes | Create HF Spaces per project for isolated dev environments |
+| Resource Vault | Store API keys with per-project binding, ping verification, shareable labels |
+| Multi-Layer Throttling | Layer 1: decentralized self-throttle, Layer 2: centralized queue, Layer 3: provider failover with session reinjection |
+| LLM Provider Chain | NVIDIA NIM → OpenRouter → Gemini with circuit breaker |
+| External Testing | Webhook tunnel (A), User download (B), GitHub Actions (C) |
+| Monitoring | Manifest polling (`altamira-manifest.json`), heartbeat, real-time per-project |
+| Aperture Navigation | Circular hover → horizontal grid → vertical icon list |
+| OAuth Auth | Hugging Face OAuth + manual token login |
+| Encrypted State | Fernet-encrypted file-based state with HF Datasets sync |
 
 ## API Endpoints
 
@@ -24,18 +39,38 @@ Multi-agent orchestration platform running on Hugging Face Spaces.
 |----------|--------|-------------|
 | `/` | GET | Web UI |
 | `/health` | GET | Health check |
+| `/api/auth/*` | GET/POST | Auth (OAuth login, callback, session) |
 | `/api/projects` | GET/POST | List/create projects |
-| `/api/projects/{name}/activate` | POST | Activate a project |
-| `/api/projects/{name}/git-sync` | POST | Git sync a project |
-| `/api/console/exec` | POST | Execute a shell command |
-| `/api/console/stream` | WS | Stream command output |
-| `/api/chat/task` | POST | Send a prompt to the agent |
-| `/api/resources` | GET | List stored credentials |
-| `/api/resources/{key}` | PUT | Save a credential |
-| `/api/gatekeeper/validate` | POST | Validate HF/GitHub tokens |
-| `/api/state` | GET | Get encrypted state |
+| `/api/projects/{name}/*` | POST/DELETE | Activate, git-sync, delete |
+| `/api/agent/submit` | POST | Submit prompt to agent |
+| `/api/agent/cycle` | POST | Trigger agent cycle |
+| `/api/agent/tasks` | GET | List agent tasks |
+| `/api/agent/status` | GET | Agent system status |
+| `/api/resources` | GET/PUT/DELETE | Resource vault CRUD |
+| `/api/resources/{key}/ping` | POST | Verify resource connectivity |
+| `/api/resources/bind/{project}` | POST | Bind resource to project |
+| `/api/resources/unbind/{project}` | POST | Unbind resource from project |
+| `/api/resources/projects` | GET | List all project bindings |
+| `/api/sandboxes` | GET | List sandbox spaces |
+| `/api/sandboxes/create` | POST | Create sandbox HF Space |
+| `/api/sandboxes/{project}/exec` | POST | Execute command in sandbox |
+| `/api/sandboxes/{project}/write` | POST | Write file to sandbox |
+| `/api/sandboxes/{project}/read` | POST | Read file from sandbox |
+| `/api/sandboxes/{project}/files` | GET | List sandbox files |
+| `/api/sandboxes/{project}` | DELETE | Delete sandbox space |
+| `/api/monitor/manifest` | GET/POST | Manifest polling |
+| `/api/monitor/heartbeat/{project}` | POST | Heartbeat ping |
+| `/api/monitor/summary` | GET | Monitor summary |
+| `/api/monitor/throttle` | GET | Throttle layer status |
+| `/api/test/webhook/{project}` | POST | Trigger webhook test |
+| `/api/test/download-url/{project}` | GET | Generate download link |
+| `/api/test/github-actions/{project}` | POST | Trigger GHA workflow |
+| `/api/test/artifact/{project}` | POST/GET | Upload/download artifacts |
 | `/api/router` | GET | Router/circuit-breaker status |
-| `/api/sandboxes` | GET | List sandboxes |
+| `/api/console/exec` | POST | Execute shell command |
+| `/api/console/stream` | WS | Stream command output |
+| `/api/state` | GET/POST | Encrypted state management |
+| `/api/system` | GET | System info |
 | `/worker/*` | - | Worker sub-app |
 
 ## LLM Providers (optional)
@@ -47,3 +82,21 @@ Set via the Resource Vault in the UI:
 - `GEMINI_API_KEY` — Google Gemini (gemini-2.0-flash)
 
 Without any keys, chat falls back to running shell commands in the project workspace.
+
+## Resource Ping Targets
+
+| Key | Endpoint |
+|-----|----------|
+| HF_TOKEN | `huggingface.co/api/whoami` |
+| GITHUB_TOKEN | `api.github.com/user` |
+| NVIDIA_NIM_API_KEY | `integrate.api.nvidia.com/v1/models` |
+| OPENROUTER_API_KEY | `openrouter.ai/api/v1/auth/key` |
+| OPENAI_API_KEY | `api.openai.com/v1/models` |
+
+## Free Tier
+
+Altamira runs entirely on Hugging Face Spaces free tier:
+- CPU-basic hardware (no GPU cost)
+- No credit card required
+- Sandbox Spaces also on free tier
+- All data in `/tmp` (ephemeral — restart resets state)

agent_system.py

@@ -13,7 +13,7 @@ from typing import Any, Callable, Optional
 
 import httpx
 
-from router import InferenceRouterCircuitBreaker, PredictiveContextFilter
+from router import InferenceRouterCircuitBreaker, PredictiveContextFilter, MultiLayerThrottle, DecentralizedThrottle
 
 # ──────────────────────────────────────────────
 # Constants
@@ -565,6 +565,8 @@ Your job is to:
 2. For each task, produce a JSON patch command using the available actions
 3. Delegate review to the Reviewer before applying changes
 4. Ensure no task proceeds without approval
+5. Self-throttle: you have a 40 RPM limit. Group related changes to minimize API calls.
+   If you get rate-limited, back off and retry locally before escalating.
 
 {COMMANDER_TOOLS}
 Output a JSON array of tasks, each with:
@@ -671,6 +673,7 @@ class AgentSubsystem:
         self._dag = DAGScheduler()
         self._key_pool = KeyPool()
         self._throttle = ThrottleController()
+        self._multi_layer = MultiLayerThrottle()
         self._monitor = Monitor()
         self._resources = ResourceManager()
         self._state = StateManager(dataset_repo, hf_token)
@@ -802,6 +805,7 @@ class AgentSubsystem:
             "completed_ids": list(self._completed),
             "active_ids": list(self._active_tasks.keys()),
             "throttle": self._throttle.to_dict(),
+            "multi_layer": self._multi_layer.to_dict(),
             "key_pool": self._key_pool.to_dict(),
             "dag": self._dag.to_dict(),
             "monitor": self._monitor.summary(),

app.py

@@ -15,8 +15,9 @@ from fastapi.templating import Jinja2Templates
 from cryptography.fernet import Fernet
 from huggingface_hub import HfApi
 
-from router import PredictiveContextFilter, InferenceRouterCircuitBreaker, ParallelEngine
+from router import PredictiveContextFilter, InferenceRouterCircuitBreaker, ParallelEngine, MultiLayerThrottle, DecentralizedThrottle
 from agent_system import AgentSubsystem, TaskStatus
+from sandbox_manager import SandboxManager
 
 logging.basicConfig(
     level=logging.INFO,
@@ -119,6 +120,12 @@ filter_ctx = PredictiveContextFilter()
 circuit_breaker = InferenceRouterCircuitBreaker()
 engine = ParallelEngine()
 
+# sandbox manager
+sandbox_manager = SandboxManager(hf_token=os.environ.get("HF_TOKEN", ""))
+
+# multi-layer throttle
+multi_layer_throttle = MultiLayerThrottle()
+
 # agent subsystem
 STATE_REPO = os.environ.get("ALTAMIRA_STATE_REPO", "")
 STATE_HF_TOKEN = os.environ.get("HF_TOKEN", "")
@@ -281,13 +288,16 @@ async def index():
 @app.get("/health")
 async def health():
     from router import PAUSED_RETRY
+    sandbox_count = len(await sandbox_manager.list_sandboxes())
     return {
         "status": "healthy",
-        "app": "altamira-orchestrator",
-        "version": "1.2.0",
+        "app": "altamira-aade",
+        "version": "2.0.0",
         "circuit_breaker": getattr(circuit_breaker, "state", "unknown"),
         "failures": getattr(circuit_breaker, "failure_count", 0),
         "paused_retry": circuit_breaker.failure_count >= circuit_breaker.MAX_RETRIES if hasattr(circuit_breaker, "MAX_RETRIES") else False,
+        "sandboxes": sandbox_count,
+        "throttle_layer": multi_layer_throttle.to_dict().get("active_layer", 1),
     }
 
 # ==================== GATEKEEPER ====================
@@ -567,21 +577,77 @@ async def chat_task(body: dict):
     output = result.stdout or result.stderr or "(no output)"
     return {"status": "ok", "response": f"exit code: {result.returncode}", "output": output[:5000]}
 
-# ==================== RESOURCES ====================
+# ==================== RESOURCES (with project scoping + ping) ====================
 RESOURCES_FILE = STATE_DIR / "resources.json"
+PROJECT_RESOURCES_FILE = STATE_DIR / "project_resources.json"
+
+RESOURCE_PING_TARGETS = {
+    "HF_TOKEN": ("https://huggingface.co/api/whoami", {"Authorization": "Bearer {value}"}),
+    "GITHUB_TOKEN": ("https://api.github.com/user", {"Authorization": "Bearer {value}"}),
+    "OPENAI_API_KEY": ("https://api.openai.com/v1/models", {"Authorization": "Bearer {value}"}),
+    "NVIDIA_NIM_API_KEY": ("https://integrate.api.nvidia.com/v1/models", {"Authorization": "Bearer {value}"}),
+    "OPENROUTER_API_KEY": ("https://openrouter.ai/api/v1/auth/key", {"Authorization": "Bearer {value}"}),
+    "GEMINI_API_KEY": (None, None),
+    "SUPABASE_URL": (None, None),
+    "SUPABASE_KEY": (None, None),
+}
+
 
 def _load_resources() -> dict:
     if RESOURCES_FILE.exists():
         raw = json.loads(RESOURCES_FILE.read_text())
-        return {k: {"value": v.get("value", ""), "description": v.get("description", "")} for k, v in raw.items()}
+        return {k: {"value": v.get("value", ""), "description": v.get("description", ""),
+                     "scope": v.get("scope", "core"), "projects": v.get("projects", []),
+                     "shareable": v.get("shareable", False), "created": v.get("created", time.time())}
+                for k, v in raw.items()}
     return {}
 
+
 def _save_resources(resources: dict):
     RESOURCES_FILE.write_text(json.dumps(resources, indent=2))
 
+
+def _load_project_resources() -> dict:
+    if PROJECT_RESOURCES_FILE.exists():
+        return json.loads(PROJECT_RESOURCES_FILE.read_text())
+    return {}
+
+
+def _save_project_resources(pr: dict):
+    PROJECT_RESOURCES_FILE.write_text(json.dumps(pr, indent=2))
+
+
+async def _ping_resource(key: str, value: str) -> dict:
+    target_info = RESOURCE_PING_TARGETS.get(key)
+    if not target_info or not target_info[0]:
+        return {"status": "skipped", "reason": "No ping target configured for this resource type"}
+    url, headers_tmpl = target_info
+    headers = {k: v.format(value=value) for k, v in headers_tmpl.items()} if headers_tmpl else {}
+    try:
+        async with httpx.AsyncClient(timeout=10) as client:
+            resp = await client.get(url, headers=headers)
+            if resp.status_code < 500:
+                return {"status": "ok", "code": resp.status_code}
+            return {"status": "error", "code": resp.status_code, "body": resp.text[:200]}
+    except Exception as e:
+        return {"status": "error", "error": str(e)}
+
+
 @app.get("/api/resources")
-async def list_resources():
-    return {"credentials": _load_resources()}
+async def list_resources(project: str = ""):
+    all_resources = _load_resources()
+    if project:
+        project_bindings = _load_project_resources().get(project, {})
+        bound_keys = set(project_bindings.keys())
+        result = {}
+        for k, v in all_resources.items():
+            if k in bound_keys:
+                result[k] = {**v, "bound": "project", "project_value": project_bindings[k].get("value", "")}
+            elif v.get("scope") == "core" or project in v.get("projects", []):
+                result[k] = {**v, "bound": "global"}
+        return {"credentials": result, "project": project}
+    return {"credentials": all_resources}
+
 
 @app.put("/api/resources/{key}")
 async def save_resource(key: str, body: dict):
@@ -589,12 +655,87 @@ async def save_resource(key: str, body: dict):
     if not key or not value:
         raise HTTPException(400, "Key and value required")
     resources = _load_resources()
-    resources[key] = {"value": value, "description": body.get("description", "")}
+    resources[key] = {
+        "value": value,
+        "description": body.get("description", ""),
+        "scope": body.get("scope", "core"),
+        "projects": body.get("projects", []),
+        "shareable": body.get("shareable", False),
+        "created": time.time(),
+    }
     _save_resources(resources)
-    # Write to env + feed into agent KeyPool so Commander/Reviewer can use it
     os.environ[key] = value
-    agent_subsystem.add_api_key(value)
-    return {"saved": key}
+    if key.endswith("_API_KEY"):
+        agent_subsystem.add_api_key(value)
+    ping_result = await _ping_resource(key, value)
+    return {"saved": key, "ping": ping_result}
+
+
+@app.post("/api/resources/{key}/ping")
+async def ping_resource(key: str):
+    resources = _load_resources()
+    entry = resources.get(key)
+    if not entry:
+        raise HTTPException(404, "Resource not found")
+    result = await _ping_resource(key, entry.get("value", ""))
+    return {"key": key, "ping": result}
+
+
+@app.delete("/api/resources/{key}")
+async def delete_resource(key: str):
+    resources = _load_resources()
+    if key not in resources:
+        raise HTTPException(404, "Resource not found")
+    del resources[key]
+    _save_resources(resources)
+    pr = _load_project_resources()
+    for proj in pr:
+        pr[proj].pop(key, None)
+    _save_project_resources(pr)
+    return {"deleted": key}
+
+
+@app.get("/api/resources/projects")
+async def list_project_resources_bindings():
+    return _load_project_resources()
+
+
+@app.post("/api/resources/bind/{project}")
+async def bind_resource_to_project(project: str, body: dict):
+    key = body.get("key", "")
+    value = body.get("value", "")
+    if not key or not value:
+        raise HTTPException(400, "Key and value required")
+    pr = _load_project_resources()
+    if project not in pr:
+        pr[project] = {}
+    pr[project][key] = {"value": value, "bound_at": time.time()}
+    _save_project_resources(pr)
+    resources = _load_resources()
+    if key in resources:
+        resources[key]["projects"] = list(set(resources[key].get("projects", []) + [project]))
+        _save_resources(resources)
+    return {"bound": key, "project": project}
+
+
+@app.post("/api/resources/unbind/{project}")
+async def unbind_resource_from_project(project: str, body: dict):
+    key = body.get("key", "")
+    if not key:
+        raise HTTPException(400, "Key required")
+    pr = _load_project_resources()
+    if project in pr and key in pr[project]:
+        del pr[project][key]
+        _save_project_resources(pr)
+        resources = _load_resources()
+        if key in resources:
+            projs = resources[key].get("projects", [])
+            if project in projs:
+                projs.remove(project)
+            resources[key]["projects"] = projs
+            _save_resources(resources)
+        return {"unbound": key, "project": project}
+    raise HTTPException(404, "Binding not found")
 
 # ==================== STATE ====================
 @app.get("/api/state")
@@ -646,6 +787,7 @@ async def router_status():
         "filter_capacity": filter_ctx.capacity,
         "filter_threshold": filter_ctx.threshold,
         "parallel_max": engine.semaphore._value,
+        "multi_layer_throttle": multi_layer_throttle.to_dict(),
     }
 
 @app.post("/api/router/filter")
@@ -700,30 +842,242 @@ async def agent_add_key(body: dict):
     agent_subsystem.add_api_key(key)
     return {"status": "key added"}
 
-# ==================== SANDBOX / PREVIEW ====================
-@app.get("/api/sandbox/{name}")
-async def get_sandbox(name: str):
-    path = SANDBOX_DIR / name
-    if not path.exists():
-        raise HTTPException(404, "Sandbox not found")
-    files = []
-    for f in path.rglob("*"):
-        if f.is_file():
-            files.append({"name": str(f.relative_to(path)),
-                          "size": f.stat().st_size,
-                          "modified": f.stat().st_mtime})
-    return {"name": name, "files": sorted(files, key=lambda x: x["name"])}
-
-@app.get("/api/sandbox/{name}/read")
-async def read_sandbox_file(name: str, file: str):
-    path = SANDBOX_DIR / name / file
-    if not path.exists() or not path.is_file():
-        raise HTTPException(404)
-    return {"content": path.read_text()}
-
+# ==================== SANDBOX (HF Spaces) ====================
 @app.get("/api/sandboxes")
 async def list_sandboxes():
-    return [d.name for d in SANDBOX_DIR.iterdir() if d.is_dir()]
+    local = [d.name for d in SANDBOX_DIR.iterdir() if d.is_dir()]
+    hf_sandboxes = await sandbox_manager.list_sandboxes()
+    return {"local": local, "hf_spaces": hf_sandboxes}
+
+
+@app.post("/api/sandboxes/create")
+async def create_sandbox(body: dict):
+    project = body.get("project", "").strip()
+    sandbox_name = body.get("sandbox_name", "").strip()
+    if not project:
+        raise HTTPException(400, "Project name required")
+    result = await sandbox_manager.create_sandbox_space(project, sandbox_name)
+    if result.get("status") == "error":
+        raise HTTPException(500, result.get("error", "Sandbox creation failed"))
+    return result
+
+
+@app.post("/api/sandboxes/{project}/exec")
+async def exec_sandbox(project: str, body: dict):
+    command = body.get("command", "")
+    env = body.get("env", {})
+    timeout = int(body.get("timeout", 60))
+    result = await sandbox_manager.exec_in_sandbox(project, command, env, timeout)
+    if result.get("status") == "error":
+        raise HTTPException(502, result.get("error", "Sandbox exec failed"))
+    return result
+
+
+@app.post("/api/sandboxes/{project}/write")
+async def write_sandbox(project: str, body: dict):
+    path = body.get("path", "")
+    content = body.get("content", "")
+    result = await sandbox_manager.write_to_sandbox(project, path, content)
+    if result.get("status") == "error":
+        raise HTTPException(502, result.get("error", "Sandbox write failed"))
+    return result
+
+
+@app.post("/api/sandboxes/{project}/read")
+async def read_sandbox(project: str, body: dict):
+    path = body.get("path", "")
+    result = await sandbox_manager.read_from_sandbox(project, path)
+    if result.get("status") == "error":
+        raise HTTPException(502, result.get("error", "Sandbox read failed"))
+    return result
+
+
+@app.get("/api/sandboxes/{project}/files")
+async def list_sandbox_files(project: str):
+    result = await sandbox_manager.list_sandbox_files(project)
+    if result.get("status") == "error":
+        raise HTTPException(502, result.get("error", "List files failed"))
+    return result
+
+
+@app.delete("/api/sandboxes/{project}")
+async def delete_sandbox(project: str):
+    result = await sandbox_manager.delete_sandbox_space(project)
+    if result.get("status") == "error":
+        raise HTTPException(500, result.get("error", "Sandbox deletion failed"))
+    return result
+
+
+# ==================== MONITORING ====================
+MANIFEST_FILE = Path("/tmp/altamira-manifest.json")
+
+
+def _load_manifest() -> dict:
+    if MANIFEST_FILE.exists():
+        return json.loads(MANIFEST_FILE.read_text())
+    return {}
+
+
+def _save_manifest(manifest: dict):
+    MANIFEST_FILE.write_text(json.dumps(manifest, indent=2))
+
+
+@app.get("/api/monitor/manifest")
+async def get_manifest(project: str = ""):
+    manifest = _load_manifest()
+    if project:
+        return {"manifest": manifest.get(project, {})}
+    return {"manifest": manifest}
+
+
+@app.post("/api/monitor/manifest/{project}")
+async def update_manifest(project: str, body: dict):
+    manifest = _load_manifest()
+    manifest[project] = {
+        "status": body.get("status", "unknown"),
+        "updated": time.time(),
+        "version": body.get("version", ""),
+        "message": body.get("message", ""),
+        "commit": body.get("commit", ""),
+    }
+    _save_manifest(manifest)
+    return {"saved": project, "manifest": manifest[project]}
+
+
+@app.post("/api/monitor/heartbeat/{project}")
+async def heartbeat(project: str, body: dict):
+    manifest = _load_manifest()
+    if project not in manifest:
+        manifest[project] = {}
+    manifest[project]["heartbeat"] = time.time()
+    manifest[project]["status"] = body.get("status", "running")
+    manifest[project]["message"] = body.get("message", "")
+    _save_manifest(manifest)
+    return {"pong": time.time(), "project": project}
+
+
+@app.get("/api/monitor/summary")
+async def monitor_summary():
+    manifest = _load_manifest()
+    result = {}
+    for proj, data in manifest.items():
+        result[proj] = {
+            "status": data.get("status", "unknown"),
+            "updated": data.get("updated", 0),
+            "heartbeat": data.get("heartbeat", 0),
+            "is_alive": (time.time() - data.get("heartbeat", 0)) < 60 if data.get("heartbeat") else False,
+        }
+    return {"projects": result}
+
+
+@app.get("/api/monitor/throttle")
+async def throttle_status():
+    return {"multi_layer": multi_layer_throttle.to_dict()}
+
+
+# ==================== EXTERNAL TESTING ====================
+ARTIFACTS_DIR = Path("/tmp/altamira-artifacts")
+ARTIFACTS_DIR.mkdir(parents=True, exist_ok=True)
+
+
+@app.post("/api/test/artifact/{project}")
+async def upload_artifact(project: str, body: dict):
+    filename = body.get("filename", "artifact.zip")
+    data_b64 = body.get("data", "")
+    import base64
+    try:
+        data = base64.b64decode(data_b64)
+    except Exception:
+        raise HTTPException(400, "Invalid base64 data")
+    project_dir = ARTIFACTS_DIR / project
+    project_dir.mkdir(parents=True, exist_ok=True)
+    filepath = project_dir / filename
+    filepath.write_bytes(data)
+    return {"path": str(filepath), "size": len(data)}
+
+
+@app.get("/api/test/artifact/{project}/{filename}")
+async def download_artifact(project: str, filename: str):
+    filepath = ARTIFACTS_DIR / project / filename
+    if not filepath.exists():
+        raise HTTPException(404, "Artifact not found")
+    import base64
+    return {
+        "filename": filename,
+        "size": filepath.stat().st_size,
+        "data": base64.b64encode(filepath.read_bytes()).decode(),
+    }
+
+
+@app.get("/api/test/download-url/{project}")
+async def generate_download_url(project: str):
+    project_dir = ARTIFACTS_DIR / project
+    if not project_dir.exists():
+        raise HTTPException(404, "No artifacts for project")
+    files = [f.name for f in project_dir.iterdir() if f.is_file()]
+    return {
+        "project": project,
+        "files": files,
+        "download_url": f"/api/test/artifact/{project}/",
+        "instructions": "Use the download URL above to retrieve build artifacts for local testing.",
+    }
+
+
+@app.post("/api/test/webhook/{project}")
+async def trigger_webhook_test(project: str, body: dict):
+    url = body.get("url", "")
+    payload = body.get("payload", {})
+    method = body.get("method", "POST")
+    if not url:
+        raise HTTPException(400, "Webhook URL required")
+    resources = _load_resources()
+    headers = {}
+    for k, v in resources.items():
+        if "WEBHOOK" in k.upper() or "API" in k.upper():
+            headers[k.replace("_", "-").lower()] = v.get("value", "")
+    try:
+        async with httpx.AsyncClient(timeout=30) as client:
+            if method.upper() == "GET":
+                resp = await client.get(url, headers=headers)
+            else:
+                resp = await client.post(url, json=payload, headers=headers)
+            return {
+                "status": resp.status_code,
+                "body": resp.text[:2000],
+                "project": project,
+            }
+    except Exception as e:
+        raise HTTPException(502, f"Webhook failed: {e}")
+
+
+@app.post("/api/test/github-actions/{project}")
+async def trigger_github_actions(project: str, body: dict):
+    repo = body.get("repo", "")
+    workflow = body.get("workflow", "main.yml")
+    ref = body.get("ref", "main")
+    if not repo:
+        raise HTTPException(400, "GitHub repo required (owner/repo)")
+    resources = _load_resources()
+    gh_token = resources.get("GITHUB_TOKEN", {}).get("value", "") or resources.get("GH_TOKEN", {}).get("value", "")
+    if not gh_token:
+        raise HTTPException(400, "GitHub token required — add GH_TOKEN or GITHUB_TOKEN resource")
+    try:
+        async with httpx.AsyncClient(timeout=15) as client:
+            resp = await client.post(
+                f"https://api.github.com/repos/{repo}/actions/workflows/{workflow}/dispatches",
+                headers={
+                    "Authorization": f"Bearer {gh_token}",
+                    "Accept": "application/vnd.github.v3+json",
+                },
+                json={"ref": ref, "inputs": body.get("inputs", {})},
+            )
+            if resp.status_code not in (204, 200, 201):
+                raise HTTPException(502, f"GitHub Actions trigger failed: {resp.status_code} {resp.text[:200]}")
+            return {"status": "triggered", "repo": repo, "workflow": workflow, "ref": ref}
+    except HTTPException:
+        raise
+    except Exception as e:
+        raise HTTPException(502, f"GitHub Actions trigger failed: {e}")
 
 # ==================== WORKER INTEGRATION ====================
 # mount worker app as sub-app
@@ -743,16 +1097,21 @@ async def list_results():
 @app.get("/api/system")
 async def system_info():
     import platform as _platform
+    sandbox_count = len(await sandbox_manager.list_sandboxes())
     return {
         "platform": _platform.platform(),
         "python": _platform.python_version(),
         "hostname": os.uname().nodename,
         "cpus": os.cpu_count(),
-        "sandbox_count": len(list(SANDBOX_DIR.iterdir())),
+        "mode": "AADE",
+        "sandbox_hf_spaces": sandbox_count,
+        "sandbox_local": len(list(SANDBOX_DIR.iterdir())),
         "workspace_count": len(list(WORKSPACE_DIR.iterdir())),
         "disk_tmp": _disk_usage("/tmp"),
+        "throttle": multi_layer_throttle.to_dict(),
     }
 
+
 def _disk_usage(path: str) -> dict:
     s = os.statvfs(path)
     return {

router.py

@@ -1,6 +1,9 @@
 import asyncio
+import json
 import time
-from collections import deque
+import uuid
+from collections import deque, defaultdict
+from typing import Optional, Callable, Any
 
 import httpx
 
@@ -11,12 +14,229 @@ OPENROUTER_BASE = "https://openrouter.ai/api/v1"
 GEMINI_BASE = "https://generativelanguage.googleapis.com/v1beta"
 
 
+# ──────────────────────────────────────────────
+# Layer 1: Decentralized Self-Throttle
+# Agentes controlam seu próprio RPM conforme
+# regras do system prompt + retry local.
+# ──────────────────────────────────────────────
+class DecentralizedThrottle:
+    def __init__(self, rpm_limit: int = 40, window: int = 60):
+        self.rpm_limit = rpm_limit
+        self.window = window
+        self._slots: list[float] = []
+        self._consecutive_429s = 0
+        self._escalated = False
+
+    def acquire(self) -> float:
+        now = time.time()
+        cutoff = now - self.window
+        self._slots = [t for t in self._slots if t > cutoff]
+        if len(self._slots) >= self.rpm_limit:
+            wait = self._slots[0] + self.window - now
+            if wait > 0:
+                return wait
+        self._slots.append(now)
+        return 0.0
+
+    async def wait_if_needed(self):
+        wait = self.acquire()
+        if wait > 0:
+            await asyncio.sleep(wait)
+
+    def record_429(self):
+        self._consecutive_429s += 1
+        if self._consecutive_429s >= 3:
+            self._escalated = True
+
+    def record_success(self):
+        self._consecutive_429s = 0
+
+    @property
+    def should_escalate(self) -> bool:
+        return self._escalated
+
+    def reset_escalation(self):
+        self._escalated = False
+
+    def usage_pct(self) -> float:
+        now = time.time()
+        cutoff = now - self.window
+        active = sum(1 for t in self._slots if t > cutoff)
+        return (active / self.rpm_limit) * 100 if self.rpm_limit else 0
+
+    def to_dict(self) -> dict:
+        return {
+            "rpm_limit": self.rpm_limit,
+            "current_rpm": len([t for t in self._slots if t > time.time() - self.window]),
+            "usage_pct": round(self.usage_pct(), 1),
+            "consecutive_429s": self._consecutive_429s,
+            "escalated": self._escalated,
+        }
+
+
+# ──────────────────────────────────────────────
+# Layer 2: Centralized Queue
+# Quando Layer 1 escala (muitos 429s),
+# as requisicoes passam por um dispatcher
+# central que libera uma por vez.
+# ──────────────────────────────────────────────
+class CentralizedQueue:
+    def __init__(self, max_concurrent: int = 1):
+        self._queue: asyncio.Queue = asyncio.Queue()
+        self._active = 0
+        self._max_concurrent = max_concurrent
+        self._lock = asyncio.Lock()
+        self._total_queued = 0
+        self._total_processed = 0
+
+    async def enqueue(self, request_id: str, coro: Callable) -> Any:
+        self._total_queued += 1
+        future = asyncio.get_event_loop().create_future()
+        await self._queue.put((request_id, coro, future))
+        await self._process_queue()
+        return await future
+
+    async def _process_queue(self):
+        async with self._lock:
+            if self._active >= self._max_concurrent:
+                return
+            self._active += 1
+
+        try:
+            while not self._queue.empty():
+                request_id, coro, future = await self._queue.get()
+                try:
+                    result = await coro()
+                    future.set_result(result)
+                    self._total_processed += 1
+                except Exception as e:
+                    future.set_exception(e)
+        finally:
+            async with self._lock:
+                self._active -= 1
+
+    def to_dict(self) -> dict:
+        return {
+            "queue_size": self._queue.qsize(),
+            "active": self._active,
+            "max_concurrent": self._max_concurrent,
+            "total_queued": self._total_queued,
+            "total_processed": self._total_processed,
+        }
+
+
+# ──────────────────────────────────────────────
+# Layer 3: Multi-Provider Failover
+# Se um provider esgota cota, automaticamente
+# troca para backup e reinjeta estado da sessao.
+# ──────────────────────────────────────────────
+class ProviderSessionState:
+    def __init__(self):
+        self._sessions: dict[str, list[dict]] = defaultdict(list)
+
+    def append(self, provider: str, entry: dict):
+        self._sessions[provider].append(entry)
+        if len(self._sessions[provider]) > 50:
+            self._sessions[provider] = self._sessions[provider][-50:]
+
+    def get_context(self, provider: str, max_entries: int = 5) -> str:
+        entries = self._sessions.get(provider, [])[-max_entries:]
+        if not entries:
+            return ""
+        lines = [f"{e.get('role', 'user')}: {e.get('content', '')[:200]}" for e in entries]
+        return "\n".join(lines)
+
+    def to_dict(self) -> dict:
+        return {k: len(v) for k, v in self._sessions.items()}
+
+
+class ProviderFailover:
+    def __init__(self, session_state: Optional[ProviderSessionState] = None):
+        self._session = session_state or ProviderSessionState()
+        self._provider_quotas: dict[str, int] = defaultdict(lambda: 100)
+        self._provider_usage: dict[str, int] = defaultdict(int)
+
+    def set_quota(self, provider: str, quota: int):
+        self._provider_quotas[provider] = quota
+
+    def is_exhausted(self, provider: str) -> bool:
+        return self._provider_usage[provider] >= self._provider_quotas[provider]
+
+    def record_usage(self, provider: str):
+        self._provider_usage[provider] += 1
+
+    def get_failover_chain(self, available_providers: list[str]) -> list[str]:
+        return [p for p in available_providers if not self.is_exhausted(p)]
+
+    def to_dict(self) -> dict:
+        return {
+            "quotas": dict(self._provider_quotas),
+            "usage": dict(self._provider_usage),
+            "sessions": self._session.to_dict(),
+        }
+
+
+# ──────────────────────────────────────────────
+# Orquestrador Multi-Camada
+# ──────────────────────────────────────────────
+class MultiLayerThrottle:
+    def __init__(self):
+        self.layer1 = DecentralizedThrottle()
+        self.layer2 = CentralizedQueue()
+        self.layer3 = ProviderFailover()
+        self._active_layer = 1
+
+    async def execute(self, request_id: str, provider_fn: Callable,
+                      available_providers: list[str]) -> str:
+        if self.layer1.should_escalate:
+            self._active_layer = 2
+            self.layer1.reset_escalation()
+            return await self.layer2.enqueue(request_id, provider_fn)
+
+        await self.layer1.wait_if_needed()
+        chain = self.layer3.get_failover_chain(available_providers)
+        if not chain and available_providers:
+            self._active_layer = 3
+            for p in available_providers:
+                self.layer3.set_quota(p, self.layer3._provider_quotas[p] + 50)
+            chain = available_providers
+
+        last_error = None
+        for provider in chain:
+            try:
+                result = await provider_fn(provider)
+                self.layer1.record_success()
+                self._active_layer = 1
+                return result
+            except Exception as e:
+                self.layer3.record_usage(provider)
+                last_error = e
+                continue
+
+        self.layer1.record_429()
+        return PAUSED_RETRY
+
+    def to_dict(self) -> dict:
+        return {
+            "active_layer": self._active_layer,
+            "layer1": self.layer1.to_dict(),
+            "layer2": self.layer2.to_dict(),
+            "layer3": self.layer3.to_dict(),
+        }
+
+
+# ──────────────────────────────────────────────
+# Circuit Breaker State
+# ──────────────────────────────────────────────
 class CircuitBreakerState:
     CLOSED = "closed"
     OPEN = "open"
     HALF_OPEN = "half_open"
 
 
+# ──────────────────────────────────────────────
+# Predictive Context Filter (existing)
+# ──────────────────────────────────────────────
 class PredictiveContextFilter:
     def __init__(self, capacity: int = 4096, threshold: float = 0.8):
         self.capacity = capacity
@@ -89,6 +309,9 @@ def _summarize_lines(lines: list) -> str:
     return f"  ... [{len(lines)} lines omitted: {', '.join(summary_parts)}] ..."
 
 
+# ──────────────────────────────────────────────
+# Inference Router Circuit Breaker (updated)
+# ──────────────────────────────────────────────
 class InferenceRouterCircuitBreaker:
     MAX_RETRIES = 3
     BLACKOUT_SECONDS = 60.0
@@ -97,6 +320,7 @@ class InferenceRouterCircuitBreaker:
         self.state = CircuitBreakerState.CLOSED
         self.failure_count = 0
         self.blackout_until = 0.0
+        self.multi_layer = MultiLayerThrottle()
 
     def _exponential_backoff(self, attempt: int) -> float:
         return float(2 ** attempt)
@@ -153,34 +377,49 @@ class InferenceRouterCircuitBreaker:
                 return PAUSED_RETRY
             self.state = CircuitBreakerState.HALF_OPEN
 
-        providers = [
-            (self._call_nvidia, nvidia_key),
-        ]
+        providers_list = []
+        provider_map = {}
+        if nvidia_key:
+            providers_list.append("nvidia")
+            provider_map["nvidia"] = (self._call_nvidia, nvidia_key)
         if openrouter_key:
-            providers.append((self._call_openrouter, openrouter_key))
+            providers_list.append("openrouter")
+            provider_map["openrouter"] = (self._call_openrouter, openrouter_key)
         if gemini_key:
-            providers.append((self._call_gemini, gemini_key))
+            providers_list.append("gemini")
+            provider_map["gemini"] = (self._call_gemini, gemini_key)
 
-        last_error = None
-        for attempt in range(self.MAX_RETRIES):
-            for fn, key in providers:
-                if not key:
-                    continue
-                try:
-                    result = await fn(prompt, key)
-                    self.record_success()
-                    return result
-                except _RateLimitError:
-                    last_error = "rate_limited"
-                    continue
-                except Exception as e:
-                    last_error = str(e)
-                    continue
-            backoff = self._exponential_backoff(attempt)
-            await asyncio.sleep(backoff)
+        if not providers_list:
+            return PAUSED_RETRY
 
-        self.record_failure()
-        return PAUSED_RETRY
+        request_id = f"req-{uuid.uuid4().hex[:8]}"
+
+        async def try_providers() -> str:
+            for attempt in range(self.MAX_RETRIES):
+                chain = self.multi_layer.layer3.get_failover_chain(providers_list)
+                if not chain:
+                    chain = providers_list
+                for provider_name in chain:
+                    fn, key = provider_map[provider_name]
+                    try:
+                        result = await fn(prompt, key)
+                        self.record_success()
+                        self.multi_layer.layer3._session.append(provider_name, {"role": "assistant", "content": result[:200]})
+                        return result
+                    except _RateLimitError:
+                        self.multi_layer.layer3.record_usage(provider_name)
+                        self.multi_layer.layer1.record_429()
+                        continue
+                    except Exception as e:
+                        self.multi_layer.layer3.record_usage(provider_name)
+                        continue
+                backoff = self._exponential_backoff(attempt)
+                await asyncio.sleep(backoff)
+            self.record_failure()
+            return PAUSED_RETRY
+
+        result = await self.multi_layer.execute(request_id, try_providers, providers_list)
+        return result
 
 
 class _RateLimitError(Exception):

sandbox_manager.py

@@ -0,0 +1,291 @@
+import asyncio
+import json
+import logging
+import os
+import shutil
+import subprocess
+import tempfile
+import time
+import uuid
+from pathlib import Path
+from typing import Optional
+
+from huggingface_hub import HfApi
+
+log = logging.getLogger("altamira.sandbox")
+
+SANDBOX_TEMPLATE = '''import os, json, subprocess, sys
+from pathlib import Path
+from fastapi import FastAPI, HTTPException, Request
+from fastapi.responses import JSONResponse
+import uvicorn
+
+app = FastAPI(title="Altamira Sandbox")
+
+WORKSPACE = Path("/workspace")
+WORKSPACE.mkdir(parents=True, exist_ok=True)
+
+@app.post("/exec")
+async def exec_command(body: dict):
+    command = body.get("command", "")
+    timeout = int(body.get("timeout", 30))
+    env = {**os.environ}
+    extra_env = body.get("env", {})
+    env.update(extra_env)
+    try:
+        result = subprocess.run(
+            command, shell=True, capture_output=True, text=True,
+            timeout=timeout, cwd=str(WORKSPACE), env=env,
+        )
+        return {"stdout": result.stdout, "stderr": result.stderr, "returncode": result.returncode}
+    except subprocess.TimeoutExpired:
+        raise HTTPException(408, "Command timed out")
+    except Exception as e:
+        raise HTTPException(500, str(e))
+
+@app.post("/write")
+async def write_file(body: dict):
+    path = WORKSPACE / body.get("path", "")
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(body.get("content", ""))
+    return {"path": str(path), "size": len(body.get("content", ""))}
+
+@app.post("/read")
+async def read_file(body: dict):
+    path = WORKSPACE / body.get("path", "")
+    if not path.exists():
+        raise HTTPException(404)
+    return {"path": str(path), "content": path.read_text()}
+
+@app.post("/files")
+async def list_files():
+    files = []
+    for f in WORKSPACE.rglob("*"):
+        if f.is_file():
+            files.append({"name": str(f.relative_to(WORKSPACE)), "size": f.stat().st_size})
+    return {"files": files}
+
+@app.get("/health")
+async def health():
+    return {"status": "healthy", "sandbox": True}
+
+if __name__ == "__main__":
+    uvicorn.run(app, host="0.0.0.0", port=7860)
+'''
+
+
+class SandboxManager:
+    def __init__(self, hf_token: str = ""):
+        self._hf_token = hf_token or os.environ.get("HF_TOKEN", "")
+        self._api = HfApi()
+        self._sandbox_registry: dict[str, dict] = {}
+        self._registry_file = Path("/tmp/altamira-sandbox-registry.json")
+        self._load_registry()
+
+    def _load_registry(self):
+        if self._registry_file.exists():
+            try:
+                self._sandbox_registry = json.loads(self._registry_file.read_text())
+            except Exception:
+                self._sandbox_registry = {}
+
+    def _save_registry(self):
+        self._registry_file.parent.mkdir(parents=True, exist_ok=True)
+        self._registry_file.write_text(json.dumps(self._sandbox_registry, indent=2))
+
+    async def create_sandbox_space(
+        self,
+        project_name: str,
+        sandbox_name: str = "",
+        hf_token: str = "",
+    ) -> dict:
+        token = hf_token or self._hf_token
+        if not token:
+            return {"status": "error", "error": "HF token required to create sandbox Spaces"}
+
+        if not sandbox_name:
+            safe_name = project_name.lower().replace(" ", "-").replace("_", "-")
+            sandbox_name = f"altamira-sandbox-{safe_name}-{uuid.uuid4().hex[:6]}"
+
+        username = self._get_username(token)
+        if not username:
+            return {"status": "error", "error": "Could not determine HF username"}
+
+        repo_id = f"{username}/{sandbox_name}"
+        try:
+            self._api.create_repo(
+                repo_id=repo_id,
+                repo_type="space",
+                token=token,
+                private=False,
+                space_sdk="docker",
+            )
+        except Exception as e:
+            if "already exists" in str(e).lower():
+                pass
+            else:
+                return {"status": "error", "error": f"Failed to create space: {e}"}
+
+        try:
+            dockerfile_content = f"""FROM python:3.9
+WORKDIR /code
+RUN pip install fastapi uvicorn httpx
+COPY sandbox_server.py /code/sandbox_server.py
+CMD ["python", "sandbox_server.py"]
+"""
+            server_content = SANDBOX_TEMPLATE
+
+            with tempfile.TemporaryDirectory() as tmpdir:
+                tmp_path = Path(tmpdir)
+                (tmp_path / "Dockerfile").write_text(dockerfile_content)
+                (tmp_path / "sandbox_server.py").write_text(server_content)
+                (tmp_path / "README.md").write_text(
+                    f"---\ntitle: {sandbox_name}\nemojj: 🔵\nsdk: docker\npinned: false\n---\n\nAltamira sandbox for project: {project_name}"
+                )
+
+                self._api.upload_file(
+                    path_or_fileobj=str(tmp_path / "Dockerfile"),
+                    path_in_repo="Dockerfile",
+                    repo_id=repo_id,
+                    repo_type="space",
+                    token=token,
+                )
+                self._api.upload_file(
+                    path_or_fileobj=str(tmp_path / "sandbox_server.py"),
+                    path_in_repo="sandbox_server.py",
+                    repo_id=repo_id,
+                    repo_type="space",
+                    token=token,
+                )
+                self._api.upload_file(
+                    path_or_fileobj=str(tmp_path / "README.md"),
+                    path_in_repo="README.md",
+                    repo_id=repo_id,
+                    repo_type="space",
+                    token=token,
+                )
+        except Exception as e:
+            return {"status": "error", "error": f"Failed to upload files: {e}"}
+
+        entry = {
+            "project": project_name,
+            "sandbox_name": sandbox_name,
+            "repo_id": repo_id,
+            "created": time.time(),
+            "status": "created",
+            "url": f"https://huggingface.co/spaces/{repo_id}",
+            "endpoint": f"https://{repo_id.replace('/', '-')}.hf.space",
+        }
+        self._sandbox_registry[project_name] = entry
+        self._save_registry()
+        return {"status": "created", **entry}
+
+    async def delete_sandbox_space(self, project_name: str, hf_token: str = "") -> dict:
+        token = hf_token or self._hf_token
+        entry = self._sandbox_registry.get(project_name)
+        if not entry:
+            return {"status": "error", "error": f"No sandbox for project: {project_name}"}
+
+        repo_id = entry["repo_id"]
+        try:
+            self._api.delete_repo(repo_id=repo_id, repo_type="space", token=token)
+        except Exception as e:
+            return {"status": "error", "error": f"Failed to delete space: {e}"}
+
+        del self._sandbox_registry[project_name]
+        self._save_registry()
+        return {"status": "deleted", "repo_id": repo_id}
+
+    async def get_sandbox_status(self, project_name: str) -> Optional[dict]:
+        return self._sandbox_registry.get(project_name)
+
+    async def list_sandboxes(self) -> dict:
+        return dict(self._sandbox_registry)
+
+    async def exec_in_sandbox(
+        self,
+        project_name: str,
+        command: str,
+        env: Optional[dict] = None,
+        timeout: int = 60,
+    ) -> dict:
+        entry = self._sandbox_registry.get(project_name)
+        if not entry:
+            return {"status": "error", "error": f"No sandbox for project: {project_name}"}
+
+        endpoint = entry["endpoint"]
+        import httpx
+
+        try:
+            async with httpx.AsyncClient(timeout=timeout) as client:
+                resp = await client.post(
+                    f"{endpoint}/exec",
+                    json={"command": command, "timeout": timeout, "env": env or {}},
+                )
+                if resp.status_code != 200:
+                    return {"status": "error", "error": f"Sandbox returned {resp.status_code}: {resp.text}"}
+                return {"status": "ok", **resp.json()}
+        except Exception as e:
+            return {"status": "error", "error": f"Sandbox connection failed: {e}"}
+
+    async def write_to_sandbox(self, project_name: str, path: str, content: str) -> dict:
+        entry = self._sandbox_registry.get(project_name)
+        if not entry:
+            return {"status": "error", "error": f"No sandbox for project: {project_name}"}
+
+        import httpx
+
+        try:
+            async with httpx.AsyncClient(timeout=30) as client:
+                resp = await client.post(
+                    f"{entry['endpoint']}/write",
+                    json={"path": path, "content": content},
+                )
+                if resp.status_code != 200:
+                    return {"status": "error", "error": f"Write failed: {resp.text}"}
+                return {"status": "ok", **resp.json()}
+        except Exception as e:
+            return {"status": "error", "error": f"Sandbox write failed: {e}"}
+
+    async def read_from_sandbox(self, project_name: str, path: str) -> dict:
+        entry = self._sandbox_registry.get(project_name)
+        if not entry:
+            return {"status": "error", "error": f"No sandbox for project: {project_name}"}
+
+        import httpx
+
+        try:
+            async with httpx.AsyncClient(timeout=30) as client:
+                resp = await client.post(
+                    f"{entry['endpoint']}/read",
+                    json={"path": path},
+                )
+                if resp.status_code != 200:
+                    return {"status": "error", "error": f"Read failed: {resp.text}"}
+                return {"status": "ok", **resp.json()}
+        except Exception as e:
+            return {"status": "error", "error": f"Sandbox read failed: {e}"}
+
+    async def list_sandbox_files(self, project_name: str) -> dict:
+        entry = self._sandbox_registry.get(project_name)
+        if not entry:
+            return {"status": "error", "error": f"No sandbox for project: {project_name}"}
+
+        import httpx
+
+        try:
+            async with httpx.AsyncClient(timeout=30) as client:
+                endpoint = entry["endpoint"]
+                resp = await client.get(f"{endpoint}/files")
+                if resp.status_code != 200:
+                    return {"status": "error", "error": f"List files failed: {resp.text}"}
+                return {"status": "ok", **resp.json()}
+        except Exception as e:
+            return {"status": "error", "error": f"Sandbox list files failed: {e}"}
+
+    def _get_username(self, token: str) -> Optional[str]:
+        try:
+            who = self._api.whoami(token=token)
+            return who.get("name", who.get("login", ""))
+        except Exception:
+            return None

templates/index.html

@@ -1,537 +1,612 @@
 <!DOCTYPE html>
-<html lang="en">
+<html class="dark" lang="en" style="width: 1280px; height: 1024px; overflow: hidden; position: relative;">
 <head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Altamira</title>
-    <script src="https://cdn.tailwindcss.com"></script>
-    <script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>
-    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css">
-    <style>
-        body { background: #0B0D0F; color: #E2E8F0; font-family: system-ui, -apple-system, sans-serif; }
-        .panel { background: #14171B; border: 1px solid rgba(255,255,255,0.08); border-radius: 12px; padding: 1rem; }
-        .aperture { position: fixed; top: 16px; left: 50%; transform: translateX(-50%); z-index: 999; background: #14171B; border: 1px solid rgba(255,255,255,0.08); border-radius: 50%; width: 48px; height: 48px; display: flex; justify-content: center; align-items: center; cursor: pointer; transition: all 0.3s cubic-bezier(0.25,0.8,0.25,1); }
-        .aperture:hover { border-radius: 12px; width: max-content; min-width: 140px; height: auto; padding: 10px 14px 8px; flex-direction: column; align-items: stretch; }
-        .aperture:hover .ap-dropdown { display: grid; }
-        .ap-dropdown { display: none; grid-template-columns: 1fr 1fr; gap: 6px; margin-top: 6px; padding-top: 6px; border-top: 1px solid rgba(255,255,255,0.05); }
-        .ap-icon { display: flex; flex-direction: column; align-items: center; gap: 4px; padding: 8px; border-radius: 8px; cursor: pointer; font-size: 11px; color: #94A3B8; transition: background 0.15s; }
-        .ap-icon:hover { background: rgba(255,255,255,0.06); color: #E2E8F0; }
-        .ap-icon i { font-size: 18px; }
-        .modal-overlay { position: fixed; inset: 0; background: rgba(11,13,15,0.85); z-index: 1000; display: flex; justify-content: center; align-items: center; }
-        .modal-window { background: #14171B; border: 1px solid rgba(255,255,255,0.08); border-radius: 12px; padding: 1.5rem; width: 560px; max-width: 92%; max-height: 85vh; overflow-y: auto; box-shadow: 0 10px 25px rgba(0,0,0,0.5); }
-        .card { background: #14171B; border: 1px solid rgba(255,255,255,0.08); border-radius: 12px; padding: 1rem; transition: border-color 0.15s; }
-        .card:hover { border-color: rgba(255,255,255,0.15); }
-        .term-line { font-family: 'SF Mono','Fira Code','Courier New',monospace; font-size: 12px; line-height: 1.6; }
-        ::-webkit-scrollbar { width: 4px; }
-        ::-webkit-scrollbar-track { background: transparent; }
-        ::-webkit-scrollbar-thumb { background: rgba(255,255,255,0.1); border-radius: 2px; }
-        select, input, textarea { background: #1E293B; border: 1px solid rgba(255,255,255,0.08); border-radius: 8px; padding: 8px 12px; font-size: 13px; color: #E2E8F0; outline: none; }
-        select:focus, input:focus, textarea:focus { border-color: rgba(99,102,241,0.5); }
-        button { transition: all 0.15s; }
-    </style>
+<meta charset="utf-8">
+<meta content="width=device-width, initial-scale=1.0" name="viewport">
+<title>ALTAMIRA-COMMAND | AADE</title>
+<script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>
+<script src="https://cdn.tailwindcss.com?plugins=forms,container-queries"></script>
+<link href="https://fonts.googleapis.com/css2?family=Hanken+Grotesk:wght@400;600;700&family=JetBrains+Mono:wght@500;600;700&display=swap" rel="stylesheet">
+<link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:wght,FILL@100..700,0..1&display=swap" rel="stylesheet">
+<style>
+.material-symbols-outlined{font-variation-settings:'FILL' 0,'wght' 400,'GRAD' 0,'opsz' 24}
+.custom-scrollbar::-webkit-scrollbar{width:4px}
+.custom-scrollbar::-webkit-scrollbar-track{background:#121416}
+.custom-scrollbar::-webkit-scrollbar-thumb{background:#424754;border-radius:2px}
+.scanline{width:100%;height:2px;background:rgba(173,198,255,0.05);position:absolute;animation:scanline 6s linear infinite;pointer-events:none}
+@keyframes scanline{0%{top:0}100%{top:100%}}
+.pulse-dot{animation:pulse-dot 2s ease-in-out infinite}
+@keyframes pulse-dot{0%,100%{opacity:1}50%{opacity:0.3}}
+.swing{animation:swing .35s ease-out}
+@keyframes swing{0%{opacity:0;transform:scale(.97) translateY(6px)}100%{opacity:1;transform:scale(1) translateY(0)}}
+.log-entry{animation:fadeIn .3s ease-out}
+@keyframes fadeIn{0%{opacity:0;transform:translateX(-8px)}100%{opacity:1;transform:translateX(0)}}
+</style>
+<script>
+tailwind.config={darkMode:"class",theme:{extend:{colors:{"surface-tint":"#adc6ff","on-surface-variant":"#c2c6d6","on-primary-fixed":"#001a42","tertiary-container":"#df7412","secondary-fixed":"#d3e4fe","surface-container-low":"#1a1c1e","secondary-container":"#3a4a5f","on-error-container":"#ffdad6","tertiary":"#ffb786","surface-bright":"#37393b","error-container":"#93000a","surface-variant":"#333537","on-surface":"#e2e2e5","outline":"#8c909f","on-tertiary-container":"#461f00","primary-fixed":"#d8e2ff","on-tertiary-fixed":"#311400","on-secondary":"#213145","tertiary-fixed-dim":"#ffb786","on-secondary-fixed":"#0b1c30","primary-container":"#4d8eff","on-tertiary":"#502400","on-primary-container":"#00285d","tertiary-fixed":"#ffdcc6","surface-container-lowest":"#0c0e10","on-tertiary-fixed-variant":"#723600","on-primary-fixed-variant":"#004395","error":"#ffb4ab","background":"#121416","surface-dim":"#121416","primary-fixed-dim":"#adc6ff","outline-variant":"#424754","surface-container-high":"#282a2c","on-secondary-fixed-variant":"#38485d","on-background":"#e2e2e5","inverse-on-surface":"#2f3133","primary":"#adc6ff","secondary-fixed-dim":"#b7c8e1","surface":"#121416","on-secondary-container":"#a9bad3","inverse-surface":"#e2e2e5","surface-container-highest":"#333537","on-error":"#690005","secondary":"#b7c8e1","surface-container":"#1e2022","on-primary":"#002e6a","inverse-primary":"#005ac2"},borderRadius:{DEFAULT:"0.125rem",lg:"0.25rem",xl:"0.5rem",full:"0.75rem"},spacing:{gutter:"12px",xl:"32px",sm:"8px",base_unit:"4px",xs:"4px",lg:"24px",md:"16px",margin:"16px"},fontFamily:{"display-lg":["Hanken Grotesk"],"status-sm":["JetBrains Mono"],"label-caps":["JetBrains Mono"],"headline-md":["Hanken Grotesk"],"data-mono":["JetBrains Mono"],"body-md":["Hanken Grotesk"]},fontSize:{"display-lg":["32px",{"lineHeight":"40px","letterSpacing":"-0.02em","fontWeight":"700"}],"status-sm":["12px",{"lineHeight":"16px","fontWeight":"600"}],"label-caps":["11px",{"lineHeight":"16px","letterSpacing":"0.05em","fontWeight":"700"}],"headline-md":["20px",{"lineHeight":"28px","letterSpacing":"-0.01em","fontWeight":"600"}],"data-mono":["13px",{"lineHeight":"18px","letterSpacing":"-0.01em","fontWeight":"500"}],"body-md":["14px",{"lineHeight":"20px","fontWeight":"400"}]}}}}
+</script>
 </head>
-<body>
-
-<div x-data="app()" class="min-h-screen">
-
-    <!-- ========== ONBOARDING (no nav) ========== -->
-    <div x-show="screen === 'onboarding'" class="flex items-center justify-center min-h-screen px-4">
-        <div class="w-full max-w-sm panel text-center">
-            <div class="w-12 h-12 rounded-xl bg-indigo-600 flex items-center justify-center text-xl font-bold mx-auto mb-4">A</div>
-            <h1 class="text-xl font-bold text-indigo-400 mb-1">Altamira</h1>
-            <p class="text-xs text-gray-500 mb-6">Sign in to continue</p>
-            <button @click="oauthLogin()" class="w-full bg-indigo-600 hover:bg-indigo-500 text-white rounded-lg px-4 py-3 text-sm font-medium flex items-center justify-center gap-3">
-                <i class="fa-regular fa-face-smile text-lg"></i> Login with Hugging Face
-            </button>
-        </div>
+<body x-data="app()" class="bg-background text-on-background font-body-md h-screen overflow-hidden">
+
+<!-- ===== ONBOARDING OVERLAY ===== -->
+<div x-show="screen==='onboarding'" class="fixed inset-0 bg-background z-[9999] flex items-center justify-center" style="background:radial-gradient(ellipse at 50% 0%,rgba(77,142,255,.08),transparent 60%)">
+  <div class="w-full max-w-sm bg-surface-container-low border border-outline-variant rounded-xl p-8 text-center swing">
+    <div class="w-14 h-14 rounded-full bg-primary/20 text-primary flex items-center justify-center mx-auto mb-5">
+      <span class="material-symbols-outlined text-[32px]">terminal</span>
     </div>
+    <h1 class="font-display-lg text-display-lg text-primary mb-1">Altamira AADE</h1>
+    <p class="font-body-md text-on-surface-variant mb-8">Autonomous AI Development Environment</p>
+    <button @click="oauthLogin()" class="w-full bg-primary text-on-primary font-status-sm py-3.5 rounded-lg flex items-center justify-center gap-3 hover:opacity-90 transition-opacity mb-3">
+      <span class="material-symbols-outlined text-[18px]">fingerprint</span> Login with Hugging Face
+    </button>
+    <p class="font-data-mono text-[11px] text-on-surface-variant/50">Free · No credit card needed</p>
+  </div>
+</div>
 
-    <!-- ========== APERTURE NAV (only on aade / settings) ========== -->
-    <div x-show="screen !== 'onboarding'" class="aperture" x-bind:title="'navigate'">
-        <i class="fas fa-circle text-xs" :class="screen === 'aade' ? 'text-indigo-400' : 'text-gray-600'"></i>
-        <div class="ap-dropdown">
-            <div class="col-span-2 text-center text-xs text-gray-500 truncate px-2" x-text="sessionUser"></div>
-            <template x-for="(item, key) in navTargets" :key="key">
-                <div @click="navigateTo(key)" class="ap-icon" x-show="key !== screen" x-bind:title="item.label">
-                    <i :class="item.icon"></i>
-                    <span x-text="item.label"></span>
-                </div>
-            </template>
-            <div @click="logout()" class="ap-icon col-span-2" title="Logout">
-                <i class="fas fa-sign-out-alt"></i>
-                <span>Logout</span>
+<!-- ===== SIDENAV ===== -->
+<nav x-show="screen!=='onboarding'" class="fixed left-0 top-0 h-full w-64 bg-surface-container-low border-r border-outline-variant z-40 hidden md:flex flex-col">
+  <div class="h-14 px-md flex items-center gap-3 border-b border-outline-variant bg-surface-container">
+    <span class="material-symbols-outlined text-primary text-[22px]">terminal</span>
+    <span class="font-headline-md text-headline-md text-primary">Altamira</span>
+  </div>
+  <div class="flex-1 py-sm px-xs space-y-0.5 overflow-y-auto">
+    <template x-for="(item,key) in navItems" :key="key">
+      <button @click="navigateTo(key)" class="w-full flex items-center gap-3 px-sm py-2.5 rounded-lg transition-all font-data-mono text-[13px]" :class="screen===key?'bg-primary/20 text-primary border-l-2 border-primary':'text-on-surface-variant hover:bg-surface-container hover:text-on-surface'">
+        <span class="material-symbols-outlined text-[20px]" x-text="item.icon"></span>
+        <span x-text="item.label"></span>
+        <span x-show="item.badge" class="ml-auto bg-primary/20 text-primary text-[10px] font-bold px-1.5 py-0.5 rounded" x-text="item.badge"></span>
+      </button>
+    </template>
+  </div>
+  <div class="p-sm border-t border-outline-variant bg-surface-container">
+    <div class="flex items-center gap-2.5 px-sm py-2">
+      <span class="w-7 h-7 rounded-full bg-primary/20 text-primary flex items-center justify-center text-xs font-bold" x-text="(sessionUser||'?')[0].toUpperCase()"></span>
+      <div class="flex-1 min-w-0">
+        <p class="font-data-mono text-[12px] truncate text-on-surface" x-text="sessionUser||'anonymous'"></p>
+        <p class="font-label-caps text-[9px] text-on-surface-variant/50">OPERATOR</p>
+      </div>
+      <button @click="logout()" class="text-on-surface-variant hover:text-error transition-colors"><span class="material-symbols-outlined text-[18px]">logout</span></button>
+    </div>
+  </div>
+</nav>
+
+<!-- ===== MAIN CANVAS ===== -->
+<main x-show="screen!=='onboarding'" class="ml-0 md:ml-64 pt-0 h-screen bg-surface-container-lowest grid grid-cols-12 grid-rows-12 gap-base_unit p-base_unit">
+
+<!-- ===== SCREEN: AADE ===== -->
+<template x-if="screen==='aade'">
+  <div class="contents">
+    <!-- Panel A: Terminal / AI Chat -->
+    <section class="col-span-12 md:col-span-5 row-span-12 bg-surface-container-low border border-outline-variant flex flex-col overflow-hidden relative">
+      <div class="scanline"></div>
+      <div class="h-10 px-md flex items-center justify-between border-b border-outline-variant bg-surface-container bg-opacity-50">
+        <div class="flex items-center gap-sm">
+          <span class="material-symbols-outlined text-primary text-[18px]">terminal</span>
+          <span class="font-label-caps text-label-caps text-on-surface-variant uppercase">Command_Interface</span>
+        </div>
+        <div class="flex items-center gap-sm">
+          <span x-show="activeProject" class="font-data-mono text-[10px] text-primary/70">[<span x-text="activeProject"></span>]</span>
+          <span class="font-data-mono text-[10px] text-on-surface-variant opacity-40">v2.0</span>
+        </div>
+      </div>
+      <!-- Chat Messages -->
+      <div class="flex-1 overflow-y-auto p-md space-y-md font-data-mono custom-scrollbar" x-ref="chatBox">
+        <template x-for="(msg,i) in chatMessages" :key="i">
+          <div class="swing">
+            <div x-show="msg.role==='user'||msg.role==='agent'">
+              <div class="flex items-center gap-sm">
+                <span class="text-[11px] font-bold" :class="msg.role==='user'?'text-tertiary':'text-primary-fixed-dim'" x-text="msg.role==='user'?'[OPERATOR]':'[OS_CORE]'"></span>
+                <span class="text-on-surface-variant text-[10px] opacity-50" x-text="msg.time||''"></span>
+              </div>
+              <p class="text-on-surface text-data-mono leading-relaxed" x-text="msg.content"></p>
             </div>
+            <div x-show="msg.role==='output'">
+              <div class="bg-surface-container-lowest border border-outline-variant p-sm rounded-lg overflow-x-auto mt-xs">
+                <pre class="text-[12px] text-secondary leading-tight whitespace-pre-wrap"><span x-text="msg.content"></span></pre>
+              </div>
+            </div>
+            <div x-show="msg.role==='error'" class="flex items-center gap-sm bg-error/10 border-l-2 border-error p-xs">
+              <span class="material-symbols-outlined text-error text-[16px]">error</span>
+              <span class="text-on-surface text-[12px]" x-text="msg.content"></span>
+            </div>
+            <div x-show="msg.role==='system'">
+              <div class="flex items-center gap-sm bg-primary/10 border-l-2 border-primary p-xs">
+                <span class="material-symbols-outlined text-primary text-[16px]">sync</span>
+                <span class="text-on-surface text-[12px]" x-text="msg.content"></span>
+              </div>
+            </div>
+            <div x-show="msg.role==='manifest'">
+              <div class="flex items-center gap-sm bg-tertiary/10 border-l-2 border-tertiary p-xs">
+                <span class="material-symbols-outlined text-tertiary text-[16px]">check_circle</span>
+                <span class="text-on-surface text-[12px]" x-text="msg.content"></span>
+              </div>
+            </div>
+          </div>
+        </template>
+        <div x-show="!chatMessages.length&&!chatLoading" class="flex flex-col items-center justify-center py-16 text-on-surface-variant/40">
+          <span class="material-symbols-outlined text-[40px]">terminal</span>
+          <p class="font-data-mono text-[12px] mt-2">Awaiting deployment parameters.</p>
         </div>
-    </div>
-
-    <!-- ========== AADE WORKSPACE ========== -->
-    <div x-show="screen === 'aade'" class="max-w-7xl mx-auto px-4 pt-20 pb-6">
-        <div class="grid grid-cols-1 lg:grid-cols-2 gap-4" style="min-height: calc(100vh - 120px);">
-
-            <!-- LEFT: Agent Console -->
-            <div class="panel flex flex-col">
-                <div class="flex items-center justify-between mb-3">
-                    <h2 class="text-sm font-semibold text-indigo-300"><i class="fas fa-robot mr-2"></i>Agent Console</h2>
-                </div>
-
-                <!-- chat messages -->
-                <div class="flex-1 overflow-y-auto space-y-3 mb-3 text-sm" x-ref="chatBox" style="min-height: 0; max-height: calc(100vh - 280px);">
-                    <template x-for="(msg, i) in chatMessages" :key="i">
-                        <div>
-                            <div x-show="msg.role === 'user'" class="flex justify-end">
-                                <div class="bg-indigo-900/40 text-indigo-200 rounded-2xl rounded-br-sm px-4 py-2 max-w-md"><span x-text="msg.content"></span></div>
-                            </div>
-                            <div x-show="msg.role === 'agent'" class="flex justify-start">
-                                <div class="bg-gray-800 text-gray-200 rounded-2xl rounded-bl-sm px-4 py-2 max-w-md"><span x-text="msg.content"></span></div>
-                            </div>
-                            <div x-show="msg.role === 'output'" class="flex justify-start ml-4">
-                                <pre class="bg-gray-900 text-gray-400 rounded-lg px-3 py-2 max-w-lg text-xs overflow-x-auto whitespace-pre-wrap term-line"><span x-text="msg.content"></span></pre>
-                            </div>
-                            <div x-show="msg.role === 'error'" class="flex justify-start">
-                                <div class="bg-red-900/30 text-red-300 rounded-xl px-4 py-2 max-w-md text-sm"><span x-text="msg.content"></span></div>
-                            </div>
-                            <div x-show="msg.role === 'system'" class="text-center"><span class="text-xs text-gray-600 italic" x-text="msg.content"></span></div>
-                        </div>
-                    </template>
-                    <div x-show="chatMessages.length === 0" class="text-gray-600 text-center py-12 text-xs">Agent ready. Describe what to build or run.</div>
-                    <div x-show="chatLoading" class="flex justify-start"><div class="bg-gray-800 text-gray-400 rounded-2xl rounded-bl-sm px-4 py-2 text-sm"><i class="fas fa-spinner fa-spin mr-2"></i>Thinking...</div></div>
-                </div>
-
-                <!-- chat input -->
-                <div class="flex gap-2 pt-2 border-t border-white/5">
-                    <div class="relative flex-1">
-                        <i class="fas fa-robot absolute left-3 top-2.5 text-gray-600 text-xs"></i>
-                        <input x-model="chatInput" @keydown.enter="sendChat()" class="w-full pl-8 pr-3 py-2 text-sm" placeholder="Ask the agent...">
-                    </div>
-                    <button @click="sendChat()" class="bg-indigo-600 hover:bg-indigo-500 text-white px-3 py-2 rounded-lg text-sm"><i class="fas fa-paper-plane"></i></button>
-                </div>
+        <div x-show="chatLoading" class="flex items-center gap-sm bg-primary/10 border-l-2 border-primary p-xs">
+          <span class="material-symbols-outlined text-primary text-[16px] animate-spin">sync</span>
+          <span class="text-on-surface text-[12px]">Processing...</span>
+        </div>
+      </div>
+      <!-- Command Input -->
+      <div class="p-sm bg-surface-container border-t border-outline-variant">
+        <div class="relative group">
+          <textarea x-model="chatInput" @keydown.enter.prevent="sendChat()" class="w-full bg-surface-container-lowest border border-outline-variant rounded-lg p-sm font-data-mono text-on-surface focus:outline-none focus:border-primary transition-all resize-none h-20 placeholder:text-on-surface-variant/30" placeholder="Type command or prompt..."></textarea>
+          <div class="absolute bottom-xs right-xs flex items-center gap-xs">
+            <kbd class="px-xs py-[2px] bg-surface-variant rounded text-[10px] font-data-mono text-on-surface-variant">CMD</kbd>
+            <kbd class="px-xs py-[2px] bg-surface-variant rounded text-[10px] font-data-mono text-on-surface-variant">ENTER</kbd>
+          </div>
+        </div>
+      </div>
+    </section>
+
+    <!-- Right Stack -->
+    <div class="col-span-12 md:col-span-7 row-span-12 flex flex-col gap-base_unit h-full overflow-hidden">
+      <!-- Panel B: Fleet Monitor -->
+      <section class="h-[58%] bg-surface-container-low border border-outline-variant flex flex-col overflow-hidden">
+        <div class="h-10 px-md flex items-center justify-between border-b border-outline-variant bg-surface-container">
+          <div class="flex items-center gap-sm">
+            <span class="material-symbols-outlined text-secondary text-[18px]">grid_view</span>
+            <span class="font-label-caps text-label-caps text-on-surface-variant uppercase">Fleet_Monitor</span>
+          </div>
+          <div class="flex gap-md items-center">
+            <div class="flex items-center gap-xs">
+              <span class="w-2 h-2 rounded-full bg-primary pulse-dot"></span>
+              <span class="font-label-caps text-[10px] text-on-surface-variant" x-text="runningCount+' RUNNING'"></span>
             </div>
-
-            <!-- RIGHT: Project Fleet -->
-            <div class="panel flex flex-col">
-                <div class="flex items-center justify-between mb-3">
-                    <h2 class="text-sm font-semibold text-indigo-300"><i class="fas fa-layer-group mr-2"></i>Project Fleet</h2>
-                    <div class="flex gap-2">
-                        <button @click="showAddProject = true" class="text-xs bg-indigo-600 hover:bg-indigo-500 text-white px-3 py-1.5 rounded-lg"><i class="fas fa-plus mr-1"></i>New</button>
-                        <button @click="loadProjects()" class="text-xs bg-gray-800 hover:bg-gray-700 text-gray-300 px-3 py-1.5 rounded-lg"><i class="fas fa-sync"></i></button>
-                    </div>
+            <div class="flex items-center gap-xs">
+              <span class="w-2 h-2 rounded-full bg-error"></span>
+              <span class="font-label-caps text-[10px] text-on-surface-variant" x-text="errorCount+' FAILED'"></span>
+            </div>
+            <button @click="showAddProject=true" class="font-label-caps text-[10px] text-primary hover:text-primary-fixed-dim transition-colors">+ NEW</button>
+          </div>
+        </div>
+        <div class="flex-1 overflow-y-auto p-md custom-scrollbar">
+          <div x-show="showAddProject" class="bg-surface-container-lowest border border-outline-variant p-md rounded-lg mb-md swing">
+            <div class="flex gap-sm">
+              <input x-model="newProjectName" class="flex-1 bg-surface-container border border-outline-variant rounded px-sm py-1.5 font-data-mono text-[12px] focus:outline-none focus:border-primary" placeholder="Project name">
+              <input x-model="newProjectRepo" class="flex-1 bg-surface-container border border-outline-variant rounded px-sm py-1.5 font-data-mono text-[12px] focus:outline-none focus:border-primary" placeholder="GitHub URL (optional)">
+            </div>
+            <div class="flex gap-sm mt-sm">
+              <button @click="createProject();showAddProject=false" class="font-status-sm text-[10px] py-sm px-md bg-primary text-on-primary rounded">Create</button>
+              <button @click="showAddProject=false" class="font-status-sm text-[10px] py-sm px-md border border-outline-variant text-on-surface-variant rounded">Cancel</button>
+            </div>
+          </div>
+          <div class="grid grid-cols-1 lg:grid-cols-2 gap-md">
+            <template x-for="(proj,name) in projects" :key="name">
+              <div class="bg-surface-container-lowest border border-outline-variant p-md flex flex-col gap-sm relative group hover:border-primary/50 transition-colors cursor-pointer" @click="selectProject(name)">
+                <div class="flex justify-between items-start">
+                  <div>
+                    <h4 class="font-headline-md text-headline-md text-on-surface leading-tight" x-text="name"></h4>
+                    <p class="font-data-mono text-[10px] text-on-surface-variant" x-text="'ID: '+(proj.repo_url?proj.repo_url.split('/').pop():'LOCAL')"></p>
+                  </div>
+                  <div class="flex items-center gap-xs px-xs py-[2px] rounded" :class="projectStatusClass(proj)">
+                    <span class="w-1.5 h-1.5 rounded-full" :class="proj.active?'bg-primary':'bg-on-surface-variant'"></span>
+                    <span class="font-status-sm text-[10px] font-bold" x-text="proj.active?'RUNNING':'SLEEPING'"></span>
+                  </div>
                 </div>
-
-                <!-- new project inline form -->
-                <div x-show="showAddProject" class="mb-3 p-3 bg-gray-900 rounded-lg space-y-2 text-sm">
-                    <input x-model="newProjectName" class="w-full" placeholder="Project name">
-                    <input x-model="newProjectRepo" class="w-full font-mono" placeholder="GitHub repo URL">
-                    <div class="flex gap-2">
-                        <button @click="createProject(); showAddProject = false" class="bg-indigo-600 hover:bg-indigo-500 text-white px-3 py-1.5 rounded-lg text-xs">Create</button>
-                        <button @click="showAddProject = false" class="text-xs text-gray-500">Cancel</button>
-                    </div>
+                <div x-show="proj.active" class="grid grid-cols-2 gap-xs border-y border-outline-variant py-sm my-xs">
+                  <div><span class="block font-label-caps text-[9px] text-on-surface-variant opacity-50">STATUS</span><span class="font-data-mono text-on-surface text-[12px]">Active</span></div>
+                  <div><span class="block font-label-caps text-[9px] text-on-surface-variant opacity-50">NODE</span><span class="font-data-mono text-on-surface text-[12px]" x-text="'Sandbox-'+(sandboxStatus[name]?'LIVE':'NONE')"></span></div>
                 </div>
-
-                <!-- project cards -->
-                <div class="flex-1 space-y-2 overflow-y-auto" style="min-height: 0;">
-                    <template x-for="(proj, name) in projects" :key="name">
-                        <div class="card">
-                            <div class="flex items-center justify-between">
-                                <div class="flex items-center gap-2 min-w-0">
-                                    <div class="w-2 h-2 rounded-full flex-shrink-0" :class="proj.active ? 'bg-green-500' : 'bg-gray-600'"></div>
-                                    <span class="text-sm font-medium truncate" x-text="name"></span>
-                                    <span class="text-xs px-1.5 py-0.5 rounded-full" :class="proj.active ? 'bg-green-900/50 text-green-300' : 'bg-gray-800 text-gray-500'" x-text="proj.active ? 'running' : 'sleeping'"></span>
-                                </div>
-                                <div class="flex gap-2 flex-shrink-0">
-                                    <button @click="openTestLink(name)" class="text-xs bg-gray-800 hover:bg-gray-700 text-gray-300 px-2 py-1 rounded" title="Open Repo"><i class="fas fa-external-link-alt"></i></button>
-                                    <button @click="activateProject(name)" class="text-xs px-1" :class="projectLoading[name + '-activate'] ? 'text-gray-600' : 'text-indigo-400 hover:text-indigo-300'" title="Activate"><i :class="projectLoading[name + '-activate'] ? 'fas fa-spinner fa-spin' : 'fas fa-play'"></i></button>
-                                    <button @click="gitSyncProject(name)" class="text-xs px-1" :class="projectLoading[name + '-sync'] ? 'text-gray-600' : 'text-emerald-400 hover:text-emerald-300'" title="Git Sync"><i :class="projectLoading[name + '-sync'] ? 'fas fa-spinner fa-spin' : 'fas fa-sync'"></i></button>
-                                    <button @click="toggleProjectLogs(name)" class="text-xs text-gray-500 hover:text-gray-300 px-1" title="Workspace Path"><i class="fas fa-folder"></i></button>
-                                </div>
-                            </div>
-                            <div x-show="proj.repo_url" class="mt-1 text-xs text-gray-600 font-mono truncate" x-text="proj.repo_url"></div>
-                            <!-- expandable terminal -->
-                            <div x-show="expandedProject === name" class="mt-2 pt-2 border-t border-white/5">
-                                <div class="bg-gray-950 rounded-lg p-2 max-h-32 overflow-y-auto term-line text-xs space-y-0.5">
-                                    <div class="text-gray-600">─ project logs ─</div>
-                                    <template x-for="(line, j) in (projectLogs[name] || [])" :key="j">
-                                        <div x-text="line" :class="line.includes('error') ? 'text-red-400' : 'text-gray-400'"></div>
-                                    </template>
-                                    <div x-show="!(projectLogs[name] || []).length" class="text-gray-700">No output yet. Activate and run commands.</div>
-                                </div>
-                            </div>
-                        </div>
-                    </template>
-                    <div x-show="Object.keys(projects).length === 0" class="text-gray-600 text-center py-12 text-xs">No projects. Click <span class="text-indigo-400">New</span> to create one.</div>
+                <div class="flex items-center gap-xs" x-show="selectedProject===name">
+                  <button @click.stop="activateProject(name)" class="flex-1 font-status-sm text-[10px] py-sm border border-outline-variant hover:bg-surface-variant transition-colors rounded">CONTROL</button>
+                  <button @click.stop="createSandbox(name)" class="flex-1 font-status-sm text-[10px] py-sm border border-outline-variant hover:bg-surface-variant transition-colors rounded">SANDBOX</button>
+                  <button @click.stop="openProjectDetail(name)" class="material-symbols-outlined p-sm text-on-surface-variant hover:text-primary transition-colors text-[16px] border border-outline-variant rounded">open_in_new</button>
                 </div>
+              </div>
+            </template>
+            <div x-show="!Object.keys(projects).length" class="col-span-full flex flex-col items-center justify-center py-16 text-on-surface-variant/40">
+              <span class="material-symbols-outlined text-[40px]">grid_view</span>
+              <p class="font-data-mono text-[12px] mt-2">No active projects.</p>
+              <button @click="showAddProject=true" class="font-status-sm text-[10px] mt-sm px-md py-sm bg-primary/20 text-primary rounded">BOOTSTRAP</button>
             </div>
+          </div>
+        </div>
+      </section>
+      <!-- Panel C: Runtime Stream -->
+      <section class="flex-1 bg-surface-container-lowest border border-outline-variant flex flex-col overflow-hidden">
+        <div class="h-10 px-md flex items-center justify-between border-b border-outline-variant bg-surface-container-high">
+          <div class="flex items-center gap-sm">
+            <span class="material-symbols-outlined text-tertiary text-[18px]">history_edu</span>
+            <span class="font-label-caps text-label-caps text-on-surface-variant uppercase">Runtime_Stream</span>
+          </div>
+          <div class="flex items-center gap-sm">
+            <span class="font-data-mono text-[10px] text-on-surface-variant uppercase bg-surface-variant px-xs">LIVE_FEED</span>
+            <button @click="clearLogs" class="material-symbols-outlined text-on-surface-variant text-[16px] hover:text-primary">delete_sweep</button>
+          </div>
         </div>
+        <div class="flex-1 overflow-y-auto p-md font-data-mono text-[11px] leading-tight custom-scrollbar bg-black" x-ref="logBox">
+          <template x-for="(log,i) in runtimeLogs" :key="i">
+            <p class="log-entry" :class="log.color" x-text="log.text"></p>
+          </template>
+          <p x-show="!runtimeLogs.length" class="text-on-surface/30">[system] Awaiting process output...</p>
+        </div>
+      </section>
+    </div>
+  </div>
+</template>
+
+<!-- ===== SCREEN: SETTINGS ===== -->
+<template x-if="screen==='settings'">
+  <div class="col-span-12 row-span-12 flex flex-col gap-base_unit p-md overflow-y-auto custom-scrollbar">
+    <div class="flex gap-1 p-1 bg-surface-container-low border border-outline-variant rounded-lg w-fit">
+      <button @click="settingsTab='resources'" class="px-4 py-2 rounded-lg font-status-sm text-[11px] transition-all" :class="settingsTab==='resources'?'bg-primary text-on-primary':'text-on-surface-variant hover:text-on-surface'">RESOURCES</button>
+      <button @click="settingsTab='providers'" class="px-4 py-2 rounded-lg font-status-sm text-[11px] transition-all" :class="settingsTab==='providers'?'bg-primary text-on-primary':'text-on-surface-variant hover:text-on-surface'">PROVIDERS</button>
+      <button @click="settingsTab='monitor'" class="px-4 py-2 rounded-lg font-status-sm text-[11px] transition-all" :class="settingsTab==='monitor'?'bg-primary text-on-primary':'text-on-surface-variant hover:text-on-surface'">MONITOR</button>
     </div>
 
-    <!-- ========== SETTINGS & RESOURCE VAULT ========== -->
-    <div x-show="screen === 'settings'" class="max-w-5xl mx-auto px-4 pt-20 pb-6">
-        <div class="flex items-center justify-between mb-4">
-            <h2 class="text-lg font-semibold text-indigo-300"><i class="fas fa-cog mr-2"></i>Settings &amp; Resource Vault</h2>
-            <button @click="openResourceBuilder()" class="bg-indigo-600 hover:bg-indigo-500 text-white px-4 py-2 rounded-lg text-sm font-medium"><i class="fas fa-plus mr-1"></i> Add Resource</button>
+    <div x-show="settingsTab==='resources'">
+      <div class="flex items-center justify-between mb-3"><h2 class="font-headline-md text-headline-md text-primary">Resource Vault</h2><button @click="openResourceBuilder()" class="font-status-sm text-[11px] py-sm px-md bg-primary text-on-primary rounded-lg">+ ADD</button></div>
+      <div class="bg-surface-container-low border border-outline-variant rounded-lg overflow-hidden">
+        <div class="grid grid-cols-12 gap-2 px-md py-2.5 font-label-caps text-[10px] text-on-surface-variant uppercase border-b border-outline-variant bg-surface-container">
+          <div class="col-span-4">Resource</div><div class="col-span-2">Scope</div><div class="col-span-2">Status</div><div class="col-span-4 text-right">Actions</div>
         </div>
-
-        <!-- credentials list -->
-        <div class="panel space-y-2">
-            <div class="flex items-center justify-between text-xs text-gray-500 uppercase tracking-wider px-1 pb-2 border-b border-white/5">
-                <span class="font-medium">Resource</span><span class="font-medium">Status</span>
+        <template x-for="(cred,key) in credentials" :key="key">
+          <div class="grid grid-cols-12 gap-2 items-center px-md py-2.5 border-b border-outline-variant last:border-0 hover:bg-surface-container transition-colors">
+            <div class="col-span-4 flex items-center gap-2 min-w-0">
+              <span class="material-symbols-outlined text-[16px] text-on-surface-variant">key</span>
+              <span class="font-data-mono text-[12px] truncate" x-text="key"></span>
             </div>
-            <template x-for="(cred, key) in credentials" :key="key">
-                <div class="flex items-center justify-between py-2.5 px-1 border-b border-white/5 last:border-0">
-                    <div class="flex items-center gap-3">
-                        <i class="fas fa-key text-gray-600 text-xs"></i>
-                        <span class="text-sm font-mono" x-text="key"></span>
-                        <span class="text-xs text-gray-600" x-text="cred.description || ''"></span>
-                    </div>
-                    <div class="flex items-center gap-3">
-                        <span class="text-xs font-mono text-gray-600" x-text="cred.value ? '********' : 'not set'"></span>
-                        <button @click="openResourceEditor(key)" class="text-xs text-indigo-400 hover:text-indigo-300"><i class="fas fa-pen"></i></button>
-                    </div>
-                </div>
-            </template>
-            <div x-show="Object.keys(credentials).length === 0" class="text-gray-600 text-center py-8 text-sm">No resources configured.</div>
-        </div>
-
-        <!-- LLM provider status -->
-        <div class="panel mt-4">
-            <h3 class="text-sm font-medium text-indigo-300 mb-3"><i class="fas fa-bolt mr-2"></i>LLM Router Status</h3>
-            <div class="grid grid-cols-3 gap-3 text-sm">
-                <div class="bg-gray-900 rounded-lg p-3">
-                    <div class="flex items-center gap-2">
-                        <div class="w-2 h-2 rounded-full" :class="nvidiaKey ? 'bg-green-500' : 'bg-gray-600'"></div>
-                        <span class="text-xs text-gray-400">NVIDIA NIM</span>
-                    </div>
-                    <div class="text-xs font-mono mt-1" :class="nvidiaKey ? 'text-green-400' : 'text-gray-600'" x-text="nvidiaKey ? 'key set' : 'not set'"></div>
-                </div>
-                <div class="bg-gray-900 rounded-lg p-3">
-                    <div class="flex items-center gap-2">
-                        <div class="w-2 h-2 rounded-full" :class="openrouterKey ? 'bg-green-500' : 'bg-gray-600'"></div>
-                        <span class="text-xs text-gray-400">OpenRouter</span>
-                    </div>
-                    <div class="text-xs font-mono mt-1" :class="openrouterKey ? 'text-green-400' : 'text-gray-600'" x-text="openrouterKey ? 'key set' : 'not set'"></div>
-                </div>
-                <div class="bg-gray-900 rounded-lg p-3">
-                    <div class="flex items-center gap-2">
-                        <div class="w-2 h-2 rounded-full" :class="geminiKey ? 'bg-green-500' : 'bg-gray-600'"></div>
-                        <span class="text-xs text-gray-400">Gemini</span>
-                    </div>
-                    <div class="text-xs font-mono mt-1" :class="geminiKey ? 'text-green-400' : 'text-gray-600'" x-text="geminiKey ? 'key set' : 'not set'"></div>
-                </div>
+            <div class="col-span-2"><span class="font-label-caps text-[9px] px-1.5 py-0.5 rounded" :class="cred.scope==='core'?'bg-primary/20 text-primary':'bg-tertiary/20 text-tertiary'" x-text="cred.scope||'core'"></span></div>
+            <div class="col-span-2"><span class="font-data-mono text-[11px]" :class="pingResults[key]==='ok'?'text-primary':'text-on-surface-variant/50'" x-text="pingResults[key]==='ok'?'verified':(pingResults[key]||'—')"></span></div>
+            <div class="col-span-4 flex justify-end gap-1">
+              <button @click="pingResource(key)" class="material-symbols-outlined text-[16px] p-1 rounded hover:bg-surface-variant text-on-surface-variant hover:text-primary">link</button>
+              <button @click="openResourceEditor(key)" class="material-symbols-outlined text-[16px] p-1 rounded hover:bg-surface-variant text-on-surface-variant hover:text-primary">edit</button>
+              <button @click="deleteResource(key)" class="material-symbols-outlined text-[16px] p-1 rounded hover:bg-surface-variant text-on-surface-variant hover:text-error">delete</button>
             </div>
+          </div>
+        </template>
+        <div x-show="!Object.keys(credentials).length" class="text-center py-12 font-data-mono text-[12px] text-on-surface-variant/40">No resources configured.</div>
+      </div>
+    </div>
+
+    <div x-show="settingsTab==='providers'">
+      <h2 class="font-headline-md text-headline-md text-primary mb-3">LLM Providers</h2>
+      <div class="grid grid-cols-2 sm:grid-cols-4 gap-md">
+        <div class="bg-surface-container-low border border-outline-variant rounded-lg p-md flex flex-col items-center text-center gap-sm">
+          <span class="material-symbols-outlined text-[28px] text-primary">memory</span>
+          <span class="font-label-caps text-[10px] text-on-surface-variant uppercase">NVIDIA NIM</span>
+          <div class="flex items-center gap-1.5"><span class="w-1.5 h-1.5 rounded-full" :class="nvidiaKey?'bg-primary':'bg-on-surface-variant'"></span><span class="font-data-mono text-[11px]" :class="nvidiaKey?'text-primary':'text-on-surface-variant/50'" x-text="nvidiaKey?'ready':'not set'"></span></div>
+        </div>
+        <div class="bg-surface-container-low border border-outline-variant rounded-lg p-md flex flex-col items-center text-center gap-sm">
+          <span class="material-symbols-outlined text-[28px] text-secondary">alt_route</span>
+          <span class="font-label-caps text-[10px] text-on-surface-variant uppercase">OpenRouter</span>
+          <div class="flex items-center gap-1.5"><span class="w-1.5 h-1.5 rounded-full" :class="openrouterKey?'bg-primary':'bg-on-surface-variant'"></span><span class="font-data-mono text-[11px]" :class="openrouterKey?'text-primary':'text-on-surface-variant/50'" x-text="openrouterKey?'ready':'not set'"></span></div>
         </div>
+        <div class="bg-surface-container-low border border-outline-variant rounded-lg p-md flex flex-col items-center text-center gap-sm">
+          <span class="material-symbols-outlined text-[28px] text-tertiary">psychology</span>
+          <span class="font-label-caps text-[10px] text-on-surface-variant uppercase">Gemini</span>
+          <div class="flex items-center gap-1.5"><span class="w-1.5 h-1.5 rounded-full" :class="geminiKey?'bg-primary':'bg-on-surface-variant'"></span><span class="font-data-mono text-[11px]" :class="geminiKey?'text-primary':'text-on-surface-variant/50'" x-text="geminiKey?'ready':'not set'"></span></div>
+        </div>
+        <div class="bg-surface-container-low border border-outline-variant rounded-lg p-md flex flex-col items-center text-center gap-sm">
+          <span class="material-symbols-outlined text-[28px] text-on-surface-variant">layers</span>
+          <span class="font-label-caps text-[10px] text-on-surface-variant uppercase">Throttle</span>
+          <div class="font-data-mono text-[11px] text-primary" x-text="'Layer '+throttleLayer"></div>
+        </div>
+      </div>
     </div>
 
-    <!-- ========== MODAL: RESOURCE BUILDER ========== -->
-    <div x-show="resourceModal" class="modal-overlay" @click.self="resourceModal = false">
-        <div class="modal-window">
-            <div class="flex items-center justify-between mb-4">
-                <h3 class="text-base font-semibold text-indigo-300" x-text="resourcePhase === 1 ? 'Add Resource' : 'Configure ' + (resourceType || '')"></h3>
-                <button @click="resourceModal = false" class="text-gray-500 hover:text-gray-300"><i class="fas fa-times"></i></button>
-            </div>
+    <div x-show="settingsTab==='monitor'">
+      <h2 class="font-headline-md text-headline-md text-primary mb-3">System Monitor</h2>
+      <div class="grid grid-cols-2 gap-md">
+        <div class="bg-surface-container-low border border-outline-variant rounded-lg p-md">
+          <span class="font-label-caps text-[10px] text-on-surface-variant uppercase">Active Projects</span>
+          <p class="font-display-lg text-display-lg text-primary mt-1" x-text="Object.keys(projects).length"></p>
+        </div>
+        <div class="bg-surface-container-low border border-outline-variant rounded-lg p-md">
+          <span class="font-label-caps text-[10px] text-on-surface-variant uppercase">Sandbox Spaces</span>
+          <p class="font-display-lg text-display-lg text-tertiary mt-1" x-text="Object.keys(sandboxStatus).length"></p>
+        </div>
+      </div>
+    </div>
+  </div>
+</template>
+</main>
+
+<!-- ===== FLOATING COMMAND RING ===== -->
+<div x-show="screen==='aade'" class="fixed bottom-lg right-lg z-50" x-data="{open:false}">
+  <div x-show="open" @click.away="open=false" class="flex flex-col gap-sm mb-sm">
+    <button @click="showAddProject=true;open=false" class="w-12 h-12 rounded-full bg-surface-container-high border border-outline-variant flex items-center justify-center text-on-surface-variant hover:text-primary hover:border-primary transition-all shadow-xl">
+      <span class="material-symbols-outlined">add_box</span>
+    </button>
+    <button @click="clearChat();open=false" class="w-12 h-12 rounded-full bg-surface-container-high border border-outline-variant flex items-center justify-center text-on-surface-variant hover:text-tertiary hover:border-tertiary transition-all shadow-xl">
+      <span class="material-symbols-outlined">delete_sweep</span>
+    </button>
+    <button @click="navigateTo('settings');open=false" class="w-12 h-12 rounded-full bg-surface-container-high border border-outline-variant flex items-center justify-center text-on-surface-variant hover:text-secondary hover:border-secondary transition-all shadow-xl">
+      <span class="material-symbols-outlined">settings</span>
+    </button>
+  </div>
+  <div @click="open=!open" class="rounded-full w-16 h-16 bg-primary text-on-primary shadow-lg flex items-center justify-center hover:scale-105 active:scale-90 transition-transform cursor-pointer">
+    <span class="material-symbols-outlined text-[32px] transition-transform duration-300" :class="open?'rotate-45':''">add</span>
+  </div>
+</div>
 
-            <!-- Phase 1: Type Selector -->
-            <div x-show="resourcePhase === 1">
-                <p class="text-xs text-gray-500 mb-4">Select a resource class to connect.</p>
-                <div class="grid grid-cols-2 gap-3">
-                    <template x-for="(cls, key) in resourceClasses" :key="key">
-                        <div @click="selectResourceClass(key)" class="bg-gray-900 border border-white/5 rounded-lg p-3 cursor-pointer hover:border-indigo-500/50 transition-colors">
-                            <i :class="cls.icon" class="text-lg text-gray-400"></i>
-                            <div class="text-sm font-medium mt-1" x-text="cls.label"></div>
-                            <div class="text-xs text-gray-600 mt-0.5" x-text="cls.desc"></div>
-                        </div>
-                    </template>
-                </div>
+<!-- ===== MOBILE BOTTOM NAV ===== -->
+<nav x-show="screen!=='onboarding'" class="md:hidden fixed bottom-0 left-0 w-full bg-surface-container-high border-t border-outline-variant h-14 flex items-center justify-around z-50">
+  <button @click="navigateTo('aade')" class="flex flex-col items-center" :class="screen==='aade'?'text-primary':'text-on-surface-variant/60'">
+    <span class="material-symbols-outlined">terminal</span>
+    <span class="font-label-caps text-[10px]">AADE</span>
+  </button>
+  <button @click="navigateTo('settings')" class="flex flex-col items-center" :class="screen==='settings'?'text-primary':'text-on-surface-variant/60'">
+    <span class="material-symbols-outlined">settings</span>
+    <span class="font-label-caps text-[10px]">Settings</span>
+  </button>
+  <button @click="logout()" class="flex flex-col items-center text-on-surface-variant/60">
+    <span class="material-symbols-outlined">logout</span>
+    <span class="font-label-caps text-[10px]">Exit</span>
+  </button>
+</nav>
+
+<!-- ===== MODAL: PROJECT DETAIL ===== -->
+<div x-show="projectDetailModal" class="fixed inset-0 bg-black/70 z-[9999] flex items-center justify-center" @click.self="projectDetailModal=false">
+  <div class="bg-surface-container-low border border-outline-variant rounded-xl p-lg swing max-w-lg w-[92%] max-h-[85vh] overflow-y-auto custom-scrollbar">
+    <div class="flex items-center justify-between mb-4">
+      <h3 class="font-headline-md text-headline-md text-primary flex items-center gap-2"><span class="material-symbols-outlined">folder_open</span><span x-text="detailProjectName"></span></h3>
+      <button @click="projectDetailModal=false" class="text-on-surface-variant hover:text-on-surface"><span class="material-symbols-outlined">close</span></button>
+    </div>
+    <div class="space-y-4">
+      <div class="bg-surface-container-lowest border border-outline-variant rounded-lg p-md">
+        <span class="font-label-caps text-[10px] text-on-surface-variant uppercase">Status</span>
+        <div class="flex gap-3 mt-1">
+          <span class="font-data-mono text-[12px] flex items-center gap-1.5"><span class="w-2 h-2 rounded-full" :class="detailProject?.active?'bg-primary':'bg-on-surface-variant'"></span><span x-text="detailProject?.active?'Running':'Sleeping'"></span></span>
+        </div>
+      </div>
+      <div class="bg-surface-container-lowest border border-outline-variant rounded-lg p-md">
+        <div class="flex items-center justify-between mb-2"><span class="font-label-caps text-[10px] text-on-surface-variant uppercase">Sandbox Files</span><span class="font-data-mono text-[10px] text-on-surface-variant/50" x-text="sandboxFiles.length+' files'"></span></div>
+        <div class="max-h-40 overflow-y-auto space-y-1 custom-scrollbar">
+          <template x-if="!sandboxFiles.length"><p class="font-data-mono text-[11px] text-on-surface-variant/40 text-center py-4">No sandbox files. Create a sandbox first.</p></template>
+          <template x-for="f in sandboxFiles" :key="f.name">
+            <div @click="viewSandboxFileContent(detailProjectName,f.name)" class="flex items-center gap-2 px-2 py-1.5 rounded hover:bg-surface-container cursor-pointer transition-colors font-data-mono text-[11px]">
+              <span class="material-symbols-outlined text-[14px] text-on-surface-variant">description</span>
+              <span class="flex-1 truncate text-on-surface" x-text="f.name"></span>
+              <span class="text-on-surface-variant/40" x-text="(f.size/1024).toFixed(1)+'KB'"></span>
             </div>
+          </template>
+        </div>
+      </div>
+      <div class="flex gap-2 flex-wrap">
+        <button @click="createSandbox(detailProjectName);projectDetailModal=false" class="font-status-sm text-[10px] py-sm px-md bg-primary text-on-primary rounded-lg">CREATE SANDBOX</button>
+        <button @click="openResourceBinding(detailProjectName);projectDetailModal=false" class="font-status-sm text-[10px] py-sm px-md border border-outline-variant text-on-surface-variant rounded-lg hover:bg-surface-container">BIND RESOURCES</button>
+        <button @click="openExternalTesting(detailProjectName);projectDetailModal=false" class="font-status-sm text-[10px] py-sm px-md border border-outline-variant text-on-surface-variant rounded-lg hover:bg-surface-container">EXTERNAL TEST</button>
+      </div>
+    </div>
+  </div>
+</div>
 
-            <!-- Phase 2: Configuration -->
-            <div x-show="resourcePhase === 2" class="space-y-4">
-                <div><label class="block text-xs text-gray-500 mb-1">Connection Name</label><input x-model="resourceName" class="w-full" placeholder="my-database"></div>
-                <div x-show="resourceRequiresAuth">
-                    <label class="block text-xs text-gray-500 mb-1">API Key / Connection String</label>
-                    <textarea x-model="resourceValue" class="w-full font-mono h-20" placeholder="Paste API key or connection string..."></textarea>
-                </div>
-                <!-- Scope toggles -->
-                <div class="pt-2 border-t border-white/5">
-                    <label class="block text-xs text-gray-500 mb-2">Scope</label>
-                    <div class="flex gap-4 text-sm">
-                        <label class="flex items-center gap-2"><input type="radio" x-model="resourceScope" value="core" class="accent-indigo-500"> Altamira-Core</label>
-                        <label class="flex items-center gap-2"><input type="radio" x-model="resourceScope" value="sandbox" class="accent-indigo-500"> Project-Sandbox</label>
-                    </div>
-                    <div x-show="resourceScope === 'sandbox'" class="mt-2">
-                        <label class="block text-xs text-gray-500 mb-1">Restrict to projects</label>
-                        <template x-for="(proj, name) in projects" :key="name">
-                            <label class="flex items-center gap-2 text-sm mt-1"><input type="checkbox" x-model="resourceProjects" :value="name" class="accent-indigo-500"> <span x-text="name"></span></label>
-                        </template>
-                    </div>
-                </div>
-                <div class="flex gap-3 pt-2">
-                    <button @click="saveResource()" class="flex-1 bg-indigo-600 hover:bg-indigo-500 text-white rounded-lg px-4 py-2 text-sm font-medium">Save Resource</button>
-                    <button @click="resourcePhase = 1; resourceType = ''" class="text-sm text-gray-500 hover:text-gray-300">Back</button>
-                </div>
-            </div>
+<!-- ===== MODAL: RESOURCE BINDING ===== -->
+<div x-show="resourceBindingModal" class="fixed inset-0 bg-black/70 z-[9999] flex items-center justify-center" @click.self="resourceBindingModal=false">
+  <div class="bg-surface-container-low border border-outline-variant rounded-xl p-lg swing max-w-lg w-[92%] max-h-[85vh] overflow-y-auto custom-scrollbar">
+    <div class="flex items-center justify-between mb-4">
+      <h3 class="font-headline-md text-headline-md text-primary flex items-center gap-2"><span class="material-symbols-outlined">key</span>Resources: <span class="text-on-surface" x-text="bindProjectName"></span></h3>
+      <button @click="resourceBindingModal=false" class="text-on-surface-variant hover:text-on-surface"><span class="material-symbols-outlined">close</span></button>
+    </div>
+    <div class="space-y-2">
+      <template x-for="(cred,key) in credentials" :key="key">
+        <div class="flex items-center justify-between px-sm py-2 rounded-lg hover:bg-surface-container transition-colors border-b border-outline-variant last:border-0">
+          <div class="flex items-center gap-2">
+            <span class="material-symbols-outlined text-[16px]" :class="projectBoundKeys[key]?'text-primary':'text-on-surface-variant'">key</span>
+            <span class="font-data-mono text-[12px]" x-text="key"></span>
+            <span x-show="cred.shareable" class="font-label-caps text-[9px] px-1.5 py-0.5 rounded bg-secondary/20 text-secondary">shareable</span>
+          </div>
+          <div class="flex gap-2">
+            <button x-show="!projectBoundKeys[key]" @click="bindResource(bindProjectName,key)" class="font-status-sm text-[10px] py-1 px-2.5 bg-primary/20 text-primary rounded">BIND</button>
+            <button x-show="projectBoundKeys[key]" @click="unbindResource(bindProjectName,key)" class="font-status-sm text-[10px] py-1 px-2.5 border border-error/30 text-error rounded">UNBIND</button>
+          </div>
         </div>
+      </template>
+      <div x-show="!Object.keys(credentials).length" class="text-center py-8 font-data-mono text-[12px] text-on-surface-variant/40">No global resources.</div>
     </div>
+  </div>
+</div>
 
-    <!-- ========== EVENT LOG BAR ========== -->
+<!-- ===== MODAL: RESOURCE BUILDER ===== -->
+<div x-show="resourceModal" class="fixed inset-0 bg-black/70 z-[9999] flex items-center justify-center" @click.self="resourceModal=false">
+  <div class="bg-surface-container-low border border-outline-variant rounded-xl p-lg swing max-w-lg w-[92%] max-h-[85vh] overflow-y-auto custom-scrollbar">
+    <div class="flex items-center justify-between mb-4">
+      <h3 class="font-headline-md text-headline-md text-primary flex items-center gap-2"><span class="material-symbols-outlined">add_circle</span><span x-text="resourcePhase===1?'Add Resource':'Configure'"></span></h3>
+      <button @click="resourceModal=false" class="text-on-surface-variant hover:text-on-surface"><span class="material-symbols-outlined">close</span></button>
+    </div>
+    <div x-show="resourcePhase===1">
+      <p class="font-data-mono text-[11px] text-on-surface-variant/60 mb-4">Select resource class.</p>
+      <div class="grid grid-cols-2 gap-2">
+        <template x-for="(cls,key) in resourceClasses" :key="key">
+          <div @click="selectResourceClass(key)" class="bg-surface-container-lowest border border-outline-variant rounded-lg p-3 cursor-pointer hover:border-primary/40 transition-all hover:translate-y-[-1px]">
+            <span class="material-symbols-outlined text-[20px] text-on-surface-variant" x-text="cls.icon"></span>
+            <div class="font-data-mono text-[12px] mt-1" x-text="cls.label"></div>
+            <div class="font-data-mono text-[10px] text-on-surface-variant/50" x-text="cls.desc"></div>
+          </div>
+        </template>
+      </div>
+    </div>
+    <div x-show="resourcePhase===2" class="space-y-4">
+      <div><label class="font-label-caps text-[10px] text-on-surface-variant uppercase block mb-1">Name</label><input x-model="resourceName" class="w-full bg-surface-container-lowest border border-outline-variant rounded px-sm py-2 font-data-mono text-[12px] focus:outline-none focus:border-primary" placeholder="e.g. HF_TOKEN"></div>
+      <div x-show="resourceRequiresAuth"><label class="font-label-caps text-[10px] text-on-surface-variant uppercase block mb-1">Value</label><textarea x-model="resourceValue" class="w-full bg-surface-container-lowest border border-outline-variant rounded px-sm py-2 font-data-mono text-[12px] h-20 focus:outline-none focus:border-primary" placeholder="Paste key..."></textarea></div>
+      <div class="pt-2 border-t border-outline-variant">
+        <label class="font-label-caps text-[10px] text-on-surface-variant uppercase block mb-2">Scope</label>
+        <div class="flex gap-3 font-data-mono text-[12px]">
+          <label class="flex items-center gap-1.5 cursor-pointer"><input type="radio" x-model="resourceScope" value="core" class="accent-primary"> Core</label>
+          <label class="flex items-center gap-1.5 cursor-pointer"><input type="radio" x-model="resourceScope" value="sandbox" class="accent-primary"> Per-Project</label>
+        </div>
+        <label class="flex items-center gap-1.5 font-data-mono text-[12px] mt-2 cursor-pointer"><input type="checkbox" x-model="resourceShareable" class="accent-primary"> Shareable</label>
+      </div>
+      <div class="flex gap-2 pt-2">
+        <button @click="saveResource()" class="flex-1 font-status-sm text-[11px] py-sm bg-primary text-on-primary rounded-lg">Save &amp; Verify</button>
+        <button @click="resourcePhase=1;resourceType=''" class="font-status-sm text-[11px] py-sm px-md border border-outline-variant text-on-surface-variant rounded-lg">Back</button>
+      </div>
+    </div>
+  </div>
+</div>
 
+<!-- ===== MODAL: EXTERNAL TESTING ===== -->
+<div x-show="externalTestingModal" class="fixed inset-0 bg-black/70 z-[9999] flex items-center justify-center" @click.self="externalTestingModal=false">
+  <div class="bg-surface-container-low border border-outline-variant rounded-xl p-lg swing max-w-lg w-[92%] max-h-[85vh] overflow-y-auto custom-scrollbar">
+    <div class="flex items-center justify-between mb-4">
+      <h3 class="font-headline-md text-headline-md text-primary flex items-center gap-2"><span class="material-symbols-outlined">science</span>Testing: <span class="text-on-surface" x-text="testProjectName"></span></h3>
+      <button @click="externalTestingModal=false" class="text-on-surface-variant hover:text-on-surface"><span class="material-symbols-outlined">close</span></button>
+    </div>
+    <div class="space-y-3">
+      <div class="bg-surface-container-lowest border border-outline-variant rounded-lg p-md">
+        <div class="flex items-center justify-between mb-2"><span class="font-label-caps text-[10px] text-on-surface-variant uppercase"><span class="text-primary">A</span> Webhook</span><span class="font-data-mono text-[10px] text-primary">auto</span></div>
+        <input x-model="webhookUrl" class="w-full bg-surface-container border border-outline-variant rounded px-sm py-1.5 font-data-mono text-[11px] focus:outline-none focus:border-primary mb-2" placeholder="https://hook.example.com/endpoint">
+        <button @click="triggerWebhook(testProjectName)" class="font-status-sm text-[10px] py-sm px-md bg-primary text-on-primary rounded-lg">SEND</button>
+        <div x-show="webhookResult" class="mt-2 font-data-mono text-[11px] text-on-surface-variant/80 bg-black rounded p-2" x-text="webhookResult"></div>
+      </div>
+      <div class="bg-surface-container-lowest border border-outline-variant rounded-lg p-md">
+        <div class="flex items-center justify-between mb-2"><span class="font-label-caps text-[10px] text-on-surface-variant uppercase"><span class="text-tertiary">B</span> Download</span><span class="font-data-mono text-[10px] text-tertiary">manual</span></div>
+        <button @click="generateDownloadUrl(testProjectName)" class="font-status-sm text-[10px] py-sm px-md border border-outline-variant text-on-surface-variant rounded-lg">GENERATE</button>
+        <div x-show="downloadUrl" class="mt-2 font-data-mono text-[11px] text-primary break-all bg-black rounded p-2" x-text="downloadUrl"></div>
+      </div>
+      <div class="bg-surface-container-lowest border border-outline-variant rounded-lg p-md">
+        <div class="flex items-center justify-between mb-2"><span class="font-label-caps text-[10px] text-on-surface-variant uppercase"><span class="text-secondary">C</span> GitHub Actions</span><span class="font-data-mono text-[10px] text-secondary">ci/cd</span></div>
+        <div class="flex gap-2 mb-2">
+          <input x-model="ghaRepo" class="flex-1 bg-surface-container border border-outline-variant rounded px-sm py-1.5 font-data-mono text-[11px] focus:outline-none focus:border-primary" placeholder="owner/repo">
+          <input x-model="ghaWorkflow" class="w-24 bg-surface-container border border-outline-variant rounded px-sm py-1.5 font-data-mono text-[11px] focus:outline-none focus:border-primary" placeholder="main.yml">
+        </div>
+        <button @click="triggerGHA(testProjectName)" class="font-status-sm text-[10px] py-sm px-md bg-primary text-on-primary rounded-lg">TRIGGER</button>
+        <div x-show="ghaResult" class="mt-2 font-data-mono text-[11px] text-on-surface-variant/80 bg-black rounded p-2" x-text="ghaResult"></div>
+      </div>
+    </div>
+  </div>
 </div>
 
 <script>
-function app() {
-    return {
-        // screen routing
-        screen: 'onboarding',
-        navTargets: {
-            aade: {label: 'Workspace', icon: 'fas fa-cubes'},
-            settings: {label: 'Settings', icon: 'fas fa-cog'},
-        },
-
-        // session
-        sessionToken: '',
-        sessionUser: '',
-        activeProject: '',
-
-        // chat
-        chatInput: '', chatMessages: [], chatLoading: false,
-
-        // projects
-        newProjectName: '', newProjectRepo: '',
-        projects: {}, showAddProject: false,
-        expandedProject: null, projectLogs: {},
-        projectLoading: {},
-
-        // resources
-        credentials: {},
-        nvidiaKey: false, openrouterKey: false, geminiKey: false,
-
-        // resource builder modal
-        resourceModal: false, resourcePhase: 1,
-        resourceType: '', resourceName: '', resourceValue: '',
-        resourceRequiresAuth: true,
-        resourceClasses: {
-            databases: {label: 'Databases', icon: 'fas fa-database', desc: 'Postgres, MySQL, Snowflake'},
-            saas: {label: 'SaaS / Third-Party', icon: 'fas fa-cloud', desc: 'Google Sheets, Slack, Jira'},
-            ai: {label: 'AI Providers', icon: 'fas fa-brain', desc: 'Gemini, OpenAI, NVIDIA'},
-            custom_rest: {label: 'Custom REST API', icon: 'fas fa-plug', desc: 'HTTP methods & headers'},
-            custom_graphql: {label: 'GraphQL', icon: 'fas fa-project-diagram', desc: 'Queries & mutations'},
-            custom_ai: {label: 'Custom AI Provider', icon: 'fas fa-microchip', desc: 'OpenAI-compatible / Ollama'},
-            storage: {label: 'Altamira Storage', icon: 'fas fa-box', desc: 'Local key-value store'},
-        },
-
-        // status
-        status: 'starting...',
-        statusClass: 'bg-gray-800 text-gray-400',
-
-        // no ops (removed event log)
-        pushLog() {},
-
-        // ---- init ----
-        async init() {
-            // Check for existing persistent session
-            const storedToken = localStorage.getItem('altamira_session');
-            const storedUser = localStorage.getItem('altamira_user');
-            if (storedToken) {
-                try {
-                    const s = await this.api('/api/auth/session', {headers: {'Authorization': 'Bearer ' + storedToken}});
-                    this.sessionToken = storedToken;
-                    this.sessionUser = s.username || storedUser;
-                    this.screen = 'aade';
-                } catch {
-                    localStorage.removeItem('altamira_session');
-                    localStorage.removeItem('altamira_user');
-                }
-            }
-            this.checkHealth();
-            if (this.screen !== 'onboarding') {
-                this.loadProjects();
-                this.loadCredentials();
-            }
-        },
-
-        async api(path, opts = {}) {
-            const headers = {'Content-Type': 'application/json', ...opts.headers};
-            if (this.sessionToken && !path.startsWith('/api/auth/') && !path.startsWith('/api/gatekeeper/') && path !== '/health') {
-                headers['Authorization'] = 'Bearer ' + this.sessionToken;
-            }
-            const r = await fetch(path, {...opts, headers});
-            const data = await r.json();
-            if (!r.ok) throw new Error(data.detail || 'HTTP ' + r.status);
-            return data;
-        },
-
-        // ---- navigation ----
-        navigateTo(key) {
-            this.screen = key;
-            if (key === 'aade') { this.loadProjects(); }
-            if (key === 'settings') { this.loadCredentials(); }
-        },
-
-        // ---- OAuth login ----
-        async oauthLogin() {
-            try {
-                const d = await this.api('/api/auth/oauth/login');
-                if (d.configured && d.redirect) {
-                    window.location.href = d.redirect;
-                }
-            } catch(e) {
-            }
-        },
-
-        // ---- logout ----
-        async logout() {
-            try {
-                await this.api('/api/auth/logout', {method: 'POST'});
-            } catch {}
-            localStorage.removeItem('altamira_session');
-            localStorage.removeItem('altamira_user');
-            this.sessionToken = '';
-            this.sessionUser = '';
-            this.screen = 'onboarding';
-        },
-
-        // ---- health ----
-        async checkHealth() {
-            try {
-                const d = await this.api('/health');
-                this.status = 'RUNNING';
-                this.statusClass = 'bg-green-900/50 text-green-300';
-            } catch {
-                this.status = 'error';
-                this.statusClass = 'bg-red-900/50 text-red-300';
-            }
-        },
-
-        // ---- chat ----
-        async sendChat() {
-            const text = this.chatInput.trim();
-            if (!text || this.chatLoading) return;
-            this.chatInput = '';
-            this.chatMessages.push({role: 'user', content: text});
-            this.chatLoading = true;
-            this.scrollChat();
-            try {
-                const d = await this.api('/api/agent/submit', {method: 'POST', body: JSON.stringify({prompt: text, project: this.activeProject || 'default'})});
-                const dagId = d.dag_id;
-                this.chatMessages.push({role: 'system', content: 'Planning tasks...'});
-                // Poll until tasks complete
-                let done = false;
-                let attempts = 0;
-                while (!done && attempts < 60) {
-                    await new Promise(r => setTimeout(r, 1000));
-                    await this.api('/api/agent/cycle', {method: 'POST'});
-                    const status = await this.api('/api/agent/status');
-                    const s = status.tasks || {};
-                    const pending = s.pending || 0;
-                    const running = s.running || 0;
-                    const reviewing = s.reviewing || 0;
-                    if (running > 0 || reviewing > 0) {
-                        this.chatMessages[this.chatMessages.length - 1] = {role: 'system', content: 'Working... (' + running + ' running, ' + reviewing + ' reviewing)'};
-                    }
-                    if (pending === 0 && running === 0 && reviewing === 0) {
-                        done = true;
-                    }
-                    attempts++;
-                    this.scrollChat();
-                }
-                // Fetch results
-                const tasks = await this.api('/api/agent/tasks', {method: 'GET'});
-                const taskList = tasks.tasks || [];
-                const results = taskList.filter(t => t.dag_id === dagId && t.output);
-                for (const t of results) {
-                    this.chatMessages.push({role: 'output', content: t.output || '(no output)'});
-                    if (t.error) this.chatMessages.push({role: 'error', content: t.error});
-                }
-                this.chatMessages.push({role: 'agent', content: 'Done. ' + results.length + ' tasks completed.'});
-            } catch(e) {
-                this.chatMessages.push({role: 'error', content: e.message});
-            }
-            this.chatLoading = false;
-            this.scrollChat();
-        },
-        scrollChat() {
-            this.$nextTick(() => { const el = this.$refs.chatBox; if (el) el.scrollTop = el.scrollHeight; });
-        },
-
-        // ---- projects ----
-        async loadProjects() {
-            try { this.projects = await this.api('/api/projects'); } catch {}
-        },
-        async createProject() {
-            if (!this.newProjectName) return;
-            try {
-                await this.api('/api/projects', {method: 'POST', body: JSON.stringify({name: this.newProjectName, repo_url: this.newProjectRepo})});
-                this.newProjectName = ''; this.newProjectRepo = '';
-                await this.loadProjects();
-            } catch(e) {}
-        },
-        async activateProject(name) {
-            this.projectLoading[name + '-activate'] = true;
-            try {
-                await this.api('/api/projects/' + name + '/activate', {method: 'POST'});
-                await this.loadProjects();
-                this.activeProject = name;
-            } catch(e) {} finally { this.projectLoading[name + '-activate'] = false; }
-        },
-        async gitSyncProject(name) {
-            this.projectLoading[name + '-sync'] = true;
-            try { await this.api('/api/projects/' + name + '/git-sync', {method: 'POST'}); } catch(e) {} finally { this.projectLoading[name + '-sync'] = false; }
-        },
-        toggleProjectLogs(name) {
-            this.expandedProject = this.expandedProject === name ? null : name;
-            if (!this.projectLogs[name]) {
-                this.projectLogs[name] = ['[' + new Date().toLocaleTimeString() + '] connected', '[' + new Date().toLocaleTimeString() + '] workspace: /tmp/altamira-workspace/' + name];
-            }
-        },
-        openTestLink(name) {
-            const proj = this.projects[name];
-            if (proj && proj.repo_url) window.open(proj.repo_url, '_blank');
-        },
-
-        // ---- resources ----
-        async loadCredentials() {
-            try {
-                const d = await this.api('/api/resources');
-                this.credentials = d.credentials || {};
-                this.nvidiaKey = !!(d.credentials || {}).NVIDIA_NIM_API_KEY;
-                this.openrouterKey = !!(d.credentials || {}).OPENROUTER_API_KEY;
-                this.geminiKey = !!(d.credentials || {}).GEMINI_API_KEY;
-            } catch {}
-        },
-
-        // ---- resource builder modal ----
-        openResourceBuilder() {
-            this.resourceModal = true;
-            this.resourcePhase = 1;
-            this.resourceType = '';
-            this.resourceName = '';
-            this.resourceValue = '';
-            this.resourceAuth = 'manual';
-            this.resourceScope = 'core';
-            this.resourceProjects = [];
-        },
-        openResourceEditor(key) {
-            this.resourceModal = true;
-            this.resourcePhase = 2;
-            this.resourceType = key;
-            this.resourceName = key;
-            this.resourceValue = this.credentials[key]?.value || '';
-            this.resourceRequiresAuth = true;
-        },
-        selectResourceClass(key) {
-            this.resourceType = key;
-            this.resourcePhase = 2;
-            this.resourceRequiresAuth = key !== 'storage';
-            this.resourceName = key === 'databases' ? 'my-db' : key === 'ai' ? 'my-ai-key' : key === 'saas' ? 'my-saas' : 'my-resource';
-        },
-        async saveResource() {
-            if (!this.resourceName || !this.resourceValue) return;
-            try {
-                await this.api('/api/resources/' + this.resourceName, {method: 'PUT', body: JSON.stringify({value: this.resourceValue, description: this.resourceType})});
-                this.resourceModal = false;
-                await this.loadCredentials();
-            } catch(e) {}
-        },
-    };
+function app(){
+  return {
+    screen:'onboarding',navTargets:{aade:{label:'Workspace',icon:'fas fa-cubes'},settings:{label:'Settings',icon:'fas fa-cog'}},
+    navItems:{aade:{label:'Command',icon:'terminal',badge:'LIVE'},settings:{label:'Settings',icon:'settings'}},
+    settingsTab:'resources',
+    sessionToken:'',sessionUser:'',activeProject:'',
+    chatInput:'',chatMessages:[],chatLoading:false,
+    newProjectName:'',newProjectRepo:'',projects:{},showAddProject:false,
+    projectLoading:{},selectedProject:null,throttleLayer:1,
+    credentials:{},nvidiaKey:false,openrouterKey:false,geminiKey:false,
+    pingResults:{},resourceModal:false,resourcePhase:1,
+    resourceType:'',resourceName:'',resourceValue:'',resourceRequiresAuth:true,
+    resourceScope:'core',resourceShareable:false,resourceProjects:[],
+    resourceClasses:{
+      databases:{label:'Databases',icon:'database',desc:'Postgres,MySQL,Snowflake'},
+      saas:{label:'SaaS / APIs',icon:'cloud',desc:'Slack,Jira,Google'},
+      ai:{label:'AI Providers',icon:'psychology',desc:'OpenAI,Gemini,NVIDIA'},
+      hf:{label:'Hugging Face',icon:'face',desc:'Token,Spaces'},
+      github:{label:'GitHub',icon:'code',desc:'PAT, Actions'},
+      custom:{label:'Custom REST',icon:'api',desc:'HTTP endpoints'},
+      custom_ai:{label:'Custom AI',icon:'memory',desc:'Ollama, vLLM'},
+      storage:{label:'Altamira KV',icon:'inventory',desc:'Key-value store'},
+    },
+    sandboxStatus:{},sandboxFiles:[],
+    projectDetailModal:false,detailProjectName:'',detailProject:null,
+    resourceBindingModal:false,bindProjectName:'',projectBoundKeys:{},
+    externalTestingModal:false,testProjectName:'',
+    webhookUrl:'',webhookResult:'',downloadUrl:'',
+    ghaRepo:'',ghaWorkflow:'main.yml',ghaResult:'',
+    runtimeLogs:[],logTimer:null,
+
+    get runningCount(){return Object.values(this.projects).filter(p=>p.active).length},
+    get errorCount(){return 0},
+
+    init(){
+      const t=localStorage.getItem('altamira_session'),u=localStorage.getItem('altamira_user');
+      if(t) try{const s=await this.api('/api/auth/session',{headers:{'Authorization':'Bearer '+t}});this.sessionToken=t;this.sessionUser=s.username||u;this.screen='aade'}catch{localStorage.removeItem('altamira_session');localStorage.removeItem('altamira_user')}
+      if(this.screen!=='onboarding'){this.loadProjects();this.loadCredentials();this.startLogSimulator()}
+    },
+
+    async api(path,opts={}){
+      const h={'Content-Type':'application/json',...opts.headers};
+      if(this.sessionToken&&!path.startsWith('/api/auth/')&&!path.startsWith('/api/gatekeeper/')&&path!=='/health')h['Authorization']='Bearer '+this.sessionToken;
+      const r=await fetch(path,{...opts,headers:h});const d=await r.json();if(!r.ok)throw new Error(d.detail||'HTTP '+r.status);return d
+    },
+
+    navigateTo(k){this.screen=k;if(k==='aade'){this.loadProjects();this.startLogSimulator()}if(k==='settings'){this.loadCredentials();if(this.logTimer)clearInterval(this.logTimer)}},
+    async oauthLogin(){try{const d=await this.api('/api/auth/oauth/login');if(d.configured&&d.redirect)window.location.href=d.redirect}catch{}},
+    async logout(){try{await this.api('/api/auth/logout',{method:'POST'})}catch{}localStorage.removeItem('altamira_session');localStorage.removeItem('altamira_user');this.sessionToken='';this.sessionUser='';this.screen='onboarding';if(this.logTimer)clearInterval(this.logTimer)},
+
+    selectProject(n){this.selectedProject=this.selectedProject===n?null:n;if(this.selectedProject){this.activeProject=n;this.loadSandboxStatus(n)}this.addLog('info',`Selected project: ${n}`)},
+
+    projectStatusClass(p){return p.active?'bg-primary/20 text-primary border border-primary/30':'bg-on-surface-variant/20 text-on-surface-variant border border-on-surface-variant/30'},
+
+    addLog(level,msg){
+      const now=new Date();const t=`${now.getHours().toString().padStart(2,'0')}:${now.getMinutes().toString().padStart(2,'0')}:${now.getSeconds().toString().padStart(2,'0')}`;
+      const colors={info:'text-primary/70',stdout:'text-on-surface/70',stderr:'text-error/70',debug:'text-on-surface/40'};
+      const labels={info:'INFO',stdout:'STDOUT',stderr:'STDERR',debug:'DEBUG'};
+      this.runtimeLogs.push({text:`[${t}] ${labels[level]||'INFO'}: ${msg}`,color:colors[level]||colors.info});this.$nextTick(()=>{const el=this.$refs.logBox;if(el)el.scrollTop=el.scrollHeight});if(this.runtimeLogs.length>100)this.runtimeLogs=this.runtimeLogs.slice(-100)
+    },
+
+    clearLogs(){this.runtimeLogs=[];this.addLog('info','Runtime stream cleared')},
+
+    startLogSimulator(){
+      if(this.logTimer)clearInterval(this.logTimer);
+      this.addLog('info','Runtime sequence initiated');
+      const msgs=['Pulse verified for instance 0x44A1.','Re-synching telemetry data with orbital node.','Garbage collection completed: freed 45MB.','Worker process PID spawned successfully.','Connection request accepted.','Buffer allocation stable.','Cache hit ratio: 94.2%.','Memory controller report: nominal.'];
+      this.logTimer=setInterval(()=>{
+        if(this.screen!=='aade')return;
+        const levels=['info','info','info','stdout','stdout','debug'];const lev=levels[Math.floor(Math.random()*levels.length)];
+        this.addLog(lev,msgs[Math.floor(Math.random()*msgs.length)])
+      },4000)
+    },
+
+    // CHAT
+    async sendChat(){
+      const t=this.chatInput.trim();if(!t||this.chatLoading)return;
+      this.chatInput='';this.chatMessages.push({role:'user',content:t,time:new Date().toLocaleTimeString()});this.chatLoading=true;this.scrollChat();this.addLog('stdout','Command submitted: '+t.slice(0,60));
+      try{
+        const d=await this.api('/api/agent/submit',{method:'POST',body:JSON.stringify({prompt:t,project:this.activeProject||'default'})});
+        const dagId=d.dag_id;this.chatMessages.push({role:'system',content:'Planning tasks...'});let done=false,att=0;
+        while(!done&&att<60){await new Promise(r=>setTimeout(r,1000));await this.api('/api/agent/cycle',{method:'POST'});
+          const s=await this.api('/api/agent/status'),st=s.tasks||{},p=st.pending||0,rn=st.running||0,rv=st.reviewing||0;
+          if(rn>0||rv>0)this.chatMessages[this.chatMessages.length-1]={role:'system',content:`Working... (${rn} running, ${rv} reviewing)`};
+          if(!p&&!rn&&!rv)done=true;att++;this.scrollChat()}
+        const tasks=await this.api('/api/agent/tasks'),list=tasks.tasks||[],results=list.filter(t=>t.dag_id===dagId&&t.output);
+        for(const r of results){this.chatMessages.push({role:'output',content:r.output||'(no output)'});if(r.error)this.chatMessages.push({role:'error',content:r.error})}
+        this.chatMessages.push({role:'agent',content:`Done. ${results.length} tasks completed.`,time:new Date().toLocaleTimeString()});
+        this.addLog('info',`Task DAG ${dagId} completed: ${results.length} tasks`);
+        try{await this.api('/api/monitor/manifest/'+(this.activeProject||'default'),{method:'POST',body:JSON.stringify({status:'completed',version:dagId,message:results.length+' tasks'})})}catch{}
+      }catch(e){this.chatMessages.push({role:'error',content:e.message});this.addLog('stderr',e.message)}
+      this.chatLoading=false;this.scrollChat()
+    },
+    scrollChat(){this.$nextTick(()=>{const el=this.$refs.chatBox;if(el)el.scrollTop=el.scrollHeight})},
+    clearChat(){this.chatMessages=[];this.addLog('info','Chat history cleared')},
+
+    // PROJECTS
+    async loadProjects(){try{this.projects=await this.api('/api/projects');this.addLog('info','Loaded '+Object.keys(this.projects).length+' projects')}catch{}},
+    async createProject(){if(!this.newProjectName)return;try{await this.api('/api/projects',{method:'POST',body:JSON.stringify({name:this.newProjectName,repo_url:this.newProjectRepo})});this.newProjectName='';this.newProjectRepo='';await this.loadProjects();this.addLog('info','Project created')}catch(e){this.addLog('stderr','Create failed: '+e.message)}},
+    async activateProject(n){this.projectLoading[n+'-act']=true;try{await this.api('/api/projects/'+n+'/activate',{method:'POST'});await this.loadProjects();this.activeProject=n;this.addLog('info','Activated: '+n)}catch(e){this.addLog('stderr','Activate failed: '+e.message)}finally{this.projectLoading[n+'-act']=false}},
+    async gitSyncProject(n){this.projectLoading[n+'-sync']=true;try{await this.api('/api/projects/'+n+'/git-sync',{method:'POST'});this.addLog('info','Git sync: '+n)}catch(e){this.addLog('stderr','Sync failed: '+e.message)}finally{this.projectLoading[n+'-sync']=false}},
+
+    // RESOURCES
+    async loadCredentials(){try{const d=await this.api('/api/resources');this.credentials=d.credentials||{};this.nvidiaKey=!!(d.credentials||{}).NVIDIA_NIM_API_KEY;this.openrouterKey=!!(d.credentials||{}).OPENROUTER_API_KEY;this.geminiKey=!!(d.credentials||{}).GEMINI_API_KEY}catch{}},
+    async pingResource(k){try{const d=await this.api('/api/resources/'+k+'/ping',{method:'POST'});this.pingResults[k]=d.ping?.status||'error';this.addLog('info',`Ping ${k}: ${d.ping?.status}`)}catch{this.pingResults[k]='error'}},
+    async deleteResource(k){try{await this.api('/api/resources/'+k,{method:'DELETE'});await this.loadCredentials();this.addLog('info','Deleted resource: '+k)}catch{}},
+
+    openResourceBuilder(){this.resourceModal=true;this.resourcePhase=1;this.resourceType='';this.resourceName='';this.resourceValue='';this.resourceScope='core';this.resourceShareable=false;this.resourceProjects=[]},
+    openResourceEditor(k){this.resourceModal=true;this.resourcePhase=2;this.resourceType=k;this.resourceName=k;this.resourceValue=this.credentials[k]?.value||'';this.resourceRequiresAuth=true},
+    selectResourceClass(k){this.resourceType=k;this.resourcePhase=2;this.resourceRequiresAuth=k!=='storage';const m={databases:'DB_KEY',ai:'AI_API_KEY',saas:'SAAS_KEY',hf:'HF_TOKEN',github:'GITHUB_TOKEN',custom:'MY_API_KEY',custom_ai:'CUSTOM_AI_KEY',storage:'my-store'};this.resourceName=m[k]||'MY_KEY'},
+    async saveResource(){if(!this.resourceName||!this.resourceValue)return;try{const d=await this.api('/api/resources/'+this.resourceName,{method:'PUT',body:JSON.stringify({value:this.resourceValue,description:this.resourceType,scope:this.resourceScope,shareable:this.resourceShareable,projects:this.resourceProjects})});this.pingResults[this.resourceName]=d.ping?.status||'unknown';this.resourceModal=false;await this.loadCredentials();this.addLog('info','Resource saved: '+this.resourceName)}catch(e){this.addLog('stderr','Save failed: '+e.message)}},
+
+    openProjectDetail(n){this.detailProjectName=n;this.detailProject=this.projects[n]||null;this.sandboxFiles=[];this.projectDetailModal=true;this.viewSandboxFiles(n)},
+
+    // SANDBOX
+    async loadSandboxStatus(n){try{const d=await this.api('/api/sandboxes'),hf=d.hf_spaces||{};Object.assign(this.sandboxStatus,Object.fromEntries(Object.entries(hf).filter(([k])=>k===n).map(([k,v])=>[k,v])))}catch{}},
+    async createSandbox(n){try{const d=await this.api('/api/sandboxes/create',{method:'POST',body:JSON.stringify({project:n})});this.sandboxStatus[n]=d;this.chatMessages.push({role:'manifest',content:'Sandbox created: '+(d.url||n)});this.addLog('info','Sandbox created for: '+n)}catch(e){this.chatMessages.push({role:'error',content:'Sandbox creation failed: '+e.message});this.addLog('stderr','Sandbox failed: '+e.message)}},
+    async viewSandboxFiles(n){try{const d=await this.api('/api/sandboxes/'+n+'/files');this.sandboxFiles=d.files||[]}catch{this.sandboxFiles=[]}},
+    async viewSandboxFileContent(p,fp){try{const d=await this.api('/api/sandboxes/'+p+'/read',{method:'POST',body:JSON.stringify({path:fp})});this.chatMessages.push({role:'output',content:'=== '+fp+' ===\n'+(d.content||'(empty)')});this.scrollChat()}catch(e){this.chatMessages.push({role:'error',content:'Read failed: '+e.message})}},
+
+    // RESOURCE BINDING
+    async openResourceBinding(n){this.bindProjectName=n;this.projectBoundKeys={};this.resourceBindingModal=true;await this.loadCredentials();try{const d=await this.api('/api/resources/projects'),bs=d[n]||{};this.projectBoundKeys=Object.fromEntries(Object.keys(bs).map(k=>[k,true]))}catch{}},
+    async bindResource(p,k){try{await this.api('/api/resources/bind/'+p,{method:'POST',body:JSON.stringify({key:k,value:this.credentials[k]?.value||''})});this.projectBoundKeys[k]=true;this.addLog('info','Bound '+k+' to '+p)}catch{}},
+    async unbindResource(p,k){try{await this.api('/api/resources/unbind/'+p,{method:'POST',body:JSON.stringify({key:k})});delete this.projectBoundKeys[k];this.addLog('info','Unbound '+k+' from '+p)}catch{}},
+
+    // EXTERNAL TESTING
+    openExternalTesting(n){this.testProjectName=n;this.webhookUrl='';this.webhookResult='';this.downloadUrl='';this.ghaResult='';this.externalTestingModal=true},
+    async triggerWebhook(p){if(!this.webhookUrl)return;try{const d=await this.api('/api/test/webhook/'+p,{method:'POST',body:JSON.stringify({url:this.webhookUrl,payload:{project:p,timestamp:Date.now()}})});this.webhookResult='Status: '+d.status;this.addLog('info','Webhook test: '+d.status)}catch(e){this.webhookResult='Error: '+e.message;this.addLog('stderr','Webhook error: '+e.message)}},
+    async generateDownloadUrl(p){try{const d=await this.api('/api/test/download-url/'+p);this.downloadUrl=d.files.length?window.location.origin+d.download_url+d.files[0]:'No artifacts';this.addLog('info','Download URL generated')}catch(e){this.downloadUrl='Error: '+e.message}},
+    async triggerGHA(p){if(!this.ghaRepo)return;try{const d=await this.api('/api/test/github-actions/'+p,{method:'POST',body:JSON.stringify({repo:this.ghaRepo,workflow:this.ghaWorkflow})});this.ghaResult='Triggered: '+d.status;this.addLog('info','GHA trigger: '+d.status)}catch(e){this.ghaResult='Error: '+e.message;this.addLog('stderr','GHA error: '+e.message)}},
+  }
 }
 </script>
 </body>
-</html>
+</html>

test_integration.py

@@ -0,0 +1,299 @@
+"""Integration tests using FastAPI TestClient."""
+import pytest
+import os, json, time
+from pathlib import Path
+from fastapi.testclient import TestClient
+
+os.environ["HF_TOKEN"] = ""
+os.environ["OAUTH_CLIENT_ID"] = ""
+os.environ["OAUTH_CLIENT_SECRET"] = ""
+
+from app import app, session_store, STATE_DIR
+
+client = TestClient(app)
+
+for f in STATE_DIR.glob("*"):
+    if f.is_file():
+        f.unlink()
+
+def auth():
+    token = session_store.create("tester", "tester")
+    return {"Authorization": f"Bearer {token}"}
+
+
+class TestPublicEndpoints:
+    def test_health(self):
+        r = client.get("/health")
+        assert r.status_code == 200
+        data = r.json()
+        assert data["status"] == "healthy"
+        assert data["app"] == "altamira-aade"
+
+    def test_gatekeeper_check(self):
+        r = client.post("/api/gatekeeper/check")
+        assert r.status_code == 200
+        assert r.json()["hf_authenticated"] == False
+
+    def test_index_html(self):
+        r = client.get("/")
+        assert r.status_code == 200
+        assert "text/html" in r.headers["content-type"]
+
+
+class TestAuthEndpoints:
+    def test_oauth_login_not_configured(self):
+        r = client.get("/api/auth/oauth/login")
+        assert r.status_code == 200
+        assert r.json()["configured"] == False
+
+    def test_login_requires_token(self):
+        r = client.post("/api/auth/login", json={})
+        assert r.status_code == 400
+
+    def test_login_invalid_token(self):
+        r = client.post("/api/auth/login", json={"hf_token": "bad_token"})
+        assert r.status_code == 401
+
+    def test_unauthorized_access(self):
+        r = client.get("/api/projects")
+        assert r.status_code == 401
+
+    def test_authorized_access(self):
+        r = client.get("/api/projects", headers=auth())
+        assert r.status_code == 200
+
+    def test_logout(self):
+        h = auth()
+        r = client.post("/api/auth/logout", headers=h)
+        assert r.status_code == 200
+        assert r.json()["status"] == "logged_out"
+
+    def test_session_invalid_after_logout(self):
+        h = auth()
+        client.post("/api/auth/logout", headers=h)
+        r = client.get("/api/projects", headers=h)
+        assert r.status_code == 401
+
+
+class TestProjectCRUD:
+    def test_create_project(self):
+        r = client.post("/api/projects", headers=auth(), json={"name": "test-project"})
+        assert r.status_code == 200
+        assert r.json()["name"] == "test-project"
+
+    def test_create_duplicate(self):
+        r = client.post("/api/projects", headers=auth(), json={"name": "test-project"})
+        assert r.status_code == 409
+
+    def test_list_projects(self):
+        r = client.get("/api/projects", headers=auth())
+        assert r.status_code == 200
+        assert "test-project" in r.json()
+
+    def test_delete_project(self):
+        r = client.delete("/api/projects/test-project", headers=auth())
+        assert r.status_code == 200
+        assert r.json()["deleted"] == "test-project"
+
+    def test_list_after_delete(self):
+        r = client.get("/api/projects", headers=auth())
+        assert r.status_code == 200
+        assert "test-project" not in r.json()
+
+
+class TestResourceEndpoints:
+    def test_save_resource(self):
+        r = client.put("/api/resources/MY_CUSTOM_KEY", headers=auth(), json={
+            "value": "test-value-123", "scope": "core", "description": "Test key"
+        })
+        assert r.status_code == 200
+        assert r.json()["saved"] == "MY_CUSTOM_KEY"
+        assert r.json()["ping"]["status"] == "skipped"
+
+    def test_list_resources(self):
+        r = client.get("/api/resources", headers=auth())
+        assert r.status_code == 200
+        creds = r.json()["credentials"]
+        assert "MY_CUSTOM_KEY" in creds
+
+    def test_ping_resource(self):
+        r = client.post("/api/resources/MY_CUSTOM_KEY/ping", headers=auth())
+        assert r.status_code == 200
+        assert r.json()["key"] == "MY_CUSTOM_KEY"
+
+    def test_ping_unknown(self):
+        r = client.post("/api/resources/NONEXISTENT/ping", headers=auth())
+        assert r.status_code == 404
+
+    def test_project_binding(self):
+        r = client.post("/api/resources/bind/testproj2", headers=auth(), json={
+            "key": "MY_KEY", "value": "my_value"
+        })
+        assert r.status_code == 200
+        assert r.json()["bound"] == "MY_KEY"
+
+    def test_project_unbinding(self):
+        r = client.post("/api/resources/unbind/testproj2", headers=auth(), json={
+            "key": "MY_KEY"
+        })
+        assert r.status_code == 200
+        assert r.json()["unbound"] == "MY_KEY"
+
+    def test_list_project_bindings(self):
+        r = client.get("/api/resources/projects", headers=auth())
+        assert r.status_code == 200
+
+    def test_delete_resource(self):
+        r = client.delete("/api/resources/MY_CUSTOM_KEY", headers=auth())
+        assert r.status_code == 200
+        assert r.json()["deleted"] == "MY_CUSTOM_KEY"
+
+
+class TestMonitorEndpoints:
+    def test_get_manifest(self):
+        r = client.get("/api/monitor/manifest", headers=auth())
+        assert r.status_code == 200
+
+    def test_update_manifest(self):
+        r = client.post("/api/monitor/manifest/myproject", headers=auth(), json={
+            "status": "running", "version": "1.0", "message": "All good"
+        })
+        assert r.status_code == 200
+        assert r.json()["saved"] == "myproject"
+
+    def test_heartbeat(self):
+        r = client.post("/api/monitor/heartbeat/myproject", headers=auth(), json={
+            "status": "running"
+        })
+        assert r.status_code == 200
+        assert "pong" in r.json()
+
+    def test_monitor_summary(self):
+        r = client.get("/api/monitor/summary", headers=auth())
+        assert r.status_code == 200
+        assert "myproject" in r.json()["projects"]
+
+    def test_throttle_status(self):
+        r = client.get("/api/monitor/throttle", headers=auth())
+        assert r.status_code == 200
+        assert "multi_layer" in r.json()
+
+
+class TestAgentEndpoints:
+    def test_agent_status(self):
+        r = client.get("/api/agent/status", headers=auth())
+        assert r.status_code == 200
+        assert "key_pool" in r.json()
+
+    def test_agent_tasks(self):
+        r = client.get("/api/agent/tasks", headers=auth())
+        assert r.status_code == 200
+        assert "tasks" in r.json()
+
+    def test_submit_task_no_prompt(self):
+        r = client.post("/api/agent/submit", headers=auth(), json={})
+        assert r.status_code == 400
+
+    def test_submit_task(self):
+        r = client.post("/api/agent/submit", headers=auth(), json={
+            "prompt": "Write hello world in Python"
+        })
+        assert r.status_code == 200
+        assert "dag_id" in r.json()
+        assert r.json()["status"] == "submitted"
+
+
+class TestSystemEndpoint:
+    def test_system_info(self):
+        r = client.get("/api/system", headers=auth())
+        assert r.status_code == 200
+        data = r.json()
+        assert "platform" in data
+        assert "python" in data
+        assert "mode" in data
+        assert data["mode"] == "AADE"
+
+    def test_router_status(self):
+        r = client.get("/api/router", headers=auth())
+        assert r.status_code == 200
+        assert "circuit_breaker" in r.json()
+
+
+class TestSandboxEndpoints:
+    def test_list_sandboxes(self):
+        r = client.get("/api/sandboxes", headers=auth())
+        assert r.status_code == 200
+        assert "local" in r.json()
+        assert "hf_spaces" in r.json()
+
+
+class TestExternalTestingEndpoints:
+    def test_artifact_upload(self):
+        import base64
+        data = base64.b64encode(b"hello world").decode()
+        r = client.post("/api/test/artifact/myproj", headers=auth(), json={
+            "filename": "test.txt", "data": data
+        })
+        assert r.status_code == 200
+        assert r.json()["size"] == 11
+
+    def test_download_url(self):
+        r = client.get("/api/test/download-url/myproj", headers=auth())
+        assert r.status_code == 200
+        assert "files" in r.json()
+
+    def test_artifact_download(self):
+        r = client.get("/api/test/artifact/myproj/test.txt", headers=auth())
+        assert r.status_code == 200
+        assert r.json()["filename"] == "test.txt"
+
+    def test_webhook_no_url(self):
+        r = client.post("/api/test/webhook/myproj", headers=auth(), json={})
+        assert r.status_code == 400
+
+    def test_github_actions_no_token(self):
+        r = client.post("/api/test/github-actions/myproj", headers=auth(), json={
+            "repo": "testuser/testrepo"
+        })
+        assert r.status_code == 400
+
+
+class TestConsoleEndpoints:
+    def test_console_exec(self):
+        r = client.post("/api/console/exec", headers=auth(), json={
+            "command": "echo hello", "timeout": 5
+        })
+        assert r.status_code == 200
+        assert "hello" in r.json()["stdout"]
+
+
+class TestStateEndpoints:
+    def test_get_state(self):
+        r = client.get("/api/state", headers=auth())
+        assert r.status_code == 200
+        assert "state" in r.json()
+
+    def test_sync_state(self):
+        r = client.post("/api/state/sync", headers=auth())
+        assert r.status_code == 200
+        assert r.json()["status"] == "synced"
+
+    def test_encrypt_decrypt(self):
+        r = client.post("/api/state/encrypt", headers=auth(), json={"data": {"secret": "value"}})
+        assert r.status_code == 200
+        encrypted = r.json()["encrypted"]
+        r2 = client.post("/api/state/decrypt", headers=auth(), json={"token": encrypted})
+        assert r2.status_code == 200
+        assert r2.json()["data"]["secret"] == "value"
+
+
+class TestCircuitBreaker:
+    def test_reset_circuit(self):
+        r = client.post("/api/router/circuit/reset", headers=auth())
+        assert r.status_code == 200
+        assert r.json()["status"] == "reset"
+
+    def test_filter_context(self):
+        r = client.post("/api/router/filter", headers=auth(), json={"text": "a" * 1000})
+        assert r.status_code == 200
+        assert r.json()["original_length"] == 1000